0x90 [ 466.710628][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.716928][T15361] [ 466.719246][T15361] Uninit was stored to memory at: [ 466.724267][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 466.729995][T15361] __msan_chain_origin+0x50/0x90 [ 466.734942][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 466.740050][T15361] get_compat_msghdr+0x108/0x2b0 [ 466.744982][T15361] do_recvmmsg+0xdba/0x22c0 [ 466.749480][T15361] __sys_recvmmsg+0x5dd/0x610 [ 466.754143][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.760192][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.766339][T15361] __do_fast_syscall_32+0x2af/0x480 [ 466.771519][T15361] do_fast_syscall_32+0x6b/0xd0 [ 466.776366][T15361] do_SYSENTER_32+0x73/0x90 [ 466.780851][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.787167][T15361] [ 466.789472][T15361] Uninit was stored to memory at: [ 466.794496][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 466.800195][T15361] __msan_chain_origin+0x50/0x90 [ 466.805132][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 466.810256][T15361] get_compat_msghdr+0x108/0x2b0 [ 466.815175][T15361] do_recvmmsg+0xdba/0x22c0 [ 466.819662][T15361] __sys_recvmmsg+0x5dd/0x610 [ 466.824337][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.830402][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.836553][T15361] __do_fast_syscall_32+0x2af/0x480 [ 466.841749][T15361] do_fast_syscall_32+0x6b/0xd0 [ 466.846616][T15361] do_SYSENTER_32+0x73/0x90 [ 466.851116][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.857442][T15361] [ 466.859764][T15361] Uninit was stored to memory at: [ 466.864784][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 466.870515][T15361] __msan_chain_origin+0x50/0x90 [ 466.875451][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 466.880545][T15361] get_compat_msghdr+0x108/0x2b0 [ 466.885463][T15361] do_recvmmsg+0xdba/0x22c0 [ 466.889965][T15361] __sys_recvmmsg+0x5dd/0x610 [ 466.894626][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.900672][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.906809][T15361] __do_fast_syscall_32+0x2af/0x480 [ 466.912035][T15361] do_fast_syscall_32+0x6b/0xd0 [ 466.916868][T15361] do_SYSENTER_32+0x73/0x90 [ 466.921356][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.927654][T15361] [ 466.929976][T15361] Uninit was stored to memory at: [ 466.935071][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 466.940786][T15361] __msan_chain_origin+0x50/0x90 [ 466.945727][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 466.950837][T15361] get_compat_msghdr+0x108/0x2b0 [ 466.955755][T15361] do_recvmmsg+0xdba/0x22c0 [ 466.960242][T15361] __sys_recvmmsg+0x5dd/0x610 [ 466.964913][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.970977][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.977114][T15361] __do_fast_syscall_32+0x2af/0x480 [ 466.982292][T15361] do_fast_syscall_32+0x6b/0xd0 [ 466.987127][T15361] do_SYSENTER_32+0x73/0x90 [ 466.991612][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.997911][T15361] [ 467.000241][T15361] Uninit was stored to memory at: [ 467.005266][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 467.010993][T15361] __msan_chain_origin+0x50/0x90 [ 467.015933][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 467.021025][T15361] get_compat_msghdr+0x108/0x2b0 [ 467.025944][T15361] do_recvmmsg+0xdba/0x22c0 [ 467.030428][T15361] __sys_recvmmsg+0x5dd/0x610 [ 467.035090][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.041227][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.047378][T15361] __do_fast_syscall_32+0x2af/0x480 [ 467.052574][T15361] do_fast_syscall_32+0x6b/0xd0 [ 467.057435][T15361] do_SYSENTER_32+0x73/0x90 [ 467.061949][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.068266][T15361] [ 467.070575][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 467.077234][T15361] do_recvmmsg+0xc2/0x22c0 [ 467.081629][T15361] do_recvmmsg+0xc2/0x22c0 [ 467.295852][T15361] not chained 670000 origins [ 467.300475][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 467.309150][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.319208][T15361] Call Trace: [ 467.322516][T15361] dump_stack+0x21c/0x280 [ 467.326875][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 467.332622][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 467.337761][T15361] ? kmsan_get_metadata+0x116/0x180 [ 467.342979][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 467.348824][T15361] ? kmsan_get_metadata+0x116/0x180 [ 467.354042][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 467.359864][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 467.365944][T15361] ? kmsan_get_metadata+0x116/0x180 [ 467.371163][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 467.376732][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 467.382828][T15361] ? _copy_from_user+0x221/0x330 [ 467.387785][T15361] ? kmsan_get_metadata+0x116/0x180 [ 467.393018][T15361] __msan_chain_origin+0x50/0x90 [ 467.397997][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 467.403156][T15361] get_compat_msghdr+0x108/0x2b0 [ 467.408125][T15361] do_recvmmsg+0xdba/0x22c0 [ 467.412655][T15361] ? __msan_get_context_state+0x9/0x20 [ 467.418141][T15361] ? kmsan_get_metadata+0x116/0x180 [ 467.423366][T15361] ? kmsan_get_metadata+0x116/0x180 [ 467.428591][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 467.434682][T15361] ? kmsan_get_metadata+0x116/0x180 [ 467.439911][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 467.445220][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 467.449997][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 467.454782][T15361] __sys_recvmmsg+0x5dd/0x610 [ 467.459476][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.465545][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.471687][T15361] __do_fast_syscall_32+0x2af/0x480 [ 467.476881][T15361] do_fast_syscall_32+0x6b/0xd0 [ 467.481718][T15361] do_SYSENTER_32+0x73/0x90 [ 467.486235][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.492554][T15361] RIP: 0023:0xf7f87549 [ 467.496643][T15361] Code: Bad RIP value. [ 467.500805][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 467.509636][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 467.517610][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.525585][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.533541][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 467.541492][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.549469][T15361] Uninit was stored to memory at: [ 467.554479][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 467.560181][T15361] __msan_chain_origin+0x50/0x90 [ 467.565205][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 467.570384][T15361] get_compat_msghdr+0x108/0x2b0 [ 467.575305][T15361] do_recvmmsg+0xdba/0x22c0 [ 467.579790][T15361] __sys_recvmmsg+0x5dd/0x610 [ 467.584450][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.590513][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.596670][T15361] __do_fast_syscall_32+0x2af/0x480 [ 467.601850][T15361] do_fast_syscall_32+0x6b/0xd0 [ 467.606694][T15361] do_SYSENTER_32+0x73/0x90 [ 467.611198][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.617502][T15361] [ 467.619807][T15361] Uninit was stored to memory at: [ 467.624829][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 467.630544][T15361] __msan_chain_origin+0x50/0x90 [ 467.635484][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 467.640575][T15361] get_compat_msghdr+0x108/0x2b0 [ 467.645495][T15361] do_recvmmsg+0xdba/0x22c0 [ 467.649978][T15361] __sys_recvmmsg+0x5dd/0x610 [ 467.654640][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.660688][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.666841][T15361] __do_fast_syscall_32+0x2af/0x480 [ 467.672021][T15361] do_fast_syscall_32+0x6b/0xd0 [ 467.676871][T15361] do_SYSENTER_32+0x73/0x90 [ 467.681358][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.687658][T15361] [ 467.689964][T15361] Uninit was stored to memory at: [ 467.695754][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 467.701469][T15361] __msan_chain_origin+0x50/0x90 [ 467.706396][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 467.711487][T15361] get_compat_msghdr+0x108/0x2b0 [ 467.716419][T15361] do_recvmmsg+0xdba/0x22c0 [ 467.720934][T15361] __sys_recvmmsg+0x5dd/0x610 [ 467.725616][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.731686][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.737823][T15361] __do_fast_syscall_32+0x2af/0x480 [ 467.743027][T15361] do_fast_syscall_32+0x6b/0xd0 [ 467.747859][T15361] do_SYSENTER_32+0x73/0x90 [ 467.752343][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.758643][T15361] [ 467.760962][T15361] Uninit was stored to memory at: [ 467.765969][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 467.771682][T15361] __msan_chain_origin+0x50/0x90 [ 467.776616][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 467.781710][T15361] get_compat_msghdr+0x108/0x2b0 [ 467.786628][T15361] do_recvmmsg+0xdba/0x22c0 [ 467.791117][T15361] __sys_recvmmsg+0x5dd/0x610 [ 467.795790][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.801838][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.807975][T15361] __do_fast_syscall_32+0x2af/0x480 [ 467.813158][T15361] do_fast_syscall_32+0x6b/0xd0 [ 467.818004][T15361] do_SYSENTER_32+0x73/0x90 [ 467.822501][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.828815][T15361] [ 467.831141][T15361] Uninit was stored to memory at: [ 467.836157][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 467.841857][T15361] __msan_chain_origin+0x50/0x90 [ 467.846790][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 467.851898][T15361] get_compat_msghdr+0x108/0x2b0 [ 467.856818][T15361] do_recvmmsg+0xdba/0x22c0 [ 467.861301][T15361] __sys_recvmmsg+0x5dd/0x610 [ 467.865961][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.872009][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.878146][T15361] __do_fast_syscall_32+0x2af/0x480 [ 467.883327][T15361] do_fast_syscall_32+0x6b/0xd0 [ 467.888158][T15361] do_SYSENTER_32+0x73/0x90 [ 467.892672][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.898987][T15361] [ 467.901290][T15361] Uninit was stored to memory at: [ 467.906332][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 467.912033][T15361] __msan_chain_origin+0x50/0x90 [ 467.916954][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 467.922048][T15361] get_compat_msghdr+0x108/0x2b0 [ 467.926978][T15361] do_recvmmsg+0xdba/0x22c0 [ 467.931460][T15361] __sys_recvmmsg+0x5dd/0x610 [ 467.936154][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.942236][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.948375][T15361] __do_fast_syscall_32+0x2af/0x480 [ 467.953643][T15361] do_fast_syscall_32+0x6b/0xd0 [ 467.958482][T15361] do_SYSENTER_32+0x73/0x90 [ 467.962969][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.969267][T15361] [ 467.971589][T15361] Uninit was stored to memory at: [ 467.976610][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 467.982323][T15361] __msan_chain_origin+0x50/0x90 [ 467.987243][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 467.992336][T15361] get_compat_msghdr+0x108/0x2b0 [ 467.997269][T15361] do_recvmmsg+0xdba/0x22c0 [ 468.001752][T15361] __sys_recvmmsg+0x5dd/0x610 [ 468.006412][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.012488][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.018989][T15361] __do_fast_syscall_32+0x2af/0x480 [ 468.024172][T15361] do_fast_syscall_32+0x6b/0xd0 [ 468.029005][T15361] do_SYSENTER_32+0x73/0x90 [ 468.033508][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.039806][T15361] [ 468.042123][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 468.048783][T15361] do_recvmmsg+0xc2/0x22c0 [ 468.053193][T15361] do_recvmmsg+0xc2/0x22c0 [ 468.299553][T15361] not chained 680000 origins [ 468.304180][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 468.312853][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.322914][T15361] Call Trace: [ 468.326223][T15361] dump_stack+0x21c/0x280 [ 468.330585][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 468.336332][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 468.341465][T15361] ? kmsan_get_metadata+0x116/0x180 [ 468.346681][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 468.352507][T15361] ? kmsan_get_metadata+0x116/0x180 [ 468.357727][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 468.363570][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 468.369650][T15361] ? kmsan_get_metadata+0x116/0x180 [ 468.374868][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 468.380436][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 468.386529][T15361] ? _copy_from_user+0x221/0x330 [ 468.391532][T15361] ? kmsan_get_metadata+0x116/0x180 [ 468.396748][T15361] __msan_chain_origin+0x50/0x90 [ 468.401718][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 468.406870][T15361] get_compat_msghdr+0x108/0x2b0 [ 468.411837][T15361] do_recvmmsg+0xdba/0x22c0 [ 468.416367][T15361] ? __msan_get_context_state+0x9/0x20 [ 468.421872][T15361] ? kmsan_get_metadata+0x116/0x180 [ 468.427089][T15361] ? kmsan_get_metadata+0x116/0x180 [ 468.432333][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 468.438245][T15361] ? kmsan_get_metadata+0x116/0x180 [ 468.443512][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 468.448813][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 468.453592][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 468.458385][T15361] __sys_recvmmsg+0x5dd/0x610 [ 468.463105][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.469204][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.475379][T15361] __do_fast_syscall_32+0x2af/0x480 [ 468.480607][T15361] do_fast_syscall_32+0x6b/0xd0 [ 468.485480][T15361] do_SYSENTER_32+0x73/0x90 [ 468.490021][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.496358][T15361] RIP: 0023:0xf7f87549 [ 468.500425][T15361] Code: Bad RIP value. [ 468.504496][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 468.512937][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 468.520916][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.528893][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.536869][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 468.544842][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.552834][T15361] Uninit was stored to memory at: [ 468.557859][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 468.563560][T15361] __msan_chain_origin+0x50/0x90 [ 468.568479][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 468.573585][T15361] get_compat_msghdr+0x108/0x2b0 [ 468.578531][T15361] do_recvmmsg+0xdba/0x22c0 [ 468.583017][T15361] __sys_recvmmsg+0x5dd/0x610 [ 468.587689][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.593752][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.599920][T15361] __do_fast_syscall_32+0x2af/0x480 [ 468.605145][T15361] do_fast_syscall_32+0x6b/0xd0 [ 468.610004][T15361] do_SYSENTER_32+0x73/0x90 [ 468.614505][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.620830][T15361] [ 468.623152][T15361] Uninit was stored to memory at: [ 468.628159][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 468.633872][T15361] __msan_chain_origin+0x50/0x90 [ 468.638807][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 468.643901][T15361] get_compat_msghdr+0x108/0x2b0 [ 468.648819][T15361] do_recvmmsg+0xdba/0x22c0 [ 468.653320][T15361] __sys_recvmmsg+0x5dd/0x610 [ 468.658009][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.664076][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.670224][T15361] __do_fast_syscall_32+0x2af/0x480 [ 468.675417][T15361] do_fast_syscall_32+0x6b/0xd0 [ 468.680253][T15361] do_SYSENTER_32+0x73/0x90 [ 468.684739][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.691048][T15361] [ 468.693358][T15361] Uninit was stored to memory at: [ 468.698381][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 468.704093][T15361] __msan_chain_origin+0x50/0x90 [ 468.709040][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 468.714152][T15361] get_compat_msghdr+0x108/0x2b0 [ 468.719098][T15361] do_recvmmsg+0xdba/0x22c0 [ 468.723598][T15361] __sys_recvmmsg+0x5dd/0x610 [ 468.728257][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.734325][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.740474][T15361] __do_fast_syscall_32+0x2af/0x480 [ 468.745667][T15361] do_fast_syscall_32+0x6b/0xd0 [ 468.750500][T15361] do_SYSENTER_32+0x73/0x90 [ 468.754998][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.761324][T15361] [ 468.763642][T15361] Uninit was stored to memory at: [ 468.768649][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 468.774384][T15361] __msan_chain_origin+0x50/0x90 [ 468.779321][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 468.784415][T15361] get_compat_msghdr+0x108/0x2b0 [ 468.789333][T15361] do_recvmmsg+0xdba/0x22c0 [ 468.793829][T15361] __sys_recvmmsg+0x5dd/0x610 [ 468.798518][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.804569][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.810703][T15361] __do_fast_syscall_32+0x2af/0x480 [ 468.815895][T15361] do_fast_syscall_32+0x6b/0xd0 [ 468.820754][T15361] do_SYSENTER_32+0x73/0x90 [ 468.825253][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.831568][T15361] [ 468.833880][T15361] Uninit was stored to memory at: [ 468.838903][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 468.844604][T15361] __msan_chain_origin+0x50/0x90 [ 468.849524][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 468.854628][T15361] get_compat_msghdr+0x108/0x2b0 [ 468.859561][T15361] do_recvmmsg+0xdba/0x22c0 [ 468.864046][T15361] __sys_recvmmsg+0x5dd/0x610 [ 468.869067][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.875151][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.881305][T15361] __do_fast_syscall_32+0x2af/0x480 [ 468.886499][T15361] do_fast_syscall_32+0x6b/0xd0 [ 468.891330][T15361] do_SYSENTER_32+0x73/0x90 [ 468.895817][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.902129][T15361] [ 468.904439][T15361] Uninit was stored to memory at: [ 468.909458][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 468.915185][T15361] __msan_chain_origin+0x50/0x90 [ 468.920118][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 468.925226][T15361] get_compat_msghdr+0x108/0x2b0 [ 468.930173][T15361] do_recvmmsg+0xdba/0x22c0 [ 468.934690][T15361] __sys_recvmmsg+0x5dd/0x610 [ 468.939397][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.945462][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.951617][T15361] __do_fast_syscall_32+0x2af/0x480 [ 468.956812][T15361] do_fast_syscall_32+0x6b/0xd0 [ 468.961644][T15361] do_SYSENTER_32+0x73/0x90 [ 468.966138][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.972458][T15361] [ 468.974786][T15361] Uninit was stored to memory at: [ 468.979807][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 468.985523][T15361] __msan_chain_origin+0x50/0x90 [ 468.990455][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 468.995550][T15361] get_compat_msghdr+0x108/0x2b0 [ 469.000481][T15361] do_recvmmsg+0xdba/0x22c0 [ 469.004964][T15361] __sys_recvmmsg+0x5dd/0x610 [ 469.009622][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.015771][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.021906][T15361] __do_fast_syscall_32+0x2af/0x480 [ 469.027088][T15361] do_fast_syscall_32+0x6b/0xd0 [ 469.031921][T15361] do_SYSENTER_32+0x73/0x90 [ 469.036435][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.042754][T15361] [ 469.045086][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 469.051755][T15361] do_recvmmsg+0xc2/0x22c0 [ 469.056155][T15361] do_recvmmsg+0xc2/0x22c0 [ 469.302165][T15361] not chained 690000 origins [ 469.306824][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 469.315497][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.325556][T15361] Call Trace: [ 469.328880][T15361] dump_stack+0x21c/0x280 [ 469.333238][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 469.338980][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 469.344116][T15361] ? kmsan_get_metadata+0x116/0x180 [ 469.349353][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 469.355178][T15361] ? kmsan_get_metadata+0x116/0x180 [ 469.360419][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 469.366244][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 469.372326][T15361] ? kmsan_get_metadata+0x116/0x180 [ 469.377543][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 469.383107][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 469.389241][T15361] ? _copy_from_user+0x221/0x330 [ 469.394199][T15361] ? kmsan_get_metadata+0x116/0x180 [ 469.399415][T15361] __msan_chain_origin+0x50/0x90 [ 469.404373][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 469.409526][T15361] get_compat_msghdr+0x108/0x2b0 [ 469.414495][T15361] do_recvmmsg+0xdba/0x22c0 [ 469.419004][T15361] ? __msan_get_context_state+0x9/0x20 [ 469.424456][T15361] ? kmsan_get_metadata+0x116/0x180 [ 469.429643][T15361] ? kmsan_get_metadata+0x116/0x180 [ 469.434848][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 469.440744][T15361] ? kmsan_get_metadata+0x116/0x180 [ 469.445934][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 469.451221][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 469.455971][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 469.460723][T15361] __sys_recvmmsg+0x5dd/0x610 [ 469.465401][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.471495][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.477637][T15361] __do_fast_syscall_32+0x2af/0x480 [ 469.482856][T15361] do_fast_syscall_32+0x6b/0xd0 [ 469.487729][T15361] do_SYSENTER_32+0x73/0x90 [ 469.492244][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.498564][T15361] RIP: 0023:0xf7f87549 [ 469.502627][T15361] Code: Bad RIP value. [ 469.506674][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 469.515076][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 469.523045][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.531007][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.538975][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 469.546961][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.554938][T15361] Uninit was stored to memory at: [ 469.559963][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 469.565664][T15361] __msan_chain_origin+0x50/0x90 [ 469.570596][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 469.575704][T15361] get_compat_msghdr+0x108/0x2b0 [ 469.580655][T15361] do_recvmmsg+0xdba/0x22c0 [ 469.585155][T15361] __sys_recvmmsg+0x5dd/0x610 [ 469.589814][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.595878][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.602030][T15361] __do_fast_syscall_32+0x2af/0x480 [ 469.607213][T15361] do_fast_syscall_32+0x6b/0xd0 [ 469.612050][T15361] do_SYSENTER_32+0x73/0x90 [ 469.616550][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.622850][T15361] [ 469.625158][T15361] Uninit was stored to memory at: [ 469.630177][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 469.635877][T15361] __msan_chain_origin+0x50/0x90 [ 469.640795][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 469.645889][T15361] get_compat_msghdr+0x108/0x2b0 [ 469.650819][T15361] do_recvmmsg+0xdba/0x22c0 [ 469.655315][T15361] __sys_recvmmsg+0x5dd/0x610 [ 469.660001][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.666051][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.672208][T15361] __do_fast_syscall_32+0x2af/0x480 [ 469.677393][T15361] do_fast_syscall_32+0x6b/0xd0 [ 469.682245][T15361] do_SYSENTER_32+0x73/0x90 [ 469.686733][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.693038][T15361] [ 469.695367][T15361] Uninit was stored to memory at: [ 469.700402][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 469.706116][T15361] __msan_chain_origin+0x50/0x90 [ 469.711071][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 469.716180][T15361] get_compat_msghdr+0x108/0x2b0 [ 469.721113][T15361] do_recvmmsg+0xdba/0x22c0 [ 469.725611][T15361] __sys_recvmmsg+0x5dd/0x610 [ 469.730271][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.736334][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.742484][T15361] __do_fast_syscall_32+0x2af/0x480 [ 469.747694][T15361] do_fast_syscall_32+0x6b/0xd0 [ 469.752538][T15361] do_SYSENTER_32+0x73/0x90 [ 469.757040][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.763361][T15361] [ 469.765666][T15361] Uninit was stored to memory at: [ 469.770672][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 469.776387][T15361] __msan_chain_origin+0x50/0x90 [ 469.781306][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 469.786398][T15361] get_compat_msghdr+0x108/0x2b0 [ 469.791316][T15361] do_recvmmsg+0xdba/0x22c0 [ 469.795802][T15361] __sys_recvmmsg+0x5dd/0x610 [ 469.800477][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.806541][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.812689][T15361] __do_fast_syscall_32+0x2af/0x480 [ 469.817897][T15361] do_fast_syscall_32+0x6b/0xd0 [ 469.822758][T15361] do_SYSENTER_32+0x73/0x90 [ 469.827407][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.833715][T15361] [ 469.836033][T15361] Uninit was stored to memory at: [ 469.841043][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 469.846757][T15361] __msan_chain_origin+0x50/0x90 [ 469.851676][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 469.856768][T15361] get_compat_msghdr+0x108/0x2b0 [ 469.861699][T15361] do_recvmmsg+0xdba/0x22c0 [ 469.866198][T15361] __sys_recvmmsg+0x5dd/0x610 [ 469.870856][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.876950][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.883102][T15361] __do_fast_syscall_32+0x2af/0x480 [ 469.888281][T15361] do_fast_syscall_32+0x6b/0xd0 [ 469.893126][T15361] do_SYSENTER_32+0x73/0x90 [ 469.897642][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.904897][T15361] [ 469.907218][T15361] Uninit was stored to memory at: [ 469.912240][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 469.917943][T15361] __msan_chain_origin+0x50/0x90 [ 469.922875][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 469.928003][T15361] get_compat_msghdr+0x108/0x2b0 [ 469.932935][T15361] do_recvmmsg+0xdba/0x22c0 [ 469.937447][T15361] __sys_recvmmsg+0x5dd/0x610 [ 469.942122][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.948185][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.954335][T15361] __do_fast_syscall_32+0x2af/0x480 [ 469.959529][T15361] do_fast_syscall_32+0x6b/0xd0 [ 469.964375][T15361] do_SYSENTER_32+0x73/0x90 [ 469.968862][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.975165][T15361] [ 469.977504][T15361] Uninit was stored to memory at: [ 469.982527][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 469.988262][T15361] __msan_chain_origin+0x50/0x90 [ 469.993195][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 469.998323][T15361] get_compat_msghdr+0x108/0x2b0 [ 470.003246][T15361] do_recvmmsg+0xdba/0x22c0 [ 470.007729][T15361] __sys_recvmmsg+0x5dd/0x610 [ 470.012399][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.018450][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.024598][T15361] __do_fast_syscall_32+0x2af/0x480 [ 470.029787][T15361] do_fast_syscall_32+0x6b/0xd0 [ 470.034634][T15361] do_SYSENTER_32+0x73/0x90 [ 470.039147][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.045477][T15361] [ 470.047786][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 470.054451][T15361] do_recvmmsg+0xc2/0x22c0 [ 470.058878][T15361] do_recvmmsg+0xc2/0x22c0 [ 470.360428][T15361] not chained 700000 origins [ 470.365057][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 470.373751][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.383897][T15361] Call Trace: [ 470.387208][T15361] dump_stack+0x21c/0x280 [ 470.391568][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 470.397320][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 470.402498][T15361] ? kmsan_get_metadata+0x116/0x180 [ 470.407716][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.413543][T15361] ? kmsan_get_metadata+0x116/0x180 [ 470.418763][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 470.424587][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 470.430655][T15361] ? kmsan_get_metadata+0x116/0x180 [ 470.435873][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 470.441405][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 470.447476][T15361] ? _copy_from_user+0x221/0x330 [ 470.452412][T15361] ? kmsan_get_metadata+0x116/0x180 [ 470.457616][T15361] __msan_chain_origin+0x50/0x90 [ 470.462574][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 470.467706][T15361] get_compat_msghdr+0x108/0x2b0 [ 470.472767][T15361] do_recvmmsg+0xdba/0x22c0 [ 470.477297][T15361] ? __msan_get_context_state+0x9/0x20 [ 470.482784][T15361] ? kmsan_get_metadata+0x116/0x180 [ 470.487987][T15361] ? kmsan_get_metadata+0x116/0x180 [ 470.493192][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 470.499094][T15361] ? kmsan_get_metadata+0x116/0x180 [ 470.504294][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 470.509587][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 470.514334][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 470.519089][T15361] __sys_recvmmsg+0x5dd/0x610 [ 470.523784][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.529868][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.536010][T15361] __do_fast_syscall_32+0x2af/0x480 [ 470.541202][T15361] do_fast_syscall_32+0x6b/0xd0 [ 470.546042][T15361] do_SYSENTER_32+0x73/0x90 [ 470.550533][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.556857][T15361] RIP: 0023:0xf7f87549 [ 470.560911][T15361] Code: Bad RIP value. [ 470.564971][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 470.573452][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 470.581404][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.589357][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.597319][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 470.605273][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.613252][T15361] Uninit was stored to memory at: [ 470.618277][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 470.623987][T15361] __msan_chain_origin+0x50/0x90 [ 470.628918][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 470.634011][T15361] get_compat_msghdr+0x108/0x2b0 [ 470.638941][T15361] do_recvmmsg+0xdba/0x22c0 [ 470.643425][T15361] __sys_recvmmsg+0x5dd/0x610 [ 470.648083][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.654132][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.660283][T15361] __do_fast_syscall_32+0x2af/0x480 [ 470.665472][T15361] do_fast_syscall_32+0x6b/0xd0 [ 470.670312][T15361] do_SYSENTER_32+0x73/0x90 [ 470.674799][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.681097][T15361] [ 470.683405][T15361] Uninit was stored to memory at: [ 470.688413][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 470.694148][T15361] __msan_chain_origin+0x50/0x90 [ 470.699085][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 470.704193][T15361] get_compat_msghdr+0x108/0x2b0 [ 470.709133][T15361] do_recvmmsg+0xdba/0x22c0 [ 470.713636][T15361] __sys_recvmmsg+0x5dd/0x610 [ 470.718316][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.724366][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.730500][T15361] __do_fast_syscall_32+0x2af/0x480 [ 470.735695][T15361] do_fast_syscall_32+0x6b/0xd0 [ 470.740526][T15361] do_SYSENTER_32+0x73/0x90 [ 470.745011][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.751337][T15361] [ 470.753644][T15361] Uninit was stored to memory at: [ 470.758652][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 470.764353][T15361] __msan_chain_origin+0x50/0x90 [ 470.769287][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 470.774387][T15361] get_compat_msghdr+0x108/0x2b0 [ 470.779312][T15361] do_recvmmsg+0xdba/0x22c0 [ 470.783853][T15361] __sys_recvmmsg+0x5dd/0x610 [ 470.788524][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.794572][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.800719][T15361] __do_fast_syscall_32+0x2af/0x480 [ 470.805912][T15361] do_fast_syscall_32+0x6b/0xd0 [ 470.810762][T15361] do_SYSENTER_32+0x73/0x90 [ 470.815262][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.821586][T15361] [ 470.823892][T15361] Uninit was stored to memory at: [ 470.828899][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 470.834617][T15361] __msan_chain_origin+0x50/0x90 [ 470.839548][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 470.844642][T15361] get_compat_msghdr+0x108/0x2b0 [ 470.849559][T15361] do_recvmmsg+0xdba/0x22c0 [ 470.855619][T15361] __sys_recvmmsg+0x5dd/0x610 [ 470.860277][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.866332][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.872493][T15361] __do_fast_syscall_32+0x2af/0x480 [ 470.877702][T15361] do_fast_syscall_32+0x6b/0xd0 [ 470.882565][T15361] do_SYSENTER_32+0x73/0x90 [ 470.887068][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.893367][T15361] [ 470.895675][T15361] Uninit was stored to memory at: [ 470.900681][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 470.906384][T15361] __msan_chain_origin+0x50/0x90 [ 470.911314][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 470.916422][T15361] get_compat_msghdr+0x108/0x2b0 [ 470.921369][T15361] do_recvmmsg+0xdba/0x22c0 [ 470.925855][T15361] __sys_recvmmsg+0x5dd/0x610 [ 470.930516][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.936566][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.942715][T15361] __do_fast_syscall_32+0x2af/0x480 [ 470.947911][T15361] do_fast_syscall_32+0x6b/0xd0 [ 470.952751][T15361] do_SYSENTER_32+0x73/0x90 [ 470.957240][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.963552][T15361] [ 470.965871][T15361] Uninit was stored to memory at: [ 470.970877][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 470.976592][T15361] __msan_chain_origin+0x50/0x90 [ 470.981509][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 470.986602][T15361] get_compat_msghdr+0x108/0x2b0 [ 470.991519][T15361] do_recvmmsg+0xdba/0x22c0 [ 470.996010][T15361] __sys_recvmmsg+0x5dd/0x610 [ 471.000670][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.006731][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.012867][T15361] __do_fast_syscall_32+0x2af/0x480 [ 471.018048][T15361] do_fast_syscall_32+0x6b/0xd0 [ 471.022897][T15361] do_SYSENTER_32+0x73/0x90 [ 471.027415][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.033737][T15361] [ 471.036072][T15361] Uninit was stored to memory at: [ 471.041086][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 471.046790][T15361] __msan_chain_origin+0x50/0x90 [ 471.051718][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 471.056819][T15361] get_compat_msghdr+0x108/0x2b0 [ 471.061753][T15361] do_recvmmsg+0xdba/0x22c0 [ 471.066239][T15361] __sys_recvmmsg+0x5dd/0x610 [ 471.070899][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.076955][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.083093][T15361] __do_fast_syscall_32+0x2af/0x480 [ 471.088274][T15361] do_fast_syscall_32+0x6b/0xd0 [ 471.093122][T15361] do_SYSENTER_32+0x73/0x90 [ 471.097627][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.103946][T15361] [ 471.106271][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 471.112926][T15361] do_recvmmsg+0xc2/0x22c0 [ 471.117324][T15361] do_recvmmsg+0xc2/0x22c0 [ 471.449721][T15361] not chained 710000 origins [ 471.454315][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 471.462965][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.473007][T15361] Call Trace: [ 471.476322][T15361] dump_stack+0x21c/0x280 [ 471.480658][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 471.486368][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 471.491468][T15361] ? kmsan_get_metadata+0x116/0x180 [ 471.496668][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.502495][T15361] ? kmsan_get_metadata+0x116/0x180 [ 471.507710][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 471.513520][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 471.519580][T15361] ? kmsan_get_metadata+0x116/0x180 [ 471.524764][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 471.530296][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 471.536352][T15361] ? _copy_from_user+0x221/0x330 [ 471.541275][T15361] ? kmsan_get_metadata+0x116/0x180 [ 471.546471][T15361] __msan_chain_origin+0x50/0x90 [ 471.551405][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 471.556523][T15361] get_compat_msghdr+0x108/0x2b0 [ 471.561457][T15361] do_recvmmsg+0xdba/0x22c0 [ 471.565952][T15361] ? __msan_get_context_state+0x9/0x20 [ 471.571400][T15361] ? kmsan_get_metadata+0x116/0x180 [ 471.576590][T15361] ? kmsan_get_metadata+0x116/0x180 [ 471.581778][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 471.587683][T15361] ? kmsan_get_metadata+0x116/0x180 [ 471.592889][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 471.598179][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 471.602946][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 471.607703][T15361] __sys_recvmmsg+0x5dd/0x610 [ 471.612377][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.618439][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.624596][T15361] __do_fast_syscall_32+0x2af/0x480 [ 471.629787][T15361] do_fast_syscall_32+0x6b/0xd0 [ 471.634657][T15361] do_SYSENTER_32+0x73/0x90 [ 471.639160][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.645470][T15361] RIP: 0023:0xf7f87549 [ 471.649513][T15361] Code: Bad RIP value. [ 471.653572][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 471.661985][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 471.669940][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.677928][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.685895][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 471.693859][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.701839][T15361] Uninit was stored to memory at: [ 471.706850][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 471.712584][T15361] __msan_chain_origin+0x50/0x90 [ 471.717520][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 471.722628][T15361] get_compat_msghdr+0x108/0x2b0 [ 471.727577][T15361] do_recvmmsg+0xdba/0x22c0 [ 471.732059][T15361] __sys_recvmmsg+0x5dd/0x610 [ 471.736739][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.742806][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.748953][T15361] __do_fast_syscall_32+0x2af/0x480 [ 471.754134][T15361] do_fast_syscall_32+0x6b/0xd0 [ 471.758977][T15361] do_SYSENTER_32+0x73/0x90 [ 471.763464][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.769774][T15361] [ 471.772092][T15361] Uninit was stored to memory at: [ 471.777110][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 471.782814][T15361] __msan_chain_origin+0x50/0x90 [ 471.787731][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 471.792839][T15361] get_compat_msghdr+0x108/0x2b0 [ 471.797784][T15361] do_recvmmsg+0xdba/0x22c0 [ 471.802269][T15361] __sys_recvmmsg+0x5dd/0x610 [ 471.806948][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.813030][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.819170][T15361] __do_fast_syscall_32+0x2af/0x480 [ 471.824351][T15361] do_fast_syscall_32+0x6b/0xd0 [ 471.829191][T15361] do_SYSENTER_32+0x73/0x90 [ 471.833679][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.839991][T15361] [ 471.842297][T15361] Uninit was stored to memory at: [ 471.847305][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 471.853020][T15361] __msan_chain_origin+0x50/0x90 [ 471.857940][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 471.863047][T15361] get_compat_msghdr+0x108/0x2b0 [ 471.867967][T15361] do_recvmmsg+0xdba/0x22c0 [ 471.872457][T15361] __sys_recvmmsg+0x5dd/0x610 [ 471.877137][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.883193][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.889773][T15361] __do_fast_syscall_32+0x2af/0x480 [ 471.894954][T15361] do_fast_syscall_32+0x6b/0xd0 [ 471.899787][T15361] do_SYSENTER_32+0x73/0x90 [ 471.904274][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.910573][T15361] [ 471.912885][T15361] Uninit was stored to memory at: [ 471.917920][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 471.923652][T15361] __msan_chain_origin+0x50/0x90 [ 471.928586][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 471.933696][T15361] get_compat_msghdr+0x108/0x2b0 [ 471.938615][T15361] do_recvmmsg+0xdba/0x22c0 [ 471.943099][T15361] __sys_recvmmsg+0x5dd/0x610 [ 471.947774][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.953838][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.959974][T15361] __do_fast_syscall_32+0x2af/0x480 [ 471.965179][T15361] do_fast_syscall_32+0x6b/0xd0 [ 471.970030][T15361] do_SYSENTER_32+0x73/0x90 [ 471.974516][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.980829][T15361] [ 471.983137][T15361] Uninit was stored to memory at: [ 471.988150][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 471.993872][T15361] __msan_chain_origin+0x50/0x90 [ 471.998791][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 472.003887][T15361] get_compat_msghdr+0x108/0x2b0 [ 472.008824][T15361] do_recvmmsg+0xdba/0x22c0 [ 472.013310][T15361] __sys_recvmmsg+0x5dd/0x610 [ 472.018329][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.024394][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.030556][T15361] __do_fast_syscall_32+0x2af/0x480 [ 472.035742][T15361] do_fast_syscall_32+0x6b/0xd0 [ 472.040586][T15361] do_SYSENTER_32+0x73/0x90 [ 472.045086][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.051398][T15361] [ 472.053721][T15361] Uninit was stored to memory at: [ 472.058742][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 472.064444][T15361] __msan_chain_origin+0x50/0x90 [ 472.069365][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 472.074471][T15361] get_compat_msghdr+0x108/0x2b0 [ 472.079407][T15361] do_recvmmsg+0xdba/0x22c0 [ 472.083892][T15361] __sys_recvmmsg+0x5dd/0x610 [ 472.088554][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.094618][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.100767][T15361] __do_fast_syscall_32+0x2af/0x480 [ 472.105964][T15361] do_fast_syscall_32+0x6b/0xd0 [ 472.110812][T15361] do_SYSENTER_32+0x73/0x90 [ 472.115299][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.121599][T15361] [ 472.123922][T15361] Uninit was stored to memory at: [ 472.128948][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 472.134663][T15361] __msan_chain_origin+0x50/0x90 [ 472.139616][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 472.144730][T15361] get_compat_msghdr+0x108/0x2b0 [ 472.149650][T15361] do_recvmmsg+0xdba/0x22c0 [ 472.154141][T15361] __sys_recvmmsg+0x5dd/0x610 [ 472.158820][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.164890][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.171028][T15361] __do_fast_syscall_32+0x2af/0x480 [ 472.176233][T15361] do_fast_syscall_32+0x6b/0xd0 [ 472.181068][T15361] do_SYSENTER_32+0x73/0x90 [ 472.185561][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.191859][T15361] [ 472.194173][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 472.200830][T15361] do_recvmmsg+0xc2/0x22c0 [ 472.205244][T15361] do_recvmmsg+0xc2/0x22c0 [ 472.227735][ T17] Bluetooth: hci5: command 0x0406 tx timeout [ 472.481560][T15361] not chained 720000 origins [ 472.486268][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 472.495002][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.505074][T15361] Call Trace: [ 472.508393][T15361] dump_stack+0x21c/0x280 [ 472.512755][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 472.518509][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 472.523656][T15361] ? kmsan_get_metadata+0x116/0x180 [ 472.528884][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.534714][T15361] ? kmsan_get_metadata+0x116/0x180 [ 472.539941][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 472.545776][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 472.551867][T15361] ? kmsan_get_metadata+0x116/0x180 [ 472.557119][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 472.562779][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 472.568885][T15361] ? _copy_from_user+0x221/0x330 [ 472.573854][T15361] ? kmsan_get_metadata+0x116/0x180 [ 472.579079][T15361] __msan_chain_origin+0x50/0x90 [ 472.584052][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 472.589237][T15361] get_compat_msghdr+0x108/0x2b0 [ 472.594218][T15361] do_recvmmsg+0xdba/0x22c0 [ 472.598755][T15361] ? __msan_get_context_state+0x9/0x20 [ 472.604250][T15361] ? kmsan_get_metadata+0x116/0x180 [ 472.609488][T15361] ? kmsan_get_metadata+0x116/0x180 [ 472.614886][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 472.620822][T15361] ? kmsan_get_metadata+0x116/0x180 [ 472.626061][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 472.631382][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 472.636300][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 472.641114][T15361] __sys_recvmmsg+0x5dd/0x610 [ 472.645912][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.652060][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.658258][T15361] __do_fast_syscall_32+0x2af/0x480 [ 472.663508][T15361] do_fast_syscall_32+0x6b/0xd0 [ 472.668402][T15361] do_SYSENTER_32+0x73/0x90 [ 472.672945][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.679296][T15361] RIP: 0023:0xf7f87549 [ 472.683382][T15361] Code: Bad RIP value. [ 472.687469][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 472.695911][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 472.703909][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.711902][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.719903][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 472.727906][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.735919][T15361] Uninit was stored to memory at: [ 472.741072][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 472.746851][T15361] __msan_chain_origin+0x50/0x90 [ 472.751825][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 472.756968][T15361] get_compat_msghdr+0x108/0x2b0 [ 472.761941][T15361] do_recvmmsg+0xdba/0x22c0 [ 472.766478][T15361] __sys_recvmmsg+0x5dd/0x610 [ 472.771210][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.777314][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.783513][T15361] __do_fast_syscall_32+0x2af/0x480 [ 472.788749][T15361] do_fast_syscall_32+0x6b/0xd0 [ 472.793640][T15361] do_SYSENTER_32+0x73/0x90 [ 472.798197][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.804534][T15361] [ 472.806910][T15361] Uninit was stored to memory at: [ 472.811973][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 472.817727][T15361] __msan_chain_origin+0x50/0x90 [ 472.822705][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 472.827832][T15361] get_compat_msghdr+0x108/0x2b0 [ 472.832779][T15361] do_recvmmsg+0xdba/0x22c0 [ 472.837300][T15361] __sys_recvmmsg+0x5dd/0x610 [ 472.841975][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.848064][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.854238][T15361] __do_fast_syscall_32+0x2af/0x480 [ 472.859451][T15361] do_fast_syscall_32+0x6b/0xd0 [ 472.864300][T15361] do_SYSENTER_32+0x73/0x90 [ 472.868798][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.875117][T15361] [ 472.877450][T15361] Uninit was stored to memory at: [ 472.882507][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 472.888244][T15361] __msan_chain_origin+0x50/0x90 [ 472.893303][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 472.898425][T15361] get_compat_msghdr+0x108/0x2b0 [ 472.903373][T15361] do_recvmmsg+0xdba/0x22c0 [ 472.907917][T15361] __sys_recvmmsg+0x5dd/0x610 [ 472.912626][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.918727][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.924880][T15361] __do_fast_syscall_32+0x2af/0x480 [ 472.930076][T15361] do_fast_syscall_32+0x6b/0xd0 [ 472.934943][T15361] do_SYSENTER_32+0x73/0x90 [ 472.939468][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.945795][T15361] [ 472.948169][T15361] Uninit was stored to memory at: [ 472.953222][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 472.958973][T15361] __msan_chain_origin+0x50/0x90 [ 472.963913][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 472.969027][T15361] get_compat_msghdr+0x108/0x2b0 [ 472.973989][T15361] do_recvmmsg+0xdba/0x22c0 [ 472.978510][T15361] __sys_recvmmsg+0x5dd/0x610 [ 472.983213][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.989311][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.995470][T15361] __do_fast_syscall_32+0x2af/0x480 [ 473.000692][T15361] do_fast_syscall_32+0x6b/0xd0 [ 473.005563][T15361] do_SYSENTER_32+0x73/0x90 [ 473.010090][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.016410][T15361] [ 473.018772][T15361] Uninit was stored to memory at: [ 473.023834][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 473.029589][T15361] __msan_chain_origin+0x50/0x90 [ 473.034550][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 473.039698][T15361] get_compat_msghdr+0x108/0x2b0 [ 473.044640][T15361] do_recvmmsg+0xdba/0x22c0 [ 473.049153][T15361] __sys_recvmmsg+0x5dd/0x610 [ 473.053853][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.059943][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.066130][T15361] __do_fast_syscall_32+0x2af/0x480 [ 473.071349][T15361] do_fast_syscall_32+0x6b/0xd0 [ 473.076205][T15361] do_SYSENTER_32+0x73/0x90 [ 473.080717][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.087052][T15361] [ 473.089373][T15361] Uninit was stored to memory at: [ 473.094419][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 473.100162][T15361] __msan_chain_origin+0x50/0x90 [ 473.105104][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 473.110216][T15361] get_compat_msghdr+0x108/0x2b0 [ 473.115156][T15361] do_recvmmsg+0xdba/0x22c0 [ 473.119655][T15361] __sys_recvmmsg+0x5dd/0x610 [ 473.124355][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.130451][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.136625][T15361] __do_fast_syscall_32+0x2af/0x480 [ 473.141841][T15361] do_fast_syscall_32+0x6b/0xd0 [ 473.146695][T15361] do_SYSENTER_32+0x73/0x90 [ 473.151213][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.157529][T15361] [ 473.159845][T15361] Uninit was stored to memory at: [ 473.164872][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 473.170588][T15361] __msan_chain_origin+0x50/0x90 [ 473.175547][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 473.180676][T15361] get_compat_msghdr+0x108/0x2b0 [ 473.185630][T15361] do_recvmmsg+0xdba/0x22c0 [ 473.190133][T15361] __sys_recvmmsg+0x5dd/0x610 [ 473.194828][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.200921][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.207091][T15361] __do_fast_syscall_32+0x2af/0x480 [ 473.212296][T15361] do_fast_syscall_32+0x6b/0xd0 [ 473.217153][T15361] do_SYSENTER_32+0x73/0x90 [ 473.221654][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.227965][T15361] [ 473.230307][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 473.236996][T15361] do_recvmmsg+0xc2/0x22c0 [ 473.242037][T15361] do_recvmmsg+0xc2/0x22c0 [ 473.527705][T15361] not chained 730000 origins [ 473.532469][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 473.541171][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.551237][T15361] Call Trace: [ 473.554554][T15361] dump_stack+0x21c/0x280 [ 473.558902][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 473.564649][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 473.569782][T15361] ? kmsan_get_metadata+0x116/0x180 [ 473.574996][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 473.580837][T15361] ? kmsan_get_metadata+0x116/0x180 [ 473.586075][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 473.591911][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 473.597979][T15361] ? kmsan_get_metadata+0x116/0x180 [ 473.603191][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 473.608766][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 473.614840][T15361] ? _copy_from_user+0x221/0x330 [ 473.619779][T15361] ? kmsan_get_metadata+0x116/0x180 [ 473.624988][T15361] __msan_chain_origin+0x50/0x90 [ 473.629940][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 473.635089][T15361] get_compat_msghdr+0x108/0x2b0 [ 473.640035][T15361] do_recvmmsg+0xdba/0x22c0 [ 473.644563][T15361] ? __msan_get_context_state+0x9/0x20 [ 473.650043][T15361] ? kmsan_get_metadata+0x116/0x180 [ 473.655248][T15361] ? kmsan_get_metadata+0x116/0x180 [ 473.660448][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 473.666344][T15361] ? kmsan_get_metadata+0x116/0x180 [ 473.671570][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 473.676959][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 473.681828][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 473.686617][T15361] __sys_recvmmsg+0x5dd/0x610 [ 473.691356][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.697461][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.703654][T15361] __do_fast_syscall_32+0x2af/0x480 [ 473.708890][T15361] do_fast_syscall_32+0x6b/0xd0 [ 473.713830][T15361] do_SYSENTER_32+0x73/0x90 [ 473.718332][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.724666][T15361] RIP: 0023:0xf7f87549 [ 473.728743][T15361] Code: Bad RIP value. [ 473.732806][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 473.741238][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 473.749231][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.757223][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.767538][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 473.775524][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.783523][T15361] Uninit was stored to memory at: [ 473.788570][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 473.794300][T15361] __msan_chain_origin+0x50/0x90 [ 473.799268][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 473.804386][T15361] get_compat_msghdr+0x108/0x2b0 [ 473.809341][T15361] do_recvmmsg+0xdba/0x22c0 [ 473.813834][T15361] __sys_recvmmsg+0x5dd/0x610 [ 473.818505][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.824584][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.830752][T15361] __do_fast_syscall_32+0x2af/0x480 [ 473.835949][T15361] do_fast_syscall_32+0x6b/0xd0 [ 473.840790][T15361] do_SYSENTER_32+0x73/0x90 [ 473.845302][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.851623][T15361] [ 473.853938][T15361] Uninit was stored to memory at: [ 473.858975][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 473.864706][T15361] __msan_chain_origin+0x50/0x90 [ 473.869656][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 473.874773][T15361] get_compat_msghdr+0x108/0x2b0 [ 473.879702][T15361] do_recvmmsg+0xdba/0x22c0 [ 473.884217][T15361] __sys_recvmmsg+0x5dd/0x610 [ 473.888902][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.894979][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.901144][T15361] __do_fast_syscall_32+0x2af/0x480 [ 473.906355][T15361] do_fast_syscall_32+0x6b/0xd0 [ 473.911220][T15361] do_SYSENTER_32+0x73/0x90 [ 473.915719][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.922040][T15361] [ 473.924362][T15361] Uninit was stored to memory at: [ 473.929398][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 473.935116][T15361] __msan_chain_origin+0x50/0x90 [ 473.940060][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 473.945185][T15361] get_compat_msghdr+0x108/0x2b0 [ 473.950150][T15361] do_recvmmsg+0xdba/0x22c0 [ 473.954646][T15361] __sys_recvmmsg+0x5dd/0x610 [ 473.959341][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.966380][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.972542][T15361] __do_fast_syscall_32+0x2af/0x480 [ 473.977756][T15361] do_fast_syscall_32+0x6b/0xd0 [ 473.982641][T15361] do_SYSENTER_32+0x73/0x90 [ 473.987175][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.993506][T15361] [ 473.995833][T15361] Uninit was stored to memory at: [ 474.000889][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 474.006621][T15361] __msan_chain_origin+0x50/0x90 [ 474.011582][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 474.016698][T15361] get_compat_msghdr+0x108/0x2b0 [ 474.021657][T15361] do_recvmmsg+0xdba/0x22c0 [ 474.026158][T15361] __sys_recvmmsg+0x5dd/0x610 [ 474.030832][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.036900][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.043069][T15361] __do_fast_syscall_32+0x2af/0x480 [ 474.048278][T15361] do_fast_syscall_32+0x6b/0xd0 [ 474.053137][T15361] do_SYSENTER_32+0x73/0x90 [ 474.057647][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.063966][T15361] [ 474.066317][T15361] Uninit was stored to memory at: [ 474.071351][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 474.077069][T15361] __msan_chain_origin+0x50/0x90 [ 474.082004][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 474.087127][T15361] get_compat_msghdr+0x108/0x2b0 [ 474.092054][T15361] do_recvmmsg+0xdba/0x22c0 [ 474.096546][T15361] __sys_recvmmsg+0x5dd/0x610 [ 474.101239][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.107304][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.113471][T15361] __do_fast_syscall_32+0x2af/0x480 [ 474.118679][T15361] do_fast_syscall_32+0x6b/0xd0 [ 474.123542][T15361] do_SYSENTER_32+0x73/0x90 [ 474.128073][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.134396][T15361] [ 474.136707][T15361] Uninit was stored to memory at: [ 474.141737][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 474.147452][T15361] __msan_chain_origin+0x50/0x90 [ 474.152385][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 474.157489][T15361] get_compat_msghdr+0x108/0x2b0 [ 474.162413][T15361] do_recvmmsg+0xdba/0x22c0 [ 474.166910][T15361] __sys_recvmmsg+0x5dd/0x610 [ 474.171577][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.177644][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.183806][T15361] __do_fast_syscall_32+0x2af/0x480 [ 474.189012][T15361] do_fast_syscall_32+0x6b/0xd0 [ 474.193902][T15361] do_SYSENTER_32+0x73/0x90 [ 474.198414][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.204724][T15361] [ 474.207047][T15361] Uninit was stored to memory at: [ 474.212065][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 474.217793][T15361] __msan_chain_origin+0x50/0x90 [ 474.222747][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 474.227883][T15361] get_compat_msghdr+0x108/0x2b0 [ 474.232847][T15361] do_recvmmsg+0xdba/0x22c0 [ 474.237393][T15361] __sys_recvmmsg+0x5dd/0x610 [ 474.242080][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.248144][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.254293][T15361] __do_fast_syscall_32+0x2af/0x480 [ 474.259484][T15361] do_fast_syscall_32+0x6b/0xd0 [ 474.264363][T15361] do_SYSENTER_32+0x73/0x90 [ 474.268889][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.275193][T15361] [ 474.277514][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 474.284203][T15361] do_recvmmsg+0xc2/0x22c0 [ 474.288625][T15361] do_recvmmsg+0xc2/0x22c0 [ 474.518211][T15361] not chained 740000 origins [ 474.522868][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 474.531546][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.541609][T15361] Call Trace: [ 474.544924][T15361] dump_stack+0x21c/0x280 [ 474.549283][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 474.555028][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 474.560163][T15361] ? kmsan_get_metadata+0x116/0x180 [ 474.565386][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 474.571244][T15361] ? kmsan_get_metadata+0x116/0x180 [ 474.576463][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 474.582288][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 474.588375][T15361] ? kmsan_get_metadata+0x116/0x180 [ 474.593597][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 474.599164][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 474.605256][T15361] ? _copy_from_user+0x221/0x330 [ 474.610222][T15361] ? kmsan_get_metadata+0x116/0x180 [ 474.615445][T15361] __msan_chain_origin+0x50/0x90 [ 474.620407][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 474.625566][T15361] get_compat_msghdr+0x108/0x2b0 [ 474.630534][T15361] do_recvmmsg+0xdba/0x22c0 [ 474.635064][T15361] ? __msan_get_context_state+0x9/0x20 [ 474.640550][T15361] ? kmsan_get_metadata+0x116/0x180 [ 474.645777][T15361] ? kmsan_get_metadata+0x116/0x180 [ 474.651005][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 474.656918][T15361] ? kmsan_get_metadata+0x116/0x180 [ 474.662144][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 474.667498][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 474.672275][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 474.677070][T15361] __sys_recvmmsg+0x5dd/0x610 [ 474.681791][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.687892][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.694071][T15361] __do_fast_syscall_32+0x2af/0x480 [ 474.699332][T15361] do_fast_syscall_32+0x6b/0xd0 [ 474.704207][T15361] do_SYSENTER_32+0x73/0x90 [ 474.708745][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.715081][T15361] RIP: 0023:0xf7f87549 [ 474.719147][T15361] Code: Bad RIP value. [ 474.723220][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 474.731645][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 474.739633][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.747620][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.755612][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 474.763596][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.771595][T15361] Uninit was stored to memory at: [ 474.776648][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 474.782385][T15361] __msan_chain_origin+0x50/0x90 [ 474.787340][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 474.792471][T15361] get_compat_msghdr+0x108/0x2b0 [ 474.797417][T15361] do_recvmmsg+0xdba/0x22c0 [ 474.801931][T15361] __sys_recvmmsg+0x5dd/0x610 [ 474.806628][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.812707][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.818874][T15361] __do_fast_syscall_32+0x2af/0x480 [ 474.824087][T15361] do_fast_syscall_32+0x6b/0xd0 [ 474.828953][T15361] do_SYSENTER_32+0x73/0x90 [ 474.833479][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.839802][T15361] [ 474.842138][T15361] Uninit was stored to memory at: [ 474.847189][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 474.852923][T15361] __msan_chain_origin+0x50/0x90 [ 474.857874][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 474.862997][T15361] get_compat_msghdr+0x108/0x2b0 [ 474.867943][T15361] do_recvmmsg+0xdba/0x22c0 [ 474.872461][T15361] __sys_recvmmsg+0x5dd/0x610 [ 474.877158][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.883249][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.889416][T15361] __do_fast_syscall_32+0x2af/0x480 [ 474.894629][T15361] do_fast_syscall_32+0x6b/0xd0 [ 474.899533][T15361] do_SYSENTER_32+0x73/0x90 [ 474.904050][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.910373][T15361] [ 474.912703][T15361] Uninit was stored to memory at: [ 474.917742][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 474.923475][T15361] __msan_chain_origin+0x50/0x90 [ 474.928428][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 474.933550][T15361] get_compat_msghdr+0x108/0x2b0 [ 474.938503][T15361] do_recvmmsg+0xdba/0x22c0 [ 474.943003][T15361] __sys_recvmmsg+0x5dd/0x610 [ 474.947692][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.953756][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.959908][T15361] __do_fast_syscall_32+0x2af/0x480 [ 474.965108][T15361] do_fast_syscall_32+0x6b/0xd0 [ 474.969941][T15361] do_SYSENTER_32+0x73/0x90 [ 474.974463][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.980775][T15361] [ 474.983082][T15361] Uninit was stored to memory at: [ 474.988093][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 474.993807][T15361] __msan_chain_origin+0x50/0x90 [ 474.998744][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 475.003850][T15361] get_compat_msghdr+0x108/0x2b0 [ 475.008802][T15361] do_recvmmsg+0xdba/0x22c0 [ 475.013303][T15361] __sys_recvmmsg+0x5dd/0x610 [ 475.017995][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.024080][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.030250][T15361] __do_fast_syscall_32+0x2af/0x480 [ 475.035495][T15361] do_fast_syscall_32+0x6b/0xd0 [ 475.040388][T15361] do_SYSENTER_32+0x73/0x90 [ 475.044911][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.051249][T15361] [ 475.053578][T15361] Uninit was stored to memory at: [ 475.058642][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 475.064375][T15361] __msan_chain_origin+0x50/0x90 [ 475.069319][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 475.074465][T15361] get_compat_msghdr+0x108/0x2b0 [ 475.079433][T15361] do_recvmmsg+0xdba/0x22c0 [ 475.083964][T15361] __sys_recvmmsg+0x5dd/0x610 [ 475.088647][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.094745][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.100928][T15361] __do_fast_syscall_32+0x2af/0x480 [ 475.106239][T15361] do_fast_syscall_32+0x6b/0xd0 [ 475.111106][T15361] do_SYSENTER_32+0x73/0x90 [ 475.115637][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.121977][T15361] [ 475.124826][T15361] Uninit was stored to memory at: [ 475.129877][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 475.135614][T15361] __msan_chain_origin+0x50/0x90 [ 475.140562][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 475.145688][T15361] get_compat_msghdr+0x108/0x2b0 [ 475.150632][T15361] do_recvmmsg+0xdba/0x22c0 [ 475.155159][T15361] __sys_recvmmsg+0x5dd/0x610 [ 475.159863][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.165958][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.172123][T15361] __do_fast_syscall_32+0x2af/0x480 [ 475.177330][T15361] do_fast_syscall_32+0x6b/0xd0 [ 475.182237][T15361] do_SYSENTER_32+0x73/0x90 [ 475.186765][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.193092][T15361] [ 475.195432][T15361] Uninit was stored to memory at: [ 475.200475][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 475.206216][T15361] __msan_chain_origin+0x50/0x90 [ 475.211212][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 475.216380][T15361] get_compat_msghdr+0x108/0x2b0 [ 475.221366][T15361] do_recvmmsg+0xdba/0x22c0 [ 475.225880][T15361] __sys_recvmmsg+0x5dd/0x610 [ 475.230570][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.236669][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.246408][T15361] __do_fast_syscall_32+0x2af/0x480 [ 475.251611][T15361] do_fast_syscall_32+0x6b/0xd0 [ 475.256486][T15361] do_SYSENTER_32+0x73/0x90 [ 475.261038][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.267382][T15361] [ 475.269699][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 475.276388][T15361] do_recvmmsg+0xc2/0x22c0 [ 475.280803][T15361] do_recvmmsg+0xc2/0x22c0 [ 475.557330][T15361] not chained 750000 origins [ 475.561970][T15361] CPU: 1 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 475.570622][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.580662][T15361] Call Trace: [ 475.583948][T15361] dump_stack+0x21c/0x280 [ 475.588278][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 475.593989][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 475.599089][T15361] ? kmsan_get_metadata+0x116/0x180 [ 475.604276][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 475.610072][T15361] ? kmsan_get_metadata+0x116/0x180 [ 475.615262][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 475.621055][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 475.627106][T15361] ? kmsan_get_metadata+0x116/0x180 [ 475.632305][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 475.637841][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 475.643912][T15361] ? _copy_from_user+0x221/0x330 [ 475.648850][T15361] ? kmsan_get_metadata+0x116/0x180 [ 475.654034][T15361] __msan_chain_origin+0x50/0x90 [ 475.658975][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 475.664103][T15361] get_compat_msghdr+0x108/0x2b0 [ 475.669034][T15361] do_recvmmsg+0xdba/0x22c0 [ 475.673532][T15361] ? __msan_get_context_state+0x9/0x20 [ 475.678983][T15361] ? kmsan_get_metadata+0x116/0x180 [ 475.684170][T15361] ? kmsan_get_metadata+0x116/0x180 [ 475.689357][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 475.695674][T15361] ? kmsan_get_metadata+0x116/0x180 [ 475.700874][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 475.706155][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 475.710899][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 475.715664][T15361] __sys_recvmmsg+0x5dd/0x610 [ 475.720355][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.726419][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.732648][T15361] __do_fast_syscall_32+0x2af/0x480 [ 475.737851][T15361] do_fast_syscall_32+0x6b/0xd0 [ 475.742791][T15361] do_SYSENTER_32+0x73/0x90 [ 475.747288][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.753613][T15361] RIP: 0023:0xf7f87549 [ 475.757655][T15361] Code: Bad RIP value. [ 475.761713][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 475.770105][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 475.778144][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.786108][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.794067][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 475.802034][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.810010][T15361] Uninit was stored to memory at: [ 475.815035][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 475.820736][T15361] __msan_chain_origin+0x50/0x90 [ 475.825673][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 475.830767][T15361] get_compat_msghdr+0x108/0x2b0 [ 475.835691][T15361] do_recvmmsg+0xdba/0x22c0 [ 475.840174][T15361] __sys_recvmmsg+0x5dd/0x610 [ 475.844850][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.850898][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.857048][T15361] __do_fast_syscall_32+0x2af/0x480 [ 475.862228][T15361] do_fast_syscall_32+0x6b/0xd0 [ 475.867075][T15361] do_SYSENTER_32+0x73/0x90 [ 475.871561][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.877861][T15361] [ 475.880181][T15361] Uninit was stored to memory at: [ 475.885190][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 475.890891][T15361] __msan_chain_origin+0x50/0x90 [ 475.895813][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 475.900905][T15361] get_compat_msghdr+0x108/0x2b0 [ 475.905831][T15361] do_recvmmsg+0xdba/0x22c0 [ 475.910316][T15361] __sys_recvmmsg+0x5dd/0x610 [ 475.914990][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.921038][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.927175][T15361] __do_fast_syscall_32+0x2af/0x480 [ 475.932368][T15361] do_fast_syscall_32+0x6b/0xd0 [ 475.937215][T15361] do_SYSENTER_32+0x73/0x90 [ 475.941716][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.948016][T15361] [ 475.950337][T15361] Uninit was stored to memory at: [ 475.955348][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 475.961047][T15361] __msan_chain_origin+0x50/0x90 [ 475.965981][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 475.971075][T15361] get_compat_msghdr+0x108/0x2b0 [ 475.975993][T15361] do_recvmmsg+0xdba/0x22c0 [ 475.980586][T15361] __sys_recvmmsg+0x5dd/0x610 [ 475.985248][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.991317][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.997470][T15361] __do_fast_syscall_32+0x2af/0x480 [ 476.002654][T15361] do_fast_syscall_32+0x6b/0xd0 [ 476.007486][T15361] do_SYSENTER_32+0x73/0x90 [ 476.011970][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.018272][T15361] [ 476.020593][T15361] Uninit was stored to memory at: [ 476.025616][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 476.031315][T15361] __msan_chain_origin+0x50/0x90 [ 476.036239][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 476.041339][T15361] get_compat_msghdr+0x108/0x2b0 [ 476.046263][T15361] do_recvmmsg+0xdba/0x22c0 [ 476.050749][T15361] __sys_recvmmsg+0x5dd/0x610 [ 476.055411][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.061458][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.067608][T15361] __do_fast_syscall_32+0x2af/0x480 [ 476.072790][T15361] do_fast_syscall_32+0x6b/0xd0 [ 476.077635][T15361] do_SYSENTER_32+0x73/0x90 [ 476.082135][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.088445][T15361] [ 476.090752][T15361] Uninit was stored to memory at: [ 476.095777][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 476.101480][T15361] __msan_chain_origin+0x50/0x90 [ 476.106413][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 476.111510][T15361] get_compat_msghdr+0x108/0x2b0 [ 476.116433][T15361] do_recvmmsg+0xdba/0x22c0 [ 476.120922][T15361] __sys_recvmmsg+0x5dd/0x610 [ 476.125705][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.131752][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.137903][T15361] __do_fast_syscall_32+0x2af/0x480 [ 476.143108][T15361] do_fast_syscall_32+0x6b/0xd0 [ 476.147941][T15361] do_SYSENTER_32+0x73/0x90 [ 476.152447][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.158777][T15361] [ 476.161094][T15361] Uninit was stored to memory at: [ 476.166140][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 476.171853][T15361] __msan_chain_origin+0x50/0x90 [ 476.176784][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 476.181898][T15361] get_compat_msghdr+0x108/0x2b0 [ 476.186838][T15361] do_recvmmsg+0xdba/0x22c0 [ 476.191323][T15361] __sys_recvmmsg+0x5dd/0x610 [ 476.195984][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.202033][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.208184][T15361] __do_fast_syscall_32+0x2af/0x480 [ 476.213389][T15361] do_fast_syscall_32+0x6b/0xd0 [ 476.218226][T15361] do_SYSENTER_32+0x73/0x90 [ 476.222714][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.229023][T15361] [ 476.231331][T15361] Uninit was stored to memory at: [ 476.236356][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 476.242055][T15361] __msan_chain_origin+0x50/0x90 [ 476.246991][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 476.252095][T15361] get_compat_msghdr+0x108/0x2b0 [ 476.257015][T15361] do_recvmmsg+0xdba/0x22c0 [ 476.261511][T15361] __sys_recvmmsg+0x5dd/0x610 [ 476.266185][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.272240][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.279681][T15361] __do_fast_syscall_32+0x2af/0x480 [ 476.284875][T15361] do_fast_syscall_32+0x6b/0xd0 [ 476.289707][T15361] do_SYSENTER_32+0x73/0x90 [ 476.294247][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.300546][T15361] [ 476.302855][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 476.309511][T15361] do_recvmmsg+0xc2/0x22c0 [ 476.313923][T15361] do_recvmmsg+0xc2/0x22c0 [ 476.616543][T15361] not chained 760000 origins [ 476.621193][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 476.629865][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.640006][T15361] Call Trace: [ 476.643327][T15361] dump_stack+0x21c/0x280 [ 476.647686][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 476.653432][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 476.658574][T15361] ? kmsan_get_metadata+0x116/0x180 [ 476.663795][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 476.669708][T15361] ? kmsan_get_metadata+0x116/0x180 [ 476.674927][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 476.680762][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 476.686843][T15361] ? kmsan_get_metadata+0x116/0x180 [ 476.692058][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 476.697623][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 476.703714][T15361] ? _copy_from_user+0x221/0x330 [ 476.708810][T15361] ? kmsan_get_metadata+0x116/0x180 [ 476.714029][T15361] __msan_chain_origin+0x50/0x90 [ 476.718992][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 476.724148][T15361] get_compat_msghdr+0x108/0x2b0 [ 476.729122][T15361] do_recvmmsg+0xdba/0x22c0 [ 476.733653][T15361] ? __msan_get_context_state+0x9/0x20 [ 476.739140][T15361] ? kmsan_get_metadata+0x116/0x180 [ 476.744363][T15361] ? kmsan_get_metadata+0x116/0x180 [ 476.749588][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 476.755504][T15361] ? kmsan_get_metadata+0x116/0x180 [ 476.760749][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 476.766056][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 476.770820][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 476.775593][T15361] __sys_recvmmsg+0x5dd/0x610 [ 476.780293][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.786380][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.792537][T15361] __do_fast_syscall_32+0x2af/0x480 [ 476.797805][T15361] do_fast_syscall_32+0x6b/0xd0 [ 476.802649][T15361] do_SYSENTER_32+0x73/0x90 [ 476.807156][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.813464][T15361] RIP: 0023:0xf7f87549 [ 476.817509][T15361] Code: Bad RIP value. [ 476.821572][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 476.829991][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 476.837975][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.845930][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.853886][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 476.861837][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.869801][T15361] Uninit was stored to memory at: [ 476.874828][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 476.880528][T15361] __msan_chain_origin+0x50/0x90 [ 476.885462][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 476.890571][T15361] get_compat_msghdr+0x108/0x2b0 [ 476.895497][T15361] do_recvmmsg+0xdba/0x22c0 [ 476.899996][T15361] __sys_recvmmsg+0x5dd/0x610 [ 476.904673][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.910721][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.916859][T15361] __do_fast_syscall_32+0x2af/0x480 [ 476.922041][T15361] do_fast_syscall_32+0x6b/0xd0 [ 476.926889][T15361] do_SYSENTER_32+0x73/0x90 [ 476.931374][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.937684][T15361] [ 476.939990][T15361] Uninit was stored to memory at: [ 476.944997][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 476.950741][T15361] __msan_chain_origin+0x50/0x90 [ 476.955677][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 476.960783][T15361] get_compat_msghdr+0x108/0x2b0 [ 476.965703][T15361] do_recvmmsg+0xdba/0x22c0 [ 476.970190][T15361] __sys_recvmmsg+0x5dd/0x610 [ 476.974850][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.980912][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.987046][T15361] __do_fast_syscall_32+0x2af/0x480 [ 476.992239][T15361] do_fast_syscall_32+0x6b/0xd0 [ 476.997090][T15361] do_SYSENTER_32+0x73/0x90 [ 477.001607][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.007906][T15361] [ 477.010214][T15361] Uninit was stored to memory at: [ 477.015223][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 477.020923][T15361] __msan_chain_origin+0x50/0x90 [ 477.025842][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 477.030934][T15361] get_compat_msghdr+0x108/0x2b0 [ 477.035855][T15361] do_recvmmsg+0xdba/0x22c0 [ 477.040339][T15361] __sys_recvmmsg+0x5dd/0x610 [ 477.044999][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.051045][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.057182][T15361] __do_fast_syscall_32+0x2af/0x480 [ 477.062365][T15361] do_fast_syscall_32+0x6b/0xd0 [ 477.067214][T15361] do_SYSENTER_32+0x73/0x90 [ 477.071712][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.078024][T15361] [ 477.080331][T15361] Uninit was stored to memory at: [ 477.085359][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 477.091059][T15361] __msan_chain_origin+0x50/0x90 [ 477.095981][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 477.101074][T15361] get_compat_msghdr+0x108/0x2b0 [ 477.106008][T15361] do_recvmmsg+0xdba/0x22c0 [ 477.110508][T15361] __sys_recvmmsg+0x5dd/0x610 [ 477.115183][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.121268][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.127420][T15361] __do_fast_syscall_32+0x2af/0x480 [ 477.132615][T15361] do_fast_syscall_32+0x6b/0xd0 [ 477.137466][T15361] do_SYSENTER_32+0x73/0x90 [ 477.141952][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.148269][T15361] [ 477.150590][T15361] Uninit was stored to memory at: [ 477.155618][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 477.161318][T15361] __msan_chain_origin+0x50/0x90 [ 477.166239][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 477.171336][T15361] get_compat_msghdr+0x108/0x2b0 [ 477.176263][T15361] do_recvmmsg+0xdba/0x22c0 [ 477.180762][T15361] __sys_recvmmsg+0x5dd/0x610 [ 477.185421][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.191484][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.197621][T15361] __do_fast_syscall_32+0x2af/0x480 [ 477.202804][T15361] do_fast_syscall_32+0x6b/0xd0 [ 477.207638][T15361] do_SYSENTER_32+0x73/0x90 [ 477.212138][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.218454][T15361] [ 477.220774][T15361] Uninit was stored to memory at: [ 477.225789][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 477.231503][T15361] __msan_chain_origin+0x50/0x90 [ 477.236440][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 477.241543][T15361] get_compat_msghdr+0x108/0x2b0 [ 477.246464][T15361] do_recvmmsg+0xdba/0x22c0 [ 477.250959][T15361] __sys_recvmmsg+0x5dd/0x610 [ 477.255632][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.261682][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.267821][T15361] __do_fast_syscall_32+0x2af/0x480 [ 477.273019][T15361] do_fast_syscall_32+0x6b/0xd0 [ 477.277853][T15361] do_SYSENTER_32+0x73/0x90 [ 477.282339][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.288637][T15361] [ 477.290943][T15361] Uninit was stored to memory at: [ 477.295965][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 477.301680][T15361] __msan_chain_origin+0x50/0x90 [ 477.306613][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 477.311704][T15361] get_compat_msghdr+0x108/0x2b0 [ 477.316638][T15361] do_recvmmsg+0xdba/0x22c0 [ 477.321135][T15361] __sys_recvmmsg+0x5dd/0x610 [ 477.325836][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.331902][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.338042][T15361] __do_fast_syscall_32+0x2af/0x480 [ 477.343240][T15361] do_fast_syscall_32+0x6b/0xd0 [ 477.348080][T15361] do_SYSENTER_32+0x73/0x90 [ 477.352586][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.358918][T15361] [ 477.361242][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 477.367906][T15361] do_recvmmsg+0xc2/0x22c0 [ 477.372303][T15361] do_recvmmsg+0xc2/0x22c0 [ 477.600212][T15361] not chained 770000 origins [ 477.604873][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 477.613544][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.623604][T15361] Call Trace: [ 477.626919][T15361] dump_stack+0x21c/0x280 [ 477.631311][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 477.637055][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 477.642187][T15361] ? kmsan_get_metadata+0x116/0x180 [ 477.647408][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 477.653323][T15361] ? kmsan_get_metadata+0x116/0x180 [ 477.658541][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 477.664368][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 477.670500][T15361] ? kmsan_get_metadata+0x116/0x180 [ 477.675719][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 477.681293][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 477.687387][T15361] ? _copy_from_user+0x221/0x330 [ 477.692345][T15361] ? kmsan_get_metadata+0x116/0x180 [ 477.697564][T15361] __msan_chain_origin+0x50/0x90 [ 477.702528][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 477.707684][T15361] get_compat_msghdr+0x108/0x2b0 [ 477.712658][T15361] do_recvmmsg+0xdba/0x22c0 [ 477.717187][T15361] ? __msan_get_context_state+0x9/0x20 [ 477.722672][T15361] ? kmsan_get_metadata+0x116/0x180 [ 477.727937][T15361] ? kmsan_get_metadata+0x116/0x180 [ 477.733161][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 477.739072][T15361] ? kmsan_get_metadata+0x116/0x180 [ 477.744304][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 477.749611][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 477.754387][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 477.759174][T15361] __sys_recvmmsg+0x5dd/0x610 [ 477.763893][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.769991][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.776172][T15361] __do_fast_syscall_32+0x2af/0x480 [ 477.781427][T15361] do_fast_syscall_32+0x6b/0xd0 [ 477.786303][T15361] do_SYSENTER_32+0x73/0x90 [ 477.790825][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.797138][T15361] RIP: 0023:0xf7f87549 [ 477.801181][T15361] Code: Bad RIP value. [ 477.805251][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 477.813665][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 477.821635][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.829591][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.837545][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 477.845501][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.853469][T15361] Uninit was stored to memory at: [ 477.858529][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 477.864252][T15361] __msan_chain_origin+0x50/0x90 [ 477.869201][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 477.874329][T15361] get_compat_msghdr+0x108/0x2b0 [ 477.879290][T15361] do_recvmmsg+0xdba/0x22c0 [ 477.883788][T15361] __sys_recvmmsg+0x5dd/0x610 [ 477.888465][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.894530][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.900666][T15361] __do_fast_syscall_32+0x2af/0x480 [ 477.905851][T15361] do_fast_syscall_32+0x6b/0xd0 [ 477.910684][T15361] do_SYSENTER_32+0x73/0x90 [ 477.915189][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.921489][T15361] [ 477.923795][T15361] Uninit was stored to memory at: [ 477.928803][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 477.934518][T15361] __msan_chain_origin+0x50/0x90 [ 477.939438][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 477.944533][T15361] get_compat_msghdr+0x108/0x2b0 [ 477.949464][T15361] do_recvmmsg+0xdba/0x22c0 [ 477.953964][T15361] __sys_recvmmsg+0x5dd/0x610 [ 477.958639][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.964701][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.970836][T15361] __do_fast_syscall_32+0x2af/0x480 [ 477.976018][T15361] do_fast_syscall_32+0x6b/0xd0 [ 477.980850][T15361] do_SYSENTER_32+0x73/0x90 [ 477.985352][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.991667][T15361] [ 477.993984][T15361] Uninit was stored to memory at: [ 477.999011][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 478.004728][T15361] __msan_chain_origin+0x50/0x90 [ 478.009734][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 478.014841][T15361] get_compat_msghdr+0x108/0x2b0 [ 478.019774][T15361] do_recvmmsg+0xdba/0x22c0 [ 478.024264][T15361] __sys_recvmmsg+0x5dd/0x610 [ 478.028924][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.034994][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.041147][T15361] __do_fast_syscall_32+0x2af/0x480 [ 478.046346][T15361] do_fast_syscall_32+0x6b/0xd0 [ 478.051187][T15361] do_SYSENTER_32+0x73/0x90 [ 478.055676][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.061975][T15361] [ 478.064282][T15361] Uninit was stored to memory at: [ 478.069289][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 478.075006][T15361] __msan_chain_origin+0x50/0x90 [ 478.079937][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 478.085029][T15361] get_compat_msghdr+0x108/0x2b0 [ 478.089947][T15361] do_recvmmsg+0xdba/0x22c0 [ 478.094446][T15361] __sys_recvmmsg+0x5dd/0x610 [ 478.099140][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.105208][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.111360][T15361] __do_fast_syscall_32+0x2af/0x480 [ 478.116542][T15361] do_fast_syscall_32+0x6b/0xd0 [ 478.121373][T15361] do_SYSENTER_32+0x73/0x90 [ 478.125875][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.132172][T15361] [ 478.134480][T15361] Uninit was stored to memory at: [ 478.139486][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 478.145189][T15361] __msan_chain_origin+0x50/0x90 [ 478.150109][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 478.155218][T15361] get_compat_msghdr+0x108/0x2b0 [ 478.160159][T15361] do_recvmmsg+0xdba/0x22c0 [ 478.164659][T15361] __sys_recvmmsg+0x5dd/0x610 [ 478.169320][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.175383][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.181519][T15361] __do_fast_syscall_32+0x2af/0x480 [ 478.186700][T15361] do_fast_syscall_32+0x6b/0xd0 [ 478.191533][T15361] do_SYSENTER_32+0x73/0x90 [ 478.196019][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.202318][T15361] [ 478.204632][T15361] Uninit was stored to memory at: [ 478.209657][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 478.215374][T15361] __msan_chain_origin+0x50/0x90 [ 478.220310][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 478.225418][T15361] get_compat_msghdr+0x108/0x2b0 [ 478.230336][T15361] do_recvmmsg+0xdba/0x22c0 [ 478.234835][T15361] __sys_recvmmsg+0x5dd/0x610 [ 478.239494][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.245555][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.251795][T15361] __do_fast_syscall_32+0x2af/0x480 [ 478.256979][T15361] do_fast_syscall_32+0x6b/0xd0 [ 478.261826][T15361] do_SYSENTER_32+0x73/0x90 [ 478.266315][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.272620][T15361] [ 478.274946][T15361] Uninit was stored to memory at: [ 478.279979][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 478.285683][T15361] __msan_chain_origin+0x50/0x90 [ 478.290610][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 478.295745][T15361] get_compat_msghdr+0x108/0x2b0 [ 478.300699][T15361] do_recvmmsg+0xdba/0x22c0 [ 478.305186][T15361] __sys_recvmmsg+0x5dd/0x610 [ 478.309846][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.315912][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.322063][T15361] __do_fast_syscall_32+0x2af/0x480 [ 478.327255][T15361] do_fast_syscall_32+0x6b/0xd0 [ 478.332101][T15361] do_SYSENTER_32+0x73/0x90 [ 478.336613][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.342914][T15361] [ 478.345243][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 478.351895][T15361] do_recvmmsg+0xc2/0x22c0 [ 478.356304][T15361] do_recvmmsg+0xc2/0x22c0 [ 478.626859][T15361] not chained 780000 origins [ 478.631527][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 478.640217][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.650275][T15361] Call Trace: [ 478.653591][T15361] dump_stack+0x21c/0x280 [ 478.657950][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 478.663698][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 478.668853][T15361] ? kmsan_get_metadata+0x116/0x180 [ 478.674078][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 478.679905][T15361] ? kmsan_get_metadata+0x116/0x180 [ 478.685140][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 478.690967][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 478.697051][T15361] ? kmsan_get_metadata+0x116/0x180 [ 478.702268][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 478.707818][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 478.713877][T15361] ? _copy_from_user+0x221/0x330 [ 478.718801][T15361] ? kmsan_get_metadata+0x116/0x180 [ 478.723985][T15361] __msan_chain_origin+0x50/0x90 [ 478.728911][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 478.734029][T15361] get_compat_msghdr+0x108/0x2b0 [ 478.738964][T15361] do_recvmmsg+0xdba/0x22c0 [ 478.743461][T15361] ? __msan_get_context_state+0x9/0x20 [ 478.748913][T15361] ? kmsan_get_metadata+0x116/0x180 [ 478.754118][T15361] ? kmsan_get_metadata+0x116/0x180 [ 478.759326][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 478.765226][T15361] ? kmsan_get_metadata+0x116/0x180 [ 478.770426][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 478.775699][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 478.780447][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 478.785216][T15361] __sys_recvmmsg+0x5dd/0x610 [ 478.789892][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.795954][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.802095][T15361] __do_fast_syscall_32+0x2af/0x480 [ 478.807306][T15361] do_fast_syscall_32+0x6b/0xd0 [ 478.812157][T15361] do_SYSENTER_32+0x73/0x90 [ 478.816651][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.822968][T15361] RIP: 0023:0xf7f87549 [ 478.827026][T15361] Code: Bad RIP value. [ 478.831085][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 478.839496][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 478.847452][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.855410][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.863376][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 478.871347][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.879332][T15361] Uninit was stored to memory at: [ 478.884341][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 478.890040][T15361] __msan_chain_origin+0x50/0x90 [ 478.894976][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 478.900078][T15361] get_compat_msghdr+0x108/0x2b0 [ 478.905015][T15361] do_recvmmsg+0xdba/0x22c0 [ 478.909499][T15361] __sys_recvmmsg+0x5dd/0x610 [ 478.914162][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.920210][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.926347][T15361] __do_fast_syscall_32+0x2af/0x480 [ 478.931528][T15361] do_fast_syscall_32+0x6b/0xd0 [ 478.936365][T15361] do_SYSENTER_32+0x73/0x90 [ 478.940866][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.947180][T15361] [ 478.949504][T15361] Uninit was stored to memory at: [ 478.954514][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 478.960215][T15361] __msan_chain_origin+0x50/0x90 [ 478.965154][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 478.970249][T15361] get_compat_msghdr+0x108/0x2b0 [ 478.975179][T15361] do_recvmmsg+0xdba/0x22c0 [ 478.979702][T15361] __sys_recvmmsg+0x5dd/0x610 [ 478.984378][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.990445][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.996583][T15361] __do_fast_syscall_32+0x2af/0x480 [ 479.001763][T15361] do_fast_syscall_32+0x6b/0xd0 [ 479.006616][T15361] do_SYSENTER_32+0x73/0x90 [ 479.011102][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.017403][T15361] [ 479.019709][T15361] Uninit was stored to memory at: [ 479.024822][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 479.030538][T15361] __msan_chain_origin+0x50/0x90 [ 479.035460][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 479.040556][T15361] get_compat_msghdr+0x108/0x2b0 [ 479.045493][T15361] do_recvmmsg+0xdba/0x22c0 [ 479.049994][T15361] __sys_recvmmsg+0x5dd/0x610 [ 479.054677][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.060741][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.066890][T15361] __do_fast_syscall_32+0x2af/0x480 [ 479.072083][T15361] do_fast_syscall_32+0x6b/0xd0 [ 479.077045][T15361] do_SYSENTER_32+0x73/0x90 [ 479.081545][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.087848][T15361] [ 479.090183][T15361] Uninit was stored to memory at: [ 479.095205][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 479.100936][T15361] __msan_chain_origin+0x50/0x90 [ 479.105880][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 479.114361][T15361] get_compat_msghdr+0x108/0x2b0 [ 479.119283][T15361] do_recvmmsg+0xdba/0x22c0 [ 479.123771][T15361] __sys_recvmmsg+0x5dd/0x610 [ 479.128428][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.134479][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.140615][T15361] __do_fast_syscall_32+0x2af/0x480 [ 479.145830][T15361] do_fast_syscall_32+0x6b/0xd0 [ 479.150678][T15361] do_SYSENTER_32+0x73/0x90 [ 479.155187][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.161485][T15361] [ 479.163807][T15361] Uninit was stored to memory at: [ 479.168830][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 479.174532][T15361] __msan_chain_origin+0x50/0x90 [ 479.179450][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 479.184545][T15361] get_compat_msghdr+0x108/0x2b0 [ 479.189477][T15361] do_recvmmsg+0xdba/0x22c0 [ 479.193974][T15361] __sys_recvmmsg+0x5dd/0x610 [ 479.198653][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.204717][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.210869][T15361] __do_fast_syscall_32+0x2af/0x480 [ 479.216051][T15361] do_fast_syscall_32+0x6b/0xd0 [ 479.220884][T15361] do_SYSENTER_32+0x73/0x90 [ 479.225371][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.231684][T15361] [ 479.233998][T15361] Uninit was stored to memory at: [ 479.239009][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 479.244712][T15361] __msan_chain_origin+0x50/0x90 [ 479.249643][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 479.254738][T15361] get_compat_msghdr+0x108/0x2b0 [ 479.259657][T15361] do_recvmmsg+0xdba/0x22c0 [ 479.264159][T15361] __sys_recvmmsg+0x5dd/0x610 [ 479.268840][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.274904][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.281053][T15361] __do_fast_syscall_32+0x2af/0x480 [ 479.286247][T15361] do_fast_syscall_32+0x6b/0xd0 [ 479.291079][T15361] do_SYSENTER_32+0x73/0x90 [ 479.295580][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.301892][T15361] [ 479.304207][T15361] Uninit was stored to memory at: [ 479.309229][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 479.314950][T15361] __msan_chain_origin+0x50/0x90 [ 479.319889][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 479.324985][T15361] get_compat_msghdr+0x108/0x2b0 [ 479.329905][T15361] do_recvmmsg+0xdba/0x22c0 [ 479.334391][T15361] __sys_recvmmsg+0x5dd/0x610 [ 479.339051][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.345102][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.351248][T15361] __do_fast_syscall_32+0x2af/0x480 [ 479.356454][T15361] do_fast_syscall_32+0x6b/0xd0 [ 479.361286][T15361] do_SYSENTER_32+0x73/0x90 [ 479.365785][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.372098][T15361] [ 479.374406][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 479.381072][T15361] do_recvmmsg+0xc2/0x22c0 [ 479.385469][T15361] do_recvmmsg+0xc2/0x22c0 [ 479.618701][T15361] not chained 790000 origins [ 479.623339][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 479.632011][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.642069][T15361] Call Trace: [ 479.645385][T15361] dump_stack+0x21c/0x280 [ 479.649771][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 479.655515][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 479.660759][T15361] ? kmsan_get_metadata+0x116/0x180 [ 479.665979][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 479.671804][T15361] ? kmsan_get_metadata+0x116/0x180 [ 479.677022][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 479.682850][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 479.688931][T15361] ? kmsan_get_metadata+0x116/0x180 [ 479.694149][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 479.699738][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 479.705830][T15361] ? _copy_from_user+0x221/0x330 [ 479.710788][T15361] ? kmsan_get_metadata+0x116/0x180 [ 479.716003][T15361] __msan_chain_origin+0x50/0x90 [ 479.720962][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 479.726122][T15361] get_compat_msghdr+0x108/0x2b0 [ 479.731115][T15361] do_recvmmsg+0xdba/0x22c0 [ 479.735641][T15361] ? __msan_get_context_state+0x9/0x20 [ 479.741128][T15361] ? kmsan_get_metadata+0x116/0x180 [ 479.746351][T15361] ? kmsan_get_metadata+0x116/0x180 [ 479.751572][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 479.757487][T15361] ? kmsan_get_metadata+0x116/0x180 [ 479.762714][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 479.768020][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 479.772797][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 479.777579][T15361] __sys_recvmmsg+0x5dd/0x610 [ 479.782310][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.788410][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.794584][T15361] __do_fast_syscall_32+0x2af/0x480 [ 479.799814][T15361] do_fast_syscall_32+0x6b/0xd0 [ 479.804684][T15361] do_SYSENTER_32+0x73/0x90 [ 479.809208][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.815543][T15361] RIP: 0023:0xf7f87549 [ 479.819611][T15361] Code: Bad RIP value. [ 479.823686][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 479.832109][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 479.840523][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.848503][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.856486][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 479.864465][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.872458][T15361] Uninit was stored to memory at: [ 479.877501][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 479.883233][T15361] __msan_chain_origin+0x50/0x90 [ 479.888188][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 479.893312][T15361] get_compat_msghdr+0x108/0x2b0 [ 479.898268][T15361] do_recvmmsg+0xdba/0x22c0 [ 479.902785][T15361] __sys_recvmmsg+0x5dd/0x610 [ 479.907476][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.913557][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.919745][T15361] __do_fast_syscall_32+0x2af/0x480 [ 479.924978][T15361] do_fast_syscall_32+0x6b/0xd0 [ 479.929842][T15361] do_SYSENTER_32+0x73/0x90 [ 479.934359][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.940686][T15361] [ 479.943014][T15361] Uninit was stored to memory at: [ 479.948052][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 479.953781][T15361] __msan_chain_origin+0x50/0x90 [ 479.958732][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 479.963855][T15361] get_compat_msghdr+0x108/0x2b0 [ 479.968801][T15361] do_recvmmsg+0xdba/0x22c0 [ 479.973335][T15361] __sys_recvmmsg+0x5dd/0x610 [ 479.978025][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.984106][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.990275][T15361] __do_fast_syscall_32+0x2af/0x480 [ 479.995490][T15361] do_fast_syscall_32+0x6b/0xd0 [ 480.000356][T15361] do_SYSENTER_32+0x73/0x90 [ 480.004894][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.011216][T15361] [ 480.013525][T15361] Uninit was stored to memory at: [ 480.018536][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 480.024252][T15361] __msan_chain_origin+0x50/0x90 [ 480.029189][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 480.034285][T15361] get_compat_msghdr+0x108/0x2b0 [ 480.039205][T15361] do_recvmmsg+0xdba/0x22c0 [ 480.043714][T15361] __sys_recvmmsg+0x5dd/0x610 [ 480.048410][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.054460][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.060597][T15361] __do_fast_syscall_32+0x2af/0x480 [ 480.065782][T15361] do_fast_syscall_32+0x6b/0xd0 [ 480.070631][T15361] do_SYSENTER_32+0x73/0x90 [ 480.075134][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.081432][T15361] [ 480.083745][T15361] Uninit was stored to memory at: [ 480.088780][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 480.094495][T15361] __msan_chain_origin+0x50/0x90 [ 480.099431][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 480.104539][T15361] get_compat_msghdr+0x108/0x2b0 [ 480.109473][T15361] do_recvmmsg+0xdba/0x22c0 [ 480.113959][T15361] __sys_recvmmsg+0x5dd/0x610 [ 480.118638][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.124728][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.130903][T15361] __do_fast_syscall_32+0x2af/0x480 [ 480.136084][T15361] do_fast_syscall_32+0x6b/0xd0 [ 480.141021][T15361] do_SYSENTER_32+0x73/0x90 [ 480.145507][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.151823][T15361] [ 480.154130][T15361] Uninit was stored to memory at: [ 480.159154][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 480.164867][T15361] __msan_chain_origin+0x50/0x90 [ 480.169803][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 480.174899][T15361] get_compat_msghdr+0x108/0x2b0 [ 480.179830][T15361] do_recvmmsg+0xdba/0x22c0 [ 480.184326][T15361] __sys_recvmmsg+0x5dd/0x610 [ 480.189015][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.195102][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.201253][T15361] __do_fast_syscall_32+0x2af/0x480 [ 480.206451][T15361] do_fast_syscall_32+0x6b/0xd0 [ 480.211301][T15361] do_SYSENTER_32+0x73/0x90 [ 480.215790][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.222200][T15361] [ 480.224512][T15361] Uninit was stored to memory at: [ 480.229549][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 480.235270][T15361] __msan_chain_origin+0x50/0x90 [ 480.240189][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 480.245303][T15361] get_compat_msghdr+0x108/0x2b0 [ 480.250221][T15361] do_recvmmsg+0xdba/0x22c0 [ 480.254708][T15361] __sys_recvmmsg+0x5dd/0x610 [ 480.259367][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.265417][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.271569][T15361] __do_fast_syscall_32+0x2af/0x480 [ 480.276750][T15361] do_fast_syscall_32+0x6b/0xd0 [ 480.281587][T15361] do_SYSENTER_32+0x73/0x90 [ 480.286073][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.292455][T15361] [ 480.294783][T15361] Uninit was stored to memory at: [ 480.299795][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 480.305510][T15361] __msan_chain_origin+0x50/0x90 [ 480.310446][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 480.315553][T15361] get_compat_msghdr+0x108/0x2b0 [ 480.320490][T15361] do_recvmmsg+0xdba/0x22c0 [ 480.324988][T15361] __sys_recvmmsg+0x5dd/0x610 [ 480.329663][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.335839][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.341988][T15361] __do_fast_syscall_32+0x2af/0x480 [ 480.347186][T15361] do_fast_syscall_32+0x6b/0xd0 [ 480.352019][T15361] do_SYSENTER_32+0x73/0x90 [ 480.356510][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.362814][T15361] [ 480.365142][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 480.371821][T15361] do_recvmmsg+0xc2/0x22c0 [ 480.376237][T15361] do_recvmmsg+0xc2/0x22c0 [ 480.598471][T15361] not chained 800000 origins [ 480.603128][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 480.611803][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.621862][T15361] Call Trace: [ 480.625180][T15361] dump_stack+0x21c/0x280 [ 480.629540][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 480.635284][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 480.640419][T15361] ? kmsan_get_metadata+0x116/0x180 [ 480.645636][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 480.651460][T15361] ? kmsan_get_metadata+0x116/0x180 [ 480.656679][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 480.662526][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 480.668610][T15361] ? kmsan_get_metadata+0x116/0x180 [ 480.673828][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 480.679395][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 480.685490][T15361] ? _copy_from_user+0x221/0x330 [ 480.690448][T15361] ? kmsan_get_metadata+0x116/0x180 [ 480.695677][T15361] __msan_chain_origin+0x50/0x90 [ 480.700635][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 480.705811][T15361] get_compat_msghdr+0x108/0x2b0 [ 480.710743][T15361] do_recvmmsg+0xdba/0x22c0 [ 480.715241][T15361] ? __msan_get_context_state+0x9/0x20 [ 480.720691][T15361] ? kmsan_get_metadata+0x116/0x180 [ 480.725879][T15361] ? kmsan_get_metadata+0x116/0x180 [ 480.731066][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 480.736995][T15361] ? kmsan_get_metadata+0x116/0x180 [ 480.742183][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 480.747476][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 480.752256][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 480.757012][T15361] __sys_recvmmsg+0x5dd/0x610 [ 480.761706][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.767791][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.773951][T15361] __do_fast_syscall_32+0x2af/0x480 [ 480.779146][T15361] do_fast_syscall_32+0x6b/0xd0 [ 480.784013][T15361] do_SYSENTER_32+0x73/0x90 [ 480.788534][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.794856][T15361] RIP: 0023:0xf7f87549 [ 480.798900][T15361] Code: Bad RIP value. [ 480.802957][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 480.811367][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 480.819337][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 480.827293][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.835261][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 480.843232][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.851238][T15361] Uninit was stored to memory at: [ 480.856279][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 480.861981][T15361] __msan_chain_origin+0x50/0x90 [ 480.866916][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 480.872023][T15361] get_compat_msghdr+0x108/0x2b0 [ 480.876958][T15361] do_recvmmsg+0xdba/0x22c0 [ 480.881472][T15361] __sys_recvmmsg+0x5dd/0x610 [ 480.886141][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.892204][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.898339][T15361] __do_fast_syscall_32+0x2af/0x480 [ 480.903533][T15361] do_fast_syscall_32+0x6b/0xd0 [ 480.908396][T15361] do_SYSENTER_32+0x73/0x90 [ 480.912897][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.919227][T15361] [ 480.921547][T15361] Uninit was stored to memory at: [ 480.926571][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 480.932275][T15361] __msan_chain_origin+0x50/0x90 [ 480.937208][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 480.942302][T15361] get_compat_msghdr+0x108/0x2b0 [ 480.947223][T15361] do_recvmmsg+0xdba/0x22c0 [ 480.951705][T15361] __sys_recvmmsg+0x5dd/0x610 [ 480.956367][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.962436][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.968588][T15361] __do_fast_syscall_32+0x2af/0x480 [ 480.973787][T15361] do_fast_syscall_32+0x6b/0xd0 [ 480.978634][T15361] do_SYSENTER_32+0x73/0x90 [ 480.983133][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.989455][T15361] [ 480.991863][T15361] Uninit was stored to memory at: [ 480.996887][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 481.002601][T15361] __msan_chain_origin+0x50/0x90 [ 481.007538][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 481.012648][T15361] get_compat_msghdr+0x108/0x2b0 [ 481.017653][T15361] do_recvmmsg+0xdba/0x22c0 [ 481.022140][T15361] __sys_recvmmsg+0x5dd/0x610 [ 481.026805][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.032891][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.039028][T15361] __do_fast_syscall_32+0x2af/0x480 [ 481.044223][T15361] do_fast_syscall_32+0x6b/0xd0 [ 481.049088][T15361] do_SYSENTER_32+0x73/0x90 [ 481.053577][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.059887][T15361] [ 481.062194][T15361] Uninit was stored to memory at: [ 481.067218][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 481.072932][T15361] __msan_chain_origin+0x50/0x90 [ 481.080920][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 481.086013][T15361] get_compat_msghdr+0x108/0x2b0 [ 481.090930][T15361] do_recvmmsg+0xdba/0x22c0 [ 481.095429][T15361] __sys_recvmmsg+0x5dd/0x610 [ 481.100209][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.106261][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.112410][T15361] __do_fast_syscall_32+0x2af/0x480 [ 481.117596][T15361] do_fast_syscall_32+0x6b/0xd0 [ 481.122448][T15361] do_SYSENTER_32+0x73/0x90 [ 481.126950][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.133252][T15361] [ 481.135570][T15361] Uninit was stored to memory at: [ 481.140575][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 481.146277][T15361] __msan_chain_origin+0x50/0x90 [ 481.151197][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 481.156291][T15361] get_compat_msghdr+0x108/0x2b0 [ 481.161209][T15361] do_recvmmsg+0xdba/0x22c0 [ 481.165694][T15361] __sys_recvmmsg+0x5dd/0x610 [ 481.170875][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.176939][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.183088][T15361] __do_fast_syscall_32+0x2af/0x480 [ 481.188298][T15361] do_fast_syscall_32+0x6b/0xd0 [ 481.193220][T15361] do_SYSENTER_32+0x73/0x90 [ 481.197708][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.204030][T15361] [ 481.206357][T15361] Uninit was stored to memory at: [ 481.211382][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 481.217097][T15361] __msan_chain_origin+0x50/0x90 [ 481.222030][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 481.227123][T15361] get_compat_msghdr+0x108/0x2b0 [ 481.232054][T15361] do_recvmmsg+0xdba/0x22c0 [ 481.236551][T15361] __sys_recvmmsg+0x5dd/0x610 [ 481.241311][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.247375][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.253514][T15361] __do_fast_syscall_32+0x2af/0x480 [ 481.258696][T15361] do_fast_syscall_32+0x6b/0xd0 [ 481.263540][T15361] do_SYSENTER_32+0x73/0x90 [ 481.268056][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.274374][T15361] [ 481.276681][T15361] Uninit was stored to memory at: [ 481.281691][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 481.287395][T15361] __msan_chain_origin+0x50/0x90 [ 481.292316][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 481.297424][T15361] get_compat_msghdr+0x108/0x2b0 [ 481.302341][T15361] do_recvmmsg+0xdba/0x22c0 [ 481.306827][T15361] __sys_recvmmsg+0x5dd/0x610 [ 481.311494][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.317563][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.323752][T15361] __do_fast_syscall_32+0x2af/0x480 [ 481.328965][T15361] do_fast_syscall_32+0x6b/0xd0 [ 481.333799][T15361] do_SYSENTER_32+0x73/0x90 [ 481.338289][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.344595][T15361] [ 481.346935][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 481.353590][T15361] do_recvmmsg+0xc2/0x22c0 [ 481.358001][T15361] do_recvmmsg+0xc2/0x22c0 [ 481.579117][T15361] not chained 810000 origins [ 481.583759][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 481.592441][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.602508][T15361] Call Trace: [ 481.605825][T15361] dump_stack+0x21c/0x280 [ 481.610191][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 481.615941][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 481.621077][T15361] ? kmsan_get_metadata+0x116/0x180 [ 481.626303][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 481.632153][T15361] ? kmsan_get_metadata+0x116/0x180 [ 481.637388][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 481.643225][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 481.649348][T15361] ? kmsan_get_metadata+0x116/0x180 [ 481.654576][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 481.660154][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 481.666268][T15361] ? _copy_from_user+0x221/0x330 [ 481.671235][T15361] ? kmsan_get_metadata+0x116/0x180 [ 481.676504][T15361] __msan_chain_origin+0x50/0x90 [ 481.681473][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 481.686633][T15361] get_compat_msghdr+0x108/0x2b0 [ 481.691610][T15361] do_recvmmsg+0xdba/0x22c0 [ 481.696171][T15361] ? __msan_get_context_state+0x9/0x20 [ 481.701665][T15361] ? kmsan_get_metadata+0x116/0x180 [ 481.706895][T15361] ? kmsan_get_metadata+0x116/0x180 [ 481.712125][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 481.718048][T15361] ? kmsan_get_metadata+0x116/0x180 [ 481.723285][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 481.728597][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 481.733379][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 481.738175][T15361] __sys_recvmmsg+0x5dd/0x610 [ 481.742898][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.749001][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.755278][T15361] __do_fast_syscall_32+0x2af/0x480 [ 481.760513][T15361] do_fast_syscall_32+0x6b/0xd0 [ 481.765393][T15361] do_SYSENTER_32+0x73/0x90 [ 481.769925][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.776274][T15361] RIP: 0023:0xf7f87549 [ 481.780357][T15361] Code: Bad RIP value. [ 481.784433][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 481.792863][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 481.800850][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.808840][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.816829][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 481.824818][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.832824][T15361] Uninit was stored to memory at: [ 481.837967][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 481.843707][T15361] __msan_chain_origin+0x50/0x90 [ 481.848931][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 481.854066][T15361] get_compat_msghdr+0x108/0x2b0 [ 481.859028][T15361] do_recvmmsg+0xdba/0x22c0 [ 481.863546][T15361] __sys_recvmmsg+0x5dd/0x610 [ 481.868239][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.874333][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.880508][T15361] __do_fast_syscall_32+0x2af/0x480 [ 481.885730][T15361] do_fast_syscall_32+0x6b/0xd0 [ 481.890599][T15361] do_SYSENTER_32+0x73/0x90 [ 481.895120][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.901448][T15361] [ 481.903781][T15361] Uninit was stored to memory at: [ 481.908828][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 481.914564][T15361] __msan_chain_origin+0x50/0x90 [ 481.919519][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 481.924645][T15361] get_compat_msghdr+0x108/0x2b0 [ 481.929598][T15361] do_recvmmsg+0xdba/0x22c0 [ 481.934116][T15361] __sys_recvmmsg+0x5dd/0x610 [ 481.938811][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.944889][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.951050][T15361] __do_fast_syscall_32+0x2af/0x480 [ 481.956242][T15361] do_fast_syscall_32+0x6b/0xd0 [ 481.961102][T15361] do_SYSENTER_32+0x73/0x90 [ 481.965601][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.971919][T15361] [ 481.974238][T15361] Uninit was stored to memory at: [ 481.979283][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 481.985008][T15361] __msan_chain_origin+0x50/0x90 [ 481.990038][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 481.995141][T15361] get_compat_msghdr+0x108/0x2b0 [ 482.000063][T15361] do_recvmmsg+0xdba/0x22c0 [ 482.004565][T15361] __sys_recvmmsg+0x5dd/0x610 [ 482.009246][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.015307][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.021452][T15361] __do_fast_syscall_32+0x2af/0x480 [ 482.026660][T15361] do_fast_syscall_32+0x6b/0xd0 [ 482.031499][T15361] do_SYSENTER_32+0x73/0x90 [ 482.035996][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.042299][T15361] [ 482.044623][T15361] Uninit was stored to memory at: [ 482.049663][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 482.055400][T15361] __msan_chain_origin+0x50/0x90 [ 482.060328][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 482.065441][T15361] get_compat_msghdr+0x108/0x2b0 [ 482.070383][T15361] do_recvmmsg+0xdba/0x22c0 [ 482.074888][T15361] __sys_recvmmsg+0x5dd/0x610 [ 482.079570][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.085648][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.091818][T15361] __do_fast_syscall_32+0x2af/0x480 [ 482.097008][T15361] do_fast_syscall_32+0x6b/0xd0 [ 482.101843][T15361] do_SYSENTER_32+0x73/0x90 [ 482.106365][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.112676][T15361] [ 482.115001][T15361] Uninit was stored to memory at: [ 482.120031][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 482.125743][T15361] __msan_chain_origin+0x50/0x90 [ 482.130672][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 482.135777][T15361] get_compat_msghdr+0x108/0x2b0 [ 482.140723][T15361] do_recvmmsg+0xdba/0x22c0 [ 482.145231][T15361] __sys_recvmmsg+0x5dd/0x610 [ 482.149932][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.155993][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.162148][T15361] __do_fast_syscall_32+0x2af/0x480 [ 482.167349][T15361] do_fast_syscall_32+0x6b/0xd0 [ 482.172212][T15361] do_SYSENTER_32+0x73/0x90 [ 482.176726][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.183038][T15361] [ 482.185370][T15361] Uninit was stored to memory at: [ 482.190422][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 482.196164][T15361] __msan_chain_origin+0x50/0x90 [ 482.201109][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 482.206213][T15361] get_compat_msghdr+0x108/0x2b0 [ 482.211249][T15361] do_recvmmsg+0xdba/0x22c0 [ 482.215758][T15361] __sys_recvmmsg+0x5dd/0x610 [ 482.220442][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.226505][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.232668][T15361] __do_fast_syscall_32+0x2af/0x480 [ 482.237891][T15361] do_fast_syscall_32+0x6b/0xd0 [ 482.242745][T15361] do_SYSENTER_32+0x73/0x90 [ 482.247253][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.253578][T15361] [ 482.255898][T15361] Uninit was stored to memory at: [ 482.260932][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 482.266642][T15361] __msan_chain_origin+0x50/0x90 [ 482.271587][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 482.276690][T15361] get_compat_msghdr+0x108/0x2b0 [ 482.281617][T15361] do_recvmmsg+0xdba/0x22c0 [ 482.286171][T15361] __sys_recvmmsg+0x5dd/0x610 [ 482.290892][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.297033][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.303199][T15361] __do_fast_syscall_32+0x2af/0x480 [ 482.308425][T15361] do_fast_syscall_32+0x6b/0xd0 [ 482.313282][T15361] do_SYSENTER_32+0x73/0x90 [ 482.317777][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.324092][T15361] [ 482.326422][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 482.333107][T15361] do_recvmmsg+0xc2/0x22c0 [ 482.337516][T15361] do_recvmmsg+0xc2/0x22c0 [ 482.604482][T15361] not chained 820000 origins [ 482.609141][T15361] CPU: 1 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 482.617988][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.628047][T15361] Call Trace: [ 482.631347][T15361] dump_stack+0x21c/0x280 [ 482.635679][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 482.641400][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 482.646548][T15361] ? kmsan_get_metadata+0x116/0x180 [ 482.651743][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 482.657551][T15361] ? kmsan_get_metadata+0x116/0x180 [ 482.662769][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 482.668588][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 482.674656][T15361] ? kmsan_get_metadata+0x116/0x180 [ 482.679863][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 482.685411][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 482.691479][T15361] ? _copy_from_user+0x221/0x330 [ 482.696419][T15361] ? kmsan_get_metadata+0x116/0x180 [ 482.702136][T15361] __msan_chain_origin+0x50/0x90 [ 482.707088][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 482.712224][T15361] get_compat_msghdr+0x108/0x2b0 [ 482.717170][T15361] do_recvmmsg+0xdba/0x22c0 [ 482.721685][T15361] ? __msan_get_context_state+0x9/0x20 [ 482.727147][T15361] ? kmsan_get_metadata+0x116/0x180 [ 482.732344][T15361] ? kmsan_get_metadata+0x116/0x180 [ 482.737554][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 482.743455][T15361] ? kmsan_get_metadata+0x116/0x180 [ 482.748668][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 482.753948][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 482.758698][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 482.763469][T15361] __sys_recvmmsg+0x5dd/0x610 [ 482.768164][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.774242][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.780391][T15361] __do_fast_syscall_32+0x2af/0x480 [ 482.785605][T15361] do_fast_syscall_32+0x6b/0xd0 [ 482.790548][T15361] do_SYSENTER_32+0x73/0x90 [ 482.795044][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.801359][T15361] RIP: 0023:0xf7f87549 [ 482.805406][T15361] Code: Bad RIP value. [ 482.809454][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 482.817857][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 482.825821][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 482.833783][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 482.841761][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 482.849740][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 482.857715][T15361] Uninit was stored to memory at: [ 482.862750][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 482.868461][T15361] __msan_chain_origin+0x50/0x90 [ 482.873396][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 482.878510][T15361] get_compat_msghdr+0x108/0x2b0 [ 482.883435][T15361] do_recvmmsg+0xdba/0x22c0 [ 482.887945][T15361] __sys_recvmmsg+0x5dd/0x610 [ 482.892616][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.898677][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.904830][T15361] __do_fast_syscall_32+0x2af/0x480 [ 482.910029][T15361] do_fast_syscall_32+0x6b/0xd0 [ 482.914871][T15361] do_SYSENTER_32+0x73/0x90 [ 482.919379][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.925698][T15361] [ 482.928011][T15361] Uninit was stored to memory at: [ 482.933032][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 482.938757][T15361] __msan_chain_origin+0x50/0x90 [ 482.943683][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 482.948782][T15361] get_compat_msghdr+0x108/0x2b0 [ 482.953722][T15361] do_recvmmsg+0xdba/0x22c0 [ 482.958224][T15361] __sys_recvmmsg+0x5dd/0x610 [ 482.962891][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.968944][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.975090][T15361] __do_fast_syscall_32+0x2af/0x480 [ 482.980297][T15361] do_fast_syscall_32+0x6b/0xd0 [ 482.985167][T15361] do_SYSENTER_32+0x73/0x90 [ 482.989659][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.996051][T15361] [ 482.998364][T15361] Uninit was stored to memory at: [ 483.003389][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 483.009107][T15361] __msan_chain_origin+0x50/0x90 [ 483.014044][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 483.019166][T15361] get_compat_msghdr+0x108/0x2b0 [ 483.024112][T15361] do_recvmmsg+0xdba/0x22c0 [ 483.028607][T15361] __sys_recvmmsg+0x5dd/0x610 [ 483.033280][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.039349][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.045501][T15361] __do_fast_syscall_32+0x2af/0x480 [ 483.051057][T15361] do_fast_syscall_32+0x6b/0xd0 [ 483.055902][T15361] do_SYSENTER_32+0x73/0x90 [ 483.060414][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.066723][T15361] [ 483.069050][T15361] Uninit was stored to memory at: [ 483.074070][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 483.079783][T15361] __msan_chain_origin+0x50/0x90 [ 483.084716][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 483.089821][T15361] get_compat_msghdr+0x108/0x2b0 [ 483.094769][T15361] do_recvmmsg+0xdba/0x22c0 [ 483.099265][T15361] __sys_recvmmsg+0x5dd/0x610 [ 483.103950][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.110024][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.116173][T15361] __do_fast_syscall_32+0x2af/0x480 [ 483.121365][T15361] do_fast_syscall_32+0x6b/0xd0 [ 483.126209][T15361] do_SYSENTER_32+0x73/0x90 [ 483.130718][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.137024][T15361] [ 483.139347][T15361] Uninit was stored to memory at: [ 483.144364][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 483.150072][T15361] __msan_chain_origin+0x50/0x90 [ 483.154997][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 483.160100][T15361] get_compat_msghdr+0x108/0x2b0 [ 483.165028][T15361] do_recvmmsg+0xdba/0x22c0 [ 483.169534][T15361] __sys_recvmmsg+0x5dd/0x610 [ 483.174290][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.180363][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.186607][T15361] __do_fast_syscall_32+0x2af/0x480 [ 483.191796][T15361] do_fast_syscall_32+0x6b/0xd0 [ 483.196637][T15361] do_SYSENTER_32+0x73/0x90 [ 483.201138][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.207441][T15361] [ 483.209763][T15361] Uninit was stored to memory at: [ 483.214779][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 483.220500][T15361] __msan_chain_origin+0x50/0x90 [ 483.225446][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 483.230561][T15361] get_compat_msghdr+0x108/0x2b0 [ 483.235487][T15361] do_recvmmsg+0xdba/0x22c0 [ 483.239989][T15361] __sys_recvmmsg+0x5dd/0x610 [ 483.244658][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.250715][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.256862][T15361] __do_fast_syscall_32+0x2af/0x480 [ 483.262126][T15361] do_fast_syscall_32+0x6b/0xd0 [ 483.266966][T15361] do_SYSENTER_32+0x73/0x90 [ 483.271458][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.277778][T15361] [ 483.280104][T15361] Uninit was stored to memory at: [ 483.285123][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 483.290845][T15361] __msan_chain_origin+0x50/0x90 [ 483.295789][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 483.300893][T15361] get_compat_msghdr+0x108/0x2b0 [ 483.305832][T15361] do_recvmmsg+0xdba/0x22c0 [ 483.310335][T15361] __sys_recvmmsg+0x5dd/0x610 [ 483.315005][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.321063][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.327208][T15361] __do_fast_syscall_32+0x2af/0x480 [ 483.332396][T15361] do_fast_syscall_32+0x6b/0xd0 [ 483.337251][T15361] do_SYSENTER_32+0x73/0x90 [ 483.341739][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.348040][T15361] [ 483.350351][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 483.357014][T15361] do_recvmmsg+0xc2/0x22c0 [ 483.361418][T15361] do_recvmmsg+0xc2/0x22c0 [ 483.663429][T15361] not chained 830000 origins [ 483.668095][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 483.676782][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.686854][T15361] Call Trace: [ 483.690185][T15361] dump_stack+0x21c/0x280 [ 483.694559][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 483.700318][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 483.705467][T15361] ? kmsan_get_metadata+0x116/0x180 [ 483.710702][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 483.716544][T15361] ? kmsan_get_metadata+0x116/0x180 [ 483.721780][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 483.727624][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 483.733727][T15361] ? kmsan_get_metadata+0x116/0x180 [ 483.738956][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 483.744541][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 483.750659][T15361] ? _copy_from_user+0x221/0x330 [ 483.755643][T15361] ? kmsan_get_metadata+0x116/0x180 [ 483.760870][T15361] __msan_chain_origin+0x50/0x90 [ 483.765848][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 483.771025][T15361] get_compat_msghdr+0x108/0x2b0 [ 483.776010][T15361] do_recvmmsg+0xdba/0x22c0 [ 483.780556][T15361] ? __msan_get_context_state+0x9/0x20 [ 483.786037][T15361] ? kmsan_get_metadata+0x116/0x180 [ 483.791239][T15361] ? kmsan_get_metadata+0x116/0x180 [ 483.796443][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 483.802338][T15361] ? kmsan_get_metadata+0x116/0x180 [ 483.807584][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 483.812874][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 483.817633][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 483.822398][T15361] __sys_recvmmsg+0x5dd/0x610 [ 483.827120][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.833241][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.839449][T15361] __do_fast_syscall_32+0x2af/0x480 [ 483.844688][T15361] do_fast_syscall_32+0x6b/0xd0 [ 483.849560][T15361] do_SYSENTER_32+0x73/0x90 [ 483.854077][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.860405][T15361] RIP: 0023:0xf7f87549 [ 483.864464][T15361] Code: Bad RIP value. [ 483.868520][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 483.876941][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 483.884932][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 483.892902][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.900871][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 483.908860][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.916857][T15361] Uninit was stored to memory at: [ 483.921891][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 483.927639][T15361] __msan_chain_origin+0x50/0x90 [ 483.932601][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 483.937755][T15361] get_compat_msghdr+0x108/0x2b0 [ 483.942744][T15361] do_recvmmsg+0xdba/0x22c0 [ 483.947283][T15361] __sys_recvmmsg+0x5dd/0x610 [ 483.951978][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.958059][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.964234][T15361] __do_fast_syscall_32+0x2af/0x480 [ 483.969456][T15361] do_fast_syscall_32+0x6b/0xd0 [ 483.974308][T15361] do_SYSENTER_32+0x73/0x90 [ 483.978806][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.985112][T15361] [ 483.987424][T15361] Uninit was stored to memory at: [ 483.992472][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 483.998211][T15361] __msan_chain_origin+0x50/0x90 [ 484.003161][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 484.008272][T15361] get_compat_msghdr+0x108/0x2b0 [ 484.013215][T15361] do_recvmmsg+0xdba/0x22c0 [ 484.017742][T15361] __sys_recvmmsg+0x5dd/0x610 [ 484.022420][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.028502][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.034673][T15361] __do_fast_syscall_32+0x2af/0x480 [ 484.039885][T15361] do_fast_syscall_32+0x6b/0xd0 [ 484.044761][T15361] do_SYSENTER_32+0x73/0x90 [ 484.049280][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.055589][T15361] [ 484.057900][T15361] Uninit was stored to memory at: [ 484.062922][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 484.068648][T15361] __msan_chain_origin+0x50/0x90 [ 484.073612][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 484.078723][T15361] get_compat_msghdr+0x108/0x2b0 [ 484.083658][T15361] do_recvmmsg+0xdba/0x22c0 [ 484.088200][T15361] __sys_recvmmsg+0x5dd/0x610 [ 484.092876][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.098942][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.105095][T15361] __do_fast_syscall_32+0x2af/0x480 [ 484.110308][T15361] do_fast_syscall_32+0x6b/0xd0 [ 484.115156][T15361] do_SYSENTER_32+0x73/0x90 [ 484.119655][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.125981][T15361] [ 484.128294][T15361] Uninit was stored to memory at: [ 484.133332][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 484.139064][T15361] __msan_chain_origin+0x50/0x90 [ 484.144013][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 484.149644][T15361] get_compat_msghdr+0x108/0x2b0 [ 484.154595][T15361] do_recvmmsg+0xdba/0x22c0 [ 484.159128][T15361] __sys_recvmmsg+0x5dd/0x610 [ 484.163820][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.169931][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.176112][T15361] __do_fast_syscall_32+0x2af/0x480 [ 484.181321][T15361] do_fast_syscall_32+0x6b/0xd0 [ 484.186174][T15361] do_SYSENTER_32+0x73/0x90 [ 484.190690][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.197049][T15361] [ 484.199365][T15361] Uninit was stored to memory at: [ 484.204394][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 484.210116][T15361] __msan_chain_origin+0x50/0x90 [ 484.215057][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 484.220204][T15361] get_compat_msghdr+0x108/0x2b0 [ 484.225149][T15361] do_recvmmsg+0xdba/0x22c0 [ 484.229677][T15361] __sys_recvmmsg+0x5dd/0x610 [ 484.234384][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.240453][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.246621][T15361] __do_fast_syscall_32+0x2af/0x480 [ 484.251836][T15361] do_fast_syscall_32+0x6b/0xd0 [ 484.256711][T15361] do_SYSENTER_32+0x73/0x90 [ 484.261219][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.267542][T15361] [ 484.269880][T15361] Uninit was stored to memory at: [ 484.274929][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 484.280668][T15361] __msan_chain_origin+0x50/0x90 [ 484.285622][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 484.290736][T15361] get_compat_msghdr+0x108/0x2b0 [ 484.295680][T15361] do_recvmmsg+0xdba/0x22c0 [ 484.300276][T15361] __sys_recvmmsg+0x5dd/0x610 [ 484.304975][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.311060][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.317217][T15361] __do_fast_syscall_32+0x2af/0x480 [ 484.322436][T15361] do_fast_syscall_32+0x6b/0xd0 [ 484.327303][T15361] do_SYSENTER_32+0x73/0x90 [ 484.331811][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.338122][T15361] [ 484.340440][T15361] Uninit was stored to memory at: [ 484.345482][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 484.351205][T15361] __msan_chain_origin+0x50/0x90 [ 484.356165][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 484.361300][T15361] get_compat_msghdr+0x108/0x2b0 [ 484.366241][T15361] do_recvmmsg+0xdba/0x22c0 [ 484.370741][T15361] __sys_recvmmsg+0x5dd/0x610 [ 484.375441][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.381534][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.387711][T15361] __do_fast_syscall_32+0x2af/0x480 [ 484.392914][T15361] do_fast_syscall_32+0x6b/0xd0 [ 484.397783][T15361] do_SYSENTER_32+0x73/0x90 [ 484.402300][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.408612][T15361] [ 484.410965][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 484.417641][T15361] do_recvmmsg+0xc2/0x22c0 [ 484.422060][T15361] do_recvmmsg+0xc2/0x22c0 [ 484.640982][T15361] not chained 840000 origins [ 484.645680][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 484.654366][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.664447][T15361] Call Trace: [ 484.667774][T15361] dump_stack+0x21c/0x280 [ 484.672147][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 484.677909][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 484.683061][T15361] ? kmsan_get_metadata+0x116/0x180 [ 484.688302][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 484.694156][T15361] ? kmsan_get_metadata+0x116/0x180 [ 484.699396][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 484.705242][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 484.711355][T15361] ? kmsan_get_metadata+0x116/0x180 [ 484.716598][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 484.722182][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 484.728301][T15361] ? _copy_from_user+0x221/0x330 [ 484.733282][T15361] ? kmsan_get_metadata+0x116/0x180 [ 484.738516][T15361] __msan_chain_origin+0x50/0x90 [ 484.743492][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 484.748662][T15361] get_compat_msghdr+0x108/0x2b0 [ 484.753648][T15361] do_recvmmsg+0xdba/0x22c0 [ 484.758196][T15361] ? __msan_get_context_state+0x9/0x20 [ 484.763697][T15361] ? kmsan_get_metadata+0x116/0x180 [ 484.768940][T15361] ? kmsan_get_metadata+0x116/0x180 [ 484.774184][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 484.780117][T15361] ? kmsan_get_metadata+0x116/0x180 [ 484.785367][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 484.790689][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 484.795483][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 484.800291][T15361] __sys_recvmmsg+0x5dd/0x610 [ 484.805028][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.811242][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.817460][T15361] __do_fast_syscall_32+0x2af/0x480 [ 484.822711][T15361] do_fast_syscall_32+0x6b/0xd0 [ 484.827601][T15361] do_SYSENTER_32+0x73/0x90 [ 484.832151][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.838517][T15361] RIP: 0023:0xf7f87549 [ 484.842610][T15361] Code: Bad RIP value. [ 484.846704][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 484.855149][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 484.863152][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.871162][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.879165][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 484.887266][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.895313][T15361] Uninit was stored to memory at: [ 484.900382][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 484.906145][T15361] __msan_chain_origin+0x50/0x90 [ 484.911140][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 484.916300][T15361] get_compat_msghdr+0x108/0x2b0 [ 484.921281][T15361] do_recvmmsg+0xdba/0x22c0 [ 484.925817][T15361] __sys_recvmmsg+0x5dd/0x610 [ 484.930535][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.936646][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.942842][T15361] __do_fast_syscall_32+0x2af/0x480 [ 484.948074][T15361] do_fast_syscall_32+0x6b/0xd0 [ 484.952959][T15361] do_SYSENTER_32+0x73/0x90 [ 484.957502][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.963840][T15361] [ 484.966183][T15361] Uninit was stored to memory at: [ 484.971247][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 484.977015][T15361] __msan_chain_origin+0x50/0x90 [ 484.981990][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 484.987145][T15361] get_compat_msghdr+0x108/0x2b0 [ 484.992117][T15361] do_recvmmsg+0xdba/0x22c0 [ 484.996660][T15361] __sys_recvmmsg+0x5dd/0x610 [ 485.001365][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.007466][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.013660][T15361] __do_fast_syscall_32+0x2af/0x480 [ 485.018897][T15361] do_fast_syscall_32+0x6b/0xd0 [ 485.023786][T15361] do_SYSENTER_32+0x73/0x90 [ 485.028325][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.034665][T15361] [ 485.037003][T15361] Uninit was stored to memory at: [ 485.042064][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 485.047821][T15361] __msan_chain_origin+0x50/0x90 [ 485.052808][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 485.057954][T15361] get_compat_msghdr+0x108/0x2b0 [ 485.062929][T15361] do_recvmmsg+0xdba/0x22c0 [ 485.067460][T15361] __sys_recvmmsg+0x5dd/0x610 [ 485.072163][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.078271][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.084457][T15361] __do_fast_syscall_32+0x2af/0x480 [ 485.089687][T15361] do_fast_syscall_32+0x6b/0xd0 [ 485.094568][T15361] do_SYSENTER_32+0x73/0x90 [ 485.099099][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.105432][T15361] [ 485.107767][T15361] Uninit was stored to memory at: [ 485.112821][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 485.118569][T15361] __msan_chain_origin+0x50/0x90 [ 485.123532][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 485.128676][T15361] get_compat_msghdr+0x108/0x2b0 [ 485.133641][T15361] do_recvmmsg+0xdba/0x22c0 [ 485.138169][T15361] __sys_recvmmsg+0x5dd/0x610 [ 485.142871][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.148970][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.155167][T15361] __do_fast_syscall_32+0x2af/0x480 [ 485.160396][T15361] do_fast_syscall_32+0x6b/0xd0 [ 485.165285][T15361] do_SYSENTER_32+0x73/0x90 [ 485.169837][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.176172][T15361] [ 485.178515][T15361] Uninit was stored to memory at: [ 485.183585][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 485.189337][T15361] __msan_chain_origin+0x50/0x90 [ 485.194313][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 485.199456][T15361] get_compat_msghdr+0x108/0x2b0 [ 485.204424][T15361] do_recvmmsg+0xdba/0x22c0 [ 485.208951][T15361] __sys_recvmmsg+0x5dd/0x610 [ 485.213668][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.219764][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.225951][T15361] __do_fast_syscall_32+0x2af/0x480 [ 485.231308][T15361] do_fast_syscall_32+0x6b/0xd0 [ 485.236195][T15361] do_SYSENTER_32+0x73/0x90 [ 485.240724][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.247057][T15361] [ 485.249390][T15361] Uninit was stored to memory at: [ 485.254438][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 485.260184][T15361] __msan_chain_origin+0x50/0x90 [ 485.265157][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 485.270342][T15361] get_compat_msghdr+0x108/0x2b0 [ 485.275310][T15361] do_recvmmsg+0xdba/0x22c0 [ 485.279836][T15361] __sys_recvmmsg+0x5dd/0x610 [ 485.284541][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.290640][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.296827][T15361] __do_fast_syscall_32+0x2af/0x480 [ 485.302055][T15361] do_fast_syscall_32+0x6b/0xd0 [ 485.306932][T15361] do_SYSENTER_32+0x73/0x90 [ 485.311458][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.317790][T15361] [ 485.320126][T15361] Uninit was stored to memory at: [ 485.325180][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 485.330927][T15361] __msan_chain_origin+0x50/0x90 [ 485.335898][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 485.341036][T15361] get_compat_msghdr+0x108/0x2b0 [ 485.345994][T15361] do_recvmmsg+0xdba/0x22c0 [ 485.350520][T15361] __sys_recvmmsg+0x5dd/0x610 [ 485.355226][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.361322][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.367506][T15361] __do_fast_syscall_32+0x2af/0x480 [ 485.372732][T15361] do_fast_syscall_32+0x6b/0xd0 [ 485.377608][T15361] do_SYSENTER_32+0x73/0x90 [ 485.382141][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.388474][T15361] [ 485.390813][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 485.397511][T15361] do_recvmmsg+0xc2/0x22c0 [ 485.401952][T15361] do_recvmmsg+0xc2/0x22c0 [ 485.646111][T15361] not chained 850000 origins [ 485.650819][T15361] CPU: 1 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 485.660509][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.670573][T15361] Call Trace: [ 485.673883][T15361] dump_stack+0x21c/0x280 [ 485.678222][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 485.683985][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 485.689100][T15361] ? kmsan_get_metadata+0x116/0x180 [ 485.694446][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 485.700329][T15361] ? kmsan_get_metadata+0x116/0x180 [ 485.705564][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 485.711375][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 485.717445][T15361] ? kmsan_get_metadata+0x116/0x180 [ 485.722652][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 485.728204][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 485.734280][T15361] ? _copy_from_user+0x221/0x330 [ 485.739234][T15361] ? kmsan_get_metadata+0x116/0x180 [ 485.744455][T15361] __msan_chain_origin+0x50/0x90 [ 485.749400][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 485.754531][T15361] get_compat_msghdr+0x108/0x2b0 [ 485.759480][T15361] do_recvmmsg+0xdba/0x22c0 [ 485.764005][T15361] ? __msan_get_context_state+0x9/0x20 [ 485.769471][T15361] ? kmsan_get_metadata+0x116/0x180 [ 485.774676][T15361] ? kmsan_get_metadata+0x116/0x180 [ 485.779883][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 485.785781][T15361] ? kmsan_get_metadata+0x116/0x180 [ 485.791004][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 485.796300][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 485.801061][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 485.805829][T15361] __sys_recvmmsg+0x5dd/0x610 [ 485.810536][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.816629][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.822804][T15361] __do_fast_syscall_32+0x2af/0x480 [ 485.828030][T15361] do_fast_syscall_32+0x6b/0xd0 [ 485.832895][T15361] do_SYSENTER_32+0x73/0x90 [ 485.837402][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.843741][T15361] RIP: 0023:0xf7f87549 [ 485.847794][T15361] Code: Bad RIP value. [ 485.851852][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 485.860261][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 485.868240][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.876213][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.884207][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 485.892189][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.900187][T15361] Uninit was stored to memory at: [ 485.905224][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 485.910951][T15361] __msan_chain_origin+0x50/0x90 [ 485.915910][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 485.921020][T15361] get_compat_msghdr+0x108/0x2b0 [ 485.925973][T15361] do_recvmmsg+0xdba/0x22c0 [ 485.930474][T15361] __sys_recvmmsg+0x5dd/0x610 [ 485.935158][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.941234][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.947409][T15361] __do_fast_syscall_32+0x2af/0x480 [ 485.952612][T15361] do_fast_syscall_32+0x6b/0xd0 [ 485.957477][T15361] do_SYSENTER_32+0x73/0x90 [ 485.961990][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.968302][T15361] [ 485.970613][T15361] Uninit was stored to memory at: [ 485.975636][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 485.981377][T15361] __msan_chain_origin+0x50/0x90 [ 485.986334][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 485.991445][T15361] get_compat_msghdr+0x108/0x2b0 [ 485.996389][T15361] do_recvmmsg+0xdba/0x22c0 [ 486.000908][T15361] __sys_recvmmsg+0x5dd/0x610 [ 486.005606][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.011692][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.017851][T15361] __do_fast_syscall_32+0x2af/0x480 [ 486.023054][T15361] do_fast_syscall_32+0x6b/0xd0 [ 486.027905][T15361] do_SYSENTER_32+0x73/0x90 [ 486.032419][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.038744][T15361] [ 486.041095][T15361] Uninit was stored to memory at: [ 486.046130][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 486.051993][T15361] __msan_chain_origin+0x50/0x90 [ 486.056965][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 486.062090][T15361] get_compat_msghdr+0x108/0x2b0 [ 486.067031][T15361] do_recvmmsg+0xdba/0x22c0 [ 486.071577][T15361] __sys_recvmmsg+0x5dd/0x610 [ 486.076264][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.082364][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.088545][T15361] __do_fast_syscall_32+0x2af/0x480 [ 486.093786][T15361] do_fast_syscall_32+0x6b/0xd0 [ 486.098642][T15361] do_SYSENTER_32+0x73/0x90 [ 486.103195][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.109528][T15361] [ 486.111872][T15361] Uninit was stored to memory at: [ 486.116899][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 486.122644][T15361] __msan_chain_origin+0x50/0x90 [ 486.127582][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 486.132725][T15361] get_compat_msghdr+0x108/0x2b0 [ 486.137683][T15361] do_recvmmsg+0xdba/0x22c0 [ 486.142192][T15361] __sys_recvmmsg+0x5dd/0x610 [ 486.146897][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.152993][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.159149][T15361] __do_fast_syscall_32+0x2af/0x480 [ 486.164351][T15361] do_fast_syscall_32+0x6b/0xd0 [ 486.169206][T15361] do_SYSENTER_32+0x73/0x90 [ 486.173727][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.180064][T15361] [ 486.182390][T15361] Uninit was stored to memory at: [ 486.187423][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 486.193169][T15361] __msan_chain_origin+0x50/0x90 [ 486.198108][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 486.203240][T15361] get_compat_msghdr+0x108/0x2b0 [ 486.208188][T15361] do_recvmmsg+0xdba/0x22c0 [ 486.212703][T15361] __sys_recvmmsg+0x5dd/0x610 [ 486.217383][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.223479][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.229655][T15361] __do_fast_syscall_32+0x2af/0x480 [ 486.234855][T15361] do_fast_syscall_32+0x6b/0xd0 [ 486.239795][T15361] do_SYSENTER_32+0x73/0x90 [ 486.244308][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.250616][T15361] [ 486.252931][T15361] Uninit was stored to memory at: [ 486.257973][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 486.263707][T15361] __msan_chain_origin+0x50/0x90 [ 486.268646][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 486.273762][T15361] get_compat_msghdr+0x108/0x2b0 [ 486.278698][T15361] do_recvmmsg+0xdba/0x22c0 [ 486.283202][T15361] __sys_recvmmsg+0x5dd/0x610 [ 486.287898][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.293982][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.300179][T15361] __do_fast_syscall_32+0x2af/0x480 [ 486.305395][T15361] do_fast_syscall_32+0x6b/0xd0 [ 486.310264][T15361] do_SYSENTER_32+0x73/0x90 [ 486.314786][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.321099][T15361] [ 486.323416][T15361] Uninit was stored to memory at: [ 486.328442][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 486.334182][T15361] __msan_chain_origin+0x50/0x90 [ 486.339134][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 486.344266][T15361] get_compat_msghdr+0x108/0x2b0 [ 486.349231][T15361] do_recvmmsg+0xdba/0x22c0 [ 486.354088][T15361] __sys_recvmmsg+0x5dd/0x610 [ 486.358781][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.364892][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.371057][T15361] __do_fast_syscall_32+0x2af/0x480 [ 486.376270][T15361] do_fast_syscall_32+0x6b/0xd0 [ 486.381148][T15361] do_SYSENTER_32+0x73/0x90 [ 486.385662][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.391976][T15361] [ 486.394298][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 486.401009][T15361] do_recvmmsg+0xc2/0x22c0 [ 486.405430][T15361] do_recvmmsg+0xc2/0x22c0 [ 486.657343][T15361] not chained 860000 origins [ 486.662020][T15361] CPU: 1 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 486.670712][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.680788][T15361] Call Trace: [ 486.684132][T15361] dump_stack+0x21c/0x280 [ 486.688524][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 486.694309][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 486.699474][T15361] ? kmsan_get_metadata+0x116/0x180 [ 486.704749][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 486.710600][T15361] ? kmsan_get_metadata+0x116/0x180 [ 486.715978][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 486.722029][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 486.728138][T15361] ? kmsan_get_metadata+0x116/0x180 [ 486.733405][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 486.739005][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 486.745142][T15361] ? _copy_from_user+0x221/0x330 [ 486.750124][T15361] ? kmsan_get_metadata+0x116/0x180 [ 486.755397][T15361] __msan_chain_origin+0x50/0x90 [ 486.760400][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 486.765588][T15361] get_compat_msghdr+0x108/0x2b0 [ 486.770580][T15361] do_recvmmsg+0xdba/0x22c0 [ 486.775132][T15361] ? __msan_get_context_state+0x9/0x20 [ 486.780644][T15361] ? kmsan_get_metadata+0x116/0x180 [ 486.785900][T15361] ? kmsan_get_metadata+0x116/0x180 [ 486.791172][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 486.797114][T15361] ? kmsan_get_metadata+0x116/0x180 [ 486.802383][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 486.807712][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 486.813190][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 486.818000][T15361] __sys_recvmmsg+0x5dd/0x610 [ 486.822747][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.828900][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.835098][T15361] __do_fast_syscall_32+0x2af/0x480 [ 486.840359][T15361] do_fast_syscall_32+0x6b/0xd0 [ 486.845258][T15361] do_SYSENTER_32+0x73/0x90 [ 486.849804][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.856177][T15361] RIP: 0023:0xf7f87549 [ 486.860256][T15361] Code: Bad RIP value. [ 486.864343][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 486.872795][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 486.880811][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.888931][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.897042][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 486.905037][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.913059][T15361] Uninit was stored to memory at: [ 486.918125][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 486.923863][T15361] __msan_chain_origin+0x50/0x90 [ 486.928873][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 486.933992][T15361] get_compat_msghdr+0x108/0x2b0 [ 486.938934][T15361] do_recvmmsg+0xdba/0x22c0 [ 486.943454][T15361] __sys_recvmmsg+0x5dd/0x610 [ 486.948201][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.954331][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.960507][T15361] __do_fast_syscall_32+0x2af/0x480 [ 486.965709][T15361] do_fast_syscall_32+0x6b/0xd0 [ 486.970596][T15361] do_SYSENTER_32+0x73/0x90 [ 486.975104][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.982668][T15361] [ 486.985012][T15361] Uninit was stored to memory at: [ 486.990100][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 486.995889][T15361] __msan_chain_origin+0x50/0x90 [ 487.000836][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 487.005991][T15361] get_compat_msghdr+0x108/0x2b0 [ 487.010934][T15361] do_recvmmsg+0xdba/0x22c0 [ 487.015455][T15361] __sys_recvmmsg+0x5dd/0x610 [ 487.020293][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.026381][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.032581][T15361] __do_fast_syscall_32+0x2af/0x480 [ 487.037813][T15361] do_fast_syscall_32+0x6b/0xd0 [ 487.042690][T15361] do_SYSENTER_32+0x73/0x90 [ 487.047213][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.053547][T15361] [ 487.055864][T15361] Uninit was stored to memory at: [ 487.060920][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 487.066697][T15361] __msan_chain_origin+0x50/0x90 [ 487.071670][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 487.076802][T15361] get_compat_msghdr+0x108/0x2b0 [ 487.081764][T15361] do_recvmmsg+0xdba/0x22c0 [ 487.086329][T15361] __sys_recvmmsg+0x5dd/0x610 [ 487.091035][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.097121][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.103305][T15361] __do_fast_syscall_32+0x2af/0x480 [ 487.108561][T15361] do_fast_syscall_32+0x6b/0xd0 [ 487.113450][T15361] do_SYSENTER_32+0x73/0x90 [ 487.117963][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.124297][T15361] [ 487.126757][T15361] Uninit was stored to memory at: [ 487.131924][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 487.137699][T15361] __msan_chain_origin+0x50/0x90 [ 487.142652][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 487.147768][T15361] get_compat_msghdr+0x108/0x2b0 [ 487.152910][T15361] do_recvmmsg+0xdba/0x22c0 [ 487.157478][T15361] __sys_recvmmsg+0x5dd/0x610 [ 487.162236][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.168336][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.174643][T15361] __do_fast_syscall_32+0x2af/0x480 [ 487.179857][T15361] do_fast_syscall_32+0x6b/0xd0 [ 487.184779][T15361] do_SYSENTER_32+0x73/0x90 [ 487.189291][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.195654][T15361] [ 487.198004][T15361] Uninit was stored to memory at: [ 487.203071][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 487.208817][T15361] __msan_chain_origin+0x50/0x90 [ 487.213775][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 487.218972][T15361] get_compat_msghdr+0x108/0x2b0 [ 487.223930][T15361] do_recvmmsg+0xdba/0x22c0 [ 487.228456][T15361] __sys_recvmmsg+0x5dd/0x610 [ 487.233155][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.239260][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.245431][T15361] __do_fast_syscall_32+0x2af/0x480 [ 487.250641][T15361] do_fast_syscall_32+0x6b/0xd0 [ 487.255520][T15361] do_SYSENTER_32+0x73/0x90 [ 487.260046][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.266370][T15361] [ 487.268699][T15361] Uninit was stored to memory at: [ 487.273763][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 487.279502][T15361] __msan_chain_origin+0x50/0x90 [ 487.284467][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 487.289628][T15361] get_compat_msghdr+0x108/0x2b0 [ 487.294633][T15361] do_recvmmsg+0xdba/0x22c0 [ 487.299151][T15361] __sys_recvmmsg+0x5dd/0x610 [ 487.303858][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.309956][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.316146][T15361] __do_fast_syscall_32+0x2af/0x480 [ 487.321366][T15361] do_fast_syscall_32+0x6b/0xd0 [ 487.326436][T15361] do_SYSENTER_32+0x73/0x90 [ 487.330962][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.337296][T15361] [ 487.339622][T15361] Uninit was stored to memory at: [ 487.344703][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 487.350484][T15361] __msan_chain_origin+0x50/0x90 [ 487.355434][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 487.360561][T15361] get_compat_msghdr+0x108/0x2b0 [ 487.365516][T15361] do_recvmmsg+0xdba/0x22c0 [ 487.370048][T15361] __sys_recvmmsg+0x5dd/0x610 [ 487.374772][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.380856][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.387038][T15361] __do_fast_syscall_32+0x2af/0x480 [ 487.392275][T15361] do_fast_syscall_32+0x6b/0xd0 [ 487.397152][T15361] do_SYSENTER_32+0x73/0x90 [ 487.401666][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.408024][T15361] [ 487.410361][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 487.417146][T15361] do_recvmmsg+0xc2/0x22c0 [ 487.421624][T15361] do_recvmmsg+0xc2/0x22c0 [ 487.647123][T15361] not chained 870000 origins [ 487.651806][T15361] CPU: 1 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 487.660509][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.670628][T15361] Call Trace: [ 487.673970][T15361] dump_stack+0x21c/0x280 [ 487.678400][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 487.684170][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 487.689375][T15361] ? kmsan_get_metadata+0x116/0x180 [ 487.694613][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 487.700460][T15361] ? kmsan_get_metadata+0x116/0x180 [ 487.705683][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 487.711511][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 487.717599][T15361] ? kmsan_get_metadata+0x116/0x180 [ 487.722817][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 487.728388][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 487.734477][T15361] ? _copy_from_user+0x221/0x330 [ 487.739434][T15361] ? kmsan_get_metadata+0x116/0x180 [ 487.744650][T15361] __msan_chain_origin+0x50/0x90 [ 487.749607][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 487.754767][T15361] get_compat_msghdr+0x108/0x2b0 [ 487.759733][T15361] do_recvmmsg+0xdba/0x22c0 [ 487.764253][T15361] ? __msan_get_context_state+0x9/0x20 [ 487.769779][T15361] ? kmsan_get_metadata+0x116/0x180 [ 487.775046][T15361] ? kmsan_get_metadata+0x116/0x180 [ 487.780314][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 487.786265][T15361] ? kmsan_get_metadata+0x116/0x180 [ 487.791569][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 487.796976][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 487.801828][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 487.807908][T15361] __sys_recvmmsg+0x5dd/0x610 [ 487.812665][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.818839][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.825032][T15361] __do_fast_syscall_32+0x2af/0x480 [ 487.830296][T15361] do_fast_syscall_32+0x6b/0xd0 [ 487.835180][T15361] do_SYSENTER_32+0x73/0x90 [ 487.839728][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.846150][T15361] RIP: 0023:0xf7f87549 [ 487.850227][T15361] Code: Bad RIP value. [ 487.854302][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 487.862739][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 487.870729][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.878844][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.886826][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 487.894806][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.902811][T15361] Uninit was stored to memory at: [ 487.907857][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 487.913581][T15361] __msan_chain_origin+0x50/0x90 [ 487.918558][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 487.923694][T15361] get_compat_msghdr+0x108/0x2b0 [ 487.928640][T15361] do_recvmmsg+0xdba/0x22c0 [ 487.933153][T15361] __sys_recvmmsg+0x5dd/0x610 [ 487.937866][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.943970][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.950146][T15361] __do_fast_syscall_32+0x2af/0x480 [ 487.955361][T15361] do_fast_syscall_32+0x6b/0xd0 [ 487.960222][T15361] do_SYSENTER_32+0x73/0x90 [ 487.964743][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.971066][T15361] [ 487.973393][T15361] Uninit was stored to memory at: [ 487.978431][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 487.984205][T15361] __msan_chain_origin+0x50/0x90 [ 487.989178][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 487.994302][T15361] get_compat_msghdr+0x108/0x2b0 [ 487.999250][T15361] do_recvmmsg+0xdba/0x22c0 [ 488.003772][T15361] __sys_recvmmsg+0x5dd/0x610 [ 488.008465][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.014561][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.020744][T15361] __do_fast_syscall_32+0x2af/0x480 [ 488.025965][T15361] do_fast_syscall_32+0x6b/0xd0 [ 488.030834][T15361] do_SYSENTER_32+0x73/0x90 [ 488.035339][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.041670][T15361] [ 488.043990][T15361] Uninit was stored to memory at: [ 488.049022][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 488.054765][T15361] __msan_chain_origin+0x50/0x90 [ 488.059737][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 488.064870][T15361] get_compat_msghdr+0x108/0x2b0 [ 488.069825][T15361] do_recvmmsg+0xdba/0x22c0 [ 488.074337][T15361] __sys_recvmmsg+0x5dd/0x610 [ 488.079029][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.085142][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.091309][T15361] __do_fast_syscall_32+0x2af/0x480 [ 488.096543][T15361] do_fast_syscall_32+0x6b/0xd0 [ 488.101423][T15361] do_SYSENTER_32+0x73/0x90 [ 488.105992][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.112336][T15361] [ 488.114658][T15361] Uninit was stored to memory at: [ 488.119737][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 488.125487][T15361] __msan_chain_origin+0x50/0x90 [ 488.130440][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 488.135607][T15361] get_compat_msghdr+0x108/0x2b0 [ 488.140573][T15361] do_recvmmsg+0xdba/0x22c0 [ 488.145108][T15361] __sys_recvmmsg+0x5dd/0x610 [ 488.149829][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.155926][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.162157][T15361] __do_fast_syscall_32+0x2af/0x480 [ 488.167447][T15361] do_fast_syscall_32+0x6b/0xd0 [ 488.172329][T15361] do_SYSENTER_32+0x73/0x90 [ 488.176851][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.183168][T15361] [ 488.185495][T15361] Uninit was stored to memory at: [ 488.190549][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 488.196299][T15361] __msan_chain_origin+0x50/0x90 [ 488.201261][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 488.206392][T15361] get_compat_msghdr+0x108/0x2b0 [ 488.211347][T15361] do_recvmmsg+0xdba/0x22c0 [ 488.215882][T15361] __sys_recvmmsg+0x5dd/0x610 [ 488.220601][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.226710][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.232896][T15361] __do_fast_syscall_32+0x2af/0x480 [ 488.238107][T15361] do_fast_syscall_32+0x6b/0xd0 [ 488.242974][T15361] do_SYSENTER_32+0x73/0x90 [ 488.247488][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.253824][T15361] [ 488.256171][T15361] Uninit was stored to memory at: [ 488.261246][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 488.267000][T15361] __msan_chain_origin+0x50/0x90 [ 488.271971][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 488.277099][T15361] get_compat_msghdr+0x108/0x2b0 [ 488.282053][T15361] do_recvmmsg+0xdba/0x22c0 [ 488.286586][T15361] __sys_recvmmsg+0x5dd/0x610 [ 488.291267][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.297354][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.303707][T15361] __do_fast_syscall_32+0x2af/0x480 [ 488.309016][T15361] do_fast_syscall_32+0x6b/0xd0 [ 488.313885][T15361] do_SYSENTER_32+0x73/0x90 [ 488.318418][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.324733][T15361] [ 488.327052][T15361] Uninit was stored to memory at: [ 488.332131][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 488.337905][T15361] __msan_chain_origin+0x50/0x90 [ 488.342847][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 488.347963][T15361] get_compat_msghdr+0x108/0x2b0 [ 488.352911][T15361] do_recvmmsg+0xdba/0x22c0 [ 488.357460][T15361] __sys_recvmmsg+0x5dd/0x610 [ 488.362198][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.368359][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.374554][T15361] __do_fast_syscall_32+0x2af/0x480 [ 488.379773][T15361] do_fast_syscall_32+0x6b/0xd0 [ 488.384648][T15361] do_SYSENTER_32+0x73/0x90 [ 488.389162][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.395480][T15361] [ 488.397828][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 488.404549][T15361] do_recvmmsg+0xc2/0x22c0 [ 488.409031][T15361] do_recvmmsg+0xc2/0x22c0 [ 488.655666][T15361] not chained 880000 origins [ 488.660402][T15361] CPU: 1 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 488.669191][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.679274][T15361] Call Trace: [ 488.682606][T15361] dump_stack+0x21c/0x280 [ 488.686984][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 488.692753][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 488.697916][T15361] ? kmsan_get_metadata+0x116/0x180 [ 488.703191][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 488.709059][T15361] ? kmsan_get_metadata+0x116/0x180 [ 488.714317][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 488.720184][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 488.726338][T15361] ? kmsan_get_metadata+0x116/0x180 [ 488.731606][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 488.737210][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 488.743337][T15361] ? _copy_from_user+0x221/0x330 [ 488.748319][T15361] ? kmsan_get_metadata+0x116/0x180 [ 488.753578][T15361] __msan_chain_origin+0x50/0x90 [ 488.758611][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 488.763794][T15361] get_compat_msghdr+0x108/0x2b0 [ 488.768802][T15361] do_recvmmsg+0xdba/0x22c0 [ 488.773371][T15361] ? __msan_get_context_state+0x9/0x20 [ 488.778893][T15361] ? kmsan_get_metadata+0x116/0x180 [ 488.784147][T15361] ? kmsan_get_metadata+0x116/0x180 [ 488.789457][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 488.795406][T15361] ? kmsan_get_metadata+0x116/0x180 [ 488.800663][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 488.806007][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 488.810818][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 488.815660][T15361] __sys_recvmmsg+0x5dd/0x610 [ 488.820451][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.826590][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.832792][T15361] __do_fast_syscall_32+0x2af/0x480 [ 488.838052][T15361] do_fast_syscall_32+0x6b/0xd0 [ 488.842985][T15361] do_SYSENTER_32+0x73/0x90 [ 488.847542][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.853908][T15361] RIP: 0023:0xf7f87549 [ 488.857993][T15361] Code: Bad RIP value. [ 488.862084][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 488.870538][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 488.878559][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.886594][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.894581][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 488.902567][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.910568][T15361] Uninit was stored to memory at: [ 488.915618][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 488.921353][T15361] __msan_chain_origin+0x50/0x90 [ 488.926320][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 488.931457][T15361] get_compat_msghdr+0x108/0x2b0 [ 488.936415][T15361] do_recvmmsg+0xdba/0x22c0 [ 488.940938][T15361] __sys_recvmmsg+0x5dd/0x610 [ 488.945665][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.951743][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.957926][T15361] __do_fast_syscall_32+0x2af/0x480 [ 488.963201][T15361] do_fast_syscall_32+0x6b/0xd0 [ 488.968087][T15361] do_SYSENTER_32+0x73/0x90 [ 488.972635][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.978986][T15361] [ 488.981325][T15361] Uninit was stored to memory at: [ 488.986366][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 488.992138][T15361] __msan_chain_origin+0x50/0x90 [ 488.997109][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 489.002244][T15361] get_compat_msghdr+0x108/0x2b0 [ 489.007195][T15361] do_recvmmsg+0xdba/0x22c0 [ 489.011711][T15361] __sys_recvmmsg+0x5dd/0x610 [ 489.016403][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 489.022514][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 489.028714][T15361] __do_fast_syscall_32+0x2af/0x480 [ 489.033932][T15361] do_fast_syscall_32+0x6b/0xd0 [ 489.038798][T15361] do_SYSENTER_32+0x73/0x90 [ 489.043320][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.049667][T15361] [ 489.052022][T15361] Uninit was stored to memory at: [ 489.057069][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 489.062821][T15361] __msan_chain_origin+0x50/0x90 [ 489.067798][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 489.072953][T15361] get_compat_msghdr+0x108/0x2b0 [ 489.077924][T15361] do_recvmmsg+0xdba/0x22c0 [ 489.082515][T15361] __sys_recvmmsg+0x5dd/0x610 [ 489.087255][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 489.093347][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 489.099512][T15361] __do_fast_syscall_32+0x2af/0x480 [ 489.104738][T15361] do_fast_syscall_32+0x6b/0xd0 [ 489.109856][T15361] do_SYSENTER_32+0x73/0x90 [ 489.114403][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.120736][T15361] [ 489.123077][T15361] Uninit was stored to memory at: [ 489.128129][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 489.133879][T15361] __msan_chain_origin+0x50/0x90 [ 489.138843][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 489.144006][T15361] get_compat_msghdr+0x108/0x2b0 [ 489.148962][T15361] do_recvmmsg+0xdba/0x22c0 [ 489.153477][T15361] __sys_recvmmsg+0x5dd/0x610 [ 489.158169][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 489.164261][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 489.170443][T15361] __do_fast_syscall_32+0x2af/0x480 [ 489.175653][T15361] do_fast_syscall_32+0x6b/0xd0 [ 489.180546][T15361] do_SYSENTER_32+0x73/0x90 [ 489.185085][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.191403][T15361] [ 489.193742][T15361] Uninit was stored to memory at: [ 489.198800][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 489.204546][T15361] __msan_chain_origin+0x50/0x90 [ 489.209492][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 489.214633][T15361] get_compat_msghdr+0x108/0x2b0 [ 489.219606][T15361] do_recvmmsg+0xdba/0x22c0 [ 489.224127][T15361] __sys_recvmmsg+0x5dd/0x610 [ 489.228822][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 489.234918][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 489.241095][T15361] __do_fast_syscall_32+0x2af/0x480 [ 489.246316][T15361] do_fast_syscall_32+0x6b/0xd0 [ 489.251184][T15361] do_SYSENTER_32+0x73/0x90 [ 489.255713][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.262033][T15361] [ 489.264365][T15361] Uninit was stored to memory at: [ 489.269416][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 489.275173][T15361] __msan_chain_origin+0x50/0x90 [ 489.280139][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 489.285265][T15361] get_compat_msghdr+0x108/0x2b0 [ 489.290221][T15361] do_recvmmsg+0xdba/0x22c0 [ 489.294751][T15361] __sys_recvmmsg+0x5dd/0x610 [ 489.299461][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 489.305648][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 489.311832][T15361] __do_fast_syscall_32+0x2af/0x480 [ 489.317058][T15361] do_fast_syscall_32+0x6b/0xd0 [ 489.321918][T15361] do_SYSENTER_32+0x73/0x90 [ 489.326447][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.332779][T15361] [ 489.335119][T15361] Uninit was stored to memory at: [ 489.340204][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 489.345943][T15361] __msan_chain_origin+0x50/0x90 [ 489.350937][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 489.356069][T15361] get_compat_msghdr+0x108/0x2b0 [ 489.361037][T15361] do_recvmmsg+0xdba/0x22c0 [ 489.365560][T15361] __sys_recvmmsg+0x5dd/0x610 [ 489.370249][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 489.376324][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 489.382527][T15361] __do_fast_syscall_32+0x2af/0x480 [ 489.387757][T15361] do_fast_syscall_32+0x6b/0xd0 [ 489.392668][T15361] do_SYSENTER_32+0x73/0x90 [ 489.397243][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.403568][T15361] [ 489.405931][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 489.412638][T15361] do_recvmmsg+0xc2/0x22c0 [ 489.417066][T15361] do_recvmmsg+0xc2/0x22c0 [ 489.718463][T15361] not chained 890000 origins [ 489.723140][T15361] CPU: 1 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 489.731839][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.741919][T15361] Call Trace: [ 489.745302][T15361] dump_stack+0x21c/0x280 [ 489.749689][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 489.755467][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 489.760613][T15361] ? kmsan_get_metadata+0x116/0x180 [ 489.765847][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 489.771674][T15361] ? kmsan_get_metadata+0x116/0x180 [ 489.776893][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 489.782718][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 489.788810][T15361] ? kmsan_get_metadata+0x116/0x180 [ 489.794145][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 489.799744][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 489.805897][T15361] ? _copy_from_user+0x221/0x330 [ 489.810868][T15361] ? kmsan_get_metadata+0x116/0x180 [ 489.816118][T15361] __msan_chain_origin+0x50/0x90 [ 489.821099][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 489.826307][T15361] get_compat_msghdr+0x108/0x2b0 [ 489.831319][T15361] do_recvmmsg+0xdba/0x22c0 [ 489.835852][T15361] ? __msan_get_context_state+0x9/0x20 [ 489.841337][T15361] ? kmsan_get_metadata+0x116/0x180 [ 489.846684][T15361] ? kmsan_get_metadata+0x116/0x180 [ 489.851912][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 489.857828][T15361] ? kmsan_get_metadata+0x116/0x180 [ 489.863043][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 489.868377][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 489.873158][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 489.877935][T15361] __sys_recvmmsg+0x5dd/0x610 [ 489.882664][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 489.888757][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 489.894942][T15361] __do_fast_syscall_32+0x2af/0x480 [ 489.900199][T15361] do_fast_syscall_32+0x6b/0xd0 [ 489.905095][T15361] do_SYSENTER_32+0x73/0x90 [ 489.909650][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.916032][T15361] RIP: 0023:0xf7f87549 [ 489.920096][T15361] Code: Bad RIP value. [ 489.924192][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 489.932634][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 489.940651][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.948634][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.956622][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 489.964593][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.972583][T15361] Uninit was stored to memory at: [ 489.977621][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 489.983362][T15361] __msan_chain_origin+0x50/0x90 [ 489.988370][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 489.993518][T15361] get_compat_msghdr+0x108/0x2b0 [ 489.998476][T15361] do_recvmmsg+0xdba/0x22c0 [ 490.002998][T15361] __sys_recvmmsg+0x5dd/0x610 [ 490.007730][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 490.013858][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 490.020072][T15361] __do_fast_syscall_32+0x2af/0x480 [ 490.025335][T15361] do_fast_syscall_32+0x6b/0xd0 [ 490.030215][T15361] do_SYSENTER_32+0x73/0x90 [ 490.034742][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.041057][T15361] [ 490.043395][T15361] Uninit was stored to memory at: [ 490.048445][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 490.054246][T15361] __msan_chain_origin+0x50/0x90 [ 490.059222][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 490.064343][T15361] get_compat_msghdr+0x108/0x2b0 [ 490.069342][T15361] do_recvmmsg+0xdba/0x22c0 [ 490.073869][T15361] __sys_recvmmsg+0x5dd/0x610 [ 490.078570][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 490.084863][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 490.091048][T15361] __do_fast_syscall_32+0x2af/0x480 [ 490.096285][T15361] do_fast_syscall_32+0x6b/0xd0 [ 490.101178][T15361] do_SYSENTER_32+0x73/0x90 [ 490.105696][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.112034][T15361] [ 490.114384][T15361] Uninit was stored to memory at: [ 490.119454][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 490.125220][T15361] __msan_chain_origin+0x50/0x90 [ 490.130196][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 490.135320][T15361] get_compat_msghdr+0x108/0x2b0 [ 490.140270][T15361] do_recvmmsg+0xdba/0x22c0 [ 490.144794][T15361] __sys_recvmmsg+0x5dd/0x610 [ 490.149484][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 490.155599][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 490.161808][T15361] __do_fast_syscall_32+0x2af/0x480 [ 490.167032][T15361] do_fast_syscall_32+0x6b/0xd0 [ 490.171914][T15361] do_SYSENTER_32+0x73/0x90 [ 490.176463][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.182786][T15361] [ 490.185110][T15361] Uninit was stored to memory at: [ 490.190184][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 490.195938][T15361] __msan_chain_origin+0x50/0x90 [ 490.201423][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 490.206576][T15361] get_compat_msghdr+0x108/0x2b0 [ 490.211546][T15361] do_recvmmsg+0xdba/0x22c0 [ 490.216067][T15361] __sys_recvmmsg+0x5dd/0x610 [ 490.220824][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 490.226929][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 490.233107][T15361] __do_fast_syscall_32+0x2af/0x480 [ 490.238351][T15361] do_fast_syscall_32+0x6b/0xd0 [ 490.243254][T15361] do_SYSENTER_32+0x73/0x90 [ 490.247802][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.254141][T15361] [ 490.256471][T15361] Uninit was stored to memory at: [ 490.261538][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 490.267268][T15361] __msan_chain_origin+0x50/0x90 [ 490.272218][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 490.277344][T15361] get_compat_msghdr+0x108/0x2b0 [ 490.282304][T15361] do_recvmmsg+0xdba/0x22c0 [ 490.286863][T15361] __sys_recvmmsg+0x5dd/0x610 [ 490.291563][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 490.297694][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 490.303876][T15361] __do_fast_syscall_32+0x2af/0x480 [ 490.309117][T15361] do_fast_syscall_32+0x6b/0xd0 [ 490.313994][T15361] do_SYSENTER_32+0x73/0x90 [ 490.318538][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.325051][T15361] [ 490.327381][T15361] Uninit was stored to memory at: [ 490.332571][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 490.338320][T15361] __msan_chain_origin+0x50/0x90 [ 490.343279][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 490.348403][T15361] get_compat_msghdr+0x108/0x2b0 [ 490.353365][T15361] do_recvmmsg+0xdba/0x22c0 [ 490.357902][T15361] __sys_recvmmsg+0x5dd/0x610 [ 490.362610][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 490.368735][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 490.374944][T15361] __do_fast_syscall_32+0x2af/0x480 [ 490.380200][T15361] do_fast_syscall_32+0x6b/0xd0 [ 490.385066][T15361] do_SYSENTER_32+0x73/0x90 [ 490.389598][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.395915][T15361] [ 490.398248][T15361] Uninit was stored to memory at: [ 490.403320][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 490.409084][T15361] __msan_chain_origin+0x50/0x90 [ 490.414081][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 490.419208][T15361] get_compat_msghdr+0x108/0x2b0 [ 490.424169][T15361] do_recvmmsg+0xdba/0x22c0 [ 490.428688][T15361] __sys_recvmmsg+0x5dd/0x610 [ 490.433406][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 490.439503][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 490.445674][T15361] __do_fast_syscall_32+0x2af/0x480 [ 490.450893][T15361] do_fast_syscall_32+0x6b/0xd0 [ 490.455768][T15361] do_SYSENTER_32+0x73/0x90 [ 490.460332][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.466654][T15361] [ 490.468998][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 490.475677][T15361] do_recvmmsg+0xc2/0x22c0 [ 490.480125][T15361] do_recvmmsg+0xc2/0x22c0 [ 490.764176][T15361] not chained 900000 origins [ 490.768909][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 490.777609][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.787698][T15361] Call Trace: [ 490.791098][T15361] dump_stack+0x21c/0x280 [ 490.795518][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 490.801363][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 490.806545][T15361] ? kmsan_get_metadata+0x116/0x180 [ 490.811803][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 490.817657][T15361] ? kmsan_get_metadata+0x116/0x180 [ 490.822905][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 490.828760][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 490.834889][T15361] ? kmsan_get_metadata+0x116/0x180 [ 490.840142][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 490.845744][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 490.851874][T15361] ? _copy_from_user+0x221/0x330 [ 490.856872][T15361] ? kmsan_get_metadata+0x116/0x180 [ 490.862119][T15361] __msan_chain_origin+0x50/0x90 [ 490.867114][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 490.872303][T15361] get_compat_msghdr+0x108/0x2b0 [ 490.877299][T15361] do_recvmmsg+0xdba/0x22c0 [ 490.881892][T15361] ? __msan_get_context_state+0x9/0x20 [ 490.887421][T15361] ? kmsan_get_metadata+0x116/0x180 [ 490.892670][T15361] ? kmsan_get_metadata+0x116/0x180 [ 490.897916][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 490.903869][T15361] ? kmsan_get_metadata+0x116/0x180 [ 490.909123][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 490.914483][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 490.919294][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 490.924101][T15361] __sys_recvmmsg+0x5dd/0x610 [ 490.928852][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 490.934982][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 490.941198][T15361] __do_fast_syscall_32+0x2af/0x480 [ 490.946472][T15361] do_fast_syscall_32+0x6b/0xd0 [ 490.951393][T15361] do_SYSENTER_32+0x73/0x90 [ 490.955993][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.962355][T15361] RIP: 0023:0xf7f87549 [ 490.966448][T15361] Code: Bad RIP value. [ 490.970547][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 490.979000][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 490.986996][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.994996][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.003004][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 491.011004][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.019017][T15361] Uninit was stored to memory at: [ 491.024081][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 491.029849][T15361] __msan_chain_origin+0x50/0x90 [ 491.034835][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 491.040004][T15361] get_compat_msghdr+0x108/0x2b0 [ 491.045015][T15361] do_recvmmsg+0xdba/0x22c0 [ 491.049595][T15361] __sys_recvmmsg+0x5dd/0x610 [ 491.054316][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 491.060422][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 491.066614][T15361] __do_fast_syscall_32+0x2af/0x480 [ 491.071855][T15361] do_fast_syscall_32+0x6b/0xd0 [ 491.076746][T15361] do_SYSENTER_32+0x73/0x90 [ 491.082655][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.089003][T15361] [ 491.091356][T15361] Uninit was stored to memory at: [ 491.096430][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 491.102182][T15361] __msan_chain_origin+0x50/0x90 [ 491.107127][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 491.112345][T15361] get_compat_msghdr+0x108/0x2b0 [ 491.117292][T15361] do_recvmmsg+0xdba/0x22c0 [ 491.121845][T15361] __sys_recvmmsg+0x5dd/0x610 [ 491.126557][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 491.132682][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 491.138866][T15361] __do_fast_syscall_32+0x2af/0x480 [ 491.144097][T15361] do_fast_syscall_32+0x6b/0xd0 [ 491.148971][T15361] do_SYSENTER_32+0x73/0x90 [ 491.153508][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.159854][T15361] [ 491.162199][T15361] Uninit was stored to memory at: [ 491.167236][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 491.172987][T15361] __msan_chain_origin+0x50/0x90 [ 491.177952][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 491.183195][T15361] get_compat_msghdr+0x108/0x2b0 [ 491.188169][T15361] do_recvmmsg+0xdba/0x22c0 [ 491.192708][T15361] __sys_recvmmsg+0x5dd/0x610 [ 491.197460][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 491.203604][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 491.209844][T15361] __do_fast_syscall_32+0x2af/0x480 [ 491.215086][T15361] do_fast_syscall_32+0x6b/0xd0 [ 491.219967][T15361] do_SYSENTER_32+0x73/0x90 [ 491.224558][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.230891][T15361] [ 491.233244][T15361] Uninit was stored to memory at: [ 491.238320][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 491.244082][T15361] __msan_chain_origin+0x50/0x90 [ 491.249063][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 491.254240][T15361] get_compat_msghdr+0x108/0x2b0 [ 491.259257][T15361] do_recvmmsg+0xdba/0x22c0 [ 491.263794][T15361] __sys_recvmmsg+0x5dd/0x610 [ 491.268497][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 491.274600][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 491.280787][T15361] __do_fast_syscall_32+0x2af/0x480 [ 491.286011][T15361] do_fast_syscall_32+0x6b/0xd0 [ 491.290908][T15361] do_SYSENTER_32+0x73/0x90 [ 491.295464][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.301805][T15361] [ 491.304142][T15361] Uninit was stored to memory at: [ 491.309179][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 491.314935][T15361] __msan_chain_origin+0x50/0x90 [ 491.319910][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 491.325141][T15361] get_compat_msghdr+0x108/0x2b0 [ 491.330114][T15361] do_recvmmsg+0xdba/0x22c0 [ 491.334643][T15361] __sys_recvmmsg+0x5dd/0x610 [ 491.339371][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 491.345458][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 491.351625][T15361] __do_fast_syscall_32+0x2af/0x480 [ 491.356867][T15361] do_fast_syscall_32+0x6b/0xd0 [ 491.361763][T15361] do_SYSENTER_32+0x73/0x90 [ 491.366326][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.372657][T15361] [ 491.375012][T15361] Uninit was stored to memory at: [ 491.380119][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 491.385890][T15361] __msan_chain_origin+0x50/0x90 [ 491.390875][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 491.396019][T15361] get_compat_msghdr+0x108/0x2b0 [ 491.400968][T15361] do_recvmmsg+0xdba/0x22c0 [ 491.405503][T15361] __sys_recvmmsg+0x5dd/0x610 [ 491.410214][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 491.416396][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 491.422581][T15361] __do_fast_syscall_32+0x2af/0x480 [ 491.427905][T15361] do_fast_syscall_32+0x6b/0xd0 [ 491.432803][T15361] do_SYSENTER_32+0x73/0x90 [ 491.437325][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.443641][T15361] [ 491.445970][T15361] Uninit was stored to memory at: [ 491.451014][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 491.456747][T15361] __msan_chain_origin+0x50/0x90 [ 491.461782][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 491.466930][T15361] get_compat_msghdr+0x108/0x2b0 [ 491.471905][T15361] do_recvmmsg+0xdba/0x22c0 [ 491.476472][T15361] __sys_recvmmsg+0x5dd/0x610 [ 491.481170][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 491.487294][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 491.493494][T15361] __do_fast_syscall_32+0x2af/0x480 [ 491.498727][T15361] do_fast_syscall_32+0x6b/0xd0 [ 491.503612][T15361] do_SYSENTER_32+0x73/0x90 [ 491.508143][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.514495][T15361] [ 491.516861][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 491.523544][T15361] do_recvmmsg+0xc2/0x22c0 [ 491.528039][T15361] do_recvmmsg+0xc2/0x22c0 [ 491.777960][T15361] not chained 910000 origins [ 491.782645][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 491.791344][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.801430][T15361] Call Trace: [ 491.804771][T15361] dump_stack+0x21c/0x280 [ 491.809173][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 491.814970][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 491.820160][T15361] ? kmsan_get_metadata+0x116/0x180 [ 491.825429][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 491.831284][T15361] ? kmsan_get_metadata+0x116/0x180 [ 491.836527][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 491.842380][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 491.848507][T15361] ? kmsan_get_metadata+0x116/0x180 [ 491.853750][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 491.859340][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 491.865486][T15361] ? _copy_from_user+0x221/0x330 [ 491.870516][T15361] ? kmsan_get_metadata+0x116/0x180 [ 491.875762][T15361] __msan_chain_origin+0x50/0x90 [ 491.880787][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 491.885972][T15361] get_compat_msghdr+0x108/0x2b0 [ 491.890987][T15361] do_recvmmsg+0xdba/0x22c0 [ 491.895568][T15361] ? __msan_get_context_state+0x9/0x20 [ 491.901116][T15361] ? kmsan_get_metadata+0x116/0x180 [ 491.906384][T15361] ? kmsan_get_metadata+0x116/0x180 [ 491.911662][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 491.917625][T15361] ? kmsan_get_metadata+0x116/0x180 [ 491.922882][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 491.928237][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 491.933046][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 491.937869][T15361] __sys_recvmmsg+0x5dd/0x610 [ 491.942613][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 491.948787][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 491.954972][T15361] __do_fast_syscall_32+0x2af/0x480 [ 491.960212][T15361] do_fast_syscall_32+0x6b/0xd0 [ 491.965113][T15361] do_SYSENTER_32+0x73/0x90 [ 491.969724][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.976070][T15361] RIP: 0023:0xf7f87549 [ 491.980173][T15361] Code: Bad RIP value. [ 491.984288][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 491.992737][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 492.000727][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.008729][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.016714][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 492.024707][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.032723][T15361] Uninit was stored to memory at: [ 492.037807][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 492.043582][T15361] __msan_chain_origin+0x50/0x90 [ 492.048547][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 492.053689][T15361] get_compat_msghdr+0x108/0x2b0 [ 492.058672][T15361] do_recvmmsg+0xdba/0x22c0 [ 492.063228][T15361] __sys_recvmmsg+0x5dd/0x610 [ 492.067955][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 492.074032][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 492.080218][T15361] __do_fast_syscall_32+0x2af/0x480 [ 492.085445][T15361] do_fast_syscall_32+0x6b/0xd0 [ 492.090316][T15361] do_SYSENTER_32+0x73/0x90 [ 492.094833][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 492.101156][T15361] [ 492.103491][T15361] Uninit was stored to memory at: [ 492.108537][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 492.114270][T15361] __msan_chain_origin+0x50/0x90 [ 492.119242][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 492.124386][T15361] get_compat_msghdr+0x108/0x2b0 [ 492.129354][T15361] do_recvmmsg+0xdba/0x22c0 [ 492.133872][T15361] __sys_recvmmsg+0x5dd/0x610 [ 492.138582][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 492.144693][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 492.150893][T15361] __do_fast_syscall_32+0x2af/0x480 [ 492.156140][T15361] do_fast_syscall_32+0x6b/0xd0 [ 492.161017][T15361] do_SYSENTER_32+0x73/0x90 [ 492.165550][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 492.171881][T15361] [ 492.174200][T15361] Uninit was stored to memory at: [ 492.179252][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 492.184998][T15361] __msan_chain_origin+0x50/0x90 [ 492.189963][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 492.195086][T15361] get_compat_msghdr+0x108/0x2b0 [ 492.200043][T15361] do_recvmmsg+0xdba/0x22c0 [ 492.204570][T15361] __sys_recvmmsg+0x5dd/0x610 [ 492.209286][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 492.215365][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 492.221548][T15361] __do_fast_syscall_32+0x2af/0x480 [ 492.226756][T15361] do_fast_syscall_32+0x6b/0xd0 [ 492.231610][T15361] do_SYSENTER_32+0x73/0x90 [ 492.236145][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 492.242474][T15361] [ 492.244821][T15361] Uninit was stored to memory at: [ 492.249877][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 492.255608][T15361] __msan_chain_origin+0x50/0x90 [ 492.260555][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 492.265657][T15361] get_compat_msghdr+0x108/0x2b0 [ 492.270582][T15361] do_recvmmsg+0xdba/0x22c0 [ 492.275084][T15361] __sys_recvmmsg+0x5dd/0x610 [ 492.279780][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 492.285844][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 492.291981][T15361] __do_fast_syscall_32+0x2af/0x480 [ 492.297173][T15361] do_fast_syscall_32+0x6b/0xd0 [ 492.302005][T15361] do_SYSENTER_32+0x73/0x90 [ 492.306491][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 492.312792][T15361] [ 492.315099][T15361] Uninit was stored to memory at: [ 492.320103][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 492.325819][T15361] __msan_chain_origin+0x50/0x90 [ 492.330743][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 492.335837][T15361] get_compat_msghdr+0x108/0x2b0 [ 492.340757][T15361] do_recvmmsg+0xdba/0x22c0 [ 492.345253][T15361] __sys_recvmmsg+0x5dd/0x610 [ 492.349964][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 492.356083][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 492.362293][T15361] __do_fast_syscall_32+0x2af/0x480 [ 492.367544][T15361] do_fast_syscall_32+0x6b/0xd0 [ 492.372481][T15361] do_SYSENTER_32+0x73/0x90 [ 492.377048][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 492.383386][T15361] [ 492.385748][T15361] Uninit was stored to memory at: [ 492.390818][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 492.396578][T15361] __msan_chain_origin+0x50/0x90 [ 492.401554][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 492.406708][T15361] get_compat_msghdr+0x108/0x2b0 [ 492.411694][T15361] do_recvmmsg+0xdba/0x22c0 [ 492.416267][T15361] __sys_recvmmsg+0x5dd/0x610 [ 492.420997][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 492.427120][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 492.433332][T15361] __do_fast_syscall_32+0x2af/0x480 [ 492.438580][T15361] do_fast_syscall_32+0x6b/0xd0 [ 492.443517][T15361] do_SYSENTER_32+0x73/0x90 [ 492.448115][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 492.454452][T15361] [ 492.456795][T15361] Uninit was stored to memory at: [ 492.461859][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 492.467641][T15361] __msan_chain_origin+0x50/0x90 [ 492.472625][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 492.477797][T15361] get_compat_msghdr+0x108/0x2b0 [ 492.482784][T15361] do_recvmmsg+0xdba/0x22c0 [ 492.487328][T15361] __sys_recvmmsg+0x5dd/0x610 [ 492.492068][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 492.498176][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 492.504398][T15361] __do_fast_syscall_32+0x2af/0x480 [ 492.509629][T15361] do_fast_syscall_32+0x6b/0xd0 [ 492.514506][T15361] do_SYSENTER_32+0x73/0x90 [ 492.519050][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 492.525383][T15361] [ 492.527747][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 492.534450][T15361] do_recvmmsg+0xc2/0x22c0 [ 492.538905][T15361] do_recvmmsg+0xc2/0x22c0 [ 492.760532][T15361] not chained 920000 origins [ 492.765220][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 492.773927][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.784051][T15361] Call Trace: [ 492.787452][T15361] dump_stack+0x21c/0x280 [ 492.791861][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 492.797645][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 492.802826][T15361] ? kmsan_get_metadata+0x116/0x180 [ 492.808093][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 492.813960][T15361] ? kmsan_get_metadata+0x116/0x180 [ 492.819224][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 492.825113][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 492.831344][T15361] ? kmsan_get_metadata+0x116/0x180 [ 492.836604][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 492.842207][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 492.848343][T15361] ? _copy_from_user+0x221/0x330 [ 492.853341][T15361] ? kmsan_get_metadata+0x116/0x180 [ 492.858597][T15361] __msan_chain_origin+0x50/0x90 [ 492.863585][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 492.868819][T15361] get_compat_msghdr+0x108/0x2b0 [ 492.873833][T15361] do_recvmmsg+0xdba/0x22c0 [ 492.878401][T15361] ? __msan_get_context_state+0x9/0x20 [ 492.883981][T15361] ? kmsan_get_metadata+0x116/0x180 [ 492.889247][T15361] ? kmsan_get_metadata+0x116/0x180 [ 492.894524][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 492.900466][T15361] ? kmsan_get_metadata+0x116/0x180 [ 492.905764][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 492.911125][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 492.915941][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 492.920776][T15361] __sys_recvmmsg+0x5dd/0x610 [ 492.925568][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 492.931746][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 492.937962][T15361] __do_fast_syscall_32+0x2af/0x480 [ 492.943226][T15361] do_fast_syscall_32+0x6b/0xd0 [ 492.948143][T15361] do_SYSENTER_32+0x73/0x90 [ 492.952717][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 492.959087][T15361] RIP: 0023:0xf7f87549 [ 492.963190][T15361] Code: Bad RIP value. [ 492.967295][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 492.975761][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 492.983762][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.991785][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.999801][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 493.007811][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.015846][T15361] Uninit was stored to memory at: [ 493.020936][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 493.026714][T15361] __msan_chain_origin+0x50/0x90 [ 493.031695][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 493.036853][T15361] get_compat_msghdr+0x108/0x2b0 [ 493.041844][T15361] do_recvmmsg+0xdba/0x22c0 [ 493.046414][T15361] __sys_recvmmsg+0x5dd/0x610 [ 493.051161][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 493.057301][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 493.063528][T15361] __do_fast_syscall_32+0x2af/0x480 [ 493.068785][T15361] do_fast_syscall_32+0x6b/0xd0 [ 493.073875][T15361] do_SYSENTER_32+0x73/0x90 [ 493.078447][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.084797][T15361] [ 493.087141][T15361] Uninit was stored to memory at: [ 493.092251][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 493.098046][T15361] __msan_chain_origin+0x50/0x90 [ 493.103026][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 493.108185][T15361] get_compat_msghdr+0x108/0x2b0 [ 493.114138][T15361] do_recvmmsg+0xdba/0x22c0 [ 493.118680][T15361] __sys_recvmmsg+0x5dd/0x610 [ 493.123442][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 493.129594][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 493.135797][T15361] __do_fast_syscall_32+0x2af/0x480 [ 493.141047][T15361] do_fast_syscall_32+0x6b/0xd0 [ 493.145978][T15361] do_SYSENTER_32+0x73/0x90 [ 493.150542][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.156936][T15361] [ 493.159285][T15361] Uninit was stored to memory at: [ 493.164349][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 493.170116][T15361] __msan_chain_origin+0x50/0x90 [ 493.175149][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 493.180370][T15361] get_compat_msghdr+0x108/0x2b0 [ 493.185359][T15361] do_recvmmsg+0xdba/0x22c0 [ 493.189896][T15361] __sys_recvmmsg+0x5dd/0x610 [ 493.194631][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 493.200755][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 493.206956][T15361] __do_fast_syscall_32+0x2af/0x480 [ 493.212196][T15361] do_fast_syscall_32+0x6b/0xd0 [ 493.217144][T15361] do_SYSENTER_32+0x73/0x90 [ 493.221710][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.228058][T15361] [ 493.230402][T15361] Uninit was stored to memory at: [ 493.235466][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 493.241235][T15361] __msan_chain_origin+0x50/0x90 [ 493.246238][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 493.251391][T15361] get_compat_msghdr+0x108/0x2b0 [ 493.256413][T15361] do_recvmmsg+0xdba/0x22c0 [ 493.260966][T15361] __sys_recvmmsg+0x5dd/0x610 [ 493.265715][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 493.271830][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 493.278021][T15361] __do_fast_syscall_32+0x2af/0x480 [ 493.283282][T15361] do_fast_syscall_32+0x6b/0xd0 [ 493.288177][T15361] do_SYSENTER_32+0x73/0x90 [ 493.292755][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.299133][T15361] [ 493.301484][T15361] Uninit was stored to memory at: [ 493.306564][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 493.312326][T15361] __msan_chain_origin+0x50/0x90 [ 493.317338][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 493.322524][T15361] get_compat_msghdr+0x108/0x2b0 [ 493.327486][T15361] do_recvmmsg+0xdba/0x22c0 [ 493.331998][T15361] __sys_recvmmsg+0x5dd/0x610 [ 493.336756][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 493.342881][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 493.349147][T15361] __do_fast_syscall_32+0x2af/0x480 [ 493.354443][T15361] do_fast_syscall_32+0x6b/0xd0 [ 493.359304][T15361] do_SYSENTER_32+0x73/0x90 [ 493.363843][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.370244][T15361] [ 493.372591][T15361] Uninit was stored to memory at: [ 493.377659][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 493.383436][T15361] __msan_chain_origin+0x50/0x90 [ 493.388444][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 493.393597][T15361] get_compat_msghdr+0x108/0x2b0 [ 493.398622][T15361] do_recvmmsg+0xdba/0x22c0 [ 493.403154][T15361] __sys_recvmmsg+0x5dd/0x610 [ 493.407868][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 493.413971][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 493.420170][T15361] __do_fast_syscall_32+0x2af/0x480 [ 493.425486][T15361] do_fast_syscall_32+0x6b/0xd0 [ 493.430391][T15361] do_SYSENTER_32+0x73/0x90 [ 493.434913][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.441303][T15361] [ 493.443658][T15361] Uninit was stored to memory at: [ 493.448733][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 493.454471][T15361] __msan_chain_origin+0x50/0x90 [ 493.459426][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 493.464578][T15361] get_compat_msghdr+0x108/0x2b0 [ 493.469550][T15361] do_recvmmsg+0xdba/0x22c0 [ 493.474062][T15361] __sys_recvmmsg+0x5dd/0x610 [ 493.478857][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 493.484976][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 493.491157][T15361] __do_fast_syscall_32+0x2af/0x480 [ 493.496445][T15361] do_fast_syscall_32+0x6b/0xd0 [ 493.501370][T15361] do_SYSENTER_32+0x73/0x90 [ 493.505923][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.512302][T15361] [ 493.514644][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 493.521865][T15361] do_recvmmsg+0xc2/0x22c0 [ 493.526597][T15361] do_recvmmsg+0xc2/0x22c0 [ 493.730896][T15361] not chained 930000 origins [ 493.735577][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 493.744279][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.754391][T15361] Call Trace: [ 493.757737][T15361] dump_stack+0x21c/0x280 [ 493.762156][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 493.768015][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 493.773156][T15361] ? kmsan_get_metadata+0x116/0x180 [ 493.778390][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 493.784380][T15361] ? kmsan_get_metadata+0x116/0x180 [ 493.789616][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 493.795443][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 493.801593][T15361] ? kmsan_get_metadata+0x116/0x180 [ 493.806857][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 493.812456][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 493.818586][T15361] ? _copy_from_user+0x221/0x330 [ 493.823588][T15361] ? kmsan_get_metadata+0x116/0x180 [ 493.828829][T15361] __msan_chain_origin+0x50/0x90 [ 493.833807][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 493.838982][T15361] get_compat_msghdr+0x108/0x2b0 [ 493.843999][T15361] do_recvmmsg+0xdba/0x22c0 [ 493.848552][T15361] ? __msan_get_context_state+0x9/0x20 [ 493.854049][T15361] ? kmsan_get_metadata+0x116/0x180 [ 493.859306][T15361] ? kmsan_get_metadata+0x116/0x180 [ 493.864568][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 493.870515][T15361] ? kmsan_get_metadata+0x116/0x180 [ 493.875737][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 493.881046][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 493.885866][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 493.890762][T15361] __sys_recvmmsg+0x5dd/0x610 [ 493.895532][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 493.901692][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 493.907888][T15361] __do_fast_syscall_32+0x2af/0x480 [ 493.913146][T15361] do_fast_syscall_32+0x6b/0xd0 [ 493.918072][T15361] do_SYSENTER_32+0x73/0x90 [ 493.922620][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.928990][T15361] RIP: 0023:0xf7f87549 [ 493.933135][T15361] Code: Bad RIP value. [ 493.937218][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 493.945657][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 493.953650][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.961691][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.969691][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 493.977719][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.985755][T15361] Uninit was stored to memory at: [ 493.990846][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 493.996592][T15361] __msan_chain_origin+0x50/0x90 [ 494.001558][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 494.006704][T15361] get_compat_msghdr+0x108/0x2b0 [ 494.011681][T15361] do_recvmmsg+0xdba/0x22c0 [ 494.016224][T15361] __sys_recvmmsg+0x5dd/0x610 [ 494.020951][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 494.027077][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 494.033309][T15361] __do_fast_syscall_32+0x2af/0x480 [ 494.038589][T15361] do_fast_syscall_32+0x6b/0xd0 [ 494.043521][T15361] do_SYSENTER_32+0x73/0x90 [ 494.048067][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 494.054403][T15361] [ 494.056768][T15361] Uninit was stored to memory at: [ 494.061826][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 494.067579][T15361] __msan_chain_origin+0x50/0x90 [ 494.072579][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 494.077755][T15361] get_compat_msghdr+0x108/0x2b0 [ 494.082720][T15361] do_recvmmsg+0xdba/0x22c0 [ 494.087259][T15361] __sys_recvmmsg+0x5dd/0x610 [ 494.091954][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 494.098055][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 494.104284][T15361] __do_fast_syscall_32+0x2af/0x480 [ 494.109529][T15361] do_fast_syscall_32+0x6b/0xd0 [ 494.114418][T15361] do_SYSENTER_32+0x73/0x90 [ 494.118939][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 494.125274][T15361] [ 494.127645][T15361] Uninit was stored to memory at: [ 494.132706][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 494.138444][T15361] __msan_chain_origin+0x50/0x90 [ 494.143414][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 494.148609][T15361] get_compat_msghdr+0x108/0x2b0 [ 494.153631][T15361] do_recvmmsg+0xdba/0x22c0 [ 494.158167][T15361] __sys_recvmmsg+0x5dd/0x610 [ 494.162886][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 494.168993][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 494.175160][T15361] __do_fast_syscall_32+0x2af/0x480 [ 494.180383][T15361] do_fast_syscall_32+0x6b/0xd0 [ 494.185295][T15361] do_SYSENTER_32+0x73/0x90 [ 494.189849][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 494.196190][T15361] [ 494.198514][T15361] Uninit was stored to memory at: [ 494.203619][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 494.209398][T15361] __msan_chain_origin+0x50/0x90 [ 494.214357][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 494.219506][T15361] get_compat_msghdr+0x108/0x2b0 [ 494.224475][T15361] do_recvmmsg+0xdba/0x22c0 [ 494.229003][T15361] __sys_recvmmsg+0x5dd/0x610 [ 494.233696][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 494.239794][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 494.245959][T15361] __do_fast_syscall_32+0x2af/0x480 [ 494.251201][T15361] do_fast_syscall_32+0x6b/0xd0 [ 494.256125][T15361] do_SYSENTER_32+0x73/0x90 [ 494.260678][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 494.266994][T15361] [ 494.269343][T15361] Uninit was stored to memory at: [ 494.274405][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 494.280160][T15361] __msan_chain_origin+0x50/0x90 [ 494.285136][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 494.290298][T15361] get_compat_msghdr+0x108/0x2b0 [ 494.295265][T15361] do_recvmmsg+0xdba/0x22c0 [ 494.299795][T15361] __sys_recvmmsg+0x5dd/0x610 [ 494.304539][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 494.310652][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 494.316820][T15361] __do_fast_syscall_32+0x2af/0x480 [ 494.322081][T15361] do_fast_syscall_32+0x6b/0xd0 [ 494.326976][T15361] do_SYSENTER_32+0x73/0x90 [ 494.331536][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 494.337866][T15361] [ 494.340194][T15361] Uninit was stored to memory at: [ 494.345254][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 494.351021][T15361] __msan_chain_origin+0x50/0x90 [ 494.355972][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 494.361112][T15361] get_compat_msghdr+0x108/0x2b0 [ 494.366103][T15361] do_recvmmsg+0xdba/0x22c0 [ 494.370675][T15361] __sys_recvmmsg+0x5dd/0x610 [ 494.375383][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 494.381478][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 494.387674][T15361] __do_fast_syscall_32+0x2af/0x480 [ 494.392903][T15361] do_fast_syscall_32+0x6b/0xd0 [ 494.397965][T15361] do_SYSENTER_32+0x73/0x90 [ 494.402525][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 494.408985][T15361] [ 494.411347][T15361] Uninit was stored to memory at: [ 494.416398][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 494.422370][T15361] __msan_chain_origin+0x50/0x90 [ 494.427326][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 494.432668][T15361] get_compat_msghdr+0x108/0x2b0 [ 494.437649][T15361] do_recvmmsg+0xdba/0x22c0 [ 494.442251][T15361] __sys_recvmmsg+0x5dd/0x610 [ 494.447031][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 494.453162][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 494.459384][T15361] __do_fast_syscall_32+0x2af/0x480 [ 494.464621][T15361] do_fast_syscall_32+0x6b/0xd0 [ 494.469499][T15361] do_SYSENTER_32+0x73/0x90 [ 494.474036][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 494.480392][T15361] [ 494.482758][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 494.489503][T15361] do_recvmmsg+0xc2/0x22c0 [ 494.493972][T15361] do_recvmmsg+0xc2/0x22c0 [ 494.855806][T15361] not chained 940000 origins [ 494.860592][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 494.869256][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.879353][T15361] Call Trace: [ 494.882742][T15361] dump_stack+0x21c/0x280 [ 494.887113][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 494.892877][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 494.898014][T15361] ? kmsan_get_metadata+0x116/0x180 [ 494.903257][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 494.909103][T15361] ? kmsan_get_metadata+0x116/0x180 [ 494.914339][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 494.920196][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 494.926518][T15361] ? kmsan_get_metadata+0x116/0x180 [ 494.931738][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 494.937334][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 494.943453][T15361] ? _copy_from_user+0x221/0x330 [ 494.948417][T15361] ? kmsan_get_metadata+0x116/0x180 [ 494.953624][T15361] __msan_chain_origin+0x50/0x90 [ 494.958625][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 494.963799][T15361] get_compat_msghdr+0x108/0x2b0 [ 494.968822][T15361] do_recvmmsg+0xdba/0x22c0 [ 494.973354][T15361] ? __msan_get_context_state+0x9/0x20 [ 494.978860][T15361] ? kmsan_get_metadata+0x116/0x180 [ 494.984096][T15361] ? kmsan_get_metadata+0x116/0x180 [ 494.989514][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 494.995421][T15361] ? kmsan_get_metadata+0x116/0x180 [ 495.000633][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 495.005983][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 495.010770][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 495.015545][T15361] __sys_recvmmsg+0x5dd/0x610 [ 495.020249][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.026361][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.032591][T15361] __do_fast_syscall_32+0x2af/0x480 [ 495.037851][T15361] do_fast_syscall_32+0x6b/0xd0 [ 495.042773][T15361] do_SYSENTER_32+0x73/0x90 [ 495.047331][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.053749][T15361] RIP: 0023:0xf7f87549 [ 495.057812][T15361] Code: Bad RIP value. [ 495.061896][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 495.070332][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 495.078306][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.086291][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.094263][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 495.102318][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.110302][T15361] Uninit was stored to memory at: [ 495.115343][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 495.121082][T15361] __msan_chain_origin+0x50/0x90 [ 495.126031][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 495.131143][T15361] get_compat_msghdr+0x108/0x2b0 [ 495.136127][T15361] do_recvmmsg+0xdba/0x22c0 [ 495.140658][T15361] __sys_recvmmsg+0x5dd/0x610 [ 495.145371][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.151476][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.157671][T15361] __do_fast_syscall_32+0x2af/0x480 [ 495.162912][T15361] do_fast_syscall_32+0x6b/0xd0 [ 495.167783][T15361] do_SYSENTER_32+0x73/0x90 [ 495.172295][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.178632][T15361] [ 495.180988][T15361] Uninit was stored to memory at: [ 495.186030][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 495.191776][T15361] __msan_chain_origin+0x50/0x90 [ 495.196720][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 495.201836][T15361] get_compat_msghdr+0x108/0x2b0 [ 495.206781][T15361] do_recvmmsg+0xdba/0x22c0 [ 495.211290][T15361] __sys_recvmmsg+0x5dd/0x610 [ 495.215974][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.222068][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.228250][T15361] __do_fast_syscall_32+0x2af/0x480 [ 495.233487][T15361] do_fast_syscall_32+0x6b/0xd0 [ 495.238346][T15361] do_SYSENTER_32+0x73/0x90 [ 495.242890][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.249230][T15361] [ 495.251569][T15361] Uninit was stored to memory at: [ 495.256638][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 495.262431][T15361] __msan_chain_origin+0x50/0x90 [ 495.267417][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 495.272563][T15361] get_compat_msghdr+0x108/0x2b0 [ 495.277706][T15361] do_recvmmsg+0xdba/0x22c0 [ 495.282232][T15361] __sys_recvmmsg+0x5dd/0x610 [ 495.286952][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.293027][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.299232][T15361] __do_fast_syscall_32+0x2af/0x480 [ 495.304464][T15361] do_fast_syscall_32+0x6b/0xd0 [ 495.309351][T15361] do_SYSENTER_32+0x73/0x90 [ 495.313872][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.320230][T15361] [ 495.322599][T15361] Uninit was stored to memory at: [ 495.327679][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 495.333429][T15361] __msan_chain_origin+0x50/0x90 [ 495.338375][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 495.343513][T15361] get_compat_msghdr+0x108/0x2b0 [ 495.348474][T15361] do_recvmmsg+0xdba/0x22c0 [ 495.353006][T15361] __sys_recvmmsg+0x5dd/0x610 [ 495.357731][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.363845][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.370036][T15361] __do_fast_syscall_32+0x2af/0x480 [ 495.375270][T15361] do_fast_syscall_32+0x6b/0xd0 [ 495.380167][T15361] do_SYSENTER_32+0x73/0x90 [ 495.384706][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.391057][T15361] [ 495.393381][T15361] Uninit was stored to memory at: [ 495.398459][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 495.404201][T15361] __msan_chain_origin+0x50/0x90 [ 495.409175][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 495.414306][T15361] get_compat_msghdr+0x108/0x2b0 [ 495.419267][T15361] do_recvmmsg+0xdba/0x22c0 [ 495.423806][T15361] __sys_recvmmsg+0x5dd/0x610 [ 495.428522][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.434634][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.440792][T15361] __do_fast_syscall_32+0x2af/0x480 [ 495.445997][T15361] do_fast_syscall_32+0x6b/0xd0 [ 495.450905][T15361] do_SYSENTER_32+0x73/0x90 [ 495.455498][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.461817][T15361] [ 495.464146][T15361] Uninit was stored to memory at: [ 495.469223][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 495.475016][T15361] __msan_chain_origin+0x50/0x90 [ 495.480088][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 495.485262][T15361] get_compat_msghdr+0x108/0x2b0 [ 495.490241][T15361] do_recvmmsg+0xdba/0x22c0 [ 495.494831][T15361] __sys_recvmmsg+0x5dd/0x610 [ 495.499531][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.505614][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.511784][T15361] __do_fast_syscall_32+0x2af/0x480 [ 495.517013][T15361] do_fast_syscall_32+0x6b/0xd0 [ 495.521886][T15361] do_SYSENTER_32+0x73/0x90 [ 495.526407][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.532734][T15361] [ 495.535081][T15361] Uninit was stored to memory at: [ 495.540130][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 495.545862][T15361] __msan_chain_origin+0x50/0x90 [ 495.550815][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 495.555967][T15361] get_compat_msghdr+0x108/0x2b0 [ 495.560908][T15361] do_recvmmsg+0xdba/0x22c0 [ 495.565456][T15361] __sys_recvmmsg+0x5dd/0x610 [ 495.570158][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 495.576272][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 495.582474][T15361] __do_fast_syscall_32+0x2af/0x480 [ 495.587720][T15361] do_fast_syscall_32+0x6b/0xd0 [ 495.592613][T15361] do_SYSENTER_32+0x73/0x90 [ 495.597185][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.603533][T15361] [ 495.605876][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 495.612582][T15361] do_recvmmsg+0xc2/0x22c0 [ 495.617020][T15361] do_recvmmsg+0xc2/0x22c0 [ 495.947011][T15361] not chained 950000 origins [ 495.951680][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 495.960367][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.970440][T15361] Call Trace: [ 495.973768][T15361] dump_stack+0x21c/0x280 [ 495.978145][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 495.983910][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 495.989064][T15361] ? kmsan_get_metadata+0x116/0x180 [ 495.994300][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 496.000146][T15361] ? kmsan_get_metadata+0x116/0x180 [ 496.005392][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 496.011232][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 496.017333][T15361] ? kmsan_get_metadata+0x116/0x180 [ 496.022606][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 496.028201][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 496.034348][T15361] ? _copy_from_user+0x221/0x330 [ 496.039313][T15361] ? kmsan_get_metadata+0x116/0x180 [ 496.044520][T15361] __msan_chain_origin+0x50/0x90 [ 496.049463][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 496.054607][T15361] get_compat_msghdr+0x108/0x2b0 [ 496.059562][T15361] do_recvmmsg+0xdba/0x22c0 [ 496.064087][T15361] ? __msan_get_context_state+0x9/0x20 [ 496.069571][T15361] ? kmsan_get_metadata+0x116/0x180 [ 496.074780][T15361] ? kmsan_get_metadata+0x116/0x180 [ 496.080006][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 496.085923][T15361] ? kmsan_get_metadata+0x116/0x180 [ 496.091135][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 496.096431][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 496.101203][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 496.106004][T15361] __sys_recvmmsg+0x5dd/0x610 [ 496.110721][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 496.116814][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 496.122997][T15361] __do_fast_syscall_32+0x2af/0x480 [ 496.128238][T15361] do_fast_syscall_32+0x6b/0xd0 [ 496.133105][T15361] do_SYSENTER_32+0x73/0x90 [ 496.137629][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.143975][T15361] RIP: 0023:0xf7f87549 [ 496.148042][T15361] Code: Bad RIP value. [ 496.152117][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 496.160529][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 496.168500][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.176500][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.184471][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 496.192452][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.200468][T15361] Uninit was stored to memory at: [ 496.205505][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 496.211236][T15361] __msan_chain_origin+0x50/0x90 [ 496.216270][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 496.221390][T15361] get_compat_msghdr+0x108/0x2b0 [ 496.226358][T15361] do_recvmmsg+0xdba/0x22c0 [ 496.230862][T15361] __sys_recvmmsg+0x5dd/0x610 [ 496.235601][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 496.241704][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 496.247865][T15361] __do_fast_syscall_32+0x2af/0x480 [ 496.253112][T15361] do_fast_syscall_32+0x6b/0xd0 [ 496.257984][T15361] do_SYSENTER_32+0x73/0x90 [ 496.262512][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.268842][T15361] [ 496.271184][T15361] Uninit was stored to memory at: [ 496.276258][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 496.282006][T15361] __msan_chain_origin+0x50/0x90 [ 496.286960][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 496.292091][T15361] get_compat_msghdr+0x108/0x2b0 [ 496.297047][T15361] do_recvmmsg+0xdba/0x22c0 [ 496.301550][T15361] __sys_recvmmsg+0x5dd/0x610 [ 496.306240][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 496.312316][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 496.318487][T15361] __do_fast_syscall_32+0x2af/0x480 [ 496.323702][T15361] do_fast_syscall_32+0x6b/0xd0 [ 496.328577][T15361] do_SYSENTER_32+0x73/0x90 [ 496.333091][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.339402][T15361] [ 496.341724][T15361] Uninit was stored to memory at: [ 496.346776][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 496.352552][T15361] __msan_chain_origin+0x50/0x90 [ 496.357519][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 496.362654][T15361] get_compat_msghdr+0x108/0x2b0 [ 496.367629][T15361] do_recvmmsg+0xdba/0x22c0 [ 496.372138][T15361] __sys_recvmmsg+0x5dd/0x610 [ 496.376846][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 496.382939][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 496.389132][T15361] __do_fast_syscall_32+0x2af/0x480 [ 496.394350][T15361] do_fast_syscall_32+0x6b/0xd0 [ 496.399227][T15361] do_SYSENTER_32+0x73/0x90 [ 496.403747][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.410057][T15361] [ 496.412422][T15361] Uninit was stored to memory at: [ 496.417488][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 496.423216][T15361] __msan_chain_origin+0x50/0x90 [ 496.428163][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 496.433288][T15361] get_compat_msghdr+0x108/0x2b0 [ 496.438234][T15361] do_recvmmsg+0xdba/0x22c0 [ 496.442775][T15361] __sys_recvmmsg+0x5dd/0x610 [ 496.447484][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 496.453575][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 496.459748][T15361] __do_fast_syscall_32+0x2af/0x480 [ 496.465003][T15361] do_fast_syscall_32+0x6b/0xd0 [ 496.469855][T15361] do_SYSENTER_32+0x73/0x90 [ 496.474375][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.480806][T15361] [ 496.483130][T15361] Uninit was stored to memory at: [ 496.488167][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 496.493928][T15361] __msan_chain_origin+0x50/0x90 [ 496.498865][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 496.503976][T15361] get_compat_msghdr+0x108/0x2b0 [ 496.508911][T15361] do_recvmmsg+0xdba/0x22c0 [ 496.513424][T15361] __sys_recvmmsg+0x5dd/0x610 [ 496.518109][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 496.524209][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 496.530363][T15361] __do_fast_syscall_32+0x2af/0x480 [ 496.535583][T15361] do_fast_syscall_32+0x6b/0xd0 [ 496.540460][T15361] do_SYSENTER_32+0x73/0x90 [ 496.544983][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.551379][T15361] [ 496.553725][T15361] Uninit was stored to memory at: [ 496.558778][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 496.564516][T15361] __msan_chain_origin+0x50/0x90 [ 496.569478][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 496.574612][T15361] get_compat_msghdr+0x108/0x2b0 [ 496.579545][T15361] do_recvmmsg+0xdba/0x22c0 [ 496.584079][T15361] __sys_recvmmsg+0x5dd/0x610 [ 496.588777][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 496.594845][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 496.600999][T15361] __do_fast_syscall_32+0x2af/0x480 [ 496.606222][T15361] do_fast_syscall_32+0x6b/0xd0 [ 496.611110][T15361] do_SYSENTER_32+0x73/0x90 [ 496.615619][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.621946][T15361] [ 496.624266][T15361] Uninit was stored to memory at: [ 496.629298][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 496.635019][T15361] __msan_chain_origin+0x50/0x90 [ 496.639974][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 496.645105][T15361] get_compat_msghdr+0x108/0x2b0 [ 496.650042][T15361] do_recvmmsg+0xdba/0x22c0 [ 496.654544][T15361] __sys_recvmmsg+0x5dd/0x610 [ 496.659223][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 496.665296][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 496.671451][T15361] __do_fast_syscall_32+0x2af/0x480 [ 496.676670][T15361] do_fast_syscall_32+0x6b/0xd0 [ 496.681539][T15361] do_SYSENTER_32+0x73/0x90 [ 496.686045][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.692356][T15361] [ 496.694683][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 496.701370][T15361] do_recvmmsg+0xc2/0x22c0 [ 496.705795][T15361] do_recvmmsg+0xc2/0x22c0 [ 496.958030][T15361] not chained 960000 origins [ 496.962710][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 496.971404][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.981587][T15361] Call Trace: [ 496.984928][T15361] dump_stack+0x21c/0x280 [ 496.989316][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 496.995097][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 497.000271][T15361] ? kmsan_get_metadata+0x116/0x180 [ 497.005520][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 497.011397][T15361] ? kmsan_get_metadata+0x116/0x180 [ 497.016653][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 497.022508][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 497.028653][T15361] ? kmsan_get_metadata+0x116/0x180 [ 497.033908][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 497.039569][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 497.045739][T15361] ? _copy_from_user+0x221/0x330 [ 497.050816][T15361] ? kmsan_get_metadata+0x116/0x180 [ 497.056073][T15361] __msan_chain_origin+0x50/0x90 [ 497.061091][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 497.066286][T15361] get_compat_msghdr+0x108/0x2b0 [ 497.071319][T15361] do_recvmmsg+0xdba/0x22c0 [ 497.075875][T15361] ? __msan_get_context_state+0x9/0x20 [ 497.081385][T15361] ? kmsan_get_metadata+0x116/0x180 [ 497.086636][T15361] ? kmsan_get_metadata+0x116/0x180 [ 497.091888][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 497.097837][T15361] ? kmsan_get_metadata+0x116/0x180 [ 497.103086][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 497.108419][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 497.113220][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 497.118040][T15361] __sys_recvmmsg+0x5dd/0x610 [ 497.122780][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 497.128905][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 497.135105][T15361] __do_fast_syscall_32+0x2af/0x480 [ 497.140352][T15361] do_fast_syscall_32+0x6b/0xd0 [ 497.145245][T15361] do_SYSENTER_32+0x73/0x90 [ 497.149799][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.156170][T15361] RIP: 0023:0xf7f87549 [ 497.160248][T15361] Code: Bad RIP value. [ 497.164335][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 497.172774][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 497.180768][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.188760][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.196745][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 497.204724][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.212724][T15361] Uninit was stored to memory at: [ 497.217767][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 497.223500][T15361] __msan_chain_origin+0x50/0x90 [ 497.228449][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 497.233570][T15361] get_compat_msghdr+0x108/0x2b0 [ 497.238519][T15361] do_recvmmsg+0xdba/0x22c0 [ 497.243034][T15361] __sys_recvmmsg+0x5dd/0x610 [ 497.247736][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 497.253841][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 497.260026][T15361] __do_fast_syscall_32+0x2af/0x480 [ 497.265278][T15361] do_fast_syscall_32+0x6b/0xd0 [ 497.270157][T15361] do_SYSENTER_32+0x73/0x90 [ 497.274696][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.281032][T15361] [ 497.283368][T15361] Uninit was stored to memory at: [ 497.288407][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 497.294154][T15361] __msan_chain_origin+0x50/0x90 [ 497.299107][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 497.304218][T15361] get_compat_msghdr+0x108/0x2b0 [ 497.309163][T15361] do_recvmmsg+0xdba/0x22c0 [ 497.313682][T15361] __sys_recvmmsg+0x5dd/0x610 [ 497.318370][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 497.324437][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 497.330630][T15361] __do_fast_syscall_32+0x2af/0x480 [ 497.335847][T15361] do_fast_syscall_32+0x6b/0xd0 [ 497.340727][T15361] do_SYSENTER_32+0x73/0x90 [ 497.345245][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.351552][T15361] [ 497.353877][T15361] Uninit was stored to memory at: [ 497.358917][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 497.364679][T15361] __msan_chain_origin+0x50/0x90 [ 497.369627][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 497.374755][T15361] get_compat_msghdr+0x108/0x2b0 [ 497.379721][T15361] do_recvmmsg+0xdba/0x22c0 [ 497.384235][T15361] __sys_recvmmsg+0x5dd/0x610 [ 497.388911][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 497.394998][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 497.401169][T15361] __do_fast_syscall_32+0x2af/0x480 [ 497.406415][T15361] do_fast_syscall_32+0x6b/0xd0 [ 497.411262][T15361] do_SYSENTER_32+0x73/0x90 [ 497.415764][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.422077][T15361] [ 497.424398][T15361] Uninit was stored to memory at: [ 497.429518][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 497.435250][T15361] __msan_chain_origin+0x50/0x90 [ 497.440210][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 497.445337][T15361] get_compat_msghdr+0x108/0x2b0 [ 497.450288][T15361] do_recvmmsg+0xdba/0x22c0 [ 497.454804][T15361] __sys_recvmmsg+0x5dd/0x610 [ 497.459493][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 497.465567][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 497.471775][T15361] __do_fast_syscall_32+0x2af/0x480 [ 497.476974][T15361] do_fast_syscall_32+0x6b/0xd0 [ 497.481817][T15361] do_SYSENTER_32+0x73/0x90 [ 497.486318][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.492636][T15361] [ 497.494974][T15361] Uninit was stored to memory at: [ 497.500013][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 497.505733][T15361] __msan_chain_origin+0x50/0x90 [ 497.510755][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 497.515865][T15361] get_compat_msghdr+0x108/0x2b0 [ 497.520802][T15361] do_recvmmsg+0xdba/0x22c0 [ 497.525304][T15361] __sys_recvmmsg+0x5dd/0x610 [ 497.529979][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 497.536065][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 497.542238][T15361] __do_fast_syscall_32+0x2af/0x480 [ 497.547460][T15361] do_fast_syscall_32+0x6b/0xd0 [ 497.552304][T15361] do_SYSENTER_32+0x73/0x90 [ 497.556818][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.563143][T15361] [ 497.565454][T15361] Uninit was stored to memory at: [ 497.570477][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 497.576211][T15361] __msan_chain_origin+0x50/0x90 [ 497.581184][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 497.586312][T15361] get_compat_msghdr+0x108/0x2b0 [ 497.591276][T15361] do_recvmmsg+0xdba/0x22c0 [ 497.595867][T15361] __sys_recvmmsg+0x5dd/0x610 [ 497.600546][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 497.606616][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 497.612788][T15361] __do_fast_syscall_32+0x2af/0x480 [ 497.618006][T15361] do_fast_syscall_32+0x6b/0xd0 [ 497.622861][T15361] do_SYSENTER_32+0x73/0x90 [ 497.627366][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.633684][T15361] [ 497.636040][T15361] Uninit was stored to memory at: [ 497.641076][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 497.646796][T15361] __msan_chain_origin+0x50/0x90 [ 497.651729][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 497.656846][T15361] get_compat_msghdr+0x108/0x2b0 [ 497.661781][T15361] do_recvmmsg+0xdba/0x22c0 [ 497.666310][T15361] __sys_recvmmsg+0x5dd/0x610 [ 497.671008][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 497.677083][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 497.683264][T15361] __do_fast_syscall_32+0x2af/0x480 [ 497.688482][T15361] do_fast_syscall_32+0x6b/0xd0 [ 497.693375][T15361] do_SYSENTER_32+0x73/0x90 [ 497.697907][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.704216][T15361] [ 497.706536][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 497.713224][T15361] do_recvmmsg+0xc2/0x22c0 [ 497.717653][T15361] do_recvmmsg+0xc2/0x22c0 [ 498.000307][T15361] not chained 970000 origins [ 498.004951][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 498.013642][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.023711][T15361] Call Trace: [ 498.027000][T15361] dump_stack+0x21c/0x280 [ 498.031349][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 498.037077][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 498.042193][T15361] ? kmsan_get_metadata+0x116/0x180 [ 498.047395][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 498.053224][T15361] ? kmsan_get_metadata+0x116/0x180 [ 498.058480][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 498.064320][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 498.070398][T15361] ? kmsan_get_metadata+0x116/0x180 [ 498.075610][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 498.081175][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 498.087248][T15361] ? _copy_from_user+0x221/0x330 [ 498.092220][T15361] ? kmsan_get_metadata+0x116/0x180 [ 498.097423][T15361] __msan_chain_origin+0x50/0x90 [ 498.102357][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 498.107511][T15361] get_compat_msghdr+0x108/0x2b0 [ 498.112485][T15361] do_recvmmsg+0xdba/0x22c0 [ 498.117018][T15361] ? __msan_get_context_state+0x9/0x20 [ 498.122498][T15361] ? kmsan_get_metadata+0x116/0x180 [ 498.127710][T15361] ? kmsan_get_metadata+0x116/0x180 [ 498.132930][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 498.138857][T15361] ? kmsan_get_metadata+0x116/0x180 [ 498.144086][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 498.149368][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 498.154137][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 498.158915][T15361] __sys_recvmmsg+0x5dd/0x610 [ 498.163600][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 498.169690][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 498.175841][T15361] __do_fast_syscall_32+0x2af/0x480 [ 498.181038][T15361] do_fast_syscall_32+0x6b/0xd0 [ 498.185882][T15361] do_SYSENTER_32+0x73/0x90 [ 498.190381][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.196699][T15361] RIP: 0023:0xf7f87549 [ 498.200755][T15361] Code: Bad RIP value. [ 498.204813][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 498.213229][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 498.221229][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.229212][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.237186][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 498.245166][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.253154][T15361] Uninit was stored to memory at: [ 498.258191][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 498.263898][T15361] __msan_chain_origin+0x50/0x90 [ 498.268821][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 498.273935][T15361] get_compat_msghdr+0x108/0x2b0 [ 498.278877][T15361] do_recvmmsg+0xdba/0x22c0 [ 498.283368][T15361] __sys_recvmmsg+0x5dd/0x610 [ 498.288036][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 498.295424][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 498.301603][T15361] __do_fast_syscall_32+0x2af/0x480 [ 498.306788][T15361] do_fast_syscall_32+0x6b/0xd0 [ 498.311658][T15361] do_SYSENTER_32+0x73/0x90 [ 498.316160][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.322473][T15361] [ 498.324805][T15361] Uninit was stored to memory at: [ 498.329836][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 498.335545][T15361] __msan_chain_origin+0x50/0x90 [ 498.340468][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 498.345570][T15361] get_compat_msghdr+0x108/0x2b0 [ 498.350494][T15361] do_recvmmsg+0xdba/0x22c0 [ 498.354998][T15361] __sys_recvmmsg+0x5dd/0x610 [ 498.359680][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 498.365732][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 498.371876][T15361] __do_fast_syscall_32+0x2af/0x480 [ 498.377078][T15361] do_fast_syscall_32+0x6b/0xd0 [ 498.381918][T15361] do_SYSENTER_32+0x73/0x90 [ 498.386412][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.392729][T15361] [ 498.395063][T15361] Uninit was stored to memory at: [ 498.400090][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 498.405814][T15361] __msan_chain_origin+0x50/0x90 [ 498.410758][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 498.415882][T15361] get_compat_msghdr+0x108/0x2b0 [ 498.420823][T15361] do_recvmmsg+0xdba/0x22c0 [ 498.425314][T15361] __sys_recvmmsg+0x5dd/0x610 [ 498.429981][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 498.436170][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 498.442336][T15361] __do_fast_syscall_32+0x2af/0x480 [ 498.447562][T15361] do_fast_syscall_32+0x6b/0xd0 [ 498.452456][T15361] do_SYSENTER_32+0x73/0x90 [ 498.456981][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.463302][T15361] [ 498.465659][T15361] Uninit was stored to memory at: [ 498.470685][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 498.476394][T15361] __msan_chain_origin+0x50/0x90 [ 498.481320][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 498.486424][T15361] get_compat_msghdr+0x108/0x2b0 [ 498.491343][T15361] do_recvmmsg+0xdba/0x22c0 [ 498.495833][T15361] __sys_recvmmsg+0x5dd/0x610 [ 498.500496][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 498.506552][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 498.512712][T15361] __do_fast_syscall_32+0x2af/0x480 [ 498.517962][T15361] do_fast_syscall_32+0x6b/0xd0 [ 498.522795][T15361] do_SYSENTER_32+0x73/0x90 [ 498.527284][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.533594][T15361] [ 498.535921][T15361] Uninit was stored to memory at: [ 498.540934][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 498.546655][T15361] __msan_chain_origin+0x50/0x90 [ 498.551602][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 498.556699][T15361] get_compat_msghdr+0x108/0x2b0 [ 498.561672][T15361] do_recvmmsg+0xdba/0x22c0 [ 498.566165][T15361] __sys_recvmmsg+0x5dd/0x610 [ 498.570827][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 498.576878][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 498.583052][T15361] __do_fast_syscall_32+0x2af/0x480 [ 498.588237][T15361] do_fast_syscall_32+0x6b/0xd0 [ 498.593089][T15361] do_SYSENTER_32+0x73/0x90 [ 498.597593][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.603892][T15361] [ 498.606228][T15361] Uninit was stored to memory at: [ 498.611244][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 498.616953][T15361] __msan_chain_origin+0x50/0x90 [ 498.621877][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 498.626976][T15361] get_compat_msghdr+0x108/0x2b0 [ 498.631896][T15361] do_recvmmsg+0xdba/0x22c0 [ 498.636383][T15361] __sys_recvmmsg+0x5dd/0x610 [ 498.641043][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 498.647095][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 498.653248][T15361] __do_fast_syscall_32+0x2af/0x480 [ 498.658559][T15361] do_fast_syscall_32+0x6b/0xd0 [ 498.663427][T15361] do_SYSENTER_32+0x73/0x90 [ 498.667913][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.674225][T15361] [ 498.676557][T15361] Uninit was stored to memory at: [ 498.681581][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 498.687282][T15361] __msan_chain_origin+0x50/0x90 [ 498.692220][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 498.697314][T15361] get_compat_msghdr+0x108/0x2b0 [ 498.702234][T15361] do_recvmmsg+0xdba/0x22c0 [ 498.706764][T15361] __sys_recvmmsg+0x5dd/0x610 [ 498.711453][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 498.717514][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 498.723698][T15361] __do_fast_syscall_32+0x2af/0x480 [ 498.728894][T15361] do_fast_syscall_32+0x6b/0xd0 [ 498.733734][T15361] do_SYSENTER_32+0x73/0x90 [ 498.738247][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.744570][T15361] [ 498.746878][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 498.753544][T15361] do_recvmmsg+0xc2/0x22c0 [ 498.757954][T15361] do_recvmmsg+0xc2/0x22c0 [ 498.979057][T15361] not chained 980000 origins [ 498.983797][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 498.992483][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.002558][T15361] Call Trace: [ 499.005871][T15361] dump_stack+0x21c/0x280 [ 499.010231][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 499.015991][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 499.021140][T15361] ? kmsan_get_metadata+0x116/0x180 [ 499.026401][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 499.032225][T15361] ? kmsan_get_metadata+0x116/0x180 [ 499.037449][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 499.043292][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 499.049374][T15361] ? kmsan_get_metadata+0x116/0x180 [ 499.054606][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 499.060208][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 499.066300][T15361] ? _copy_from_user+0x221/0x330 [ 499.071255][T15361] ? kmsan_get_metadata+0x116/0x180 [ 499.076484][T15361] __msan_chain_origin+0x50/0x90 [ 499.081443][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 499.086595][T15361] get_compat_msghdr+0x108/0x2b0 [ 499.091564][T15361] do_recvmmsg+0xdba/0x22c0 [ 499.096089][T15361] ? __msan_get_context_state+0x9/0x20 [ 499.101620][T15361] ? kmsan_get_metadata+0x116/0x180 [ 499.106841][T15361] ? kmsan_get_metadata+0x116/0x180 [ 499.112062][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 499.117980][T15361] ? kmsan_get_metadata+0x116/0x180 [ 499.123236][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 499.128542][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 499.133319][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 499.138103][T15361] __sys_recvmmsg+0x5dd/0x610 [ 499.142818][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 499.148942][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 499.155114][T15361] __do_fast_syscall_32+0x2af/0x480 [ 499.160345][T15361] do_fast_syscall_32+0x6b/0xd0 [ 499.165217][T15361] do_SYSENTER_32+0x73/0x90 [ 499.169748][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.176087][T15361] RIP: 0023:0xf7f87549 [ 499.180197][T15361] Code: Bad RIP value. [ 499.184266][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 499.192707][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 499.200688][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.208697][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.216689][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 499.224687][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.232697][T15361] Uninit was stored to memory at: [ 499.237751][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 499.243510][T15361] __msan_chain_origin+0x50/0x90 [ 499.248461][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 499.253582][T15361] get_compat_msghdr+0x108/0x2b0 [ 499.258542][T15361] do_recvmmsg+0xdba/0x22c0 [ 499.263049][T15361] __sys_recvmmsg+0x5dd/0x610 [ 499.267736][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 499.273829][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 499.279994][T15361] __do_fast_syscall_32+0x2af/0x480 [ 499.285205][T15361] do_fast_syscall_32+0x6b/0xd0 [ 499.290062][T15361] do_SYSENTER_32+0x73/0x90 [ 499.294579][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.300900][T15361] [ 499.303231][T15361] Uninit was stored to memory at: [ 499.308271][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 499.314003][T15361] __msan_chain_origin+0x50/0x90 [ 499.318949][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 499.324062][T15361] get_compat_msghdr+0x108/0x2b0 [ 499.329005][T15361] do_recvmmsg+0xdba/0x22c0 [ 499.333522][T15361] __sys_recvmmsg+0x5dd/0x610 [ 499.338211][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 499.344295][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 499.350462][T15361] __do_fast_syscall_32+0x2af/0x480 [ 499.355689][T15361] do_fast_syscall_32+0x6b/0xd0 [ 499.360570][T15361] do_SYSENTER_32+0x73/0x90 [ 499.365086][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.371406][T15361] [ 499.373734][T15361] Uninit was stored to memory at: [ 499.378771][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 499.384498][T15361] __msan_chain_origin+0x50/0x90 [ 499.389446][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 499.394566][T15361] get_compat_msghdr+0x108/0x2b0 [ 499.399514][T15361] do_recvmmsg+0xdba/0x22c0 [ 499.404022][T15361] __sys_recvmmsg+0x5dd/0x610 [ 499.408724][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 499.414810][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 499.420984][T15361] __do_fast_syscall_32+0x2af/0x480 [ 499.426211][T15361] do_fast_syscall_32+0x6b/0xd0 [ 499.431075][T15361] do_SYSENTER_32+0x73/0x90 [ 499.435593][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.441927][T15361] [ 499.444258][T15361] Uninit was stored to memory at: [ 499.449301][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 499.455032][T15361] __msan_chain_origin+0x50/0x90 [ 499.459978][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 499.465127][T15361] get_compat_msghdr+0x108/0x2b0 [ 499.470072][T15361] do_recvmmsg+0xdba/0x22c0 [ 499.474588][T15361] __sys_recvmmsg+0x5dd/0x610 [ 499.479264][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 499.485328][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 499.491465][T15361] __do_fast_syscall_32+0x2af/0x480 [ 499.496693][T15361] do_fast_syscall_32+0x6b/0xd0 [ 499.501584][T15361] do_SYSENTER_32+0x73/0x90 [ 499.506073][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.512371][T15361] [ 499.514694][T15361] Uninit was stored to memory at: [ 499.519742][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 499.525482][T15361] __msan_chain_origin+0x50/0x90 [ 499.530404][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 499.535507][T15361] get_compat_msghdr+0x108/0x2b0 [ 499.540441][T15361] do_recvmmsg+0xdba/0x22c0 [ 499.544942][T15361] __sys_recvmmsg+0x5dd/0x610 [ 499.549620][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 499.555723][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 499.561875][T15361] __do_fast_syscall_32+0x2af/0x480 [ 499.567056][T15361] do_fast_syscall_32+0x6b/0xd0 [ 499.571885][T15361] do_SYSENTER_32+0x73/0x90 [ 499.576404][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.582724][T15361] [ 499.585038][T15361] Uninit was stored to memory at: [ 499.590047][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 499.595761][T15361] __msan_chain_origin+0x50/0x90 [ 499.600708][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 499.605799][T15361] get_compat_msghdr+0x108/0x2b0 [ 499.610734][T15361] do_recvmmsg+0xdba/0x22c0 [ 499.615232][T15361] __sys_recvmmsg+0x5dd/0x610 [ 499.619951][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 499.626005][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 499.632142][T15361] __do_fast_syscall_32+0x2af/0x480 [ 499.637340][T15361] do_fast_syscall_32+0x6b/0xd0 [ 499.642174][T15361] do_SYSENTER_32+0x73/0x90 [ 499.646660][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.652968][T15361] [ 499.655325][T15361] Uninit was stored to memory at: [ 499.660364][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 499.666079][T15361] __msan_chain_origin+0x50/0x90 [ 499.670999][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 499.676111][T15361] get_compat_msghdr+0x108/0x2b0 [ 499.681032][T15361] do_recvmmsg+0xdba/0x22c0 [ 499.685517][T15361] __sys_recvmmsg+0x5dd/0x610 [ 499.690180][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 499.696230][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 499.702371][T15361] __do_fast_syscall_32+0x2af/0x480 [ 499.707556][T15361] do_fast_syscall_32+0x6b/0xd0 [ 499.712399][T15361] do_SYSENTER_32+0x73/0x90 [ 499.716890][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.723204][T15361] [ 499.725512][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 499.732175][T15361] do_recvmmsg+0xc2/0x22c0 [ 499.736576][T15361] do_recvmmsg+0xc2/0x22c0 [ 499.956254][T15361] not chained 990000 origins [ 499.960876][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 499.969528][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.979575][T15361] Call Trace: [ 499.982899][T15361] dump_stack+0x21c/0x280 [ 499.987256][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 499.993006][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 499.998125][T15361] ? kmsan_get_metadata+0x116/0x180 [ 500.003328][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 500.009135][T15361] ? kmsan_get_metadata+0x116/0x180 [ 500.014322][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 500.020113][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 500.026170][T15361] ? kmsan_get_metadata+0x116/0x180 [ 500.031355][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 500.036892][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 500.042970][T15361] ? _copy_from_user+0x221/0x330 [ 500.047909][T15361] ? kmsan_get_metadata+0x116/0x180 [ 500.053112][T15361] __msan_chain_origin+0x50/0x90 [ 500.058076][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 500.063228][T15361] get_compat_msghdr+0x108/0x2b0 [ 500.068178][T15361] do_recvmmsg+0xdba/0x22c0 [ 500.072713][T15361] ? __msan_get_context_state+0x9/0x20 [ 500.078194][T15361] ? kmsan_get_metadata+0x116/0x180 [ 500.083415][T15361] ? kmsan_get_metadata+0x116/0x180 [ 500.088619][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 500.094516][T15361] ? kmsan_get_metadata+0x116/0x180 [ 500.099732][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 500.105039][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 500.109800][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 500.114562][T15361] __sys_recvmmsg+0x5dd/0x610 [ 500.119256][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 500.125345][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 500.131505][T15361] __do_fast_syscall_32+0x2af/0x480 [ 500.136716][T15361] do_fast_syscall_32+0x6b/0xd0 [ 500.141573][T15361] do_SYSENTER_32+0x73/0x90 [ 500.146068][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.152389][T15361] RIP: 0023:0xf7f87549 [ 500.156434][T15361] Code: Bad RIP value. [ 500.160478][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 500.168872][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 500.176827][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.184787][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.192760][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 500.200726][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.208698][T15361] Uninit was stored to memory at: [ 500.213740][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 500.219469][T15361] __msan_chain_origin+0x50/0x90 [ 500.224418][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 500.229525][T15361] get_compat_msghdr+0x108/0x2b0 [ 500.234443][T15361] do_recvmmsg+0xdba/0x22c0 [ 500.238937][T15361] __sys_recvmmsg+0x5dd/0x610 [ 500.243607][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 500.249667][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 500.255803][T15361] __do_fast_syscall_32+0x2af/0x480 [ 500.260981][T15361] do_fast_syscall_32+0x6b/0xd0 [ 500.265811][T15361] do_SYSENTER_32+0x73/0x90 [ 500.270292][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.276618][T15361] [ 500.278920][T15361] Uninit was stored to memory at: [ 500.283941][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 500.289653][T15361] __msan_chain_origin+0x50/0x90 [ 500.294574][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 500.299661][T15361] get_compat_msghdr+0x108/0x2b0 [ 500.304587][T15361] do_recvmmsg+0xdba/0x22c0 [ 500.309082][T15361] __sys_recvmmsg+0x5dd/0x610 [ 500.313771][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 500.319833][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 500.325993][T15361] __do_fast_syscall_32+0x2af/0x480 [ 500.331190][T15361] do_fast_syscall_32+0x6b/0xd0 [ 500.336040][T15361] do_SYSENTER_32+0x73/0x90 [ 500.340523][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.346822][T15361] [ 500.349128][T15361] Uninit was stored to memory at: [ 500.354152][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 500.359849][T15361] __msan_chain_origin+0x50/0x90 [ 500.364784][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 500.369889][T15361] get_compat_msghdr+0x108/0x2b0 [ 500.374806][T15361] do_recvmmsg+0xdba/0x22c0 [ 500.379285][T15361] __sys_recvmmsg+0x5dd/0x610 [ 500.383955][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 500.390013][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 500.396161][T15361] __do_fast_syscall_32+0x2af/0x480 [ 500.401346][T15361] do_fast_syscall_32+0x6b/0xd0 [ 500.406178][T15361] do_SYSENTER_32+0x73/0x90 [ 500.410670][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.416979][T15361] [ 500.419285][T15361] Uninit was stored to memory at: [ 500.424326][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 500.430058][T15361] __msan_chain_origin+0x50/0x90 [ 500.435006][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 500.440113][T15361] get_compat_msghdr+0x108/0x2b0 [ 500.445045][T15361] do_recvmmsg+0xdba/0x22c0 [ 500.449543][T15361] __sys_recvmmsg+0x5dd/0x610 [ 500.454206][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 500.460254][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 500.466390][T15361] __do_fast_syscall_32+0x2af/0x480 [ 500.471603][T15361] do_fast_syscall_32+0x6b/0xd0 [ 500.476499][T15361] do_SYSENTER_32+0x73/0x90 [ 500.480987][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.487283][T15361] [ 500.489587][T15361] Uninit was stored to memory at: [ 500.494594][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 500.500306][T15361] __msan_chain_origin+0x50/0x90 [ 500.505227][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 500.510321][T15361] get_compat_msghdr+0x108/0x2b0 [ 500.515241][T15361] do_recvmmsg+0xdba/0x22c0 [ 500.519744][T15361] __sys_recvmmsg+0x5dd/0x610 [ 500.524419][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 500.530485][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 500.536648][T15361] __do_fast_syscall_32+0x2af/0x480 [ 500.541857][T15361] do_fast_syscall_32+0x6b/0xd0 [ 500.546699][T15361] do_SYSENTER_32+0x73/0x90 [ 500.551236][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.557559][T15361] [ 500.559881][T15361] Uninit was stored to memory at: [ 500.564901][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 500.570614][T15361] __msan_chain_origin+0x50/0x90 [ 500.575535][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 500.580628][T15361] get_compat_msghdr+0x108/0x2b0 [ 500.585569][T15361] do_recvmmsg+0xdba/0x22c0 [ 500.590051][T15361] __sys_recvmmsg+0x5dd/0x610 [ 500.594712][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 500.600788][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 500.606922][T15361] __do_fast_syscall_32+0x2af/0x480 [ 500.612107][T15361] do_fast_syscall_32+0x6b/0xd0 [ 500.616960][T15361] do_SYSENTER_32+0x73/0x90 [ 500.621445][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.627743][T15361] [ 500.630064][T15361] Uninit was stored to memory at: [ 500.635071][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 500.640780][T15361] __msan_chain_origin+0x50/0x90 [ 500.645712][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 500.650837][T15361] get_compat_msghdr+0x108/0x2b0 [ 500.655777][T15361] do_recvmmsg+0xdba/0x22c0 [ 500.660301][T15361] __sys_recvmmsg+0x5dd/0x610 [ 500.664999][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 500.671055][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 500.677188][T15361] __do_fast_syscall_32+0x2af/0x480 [ 500.682380][T15361] do_fast_syscall_32+0x6b/0xd0 [ 500.687212][T15361] do_SYSENTER_32+0x73/0x90 [ 500.691713][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.698026][T15361] [ 500.700348][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 500.707016][T15361] do_recvmmsg+0xc2/0x22c0 [ 500.711411][T15361] do_recvmmsg+0xc2/0x22c0 [ 501.055621][T15361] not chained 1000000 origins [ 501.060462][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 501.069146][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.079211][T15361] Call Trace: [ 501.082521][T15361] dump_stack+0x21c/0x280 [ 501.086909][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 501.092679][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 501.097847][T15361] ? kmsan_get_metadata+0x116/0x180 [ 501.103066][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 501.108911][T15361] ? kmsan_get_metadata+0x116/0x180 [ 501.114122][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 501.119932][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 501.125977][T15361] ? kmsan_get_metadata+0x116/0x180 [ 501.131166][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 501.136704][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 501.142772][T15361] ? _copy_from_user+0x221/0x330 [ 501.147724][T15361] ? kmsan_get_metadata+0x116/0x180 [ 501.152927][T15361] __msan_chain_origin+0x50/0x90 [ 501.157868][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 501.162994][T15361] get_compat_msghdr+0x108/0x2b0 [ 501.167933][T15361] do_recvmmsg+0xdba/0x22c0 [ 501.172428][T15361] ? __msan_get_context_state+0x9/0x20 [ 501.177892][T15361] ? kmsan_get_metadata+0x116/0x180 [ 501.183078][T15361] ? kmsan_get_metadata+0x116/0x180 [ 501.188259][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 501.194161][T15361] ? kmsan_get_metadata+0x116/0x180 [ 501.199367][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 501.204639][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 501.209383][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 501.214176][T15361] __sys_recvmmsg+0x5dd/0x610 [ 501.218868][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 501.224928][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 501.231065][T15361] __do_fast_syscall_32+0x2af/0x480 [ 501.236260][T15361] do_fast_syscall_32+0x6b/0xd0 [ 501.241096][T15361] do_SYSENTER_32+0x73/0x90 [ 501.245588][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.251894][T15361] RIP: 0023:0xf7f87549 [ 501.255946][T15361] Code: Bad RIP value. [ 501.260022][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 501.268431][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 501.276385][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.284342][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.292302][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 501.300256][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.308241][T15361] Uninit was stored to memory at: [ 501.313256][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 501.318971][T15361] __msan_chain_origin+0x50/0x90 [ 501.323907][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 501.329016][T15361] get_compat_msghdr+0x108/0x2b0 [ 501.333933][T15361] do_recvmmsg+0xdba/0x22c0 [ 501.338426][T15361] __sys_recvmmsg+0x5dd/0x610 [ 501.343085][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 501.349140][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 501.355291][T15361] __do_fast_syscall_32+0x2af/0x480 [ 501.360472][T15361] do_fast_syscall_32+0x6b/0xd0 [ 501.365300][T15361] do_SYSENTER_32+0x73/0x90 [ 501.369782][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.376079][T15361] [ 501.378420][T15361] Uninit was stored to memory at: [ 501.383426][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 501.389124][T15361] __msan_chain_origin+0x50/0x90 [ 501.394076][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 501.399167][T15361] get_compat_msghdr+0x108/0x2b0 [ 501.404100][T15361] do_recvmmsg+0xdba/0x22c0 [ 501.408587][T15361] __sys_recvmmsg+0x5dd/0x610 [ 501.413275][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 501.419350][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 501.425498][T15361] __do_fast_syscall_32+0x2af/0x480 [ 501.430680][T15361] do_fast_syscall_32+0x6b/0xd0 [ 501.435526][T15361] do_SYSENTER_32+0x73/0x90 [ 501.440041][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.446339][T15361] [ 501.448643][T15361] Uninit was stored to memory at: [ 501.453652][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 501.459369][T15361] __msan_chain_origin+0x50/0x90 [ 501.464302][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 501.469419][T15361] get_compat_msghdr+0x108/0x2b0 [ 501.474361][T15361] do_recvmmsg+0xdba/0x22c0 [ 501.478842][T15361] __sys_recvmmsg+0x5dd/0x610 [ 501.483501][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 501.489548][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 501.495684][T15361] __do_fast_syscall_32+0x2af/0x480 [ 501.500873][T15361] do_fast_syscall_32+0x6b/0xd0 [ 501.505821][T15361] do_SYSENTER_32+0x73/0x90 [ 501.510310][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.516621][T15361] [ 501.518944][T15361] Uninit was stored to memory at: [ 501.523967][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 501.529703][T15361] __msan_chain_origin+0x50/0x90 [ 501.534625][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 501.539728][T15361] get_compat_msghdr+0x108/0x2b0 [ 501.544657][T15361] do_recvmmsg+0xdba/0x22c0 [ 501.549171][T15361] __sys_recvmmsg+0x5dd/0x610 [ 501.553835][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 501.559882][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 501.566029][T15361] __do_fast_syscall_32+0x2af/0x480 [ 501.571208][T15361] do_fast_syscall_32+0x6b/0xd0 [ 501.576043][T15361] do_SYSENTER_32+0x73/0x90 [ 501.580540][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.586850][T15361] [ 501.589165][T15361] Uninit was stored to memory at: [ 501.594174][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 501.599872][T15361] __msan_chain_origin+0x50/0x90 [ 501.604794][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 501.609894][T15361] get_compat_msghdr+0x108/0x2b0 [ 501.614936][T15361] do_recvmmsg+0xdba/0x22c0 [ 501.619419][T15361] __sys_recvmmsg+0x5dd/0x610 [ 501.624081][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 501.630132][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 501.636282][T15361] __do_fast_syscall_32+0x2af/0x480 [ 501.641481][T15361] do_fast_syscall_32+0x6b/0xd0 [ 501.646315][T15361] do_SYSENTER_32+0x73/0x90 [ 501.650826][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.657129][T15361] [ 501.659445][T15361] Uninit was stored to memory at: [ 501.664469][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 501.670167][T15361] __msan_chain_origin+0x50/0x90 [ 501.675086][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 501.680178][T15361] get_compat_msghdr+0x108/0x2b0 [ 501.685097][T15361] do_recvmmsg+0xdba/0x22c0 [ 501.689579][T15361] __sys_recvmmsg+0x5dd/0x610 [ 501.694237][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 501.700296][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 501.706447][T15361] __do_fast_syscall_32+0x2af/0x480 [ 501.711675][T15361] do_fast_syscall_32+0x6b/0xd0 [ 501.716506][T15361] do_SYSENTER_32+0x73/0x90 [ 501.720991][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.727288][T15361] [ 501.729621][T15361] Uninit was stored to memory at: [ 501.734627][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 501.740357][T15361] __msan_chain_origin+0x50/0x90 [ 501.745288][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 501.750440][T15361] get_compat_msghdr+0x108/0x2b0 [ 501.755358][T15361] do_recvmmsg+0xdba/0x22c0 [ 501.759835][T15361] __sys_recvmmsg+0x5dd/0x610 [ 501.764505][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 501.770587][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 501.776739][T15361] __do_fast_syscall_32+0x2af/0x480 [ 501.781913][T15361] do_fast_syscall_32+0x6b/0xd0 [ 501.786758][T15361] do_SYSENTER_32+0x73/0x90 [ 501.791240][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.797568][T15361] [ 501.799888][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 501.806546][T15361] do_recvmmsg+0xc2/0x22c0 [ 501.810940][T15361] do_recvmmsg+0xc2/0x22c0 [ 502.101486][T15361] not chained 1010000 origins [ 502.106231][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 502.114902][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.124963][T15361] Call Trace: [ 502.128275][T15361] dump_stack+0x21c/0x280 [ 502.132632][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 502.138372][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 502.143508][T15361] ? kmsan_get_metadata+0x116/0x180 [ 502.148725][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 502.154553][T15361] ? kmsan_get_metadata+0x116/0x180 [ 502.159772][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 502.165600][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 502.171678][T15361] ? kmsan_get_metadata+0x116/0x180 [ 502.176881][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 502.182411][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 502.188482][T15361] ? _copy_from_user+0x221/0x330 [ 502.193409][T15361] ? kmsan_get_metadata+0x116/0x180 [ 502.198591][T15361] __msan_chain_origin+0x50/0x90 [ 502.203538][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 502.208670][T15361] get_compat_msghdr+0x108/0x2b0 [ 502.213622][T15361] do_recvmmsg+0xdba/0x22c0 [ 502.218136][T15361] ? __msan_get_context_state+0x9/0x20 [ 502.223591][T15361] ? kmsan_get_metadata+0x116/0x180 [ 502.228778][T15361] ? kmsan_get_metadata+0x116/0x180 [ 502.233970][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 502.239852][T15361] ? kmsan_get_metadata+0x116/0x180 [ 502.245046][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 502.250318][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 502.255066][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 502.259832][T15361] __sys_recvmmsg+0x5dd/0x610 [ 502.264530][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 502.270606][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 502.276760][T15361] __do_fast_syscall_32+0x2af/0x480 [ 502.281952][T15361] do_fast_syscall_32+0x6b/0xd0 [ 502.286795][T15361] do_SYSENTER_32+0x73/0x90 [ 502.291304][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.297627][T15361] RIP: 0023:0xf7f87549 [ 502.301696][T15361] Code: Bad RIP value. [ 502.305777][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 502.314292][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 502.322263][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.330223][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.338182][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 502.346146][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.354135][T15361] Uninit was stored to memory at: [ 502.359154][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 502.364859][T15361] __msan_chain_origin+0x50/0x90 [ 502.369780][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 502.374877][T15361] get_compat_msghdr+0x108/0x2b0 [ 502.379798][T15361] do_recvmmsg+0xdba/0x22c0 [ 502.384284][T15361] __sys_recvmmsg+0x5dd/0x610 [ 502.388943][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 502.394996][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 502.401136][T15361] __do_fast_syscall_32+0x2af/0x480 [ 502.406336][T15361] do_fast_syscall_32+0x6b/0xd0 [ 502.411185][T15361] do_SYSENTER_32+0x73/0x90 [ 502.415674][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.421970][T15361] [ 502.424287][T15361] Uninit was stored to memory at: [ 502.429315][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 502.435020][T15361] __msan_chain_origin+0x50/0x90 [ 502.439942][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 502.445040][T15361] get_compat_msghdr+0x108/0x2b0 [ 502.449959][T15361] do_recvmmsg+0xdba/0x22c0 [ 502.454448][T15361] __sys_recvmmsg+0x5dd/0x610 [ 502.459186][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 502.465247][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 502.471387][T15361] __do_fast_syscall_32+0x2af/0x480 [ 502.476570][T15361] do_fast_syscall_32+0x6b/0xd0 [ 502.481450][T15361] do_SYSENTER_32+0x73/0x90 [ 502.485938][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.492237][T15361] [ 502.494545][T15361] Uninit was stored to memory at: [ 502.499560][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 502.505264][T15361] __msan_chain_origin+0x50/0x90 [ 502.510188][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 502.515297][T15361] get_compat_msghdr+0x108/0x2b0 [ 502.520238][T15361] do_recvmmsg+0xdba/0x22c0 [ 502.524727][T15361] __sys_recvmmsg+0x5dd/0x610 [ 502.529390][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 502.535444][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 502.541582][T15361] __do_fast_syscall_32+0x2af/0x480 [ 502.546770][T15361] do_fast_syscall_32+0x6b/0xd0 [ 502.551602][T15361] do_SYSENTER_32+0x73/0x90 [ 502.556111][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.562412][T15361] [ 502.564730][T15361] Uninit was stored to memory at: [ 502.569744][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 502.575454][T15361] __msan_chain_origin+0x50/0x90 [ 502.580379][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 502.585477][T15361] get_compat_msghdr+0x108/0x2b0 [ 502.590404][T15361] do_recvmmsg+0xdba/0x22c0 [ 502.594929][T15361] __sys_recvmmsg+0x5dd/0x610 [ 502.599596][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 502.605647][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 502.611872][T15361] __do_fast_syscall_32+0x2af/0x480 [ 502.617056][T15361] do_fast_syscall_32+0x6b/0xd0 [ 502.621887][T15361] do_SYSENTER_32+0x73/0x90 [ 502.626388][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.632706][T15361] [ 502.635013][T15361] Uninit was stored to memory at: [ 502.640022][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 502.645728][T15361] __msan_chain_origin+0x50/0x90 [ 502.650649][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 502.655744][T15361] get_compat_msghdr+0x108/0x2b0 [ 502.660663][T15361] do_recvmmsg+0xdba/0x22c0 [ 502.665148][T15361] __sys_recvmmsg+0x5dd/0x610 [ 502.669806][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 502.675855][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 502.681991][T15361] __do_fast_syscall_32+0x2af/0x480 [ 502.687177][T15361] do_fast_syscall_32+0x6b/0xd0 [ 502.692007][T15361] do_SYSENTER_32+0x73/0x90 [ 502.696495][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.702794][T15361] [ 502.705101][T15361] Uninit was stored to memory at: [ 502.710109][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 502.715810][T15361] __msan_chain_origin+0x50/0x90 [ 502.720732][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 502.725825][T15361] get_compat_msghdr+0x108/0x2b0 [ 502.730746][T15361] do_recvmmsg+0xdba/0x22c0 [ 502.735244][T15361] __sys_recvmmsg+0x5dd/0x610 [ 502.739926][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 502.745994][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 502.752129][T15361] __do_fast_syscall_32+0x2af/0x480 [ 502.757312][T15361] do_fast_syscall_32+0x6b/0xd0 [ 502.762185][T15361] do_SYSENTER_32+0x73/0x90 [ 502.766672][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.772978][T15361] [ 502.775304][T15361] Uninit was stored to memory at: [ 502.780335][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 502.786041][T15361] __msan_chain_origin+0x50/0x90 [ 502.790961][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 502.796055][T15361] get_compat_msghdr+0x108/0x2b0 [ 502.800976][T15361] do_recvmmsg+0xdba/0x22c0 [ 502.805462][T15361] __sys_recvmmsg+0x5dd/0x610 [ 502.810121][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 502.816172][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 502.822307][T15361] __do_fast_syscall_32+0x2af/0x480 [ 502.827493][T15361] do_fast_syscall_32+0x6b/0xd0 [ 502.832324][T15361] do_SYSENTER_32+0x73/0x90 [ 502.836812][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.843122][T15361] [ 502.845452][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 502.852129][T15361] do_recvmmsg+0xc2/0x22c0 [ 502.856530][T15361] do_recvmmsg+0xc2/0x22c0 [ 503.077526][T15361] not chained 1020000 origins [ 503.082273][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 503.090948][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.101011][T15361] Call Trace: [ 503.104328][T15361] dump_stack+0x21c/0x280 [ 503.108688][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 503.114451][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 503.119585][T15361] ? kmsan_get_metadata+0x116/0x180 [ 503.124805][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 503.130627][T15361] ? kmsan_get_metadata+0x116/0x180 [ 503.135848][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 503.141675][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 503.147759][T15361] ? kmsan_get_metadata+0x116/0x180 [ 503.152979][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 503.158544][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 503.164637][T15361] ? _copy_from_user+0x221/0x330 [ 503.169594][T15361] ? kmsan_get_metadata+0x116/0x180 [ 503.174813][T15361] __msan_chain_origin+0x50/0x90 [ 503.179773][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 503.184930][T15361] get_compat_msghdr+0x108/0x2b0 [ 503.189896][T15361] do_recvmmsg+0xdba/0x22c0 [ 503.194428][T15361] ? __msan_get_context_state+0x9/0x20 [ 503.199920][T15361] ? kmsan_get_metadata+0x116/0x180 [ 503.205142][T15361] ? kmsan_get_metadata+0x116/0x180 [ 503.210366][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 503.216287][T15361] ? kmsan_get_metadata+0x116/0x180 [ 503.221510][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 503.226816][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 503.231591][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 503.236379][T15361] __sys_recvmmsg+0x5dd/0x610 [ 503.241103][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 503.247205][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 503.253381][T15361] __do_fast_syscall_32+0x2af/0x480 [ 503.258608][T15361] do_fast_syscall_32+0x6b/0xd0 [ 503.263484][T15361] do_SYSENTER_32+0x73/0x90 [ 503.268006][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.274341][T15361] RIP: 0023:0xf7f87549 [ 503.278410][T15361] Code: Bad RIP value. [ 503.282481][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 503.290902][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 503.298880][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.306864][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.314847][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 503.322828][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.330827][T15361] Uninit was stored to memory at: [ 503.335877][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 503.341608][T15361] __msan_chain_origin+0x50/0x90 [ 503.346558][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 503.351679][T15361] get_compat_msghdr+0x108/0x2b0 [ 503.356627][T15361] do_recvmmsg+0xdba/0x22c0 [ 503.361146][T15361] __sys_recvmmsg+0x5dd/0x610 [ 503.365839][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 503.371917][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 503.378085][T15361] __do_fast_syscall_32+0x2af/0x480 [ 503.383305][T15361] do_fast_syscall_32+0x6b/0xd0 [ 503.388165][T15361] do_SYSENTER_32+0x73/0x90 [ 503.392681][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.399000][T15361] [ 503.401325][T15361] Uninit was stored to memory at: [ 503.406391][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 503.412125][T15361] __msan_chain_origin+0x50/0x90 [ 503.417075][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 503.422207][T15361] get_compat_msghdr+0x108/0x2b0 [ 503.427160][T15361] do_recvmmsg+0xdba/0x22c0 [ 503.431681][T15361] __sys_recvmmsg+0x5dd/0x610 [ 503.436370][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 503.442453][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 503.448618][T15361] __do_fast_syscall_32+0x2af/0x480 [ 503.453830][T15361] do_fast_syscall_32+0x6b/0xd0 [ 503.458691][T15361] do_SYSENTER_32+0x73/0x90 [ 503.463207][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.469570][T15361] [ 503.471878][T15361] Uninit was stored to memory at: [ 503.476891][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 503.482606][T15361] __msan_chain_origin+0x50/0x90 [ 503.487544][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 503.492648][T15361] get_compat_msghdr+0x108/0x2b0 [ 503.497585][T15361] do_recvmmsg+0xdba/0x22c0 [ 503.502065][T15361] __sys_recvmmsg+0x5dd/0x610 [ 503.506740][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 503.512849][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 503.519002][T15361] __do_fast_syscall_32+0x2af/0x480 [ 503.524289][T15361] do_fast_syscall_32+0x6b/0xd0 [ 503.529124][T15361] do_SYSENTER_32+0x73/0x90 [ 503.533625][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.539939][T15361] [ 503.542248][T15361] Uninit was stored to memory at: [ 503.547262][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 503.552979][T15361] __msan_chain_origin+0x50/0x90 [ 503.557916][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 503.563021][T15361] get_compat_msghdr+0x108/0x2b0 [ 503.567955][T15361] do_recvmmsg+0xdba/0x22c0 [ 503.572445][T15361] __sys_recvmmsg+0x5dd/0x610 [ 503.577120][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 503.583181][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 503.589334][T15361] __do_fast_syscall_32+0x2af/0x480 [ 503.594519][T15361] do_fast_syscall_32+0x6b/0xd0 [ 503.599351][T15361] do_SYSENTER_32+0x73/0x90 [ 503.603855][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.610157][T15361] [ 503.612467][T15361] Uninit was stored to memory at: [ 503.617503][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 503.623234][T15361] __msan_chain_origin+0x50/0x90 [ 503.628194][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 503.633297][T15361] get_compat_msghdr+0x108/0x2b0 [ 503.638232][T15361] do_recvmmsg+0xdba/0x22c0 [ 503.642733][T15361] __sys_recvmmsg+0x5dd/0x610 [ 503.647409][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 503.653476][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 503.659639][T15361] __do_fast_syscall_32+0x2af/0x480 [ 503.664838][T15361] do_fast_syscall_32+0x6b/0xd0 [ 503.669670][T15361] do_SYSENTER_32+0x73/0x90 [ 503.674172][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.680485][T15361] [ 503.682798][T15361] Uninit was stored to memory at: [ 503.687836][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 503.693548][T15361] __msan_chain_origin+0x50/0x90 [ 503.698484][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 503.703588][T15361] get_compat_msghdr+0x108/0x2b0 [ 503.708523][T15361] do_recvmmsg+0xdba/0x22c0 [ 503.713018][T15361] __sys_recvmmsg+0x5dd/0x610 [ 503.717694][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 503.723755][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 503.729907][T15361] __do_fast_syscall_32+0x2af/0x480 [ 503.735104][T15361] do_fast_syscall_32+0x6b/0xd0 [ 503.739947][T15361] do_SYSENTER_32+0x73/0x90 [ 503.744447][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.750743][T15361] [ 503.753058][T15361] Uninit was stored to memory at: [ 503.758084][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 503.763796][T15361] __msan_chain_origin+0x50/0x90 [ 503.768733][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 503.773840][T15361] get_compat_msghdr+0x108/0x2b0 [ 503.778770][T15361] do_recvmmsg+0xdba/0x22c0 [ 503.783269][T15361] __sys_recvmmsg+0x5dd/0x610 [ 503.787943][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 503.794008][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 503.800160][T15361] __do_fast_syscall_32+0x2af/0x480 [ 503.805341][T15361] do_fast_syscall_32+0x6b/0xd0 [ 503.810171][T15361] do_SYSENTER_32+0x73/0x90 [ 503.814669][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.820981][T15361] [ 503.823298][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 503.829969][T15361] do_recvmmsg+0xc2/0x22c0 [ 503.834381][T15361] do_recvmmsg+0xc2/0x22c0 [ 504.088623][T15361] not chained 1030000 origins [ 504.093358][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 504.102031][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.112090][T15361] Call Trace: [ 504.115375][T15361] dump_stack+0x21c/0x280 [ 504.119696][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 504.125426][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 504.130526][T15361] ? kmsan_get_metadata+0x116/0x180 [ 504.135728][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 504.141538][T15361] ? kmsan_get_metadata+0x116/0x180 [ 504.146727][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 504.152550][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 504.158618][T15361] ? kmsan_get_metadata+0x116/0x180 [ 504.163823][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 504.169373][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 504.175450][T15361] ? _copy_from_user+0x221/0x330 [ 504.181693][T15361] ? kmsan_get_metadata+0x116/0x180 [ 504.186890][T15361] __msan_chain_origin+0x50/0x90 [ 504.191828][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 504.196943][T15361] get_compat_msghdr+0x108/0x2b0 [ 504.201873][T15361] do_recvmmsg+0xdba/0x22c0 [ 504.206383][T15361] ? __msan_get_context_state+0x9/0x20 [ 504.211848][T15361] ? kmsan_get_metadata+0x116/0x180 [ 504.217052][T15361] ? kmsan_get_metadata+0x116/0x180 [ 504.222258][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 504.228142][T15361] ? kmsan_get_metadata+0x116/0x180 [ 504.233351][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 504.238638][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 504.243397][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 504.248168][T15361] __sys_recvmmsg+0x5dd/0x610 [ 504.252870][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 504.258951][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 504.265095][T15361] __do_fast_syscall_32+0x2af/0x480 [ 504.270287][T15361] do_fast_syscall_32+0x6b/0xd0 [ 504.275143][T15361] do_SYSENTER_32+0x73/0x90 [ 504.279651][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.285971][T15361] RIP: 0023:0xf7f87549 [ 504.290029][T15361] Code: Bad RIP value. [ 504.294086][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 504.302511][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 504.310481][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.318434][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.326406][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 504.334361][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.342325][T15361] Uninit was stored to memory at: [ 504.347339][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 504.353051][T15361] __msan_chain_origin+0x50/0x90 [ 504.357999][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 504.363123][T15361] get_compat_msghdr+0x108/0x2b0 [ 504.368055][T15361] do_recvmmsg+0xdba/0x22c0 [ 504.372554][T15361] __sys_recvmmsg+0x5dd/0x610 [ 504.377250][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 504.383331][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 504.389484][T15361] __do_fast_syscall_32+0x2af/0x480 [ 504.394682][T15361] do_fast_syscall_32+0x6b/0xd0 [ 504.399532][T15361] do_SYSENTER_32+0x73/0x90 [ 504.404035][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.410366][T15361] [ 504.412679][T15361] Uninit was stored to memory at: [ 504.417705][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 504.423427][T15361] __msan_chain_origin+0x50/0x90 [ 504.428370][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 504.433572][T15361] get_compat_msghdr+0x108/0x2b0 [ 504.438507][T15361] do_recvmmsg+0xdba/0x22c0 [ 504.443002][T15361] __sys_recvmmsg+0x5dd/0x610 [ 504.447680][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 504.453744][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 504.459898][T15361] __do_fast_syscall_32+0x2af/0x480 [ 504.465084][T15361] do_fast_syscall_32+0x6b/0xd0 [ 504.469917][T15361] do_SYSENTER_32+0x73/0x90 [ 504.474408][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.480706][T15361] [ 504.483020][T15361] Uninit was stored to memory at: [ 504.488060][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 504.493777][T15361] __msan_chain_origin+0x50/0x90 [ 504.498730][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 504.503840][T15361] get_compat_msghdr+0x108/0x2b0 [ 504.508776][T15361] do_recvmmsg+0xdba/0x22c0 [ 504.513283][T15361] __sys_recvmmsg+0x5dd/0x610 [ 504.517975][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 504.524043][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 504.530198][T15361] __do_fast_syscall_32+0x2af/0x480 [ 504.535399][T15361] do_fast_syscall_32+0x6b/0xd0 [ 504.540249][T15361] do_SYSENTER_32+0x73/0x90 [ 504.544737][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.551034][T15361] [ 504.553346][T15361] Uninit was stored to memory at: [ 504.558373][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 504.564089][T15361] __msan_chain_origin+0x50/0x90 [ 504.569029][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 504.574140][T15361] get_compat_msghdr+0x108/0x2b0 [ 504.579075][T15361] do_recvmmsg+0xdba/0x22c0 [ 504.583575][T15361] __sys_recvmmsg+0x5dd/0x610 [ 504.588250][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 504.594353][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 504.600490][T15361] __do_fast_syscall_32+0x2af/0x480 [ 504.605685][T15361] do_fast_syscall_32+0x6b/0xd0 [ 504.610546][T15361] do_SYSENTER_32+0x73/0x90 [ 504.615137][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.621451][T15361] [ 504.623763][T15361] Uninit was stored to memory at: [ 504.628786][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 504.634489][T15361] __msan_chain_origin+0x50/0x90 [ 504.639412][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 504.644519][T15361] get_compat_msghdr+0x108/0x2b0 [ 504.649455][T15361] do_recvmmsg+0xdba/0x22c0 [ 504.653997][T15361] __sys_recvmmsg+0x5dd/0x610 [ 504.658661][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 504.664712][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 504.670849][T15361] __do_fast_syscall_32+0x2af/0x480 [ 504.676031][T15361] do_fast_syscall_32+0x6b/0xd0 [ 504.680862][T15361] do_SYSENTER_32+0x73/0x90 [ 504.685350][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.691648][T15361] [ 504.693964][T15361] Uninit was stored to memory at: [ 504.698992][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 504.704710][T15361] __msan_chain_origin+0x50/0x90 [ 504.709631][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 504.714739][T15361] get_compat_msghdr+0x108/0x2b0 [ 504.719676][T15361] do_recvmmsg+0xdba/0x22c0 [ 504.724175][T15361] __sys_recvmmsg+0x5dd/0x610 [ 504.728857][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 504.734920][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 504.741068][T15361] __do_fast_syscall_32+0x2af/0x480 [ 504.746250][T15361] do_fast_syscall_32+0x6b/0xd0 [ 504.751080][T15361] do_SYSENTER_32+0x73/0x90 [ 504.755579][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.761891][T15361] [ 504.764197][T15361] Uninit was stored to memory at: [ 504.769230][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 504.774932][T15361] __msan_chain_origin+0x50/0x90 [ 504.779854][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 504.784946][T15361] get_compat_msghdr+0x108/0x2b0 [ 504.789864][T15361] do_recvmmsg+0xdba/0x22c0 [ 504.794348][T15361] __sys_recvmmsg+0x5dd/0x610 [ 504.799007][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 504.805058][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 504.811248][T15361] __do_fast_syscall_32+0x2af/0x480 [ 504.816445][T15361] do_fast_syscall_32+0x6b/0xd0 [ 504.821278][T15361] do_SYSENTER_32+0x73/0x90 [ 504.825777][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.832092][T15361] [ 504.834408][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 504.841081][T15361] do_recvmmsg+0xc2/0x22c0 [ 504.845480][T15361] do_recvmmsg+0xc2/0x22c0 [ 505.071956][T15361] not chained 1040000 origins [ 505.076696][T15361] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 505.085375][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.095435][T15361] Call Trace: [ 505.098747][T15361] dump_stack+0x21c/0x280 [ 505.103105][T15361] kmsan_internal_chain_origin+0x6f/0x130 [ 505.108846][T15361] ? skb_recv_datagram+0x46e/0x4f0 [ 505.113979][T15361] ? kmsan_get_metadata+0x116/0x180 [ 505.119198][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 505.125027][T15361] ? kmsan_get_metadata+0x116/0x180 [ 505.130247][T15361] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 505.136072][T15361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 505.142180][T15361] ? kmsan_get_metadata+0x116/0x180 [ 505.147403][T15361] ? kmsan_set_origin_checked+0x95/0xf0 [ 505.152968][T15361] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 505.159060][T15361] ? _copy_from_user+0x221/0x330 [ 505.164017][T15361] ? kmsan_get_metadata+0x116/0x180 [ 505.169238][T15361] __msan_chain_origin+0x50/0x90 [ 505.174202][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 505.179364][T15361] get_compat_msghdr+0x108/0x2b0 [ 505.184335][T15361] do_recvmmsg+0xdba/0x22c0 [ 505.188866][T15361] ? __msan_get_context_state+0x9/0x20 [ 505.194352][T15361] ? kmsan_get_metadata+0x116/0x180 [ 505.199575][T15361] ? kmsan_get_metadata+0x116/0x180 [ 505.204802][T15361] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 505.210716][T15361] ? kmsan_get_metadata+0x116/0x180 [ 505.215939][T15361] ? __msan_poison_alloca+0xf0/0x120 [ 505.221249][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 505.226024][T15361] ? __sys_recvmmsg+0xbb/0x610 [ 505.230809][T15361] __sys_recvmmsg+0x5dd/0x610 [ 505.235526][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 505.241624][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 505.247795][T15361] __do_fast_syscall_32+0x2af/0x480 [ 505.253022][T15361] do_fast_syscall_32+0x6b/0xd0 [ 505.257892][T15361] do_SYSENTER_32+0x73/0x90 [ 505.262414][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.268748][T15361] RIP: 0023:0xf7f87549 [ 505.272814][T15361] Code: Bad RIP value. [ 505.276885][T15361] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 505.285310][T15361] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 505.293291][T15361] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.301278][T15361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.309264][T15361] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 505.317254][T15361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.325255][T15361] Uninit was stored to memory at: [ 505.330299][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 505.336037][T15361] __msan_chain_origin+0x50/0x90 [ 505.340977][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 505.346073][T15361] get_compat_msghdr+0x108/0x2b0 [ 505.350992][T15361] do_recvmmsg+0xdba/0x22c0 [ 505.355500][T15361] __sys_recvmmsg+0x5dd/0x610 [ 505.360161][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 505.366213][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 505.372347][T15361] __do_fast_syscall_32+0x2af/0x480 [ 505.377530][T15361] do_fast_syscall_32+0x6b/0xd0 [ 505.382362][T15361] do_SYSENTER_32+0x73/0x90 [ 505.386864][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.393179][T15361] [ 505.395487][T15361] Uninit was stored to memory at: [ 505.400539][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 505.406272][T15361] __msan_chain_origin+0x50/0x90 [ 505.411204][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 505.416315][T15361] get_compat_msghdr+0x108/0x2b0 [ 505.421253][T15361] do_recvmmsg+0xdba/0x22c0 [ 505.425741][T15361] __sys_recvmmsg+0x5dd/0x610 [ 505.430403][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 505.436456][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 505.442605][T15361] __do_fast_syscall_32+0x2af/0x480 [ 505.447800][T15361] do_fast_syscall_32+0x6b/0xd0 [ 505.452643][T15361] do_SYSENTER_32+0x73/0x90 [ 505.457190][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.463492][T15361] [ 505.465799][T15361] Uninit was stored to memory at: [ 505.470806][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 505.476541][T15361] __msan_chain_origin+0x50/0x90 [ 505.481495][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 505.486591][T15361] get_compat_msghdr+0x108/0x2b0 [ 505.491509][T15361] do_recvmmsg+0xdba/0x22c0 [ 505.496009][T15361] __sys_recvmmsg+0x5dd/0x610 [ 505.500686][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 505.506738][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 505.512877][T15361] __do_fast_syscall_32+0x2af/0x480 [ 505.518059][T15361] do_fast_syscall_32+0x6b/0xd0 [ 505.522904][T15361] do_SYSENTER_32+0x73/0x90 [ 505.527407][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.533707][T15361] [ 505.536012][T15361] Uninit was stored to memory at: [ 505.541023][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 505.546725][T15361] __msan_chain_origin+0x50/0x90 [ 505.551657][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 505.556754][T15361] get_compat_msghdr+0x108/0x2b0 [ 505.561670][T15361] do_recvmmsg+0xdba/0x22c0 [ 505.566155][T15361] __sys_recvmmsg+0x5dd/0x610 [ 505.570819][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 505.576867][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 505.583002][T15361] __do_fast_syscall_32+0x2af/0x480 [ 505.588190][T15361] do_fast_syscall_32+0x6b/0xd0 [ 505.593024][T15361] do_SYSENTER_32+0x73/0x90 [ 505.597509][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.603814][T15361] [ 505.606144][T15361] Uninit was stored to memory at: [ 505.611176][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 505.616882][T15361] __msan_chain_origin+0x50/0x90 [ 505.621813][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 505.626905][T15361] get_compat_msghdr+0x108/0x2b0 [ 505.631831][T15361] do_recvmmsg+0xdba/0x22c0 [ 505.636330][T15361] __sys_recvmmsg+0x5dd/0x610 [ 505.640990][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 505.647053][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 505.653211][T15361] __do_fast_syscall_32+0x2af/0x480 [ 505.658408][T15361] do_fast_syscall_32+0x6b/0xd0 [ 505.663240][T15361] do_SYSENTER_32+0x73/0x90 [ 505.667724][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.674022][T15361] [ 505.676328][T15361] Uninit was stored to memory at: [ 505.681336][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 505.687036][T15361] __msan_chain_origin+0x50/0x90 [ 505.691956][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 505.697050][T15361] get_compat_msghdr+0x108/0x2b0 [ 505.701967][T15361] do_recvmmsg+0xdba/0x22c0 [ 505.706455][T15361] __sys_recvmmsg+0x5dd/0x610 [ 505.711115][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 505.717187][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 505.723357][T15361] __do_fast_syscall_32+0x2af/0x480 [ 505.728540][T15361] do_fast_syscall_32+0x6b/0xd0 [ 505.733386][T15361] do_SYSENTER_32+0x73/0x90 [ 505.737888][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.744198][T15361] [ 505.746529][T15361] Uninit was stored to memory at: [ 505.751536][T15361] kmsan_internal_chain_origin+0xad/0x130 [ 505.757238][T15361] __msan_chain_origin+0x50/0x90 [ 505.762159][T15361] __get_compat_msghdr+0x6db/0x9d0 [ 505.767259][T15361] get_compat_msghdr+0x108/0x2b0 [ 505.772178][T15361] do_recvmmsg+0xdba/0x22c0 [ 505.776670][T15361] __sys_recvmmsg+0x5dd/0x610 [ 505.781329][T15361] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 505.787380][T15361] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 505.793515][T15361] __do_fast_syscall_32+0x2af/0x480 [ 505.798711][T15361] do_fast_syscall_32+0x6b/0xd0 [ 505.803544][T15361] do_SYSENTER_32+0x73/0x90 [ 505.808030][T15361] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.814331][T15361] [ 505.816652][T15361] Local variable ----msg_sys@do_recvmmsg created at: [ 505.823337][T15361] do_recvmmsg+0xc2/0x22c0 [ 505.827761][T15361] do_recvmmsg+0xc2/0x22c0 11:34:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r1, 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="dbf6235df8b118c0596052a049d752cb74be289fa5a954fb31217a4f3a08a22a21e0cfbfa8806e5763df6202a91f4f527c2bb511cd5f2eb987fd0492b5f3500d7505e54c58b057376cda0588fad0e97ba00f9df9d331ae0bfb9d1b29", 0x5c, r0) set_mempolicy(0x1, &(0x7f0000000200)=0x1, 0x3) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0xfff, 0x1], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:43 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) 11:34:43 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000040)="b9", 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000240)={0x392, 0x8, 0x7fff, 0x0, 0x2, "e28ca58724531ee2d19d04061ce9ad10ae1603", 0x3a59eaca, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r4}, &(0x7f0000000300)) waitid(0x2, r4, &(0x7f0000000100), 0x80000000, &(0x7f00000002c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000c545754c00000000000000000c00000106000240020000000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) clone(0x304800, 0x0, 0x0, 0x0, 0x0) 11:34:43 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000000)) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge0\x00'}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 11:34:43 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c536, 0x0, 0x0, 0x0, 0x0) 11:34:43 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x1d, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c005}, 0x845) [ 506.344992][T15511] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 506.364978][T15511] device gretap0 entered promiscuous mode [ 506.370827][T15511] device macvlan2 entered promiscuous mode [ 506.425674][ T29] audit: type=1804 audit(1600169683.838:63): pid=15519 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/25/bus" dev="sda1" ino=16019 res=1 [ 506.475429][T15518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17861 sclass=netlink_route_socket pid=15518 comm=syz-executor.2 [ 506.533110][T15522] IPVS: ftp: loaded support on port[0] = 21 [ 506.622008][T15511] device gretap0 left promiscuous mode [ 506.639490][ T29] audit: type=1804 audit(1600169684.058:64): pid=15523 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/25/bus" dev="sda1" ino=16019 res=1 11:34:44 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) [ 506.800916][ T29] audit: type=1804 audit(1600169684.088:65): pid=15512 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/25/bus" dev="sda1" ino=16019 res=1 [ 506.825452][ T29] audit: type=1804 audit(1600169684.108:66): pid=15512 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/25/bus" dev="sda1" ino=16019 res=1 [ 507.186423][T15530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17861 sclass=netlink_route_socket pid=15530 comm=syz-executor.2 11:34:44 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x4) prctl$PR_GET_NO_NEW_PRIVS(0x27) 11:34:45 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000000)) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge0\x00'}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) [ 507.722270][T15521] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 507.741962][T15521] device gretap0 entered promiscuous mode [ 507.747948][T15521] device macvlan2 entered promiscuous mode 11:34:45 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80800) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:45 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x141880, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffc1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080000}, 0x40001) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40106435, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:45 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="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", 0xff}, {&(0x7f0000000100)="a8711a82d4fe12762a02a204d07373ca21a7867019311fc5fc21e2e4e73b51525969aea5ff1015c1d320764287e520ea5150a95dda", 0x35}, {&(0x7f0000000240)="1dded73541104c4390327597b4a0ca8d94eae7b204a124b82617bde2c9add357955b16a048719efa96d8f158670f9b452dc817b51bfa6355580c4404bc8e69cee68aaab74e358754d61dd19548ce7e2a86b4a679c6854d8700bfb3432d8f5802a6d4221d8e7072a1c084fd9a3cbf1b9671ce73e787def85b95202d4b2fd8835d6d27c281af99fe2910628a3caa669a40803851bf369f89c4ba78114810eaecdc948116c14519192ec5e6bef12c9e5a58f06ca75c67dc46ddb0652fc23bb2a6baf82e150e79", 0xc5}, {&(0x7f0000000140)="acf444fbbc138425f1a8f95ae296c5aa1895329158f53e59328d91eded17c3680aa76e27bbd88f9bc8c365c4708dc376a6774c7f42031731aa813024588bb31ad1a1ef21ef90e47046245873dcea2776ce5f7d119501b71ac089ee65b22a0f95d8af45f423d0978285d43df86f959a9ce4", 0x71}, {&(0x7f00000001c0)="3ed83272d9baf506b9ef2753038ab026414117d58d71", 0x16}, {&(0x7f0000000340)="5916f59cdc73a87d031a2e8cc52467c4a6985bfce75465807ed469e47de3fa710eb1654994d69b216ebc12d5792e4c00f59da68ec06acbcbd5f72dfaf11dd33c77dd8497be5f215fa1cb2f703c7168b6390e3d2f6a477e10a15ce25424b9d323bee911f3d1466d4ba5b8a931fa08e2226fbefd16d15a3d1f353bd3bc8f2c5028d386e31923fdd537240c8b7e336c3a0e3f01bed3f7706efc06808e80eb3da65e406e", 0xa2}, {&(0x7f0000000400)}], 0x7}}, {{&(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="7411b0", 0x3}, {&(0x7f0000000500)="12e6f7223fa9f407e771782064d93520cfe7e9e1520fa878e11d628dbfd925f4313c5e205f25429594a368b82534c1e8f30693c68c27549a06924ffc7cecdad978a3ace78b8f1a0735b465a74fe3ee9ca727117427484791ae1973772809e95fbf73baca1e1354d569c5fb1d2c6b1009483e3bed3dabbcb3eadaec2f4a46634bf6b3d2c5265934a3ddb8a4a86c09c3cbb3a26854a7efdecc52e317b537ed03c00ffce3ad740e68a302b777424743955fa996f16c832c673b2a77a5e18fc11aca531e441c8a16a392a8fa7e10dbe927fd9745a35fa83bd1648dc4cff2a3d99804bc36e43f", 0xe4}, {&(0x7f0000000600)="e3151096ad82bf776f34d77503cc9cdf97b32dc0a1feb9250ef32a8ef9627e3bba2fc718838a48f50e90072bf3de522d1af88f6bd302fb9fdf39651a7b39484e01aa6fae507ad69d8effd9ab86db37b5de5e57092d28b3f8388e6b521209903e864587c37454079ff4ab1a93cdd61b748b4e5a0cd8843a0b646b06a5230a280062523708d92952197e376eb8afedeeabd65b3d02f38dc205acee69cc522c16dd2e8da5d0f3e8396eb74e8163f90768700a314ec6774ac520b967901510d1ab090d5817077f7add855fbdf650482ef3e3d188809b71b456f5fba83e6c8c8df1e97910a3a6f2e2855e", 0xe8}, {&(0x7f0000000700)="880fe85f0dd08c9a18524d52c6ac9455a4c4bf49", 0x14}], 0x4, &(0x7f0000000780)=[@ip_retopts={{0x78, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xee, [@broadcast, @loopback, @multicast2, @multicast1, @private=0xa010100, @multicast2, @empty]}, @timestamp_addr={0x44, 0x44, 0xca, 0x1, 0x3, [{@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x400}, {@empty, 0xbf9}, {@rand_addr=0x64010100, 0xffff2a6c}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x4}, {@rand_addr=0x64010102}, {@private=0xa010101, 0x6}]}, @generic={0x44, 0x5, "db4c55"}, @noop]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @broadcast, @loopback}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000880)="aca43af6f48358cd469b66441ba9eb38cfbdce0fa7ec172547925a537074f9c32ff5ed3db63bfaba43e9ad90f66867c689a79ca90ec2f100cb71f8e03cfafcf9778d39221a2a3edd584f1acf9ec1532218d54d0501012fb5cd4bd89cb6c5f1b7c244f3cd6bb1fa9469ab697cf6f16f8ec467312b548306170dc68da12563a9ac87709cdf301b60a5371c9954b091ff9dc7217e6a60d291e5257cf54362df7554fb9a8d7f93fd96c671a8c3abaaa1d1b24c87a882442de760a9245a1dc0b1829056c323232a6683f7ca7c74b7d4290324b64f25d4ccd00486fa7e54d0631f66a52b0529c598b81890d74988fb7c55b6997103df76829abaa1532b", 0xfa}, {&(0x7f0000000980)="11dfea4deee6f8206bc194ecd9e77f8539faff0d2cc60f0a9ac770ad0e68ade2d477ad1a499c45cc1a389df560ffbbbb5c0bdb7deac670832b55c007440af370071b697f5f9b5c4eb6d4388124ca16d1310c3b076d654cc6050d3fa793525068eef090f6861a552624bc7e0f8821cde5c7319db0661cb8a7715ed204329bbe455c37b5af65a077ded1bad23044ebf8c7caf0459b02d95efabdff1c48bdd3afe6351ee059a7387bb8526d3e06f4d7d23007f2914ae0cb1762781362d87acb21a2c8063e0f5f5fb31cc6875a1dec22bcb72fca60b95f3282", 0xd7}, {&(0x7f0000000a80)="dd115175e5ab05f52755eab8b4f2e123b5517dda464cce92f9c749899abe797b36c59d3966a35d0b6aa139dc2bc6ea43c86a0ce2083ebb437cf17e93", 0x3c}, {&(0x7f0000000ac0)="c3b7d9e3bf676a6d4f25f458e4b72f5b0eea59baca89dbb8654d1c4d00a6d37e502585a98c72d613566cf4353ca2dcb924b5992aeab1daad735f53a30f0d6b3740c2f96cef2e29952cb9e041645ad01fd253da0ed86dfa5326c04dc596c1423d4904106adb9242df8b61929da4d2f4a22ba1bcb1c29226ac23c05c4b0fae39cfd285442925", 0x85}, {&(0x7f0000000b80)="c367d3d525f488389b576b638d72703a5736b6a6ad3a7de8073b8ade918e9821bfb5d63eae36c85d0c7d0d41f7c1121257cba6408ab43623dd9521ab8e471f61db51d1563e639d305373f9aaa62576aaa3bd48d354188684c6483247c13d26c1228e9455c91c985440ecdf8948e308750f58f14abc2059ad4aececc529a3bac04b994014a1bd8d9d7d8d334d9b93906d9205751a2db08833e10969ae8b2da9425d91524612995feb0e286e0ea508c88dadc76fd4abbf3c975b77e17fb7c2c2ba98c14d39", 0xc4}, {&(0x7f0000000c80)="2ccc2c9be1eb7567239439e5a6516ef5978f806243bbbb4271004109e90b63db7ada3f65102597ee4ebb084b590d27fe496232e6c7a5329a4116a220f8a85e650d0854aa0f40f659ffffcad43922ebf9957843eabeb3f56061ca4ebdd0fcd35e396617c4abac7756cabe6f1cf2f755a7263011afa9003c1e49", 0x79}, {&(0x7f0000000d00)="46b76985f0f50ed90da3551210a77754aab439209c4d9b31cd598d5b948afc64814f0d6af4c2cd3d091af14418536d6e", 0x30}], 0x7}}, {{&(0x7f0000000d80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000dc0)="81e1d2842105f97296716bc97a8e", 0xe}, {&(0x7f0000000e00)="46998694e7f02ece1f92abe9338644f4d8fb3b3b24dadbe0d113db22d4c5a7744966d4f74f014bff72a9805fc683c387f67d", 0x32}], 0x2, &(0x7f0000000e80)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x7, 0xc1, [@multicast1]}, @generic={0x44, 0x12, "80c90482e93a2ccd9773a7be1d8f0a90"}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @generic={0x83, 0x9, "fffb5dd1787fe0"}, @ra={0x94, 0x4, 0x1}, @noop, @end]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x5}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @end, @noop, @timestamp={0x44, 0x1c, 0xf0, 0x0, 0x0, [0x53, 0x6, 0x3, 0x5, 0xa74c, 0xff]}, @timestamp_addr={0x44, 0x24, 0x8e, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf1}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xcf}}], 0xdc}}, {{&(0x7f0000000f80)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000002300)=[{&(0x7f0000000fc0)="2654c7025e0e8b7cbe752ce899bd6c5920f46d4b8bad6641b6c99f779fe19fee5331c918f2aaeedac374bdbea3c07ae6b4ab0dec97c65a76d9d1381163a1a3f0caef540e6e8ffa4b89590d2a83e94638813d99e07b14933b3979cfeea2e15e7e4062d16be4ac0fa58c21c09e865da7898a994c4b960d7e6e", 0x78}, {&(0x7f0000001040)="2b021eb66db9ece7a388a7382d3d11ea76aa19e8c3355a05aeb468a5d56900e42a1cfb9f5aff41ac1f4977f68f9519a04cb36e6498d2eaffde77b3b4a02b92008811a0e51a065c89f4f95746ed7dd172eb1ca2723d5bbab3d86e5b9b8b07c50a09a017ab8b24f2d24f37b7be68b1e9252a9d1071f6d0ef5a6f4292122a3d7b39a85f0b52b149672631259438c633ed8b372ee6d18d24dd6d2ead09f9378a7294e43a96965239285c465a0d8e38c6d8ce98e935530ab7cec0a9c125f08761585caded72df0d929dde94", 0xc9}, {&(0x7f0000001140)="56b114f613ed4473b7cbedc41ab5e3d9601f80a80e75835cf0b9e0031da3030a114170030fd0039712ba2407e1c62d02f25cd6aa5368e4de708e0c83877863a4f215df67583693fd9799594dd1940ba3e372f7c128fea603c9e53456627f2de885e309692a59210f35ffcf436cb986e082154df9ad8548616f65bc3d50a1a361fd284dab14dba2dff7c244d30b9437469dcea8227fabe18e6a1023a7774a", 0x9e}, {&(0x7f0000001200)="cc11e95d4a9608e4e39a2c0a4f6c4dd83e296472a33c4de4b3c3a8592e815cdadd09bcdcba1bd8482479b4d100bc474bca02173654c41a5b2f4da2c88c1ac7f73b63cdf42740ca9217af5270afb1aed1e79ccb2ad1bf6af4c9f542f92f91cfe0c4a53618f333c7846686b959dbb2a738747be470b8e5bc990b93ef2228406098d64c6941cc", 0x85}, {&(0x7f00000012c0)="e5262c8fca0945c1dbe0e8a2f16ff1ea44843dfa8bb508c56719944e13e2cb921c9cf91a4dd3da7ec34ef0cbfad984c787ee67bc618e562c3c8021451245df85067e15d176136822ffb3f80c0cb7a05098d13a2718c92b6da3d5ec800a2cd1eb09b108d45e20128147f179ae32910f99e3aae75cb2cd6583afb91fcd9893a4c3c515d25cdff07feb85b13c0559e9f007258fba758245fce2f1df7518e108d520ceb2a1200de222886dde91cd7d9f35dfa4ae6dad2947aac41c3ded34d9c7027616e225112427a5cfbc466d6e0bd2cbef84e9ff8a286d1960ba0dc6693b43b63ae42464848b41bc0d5cfd4e952346e510eb8cb8deed1479db25ffb213568972e17678c29d2c2178eb0a6b30a4d8623516a5416c879d58420b9aaa79d2d8447aa9b8042eff207c3c691ec3c782c0f3f05d30fb3029a7eb298b93b961dd0f6d9150b44b081d9f3aee76ade58e97c96e3598660a9bb8d58125a99302c3c810a3c95b759fb201551bbb87434e285465e89d60f88c39803702122860ae49af413029a9f3317c7c6755b0d87b70e11d739c5d8af81b775289c87563f5eedb9527691ff0d669fc74fb63c81130eb8cfa6042773bdc0c0343c46edf4ad618f26c705d97f72378b902e570e4796d3fbc991567311299bd5970bca7ac72e1a6a3b80414b6ae8ab0f44ef7754558891f7f6aa6882769fd8d7e9206e81c9a1618da08b1fc8e098aa05eb89a356043dd3d3607d771e5a22e19414fb7f419b34ed85f57e4a3f44cc6f8b21c384b2929a765d44a914239439ffbfd5d90ef5d000f54dcbab5877756e3e9540cdc4f249d06772a19c3cc069ce3a46e305d00d2c4c216265a79a6eb1bbe939a66c21a42008a7ba5b538018e0edfb29a3eb65de122a1d89c3c37307bb9fcf1a787541180d676517a4389c6f7b1975aeddd0abd82ed589db6f363532164080dedee65f2ea7516eefbe74cc7b9b7c21191153d27d06ce71d6b9627322d80ece4e06163d6f0273b4fc725fe7ff67aa20bd46bcf4bf493328c0c552dba2bf7276c1a39603c9331231dabfda2f51cdc3e44257694f3583737fe3761727ca8f61b9fad8b7529718a78a7e557a8e6db33b7f84e880045f97d80cb7110cedae7fb85532b65775cc3d6f9bc466b2aaf937936c582da8952ace4376ece0f8e487d1e680380899f4dfcb9fe5deaff019b9863e39bc74221552a499db98a80a335ad7c14a6419a51d5ebdd2ff3baffbcafbc905c2b1a37bf0525dcaa034d7ef9b2ab46120eb1babaf2c7ffe6685a5d2f278eabb52d1b4e727d9d1390d82f8ab01a16acfc9f778d17f9332fd3e6347f6199eb886fa4c6c26f8b9b7d77dab70b8a16222e577412e630f9af14ba1071d17fc492250d2665186476fe51d685fe09552828e9ab1e883cc18023700413aa80f18a4523129fbea302d69f8920feb2d366c1e6f2453bb821d95d058922c3f997a3eab785021fe372fa557347a36a1455b53fdeffac71fa33f9e5be67bc3d65877700ec81b9dfc4e70d23cfa57c9d754a80e15e1d292a147a50cfab3503b6d87598b6b17babe6968771bce712d1d8669bfc8fa423034254627781990887d4c162f188d8db9555f5f98e6a893ab58f4a9ea3b1fb83880f475383e92fcd427f4edfc033f64b42106b41aa18f3d653c22310e5a67e71940939f79e961ba48bbaf2f256b6b6f9506bcfd58de9bef546fa41ae254cb4aa1b090b89dcb18b26f91d8fef0d182402e0f1b3c944121c50ec574ca901fa7e8f16b4adb92ae54c74a250c887cf4dd9bf4499fb92f9446e7c0dba060dd313ef4e30008d2495ec4bb6771be5ff9a1f78a804d651f548a9c9eda68e5a20c9d16ba369e3814648ea7caf966a9012d5acba800a81ddca7eee79f0f3c9929242a3f714edd3182523a055f2c3289a17409cbd9c614fa0a96ea806e3343b174bf140accd1a59710cb0e3465fb9b7300e81d7c35c1b51ca55a771ff1ad4f9e48f3cd9835d2fc1bb6c55524082f7fbfa754e362a31480be9d1a62fcd663c118fdd273d515e4ec2990a8fa7d1f2343dc224ab7e09610d5c4b5a4dc8e0b85e153a95280433ca9f920621ab79c7eee801f9fe5de1dd10d63540ca8e028e362a479b88a2b95f371091ac6ebc0c1102b947b57bd190a633bc32032037c8f8dc4dd1da79a1e5f9d65fbc27138c2d734163423968a6bf9b5ef3f7c3fcaf316ac3902f277015bc4ecf1d17bd82eef7bd84fd185fdae55cf778cacffbe5bd473c52349573e53bfe95669f92bd9e4ba25e7d049d4a841d87c60ab3ac761bfbc22976f175fb00d8268f03d81a707906733128a62ed2bb35a8c6afedfdcb6c61232ae9cace0de64e60d66fcd1685c43a66d8bb5739805c90285b3c3cf3a8c89025f8bd206c467a56ac53545b5d8639a05165d11d14862793d9b9fc44e54a0bc676b9a3cb9ad9beb450a10da362bec3dce7d0688d1f772c1d00e0c920958b958c35b37c7d33a09daf596466201d89c3b3bed0d0b579265cbc9804a2477bd35686b0e365c5dd589a224f013a3df529a1b7526c84973fc3312f58df4a412e91b4fd4b23ba3ca4f05eb55a6ab668fe80a0ae3b5763e01f1f348939be2ec1d0e002940a48aadc4ac161d464eb0d2d778925ca09bcdea2fc1c423214bedaff9b25b7e2ba1e6b370bab1e980cd5f70a40d00c074779a192d775951f51ce93da290fb923d061d7b7014f9c8ca14c2f926e441456ddd3c1535ae0e39208e1e1f1aae003b2b357cc85eacbc3ff873d48105518cb69e517bbe6ba8387171449b5a3fb06f4e2a6349a0d356077683fa7d356b6f2faee0dd6735afca95a9677adbc5e6eb76635db01a46171afb405a15d0f8adc01e1e7cdb7aa7878a9eed3da8aad710aef2ff381240ce244564e9a0df65365e08663fe57a217a3880203182cb00f978950776a970bca99d1d4eb3563227edc48503d2dc4390cbb35a24e40926b40eca8c80fa23d7282ab7ba8c1ede970cec06d3e9c0ea50d02f291c692f17b98a8403097c0eec3e609b07d75be272ceb1d9626aeb2e456fc81ad717351de336bc8eece3d7f3e720a0ad0b9478a526d21ebab98abfeb1e1555ff016db35f9831916ff8e53015b922f0756c7401ce1286f8074ae492ca610305b6acf6ee84bc591f0f48770148e925c0931e1ba5cada61721cf14750d6714cfdbc8dff096202eef94d12123531e19f6a04168e2f8ba6ce77ad2e332f2cd0d9759dde2ce3fdc60de990332a59106df8ad716bff3009b272fe60af7438f8159534221686ce928530a3b38afec4dd9b7fb6db27c46b754b9395472564d2d5e3a0098ea11fef2ec152c431468dddc72e140b6405cd252a7a5f88b5e756c7ccd730e27fbd1d86559f18bb74a94c4c44cf10bd3e04a2ce8e2f3b6d59e6ad24f125a477d4874aea51606762d4c28dbabfd081038269ed028ac48ead3c76e6eebbb96d6eb2aefedd1c4109ce2bc8b9a3f09f98b32a9b178b099e591468e88b41e0b1771d204730973319f026e1b9a662ce6c47c686715ed06f521bc9c31c593785b0833eee0a677daae7c39f24adfcd98ddc8ec86dd187c7d376c5e810216357a31f1da4afb224b74009c4ed925b3e7e4a525da1c43a9a5cdc61aa9eeef1cfe0e771e9b70929a460a14e4ddd3e111ec2635b5f3607781e0d429cf2760f22ba9da5ab02b566a5cd7dc2f027697c229bd820860df610a99c504944925b620154ac4a92a8bb92fe94aa62d32536a954da560fef27ff06c512072725044f198d1f7c21cef09ae5be24e441592034d5feee13ce71d25e14f1c60e308398553759c66096f3614cc6dc8ed11bb1788d77b907d11282d188167d3b0dbba35df5d50fa28a8e517fc7ec37044692b318dd1772648a2e1f120224f7a3231a01cbd9895ca4c4b82e2462adada66cb3a60eaaa6a6f45d2ea661203a82830ca48cf67e58af6de7e793327dc9cb84d760151825d0f5518900d61f931113b3f2c9c6f1cc2886fdf8df5d68144ecb291f193580b9e755f318ca1d427cc524cf7f3b02c05ace7571e533a0591bc40681800021863f982167ec7f351506dbe4c549149167d487bf51b8a909fb9bd43d8d9a26572e329e9c5a750a43402a27822e9e5ce5c185e62d9dc26b95234a058d93b49c57d8c7da0841fd17a175dbb2aa299a3fe4ee775a3ac1c4077e7b610f24e0f4cf9357d9abc5278d8eab0ed5528401b95b7b3a3e64de80c4a84365513533f380acc46ed2af215bf759af0ebdcc8f059265ce2072b3c4a755bfc296f6997fe1f4938164a09c171754a53931a6cc9aa0312142533b119d95b0068c1513cf395f9f5dbe5b224702536e8780565d18d1469e65b939711e6c37323a87e33fda51baf70cc9ede385dee9bc552713fe859dab8871350f53d6309d78c94d4c20872ca27a670ea1e508cb4effb1c268b6ed4bde64f6c609a650fb790afb9ce9b4c900ac1552e97f0a2fb62d9c1af6abcfd66e9a6a0bc0f61d245e7d41f6f40a5943dbe2dfec9ab2ffa6f4eff12dcacb2ac2239ad6518ecde7fa84a5f7a81a66ec718017fc8a575e6a99f612e24a05648c0a9b752a3961eec9daf0617220376691d3e73e749c80a1e3834f2480b3c0427c26574b1ab5b103785fcead7db64a39e46be17346eb9602f661a1d865c78220abf86f7e22883be6abfa6277ae58168608835b6bcbe2a9dfcaf4196eb842e8042b80fa370b42aba42031e99ce1bff74832941d27e9518e9650f372e655515c9a18377d84c4f8c89377403a9391ea8999b19c3c0a6f3e7fdfb60aca8dbc2f3a7d86a30a3946f76d8cfa9466a33682f440228272133e7a0efbea9bb27489d10b200ac88cf375dc54a5a7812dbf0cf9730aea9aff8db39f8c7add632767475f3970cf8e134b2de2acf5817518da23a176d68f3153a39b07d7ce56095261253cbd2142d136c93c9df22bd619ebbebbec45a148c99825ab7167a47d5625757bc560518e23f2859b5a5e06880121018025d71a47f9ba0bd7628e78ed80a1bbc52f3c15fc9e958ba33bca0d5d313365efd432f32fc0d9544db5d005827121f0065966fbd89c9514c7372cd8449974ee16fbb839496f848ad3dfb17e53518dd0e680cea504c199bf8db772014a159ac8a627e8532388197228566d793f9e579f48cb2c20665c4c6d3ba181aaf143907a9448344e3cc002a986f5528fc40cf7c53ab6e9416903d90088f7b3800a46d2f4af11c44afa6c7374003fca383b766ada04340d6190883677fee8aee0411e00903094ab6a07fc208da22c8491fe4cc4089be60a3db3db0fb8aa61118e1f51725d6cb21661ea537d4c1c161cfc5b9c3787c9b2881577b763f2316c6774d8dbd3676c7fcfb9a55a06d272361d5dad8ce1223f5af0f1ec7b94905d6630667362269953df9628877cb68215fa8a24a7434415bfe548cefdcb46039dbfa4a9d082e294103dbff8cfcfcb09a147d9006b83be0591e73e246f90aa9f3094e339ce21ff0b9720caa310f644e09b23ba7872fbee00803858844b83063c0a543d1963920605e75f5124b3b1b8085fd5714c9f0ab248bd7c5c6fdf36f71dfc22a982c1ad99d985320f2bd5862bb262178e04838d3d38560babdc7277e1486cd8d341886619fcb48dcdcf0dcc9295a66eb854eb1b9bccbf7b02321d022577850fa98f3664fffa9b80363cb025fe4e32b95cfc29d1c60c3e77e2213a6746e32860cbb47d795b44714ccd72a067451791bde744e7f0431ac695f08f37b8a534b51f2b9ec2c66704c3b6217033302f2f983524966fd5d35bd61100d8f9ce35e3100826604e9", 0x1000}, {&(0x7f00000022c0)}], 0x6, &(0x7f0000002340)=[@ip_ttl={{0x10, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0xd}}], 0x30}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000002380)="c954e3b68f1862e29ac8201cf0dc0ba7fddb43ad336b741a", 0x18}, {&(0x7f00000023c0)="c652107a9a661dde4c32b885524e753f1ea59cf8a85820c6f4e4b29b148c68f3f8cbdb5d613f8c94465b595cf53c1dafdad910cd44f8e705a43d713ed6f35b979e418d81a2e45d3603e5edf649bfa099eda4212dfeff552c7e0be241b4a39ce472819a9a88b962004f3b94ef21fbbbc6cd79f6d9c2e3a2ab174d1af3099367735e", 0x81}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="62ae7c8267e9e1e5a0801a9e010bbf75c5997999e7cd9a06a8c0adb132b378a6bd7d1c4439d4b03e0b9b5c427b81ebd3c80dcda03b4542b86b769cfe797a343d8a2ae8029a5fc1fd65a2b5283600c4d50f027544ac039af23c556ba69a3421d8a3f58525fbed51feaf67aaf02a3c47af0bd68c79674e7d97e2142ec17b91e60811fbf1f52246460b0ca12c796cd875e322efd1fcf4323eeaf5b074ae5ae5e8a3e446084d604257723f50fb2e9f5e9e42fda207d38b1aa883690c10c5b4f9d98a4a2cf66f961e28e142cccd8593", 0xcd}], 0x5}}], 0x6, 0x80) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 508.328577][ T29] audit: type=1804 audit(1600169685.748:67): pid=15557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/26/bus" dev="sda1" ino=16178 res=1 [ 508.545745][ T29] audit: type=1804 audit(1600169685.838:68): pid=15557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/26/bus" dev="sda1" ino=16178 res=1 [ 508.570120][ T29] audit: type=1804 audit(1600169685.858:69): pid=15557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/26/bus" dev="sda1" ino=16178 res=1 [ 508.594492][ T29] audit: type=1804 audit(1600169685.908:70): pid=15557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/26/bus" dev="sda1" ino=16178 res=1 11:34:46 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x20, 0x2, 0x10001}) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0xc0300) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:46 executing program 4: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/242) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r2, 0x0) prctl$PR_SVE_GET_VL(0x33, 0xe8b6) keyctl$instantiate(0xc, r0, &(0x7f0000000000)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '%\\\'('}, 0x1d, r1) [ 508.987241][T15568] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 509.006727][T15568] device macvlan3 entered promiscuous mode 11:34:46 executing program 0: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:46 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000000)) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge0\x00'}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) [ 510.041879][ T29] audit: type=1804 audit(1600169687.458:71): pid=15589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/27/bus" dev="sda1" ino=16242 res=1 [ 510.196461][T15571] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 510.216528][T15571] device macvlan3 entered promiscuous mode [ 510.265349][ T29] audit: type=1804 audit(1600169687.658:72): pid=15589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/27/bus" dev="sda1" ino=16242 res=1 11:34:48 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c538, 0x0, 0x0, 0x0, 0x0) 11:34:48 executing program 1: set_mempolicy(0x0, &(0x7f0000000200)=0xff, 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\'/\x00', 0x3) 11:34:48 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x211c180, 0x0, 0x0, 0x0, 0x0) 11:34:48 executing program 0: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/122) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:48 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000000)) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge0\x00'}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f0000000100), 0x8080fffffffe) 11:34:48 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x8820000, 0x0, 0x0, 0x0, 0x0) [ 511.460112][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 511.460178][ T29] audit: type=1804 audit(1600169688.878:78): pid=15613 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir078582787/syzkaller.D4HGIt/28/bus" dev="sda1" ino=16380 res=1 11:34:49 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) [ 511.795501][T15625] IPVS: ftp: loaded support on port[0] = 21 11:34:49 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket(0x3f, 0x4, 0x10001) openat$vicodec1(0xffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x9, @mcast2, 0x8}}, 0x0, 0x0, 0x7, 0x0, "03bc14e46782f9d3f4c01da49b601b5738a4f11baaababcbb5d3ff1aee48d02bf2742e247e1346c8256222df809bc1b5d31e3168d0a8320ebd68ee5366afcd559cfaa7298431c56b84184750a2a558b3"}, 0xd8) clone(0x0, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x3, 0x800) 11:34:49 executing program 0: set_mempolicy(0x4000, &(0x7f0000000200)=0xfffffffffffffffc, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x4, @dev={[], 0x21}}) 11:34:49 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) 11:34:49 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c53a, 0x0, 0x0, 0x0, 0x0) [ 512.316709][T15644] IPVS: ftp: loaded support on port[0] = 21 11:34:50 executing program 0: write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x2}}, 0x18) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 512.874227][T15677] IPVS: ftp: loaded support on port[0] = 21 11:34:50 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x3a, 0x0, 0x0, 0x0) [ 513.075327][T15688] IPVS: ftp: loaded support on port[0] = 21 11:34:50 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0xbd5, 0xffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) 11:34:50 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0xa0000000, 0x0, 0x0, 0x0, 0x0) [ 513.455063][T15725] IPVS: ftp: loaded support on port[0] = 21 11:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x3a, 0x0, 0x0, 0x0) 11:34:51 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x1db27b85f422f7a3, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x1) r1 = openat$pidfd(0xffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x14080, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)=0x1) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:51 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0x78, 0x0, r1, {0xfffffffffffffffe, 0xff, 0x0, {0x3, 0x10000, 0x2, 0x0, 0x9, 0x60000000000, 0x7ff, 0x2, 0x9, 0x1000, 0x2, r3, 0xee01, 0x1, 0x10001}}}, 0x78) 11:34:51 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c53c, 0x0, 0x0, 0x0, 0x0) 11:34:51 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000000c0)="4d96284a00000000000400000013c3d20bfa8c7cff6db9a1f42f7ce04103e1d3f3e5f067230a330ea078ff411095f70022ec5728eb1f4ebd8e743cc3dfa1e9fb62e23970c114faf1e4c6a712ea9f8fa23fc314ef226d369ad17f465eb872432f3dffbfd55e142dde801dceebd7364d92d8c20aed2b4177946bb73bb04ef255da20a9f4a2e5e44add3c131dd30a0bbbaddface2f075920cfc1828c2e43e276603c221ee063909", 0xa6) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:52 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x401, 0x1ff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0}) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x2001, 0x0) sendto$rose(r1, &(0x7f00000002c0)="fd0b9db4abe7d6108b9adea2a770", 0xe, 0x0, &(0x7f0000000300)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/105, &(0x7f00000001c0)=0x69) socketpair(0x18, 0x3, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000240)=""/68) [ 514.541724][T15773] IPVS: ftp: loaded support on port[0] = 21 11:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x3a, 0x0, 0x0, 0x0) 11:34:52 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x6) clone(0xc8004400, 0x0, 0x0, 0x0, 0x0) 11:34:52 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="b9", 0x1) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000000)) [ 515.374761][ T1657] tipc: TX() has been purged, node left! [ 515.588562][T15817] IPVS: ftp: loaded support on port[0] = 21 11:34:53 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x10, &(0x7f0000000300)={&(0x7f0000000200)=""/221, 0xdd, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x0, 0x85, &(0x7f00000000c0)=""/133, 0x41000, 0xc, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0xffffff8e, 0xfffffff8}, 0x10, r0}, 0x74) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x3a, 0x0, 0x0, 0x0) 11:34:53 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c53e, 0x0, 0x0, 0x0, 0x0) 11:34:53 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xffffffff, 0x32315258, 0x1, @discrete={0x62e, 0x10040}}) clone(0x52b06400, 0x0, 0x0, 0x0, 0x0) [ 516.521474][T15856] IPVS: ftp: loaded support on port[0] = 21 11:34:54 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x3a, 0x0, 0x0, 0x0) 11:34:54 executing program 0: set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x7fffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000000000)=""/120) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 11:34:54 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0x1000, 0x2, &(0x7f0000000040)=[0x5, 0x3], &(0x7f0000000080)=[0x2, 0x4, 0x0, 0x9, 0xab57, 0xff6, 0x20, 0x0, 0x8000], &(0x7f0000000140)=[0x7ff, 0x1000, 0x8, 0x7c8f, 0xa201, 0xff80, 0x3, 0x3ff, 0xff01, 0x4], &(0x7f0000000240)=[0x5, 0xfff0, 0x1000, 0x3, 0x101]}) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r3 = socket(0x10, 0x2, 0x0) keyctl$set_timeout(0xf, 0x0, 0x2) close(r3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002700)={'ip6tnl0\x00', &(0x7f0000002680)={'ip6_vti0\x00', 0x0, 0x4, 0xff, 0x1, 0x5, 0x10, @local, @private2, 0x1, 0x7800, 0x6429eb75, 0x4}}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000002800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x48, 0x0, 0x0, 0x70bd2a, 0x3ff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x840) clone(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x94cc2, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r0) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 11:34:54 executing program 4: set_mempolicy(0x4000, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 517.259265][T15855] IPVS: ftp: loaded support on port[0] = 21 [ 517.374051][T15875] IPVS: ftp: loaded support on port[0] = 21 11:34:55 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c548, 0x0, 0x0, 0x0, 0x0) 11:34:55 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x3a, 0x0, 0x0, 0x0) [ 518.171138][T15942] IPVS: ftp: loaded support on port[0] = 21 11:34:55 executing program 0: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000140)=0x4) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) socket(0x15, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000019200)={0xa, {0x4, 0x7, 0x9}}, 0xa) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, &(0x7f0000000200)=""/102400, &(0x7f0000000000)=0x19000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:56 executing program 4: set_mempolicy(0x4000, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 518.678223][T15953] IPVS: ftp: loaded support on port[0] = 21 11:34:56 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x20000, 0x64, 0x3}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000000280)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80000000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4081) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x3, 0x2, {0x2, 0x2, 0x3, 0x3, 0x1}, 0x3e8}) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:56 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x7) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10000, 0x9, 0xb}, 0x18) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) 11:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x3a, 0x0, 0x0, 0x0) 11:34:56 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c54c, 0x0, 0x0, 0x0, 0x0) 11:34:57 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x1, 0x2, "2920688f779c853b1f025fdf6d92f452dc625e0fccb4a8174c26e9379cd3557526f2b97c04019d168141bfd649d61fcda2cf4bbef1964c592ae51a737c6fd785bd72ccaf3b46ba10f5abb501266f6954d1763c4194df8a5a29f15c79b960cbd8f8735dbbe804d599a7cfabe9257735861a8d48449f51fc162cbaf3539e13eb79f1bad51035ec159ec3a1bce523a55124c747c30d148c7dc2d5d7a17dded1e327ba50fe6051047e5508b9a7aa260e7227140b21710c49d137cc1bc27b80b1ffc0cafc0851fc2429ac6fd0da16560ee79cf7faaeac"}, 0xe4) [ 519.802914][T16010] IPVS: ftp: loaded support on port[0] = 21 [ 520.180473][T16038] IPVS: ftp: loaded support on port[0] = 21 11:34:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:34:57 executing program 2: r0 = socket(0x10, 0x2, 0xfffffffd) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x29, @multicast1, 0x4e21, 0x0, 'sh\x00', 0x4, 0x5f8e, 0x46}, 0x2c) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:57 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x7, 0x7}) clone(0x40084000, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x3, 0x3, 0x2}}, 0x28) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000040)={0x1, 0x1, 0x5}) 11:34:58 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x3f) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'veth0_virt_wifi\x00', {0x3}, 0x9aab}) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80206433, &(0x7f0000000080)=""/35) r5 = open_tree(r4, &(0x7f00000000c0)='./file0\x00', 0x1000) write$cgroup_devices(r5, &(0x7f0000000100)={'b', ' *:* ', 'm\x00'}, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:34:58 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c560, 0x0, 0x0, 0x0, 0x0) 11:34:58 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x40, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x7, @none, 0x1, 0x2}, 0xe) bind$alg(r2, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0xf8000000, 0x400000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="010001000000ffdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00080000000600110005000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00030000000600110002000000080001007063690011020200303030303a30303a31302e3000000000080003000000000008000b000000008006001100040000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00000000000600110000020000"], 0xec}}, 0x80) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000240)={0x3f, "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"}) [ 521.006200][ T1657] tipc: TX() has been purged, node left! [ 521.061537][ T1657] tipc: TX() has been purged, node left! [ 521.143608][T16074] IPVS: ftp: loaded support on port[0] = 21 11:34:58 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) write$midi(r0, &(0x7f0000000040)="041a78035f2ce47b8d24f074aafe1d740f9380f72db6f7e04ed94ad656a61061075ad48fd071f62793e8e6c4b94008ac56ba8ee1b319e5e59604f5fc59ed09d9de50e7722d8d1e0eef87c2cabfdf44529e737bf85db1202b630ff055ec6ebe2f55f2d8a6594043ccd8c38fec9eb364d78fbb10059316a0e106b09a8a85dfd7706bbeb515b8aba282c230", 0x8a) 11:34:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 521.683062][T16103] IPVS: ftp: loaded support on port[0] = 21 [ 521.917012][T16075] IPVS: ftp: loaded support on port[0] = 21 11:34:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 522.315141][T16133] IPVS: ftp: loaded support on port[0] = 21 11:35:00 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c568, 0x0, 0x0, 0x0, 0x0) 11:35:00 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x31, "0c3940b64915ae714bec135a28de9562fd9342238d146a186d114c2ac6a873e3c2d341a85def8a8ec018932c1de793ad74"}, &(0x7f0000000040)=0x39) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:00 executing program 1: ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000240)={{}, "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"}) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:00 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') set_mempolicy(0x8000, &(0x7f0000000200)=0xfffffffffffffffe, 0x800) r0 = openat$vcsu(0xffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000100)=0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) iopl(0x4) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:35:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 523.218744][T16170] IPVS: ftp: loaded support on port[0] = 21 [ 523.575310][T16183] IPVS: ftp: loaded support on port[0] = 21 [ 525.144835][ T1657] tipc: TX() has been purged, node left! 11:35:02 executing program 0: set_mempolicy(0x2, &(0x7f0000000200)=0x1, 0x3) r0 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x408000, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x7ff, 0x8000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=""/56, 0x38}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x5, 0x2, {0x2, 0x2, 0xca4, 0x3, 0x5}, 0xffff0b33}) 11:35:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, {0x2}, [@ETHTOOL_A_LINKMODES_HEADER={0xe}]}, 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffff9}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 11:35:02 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c56c, 0x0, 0x0, 0x0, 0x0) 11:35:02 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3ff, 0x0, [], {0x0, @reserved}}) r4 = accept4$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000240)=""/18, &(0x7f0000000280)=0x12) 11:35:02 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="b9", 0x1) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @broadcast}, 0x10) 11:35:02 executing program 2: r0 = openat$tun(0xffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xa001, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x200}) read(r0, &(0x7f0000000140)=""/172, 0xac) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x3, "65a53806b987075f"}) [ 525.426072][T16243] IPVS: ftp: loaded support on port[0] = 21 [ 525.582096][T16241] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 525.601160][T16241] device gretap0 entered promiscuous mode [ 525.607072][T16241] device macvlan2 entered promiscuous mode 11:35:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, {0x2}, [@ETHTOOL_A_LINKMODES_HEADER={0xe}]}, 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffff9}) ioctl(r0, 0x8b32, &(0x7f0000000040)) [ 525.827692][T16241] device gretap0 left promiscuous mode 11:35:03 executing program 1: set_mempolicy(0x1, &(0x7f0000000200)=0x1, 0x24) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:03 executing program 0: set_mempolicy(0x0, &(0x7f0000000000)=0x6, 0x864) clone(0x0, 0x0, 0x0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 11:35:04 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) [ 526.640307][T16263] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 526.659406][T16263] device gretap0 entered promiscuous mode [ 526.665362][T16263] device macvlan2 entered promiscuous mode [ 526.712378][T16263] device gretap0 left promiscuous mode 11:35:04 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="b9", 0x1) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x20) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000000)={0x0, {0x1ff, 0x9a}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, {0x2}, [@ETHTOOL_A_LINKMODES_HEADER={0xe}]}, 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffff9}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 11:35:06 executing program 2: setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x6, 0x4) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) openat$mixer(0xffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x26002, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:06 executing program 1: set_mempolicy(0x0, &(0x7f0000000200)=0x2, 0x3) r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x301000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 11:35:07 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c574, 0x0, 0x0, 0x0, 0x0) 11:35:07 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r2}, &(0x7f0000000300)) clone3(&(0x7f0000000440)={0x80000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0xb}, &(0x7f0000000240)=""/182, 0xb6, &(0x7f0000000340)=""/227, &(0x7f0000000180)=[r0, r1, r1, r2, r1, r1], 0x6}, 0x58) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x5, 0x1, @tid=r2}, &(0x7f0000000300)) ptrace$pokeuser(0x6, r0, 0xe6d, 0x81) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000040)="b9", 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 11:35:07 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r2 = socket(0x10, 0x2, 0x0) close(r2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, &(0x7f0000000100)) r3 = dup(r1) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, {0x2}, [@ETHTOOL_A_LINKMODES_HEADER={0xe}]}, 0x18}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffff9}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 11:35:07 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0xfe3a) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 530.267050][T16322] IPVS: ftp: loaded support on port[0] = 21 11:35:07 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) r3 = socket(0x15, 0x1, 0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000000), 0x4000223, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r6, 0x3a7f}, 0x14) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r6, 0x2}, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)={r6, 0x1000, "b1fb3c9f7c44c005aff841c896b205c33ae53f87f69746922bed12c0b69edf687b5ab93e39c360148dd019cf53ae3d3350f5dc5be68d5e7d295aa1e045293f2398aab99c106a5508a5f50306095b4385014dff81c4af645d0286fb234191087e4f3b0e9a7b49801c28ce0adf5a113369224f1fa3d803aec524816df66d63ee01e8be0625a553fadfe8d8aeef893c0804efebf53d4e6b3bfc9947b83fa0df59cb4d90d3dbd590a5ed9e0363ca0fbc0de79f7d5a9cc15b1ce64ca4b72dc6c288049a0b096a6368d4f73392de16579f151f8e6f482c76279a8ef3465273146c66aba716291ad892a55679eeff37af6730b7fb9d63072865f5ca07afcddf57bdf3237e0ad66021ac4e0963c3d949cd70c2f77d9c48c625090f1ba2d4101b08a81f0b216c3423d03d3526bdcb7ade869f1a4beea51b2ff0f51447bb2a1eff28e2c1ed2b4fed0662f609fa1582de0d6756a6af7c935153300ba4b073a16d9c1588be39593813a4bc09b3eafc44203e762810652afe597a96c1564ff841017920497c612c44df8caef50fe37700d3b0ee1f3bd65b6d752f804876544cf97d017b695a7ccf54dfef13435df74b352f7f42b2a919dd570619c6fcdc76fa99938305ae000bda5c347044880e045b64c26f6b4172cd234b7323af9288bead548e5cc9e7732801744af7e409ebc982d2097ba71131564b90ea2f900997ddcb07de42972c21739fe17d1fa97866fd6588dca65e87aa5f612bba8f227653e65512e7b2cd805db60c2718aa3d927a69d9944e38dc2ec5cf6523fffdce63fa5ff41bfb7f94ad8fe007f899117f48a29c0a5f355aa082476d39e3b32feaa462fa21937089c1952b58aab933cd97f01154a8b56a034e1a4bf91e99c00a3b039bded80e05d6dd55918cc0e33c923df6d6e420121054275d7ccc5608a0c61a0c73383e18e019da2d42d48015098699d5511b494f00865cbfef5cc9ced6a39f77a15f7d465970114a30f854ecf28263471804440479ed943917235af9ff0d73f24d3286c85b2fd359425b8c2a711876aa7170975c441899d1eb6314f6b198621f0684103a11a95b00dd7fe71e6bbfc035f636e12fd2eefea414c0f1f97d3e7bc65eb3a11db5a369e68c446a6a951ef8f66d877934293f52e39fec2555538fd1d7216daf2c0762a442d96ce58f3dd89073b9744ef452aae7c4658a7d6a00c2777512a94cd73e8d1893a6c6781044d5dc39adc6bdfbdd3dfa848ca9f5f37f59d7a70bb328b9d073ac6e256d6553bc9047702958a952ed8c76f7a17f32db132d88523e910e3e113937e94ba71c440f03bc230788ba1c25486f81dcbf67d26839913e85c4bdb6eb150e1bf94994dd7393ac52629da49d85d09922b05af7ae678844b9961146457d9a36119a43683a86ae0382d6c5335a79494e0e2f9ec8015af161edfebe6a155dc082f34dbab8f3e6c4dcbf1752ba40b9545b041abbd6ee3832bb9cacf0cf74b2d79cfeb0ee1d2669c2c689cbb918638c21e4dcb4b090dd8d44b081b51bdb0791f226c50ca160704c3898bda0a33fb9a7ae74d69925fcd0becde12851847c2c36ead70838046bfa8aa93ade727831287e9d15c2f207f132a0664c2f1f03d9a5adaabe583a99d00d9dbceb5111e54776f1aca1713d8b9065518bf342d01e73a4d2813a05d8a978cbed93752aee48f14498b1bc7e56858bd073f9a81e1d291c2ba6e7de9bd986789aa0002aa2922e7927ba39305a1418e254e7ae9648313aabaa7463262aae713e3340a57f1a9eb723579aa5f7b3def14c0800a0bb76bb14de1473547691e3b0b4d287f4c7b208470d6b9cba80714f16898f96863c7d1f949913b1cb9e8cfd6ea8c9709b79d4a1f0f549624610b3220ae81d33ddb514bc51827392607a273740da01f604ef22f14d7820202ac4112920981208af589f41b1de516303af5255804468907e03d75e32b44e1a348fecc82afee939056f99911395e7cbe884a1065d728650985dbab6983802e4008e5e4460ee249c6f940dbec0114fd996ee7bde231acd3de2ffadb61e13c64fb946a08f5513798e640888d43a1f30d1b0456245ce95cfa54f3256e5db24f968a06c6b44cf7af8f377a83556bbe74a9a66a856c77a6b9fe52e1fc0a1db8d9837ea5ac7aae04c5161c9f8bdacadf53490d18e435afa355b0bbcc4c3fe7631035ce3d552504a821c0c19324d76c5fef980aad579bae4f4fc2243d89e1ac4321ee34aed4fe6f41c0f51b45510e5e73673e39958abf78a446fcb36608cd9efabfcbce16eaac5004235f357f1ede05c62d6e0a21d11cbe1137ed7e56e6ff1fbf298a5bf08c90d2c6f7c9a4c1aafc82da66625b6333fdbe55068acff8f3a53a9772208afc53851973bffcb011913d692a0c9f50bc59affa5d03a5d352d35b0fe7ab9fe4e6d87a0dbf4d99b1e0a5032324a4ab127c27fa4fa509e22c9437a0005639ecde673386a36003636f17f5259be81d2a427f9a70415dc17b4dfc8b91b9e32d9f63bd8e5e258dfbd2ad970f0df157f5f1a71ef327123ac3ae5d6f3e6059ef18de64d50e5c9e6caa955b4dbe1ec1ba1d7eb3a7eafd9c9e5221d36bbc57bf0ecb833b105ea919c38dbabb88b09d8c66ea68109749bc025285db4d0cff4c7093ed019db4c369d4392441087ad1ca1b7031e503272525b79d2c929ba09fa35eec7ff9060146d285570aa0413628e038a0fa363444b0538b5f5df181420bb9fbe7608ad36695549c303834562144b8cd61d0a8283d6fc792c983104ba240b604eb2c1f3b91ceeba98b8d9e9b5d46fe68f50ddbcada0c308e54384579ef66882e681657f40138aa9a2e489a49263d48e95ed2e8751877996dcbc51ce93ab35eb92c166d232863d07f339798748ed877a2ced0b6fe4b6b609fd261d9f2987270ff2dccf1961117e88849c3b9fed5ec72125cec33e2cb095b35fb66ff8880ac1bd11140a7857a5c27e53c1d99ac66c1280623a871fdb08cd64fd3b1e0acb792de4655fa590dcd11f7c0d778926ac8d7ca1bc3ecfa2a81ea730d39f9e01d44aac92d2bb5f012685c29cde96dee35c0880c033e848aa66dace511c5193edddb17d5236a9f2ed509432f955c547946e2406a2d6315aa105e160df8e32cebaa6eeed3a37d2d9ebf12e9cfdbb618c89f5a70567c325936411cae8d0ce168fbf5824c66ad827f59cc476aeef7762ddd0724dbf96284da71bb27fee70f90b908933ccb67e06b7f6de4c8ad911d1dc8852e8a681c88b5bb67198cc86e3d82e96aeb47d9e85f4e5ec5add6c5792fdd6c13ca979b95a5a3c8df7dbe0b679d823be04e2685ecd85c39ca9b1641acbb495ec6177da647f3ee4b93171feaad75b6b75b9627f87b0b23b31c3f7c1ea2544ba66f87abb584364c579177f0f424228485c601a93931a934a241cf28de78dfa7cf552ddb537c733aaa79a80d65f8b8200b4159e218371adec1bf9af506b6b8af7fd4c79e78a44c1dc2afc62ec555721b279176362ec10e1a64b35ee3b7ea472d3435568c28fa53e56230c5d438916cf858a4792f0ddf32ec2b5f4787ef33d41781ba222e728507a7c8a3ae8c9ae64e5577af2f12eed7d0d31fadd8508c9b2737d50f29d7e598c9c10397ab5480305aa03e04276f407d07a4c4f6f8e87871e9bb2184c8323642dd6d2a299fba0753cd5812e5f3311fca0dbbfbbcd0a6689595d62c75067b7f7f4bbb34bee312bfaf7880564800dadc5f640a4b6ebb8af069e11d4f3bea6e9fab49ebeab1679aecae74c615a907fa2cb4a1f34dfda29fe98c7de63e74abee2b5b8e9578850cd884146436a757d5d9e7348db3d22ff404255b24d5b9b7a82b0a2e5ab340cf7017db568a7a801c8c5a6cbf0a3676d07ce826863ceabd926a5df04a94eb048f353956b514411d5179f145462619e584a9120e067adae68e64f13b011db766d1cce47d0108fd465f954a03a5efa6d6adace1ac304292cebe816f8d1c3af67d3ffbfe5e857e54238f7e18ab9905f75fb2ba85146bf66368cd5ea7b5bcbf50eb1603a765755352a717171498e3d54cb6f6610aa8fec9eb352a0adf2a824ed82db6e4cf9d78364edebfa1d1e35fdabb29297790a3cccd311584d268f755152f7164fb83e93dfcca883a73c446fef998a198882d140c8bd0d9e040a39fd2587ac2bbbbbdf7770ea9d68cab21db03a7c850139b5e854f5dc30cbed57c11eb12c956f94fdea1ab01ec314fdfa09615521dcf703b8eca3f9230ea17c831de930b61d7eec1611c491ab2b0bf4ba39fa98f372cd3b803b2366ce3964b2cdd6db880c0838d820f0ac626861c40708d2845dfdf7701c6d3ab35a088c20dee0dfe4fc3b2469ccc72472e4b7a3444f4b0208b269fa9cc13b3d8a5a2b2898a0ba7130f8e78382596e32681645f17d1fc6c86f8a8eab0329df2eb498ce51cd9358999a09b9de065730bf0e754319a544ce9a6fb556e860607616ac4b01b5e0887976abd20de52c47e07d10e6cfb354cf412e5ff09da167a4d6405c2e91e4f406cba17145c13c231428f70e164aec6dd11606d9d9e5437936224539d4d3b2eed081aa116beec7743265afdfddfb40b0d89a1cb85f56e381274304882c851181bbe7f4bdff14ccf271b283d3ef5b7d9e201f4f68086495f8a8eaaed8a2f59375c9d66ff1e3ef7cc39ac3c18267d043b6c150401fb7c52f07781b75a3f9be03db46b8aab830910aee729922a25b030a54e585abcf8863a82c384e2f87418f90caea2f4fab5662b2edef57a68fce6b003f38b40ed391963fcd137a4e9915c4aed7cd3376d94b01fbc8d270af3e436d334a223393f8947623b9d572f3c338a12f01bc3ca05d1f1c29e81f455e6e918e3aacc21332070a470910d599263c761c5c893f4b9df955ff4e01a21b2e969159035665505adec61131a233beb8e4acc99c8d1ac3be2bc75cc0b2c62ff9c99dc2beac0beeb7a7bd1d805eed3da17bb2ee538dd767106e0a566c323965d6e355d508b9beff56e357892d547542f24b91fcf981a85a1d74f0b58f51b487611fc3405e5d28e786a96e68f0b6788217b75e979b300d826ff14b4c34c305633626c1bcd201d5501900d90d890da65e3c1bc569a487d8026fdc86a6e295434913c1336d9b85842329e79fc92fee6e2b7b0d5e07cfb20c0e9097e09acf17ee0427b0027689b5e09fb7d3d7427117350c240a46cf8d122a01188f34b9e0f080f9e5d87adce57f4dbf4452c719b8eb235dd0b999b926db6733432aef8dc9637e07013c82689a7b4f07ba2788000278e1d0cfc664e22797afffeb6398a51789d2f3cd2d28c56fe15cb4337381afbc2029dcdb45ca53a34725829989b5a24ac83e6a4d874b664222ce06c7000babbe10087ac105753aca0f845f719ca593ad417d6d5008967d69cb97ae34f659342ec573f9c036f3752e2eded2f9f29836dd231b2862f4b29e4874cb2a3ace482fcd5c070aec63abd33e8ee8ca0e1914a5fffac02a312b764307c5a6276b77401c9e8a80f221b6b7c6e2645bf4150cd61b8dcab12fade2dda1bd91034c2e475c10a1483364a8216f0551cf6e8b58e865e131e4b157ae7f0d50237297d6d1a0f3dce6183fb08127680ba7cfae9c6b9bb47a07a842caed9e2599f95e8f7506d5c12e5bddddcda11701304068aec6e0062983c8d4e9900f1333982d49cb42f880d9bb5eedfcc6b605cf57c72b1dfc12528fab97dc66884a6dd30500655a588aa3d1beb31f6165a7c4a4a7ef826d6cff1c005aad602c3610535f7990305fdf3e38add736e0ff3651fdd2330b838f56dafb5219e6f5f56dc25ef8b1"}, &(0x7f0000000000)=0x1008) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) socket$inet_udplite(0x2, 0x2, 0x88) 11:35:07 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x5, 0x8000, 0x18, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x8000, 0x3ff}}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:07 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) 11:35:08 executing program 0: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0xfc) set_mempolicy(0x0, &(0x7f0000000040)=0x5, 0x23) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800c0001006d6163766c616e00040002800a000500040000000000000008000a00", @ANYRES64, @ANYBLOB, @ANYRES64=r1, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/23, 0x17}, {&(0x7f00000003c0)=""/125, 0x7d}, {&(0x7f0000000440)=""/78, 0x4e}], 0x3, &(0x7f0000000500)=""/203, 0xcb}, 0x4}], 0x1, 0x3, &(0x7f0000000640)={0x77359400}) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000780)) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000000)=0x5) clone(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f0000000680)=""/163, &(0x7f0000000740)=0xa3) [ 530.992024][T16339] IPVS: ftp: loaded support on port[0] = 21 [ 531.237046][T16345] not chained 1050000 origins [ 531.241788][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 531.250476][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.260530][T16345] Call Trace: [ 531.263837][T16345] dump_stack+0x21c/0x280 [ 531.268194][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 531.273950][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 531.279084][T16345] ? kmsan_get_metadata+0x116/0x180 [ 531.284300][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 531.290135][T16345] ? kmsan_get_metadata+0x116/0x180 [ 531.295347][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 531.301164][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 531.307256][T16345] ? kmsan_get_metadata+0x116/0x180 [ 531.312477][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 531.318041][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 531.324142][T16345] ? _copy_from_user+0x221/0x330 [ 531.329098][T16345] ? kmsan_get_metadata+0x116/0x180 [ 531.334323][T16345] __msan_chain_origin+0x50/0x90 [ 531.339293][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 531.344448][T16345] get_compat_msghdr+0x108/0x2b0 [ 531.349468][T16345] do_recvmmsg+0xdba/0x22c0 [ 531.353999][T16345] ? __msan_get_context_state+0x9/0x20 [ 531.359517][T16345] ? kmsan_get_metadata+0x116/0x180 [ 531.364735][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 531.370676][T16345] ? kmsan_get_metadata+0x116/0x180 [ 531.375912][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 531.381226][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 531.386014][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 531.390790][T16345] __sys_recvmmsg+0x5dd/0x610 [ 531.395493][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 531.401576][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 531.407740][T16345] __do_fast_syscall_32+0x2af/0x480 [ 531.412961][T16345] do_fast_syscall_32+0x6b/0xd0 [ 531.417832][T16345] do_SYSENTER_32+0x73/0x90 [ 531.422341][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.428665][T16345] RIP: 0023:0xf7f31549 [ 531.432720][T16345] Code: Bad RIP value. [ 531.436782][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 531.445192][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 531.453163][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.461131][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.469095][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 531.477066][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.485066][T16345] Uninit was stored to memory at: [ 531.490089][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 531.495803][T16345] __msan_chain_origin+0x50/0x90 [ 531.500768][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 531.505878][T16345] get_compat_msghdr+0x108/0x2b0 [ 531.510813][T16345] do_recvmmsg+0xdba/0x22c0 [ 531.515330][T16345] __sys_recvmmsg+0x5dd/0x610 [ 531.520010][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 531.526075][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 531.532246][T16345] __do_fast_syscall_32+0x2af/0x480 [ 531.537449][T16345] do_fast_syscall_32+0x6b/0xd0 [ 531.542297][T16345] do_SYSENTER_32+0x73/0x90 [ 531.546799][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.553113][T16345] [ 531.555438][T16345] Uninit was stored to memory at: [ 531.560496][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 531.566219][T16345] __msan_chain_origin+0x50/0x90 [ 531.571190][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 531.576310][T16345] get_compat_msghdr+0x108/0x2b0 [ 531.581253][T16345] do_recvmmsg+0xdba/0x22c0 [ 531.585788][T16345] __sys_recvmmsg+0x5dd/0x610 [ 531.590461][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 531.596557][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 531.602707][T16345] __do_fast_syscall_32+0x2af/0x480 [ 531.607900][T16345] do_fast_syscall_32+0x6b/0xd0 [ 531.612748][T16345] do_SYSENTER_32+0x73/0x90 [ 531.617250][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.623579][T16345] [ 531.625909][T16345] Uninit was stored to memory at: [ 531.630945][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 531.636677][T16345] __msan_chain_origin+0x50/0x90 [ 531.641610][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 531.646718][T16345] get_compat_msghdr+0x108/0x2b0 [ 531.651651][T16345] do_recvmmsg+0xdba/0x22c0 [ 531.656164][T16345] __sys_recvmmsg+0x5dd/0x610 [ 531.660862][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 531.666928][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 531.673096][T16345] __do_fast_syscall_32+0x2af/0x480 [ 531.678326][T16345] do_fast_syscall_32+0x6b/0xd0 [ 531.683174][T16345] do_SYSENTER_32+0x73/0x90 [ 531.687673][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.693982][T16345] [ 531.696301][T16345] Uninit was stored to memory at: [ 531.701326][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 531.707044][T16345] __msan_chain_origin+0x50/0x90 [ 531.711979][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 531.717086][T16345] get_compat_msghdr+0x108/0x2b0 [ 531.722017][T16345] do_recvmmsg+0xdba/0x22c0 [ 531.726533][T16345] __sys_recvmmsg+0x5dd/0x610 [ 531.731229][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 531.737299][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 531.743466][T16345] __do_fast_syscall_32+0x2af/0x480 [ 531.748687][T16345] do_fast_syscall_32+0x6b/0xd0 [ 531.753537][T16345] do_SYSENTER_32+0x73/0x90 [ 531.758080][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.764404][T16345] [ 531.766720][T16345] Uninit was stored to memory at: [ 531.771746][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 531.777468][T16345] __msan_chain_origin+0x50/0x90 [ 531.782404][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 531.787513][T16345] get_compat_msghdr+0x108/0x2b0 [ 531.792447][T16345] do_recvmmsg+0xdba/0x22c0 [ 531.796951][T16345] __sys_recvmmsg+0x5dd/0x610 [ 531.801639][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 531.807703][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 531.813872][T16345] __do_fast_syscall_32+0x2af/0x480 [ 531.819069][T16345] do_fast_syscall_32+0x6b/0xd0 [ 531.823934][T16345] do_SYSENTER_32+0x73/0x90 [ 531.828438][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.834752][T16345] [ 531.837075][T16345] Uninit was stored to memory at: [ 531.842116][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 531.847833][T16345] __msan_chain_origin+0x50/0x90 [ 531.852787][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 531.857897][T16345] get_compat_msghdr+0x108/0x2b0 [ 531.862832][T16345] do_recvmmsg+0xdba/0x22c0 [ 531.867349][T16345] __sys_recvmmsg+0x5dd/0x610 [ 531.872034][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 531.878106][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 531.884258][T16345] __do_fast_syscall_32+0x2af/0x480 [ 531.889461][T16345] do_fast_syscall_32+0x6b/0xd0 [ 531.894314][T16345] do_SYSENTER_32+0x73/0x90 [ 531.898819][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.905131][T16345] [ 531.907443][T16345] Uninit was stored to memory at: [ 531.912465][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 531.918179][T16345] __msan_chain_origin+0x50/0x90 [ 531.923111][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 531.928219][T16345] get_compat_msghdr+0x108/0x2b0 [ 531.933155][T16345] do_recvmmsg+0xdba/0x22c0 [ 531.937658][T16345] __sys_recvmmsg+0x5dd/0x610 [ 531.942333][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 531.948415][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 531.954581][T16345] __do_fast_syscall_32+0x2af/0x480 [ 531.959777][T16345] do_fast_syscall_32+0x6b/0xd0 [ 531.964627][T16345] do_SYSENTER_32+0x73/0x90 [ 531.969131][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.975442][T16345] [ 531.977785][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 531.984471][T16345] do_recvmmsg+0xc2/0x22c0 [ 531.988897][T16345] do_recvmmsg+0xc2/0x22c0 11:35:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c57a, 0x0, 0x0, 0x0, 0x0) 11:35:09 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) 11:35:09 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="b9", 0x1) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:09 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 532.579985][T16391] IPVS: ftp: loaded support on port[0] = 21 [ 532.913572][T16416] IPVS: ftp: loaded support on port[0] = 21 11:35:10 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000040)=0x20) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:10 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:35:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c582, 0x0, 0x0, 0x0, 0x0) 11:35:11 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) [ 533.922427][T16345] not chained 1060000 origins [ 533.927161][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 533.935823][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.945868][T16345] Call Trace: [ 533.949165][T16345] dump_stack+0x21c/0x280 [ 533.953503][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 533.959254][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 533.964387][T16345] ? kmsan_get_metadata+0x116/0x180 [ 533.969588][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 533.975415][T16345] ? kmsan_get_metadata+0x116/0x180 [ 533.980631][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 533.986460][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 533.992531][T16345] ? kmsan_get_metadata+0x116/0x180 [ 533.997753][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 534.003303][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 534.009372][T16345] ? _copy_from_user+0x221/0x330 [ 534.014314][T16345] ? kmsan_get_metadata+0x116/0x180 [ 534.019511][T16345] __msan_chain_origin+0x50/0x90 [ 534.024454][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 534.029584][T16345] get_compat_msghdr+0x108/0x2b0 [ 534.034532][T16345] do_recvmmsg+0xdba/0x22c0 [ 534.039090][T16345] ? __msan_get_context_state+0x9/0x20 [ 534.044571][T16345] ? kmsan_get_metadata+0x116/0x180 [ 534.049792][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 534.055691][T16345] ? kmsan_get_metadata+0x116/0x180 [ 534.060918][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 534.066211][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 534.070973][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 534.075741][T16345] __sys_recvmmsg+0x5dd/0x610 [ 534.080452][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 534.086559][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 534.092712][T16345] __do_fast_syscall_32+0x2af/0x480 [ 534.097920][T16345] do_fast_syscall_32+0x6b/0xd0 [ 534.102778][T16345] do_SYSENTER_32+0x73/0x90 [ 534.107288][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.113643][T16345] RIP: 0023:0xf7f31549 [ 534.117697][T16345] Code: Bad RIP value. [ 534.121769][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 534.130181][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 534.138162][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.146163][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.154134][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 534.162125][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.170127][T16345] Uninit was stored to memory at: [ 534.175156][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 534.180870][T16345] __msan_chain_origin+0x50/0x90 [ 534.185802][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 534.190919][T16345] get_compat_msghdr+0x108/0x2b0 [ 534.195848][T16345] do_recvmmsg+0xdba/0x22c0 [ 534.200360][T16345] __sys_recvmmsg+0x5dd/0x610 [ 534.205063][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 534.211145][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 534.217296][T16345] __do_fast_syscall_32+0x2af/0x480 [ 534.222490][T16345] do_fast_syscall_32+0x6b/0xd0 [ 534.227351][T16345] do_SYSENTER_32+0x73/0x90 [ 534.231863][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.238188][T16345] [ 534.240503][T16345] Uninit was stored to memory at: [ 534.245540][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 534.251258][T16345] __msan_chain_origin+0x50/0x90 [ 534.256202][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 534.261327][T16345] get_compat_msghdr+0x108/0x2b0 [ 534.266266][T16345] do_recvmmsg+0xdba/0x22c0 [ 534.270768][T16345] __sys_recvmmsg+0x5dd/0x610 [ 534.275478][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 534.281545][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 534.287694][T16345] __do_fast_syscall_32+0x2af/0x480 [ 534.292890][T16345] do_fast_syscall_32+0x6b/0xd0 [ 534.297752][T16345] do_SYSENTER_32+0x73/0x90 [ 534.302252][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.308561][T16345] [ 534.310895][T16345] Uninit was stored to memory at: [ 534.315915][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 534.321653][T16345] __msan_chain_origin+0x50/0x90 [ 534.326595][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 534.331822][T16345] get_compat_msghdr+0x108/0x2b0 [ 534.336760][T16345] do_recvmmsg+0xdba/0x22c0 [ 534.341256][T16345] __sys_recvmmsg+0x5dd/0x610 [ 534.345931][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 534.351993][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 534.358151][T16345] __do_fast_syscall_32+0x2af/0x480 [ 534.363367][T16345] do_fast_syscall_32+0x6b/0xd0 [ 534.368214][T16345] do_SYSENTER_32+0x73/0x90 [ 534.372730][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.379071][T16345] [ 534.381388][T16345] Uninit was stored to memory at: [ 534.386418][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 534.392151][T16345] __msan_chain_origin+0x50/0x90 [ 534.397090][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 534.402238][T16345] get_compat_msghdr+0x108/0x2b0 [ 534.407178][T16345] do_recvmmsg+0xdba/0x22c0 [ 534.411684][T16345] __sys_recvmmsg+0x5dd/0x610 [ 534.416368][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 534.422433][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 534.428604][T16345] __do_fast_syscall_32+0x2af/0x480 [ 534.433814][T16345] do_fast_syscall_32+0x6b/0xd0 [ 534.438661][T16345] do_SYSENTER_32+0x73/0x90 [ 534.443165][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.449475][T16345] [ 534.451798][T16345] Uninit was stored to memory at: [ 534.456836][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 534.462586][T16345] __msan_chain_origin+0x50/0x90 [ 534.467531][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 534.472667][T16345] get_compat_msghdr+0x108/0x2b0 [ 534.477606][T16345] do_recvmmsg+0xdba/0x22c0 [ 534.482110][T16345] __sys_recvmmsg+0x5dd/0x610 [ 534.486787][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 534.492854][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 534.499004][T16345] __do_fast_syscall_32+0x2af/0x480 [ 534.504200][T16345] do_fast_syscall_32+0x6b/0xd0 [ 534.509047][T16345] do_SYSENTER_32+0x73/0x90 [ 534.513556][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.519869][T16345] [ 534.522191][T16345] Uninit was stored to memory at: [ 534.527224][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 534.532939][T16345] __msan_chain_origin+0x50/0x90 [ 534.537878][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 534.543002][T16345] get_compat_msghdr+0x108/0x2b0 [ 534.547937][T16345] do_recvmmsg+0xdba/0x22c0 [ 534.552440][T16345] __sys_recvmmsg+0x5dd/0x610 [ 534.557125][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 534.563195][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 534.569350][T16345] __do_fast_syscall_32+0x2af/0x480 [ 534.574547][T16345] do_fast_syscall_32+0x6b/0xd0 [ 534.579416][T16345] do_SYSENTER_32+0x73/0x90 [ 534.583921][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.590232][T16345] [ 534.592550][T16345] Uninit was stored to memory at: [ 534.597591][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 534.603309][T16345] __msan_chain_origin+0x50/0x90 [ 534.608241][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 534.613354][T16345] get_compat_msghdr+0x108/0x2b0 [ 534.618285][T16345] do_recvmmsg+0xdba/0x22c0 [ 534.622799][T16345] __sys_recvmmsg+0x5dd/0x610 [ 534.627477][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 534.633558][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 534.639712][T16345] __do_fast_syscall_32+0x2af/0x480 [ 534.644923][T16345] do_fast_syscall_32+0x6b/0xd0 [ 534.649787][T16345] do_SYSENTER_32+0x73/0x90 [ 534.654325][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.660657][T16345] [ 534.662977][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 534.669641][T16345] do_recvmmsg+0xc2/0x22c0 [ 534.674173][T16345] do_recvmmsg+0xc2/0x22c0 [ 534.957322][T16463] IPVS: ftp: loaded support on port[0] = 21 [ 535.446431][T16488] IPVS: ftp: loaded support on port[0] = 21 [ 535.747754][T16345] not chained 1070000 origins [ 535.752479][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 535.761150][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.771208][T16345] Call Trace: [ 535.774522][T16345] dump_stack+0x21c/0x280 [ 535.778879][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 535.784619][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 535.789749][T16345] ? kmsan_get_metadata+0x116/0x180 [ 535.794980][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 535.800818][T16345] ? kmsan_get_metadata+0x116/0x180 [ 535.806034][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 535.811858][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 535.817943][T16345] ? kmsan_get_metadata+0x116/0x180 [ 535.823164][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 535.828761][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 535.834855][T16345] ? _copy_from_user+0x221/0x330 [ 535.839826][T16345] ? kmsan_get_metadata+0x116/0x180 [ 535.845038][T16345] __msan_chain_origin+0x50/0x90 [ 535.849992][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 535.855146][T16345] get_compat_msghdr+0x108/0x2b0 [ 535.860114][T16345] do_recvmmsg+0xdba/0x22c0 [ 535.864644][T16345] ? __msan_get_context_state+0x9/0x20 [ 535.870140][T16345] ? kmsan_get_metadata+0x116/0x180 [ 535.875362][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 535.881276][T16345] ? kmsan_get_metadata+0x116/0x180 [ 535.886495][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 535.891810][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 535.896587][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 535.901374][T16345] __sys_recvmmsg+0x5dd/0x610 [ 535.906098][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 535.912200][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 535.918390][T16345] __do_fast_syscall_32+0x2af/0x480 [ 535.923627][T16345] do_fast_syscall_32+0x6b/0xd0 [ 535.928495][T16345] do_SYSENTER_32+0x73/0x90 [ 535.933034][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 535.939366][T16345] RIP: 0023:0xf7f31549 [ 535.943430][T16345] Code: Bad RIP value. [ 535.947505][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 535.955924][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 535.963900][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.971879][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.979854][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 535.987845][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.995840][T16345] Uninit was stored to memory at: [ 536.000922][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 536.006646][T16345] __msan_chain_origin+0x50/0x90 [ 536.011602][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 536.016716][T16345] get_compat_msghdr+0x108/0x2b0 [ 536.021655][T16345] do_recvmmsg+0xdba/0x22c0 [ 536.026176][T16345] __sys_recvmmsg+0x5dd/0x610 [ 536.030864][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 536.036954][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 536.043108][T16345] __do_fast_syscall_32+0x2af/0x480 [ 536.048330][T16345] do_fast_syscall_32+0x6b/0xd0 [ 536.053190][T16345] do_SYSENTER_32+0x73/0x90 [ 536.057715][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.064027][T16345] [ 536.066352][T16345] Uninit was stored to memory at: [ 536.071398][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 536.077137][T16345] __msan_chain_origin+0x50/0x90 [ 536.082080][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 536.087196][T16345] get_compat_msghdr+0x108/0x2b0 [ 536.092141][T16345] do_recvmmsg+0xdba/0x22c0 [ 536.096646][T16345] __sys_recvmmsg+0x5dd/0x610 [ 536.101330][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 536.107402][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 536.113557][T16345] __do_fast_syscall_32+0x2af/0x480 [ 536.118756][T16345] do_fast_syscall_32+0x6b/0xd0 [ 536.123627][T16345] do_SYSENTER_32+0x73/0x90 [ 536.128137][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.134448][T16345] [ 536.136772][T16345] Uninit was stored to memory at: [ 536.141818][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 536.147543][T16345] __msan_chain_origin+0x50/0x90 [ 536.152485][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 536.157600][T16345] get_compat_msghdr+0x108/0x2b0 [ 536.162540][T16345] do_recvmmsg+0xdba/0x22c0 [ 536.167049][T16345] __sys_recvmmsg+0x5dd/0x610 [ 536.171731][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 536.177870][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 536.184059][T16345] __do_fast_syscall_32+0x2af/0x480 [ 536.189261][T16345] do_fast_syscall_32+0x6b/0xd0 [ 536.194136][T16345] do_SYSENTER_32+0x73/0x90 [ 536.198671][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.204982][T16345] [ 536.207301][T16345] Uninit was stored to memory at: [ 536.212344][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 536.218099][T16345] __msan_chain_origin+0x50/0x90 [ 536.223055][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 536.228172][T16345] get_compat_msghdr+0x108/0x2b0 [ 536.233113][T16345] do_recvmmsg+0xdba/0x22c0 [ 536.237627][T16345] __sys_recvmmsg+0x5dd/0x610 [ 536.242308][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 536.248379][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 536.254544][T16345] __do_fast_syscall_32+0x2af/0x480 [ 536.259752][T16345] do_fast_syscall_32+0x6b/0xd0 [ 536.264638][T16345] do_SYSENTER_32+0x73/0x90 [ 536.269147][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.275477][T16345] [ 536.277799][T16345] Uninit was stored to memory at: [ 536.282828][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 536.288545][T16345] __msan_chain_origin+0x50/0x90 [ 536.293519][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 536.298633][T16345] get_compat_msghdr+0x108/0x2b0 [ 536.303570][T16345] do_recvmmsg+0xdba/0x22c0 [ 536.308089][T16345] __sys_recvmmsg+0x5dd/0x610 [ 536.312784][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 536.318854][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 536.325005][T16345] __do_fast_syscall_32+0x2af/0x480 [ 536.330207][T16345] do_fast_syscall_32+0x6b/0xd0 [ 536.335061][T16345] do_SYSENTER_32+0x73/0x90 [ 536.339564][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.345879][T16345] [ 536.348199][T16345] Uninit was stored to memory at: [ 536.353243][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 536.358989][T16345] __msan_chain_origin+0x50/0x90 [ 536.363929][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 536.369042][T16345] get_compat_msghdr+0x108/0x2b0 [ 536.373983][T16345] do_recvmmsg+0xdba/0x22c0 [ 536.378487][T16345] __sys_recvmmsg+0x5dd/0x610 [ 536.383165][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 536.389234][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 536.395388][T16345] __do_fast_syscall_32+0x2af/0x480 [ 536.400615][T16345] do_fast_syscall_32+0x6b/0xd0 [ 536.405479][T16345] do_SYSENTER_32+0x73/0x90 [ 536.409994][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.416314][T16345] [ 536.418639][T16345] Uninit was stored to memory at: [ 536.423674][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 536.429392][T16345] __msan_chain_origin+0x50/0x90 [ 536.434330][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 536.439446][T16345] get_compat_msghdr+0x108/0x2b0 [ 536.444388][T16345] do_recvmmsg+0xdba/0x22c0 [ 536.448910][T16345] __sys_recvmmsg+0x5dd/0x610 [ 536.453614][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 536.459683][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 536.465837][T16345] __do_fast_syscall_32+0x2af/0x480 [ 536.471034][T16345] do_fast_syscall_32+0x6b/0xd0 [ 536.475885][T16345] do_SYSENTER_32+0x73/0x90 [ 536.480391][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.486711][T16345] [ 536.489031][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 536.495704][T16345] do_recvmmsg+0xc2/0x22c0 [ 536.500118][T16345] do_recvmmsg+0xc2/0x22c0 [ 536.892037][T16345] not chained 1080000 origins [ 536.896737][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 536.905414][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.915456][T16345] Call Trace: [ 536.918727][T16345] dump_stack+0x21c/0x280 [ 536.923062][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 536.928800][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 536.933969][T16345] ? kmsan_get_metadata+0x116/0x180 [ 536.939180][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 536.944992][T16345] ? kmsan_get_metadata+0x116/0x180 [ 536.950213][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 536.956066][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 536.962175][T16345] ? kmsan_get_metadata+0x116/0x180 [ 536.967427][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 536.973000][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 536.979097][T16345] ? _copy_from_user+0x221/0x330 [ 536.984053][T16345] ? kmsan_get_metadata+0x116/0x180 [ 536.989281][T16345] __msan_chain_origin+0x50/0x90 [ 536.994254][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 536.999438][T16345] get_compat_msghdr+0x108/0x2b0 [ 537.004409][T16345] do_recvmmsg+0xdba/0x22c0 [ 537.008929][T16345] ? __msan_get_context_state+0x9/0x20 [ 537.014417][T16345] ? kmsan_get_metadata+0x116/0x180 [ 537.019633][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 537.025539][T16345] ? kmsan_get_metadata+0x116/0x180 [ 537.030771][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 537.036069][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 537.040872][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 537.045650][T16345] __sys_recvmmsg+0x5dd/0x610 [ 537.050356][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 537.056497][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 537.062696][T16345] __do_fast_syscall_32+0x2af/0x480 [ 537.067916][T16345] do_fast_syscall_32+0x6b/0xd0 [ 537.072781][T16345] do_SYSENTER_32+0x73/0x90 [ 537.077296][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.083628][T16345] RIP: 0023:0xf7f31549 [ 537.087693][T16345] Code: Bad RIP value. [ 537.091777][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 537.100194][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 537.108171][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.116156][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.124135][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 537.132110][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.140099][T16345] Uninit was stored to memory at: [ 537.145147][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 537.150871][T16345] __msan_chain_origin+0x50/0x90 [ 537.155811][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 537.160925][T16345] get_compat_msghdr+0x108/0x2b0 [ 537.165893][T16345] do_recvmmsg+0xdba/0x22c0 [ 537.170393][T16345] __sys_recvmmsg+0x5dd/0x610 [ 537.175086][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 537.181191][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 537.187351][T16345] __do_fast_syscall_32+0x2af/0x480 [ 537.192556][T16345] do_fast_syscall_32+0x6b/0xd0 [ 537.197416][T16345] do_SYSENTER_32+0x73/0x90 [ 537.201927][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.208257][T16345] [ 537.210594][T16345] Uninit was stored to memory at: [ 537.215624][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 537.221347][T16345] __msan_chain_origin+0x50/0x90 [ 537.226289][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 537.231436][T16345] get_compat_msghdr+0x108/0x2b0 [ 537.236378][T16345] do_recvmmsg+0xdba/0x22c0 [ 537.240902][T16345] __sys_recvmmsg+0x5dd/0x610 [ 537.245597][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 537.251701][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 537.257871][T16345] __do_fast_syscall_32+0x2af/0x480 [ 537.263075][T16345] do_fast_syscall_32+0x6b/0xd0 [ 537.267931][T16345] do_SYSENTER_32+0x73/0x90 [ 537.272461][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.278778][T16345] [ 537.281101][T16345] Uninit was stored to memory at: [ 537.286153][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 537.291874][T16345] __msan_chain_origin+0x50/0x90 [ 537.296813][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 537.301927][T16345] get_compat_msghdr+0x108/0x2b0 [ 537.306893][T16345] do_recvmmsg+0xdba/0x22c0 [ 537.311661][T16345] __sys_recvmmsg+0x5dd/0x610 [ 537.316350][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 537.322427][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 537.328600][T16345] __do_fast_syscall_32+0x2af/0x480 [ 537.333832][T16345] do_fast_syscall_32+0x6b/0xd0 [ 537.338706][T16345] do_SYSENTER_32+0x73/0x90 [ 537.343220][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.349537][T16345] [ 537.351861][T16345] Uninit was stored to memory at: [ 537.356888][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 537.362645][T16345] __msan_chain_origin+0x50/0x90 [ 537.367594][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 537.372721][T16345] get_compat_msghdr+0x108/0x2b0 [ 537.377686][T16345] do_recvmmsg+0xdba/0x22c0 [ 537.382189][T16345] __sys_recvmmsg+0x5dd/0x610 [ 537.386903][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 537.392973][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 537.399133][T16345] __do_fast_syscall_32+0x2af/0x480 [ 537.404336][T16345] do_fast_syscall_32+0x6b/0xd0 [ 537.409201][T16345] do_SYSENTER_32+0x73/0x90 [ 537.413721][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.420048][T16345] [ 537.422416][T16345] Uninit was stored to memory at: [ 537.427466][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 537.433196][T16345] __msan_chain_origin+0x50/0x90 [ 537.438161][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 537.443278][T16345] get_compat_msghdr+0x108/0x2b0 [ 537.448248][T16345] do_recvmmsg+0xdba/0x22c0 [ 537.452752][T16345] __sys_recvmmsg+0x5dd/0x610 [ 537.457552][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 537.463627][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 537.469784][T16345] __do_fast_syscall_32+0x2af/0x480 [ 537.474988][T16345] do_fast_syscall_32+0x6b/0xd0 [ 537.479848][T16345] do_SYSENTER_32+0x73/0x90 [ 537.484358][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.490671][T16345] [ 537.493008][T16345] Uninit was stored to memory at: [ 537.498054][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 537.503774][T16345] __msan_chain_origin+0x50/0x90 [ 537.508730][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 537.513881][T16345] get_compat_msghdr+0x108/0x2b0 [ 537.518840][T16345] do_recvmmsg+0xdba/0x22c0 [ 537.523351][T16345] __sys_recvmmsg+0x5dd/0x610 [ 537.528058][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 537.534137][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 537.540301][T16345] __do_fast_syscall_32+0x2af/0x480 [ 537.545508][T16345] do_fast_syscall_32+0x6b/0xd0 [ 537.550408][T16345] do_SYSENTER_32+0x73/0x90 [ 537.554918][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.561234][T16345] [ 537.563571][T16345] Uninit was stored to memory at: [ 537.568600][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 537.574323][T16345] __msan_chain_origin+0x50/0x90 [ 537.579266][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 537.584415][T16345] get_compat_msghdr+0x108/0x2b0 [ 537.589355][T16345] do_recvmmsg+0xdba/0x22c0 [ 537.593877][T16345] __sys_recvmmsg+0x5dd/0x610 [ 537.598559][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 537.604633][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 537.610791][T16345] __do_fast_syscall_32+0x2af/0x480 [ 537.615992][T16345] do_fast_syscall_32+0x6b/0xd0 [ 537.620843][T16345] do_SYSENTER_32+0x73/0x90 [ 537.625350][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.631690][T16345] [ 537.634016][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 537.640693][T16345] do_recvmmsg+0xc2/0x22c0 [ 537.645115][T16345] do_recvmmsg+0xc2/0x22c0 [ 537.994707][T16345] not chained 1090000 origins [ 537.999431][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 538.008116][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.018173][T16345] Call Trace: [ 538.021495][T16345] dump_stack+0x21c/0x280 [ 538.025853][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 538.031612][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 538.036748][T16345] ? kmsan_get_metadata+0x116/0x180 [ 538.041964][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 538.047804][T16345] ? kmsan_get_metadata+0x116/0x180 [ 538.053021][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 538.058847][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 538.064931][T16345] ? kmsan_get_metadata+0x116/0x180 [ 538.070150][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 538.075735][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 538.081818][T16345] ? _copy_from_user+0x221/0x330 [ 538.086775][T16345] ? kmsan_get_metadata+0x116/0x180 [ 538.092002][T16345] __msan_chain_origin+0x50/0x90 [ 538.096964][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 538.102117][T16345] get_compat_msghdr+0x108/0x2b0 [ 538.107119][T16345] do_recvmmsg+0xdba/0x22c0 [ 538.111662][T16345] ? __msan_get_context_state+0x9/0x20 [ 538.117150][T16345] ? kmsan_get_metadata+0x116/0x180 [ 538.122372][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 538.128288][T16345] ? kmsan_get_metadata+0x116/0x180 [ 538.133511][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 538.138821][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 538.143600][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 538.148388][T16345] __sys_recvmmsg+0x5dd/0x610 [ 538.153107][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 538.159210][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 538.165380][T16345] __do_fast_syscall_32+0x2af/0x480 [ 538.170599][T16345] do_fast_syscall_32+0x6b/0xd0 [ 538.175467][T16345] do_SYSENTER_32+0x73/0x90 [ 538.179985][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.186325][T16345] RIP: 0023:0xf7f31549 [ 538.190413][T16345] Code: Bad RIP value. [ 538.194570][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 538.203006][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 538.210984][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.218957][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.226933][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 538.234904][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.242886][T16345] Uninit was stored to memory at: [ 538.247931][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 538.253652][T16345] __msan_chain_origin+0x50/0x90 [ 538.258609][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 538.263725][T16345] get_compat_msghdr+0x108/0x2b0 [ 538.268684][T16345] do_recvmmsg+0xdba/0x22c0 [ 538.273230][T16345] __sys_recvmmsg+0x5dd/0x610 [ 538.277918][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 538.283989][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 538.290148][T16345] __do_fast_syscall_32+0x2af/0x480 [ 538.295381][T16345] do_fast_syscall_32+0x6b/0xd0 [ 538.300241][T16345] do_SYSENTER_32+0x73/0x90 [ 538.304778][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.311120][T16345] [ 538.313451][T16345] Uninit was stored to memory at: [ 538.318486][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 538.324214][T16345] __msan_chain_origin+0x50/0x90 [ 538.329166][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 538.334285][T16345] get_compat_msghdr+0x108/0x2b0 [ 538.339229][T16345] do_recvmmsg+0xdba/0x22c0 [ 538.343739][T16345] __sys_recvmmsg+0x5dd/0x610 [ 538.348421][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 538.354506][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 538.360662][T16345] __do_fast_syscall_32+0x2af/0x480 [ 538.365866][T16345] do_fast_syscall_32+0x6b/0xd0 [ 538.370733][T16345] do_SYSENTER_32+0x73/0x90 [ 538.375244][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.381559][T16345] [ 538.383881][T16345] Uninit was stored to memory at: [ 538.389098][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 538.394832][T16345] __msan_chain_origin+0x50/0x90 [ 538.399801][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 538.404922][T16345] get_compat_msghdr+0x108/0x2b0 [ 538.409867][T16345] do_recvmmsg+0xdba/0x22c0 [ 538.414376][T16345] __sys_recvmmsg+0x5dd/0x610 [ 538.419064][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 538.425148][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 538.431308][T16345] __do_fast_syscall_32+0x2af/0x480 [ 538.436513][T16345] do_fast_syscall_32+0x6b/0xd0 [ 538.441373][T16345] do_SYSENTER_32+0x73/0x90 [ 538.445899][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.452216][T16345] [ 538.454541][T16345] Uninit was stored to memory at: [ 538.459570][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 538.465347][T16345] __msan_chain_origin+0x50/0x90 [ 538.470288][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 538.475407][T16345] get_compat_msghdr+0x108/0x2b0 [ 538.480349][T16345] do_recvmmsg+0xdba/0x22c0 [ 538.484857][T16345] __sys_recvmmsg+0x5dd/0x610 [ 538.489557][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 538.495629][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 538.501795][T16345] __do_fast_syscall_32+0x2af/0x480 [ 538.506995][T16345] do_fast_syscall_32+0x6b/0xd0 [ 538.511875][T16345] do_SYSENTER_32+0x73/0x90 [ 538.516391][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.522717][T16345] [ 538.525046][T16345] Uninit was stored to memory at: [ 538.530073][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 538.535793][T16345] __msan_chain_origin+0x50/0x90 [ 538.540746][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 538.545861][T16345] get_compat_msghdr+0x108/0x2b0 [ 538.550820][T16345] do_recvmmsg+0xdba/0x22c0 [ 538.555335][T16345] __sys_recvmmsg+0x5dd/0x610 [ 538.560018][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 538.566102][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 538.572279][T16345] __do_fast_syscall_32+0x2af/0x480 [ 538.577495][T16345] do_fast_syscall_32+0x6b/0xd0 [ 538.582366][T16345] do_SYSENTER_32+0x73/0x90 [ 538.586871][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.593200][T16345] [ 538.595538][T16345] Uninit was stored to memory at: [ 538.600570][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 538.606299][T16345] __msan_chain_origin+0x50/0x90 [ 538.611246][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 538.616363][T16345] get_compat_msghdr+0x108/0x2b0 [ 538.621307][T16345] do_recvmmsg+0xdba/0x22c0 [ 538.625870][T16345] __sys_recvmmsg+0x5dd/0x610 [ 538.630557][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 538.636651][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 538.642809][T16345] __do_fast_syscall_32+0x2af/0x480 [ 538.648027][T16345] do_fast_syscall_32+0x6b/0xd0 [ 538.652914][T16345] do_SYSENTER_32+0x73/0x90 [ 538.657420][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.663742][T16345] [ 538.666105][T16345] Uninit was stored to memory at: [ 538.671167][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 538.676891][T16345] __msan_chain_origin+0x50/0x90 [ 538.681835][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 538.686949][T16345] get_compat_msghdr+0x108/0x2b0 [ 538.691906][T16345] do_recvmmsg+0xdba/0x22c0 [ 538.696444][T16345] __sys_recvmmsg+0x5dd/0x610 [ 538.701134][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 538.707215][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 538.713376][T16345] __do_fast_syscall_32+0x2af/0x480 [ 538.718581][T16345] do_fast_syscall_32+0x6b/0xd0 [ 538.723436][T16345] do_SYSENTER_32+0x73/0x90 [ 538.727951][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.734265][T16345] [ 538.736635][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 538.743329][T16345] do_recvmmsg+0xc2/0x22c0 [ 538.747762][T16345] do_recvmmsg+0xc2/0x22c0 [ 539.071473][T16345] not chained 1100000 origins [ 539.076184][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 539.084854][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.094907][T16345] Call Trace: [ 539.098225][T16345] dump_stack+0x21c/0x280 [ 539.102622][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 539.108357][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 539.113482][T16345] ? kmsan_get_metadata+0x116/0x180 [ 539.118703][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.124518][T16345] ? kmsan_get_metadata+0x116/0x180 [ 539.129720][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.135544][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 539.141632][T16345] ? kmsan_get_metadata+0x116/0x180 [ 539.146838][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 539.152409][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 539.158490][T16345] ? _copy_from_user+0x221/0x330 [ 539.163444][T16345] ? kmsan_get_metadata+0x116/0x180 [ 539.168653][T16345] __msan_chain_origin+0x50/0x90 [ 539.173607][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 539.178748][T16345] get_compat_msghdr+0x108/0x2b0 [ 539.183708][T16345] do_recvmmsg+0xdba/0x22c0 [ 539.188236][T16345] ? __msan_get_context_state+0x9/0x20 [ 539.193742][T16345] ? kmsan_get_metadata+0x116/0x180 [ 539.198982][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 539.204886][T16345] ? kmsan_get_metadata+0x116/0x180 [ 539.210093][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 539.215374][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 539.220114][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 539.224863][T16345] __sys_recvmmsg+0x5dd/0x610 [ 539.229551][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 539.235623][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 539.241766][T16345] __do_fast_syscall_32+0x2af/0x480 [ 539.246950][T16345] do_fast_syscall_32+0x6b/0xd0 [ 539.251796][T16345] do_SYSENTER_32+0x73/0x90 [ 539.256286][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 539.262606][T16345] RIP: 0023:0xf7f31549 [ 539.266670][T16345] Code: Bad RIP value. [ 539.270743][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 539.279147][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 539.287105][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.295087][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.303045][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 539.311021][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.318978][T16345] Uninit was stored to memory at: [ 539.323991][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 539.329702][T16345] __msan_chain_origin+0x50/0x90 [ 539.334619][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 539.339710][T16345] get_compat_msghdr+0x108/0x2b0 [ 539.344649][T16345] do_recvmmsg+0xdba/0x22c0 [ 539.349162][T16345] __sys_recvmmsg+0x5dd/0x610 [ 539.353819][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 539.359863][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 539.365995][T16345] __do_fast_syscall_32+0x2af/0x480 [ 539.371175][T16345] do_fast_syscall_32+0x6b/0xd0 [ 539.376018][T16345] do_SYSENTER_32+0x73/0x90 [ 539.380518][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 539.386822][T16345] [ 539.389140][T16345] Uninit was stored to memory at: [ 539.394156][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 539.399858][T16345] __msan_chain_origin+0x50/0x90 [ 539.404788][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 539.409909][T16345] get_compat_msghdr+0x108/0x2b0 [ 539.414827][T16345] do_recvmmsg+0xdba/0x22c0 [ 539.419321][T16345] __sys_recvmmsg+0x5dd/0x610 [ 539.424006][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 539.430063][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 539.436197][T16345] __do_fast_syscall_32+0x2af/0x480 [ 539.441375][T16345] do_fast_syscall_32+0x6b/0xd0 [ 539.446219][T16345] do_SYSENTER_32+0x73/0x90 [ 539.450705][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 539.457002][T16345] [ 539.459304][T16345] Uninit was stored to memory at: [ 539.464321][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 539.470060][T16345] __msan_chain_origin+0x50/0x90 [ 539.474976][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 539.480063][T16345] get_compat_msghdr+0x108/0x2b0 [ 539.484990][T16345] do_recvmmsg+0xdba/0x22c0 [ 539.489492][T16345] __sys_recvmmsg+0x5dd/0x610 [ 539.494170][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 539.500241][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 539.506376][T16345] __do_fast_syscall_32+0x2af/0x480 [ 539.511570][T16345] do_fast_syscall_32+0x6b/0xd0 [ 539.516402][T16345] do_SYSENTER_32+0x73/0x90 [ 539.520911][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 539.527211][T16345] [ 539.529516][T16345] Uninit was stored to memory at: [ 539.534537][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 539.540256][T16345] __msan_chain_origin+0x50/0x90 [ 539.545173][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 539.550263][T16345] get_compat_msghdr+0x108/0x2b0 [ 539.555179][T16345] do_recvmmsg+0xdba/0x22c0 [ 539.559660][T16345] __sys_recvmmsg+0x5dd/0x610 [ 539.564327][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 539.570383][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 539.576514][T16345] __do_fast_syscall_32+0x2af/0x480 [ 539.581703][T16345] do_fast_syscall_32+0x6b/0xd0 [ 539.586530][T16345] do_SYSENTER_32+0x73/0x90 [ 539.591013][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 539.597360][T16345] [ 539.599676][T16345] Uninit was stored to memory at: [ 539.604691][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 539.610483][T16345] __msan_chain_origin+0x50/0x90 [ 539.615427][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 539.620514][T16345] get_compat_msghdr+0x108/0x2b0 [ 539.625427][T16345] do_recvmmsg+0xdba/0x22c0 [ 539.629905][T16345] __sys_recvmmsg+0x5dd/0x610 [ 539.634578][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 539.640650][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 539.646785][T16345] __do_fast_syscall_32+0x2af/0x480 [ 539.651961][T16345] do_fast_syscall_32+0x6b/0xd0 [ 539.656806][T16345] do_SYSENTER_32+0x73/0x90 [ 539.661295][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 539.667589][T16345] [ 539.669893][T16345] Uninit was stored to memory at: [ 539.674895][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 539.680591][T16345] __msan_chain_origin+0x50/0x90 [ 539.685509][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 539.690622][T16345] get_compat_msghdr+0x108/0x2b0 [ 539.695540][T16345] do_recvmmsg+0xdba/0x22c0 [ 539.700022][T16345] __sys_recvmmsg+0x5dd/0x610 [ 539.704704][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 539.710763][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 539.716893][T16345] __do_fast_syscall_32+0x2af/0x480 [ 539.722067][T16345] do_fast_syscall_32+0x6b/0xd0 [ 539.726899][T16345] do_SYSENTER_32+0x73/0x90 [ 539.731381][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 539.737679][T16345] [ 539.739994][T16345] Uninit was stored to memory at: [ 539.745014][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 539.750708][T16345] __msan_chain_origin+0x50/0x90 [ 539.755624][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 539.760712][T16345] get_compat_msghdr+0x108/0x2b0 [ 539.765644][T16345] do_recvmmsg+0xdba/0x22c0 [ 539.770126][T16345] __sys_recvmmsg+0x5dd/0x610 [ 539.774786][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 539.780833][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 539.786963][T16345] __do_fast_syscall_32+0x2af/0x480 [ 539.792138][T16345] do_fast_syscall_32+0x6b/0xd0 [ 539.796996][T16345] do_SYSENTER_32+0x73/0x90 [ 539.801477][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 539.807803][T16345] [ 539.810107][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 539.816768][T16345] do_recvmmsg+0xc2/0x22c0 [ 539.821194][T16345] do_recvmmsg+0xc2/0x22c0 [ 540.138981][T16345] not chained 1110000 origins [ 540.143786][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 540.152458][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.162541][T16345] Call Trace: [ 540.165822][T16345] dump_stack+0x21c/0x280 [ 540.170147][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 540.175851][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 540.180943][T16345] ? kmsan_get_metadata+0x116/0x180 [ 540.186138][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 540.191936][T16345] ? kmsan_get_metadata+0x116/0x180 [ 540.197162][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 540.202985][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 540.209026][T16345] ? kmsan_get_metadata+0x116/0x180 [ 540.214217][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 540.219742][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 540.225788][T16345] ? _copy_from_user+0x221/0x330 [ 540.230705][T16345] ? kmsan_get_metadata+0x116/0x180 [ 540.235883][T16345] __msan_chain_origin+0x50/0x90 [ 540.240802][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 540.245936][T16345] get_compat_msghdr+0x108/0x2b0 [ 540.250891][T16345] do_recvmmsg+0xdba/0x22c0 [ 540.255378][T16345] ? __msan_get_context_state+0x9/0x20 [ 540.260828][T16345] ? kmsan_get_metadata+0x116/0x180 [ 540.266015][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 540.271895][T16345] ? kmsan_get_metadata+0x116/0x180 [ 540.277085][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 540.282363][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 540.287116][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 540.291874][T16345] __sys_recvmmsg+0x5dd/0x610 [ 540.296561][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 540.302620][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 540.308753][T16345] __do_fast_syscall_32+0x2af/0x480 [ 540.313940][T16345] do_fast_syscall_32+0x6b/0xd0 [ 540.318773][T16345] do_SYSENTER_32+0x73/0x90 [ 540.323259][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 540.329594][T16345] RIP: 0023:0xf7f31549 [ 540.333647][T16345] Code: Bad RIP value. [ 540.337700][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 540.346094][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 540.354057][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.362002][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.369948][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 540.377906][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.385877][T16345] Uninit was stored to memory at: [ 540.390880][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 540.396574][T16345] __msan_chain_origin+0x50/0x90 [ 540.401485][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 540.406581][T16345] get_compat_msghdr+0x108/0x2b0 [ 540.411492][T16345] do_recvmmsg+0xdba/0x22c0 [ 540.415986][T16345] __sys_recvmmsg+0x5dd/0x610 [ 540.420641][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 540.426685][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 540.432835][T16345] __do_fast_syscall_32+0x2af/0x480 [ 540.438028][T16345] do_fast_syscall_32+0x6b/0xd0 [ 540.442858][T16345] do_SYSENTER_32+0x73/0x90 [ 540.447372][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 540.453671][T16345] [ 540.455973][T16345] Uninit was stored to memory at: [ 540.460990][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 540.466706][T16345] __msan_chain_origin+0x50/0x90 [ 540.471628][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 540.476715][T16345] get_compat_msghdr+0x108/0x2b0 [ 540.481625][T16345] do_recvmmsg+0xdba/0x22c0 [ 540.486136][T16345] __sys_recvmmsg+0x5dd/0x610 [ 540.490823][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 540.496898][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 540.503056][T16345] __do_fast_syscall_32+0x2af/0x480 [ 540.508234][T16345] do_fast_syscall_32+0x6b/0xd0 [ 540.513065][T16345] do_SYSENTER_32+0x73/0x90 [ 540.517550][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 540.523849][T16345] [ 540.526175][T16345] Uninit was stored to memory at: [ 540.531193][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 540.536909][T16345] __msan_chain_origin+0x50/0x90 [ 540.541819][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 540.546906][T16345] get_compat_msghdr+0x108/0x2b0 [ 540.551818][T16345] do_recvmmsg+0xdba/0x22c0 [ 540.556302][T16345] __sys_recvmmsg+0x5dd/0x610 [ 540.560957][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 540.567000][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 540.573133][T16345] __do_fast_syscall_32+0x2af/0x480 [ 540.578311][T16345] do_fast_syscall_32+0x6b/0xd0 [ 540.583140][T16345] do_SYSENTER_32+0x73/0x90 [ 540.587628][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 540.593952][T16345] [ 540.596257][T16345] Uninit was stored to memory at: [ 540.601263][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 540.606969][T16345] __msan_chain_origin+0x50/0x90 [ 540.611922][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 540.617015][T16345] get_compat_msghdr+0x108/0x2b0 [ 540.621930][T16345] do_recvmmsg+0xdba/0x22c0 [ 540.626412][T16345] __sys_recvmmsg+0x5dd/0x610 [ 540.631082][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 540.637127][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 540.643261][T16345] __do_fast_syscall_32+0x2af/0x480 [ 540.648436][T16345] do_fast_syscall_32+0x6b/0xd0 [ 540.653265][T16345] do_SYSENTER_32+0x73/0x90 [ 540.657754][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 540.664048][T16345] [ 540.666350][T16345] Uninit was stored to memory at: [ 540.671350][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 540.677045][T16345] __msan_chain_origin+0x50/0x90 [ 540.681960][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 540.687050][T16345] get_compat_msghdr+0x108/0x2b0 [ 540.691965][T16345] do_recvmmsg+0xdba/0x22c0 [ 540.696458][T16345] __sys_recvmmsg+0x5dd/0x610 [ 540.701113][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 540.707163][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 540.713294][T16345] __do_fast_syscall_32+0x2af/0x480 [ 540.718471][T16345] do_fast_syscall_32+0x6b/0xd0 [ 540.723324][T16345] do_SYSENTER_32+0x73/0x90 [ 540.727817][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 540.734109][T16345] [ 540.736410][T16345] Uninit was stored to memory at: [ 540.741428][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 540.747158][T16345] __msan_chain_origin+0x50/0x90 [ 540.752072][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 540.757167][T16345] get_compat_msghdr+0x108/0x2b0 [ 540.762099][T16345] do_recvmmsg+0xdba/0x22c0 [ 540.766590][T16345] __sys_recvmmsg+0x5dd/0x610 [ 540.771246][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 540.777325][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 540.783474][T16345] __do_fast_syscall_32+0x2af/0x480 [ 540.788649][T16345] do_fast_syscall_32+0x6b/0xd0 [ 540.793479][T16345] do_SYSENTER_32+0x73/0x90 [ 540.797963][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 540.804260][T16345] [ 540.806579][T16345] Uninit was stored to memory at: [ 540.811582][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 540.817280][T16345] __msan_chain_origin+0x50/0x90 [ 540.822195][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 540.827302][T16345] get_compat_msghdr+0x108/0x2b0 [ 540.832216][T16345] do_recvmmsg+0xdba/0x22c0 [ 540.836695][T16345] __sys_recvmmsg+0x5dd/0x610 [ 540.841362][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 540.847408][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 540.853555][T16345] __do_fast_syscall_32+0x2af/0x480 [ 540.858732][T16345] do_fast_syscall_32+0x6b/0xd0 [ 540.863573][T16345] do_SYSENTER_32+0x73/0x90 [ 540.868086][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 540.874380][T16345] [ 540.876700][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 540.883349][T16345] do_recvmmsg+0xc2/0x22c0 [ 540.887753][T16345] do_recvmmsg+0xc2/0x22c0 [ 541.099925][T16345] not chained 1120000 origins [ 541.104650][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 541.113331][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.123380][T16345] Call Trace: [ 541.126682][T16345] dump_stack+0x21c/0x280 [ 541.131032][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 541.136780][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 541.141912][T16345] ? kmsan_get_metadata+0x116/0x180 [ 541.147124][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 541.152948][T16345] ? kmsan_get_metadata+0x116/0x180 [ 541.158164][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 541.163980][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 541.170051][T16345] ? kmsan_get_metadata+0x116/0x180 [ 541.175264][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 541.180870][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 541.186956][T16345] ? _copy_from_user+0x221/0x330 [ 541.191908][T16345] ? kmsan_get_metadata+0x116/0x180 [ 541.197124][T16345] __msan_chain_origin+0x50/0x90 [ 541.202096][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 541.207263][T16345] get_compat_msghdr+0x108/0x2b0 [ 541.212221][T16345] do_recvmmsg+0xdba/0x22c0 [ 541.216737][T16345] ? __msan_get_context_state+0x9/0x20 [ 541.222215][T16345] ? kmsan_get_metadata+0x116/0x180 [ 541.227465][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 541.233367][T16345] ? kmsan_get_metadata+0x116/0x180 [ 541.238595][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 541.243895][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 541.248667][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 541.253441][T16345] __sys_recvmmsg+0x5dd/0x610 [ 541.258179][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 541.264288][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 541.270457][T16345] __do_fast_syscall_32+0x2af/0x480 [ 541.275680][T16345] do_fast_syscall_32+0x6b/0xd0 [ 541.280544][T16345] do_SYSENTER_32+0x73/0x90 [ 541.285059][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.291396][T16345] RIP: 0023:0xf7f31549 [ 541.295459][T16345] Code: Bad RIP value. [ 541.299537][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 541.307982][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 541.315951][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.323920][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.331911][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 541.339918][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.347910][T16345] Uninit was stored to memory at: [ 541.352942][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 541.358664][T16345] __msan_chain_origin+0x50/0x90 [ 541.363608][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 541.368741][T16345] get_compat_msghdr+0x108/0x2b0 [ 541.373683][T16345] do_recvmmsg+0xdba/0x22c0 [ 541.378227][T16345] __sys_recvmmsg+0x5dd/0x610 [ 541.382898][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 541.388959][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 541.395090][T16345] __do_fast_syscall_32+0x2af/0x480 [ 541.400267][T16345] do_fast_syscall_32+0x6b/0xd0 [ 541.405096][T16345] do_SYSENTER_32+0x73/0x90 [ 541.409591][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.415887][T16345] [ 541.418208][T16345] Uninit was stored to memory at: [ 541.423355][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 541.429048][T16345] __msan_chain_origin+0x50/0x90 [ 541.433960][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 541.439048][T16345] get_compat_msghdr+0x108/0x2b0 [ 541.444073][T16345] do_recvmmsg+0xdba/0x22c0 [ 541.448584][T16345] __sys_recvmmsg+0x5dd/0x610 [ 541.453240][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 541.459282][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 541.465428][T16345] __do_fast_syscall_32+0x2af/0x480 [ 541.470618][T16345] do_fast_syscall_32+0x6b/0xd0 [ 541.475461][T16345] do_SYSENTER_32+0x73/0x90 [ 541.479944][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.486274][T16345] [ 541.488578][T16345] Uninit was stored to memory at: [ 541.493599][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 541.499293][T16345] __msan_chain_origin+0x50/0x90 [ 541.504240][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 541.509327][T16345] get_compat_msghdr+0x108/0x2b0 [ 541.514244][T16345] do_recvmmsg+0xdba/0x22c0 [ 541.518739][T16345] __sys_recvmmsg+0x5dd/0x610 [ 541.523397][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 541.529460][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 541.535591][T16345] __do_fast_syscall_32+0x2af/0x480 [ 541.540784][T16345] do_fast_syscall_32+0x6b/0xd0 [ 541.545612][T16345] do_SYSENTER_32+0x73/0x90 [ 541.550095][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.556405][T16345] [ 541.558709][T16345] Uninit was stored to memory at: [ 541.563725][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 541.569418][T16345] __msan_chain_origin+0x50/0x90 [ 541.574329][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 541.579415][T16345] get_compat_msghdr+0x108/0x2b0 [ 541.584328][T16345] do_recvmmsg+0xdba/0x22c0 [ 541.588869][T16345] __sys_recvmmsg+0x5dd/0x610 [ 541.593570][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 541.599613][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 541.605740][T16345] __do_fast_syscall_32+0x2af/0x480 [ 541.610915][T16345] do_fast_syscall_32+0x6b/0xd0 [ 541.615744][T16345] do_SYSENTER_32+0x73/0x90 [ 541.620262][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.626555][T16345] [ 541.628855][T16345] Uninit was stored to memory at: [ 541.633858][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 541.639586][T16345] __msan_chain_origin+0x50/0x90 [ 541.644519][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 541.649605][T16345] get_compat_msghdr+0x108/0x2b0 [ 541.654517][T16345] do_recvmmsg+0xdba/0x22c0 [ 541.658995][T16345] __sys_recvmmsg+0x5dd/0x610 [ 541.663649][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 541.669688][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 541.675818][T16345] __do_fast_syscall_32+0x2af/0x480 [ 541.680990][T16345] do_fast_syscall_32+0x6b/0xd0 [ 541.685819][T16345] do_SYSENTER_32+0x73/0x90 [ 541.690301][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.696608][T16345] [ 541.698946][T16345] Uninit was stored to memory at: [ 541.703966][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 541.709671][T16345] __msan_chain_origin+0x50/0x90 [ 541.714583][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 541.719696][T16345] get_compat_msghdr+0x108/0x2b0 [ 541.724612][T16345] do_recvmmsg+0xdba/0x22c0 [ 541.729089][T16345] __sys_recvmmsg+0x5dd/0x610 [ 541.733742][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 541.739801][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 541.745930][T16345] __do_fast_syscall_32+0x2af/0x480 [ 541.751135][T16345] do_fast_syscall_32+0x6b/0xd0 [ 541.755964][T16345] do_SYSENTER_32+0x73/0x90 [ 541.760444][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.766740][T16345] [ 541.769041][T16345] Uninit was stored to memory at: [ 541.774046][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 541.779740][T16345] __msan_chain_origin+0x50/0x90 [ 541.784653][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 541.789741][T16345] get_compat_msghdr+0x108/0x2b0 [ 541.794656][T16345] do_recvmmsg+0xdba/0x22c0 [ 541.799137][T16345] __sys_recvmmsg+0x5dd/0x610 [ 541.803794][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 541.809838][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 541.815971][T16345] __do_fast_syscall_32+0x2af/0x480 [ 541.821161][T16345] do_fast_syscall_32+0x6b/0xd0 [ 541.825987][T16345] do_SYSENTER_32+0x73/0x90 [ 541.830473][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.836785][T16345] [ 541.839091][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 541.845740][T16345] do_recvmmsg+0xc2/0x22c0 [ 541.850130][T16345] do_recvmmsg+0xc2/0x22c0 [ 542.180692][T16345] not chained 1130000 origins [ 542.185390][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 542.194061][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.204121][T16345] Call Trace: [ 542.207405][T16345] dump_stack+0x21c/0x280 [ 542.211739][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 542.217451][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 542.222562][T16345] ? kmsan_get_metadata+0x116/0x180 [ 542.227760][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 542.233551][T16345] ? kmsan_get_metadata+0x116/0x180 [ 542.238729][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 542.244538][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 542.250579][T16345] ? kmsan_get_metadata+0x116/0x180 [ 542.255761][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 542.261287][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 542.267347][T16345] ? _copy_from_user+0x221/0x330 [ 542.272268][T16345] ? kmsan_get_metadata+0x116/0x180 [ 542.277453][T16345] __msan_chain_origin+0x50/0x90 [ 542.282375][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 542.287487][T16345] get_compat_msghdr+0x108/0x2b0 [ 542.292416][T16345] do_recvmmsg+0xdba/0x22c0 [ 542.296915][T16345] ? __msan_get_context_state+0x9/0x20 [ 542.302366][T16345] ? kmsan_get_metadata+0x116/0x180 [ 542.307552][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 542.313428][T16345] ? kmsan_get_metadata+0x116/0x180 [ 542.318607][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 542.323897][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 542.328667][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 542.333414][T16345] __sys_recvmmsg+0x5dd/0x610 [ 542.338085][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 542.344156][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 542.350294][T16345] __do_fast_syscall_32+0x2af/0x480 [ 542.355484][T16345] do_fast_syscall_32+0x6b/0xd0 [ 542.360318][T16345] do_SYSENTER_32+0x73/0x90 [ 542.364818][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.371119][T16345] RIP: 0023:0xf7f31549 [ 542.375161][T16345] Code: Bad RIP value. [ 542.379203][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 542.387601][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 542.395553][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.403513][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.411488][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 542.419474][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.427451][T16345] Uninit was stored to memory at: [ 542.432469][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 542.438212][T16345] __msan_chain_origin+0x50/0x90 [ 542.443144][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 542.448230][T16345] get_compat_msghdr+0x108/0x2b0 [ 542.453147][T16345] do_recvmmsg+0xdba/0x22c0 [ 542.457634][T16345] __sys_recvmmsg+0x5dd/0x610 [ 542.462310][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 542.468389][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 542.474536][T16345] __do_fast_syscall_32+0x2af/0x480 [ 542.479710][T16345] do_fast_syscall_32+0x6b/0xd0 [ 542.484568][T16345] do_SYSENTER_32+0x73/0x90 [ 542.489045][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.495356][T16345] [ 542.497659][T16345] Uninit was stored to memory at: [ 542.502777][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 542.508470][T16345] __msan_chain_origin+0x50/0x90 [ 542.513390][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 542.518482][T16345] get_compat_msghdr+0x108/0x2b0 [ 542.523438][T16345] do_recvmmsg+0xdba/0x22c0 [ 542.527921][T16345] __sys_recvmmsg+0x5dd/0x610 [ 542.532595][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 542.538637][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 542.544766][T16345] __do_fast_syscall_32+0x2af/0x480 [ 542.549937][T16345] do_fast_syscall_32+0x6b/0xd0 [ 542.554764][T16345] do_SYSENTER_32+0x73/0x90 [ 542.559243][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.565537][T16345] [ 542.567872][T16345] Uninit was stored to memory at: [ 542.572879][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 542.578594][T16345] __msan_chain_origin+0x50/0x90 [ 542.583513][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 542.588601][T16345] get_compat_msghdr+0x108/0x2b0 [ 542.593516][T16345] do_recvmmsg+0xdba/0x22c0 [ 542.598028][T16345] __sys_recvmmsg+0x5dd/0x610 [ 542.602684][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 542.608727][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 542.614863][T16345] __do_fast_syscall_32+0x2af/0x480 [ 542.620038][T16345] do_fast_syscall_32+0x6b/0xd0 [ 542.624866][T16345] do_SYSENTER_32+0x73/0x90 [ 542.629364][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.635676][T16345] [ 542.637984][T16345] Uninit was stored to memory at: [ 542.642989][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 542.648685][T16345] __msan_chain_origin+0x50/0x90 [ 542.653615][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 542.658704][T16345] get_compat_msghdr+0x108/0x2b0 [ 542.663620][T16345] do_recvmmsg+0xdba/0x22c0 [ 542.668102][T16345] __sys_recvmmsg+0x5dd/0x610 [ 542.672797][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 542.678846][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 542.684981][T16345] __do_fast_syscall_32+0x2af/0x480 [ 542.690159][T16345] do_fast_syscall_32+0x6b/0xd0 [ 542.694997][T16345] do_SYSENTER_32+0x73/0x90 [ 542.699480][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.705778][T16345] [ 542.708083][T16345] Uninit was stored to memory at: [ 542.713087][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 542.718785][T16345] __msan_chain_origin+0x50/0x90 [ 542.723704][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 542.728858][T16345] get_compat_msghdr+0x108/0x2b0 [ 542.733776][T16345] do_recvmmsg+0xdba/0x22c0 [ 542.738296][T16345] __sys_recvmmsg+0x5dd/0x610 [ 542.742956][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 542.749007][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 542.755141][T16345] __do_fast_syscall_32+0x2af/0x480 [ 542.760320][T16345] do_fast_syscall_32+0x6b/0xd0 [ 542.765184][T16345] do_SYSENTER_32+0x73/0x90 [ 542.769678][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.775977][T16345] [ 542.778283][T16345] Uninit was stored to memory at: [ 542.783290][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 542.788988][T16345] __msan_chain_origin+0x50/0x90 [ 542.793909][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 542.799002][T16345] get_compat_msghdr+0x108/0x2b0 [ 542.803921][T16345] do_recvmmsg+0xdba/0x22c0 [ 542.808403][T16345] __sys_recvmmsg+0x5dd/0x610 [ 542.813064][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 542.819124][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 542.825266][T16345] __do_fast_syscall_32+0x2af/0x480 [ 542.830443][T16345] do_fast_syscall_32+0x6b/0xd0 [ 542.835274][T16345] do_SYSENTER_32+0x73/0x90 [ 542.839757][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.846053][T16345] [ 542.848355][T16345] Uninit was stored to memory at: [ 542.853362][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 542.859060][T16345] __msan_chain_origin+0x50/0x90 [ 542.863989][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 542.869097][T16345] get_compat_msghdr+0x108/0x2b0 [ 542.874014][T16345] do_recvmmsg+0xdba/0x22c0 [ 542.878507][T16345] __sys_recvmmsg+0x5dd/0x610 [ 542.883166][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 542.889214][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 542.895347][T16345] __do_fast_syscall_32+0x2af/0x480 [ 542.900525][T16345] do_fast_syscall_32+0x6b/0xd0 [ 542.905358][T16345] do_SYSENTER_32+0x73/0x90 [ 542.909839][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.916137][T16345] [ 542.918442][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 542.925096][T16345] do_recvmmsg+0xc2/0x22c0 [ 542.929491][T16345] do_recvmmsg+0xc2/0x22c0 [ 543.248036][T16345] not chained 1140000 origins [ 543.252859][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 543.261531][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.271643][T16345] Call Trace: [ 543.274954][T16345] dump_stack+0x21c/0x280 [ 543.279313][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 543.285055][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 543.290195][T16345] ? kmsan_get_metadata+0x116/0x180 [ 543.295414][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 543.301239][T16345] ? kmsan_get_metadata+0x116/0x180 [ 543.306455][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 543.312278][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 543.318356][T16345] ? kmsan_get_metadata+0x116/0x180 [ 543.323573][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 543.329147][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 543.335256][T16345] ? _copy_from_user+0x221/0x330 [ 543.340214][T16345] ? kmsan_get_metadata+0x116/0x180 [ 543.345428][T16345] __msan_chain_origin+0x50/0x90 [ 543.350389][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 543.355542][T16345] get_compat_msghdr+0x108/0x2b0 [ 543.360511][T16345] do_recvmmsg+0xdba/0x22c0 [ 543.365047][T16345] ? __msan_get_context_state+0x9/0x20 [ 543.370542][T16345] ? kmsan_get_metadata+0x116/0x180 [ 543.375762][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 543.381669][T16345] ? kmsan_get_metadata+0x116/0x180 [ 543.386872][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 543.392148][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 543.396895][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 543.401674][T16345] __sys_recvmmsg+0x5dd/0x610 [ 543.406351][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 543.412445][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 543.418602][T16345] __do_fast_syscall_32+0x2af/0x480 [ 543.423802][T16345] do_fast_syscall_32+0x6b/0xd0 [ 543.428650][T16345] do_SYSENTER_32+0x73/0x90 [ 543.433149][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.439491][T16345] RIP: 0023:0xf7f31549 [ 543.443536][T16345] Code: Bad RIP value. [ 543.447609][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 543.456031][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 543.463986][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.471938][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.479957][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 543.487911][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.495875][T16345] Uninit was stored to memory at: [ 543.500896][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 543.506596][T16345] __msan_chain_origin+0x50/0x90 [ 543.511511][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 543.516603][T16345] get_compat_msghdr+0x108/0x2b0 [ 543.521521][T16345] do_recvmmsg+0xdba/0x22c0 [ 543.526004][T16345] __sys_recvmmsg+0x5dd/0x610 [ 543.530662][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 543.536712][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 543.542845][T16345] __do_fast_syscall_32+0x2af/0x480 [ 543.548024][T16345] do_fast_syscall_32+0x6b/0xd0 [ 543.552858][T16345] do_SYSENTER_32+0x73/0x90 [ 543.557341][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.563650][T16345] [ 543.565956][T16345] Uninit was stored to memory at: [ 543.570965][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 543.576665][T16345] __msan_chain_origin+0x50/0x90 [ 543.581582][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 543.586672][T16345] get_compat_msghdr+0x108/0x2b0 [ 543.591597][T16345] do_recvmmsg+0xdba/0x22c0 [ 543.596081][T16345] __sys_recvmmsg+0x5dd/0x610 [ 543.600753][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 543.606801][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 543.612937][T16345] __do_fast_syscall_32+0x2af/0x480 [ 543.618117][T16345] do_fast_syscall_32+0x6b/0xd0 [ 543.622950][T16345] do_SYSENTER_32+0x73/0x90 [ 543.627434][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.633732][T16345] [ 543.636036][T16345] Uninit was stored to memory at: [ 543.641038][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 543.646738][T16345] __msan_chain_origin+0x50/0x90 [ 543.651656][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 543.656748][T16345] get_compat_msghdr+0x108/0x2b0 [ 543.661662][T16345] do_recvmmsg+0xdba/0x22c0 [ 543.666146][T16345] __sys_recvmmsg+0x5dd/0x610 [ 543.670804][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 543.676852][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 543.682986][T16345] __do_fast_syscall_32+0x2af/0x480 [ 543.688165][T16345] do_fast_syscall_32+0x6b/0xd0 [ 543.693000][T16345] do_SYSENTER_32+0x73/0x90 [ 543.697484][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.703782][T16345] [ 543.706089][T16345] Uninit was stored to memory at: [ 543.711096][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 543.716796][T16345] __msan_chain_origin+0x50/0x90 [ 543.721714][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 543.726809][T16345] get_compat_msghdr+0x108/0x2b0 [ 543.731738][T16345] do_recvmmsg+0xdba/0x22c0 [ 543.736233][T16345] __sys_recvmmsg+0x5dd/0x610 [ 543.740889][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 543.746939][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 543.753072][T16345] __do_fast_syscall_32+0x2af/0x480 [ 543.758251][T16345] do_fast_syscall_32+0x6b/0xd0 [ 543.763081][T16345] do_SYSENTER_32+0x73/0x90 [ 543.767577][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.773875][T16345] [ 543.776183][T16345] Uninit was stored to memory at: [ 543.781190][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 543.786889][T16345] __msan_chain_origin+0x50/0x90 [ 543.791818][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 543.796909][T16345] get_compat_msghdr+0x108/0x2b0 [ 543.801828][T16345] do_recvmmsg+0xdba/0x22c0 [ 543.806309][T16345] __sys_recvmmsg+0x5dd/0x610 [ 543.810980][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 543.817026][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 543.823182][T16345] __do_fast_syscall_32+0x2af/0x480 [ 543.828360][T16345] do_fast_syscall_32+0x6b/0xd0 [ 543.833197][T16345] do_SYSENTER_32+0x73/0x90 [ 543.837683][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.843980][T16345] [ 543.846283][T16345] Uninit was stored to memory at: [ 543.851289][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 543.856989][T16345] __msan_chain_origin+0x50/0x90 [ 543.861907][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 543.866998][T16345] get_compat_msghdr+0x108/0x2b0 [ 543.871916][T16345] do_recvmmsg+0xdba/0x22c0 [ 543.876412][T16345] __sys_recvmmsg+0x5dd/0x610 [ 543.881079][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 543.887128][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 543.893267][T16345] __do_fast_syscall_32+0x2af/0x480 [ 543.898445][T16345] do_fast_syscall_32+0x6b/0xd0 [ 543.903277][T16345] do_SYSENTER_32+0x73/0x90 [ 543.907759][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.914055][T16345] [ 543.916359][T16345] Uninit was stored to memory at: [ 543.921378][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 543.927077][T16345] __msan_chain_origin+0x50/0x90 [ 543.931994][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 543.937085][T16345] get_compat_msghdr+0x108/0x2b0 [ 543.942000][T16345] do_recvmmsg+0xdba/0x22c0 [ 543.946481][T16345] __sys_recvmmsg+0x5dd/0x610 [ 543.951139][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 543.957190][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 543.963327][T16345] __do_fast_syscall_32+0x2af/0x480 [ 543.968506][T16345] do_fast_syscall_32+0x6b/0xd0 [ 543.973335][T16345] do_SYSENTER_32+0x73/0x90 [ 543.977821][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.984120][T16345] [ 543.986428][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 543.993083][T16345] do_recvmmsg+0xc2/0x22c0 [ 543.997478][T16345] do_recvmmsg+0xc2/0x22c0 [ 544.285984][T16345] not chained 1150000 origins [ 544.290728][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 544.299398][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.309456][T16345] Call Trace: [ 544.312768][T16345] dump_stack+0x21c/0x280 [ 544.317131][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 544.322910][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 544.328050][T16345] ? kmsan_get_metadata+0x116/0x180 [ 544.333318][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 544.339142][T16345] ? kmsan_get_metadata+0x116/0x180 [ 544.344360][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 544.350185][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 544.356295][T16345] ? kmsan_get_metadata+0x116/0x180 [ 544.361479][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 544.367010][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 544.373102][T16345] ? _copy_from_user+0x221/0x330 [ 544.378033][T16345] ? kmsan_get_metadata+0x116/0x180 [ 544.383216][T16345] __msan_chain_origin+0x50/0x90 [ 544.388142][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 544.393253][T16345] get_compat_msghdr+0x108/0x2b0 [ 544.398187][T16345] do_recvmmsg+0xdba/0x22c0 [ 544.402681][T16345] ? __msan_get_context_state+0x9/0x20 [ 544.408134][T16345] ? kmsan_get_metadata+0x116/0x180 [ 544.413321][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 544.419244][T16345] ? kmsan_get_metadata+0x116/0x180 [ 544.424453][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 544.429723][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 544.434510][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 544.439264][T16345] __sys_recvmmsg+0x5dd/0x610 [ 544.443946][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 544.450007][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 544.456151][T16345] __do_fast_syscall_32+0x2af/0x480 [ 544.461341][T16345] do_fast_syscall_32+0x6b/0xd0 [ 544.466180][T16345] do_SYSENTER_32+0x73/0x90 [ 544.470701][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 544.477008][T16345] RIP: 0023:0xf7f31549 [ 544.481049][T16345] Code: Bad RIP value. [ 544.485095][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 544.493485][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 544.501437][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 544.509391][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 544.517343][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 544.525303][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 544.533296][T16345] Uninit was stored to memory at: [ 544.538310][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 544.544007][T16345] __msan_chain_origin+0x50/0x90 [ 544.548927][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 544.554017][T16345] get_compat_msghdr+0x108/0x2b0 [ 544.558936][T16345] do_recvmmsg+0xdba/0x22c0 [ 544.563421][T16345] __sys_recvmmsg+0x5dd/0x610 [ 544.568080][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 544.574128][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 544.580263][T16345] __do_fast_syscall_32+0x2af/0x480 [ 544.585448][T16345] do_fast_syscall_32+0x6b/0xd0 [ 544.590281][T16345] do_SYSENTER_32+0x73/0x90 [ 544.594768][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 544.601079][T16345] [ 544.603383][T16345] Uninit was stored to memory at: [ 544.608388][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 544.614089][T16345] __msan_chain_origin+0x50/0x90 [ 544.619006][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 544.624095][T16345] get_compat_msghdr+0x108/0x2b0 [ 544.629009][T16345] do_recvmmsg+0xdba/0x22c0 [ 544.633496][T16345] __sys_recvmmsg+0x5dd/0x610 [ 544.638162][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 544.644220][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 544.650357][T16345] __do_fast_syscall_32+0x2af/0x480 [ 544.655539][T16345] do_fast_syscall_32+0x6b/0xd0 [ 544.660412][T16345] do_SYSENTER_32+0x73/0x90 [ 544.664898][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 544.671194][T16345] [ 544.673501][T16345] Uninit was stored to memory at: [ 544.678511][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 544.684248][T16345] __msan_chain_origin+0x50/0x90 [ 544.689167][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 544.694257][T16345] get_compat_msghdr+0x108/0x2b0 [ 544.699176][T16345] do_recvmmsg+0xdba/0x22c0 [ 544.703659][T16345] __sys_recvmmsg+0x5dd/0x610 [ 544.708317][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 544.714366][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 544.720502][T16345] __do_fast_syscall_32+0x2af/0x480 [ 544.725684][T16345] do_fast_syscall_32+0x6b/0xd0 [ 544.730512][T16345] do_SYSENTER_32+0x73/0x90 [ 544.734997][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 544.741296][T16345] [ 544.743603][T16345] Uninit was stored to memory at: [ 544.748611][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 544.754312][T16345] __msan_chain_origin+0x50/0x90 [ 544.759232][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 544.764323][T16345] get_compat_msghdr+0x108/0x2b0 [ 544.769292][T16345] do_recvmmsg+0xdba/0x22c0 [ 544.773776][T16345] __sys_recvmmsg+0x5dd/0x610 [ 544.778435][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 544.784484][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 544.790620][T16345] __do_fast_syscall_32+0x2af/0x480 [ 544.795805][T16345] do_fast_syscall_32+0x6b/0xd0 [ 544.800634][T16345] do_SYSENTER_32+0x73/0x90 [ 544.805123][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 544.811421][T16345] [ 544.813728][T16345] Uninit was stored to memory at: [ 544.818740][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 544.824454][T16345] __msan_chain_origin+0x50/0x90 [ 544.829403][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 544.834532][T16345] get_compat_msghdr+0x108/0x2b0 [ 544.839448][T16345] do_recvmmsg+0xdba/0x22c0 [ 544.843935][T16345] __sys_recvmmsg+0x5dd/0x610 [ 544.848595][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 544.854644][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 544.860778][T16345] __do_fast_syscall_32+0x2af/0x480 [ 544.865959][T16345] do_fast_syscall_32+0x6b/0xd0 [ 544.870805][T16345] do_SYSENTER_32+0x73/0x90 [ 544.875303][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 544.881604][T16345] [ 544.883912][T16345] Uninit was stored to memory at: [ 544.888923][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 544.894651][T16345] __msan_chain_origin+0x50/0x90 [ 544.899573][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 544.904666][T16345] get_compat_msghdr+0x108/0x2b0 [ 544.909582][T16345] do_recvmmsg+0xdba/0x22c0 [ 544.914065][T16345] __sys_recvmmsg+0x5dd/0x610 [ 544.918751][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 544.924801][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 544.930937][T16345] __do_fast_syscall_32+0x2af/0x480 [ 544.936137][T16345] do_fast_syscall_32+0x6b/0xd0 [ 544.940968][T16345] do_SYSENTER_32+0x73/0x90 [ 544.945455][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 544.951753][T16345] [ 544.954059][T16345] Uninit was stored to memory at: [ 544.959070][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 544.964771][T16345] __msan_chain_origin+0x50/0x90 [ 544.969706][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 544.974798][T16345] get_compat_msghdr+0x108/0x2b0 [ 544.979728][T16345] do_recvmmsg+0xdba/0x22c0 [ 544.984211][T16345] __sys_recvmmsg+0x5dd/0x610 [ 544.988871][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 544.994921][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 545.001055][T16345] __do_fast_syscall_32+0x2af/0x480 [ 545.006237][T16345] do_fast_syscall_32+0x6b/0xd0 [ 545.011070][T16345] do_SYSENTER_32+0x73/0x90 [ 545.015558][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.021873][T16345] [ 545.024182][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 545.030848][T16345] do_recvmmsg+0xc2/0x22c0 [ 545.035246][T16345] do_recvmmsg+0xc2/0x22c0 [ 545.242193][T16345] not chained 1160000 origins [ 545.246947][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 545.255652][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.265725][T16345] Call Trace: [ 545.269052][T16345] dump_stack+0x21c/0x280 [ 545.273417][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 545.279275][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 545.284427][T16345] ? kmsan_get_metadata+0x116/0x180 [ 545.289656][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 545.295506][T16345] ? kmsan_get_metadata+0x116/0x180 [ 545.300733][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 545.306566][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 545.312699][T16345] ? kmsan_get_metadata+0x116/0x180 [ 545.317952][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 545.323534][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 545.329637][T16345] ? _copy_from_user+0x221/0x330 [ 545.334656][T16345] ? kmsan_get_metadata+0x116/0x180 [ 545.339882][T16345] __msan_chain_origin+0x50/0x90 [ 545.344852][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 545.350051][T16345] get_compat_msghdr+0x108/0x2b0 [ 545.355060][T16345] do_recvmmsg+0xdba/0x22c0 [ 545.359603][T16345] ? __msan_get_context_state+0x9/0x20 [ 545.365106][T16345] ? kmsan_get_metadata+0x116/0x180 [ 545.370368][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 545.376301][T16345] ? kmsan_get_metadata+0x116/0x180 [ 545.381534][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 545.386854][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 545.391645][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 545.396436][T16345] __sys_recvmmsg+0x5dd/0x610 [ 545.401204][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 545.407327][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 545.413526][T16345] __do_fast_syscall_32+0x2af/0x480 [ 545.418780][T16345] do_fast_syscall_32+0x6b/0xd0 [ 545.423682][T16345] do_SYSENTER_32+0x73/0x90 [ 545.428236][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.434594][T16345] RIP: 0023:0xf7f31549 [ 545.438679][T16345] Code: Bad RIP value. [ 545.442801][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 545.451255][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 545.459257][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.467258][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.475278][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 545.483273][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.491285][T16345] Uninit was stored to memory at: [ 545.496347][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 545.502096][T16345] __msan_chain_origin+0x50/0x90 [ 545.507067][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 545.512215][T16345] get_compat_msghdr+0x108/0x2b0 [ 545.517188][T16345] do_recvmmsg+0xdba/0x22c0 [ 545.521725][T16345] __sys_recvmmsg+0x5dd/0x610 [ 545.526466][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 545.532570][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 545.538756][T16345] __do_fast_syscall_32+0x2af/0x480 [ 545.543988][T16345] do_fast_syscall_32+0x6b/0xd0 [ 545.548871][T16345] do_SYSENTER_32+0x73/0x90 [ 545.553432][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.559781][T16345] [ 545.562120][T16345] Uninit was stored to memory at: [ 545.567175][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 545.572929][T16345] __msan_chain_origin+0x50/0x90 [ 545.577901][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 545.583052][T16345] get_compat_msghdr+0x108/0x2b0 [ 545.588105][T16345] do_recvmmsg+0xdba/0x22c0 [ 545.592642][T16345] __sys_recvmmsg+0x5dd/0x610 [ 545.597357][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 545.603464][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 545.609663][T16345] __do_fast_syscall_32+0x2af/0x480 [ 545.615087][T16345] do_fast_syscall_32+0x6b/0xd0 [ 545.619968][T16345] do_SYSENTER_32+0x73/0x90 [ 545.624493][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.630810][T16345] [ 545.633154][T16345] Uninit was stored to memory at: [ 545.638291][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 545.644039][T16345] __msan_chain_origin+0x50/0x90 [ 545.648995][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 545.654128][T16345] get_compat_msghdr+0x108/0x2b0 [ 545.659084][T16345] do_recvmmsg+0xdba/0x22c0 [ 545.663589][T16345] __sys_recvmmsg+0x5dd/0x610 [ 545.668298][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 545.674376][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 545.680540][T16345] __do_fast_syscall_32+0x2af/0x480 [ 545.685766][T16345] do_fast_syscall_32+0x6b/0xd0 [ 545.690637][T16345] do_SYSENTER_32+0x73/0x90 [ 545.695169][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.701520][T16345] [ 545.703857][T16345] Uninit was stored to memory at: [ 545.708915][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 545.714677][T16345] __msan_chain_origin+0x50/0x90 [ 545.719613][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 545.724745][T16345] get_compat_msghdr+0x108/0x2b0 [ 545.729690][T16345] do_recvmmsg+0xdba/0x22c0 [ 545.734202][T16345] __sys_recvmmsg+0x5dd/0x610 [ 545.738881][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 545.744951][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 545.751106][T16345] __do_fast_syscall_32+0x2af/0x480 [ 545.756307][T16345] do_fast_syscall_32+0x6b/0xd0 [ 545.761157][T16345] do_SYSENTER_32+0x73/0x90 [ 545.765661][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.771981][T16345] [ 545.774298][T16345] Uninit was stored to memory at: [ 545.779333][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 545.785063][T16345] __msan_chain_origin+0x50/0x90 [ 545.789998][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 545.795115][T16345] get_compat_msghdr+0x108/0x2b0 [ 545.800055][T16345] do_recvmmsg+0xdba/0x22c0 [ 545.804590][T16345] __sys_recvmmsg+0x5dd/0x610 [ 545.809291][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 545.815401][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 545.821578][T16345] __do_fast_syscall_32+0x2af/0x480 [ 545.826797][T16345] do_fast_syscall_32+0x6b/0xd0 [ 545.831647][T16345] do_SYSENTER_32+0x73/0x90 [ 545.836153][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.842471][T16345] [ 545.844803][T16345] Uninit was stored to memory at: [ 545.849828][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 545.855546][T16345] __msan_chain_origin+0x50/0x90 [ 545.860482][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 545.865594][T16345] get_compat_msghdr+0x108/0x2b0 [ 545.870537][T16345] do_recvmmsg+0xdba/0x22c0 [ 545.875038][T16345] __sys_recvmmsg+0x5dd/0x610 [ 545.879714][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 545.885785][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 545.891940][T16345] __do_fast_syscall_32+0x2af/0x480 [ 545.897141][T16345] do_fast_syscall_32+0x6b/0xd0 [ 545.902001][T16345] do_SYSENTER_32+0x73/0x90 [ 545.906503][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.912819][T16345] [ 545.915137][T16345] Uninit was stored to memory at: [ 545.920160][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 545.925898][T16345] __msan_chain_origin+0x50/0x90 [ 545.930852][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 545.935968][T16345] get_compat_msghdr+0x108/0x2b0 [ 545.940926][T16345] do_recvmmsg+0xdba/0x22c0 [ 545.945428][T16345] __sys_recvmmsg+0x5dd/0x610 [ 545.950109][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 545.956193][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 545.962346][T16345] __do_fast_syscall_32+0x2af/0x480 [ 545.967545][T16345] do_fast_syscall_32+0x6b/0xd0 [ 545.972408][T16345] do_SYSENTER_32+0x73/0x90 [ 545.976922][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.983248][T16345] [ 545.985578][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 545.992259][T16345] do_recvmmsg+0xc2/0x22c0 [ 545.996678][T16345] do_recvmmsg+0xc2/0x22c0 [ 546.259222][T16345] not chained 1170000 origins [ 546.263985][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 546.272701][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.282805][T16345] Call Trace: [ 546.286150][T16345] dump_stack+0x21c/0x280 [ 546.290527][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 546.296297][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 546.301455][T16345] ? kmsan_get_metadata+0x116/0x180 [ 546.306692][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 546.312545][T16345] ? kmsan_get_metadata+0x116/0x180 [ 546.317785][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 546.323637][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 546.329737][T16345] ? kmsan_get_metadata+0x116/0x180 [ 546.334982][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 546.340566][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 546.346679][T16345] ? _copy_from_user+0x221/0x330 [ 546.351664][T16345] ? kmsan_get_metadata+0x116/0x180 [ 546.356910][T16345] __msan_chain_origin+0x50/0x90 [ 546.361910][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 546.367081][T16345] get_compat_msghdr+0x108/0x2b0 [ 546.372092][T16345] do_recvmmsg+0xdba/0x22c0 [ 546.376618][T16345] ? __msan_get_context_state+0x9/0x20 [ 546.382099][T16345] ? kmsan_get_metadata+0x116/0x180 [ 546.387376][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 546.393300][T16345] ? kmsan_get_metadata+0x116/0x180 [ 546.398572][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 546.403917][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 546.408686][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 546.413479][T16345] __sys_recvmmsg+0x5dd/0x610 [ 546.418211][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 546.424306][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 546.430476][T16345] __do_fast_syscall_32+0x2af/0x480 [ 546.435735][T16345] do_fast_syscall_32+0x6b/0xd0 [ 546.440600][T16345] do_SYSENTER_32+0x73/0x90 [ 546.445120][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 546.451444][T16345] RIP: 0023:0xf7f31549 [ 546.455536][T16345] Code: Bad RIP value. [ 546.459613][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 546.468022][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 546.476034][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.484062][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.492031][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 546.500147][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.508132][T16345] Uninit was stored to memory at: [ 546.513188][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 546.518957][T16345] __msan_chain_origin+0x50/0x90 [ 546.523914][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 546.529072][T16345] get_compat_msghdr+0x108/0x2b0 [ 546.534027][T16345] do_recvmmsg+0xdba/0x22c0 [ 546.538566][T16345] __sys_recvmmsg+0x5dd/0x610 [ 546.543247][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 546.549331][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 546.555504][T16345] __do_fast_syscall_32+0x2af/0x480 [ 546.560721][T16345] do_fast_syscall_32+0x6b/0xd0 [ 546.565587][T16345] do_SYSENTER_32+0x73/0x90 [ 546.570091][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 546.576417][T16345] [ 546.578735][T16345] Uninit was stored to memory at: [ 546.583800][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 546.589537][T16345] __msan_chain_origin+0x50/0x90 [ 546.594497][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 546.599625][T16345] get_compat_msghdr+0x108/0x2b0 [ 546.604578][T16345] do_recvmmsg+0xdba/0x22c0 [ 546.609123][T16345] __sys_recvmmsg+0x5dd/0x610 [ 546.613826][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 546.619910][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 546.626080][T16345] __do_fast_syscall_32+0x2af/0x480 [ 546.631299][T16345] do_fast_syscall_32+0x6b/0xd0 [ 546.636156][T16345] do_SYSENTER_32+0x73/0x90 [ 546.640660][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 546.646978][T16345] [ 546.649314][T16345] Uninit was stored to memory at: [ 546.654356][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 546.660090][T16345] __msan_chain_origin+0x50/0x90 [ 546.665029][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 546.670141][T16345] get_compat_msghdr+0x108/0x2b0 [ 546.675097][T16345] do_recvmmsg+0xdba/0x22c0 [ 546.679652][T16345] __sys_recvmmsg+0x5dd/0x610 [ 546.684350][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 546.690416][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 546.696587][T16345] __do_fast_syscall_32+0x2af/0x480 [ 546.701826][T16345] do_fast_syscall_32+0x6b/0xd0 [ 546.706694][T16345] do_SYSENTER_32+0x73/0x90 [ 546.711199][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 546.717519][T16345] [ 546.722128][T16345] Uninit was stored to memory at: [ 546.727172][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 546.732909][T16345] __msan_chain_origin+0x50/0x90 [ 546.737859][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 546.742988][T16345] get_compat_msghdr+0x108/0x2b0 [ 546.747940][T16345] do_recvmmsg+0xdba/0x22c0 [ 546.752451][T16345] __sys_recvmmsg+0x5dd/0x610 [ 546.757149][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 546.763237][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 546.769401][T16345] __do_fast_syscall_32+0x2af/0x480 [ 546.774621][T16345] do_fast_syscall_32+0x6b/0xd0 [ 546.779488][T16345] do_SYSENTER_32+0x73/0x90 [ 546.783989][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 546.790295][T16345] [ 546.792621][T16345] Uninit was stored to memory at: [ 546.797661][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 546.803422][T16345] __msan_chain_origin+0x50/0x90 [ 546.808378][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 546.813510][T16345] get_compat_msghdr+0x108/0x2b0 [ 546.818463][T16345] do_recvmmsg+0xdba/0x22c0 [ 546.822981][T16345] __sys_recvmmsg+0x5dd/0x610 [ 546.827675][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 546.833759][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 546.839927][T16345] __do_fast_syscall_32+0x2af/0x480 [ 546.845126][T16345] do_fast_syscall_32+0x6b/0xd0 [ 546.849972][T16345] do_SYSENTER_32+0x73/0x90 [ 546.854492][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 546.860826][T16345] [ 546.863143][T16345] Uninit was stored to memory at: [ 546.868172][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 546.873928][T16345] __msan_chain_origin+0x50/0x90 [ 546.878879][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 546.883988][T16345] get_compat_msghdr+0x108/0x2b0 [ 546.888921][T16345] do_recvmmsg+0xdba/0x22c0 [ 546.893439][T16345] __sys_recvmmsg+0x5dd/0x610 [ 546.898146][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 546.904217][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 546.910378][T16345] __do_fast_syscall_32+0x2af/0x480 [ 546.915601][T16345] do_fast_syscall_32+0x6b/0xd0 [ 546.920505][T16345] do_SYSENTER_32+0x73/0x90 [ 546.925021][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 546.931338][T16345] [ 546.933662][T16345] Uninit was stored to memory at: [ 546.938720][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 546.944455][T16345] __msan_chain_origin+0x50/0x90 [ 546.949388][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 546.954514][T16345] get_compat_msghdr+0x108/0x2b0 [ 546.959465][T16345] do_recvmmsg+0xdba/0x22c0 [ 546.963966][T16345] __sys_recvmmsg+0x5dd/0x610 [ 546.968643][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 546.974738][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 546.980905][T16345] __do_fast_syscall_32+0x2af/0x480 [ 546.986116][T16345] do_fast_syscall_32+0x6b/0xd0 [ 546.990987][T16345] do_SYSENTER_32+0x73/0x90 [ 546.995490][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.001798][T16345] [ 547.004143][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 547.010816][T16345] do_recvmmsg+0xc2/0x22c0 [ 547.015233][T16345] do_recvmmsg+0xc2/0x22c0 [ 547.240170][T16345] not chained 1180000 origins [ 547.244936][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 547.253620][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.263694][T16345] Call Trace: [ 547.267032][T16345] dump_stack+0x21c/0x280 [ 547.271412][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 547.277176][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 547.282332][T16345] ? kmsan_get_metadata+0x116/0x180 [ 547.287568][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.293409][T16345] ? kmsan_get_metadata+0x116/0x180 [ 547.298638][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 547.304479][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 547.310576][T16345] ? kmsan_get_metadata+0x116/0x180 [ 547.315809][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 547.321397][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 547.327507][T16345] ? _copy_from_user+0x221/0x330 [ 547.332474][T16345] ? kmsan_get_metadata+0x116/0x180 [ 547.337700][T16345] __msan_chain_origin+0x50/0x90 [ 547.342666][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 547.347834][T16345] get_compat_msghdr+0x108/0x2b0 [ 547.352813][T16345] do_recvmmsg+0xdba/0x22c0 [ 547.357350][T16345] ? __msan_get_context_state+0x9/0x20 [ 547.362862][T16345] ? kmsan_get_metadata+0x116/0x180 [ 547.368105][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 547.374035][T16345] ? kmsan_get_metadata+0x116/0x180 [ 547.379274][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 547.384594][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 547.389380][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 547.394174][T16345] __sys_recvmmsg+0x5dd/0x610 [ 547.398935][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 547.405052][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 547.411247][T16345] __do_fast_syscall_32+0x2af/0x480 [ 547.416489][T16345] do_fast_syscall_32+0x6b/0xd0 [ 547.421371][T16345] do_SYSENTER_32+0x73/0x90 [ 547.425898][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.432248][T16345] RIP: 0023:0xf7f31549 [ 547.436322][T16345] Code: Bad RIP value. [ 547.440400][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 547.448831][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 547.456849][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.464844][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.472836][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 547.480830][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.488839][T16345] Uninit was stored to memory at: [ 547.493895][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 547.499637][T16345] __msan_chain_origin+0x50/0x90 [ 547.504609][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 547.509769][T16345] get_compat_msghdr+0x108/0x2b0 [ 547.514762][T16345] do_recvmmsg+0xdba/0x22c0 [ 547.519311][T16345] __sys_recvmmsg+0x5dd/0x610 [ 547.524053][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 547.530187][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 547.536398][T16345] __do_fast_syscall_32+0x2af/0x480 [ 547.541698][T16345] do_fast_syscall_32+0x6b/0xd0 [ 547.546593][T16345] do_SYSENTER_32+0x73/0x90 [ 547.551140][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.557482][T16345] [ 547.559825][T16345] Uninit was stored to memory at: [ 547.564890][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 547.570651][T16345] __msan_chain_origin+0x50/0x90 [ 547.575634][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 547.580794][T16345] get_compat_msghdr+0x108/0x2b0 [ 547.585772][T16345] do_recvmmsg+0xdba/0x22c0 [ 547.590308][T16345] __sys_recvmmsg+0x5dd/0x610 [ 547.595029][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 547.601148][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 547.607351][T16345] __do_fast_syscall_32+0x2af/0x480 [ 547.612595][T16345] do_fast_syscall_32+0x6b/0xd0 [ 547.617486][T16345] do_SYSENTER_32+0x73/0x90 [ 547.622019][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.628385][T16345] [ 547.630705][T16345] Uninit was stored to memory at: [ 547.635788][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 547.641518][T16345] __msan_chain_origin+0x50/0x90 [ 547.646470][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 547.651595][T16345] get_compat_msghdr+0x108/0x2b0 [ 547.656545][T16345] do_recvmmsg+0xdba/0x22c0 [ 547.661065][T16345] __sys_recvmmsg+0x5dd/0x610 [ 547.665756][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 547.671829][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 547.677994][T16345] __do_fast_syscall_32+0x2af/0x480 [ 547.683235][T16345] do_fast_syscall_32+0x6b/0xd0 [ 547.688135][T16345] do_SYSENTER_32+0x73/0x90 [ 547.692681][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.699062][T16345] [ 547.701421][T16345] Uninit was stored to memory at: [ 547.706490][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 547.712259][T16345] __msan_chain_origin+0x50/0x90 [ 547.717233][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 547.722377][T16345] get_compat_msghdr+0x108/0x2b0 [ 547.727323][T16345] do_recvmmsg+0xdba/0x22c0 [ 547.731942][T16345] __sys_recvmmsg+0x5dd/0x610 [ 547.736642][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 547.742759][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 547.748956][T16345] __do_fast_syscall_32+0x2af/0x480 [ 547.754186][T16345] do_fast_syscall_32+0x6b/0xd0 [ 547.759102][T16345] do_SYSENTER_32+0x73/0x90 [ 547.763654][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.769975][T16345] [ 547.772298][T16345] Uninit was stored to memory at: [ 547.777332][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 547.783076][T16345] __msan_chain_origin+0x50/0x90 [ 547.788059][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 547.793209][T16345] get_compat_msghdr+0x108/0x2b0 [ 547.798217][T16345] do_recvmmsg+0xdba/0x22c0 [ 547.802755][T16345] __sys_recvmmsg+0x5dd/0x610 [ 547.807456][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 547.813550][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 547.819748][T16345] __do_fast_syscall_32+0x2af/0x480 [ 547.824973][T16345] do_fast_syscall_32+0x6b/0xd0 [ 547.829849][T16345] do_SYSENTER_32+0x73/0x90 [ 547.834385][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.840713][T16345] [ 547.843031][T16345] Uninit was stored to memory at: [ 547.848084][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 547.853840][T16345] __msan_chain_origin+0x50/0x90 [ 547.858821][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 547.863939][T16345] get_compat_msghdr+0x108/0x2b0 [ 547.868876][T16345] do_recvmmsg+0xdba/0x22c0 [ 547.873396][T16345] __sys_recvmmsg+0x5dd/0x610 [ 547.878126][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 547.884236][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 547.890399][T16345] __do_fast_syscall_32+0x2af/0x480 [ 547.895597][T16345] do_fast_syscall_32+0x6b/0xd0 [ 547.900437][T16345] do_SYSENTER_32+0x73/0x90 [ 547.904939][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.911253][T16345] [ 547.913566][T16345] Uninit was stored to memory at: [ 547.918590][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 547.924293][T16345] __msan_chain_origin+0x50/0x90 [ 547.929224][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 547.934357][T16345] get_compat_msghdr+0x108/0x2b0 [ 547.939306][T16345] do_recvmmsg+0xdba/0x22c0 [ 547.943799][T16345] __sys_recvmmsg+0x5dd/0x610 [ 547.948467][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 547.954544][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 547.960724][T16345] __do_fast_syscall_32+0x2af/0x480 [ 547.965921][T16345] do_fast_syscall_32+0x6b/0xd0 [ 547.970761][T16345] do_SYSENTER_32+0x73/0x90 [ 547.975268][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.981605][T16345] [ 547.983920][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 547.990591][T16345] do_recvmmsg+0xc2/0x22c0 [ 547.995010][T16345] do_recvmmsg+0xc2/0x22c0 [ 548.249246][T16345] not chained 1190000 origins [ 548.253962][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 548.262640][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.272706][T16345] Call Trace: [ 548.276001][T16345] dump_stack+0x21c/0x280 [ 548.280328][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 548.286051][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 548.291165][T16345] ? kmsan_get_metadata+0x116/0x180 [ 548.296376][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 548.302179][T16345] ? kmsan_get_metadata+0x116/0x180 [ 548.307395][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 548.313206][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 548.319271][T16345] ? kmsan_get_metadata+0x116/0x180 [ 548.324486][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 548.330028][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 548.336113][T16345] ? _copy_from_user+0x221/0x330 [ 548.341071][T16345] ? kmsan_get_metadata+0x116/0x180 [ 548.346268][T16345] __msan_chain_origin+0x50/0x90 [ 548.351207][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 548.356365][T16345] get_compat_msghdr+0x108/0x2b0 [ 548.361306][T16345] do_recvmmsg+0xdba/0x22c0 [ 548.365832][T16345] ? __msan_get_context_state+0x9/0x20 [ 548.371310][T16345] ? kmsan_get_metadata+0x116/0x180 [ 548.376511][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 548.382405][T16345] ? kmsan_get_metadata+0x116/0x180 [ 548.387616][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 548.392915][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 548.397679][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 548.402462][T16345] __sys_recvmmsg+0x5dd/0x610 [ 548.407202][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 548.413324][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 548.419522][T16345] __do_fast_syscall_32+0x2af/0x480 [ 548.424772][T16345] do_fast_syscall_32+0x6b/0xd0 [ 548.429671][T16345] do_SYSENTER_32+0x73/0x90 [ 548.434219][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 548.440562][T16345] RIP: 0023:0xf7f31549 [ 548.444626][T16345] Code: Bad RIP value. [ 548.448689][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 548.457111][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 548.466481][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.474448][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 548.482413][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 548.490391][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.498369][T16345] Uninit was stored to memory at: [ 548.503397][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 548.509109][T16345] __msan_chain_origin+0x50/0x90 [ 548.514422][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 548.519574][T16345] get_compat_msghdr+0x108/0x2b0 [ 548.524549][T16345] do_recvmmsg+0xdba/0x22c0 [ 548.529049][T16345] __sys_recvmmsg+0x5dd/0x610 [ 548.533745][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 548.539808][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 548.545959][T16345] __do_fast_syscall_32+0x2af/0x480 [ 548.551164][T16345] do_fast_syscall_32+0x6b/0xd0 [ 548.556020][T16345] do_SYSENTER_32+0x73/0x90 [ 548.560517][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 548.566824][T16345] [ 548.569137][T16345] Uninit was stored to memory at: [ 548.574157][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 548.579872][T16345] __msan_chain_origin+0x50/0x90 [ 548.584800][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 548.589897][T16345] get_compat_msghdr+0x108/0x2b0 [ 548.594825][T16345] do_recvmmsg+0xdba/0x22c0 [ 548.599343][T16345] __sys_recvmmsg+0x5dd/0x610 [ 548.604029][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 548.610091][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 548.616245][T16345] __do_fast_syscall_32+0x2af/0x480 [ 548.621433][T16345] do_fast_syscall_32+0x6b/0xd0 [ 548.626284][T16345] do_SYSENTER_32+0x73/0x90 [ 548.630786][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 548.637093][T16345] [ 548.639414][T16345] Uninit was stored to memory at: [ 548.644448][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 548.650173][T16345] __msan_chain_origin+0x50/0x90 [ 548.655115][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 548.660222][T16345] get_compat_msghdr+0x108/0x2b0 [ 548.665161][T16345] do_recvmmsg+0xdba/0x22c0 [ 548.669654][T16345] __sys_recvmmsg+0x5dd/0x610 [ 548.674343][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 548.680420][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 548.686576][T16345] __do_fast_syscall_32+0x2af/0x480 [ 548.691772][T16345] do_fast_syscall_32+0x6b/0xd0 [ 548.696617][T16345] do_SYSENTER_32+0x73/0x90 [ 548.701108][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 548.707413][T16345] [ 548.709726][T16345] Uninit was stored to memory at: [ 548.714753][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 548.720462][T16345] __msan_chain_origin+0x50/0x90 [ 548.725394][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 548.730497][T16345] get_compat_msghdr+0x108/0x2b0 [ 548.735437][T16345] do_recvmmsg+0xdba/0x22c0 [ 548.739929][T16345] __sys_recvmmsg+0x5dd/0x610 [ 548.744606][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 548.750677][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 548.756835][T16345] __do_fast_syscall_32+0x2af/0x480 [ 548.762025][T16345] do_fast_syscall_32+0x6b/0xd0 [ 548.766873][T16345] do_SYSENTER_32+0x73/0x90 [ 548.771374][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 548.777732][T16345] [ 548.780053][T16345] Uninit was stored to memory at: [ 548.785128][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 548.790842][T16345] __msan_chain_origin+0x50/0x90 [ 548.795783][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 548.800886][T16345] get_compat_msghdr+0x108/0x2b0 [ 548.805868][T16345] do_recvmmsg+0xdba/0x22c0 [ 548.810360][T16345] __sys_recvmmsg+0x5dd/0x610 [ 548.815080][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 548.821165][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 548.827314][T16345] __do_fast_syscall_32+0x2af/0x480 [ 548.832528][T16345] do_fast_syscall_32+0x6b/0xd0 [ 548.837392][T16345] do_SYSENTER_32+0x73/0x90 [ 548.841938][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 548.848245][T16345] [ 548.850602][T16345] Uninit was stored to memory at: [ 548.855625][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 548.861373][T16345] __msan_chain_origin+0x50/0x90 [ 548.866322][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 548.871429][T16345] get_compat_msghdr+0x108/0x2b0 [ 548.876380][T16345] do_recvmmsg+0xdba/0x22c0 [ 548.880875][T16345] __sys_recvmmsg+0x5dd/0x610 [ 548.885546][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 548.891620][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 548.897799][T16345] __do_fast_syscall_32+0x2af/0x480 [ 548.903013][T16345] do_fast_syscall_32+0x6b/0xd0 [ 548.907861][T16345] do_SYSENTER_32+0x73/0x90 [ 548.912373][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 548.918678][T16345] [ 548.920989][T16345] Uninit was stored to memory at: [ 548.926030][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 548.931746][T16345] __msan_chain_origin+0x50/0x90 [ 548.936685][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 548.941793][T16345] get_compat_msghdr+0x108/0x2b0 [ 548.946743][T16345] do_recvmmsg+0xdba/0x22c0 [ 548.951249][T16345] __sys_recvmmsg+0x5dd/0x610 [ 548.955922][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 548.961986][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 548.968138][T16345] __do_fast_syscall_32+0x2af/0x480 [ 548.973333][T16345] do_fast_syscall_32+0x6b/0xd0 [ 548.978179][T16345] do_SYSENTER_32+0x73/0x90 [ 548.982683][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 548.988989][T16345] [ 548.991301][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 548.997971][T16345] do_recvmmsg+0xc2/0x22c0 [ 549.002382][T16345] do_recvmmsg+0xc2/0x22c0 [ 549.268557][T16345] not chained 1200000 origins [ 549.273313][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 549.281998][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.292073][T16345] Call Trace: [ 549.295399][T16345] dump_stack+0x21c/0x280 [ 549.299825][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 549.305581][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 549.310733][T16345] ? kmsan_get_metadata+0x116/0x180 [ 549.315975][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 549.321815][T16345] ? kmsan_get_metadata+0x116/0x180 [ 549.327050][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 549.332893][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 549.338994][T16345] ? kmsan_get_metadata+0x116/0x180 [ 549.344230][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 549.349828][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 549.355943][T16345] ? _copy_from_user+0x221/0x330 [ 549.360920][T16345] ? kmsan_get_metadata+0x116/0x180 [ 549.366156][T16345] __msan_chain_origin+0x50/0x90 [ 549.371133][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 549.376307][T16345] get_compat_msghdr+0x108/0x2b0 [ 549.381291][T16345] do_recvmmsg+0xdba/0x22c0 [ 549.385839][T16345] ? __msan_get_context_state+0x9/0x20 [ 549.391350][T16345] ? kmsan_get_metadata+0x116/0x180 [ 549.396591][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 549.402523][T16345] ? kmsan_get_metadata+0x116/0x180 [ 549.407771][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 549.413205][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 549.417993][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 549.422799][T16345] __sys_recvmmsg+0x5dd/0x610 [ 549.427525][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 549.433640][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 549.439837][T16345] __do_fast_syscall_32+0x2af/0x480 [ 549.445081][T16345] do_fast_syscall_32+0x6b/0xd0 [ 549.449960][T16345] do_SYSENTER_32+0x73/0x90 [ 549.454492][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 549.460850][T16345] RIP: 0023:0xf7f31549 [ 549.464923][T16345] Code: Bad RIP value. [ 549.468998][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 549.477430][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 549.485423][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.493406][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.501371][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 549.509377][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.517370][T16345] Uninit was stored to memory at: [ 549.522416][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 549.528163][T16345] __msan_chain_origin+0x50/0x90 [ 549.533098][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 549.538215][T16345] get_compat_msghdr+0x108/0x2b0 [ 549.543146][T16345] do_recvmmsg+0xdba/0x22c0 [ 549.547639][T16345] __sys_recvmmsg+0x5dd/0x610 [ 549.552329][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 549.558394][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 549.564546][T16345] __do_fast_syscall_32+0x2af/0x480 [ 549.569760][T16345] do_fast_syscall_32+0x6b/0xd0 [ 549.574601][T16345] do_SYSENTER_32+0x73/0x90 [ 549.579093][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 549.585397][T16345] [ 549.587710][T16345] Uninit was stored to memory at: [ 549.592744][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 549.598457][T16345] __msan_chain_origin+0x50/0x90 [ 549.603389][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 549.608491][T16345] get_compat_msghdr+0x108/0x2b0 [ 549.613436][T16345] do_recvmmsg+0xdba/0x22c0 [ 549.617930][T16345] __sys_recvmmsg+0x5dd/0x610 [ 549.622600][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 549.628678][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 549.634830][T16345] __do_fast_syscall_32+0x2af/0x480 [ 549.640025][T16345] do_fast_syscall_32+0x6b/0xd0 [ 549.644866][T16345] do_SYSENTER_32+0x73/0x90 [ 549.649481][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 549.655787][T16345] [ 549.658098][T16345] Uninit was stored to memory at: [ 549.663130][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 549.668849][T16345] __msan_chain_origin+0x50/0x90 [ 549.673779][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 549.678882][T16345] get_compat_msghdr+0x108/0x2b0 [ 549.683811][T16345] do_recvmmsg+0xdba/0x22c0 [ 549.688303][T16345] __sys_recvmmsg+0x5dd/0x610 [ 549.692974][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 549.699036][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 549.705184][T16345] __do_fast_syscall_32+0x2af/0x480 [ 549.710386][T16345] do_fast_syscall_32+0x6b/0xd0 [ 549.715228][T16345] do_SYSENTER_32+0x73/0x90 [ 549.719731][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 549.726050][T16345] [ 549.728378][T16345] Uninit was stored to memory at: [ 549.733397][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 549.739109][T16345] __msan_chain_origin+0x50/0x90 [ 549.744052][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 549.749172][T16345] get_compat_msghdr+0x108/0x2b0 [ 549.754098][T16345] do_recvmmsg+0xdba/0x22c0 [ 549.758590][T16345] __sys_recvmmsg+0x5dd/0x610 [ 549.763259][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 549.769320][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 549.775470][T16345] __do_fast_syscall_32+0x2af/0x480 [ 549.780662][T16345] do_fast_syscall_32+0x6b/0xd0 [ 549.785516][T16345] do_SYSENTER_32+0x73/0x90 [ 549.790025][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 549.796348][T16345] [ 549.798663][T16345] Uninit was stored to memory at: [ 549.803715][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 549.809434][T16345] __msan_chain_origin+0x50/0x90 [ 549.814407][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 549.819553][T16345] get_compat_msghdr+0x108/0x2b0 [ 549.824489][T16345] do_recvmmsg+0xdba/0x22c0 [ 549.829000][T16345] __sys_recvmmsg+0x5dd/0x610 [ 549.833674][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 549.839740][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 549.845897][T16345] __do_fast_syscall_32+0x2af/0x480 [ 549.851112][T16345] do_fast_syscall_32+0x6b/0xd0 [ 549.855959][T16345] do_SYSENTER_32+0x73/0x90 [ 549.860459][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 549.866769][T16345] [ 549.869082][T16345] Uninit was stored to memory at: [ 549.874108][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 549.879825][T16345] __msan_chain_origin+0x50/0x90 [ 549.884761][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 549.889870][T16345] get_compat_msghdr+0x108/0x2b0 [ 549.894821][T16345] do_recvmmsg+0xdba/0x22c0 [ 549.899319][T16345] __sys_recvmmsg+0x5dd/0x610 [ 549.904010][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 549.910080][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 549.916235][T16345] __do_fast_syscall_32+0x2af/0x480 [ 549.921439][T16345] do_fast_syscall_32+0x6b/0xd0 [ 549.926313][T16345] do_SYSENTER_32+0x73/0x90 [ 549.930813][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 549.937137][T16345] [ 549.939468][T16345] Uninit was stored to memory at: [ 549.944510][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 549.950225][T16345] __msan_chain_origin+0x50/0x90 [ 549.955167][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 549.960281][T16345] get_compat_msghdr+0x108/0x2b0 [ 549.965217][T16345] do_recvmmsg+0xdba/0x22c0 [ 549.969718][T16345] __sys_recvmmsg+0x5dd/0x610 [ 549.974395][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 549.980477][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 549.986633][T16345] __do_fast_syscall_32+0x2af/0x480 [ 549.991847][T16345] do_fast_syscall_32+0x6b/0xd0 [ 549.996719][T16345] do_SYSENTER_32+0x73/0x90 [ 550.001225][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 550.007546][T16345] [ 550.009865][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 550.016539][T16345] do_recvmmsg+0xc2/0x22c0 [ 550.020943][T16345] do_recvmmsg+0xc2/0x22c0 [ 550.238263][T16345] not chained 1210000 origins [ 550.243019][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 550.251704][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.261784][T16345] Call Trace: [ 550.265111][T16345] dump_stack+0x21c/0x280 [ 550.269485][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 550.275244][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 550.280409][T16345] ? kmsan_get_metadata+0x116/0x180 [ 550.285640][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 550.291477][T16345] ? kmsan_get_metadata+0x116/0x180 [ 550.296707][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 550.302545][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 550.308646][T16345] ? kmsan_get_metadata+0x116/0x180 [ 550.313882][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 550.319493][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 550.325599][T16345] ? _copy_from_user+0x221/0x330 [ 550.330595][T16345] ? kmsan_get_metadata+0x116/0x180 [ 550.335824][T16345] __msan_chain_origin+0x50/0x90 [ 550.340802][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 550.345972][T16345] get_compat_msghdr+0x108/0x2b0 [ 550.350953][T16345] do_recvmmsg+0xdba/0x22c0 [ 550.355494][T16345] ? __msan_get_context_state+0x9/0x20 [ 550.360999][T16345] ? kmsan_get_metadata+0x116/0x180 [ 550.366234][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 550.372160][T16345] ? kmsan_get_metadata+0x116/0x180 [ 550.377399][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 550.382714][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 550.387504][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 550.392302][T16345] __sys_recvmmsg+0x5dd/0x610 [ 550.397030][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 550.403109][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 550.409386][T16345] __do_fast_syscall_32+0x2af/0x480 [ 550.414601][T16345] do_fast_syscall_32+0x6b/0xd0 [ 550.419448][T16345] do_SYSENTER_32+0x73/0x90 [ 550.423994][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 550.430336][T16345] RIP: 0023:0xf7f31549 [ 550.434382][T16345] Code: Bad RIP value. [ 550.438429][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 550.446838][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 550.454802][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.462800][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 550.470802][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 550.478768][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 550.486745][T16345] Uninit was stored to memory at: [ 550.491767][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 550.497482][T16345] __msan_chain_origin+0x50/0x90 [ 550.502408][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 550.507515][T16345] get_compat_msghdr+0x108/0x2b0 [ 550.512527][T16345] do_recvmmsg+0xdba/0x22c0 [ 550.517066][T16345] __sys_recvmmsg+0x5dd/0x610 [ 550.521735][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 550.527830][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 550.534020][T16345] __do_fast_syscall_32+0x2af/0x480 [ 550.539212][T16345] do_fast_syscall_32+0x6b/0xd0 [ 550.544051][T16345] do_SYSENTER_32+0x73/0x90 [ 550.548541][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 550.554881][T16345] [ 550.557193][T16345] Uninit was stored to memory at: [ 550.562207][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 550.567950][T16345] __msan_chain_origin+0x50/0x90 [ 550.572880][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 550.577981][T16345] get_compat_msghdr+0x108/0x2b0 [ 550.582907][T16345] do_recvmmsg+0xdba/0x22c0 [ 550.587396][T16345] __sys_recvmmsg+0x5dd/0x610 [ 550.592062][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 550.598124][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 550.604273][T16345] __do_fast_syscall_32+0x2af/0x480 [ 550.609464][T16345] do_fast_syscall_32+0x6b/0xd0 [ 550.614305][T16345] do_SYSENTER_32+0x73/0x90 [ 550.618794][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 550.625118][T16345] [ 550.627430][T16345] Uninit was stored to memory at: [ 550.632456][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 550.638176][T16345] __msan_chain_origin+0x50/0x90 [ 550.643104][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 550.648200][T16345] get_compat_msghdr+0x108/0x2b0 [ 550.653142][T16345] do_recvmmsg+0xdba/0x22c0 [ 550.657667][T16345] __sys_recvmmsg+0x5dd/0x610 [ 550.662331][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 550.668418][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 550.674595][T16345] __do_fast_syscall_32+0x2af/0x480 [ 550.679784][T16345] do_fast_syscall_32+0x6b/0xd0 [ 550.684622][T16345] do_SYSENTER_32+0x73/0x90 [ 550.689115][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 550.695419][T16345] [ 550.697729][T16345] Uninit was stored to memory at: [ 550.702757][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 550.708459][T16345] __msan_chain_origin+0x50/0x90 [ 550.713397][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 550.718493][T16345] get_compat_msghdr+0x108/0x2b0 [ 550.723418][T16345] do_recvmmsg+0xdba/0x22c0 [ 550.727915][T16345] __sys_recvmmsg+0x5dd/0x610 [ 550.732588][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 550.738662][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 550.744814][T16345] __do_fast_syscall_32+0x2af/0x480 [ 550.750001][T16345] do_fast_syscall_32+0x6b/0xd0 [ 550.754838][T16345] do_SYSENTER_32+0x73/0x90 [ 550.759327][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 550.765641][T16345] [ 550.767953][T16345] Uninit was stored to memory at: [ 550.772963][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 550.778665][T16345] __msan_chain_origin+0x50/0x90 [ 550.783593][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 550.788701][T16345] get_compat_msghdr+0x108/0x2b0 [ 550.793637][T16345] do_recvmmsg+0xdba/0x22c0 [ 550.798127][T16345] __sys_recvmmsg+0x5dd/0x610 [ 550.802792][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 550.808850][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 550.815004][T16345] __do_fast_syscall_32+0x2af/0x480 [ 550.820192][T16345] do_fast_syscall_32+0x6b/0xd0 [ 550.825030][T16345] do_SYSENTER_32+0x73/0x90 [ 550.829521][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 550.835822][T16345] [ 550.838132][T16345] Uninit was stored to memory at: [ 550.843143][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 550.848846][T16345] __msan_chain_origin+0x50/0x90 [ 550.853771][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 550.858866][T16345] get_compat_msghdr+0x108/0x2b0 [ 550.863789][T16345] do_recvmmsg+0xdba/0x22c0 [ 550.868292][T16345] __sys_recvmmsg+0x5dd/0x610 [ 550.872960][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 550.879013][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 550.885171][T16345] __do_fast_syscall_32+0x2af/0x480 [ 550.890371][T16345] do_fast_syscall_32+0x6b/0xd0 [ 550.895205][T16345] do_SYSENTER_32+0x73/0x90 [ 550.899692][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 550.905991][T16345] [ 550.908296][T16345] Uninit was stored to memory at: [ 550.913310][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 550.919014][T16345] __msan_chain_origin+0x50/0x90 [ 550.923939][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 550.929034][T16345] get_compat_msghdr+0x108/0x2b0 [ 550.933958][T16345] do_recvmmsg+0xdba/0x22c0 [ 550.938460][T16345] __sys_recvmmsg+0x5dd/0x610 [ 550.943145][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 550.949203][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 550.955351][T16345] __do_fast_syscall_32+0x2af/0x480 [ 550.960534][T16345] do_fast_syscall_32+0x6b/0xd0 [ 550.965379][T16345] do_SYSENTER_32+0x73/0x90 [ 550.969868][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 550.976169][T16345] [ 550.978479][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 550.985156][T16345] do_recvmmsg+0xc2/0x22c0 [ 550.989555][T16345] do_recvmmsg+0xc2/0x22c0 [ 551.209046][T16345] not chained 1220000 origins [ 551.213793][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 551.222463][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.232550][T16345] Call Trace: [ 551.235890][T16345] dump_stack+0x21c/0x280 [ 551.240250][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 551.245993][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 551.251134][T16345] ? kmsan_get_metadata+0x116/0x180 [ 551.256355][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 551.262179][T16345] ? kmsan_get_metadata+0x116/0x180 [ 551.267397][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 551.273269][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 551.279354][T16345] ? kmsan_get_metadata+0x116/0x180 [ 551.284572][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 551.290201][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 551.296299][T16345] ? _copy_from_user+0x221/0x330 [ 551.301284][T16345] ? kmsan_get_metadata+0x116/0x180 [ 551.306501][T16345] __msan_chain_origin+0x50/0x90 [ 551.311459][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 551.316615][T16345] get_compat_msghdr+0x108/0x2b0 [ 551.321592][T16345] do_recvmmsg+0xdba/0x22c0 [ 551.326134][T16345] ? __msan_get_context_state+0x9/0x20 [ 551.331638][T16345] ? kmsan_get_metadata+0x116/0x180 [ 551.336862][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 551.342777][T16345] ? kmsan_get_metadata+0x116/0x180 [ 551.348000][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 551.353304][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 551.358080][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 551.362862][T16345] __sys_recvmmsg+0x5dd/0x610 [ 551.367583][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 551.373678][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 551.379851][T16345] __do_fast_syscall_32+0x2af/0x480 [ 551.385078][T16345] do_fast_syscall_32+0x6b/0xd0 [ 551.389950][T16345] do_SYSENTER_32+0x73/0x90 [ 551.394476][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.400813][T16345] RIP: 0023:0xf7f31549 [ 551.404879][T16345] Code: Bad RIP value. [ 551.408953][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 551.417381][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 551.425369][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.433356][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.441336][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 551.449319][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.457303][T16345] Uninit was stored to memory at: [ 551.462317][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 551.468052][T16345] __msan_chain_origin+0x50/0x90 [ 551.472975][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 551.478095][T16345] get_compat_msghdr+0x108/0x2b0 [ 551.483017][T16345] do_recvmmsg+0xdba/0x22c0 [ 551.487500][T16345] __sys_recvmmsg+0x5dd/0x610 [ 551.492158][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 551.498223][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 551.504361][T16345] __do_fast_syscall_32+0x2af/0x480 [ 551.509553][T16345] do_fast_syscall_32+0x6b/0xd0 [ 551.514387][T16345] do_SYSENTER_32+0x73/0x90 [ 551.518888][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.525224][T16345] [ 551.527543][T16345] Uninit was stored to memory at: [ 551.532561][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 551.538261][T16345] __msan_chain_origin+0x50/0x90 [ 551.543181][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 551.548271][T16345] get_compat_msghdr+0x108/0x2b0 [ 551.553191][T16345] do_recvmmsg+0xdba/0x22c0 [ 551.557674][T16345] __sys_recvmmsg+0x5dd/0x610 [ 551.562331][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 551.568380][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 551.574516][T16345] __do_fast_syscall_32+0x2af/0x480 [ 551.579693][T16345] do_fast_syscall_32+0x6b/0xd0 [ 551.584525][T16345] do_SYSENTER_32+0x73/0x90 [ 551.589009][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.595310][T16345] [ 551.597628][T16345] Uninit was stored to memory at: [ 551.602637][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 551.608336][T16345] __msan_chain_origin+0x50/0x90 [ 551.613258][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 551.618349][T16345] get_compat_msghdr+0x108/0x2b0 [ 551.623268][T16345] do_recvmmsg+0xdba/0x22c0 [ 551.627751][T16345] __sys_recvmmsg+0x5dd/0x610 [ 551.632430][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 551.638495][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 551.644635][T16345] __do_fast_syscall_32+0x2af/0x480 [ 551.649813][T16345] do_fast_syscall_32+0x6b/0xd0 [ 551.654647][T16345] do_SYSENTER_32+0x73/0x90 [ 551.659149][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.665449][T16345] [ 551.667755][T16345] Uninit was stored to memory at: [ 551.672764][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 551.678477][T16345] __msan_chain_origin+0x50/0x90 [ 551.683400][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 551.688492][T16345] get_compat_msghdr+0x108/0x2b0 [ 551.693410][T16345] do_recvmmsg+0xdba/0x22c0 [ 551.697892][T16345] __sys_recvmmsg+0x5dd/0x610 [ 551.702558][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 551.708621][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 551.714758][T16345] __do_fast_syscall_32+0x2af/0x480 [ 551.719935][T16345] do_fast_syscall_32+0x6b/0xd0 [ 551.724767][T16345] do_SYSENTER_32+0x73/0x90 [ 551.729252][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.735551][T16345] [ 551.737857][T16345] Uninit was stored to memory at: [ 551.742865][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 551.748575][T16345] __msan_chain_origin+0x50/0x90 [ 551.753509][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 551.758601][T16345] get_compat_msghdr+0x108/0x2b0 [ 551.763520][T16345] do_recvmmsg+0xdba/0x22c0 [ 551.768016][T16345] __sys_recvmmsg+0x5dd/0x610 [ 551.772688][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 551.778744][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 551.784881][T16345] __do_fast_syscall_32+0x2af/0x480 [ 551.790073][T16345] do_fast_syscall_32+0x6b/0xd0 [ 551.794917][T16345] do_SYSENTER_32+0x73/0x90 [ 551.799402][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.805711][T16345] [ 551.808027][T16345] Uninit was stored to memory at: [ 551.813047][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 551.818745][T16345] __msan_chain_origin+0x50/0x90 [ 551.823666][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 551.828758][T16345] get_compat_msghdr+0x108/0x2b0 [ 551.833675][T16345] do_recvmmsg+0xdba/0x22c0 [ 551.838159][T16345] __sys_recvmmsg+0x5dd/0x610 [ 551.842819][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 551.848864][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 551.855001][T16345] __do_fast_syscall_32+0x2af/0x480 [ 551.860183][T16345] do_fast_syscall_32+0x6b/0xd0 [ 551.865025][T16345] do_SYSENTER_32+0x73/0x90 [ 551.869510][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.875821][T16345] [ 551.878146][T16345] Uninit was stored to memory at: [ 551.883161][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 551.888875][T16345] __msan_chain_origin+0x50/0x90 [ 551.893796][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 551.898889][T16345] get_compat_msghdr+0x108/0x2b0 [ 551.903807][T16345] do_recvmmsg+0xdba/0x22c0 [ 551.908287][T16345] __sys_recvmmsg+0x5dd/0x610 [ 551.912949][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 551.919006][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 551.925148][T16345] __do_fast_syscall_32+0x2af/0x480 [ 551.930324][T16345] do_fast_syscall_32+0x6b/0xd0 [ 551.935159][T16345] do_SYSENTER_32+0x73/0x90 [ 551.939647][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.945954][T16345] [ 551.948261][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 551.954927][T16345] do_recvmmsg+0xc2/0x22c0 [ 551.959321][T16345] do_recvmmsg+0xc2/0x22c0 [ 552.190121][T16345] not chained 1230000 origins [ 552.194874][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 552.203547][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.213610][T16345] Call Trace: [ 552.216926][T16345] dump_stack+0x21c/0x280 [ 552.221284][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 552.227028][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 552.232170][T16345] ? kmsan_get_metadata+0x116/0x180 [ 552.237385][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 552.243211][T16345] ? kmsan_get_metadata+0x116/0x180 [ 552.248426][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 552.254251][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 552.260328][T16345] ? kmsan_get_metadata+0x116/0x180 [ 552.265544][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 552.271106][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 552.277205][T16345] ? _copy_from_user+0x221/0x330 [ 552.282170][T16345] ? kmsan_get_metadata+0x116/0x180 [ 552.287388][T16345] __msan_chain_origin+0x50/0x90 [ 552.292347][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 552.297504][T16345] get_compat_msghdr+0x108/0x2b0 [ 552.302468][T16345] do_recvmmsg+0xdba/0x22c0 [ 552.306994][T16345] ? __msan_get_context_state+0x9/0x20 [ 552.312481][T16345] ? kmsan_get_metadata+0x116/0x180 [ 552.317709][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 552.323624][T16345] ? kmsan_get_metadata+0x116/0x180 [ 552.328848][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 552.334162][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 552.338937][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 552.343766][T16345] __sys_recvmmsg+0x5dd/0x610 [ 552.348485][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 552.354587][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 552.360759][T16345] __do_fast_syscall_32+0x2af/0x480 [ 552.365971][T16345] do_fast_syscall_32+0x6b/0xd0 [ 552.370809][T16345] do_SYSENTER_32+0x73/0x90 [ 552.375303][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.381642][T16345] RIP: 0023:0xf7f31549 [ 552.385687][T16345] Code: Bad RIP value. [ 552.389732][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 552.398127][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 552.406093][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.414080][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.422050][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 552.430005][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.437975][T16345] Uninit was stored to memory at: [ 552.442993][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 552.448694][T16345] __msan_chain_origin+0x50/0x90 [ 552.453615][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 552.458707][T16345] get_compat_msghdr+0x108/0x2b0 [ 552.463638][T16345] do_recvmmsg+0xdba/0x22c0 [ 552.468127][T16345] __sys_recvmmsg+0x5dd/0x610 [ 552.472789][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 552.478869][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 552.485007][T16345] __do_fast_syscall_32+0x2af/0x480 [ 552.490184][T16345] do_fast_syscall_32+0x6b/0xd0 [ 552.495019][T16345] do_SYSENTER_32+0x73/0x90 [ 552.499504][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.505802][T16345] [ 552.508106][T16345] Uninit was stored to memory at: [ 552.513122][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 552.518834][T16345] __msan_chain_origin+0x50/0x90 [ 552.523760][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 552.528854][T16345] get_compat_msghdr+0x108/0x2b0 [ 552.533778][T16345] do_recvmmsg+0xdba/0x22c0 [ 552.538261][T16345] __sys_recvmmsg+0x5dd/0x610 [ 552.542924][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 552.548973][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 552.555111][T16345] __do_fast_syscall_32+0x2af/0x480 [ 552.560298][T16345] do_fast_syscall_32+0x6b/0xd0 [ 552.565133][T16345] do_SYSENTER_32+0x73/0x90 [ 552.569656][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.575955][T16345] [ 552.578264][T16345] Uninit was stored to memory at: [ 552.583275][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 552.589006][T16345] __msan_chain_origin+0x50/0x90 [ 552.593928][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 552.599019][T16345] get_compat_msghdr+0x108/0x2b0 [ 552.603937][T16345] do_recvmmsg+0xdba/0x22c0 [ 552.608448][T16345] __sys_recvmmsg+0x5dd/0x610 [ 552.613124][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 552.619176][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 552.625311][T16345] __do_fast_syscall_32+0x2af/0x480 [ 552.630492][T16345] do_fast_syscall_32+0x6b/0xd0 [ 552.635327][T16345] do_SYSENTER_32+0x73/0x90 [ 552.639822][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.646122][T16345] [ 552.648438][T16345] Uninit was stored to memory at: [ 552.653450][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 552.659151][T16345] __msan_chain_origin+0x50/0x90 [ 552.664087][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 552.669186][T16345] get_compat_msghdr+0x108/0x2b0 [ 552.674107][T16345] do_recvmmsg+0xdba/0x22c0 [ 552.678606][T16345] __sys_recvmmsg+0x5dd/0x610 [ 552.683272][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 552.689319][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 552.695455][T16345] __do_fast_syscall_32+0x2af/0x480 [ 552.700637][T16345] do_fast_syscall_32+0x6b/0xd0 [ 552.705481][T16345] do_SYSENTER_32+0x73/0x90 [ 552.709967][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.716278][T16345] [ 552.718585][T16345] Uninit was stored to memory at: [ 552.723597][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 552.729295][T16345] __msan_chain_origin+0x50/0x90 [ 552.734216][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 552.739310][T16345] get_compat_msghdr+0x108/0x2b0 [ 552.744230][T16345] do_recvmmsg+0xdba/0x22c0 [ 552.748715][T16345] __sys_recvmmsg+0x5dd/0x610 [ 552.753375][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 552.759425][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 552.765573][T16345] __do_fast_syscall_32+0x2af/0x480 [ 552.770756][T16345] do_fast_syscall_32+0x6b/0xd0 [ 552.775588][T16345] do_SYSENTER_32+0x73/0x90 [ 552.780074][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.786372][T16345] [ 552.788677][T16345] Uninit was stored to memory at: [ 552.793690][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 552.799389][T16345] __msan_chain_origin+0x50/0x90 [ 552.804310][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 552.809412][T16345] get_compat_msghdr+0x108/0x2b0 [ 552.814331][T16345] do_recvmmsg+0xdba/0x22c0 [ 552.818829][T16345] __sys_recvmmsg+0x5dd/0x610 [ 552.823491][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 552.829558][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 552.835696][T16345] __do_fast_syscall_32+0x2af/0x480 [ 552.840875][T16345] do_fast_syscall_32+0x6b/0xd0 [ 552.845707][T16345] do_SYSENTER_32+0x73/0x90 [ 552.850194][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.856505][T16345] [ 552.858811][T16345] Uninit was stored to memory at: [ 552.863817][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 552.869533][T16345] __msan_chain_origin+0x50/0x90 [ 552.874466][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 552.879557][T16345] get_compat_msghdr+0x108/0x2b0 [ 552.884477][T16345] do_recvmmsg+0xdba/0x22c0 [ 552.888961][T16345] __sys_recvmmsg+0x5dd/0x610 [ 552.893625][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 552.899682][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 552.905816][T16345] __do_fast_syscall_32+0x2af/0x480 [ 552.910998][T16345] do_fast_syscall_32+0x6b/0xd0 [ 552.915831][T16345] do_SYSENTER_32+0x73/0x90 [ 552.920317][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 552.926617][T16345] [ 552.928924][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 552.935589][T16345] do_recvmmsg+0xc2/0x22c0 [ 552.939986][T16345] do_recvmmsg+0xc2/0x22c0 [ 553.161009][T16345] not chained 1240000 origins [ 553.165796][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 553.174473][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.184537][T16345] Call Trace: [ 553.187849][T16345] dump_stack+0x21c/0x280 [ 553.192214][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 553.197958][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 553.203093][T16345] ? kmsan_get_metadata+0x116/0x180 [ 553.208310][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 553.214136][T16345] ? kmsan_get_metadata+0x116/0x180 [ 553.219360][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 553.225193][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 553.231273][T16345] ? kmsan_get_metadata+0x116/0x180 [ 553.236488][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 553.242051][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 553.248147][T16345] ? _copy_from_user+0x221/0x330 [ 553.253112][T16345] ? kmsan_get_metadata+0x116/0x180 [ 553.258328][T16345] __msan_chain_origin+0x50/0x90 [ 553.263292][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 553.268484][T16345] get_compat_msghdr+0x108/0x2b0 [ 553.273456][T16345] do_recvmmsg+0xdba/0x22c0 [ 553.277983][T16345] ? __msan_get_context_state+0x9/0x20 [ 553.283477][T16345] ? kmsan_get_metadata+0x116/0x180 [ 553.288700][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 553.294614][T16345] ? kmsan_get_metadata+0x116/0x180 [ 553.299838][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 553.305145][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 553.309929][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 553.314709][T16345] __sys_recvmmsg+0x5dd/0x610 [ 553.319426][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 553.325506][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 553.331648][T16345] __do_fast_syscall_32+0x2af/0x480 [ 553.336844][T16345] do_fast_syscall_32+0x6b/0xd0 [ 553.341691][T16345] do_SYSENTER_32+0x73/0x90 [ 553.346189][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 553.352510][T16345] RIP: 0023:0xf7f31549 [ 553.356564][T16345] Code: Bad RIP value. [ 553.360607][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 553.369000][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 553.376956][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.384908][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.392874][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 553.400824][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 553.408789][T16345] Uninit was stored to memory at: [ 553.413818][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 553.419530][T16345] __msan_chain_origin+0x50/0x90 [ 553.424450][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 553.429542][T16345] get_compat_msghdr+0x108/0x2b0 [ 553.434463][T16345] do_recvmmsg+0xdba/0x22c0 [ 553.438954][T16345] __sys_recvmmsg+0x5dd/0x610 [ 553.443621][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 553.449720][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 553.455869][T16345] __do_fast_syscall_32+0x2af/0x480 [ 553.461048][T16345] do_fast_syscall_32+0x6b/0xd0 [ 553.465881][T16345] do_SYSENTER_32+0x73/0x90 [ 553.470393][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 553.476693][T16345] [ 553.478999][T16345] Uninit was stored to memory at: [ 553.484008][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 553.489710][T16345] __msan_chain_origin+0x50/0x90 [ 553.494634][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 553.499727][T16345] get_compat_msghdr+0x108/0x2b0 [ 553.504685][T16345] do_recvmmsg+0xdba/0x22c0 [ 553.509167][T16345] __sys_recvmmsg+0x5dd/0x610 [ 553.513830][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 553.519885][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 553.526046][T16345] __do_fast_syscall_32+0x2af/0x480 [ 553.531229][T16345] do_fast_syscall_32+0x6b/0xd0 [ 553.536065][T16345] do_SYSENTER_32+0x73/0x90 [ 553.540565][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 553.546863][T16345] [ 553.549207][T16345] Uninit was stored to memory at: [ 553.554219][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 553.559921][T16345] __msan_chain_origin+0x50/0x90 [ 553.564841][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 553.569933][T16345] get_compat_msghdr+0x108/0x2b0 [ 553.574851][T16345] do_recvmmsg+0xdba/0x22c0 [ 553.579333][T16345] __sys_recvmmsg+0x5dd/0x610 [ 553.583994][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 553.590055][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 553.596195][T16345] __do_fast_syscall_32+0x2af/0x480 [ 553.601374][T16345] do_fast_syscall_32+0x6b/0xd0 [ 553.606210][T16345] do_SYSENTER_32+0x73/0x90 [ 553.610697][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 553.616996][T16345] [ 553.619316][T16345] Uninit was stored to memory at: [ 553.624338][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 553.630038][T16345] __msan_chain_origin+0x50/0x90 [ 553.634962][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 553.640054][T16345] get_compat_msghdr+0x108/0x2b0 [ 553.644973][T16345] do_recvmmsg+0xdba/0x22c0 [ 553.649455][T16345] __sys_recvmmsg+0x5dd/0x610 [ 553.654122][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 553.660172][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 553.666309][T16345] __do_fast_syscall_32+0x2af/0x480 [ 553.671489][T16345] do_fast_syscall_32+0x6b/0xd0 [ 553.676320][T16345] do_SYSENTER_32+0x73/0x90 [ 553.680805][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 553.687106][T16345] [ 553.689418][T16345] Uninit was stored to memory at: [ 553.694430][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 553.700135][T16345] __msan_chain_origin+0x50/0x90 [ 553.705059][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 553.710152][T16345] get_compat_msghdr+0x108/0x2b0 [ 553.715074][T16345] do_recvmmsg+0xdba/0x22c0 [ 553.719558][T16345] __sys_recvmmsg+0x5dd/0x610 [ 553.724219][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 553.730277][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 553.736416][T16345] __do_fast_syscall_32+0x2af/0x480 [ 553.741596][T16345] do_fast_syscall_32+0x6b/0xd0 [ 553.746429][T16345] do_SYSENTER_32+0x73/0x90 [ 553.750930][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 553.757227][T16345] [ 553.759533][T16345] Uninit was stored to memory at: [ 553.764545][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 553.770245][T16345] __msan_chain_origin+0x50/0x90 [ 553.775166][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 553.780259][T16345] get_compat_msghdr+0x108/0x2b0 [ 553.785178][T16345] do_recvmmsg+0xdba/0x22c0 [ 553.789661][T16345] __sys_recvmmsg+0x5dd/0x610 [ 553.794323][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 553.800371][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 553.806509][T16345] __do_fast_syscall_32+0x2af/0x480 [ 553.811688][T16345] do_fast_syscall_32+0x6b/0xd0 [ 553.816523][T16345] do_SYSENTER_32+0x73/0x90 [ 553.821011][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 553.827310][T16345] [ 553.829614][T16345] Uninit was stored to memory at: [ 553.834625][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 553.840326][T16345] __msan_chain_origin+0x50/0x90 [ 553.845246][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 553.850337][T16345] get_compat_msghdr+0x108/0x2b0 [ 553.855266][T16345] do_recvmmsg+0xdba/0x22c0 [ 553.859747][T16345] __sys_recvmmsg+0x5dd/0x610 [ 553.864406][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 553.870452][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 553.876590][T16345] __do_fast_syscall_32+0x2af/0x480 [ 553.881783][T16345] do_fast_syscall_32+0x6b/0xd0 [ 553.886617][T16345] do_SYSENTER_32+0x73/0x90 [ 553.891114][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 553.897421][T16345] [ 553.899726][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 553.906382][T16345] do_recvmmsg+0xc2/0x22c0 [ 553.910777][T16345] do_recvmmsg+0xc2/0x22c0 [ 554.124230][T16345] not chained 1250000 origins [ 554.128968][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 554.137640][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.147699][T16345] Call Trace: [ 554.151009][T16345] dump_stack+0x21c/0x280 [ 554.155364][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 554.161106][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 554.166246][T16345] ? kmsan_get_metadata+0x116/0x180 [ 554.171463][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 554.177291][T16345] ? kmsan_get_metadata+0x116/0x180 [ 554.182506][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 554.188327][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 554.194406][T16345] ? kmsan_get_metadata+0x116/0x180 [ 554.199620][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 554.205187][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 554.211276][T16345] ? _copy_from_user+0x221/0x330 [ 554.216273][T16345] ? kmsan_get_metadata+0x116/0x180 [ 554.221486][T16345] __msan_chain_origin+0x50/0x90 [ 554.226444][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 554.231599][T16345] get_compat_msghdr+0x108/0x2b0 [ 554.236568][T16345] do_recvmmsg+0xdba/0x22c0 [ 554.241100][T16345] ? __msan_get_context_state+0x9/0x20 [ 554.246600][T16345] ? kmsan_get_metadata+0x116/0x180 [ 554.251820][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 554.257735][T16345] ? kmsan_get_metadata+0x116/0x180 [ 554.262982][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 554.268287][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 554.273059][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 554.277842][T16345] __sys_recvmmsg+0x5dd/0x610 [ 554.282555][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 554.288683][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 554.294859][T16345] __do_fast_syscall_32+0x2af/0x480 [ 554.300092][T16345] do_fast_syscall_32+0x6b/0xd0 [ 554.304970][T16345] do_SYSENTER_32+0x73/0x90 [ 554.309492][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 554.315826][T16345] RIP: 0023:0xf7f31549 [ 554.319884][T16345] Code: Bad RIP value. [ 554.323933][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 554.332324][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 554.340278][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.348230][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.356185][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 554.364142][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.372105][T16345] Uninit was stored to memory at: [ 554.377129][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 554.382830][T16345] __msan_chain_origin+0x50/0x90 [ 554.387752][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 554.392847][T16345] get_compat_msghdr+0x108/0x2b0 [ 554.397766][T16345] do_recvmmsg+0xdba/0x22c0 [ 554.402269][T16345] __sys_recvmmsg+0x5dd/0x610 [ 554.406961][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 554.413045][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 554.419216][T16345] __do_fast_syscall_32+0x2af/0x480 [ 554.424402][T16345] do_fast_syscall_32+0x6b/0xd0 [ 554.429240][T16345] do_SYSENTER_32+0x73/0x90 [ 554.433729][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 554.440024][T16345] [ 554.442328][T16345] Uninit was stored to memory at: [ 554.447339][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 554.453042][T16345] __msan_chain_origin+0x50/0x90 [ 554.457968][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 554.463077][T16345] get_compat_msghdr+0x108/0x2b0 [ 554.467995][T16345] do_recvmmsg+0xdba/0x22c0 [ 554.474389][T16345] __sys_recvmmsg+0x5dd/0x610 [ 554.479049][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 554.485109][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 554.491243][T16345] __do_fast_syscall_32+0x2af/0x480 [ 554.496423][T16345] do_fast_syscall_32+0x6b/0xd0 [ 554.501256][T16345] do_SYSENTER_32+0x73/0x90 [ 554.505744][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 554.512049][T16345] [ 554.514358][T16345] Uninit was stored to memory at: [ 554.527363][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 554.533066][T16345] __msan_chain_origin+0x50/0x90 [ 554.537988][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 554.543083][T16345] get_compat_msghdr+0x108/0x2b0 [ 554.548019][T16345] do_recvmmsg+0xdba/0x22c0 [ 554.552513][T16345] __sys_recvmmsg+0x5dd/0x610 [ 554.557182][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 554.563232][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 554.569367][T16345] __do_fast_syscall_32+0x2af/0x480 [ 554.574549][T16345] do_fast_syscall_32+0x6b/0xd0 [ 554.579380][T16345] do_SYSENTER_32+0x73/0x90 [ 554.583866][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 554.590173][T16345] [ 554.592490][T16345] Uninit was stored to memory at: [ 554.597513][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 554.603226][T16345] __msan_chain_origin+0x50/0x90 [ 554.608149][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 554.613244][T16345] get_compat_msghdr+0x108/0x2b0 [ 554.618161][T16345] do_recvmmsg+0xdba/0x22c0 [ 554.624829][T16345] __sys_recvmmsg+0x5dd/0x610 [ 554.629489][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 554.635538][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 554.641675][T16345] __do_fast_syscall_32+0x2af/0x480 [ 554.646856][T16345] do_fast_syscall_32+0x6b/0xd0 [ 554.651688][T16345] do_SYSENTER_32+0x73/0x90 [ 554.656176][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 554.662482][T16345] [ 554.664801][T16345] Uninit was stored to memory at: [ 554.669809][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 554.675511][T16345] __msan_chain_origin+0x50/0x90 [ 554.680441][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 554.685531][T16345] get_compat_msghdr+0x108/0x2b0 [ 554.690451][T16345] do_recvmmsg+0xdba/0x22c0 [ 554.694935][T16345] __sys_recvmmsg+0x5dd/0x610 [ 554.699593][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 554.705643][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 554.711776][T16345] __do_fast_syscall_32+0x2af/0x480 [ 554.716967][T16345] do_fast_syscall_32+0x6b/0xd0 [ 554.721798][T16345] do_SYSENTER_32+0x73/0x90 [ 554.726285][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 554.732583][T16345] [ 554.734887][T16345] Uninit was stored to memory at: [ 554.739895][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 554.745607][T16345] __msan_chain_origin+0x50/0x90 [ 554.750527][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 554.755620][T16345] get_compat_msghdr+0x108/0x2b0 [ 554.760535][T16345] do_recvmmsg+0xdba/0x22c0 [ 554.765018][T16345] __sys_recvmmsg+0x5dd/0x610 [ 554.769676][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 554.775735][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 554.781872][T16345] __do_fast_syscall_32+0x2af/0x480 [ 554.787052][T16345] do_fast_syscall_32+0x6b/0xd0 [ 554.791882][T16345] do_SYSENTER_32+0x73/0x90 [ 554.796370][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 554.802673][T16345] [ 554.804977][T16345] Uninit was stored to memory at: [ 554.809984][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 554.815683][T16345] __msan_chain_origin+0x50/0x90 [ 554.820613][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 554.825707][T16345] get_compat_msghdr+0x108/0x2b0 [ 554.830636][T16345] do_recvmmsg+0xdba/0x22c0 [ 554.835122][T16345] __sys_recvmmsg+0x5dd/0x610 [ 554.839791][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 554.845852][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 554.851989][T16345] __do_fast_syscall_32+0x2af/0x480 [ 554.857171][T16345] do_fast_syscall_32+0x6b/0xd0 [ 554.862003][T16345] do_SYSENTER_32+0x73/0x90 [ 554.866489][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 554.872787][T16345] [ 554.875095][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 554.881750][T16345] do_recvmmsg+0xc2/0x22c0 [ 554.886147][T16345] do_recvmmsg+0xc2/0x22c0 [ 555.103059][T16345] not chained 1260000 origins [ 555.107799][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 555.116469][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.126525][T16345] Call Trace: [ 555.129836][T16345] dump_stack+0x21c/0x280 [ 555.134204][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 555.139951][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 555.145082][T16345] ? kmsan_get_metadata+0x116/0x180 [ 555.150298][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 555.156139][T16345] ? kmsan_get_metadata+0x116/0x180 [ 555.161355][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 555.167180][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 555.173267][T16345] ? kmsan_get_metadata+0x116/0x180 [ 555.178479][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 555.184042][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 555.190131][T16345] ? _copy_from_user+0x221/0x330 [ 555.195086][T16345] ? kmsan_get_metadata+0x116/0x180 [ 555.200300][T16345] __msan_chain_origin+0x50/0x90 [ 555.205258][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 555.210418][T16345] get_compat_msghdr+0x108/0x2b0 [ 555.215389][T16345] do_recvmmsg+0xdba/0x22c0 [ 555.219920][T16345] ? __msan_get_context_state+0x9/0x20 [ 555.225412][T16345] ? kmsan_get_metadata+0x116/0x180 [ 555.230635][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 555.236548][T16345] ? kmsan_get_metadata+0x116/0x180 [ 555.241772][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 555.247074][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 555.251850][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 555.256637][T16345] __sys_recvmmsg+0x5dd/0x610 [ 555.261353][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.267452][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.273626][T16345] __do_fast_syscall_32+0x2af/0x480 [ 555.278854][T16345] do_fast_syscall_32+0x6b/0xd0 [ 555.283725][T16345] do_SYSENTER_32+0x73/0x90 [ 555.288246][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.294565][T16345] RIP: 0023:0xf7f31549 [ 555.298607][T16345] Code: Bad RIP value. [ 555.302654][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 555.311045][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 555.318997][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.326980][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.334932][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 555.342883][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.350845][T16345] Uninit was stored to memory at: [ 555.355855][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 555.361553][T16345] __msan_chain_origin+0x50/0x90 [ 555.366474][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 555.371565][T16345] get_compat_msghdr+0x108/0x2b0 [ 555.376482][T16345] do_recvmmsg+0xdba/0x22c0 [ 555.381002][T16345] __sys_recvmmsg+0x5dd/0x610 [ 555.385660][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.391705][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.397840][T16345] __do_fast_syscall_32+0x2af/0x480 [ 555.403022][T16345] do_fast_syscall_32+0x6b/0xd0 [ 555.407850][T16345] do_SYSENTER_32+0x73/0x90 [ 555.412331][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.418628][T16345] [ 555.420960][T16345] Uninit was stored to memory at: [ 555.425968][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 555.431667][T16345] __msan_chain_origin+0x50/0x90 [ 555.436590][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 555.441683][T16345] get_compat_msghdr+0x108/0x2b0 [ 555.446603][T16345] do_recvmmsg+0xdba/0x22c0 [ 555.451086][T16345] __sys_recvmmsg+0x5dd/0x610 [ 555.455745][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.461792][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.467930][T16345] __do_fast_syscall_32+0x2af/0x480 [ 555.473116][T16345] do_fast_syscall_32+0x6b/0xd0 [ 555.477947][T16345] do_SYSENTER_32+0x73/0x90 [ 555.482438][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.488751][T16345] [ 555.491056][T16345] Uninit was stored to memory at: [ 555.496064][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 555.501792][T16345] __msan_chain_origin+0x50/0x90 [ 555.506713][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 555.511804][T16345] get_compat_msghdr+0x108/0x2b0 [ 555.516723][T16345] do_recvmmsg+0xdba/0x22c0 [ 555.521206][T16345] __sys_recvmmsg+0x5dd/0x610 [ 555.525870][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.531964][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.538104][T16345] __do_fast_syscall_32+0x2af/0x480 [ 555.543322][T16345] do_fast_syscall_32+0x6b/0xd0 [ 555.548159][T16345] do_SYSENTER_32+0x73/0x90 [ 555.552644][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.558973][T16345] [ 555.561306][T16345] Uninit was stored to memory at: [ 555.566316][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 555.572047][T16345] __msan_chain_origin+0x50/0x90 [ 555.576970][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 555.582114][T16345] get_compat_msghdr+0x108/0x2b0 [ 555.587033][T16345] do_recvmmsg+0xdba/0x22c0 [ 555.591515][T16345] __sys_recvmmsg+0x5dd/0x610 [ 555.596173][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.602245][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.608412][T16345] __do_fast_syscall_32+0x2af/0x480 [ 555.613629][T16345] do_fast_syscall_32+0x6b/0xd0 [ 555.618462][T16345] do_SYSENTER_32+0x73/0x90 [ 555.623036][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.629334][T16345] [ 555.631637][T16345] Uninit was stored to memory at: [ 555.636644][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 555.642371][T16345] __msan_chain_origin+0x50/0x90 [ 555.647332][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 555.652423][T16345] get_compat_msghdr+0x108/0x2b0 [ 555.657354][T16345] do_recvmmsg+0xdba/0x22c0 [ 555.661836][T16345] __sys_recvmmsg+0x5dd/0x610 [ 555.666493][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.672545][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.678679][T16345] __do_fast_syscall_32+0x2af/0x480 [ 555.683862][T16345] do_fast_syscall_32+0x6b/0xd0 [ 555.688693][T16345] do_SYSENTER_32+0x73/0x90 [ 555.693181][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.699477][T16345] [ 555.701778][T16345] Uninit was stored to memory at: [ 555.706787][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 555.712500][T16345] __msan_chain_origin+0x50/0x90 [ 555.717427][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 555.722527][T16345] get_compat_msghdr+0x108/0x2b0 [ 555.727444][T16345] do_recvmmsg+0xdba/0x22c0 [ 555.731923][T16345] __sys_recvmmsg+0x5dd/0x610 [ 555.736582][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.742629][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.748762][T16345] __do_fast_syscall_32+0x2af/0x480 [ 555.753943][T16345] do_fast_syscall_32+0x6b/0xd0 [ 555.758777][T16345] do_SYSENTER_32+0x73/0x90 [ 555.763275][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.769582][T16345] [ 555.771885][T16345] Uninit was stored to memory at: [ 555.776893][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 555.782595][T16345] __msan_chain_origin+0x50/0x90 [ 555.787515][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 555.792607][T16345] get_compat_msghdr+0x108/0x2b0 [ 555.797525][T16345] do_recvmmsg+0xdba/0x22c0 [ 555.802007][T16345] __sys_recvmmsg+0x5dd/0x610 [ 555.806665][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 555.812715][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 555.818850][T16345] __do_fast_syscall_32+0x2af/0x480 [ 555.824035][T16345] do_fast_syscall_32+0x6b/0xd0 [ 555.828864][T16345] do_SYSENTER_32+0x73/0x90 [ 555.833347][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 555.839646][T16345] [ 555.841960][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 555.848614][T16345] do_recvmmsg+0xc2/0x22c0 [ 555.853020][T16345] do_recvmmsg+0xc2/0x22c0 [ 556.065569][T16345] not chained 1270000 origins [ 556.070310][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 556.078983][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.089045][T16345] Call Trace: [ 556.092357][T16345] dump_stack+0x21c/0x280 [ 556.096715][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 556.102455][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 556.107591][T16345] ? kmsan_get_metadata+0x116/0x180 [ 556.112805][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 556.118634][T16345] ? kmsan_get_metadata+0x116/0x180 [ 556.123848][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 556.129670][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 556.135750][T16345] ? kmsan_get_metadata+0x116/0x180 [ 556.140969][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 556.146548][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 556.152637][T16345] ? _copy_from_user+0x221/0x330 [ 556.157594][T16345] ? kmsan_get_metadata+0x116/0x180 [ 556.162807][T16345] __msan_chain_origin+0x50/0x90 [ 556.167766][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 556.172919][T16345] get_compat_msghdr+0x108/0x2b0 [ 556.177884][T16345] do_recvmmsg+0xdba/0x22c0 [ 556.182411][T16345] ? __msan_get_context_state+0x9/0x20 [ 556.187901][T16345] ? kmsan_get_metadata+0x116/0x180 [ 556.193123][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 556.199038][T16345] ? kmsan_get_metadata+0x116/0x180 [ 556.204260][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 556.209564][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 556.214338][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 556.219123][T16345] __sys_recvmmsg+0x5dd/0x610 [ 556.223841][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.229982][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.236159][T16345] __do_fast_syscall_32+0x2af/0x480 [ 556.241386][T16345] do_fast_syscall_32+0x6b/0xd0 [ 556.246261][T16345] do_SYSENTER_32+0x73/0x90 [ 556.250787][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.257120][T16345] RIP: 0023:0xf7f31549 [ 556.261189][T16345] Code: Bad RIP value. [ 556.265261][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 556.273689][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 556.281663][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.289620][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 556.297574][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 556.305528][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 556.313494][T16345] Uninit was stored to memory at: [ 556.318506][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 556.324208][T16345] __msan_chain_origin+0x50/0x90 [ 556.329129][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 556.334234][T16345] get_compat_msghdr+0x108/0x2b0 [ 556.339157][T16345] do_recvmmsg+0xdba/0x22c0 [ 556.344609][T16345] __sys_recvmmsg+0x5dd/0x610 [ 556.349266][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.355328][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.361462][T16345] __do_fast_syscall_32+0x2af/0x480 [ 556.366646][T16345] do_fast_syscall_32+0x6b/0xd0 [ 556.371476][T16345] do_SYSENTER_32+0x73/0x90 [ 556.375963][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.382270][T16345] [ 556.384589][T16345] Uninit was stored to memory at: [ 556.389597][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 556.395310][T16345] __msan_chain_origin+0x50/0x90 [ 556.400228][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 556.405320][T16345] get_compat_msghdr+0x108/0x2b0 [ 556.410246][T16345] do_recvmmsg+0xdba/0x22c0 [ 556.414733][T16345] __sys_recvmmsg+0x5dd/0x610 [ 556.419394][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.425460][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.431598][T16345] __do_fast_syscall_32+0x2af/0x480 [ 556.436782][T16345] do_fast_syscall_32+0x6b/0xd0 [ 556.441622][T16345] do_SYSENTER_32+0x73/0x90 [ 556.446119][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.452418][T16345] [ 556.454731][T16345] Uninit was stored to memory at: [ 556.459765][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 556.465466][T16345] __msan_chain_origin+0x50/0x90 [ 556.470386][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 556.475479][T16345] get_compat_msghdr+0x108/0x2b0 [ 556.480415][T16345] do_recvmmsg+0xdba/0x22c0 [ 556.484911][T16345] __sys_recvmmsg+0x5dd/0x610 [ 556.489569][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.495617][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.501749][T16345] __do_fast_syscall_32+0x2af/0x480 [ 556.506930][T16345] do_fast_syscall_32+0x6b/0xd0 [ 556.511773][T16345] do_SYSENTER_32+0x73/0x90 [ 556.516260][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.522563][T16345] [ 556.524869][T16345] Uninit was stored to memory at: [ 556.529876][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 556.535575][T16345] __msan_chain_origin+0x50/0x90 [ 556.540505][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 556.545594][T16345] get_compat_msghdr+0x108/0x2b0 [ 556.550510][T16345] do_recvmmsg+0xdba/0x22c0 [ 556.554995][T16345] __sys_recvmmsg+0x5dd/0x610 [ 556.559652][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.565704][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.571841][T16345] __do_fast_syscall_32+0x2af/0x480 [ 556.577021][T16345] do_fast_syscall_32+0x6b/0xd0 [ 556.581851][T16345] do_SYSENTER_32+0x73/0x90 [ 556.586338][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.592638][T16345] [ 556.594943][T16345] Uninit was stored to memory at: [ 556.599949][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 556.605662][T16345] __msan_chain_origin+0x50/0x90 [ 556.610585][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 556.615677][T16345] get_compat_msghdr+0x108/0x2b0 [ 556.620595][T16345] do_recvmmsg+0xdba/0x22c0 [ 556.625077][T16345] __sys_recvmmsg+0x5dd/0x610 [ 556.629745][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.635791][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.641922][T16345] __do_fast_syscall_32+0x2af/0x480 [ 556.647102][T16345] do_fast_syscall_32+0x6b/0xd0 [ 556.651934][T16345] do_SYSENTER_32+0x73/0x90 [ 556.656419][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.662717][T16345] [ 556.665035][T16345] Uninit was stored to memory at: [ 556.670053][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 556.675753][T16345] __msan_chain_origin+0x50/0x90 [ 556.680672][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 556.685764][T16345] get_compat_msghdr+0x108/0x2b0 [ 556.690680][T16345] do_recvmmsg+0xdba/0x22c0 [ 556.695172][T16345] __sys_recvmmsg+0x5dd/0x610 [ 556.699830][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.705879][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.712014][T16345] __do_fast_syscall_32+0x2af/0x480 [ 556.717194][T16345] do_fast_syscall_32+0x6b/0xd0 [ 556.722023][T16345] do_SYSENTER_32+0x73/0x90 [ 556.726507][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.732806][T16345] [ 556.735129][T16345] Uninit was stored to memory at: [ 556.740148][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 556.745851][T16345] __msan_chain_origin+0x50/0x90 [ 556.750818][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 556.755909][T16345] get_compat_msghdr+0x108/0x2b0 [ 556.760825][T16345] do_recvmmsg+0xdba/0x22c0 [ 556.765310][T16345] __sys_recvmmsg+0x5dd/0x610 [ 556.769970][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 556.776019][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 556.782154][T16345] __do_fast_syscall_32+0x2af/0x480 [ 556.787334][T16345] do_fast_syscall_32+0x6b/0xd0 [ 556.792166][T16345] do_SYSENTER_32+0x73/0x90 [ 556.796665][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 556.802966][T16345] [ 556.805273][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 556.811925][T16345] do_recvmmsg+0xc2/0x22c0 [ 556.816332][T16345] do_recvmmsg+0xc2/0x22c0 [ 557.039012][T16345] not chained 1280000 origins [ 557.043746][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 557.052417][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.062474][T16345] Call Trace: [ 557.065787][T16345] dump_stack+0x21c/0x280 [ 557.070144][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 557.075892][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 557.081024][T16345] ? kmsan_get_metadata+0x116/0x180 [ 557.086242][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 557.092069][T16345] ? kmsan_get_metadata+0x116/0x180 [ 557.097285][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 557.103111][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 557.109199][T16345] ? kmsan_get_metadata+0x116/0x180 [ 557.114417][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 557.119982][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 557.126096][T16345] ? _copy_from_user+0x221/0x330 [ 557.131052][T16345] ? kmsan_get_metadata+0x116/0x180 [ 557.136265][T16345] __msan_chain_origin+0x50/0x90 [ 557.141226][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 557.146381][T16345] get_compat_msghdr+0x108/0x2b0 [ 557.151347][T16345] do_recvmmsg+0xdba/0x22c0 [ 557.155872][T16345] ? __msan_get_context_state+0x9/0x20 [ 557.161364][T16345] ? kmsan_get_metadata+0x116/0x180 [ 557.166589][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 557.172503][T16345] ? kmsan_get_metadata+0x116/0x180 [ 557.177730][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 557.183034][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 557.187813][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 557.192596][T16345] __sys_recvmmsg+0x5dd/0x610 [ 557.197314][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.203456][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.209616][T16345] __do_fast_syscall_32+0x2af/0x480 [ 557.214811][T16345] do_fast_syscall_32+0x6b/0xd0 [ 557.219649][T16345] do_SYSENTER_32+0x73/0x90 [ 557.224140][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.230451][T16345] RIP: 0023:0xf7f31549 [ 557.234494][T16345] Code: Bad RIP value. [ 557.238538][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 557.246930][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 557.254881][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.262832][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.270784][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 557.278737][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.286701][T16345] Uninit was stored to memory at: [ 557.291724][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 557.297436][T16345] __msan_chain_origin+0x50/0x90 [ 557.302353][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 557.307446][T16345] get_compat_msghdr+0x108/0x2b0 [ 557.312371][T16345] do_recvmmsg+0xdba/0x22c0 [ 557.316859][T16345] __sys_recvmmsg+0x5dd/0x610 [ 557.321515][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.327564][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.333701][T16345] __do_fast_syscall_32+0x2af/0x480 [ 557.338914][T16345] do_fast_syscall_32+0x6b/0xd0 [ 557.343748][T16345] do_SYSENTER_32+0x73/0x90 [ 557.348266][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.354565][T16345] [ 557.356872][T16345] Uninit was stored to memory at: [ 557.361879][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 557.367579][T16345] __msan_chain_origin+0x50/0x90 [ 557.372512][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 557.377624][T16345] get_compat_msghdr+0x108/0x2b0 [ 557.382689][T16345] do_recvmmsg+0xdba/0x22c0 [ 557.387185][T16345] __sys_recvmmsg+0x5dd/0x610 [ 557.391842][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.397889][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.404044][T16345] __do_fast_syscall_32+0x2af/0x480 [ 557.409256][T16345] do_fast_syscall_32+0x6b/0xd0 [ 557.414117][T16345] do_SYSENTER_32+0x73/0x90 [ 557.418633][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.424953][T16345] [ 557.427263][T16345] Uninit was stored to memory at: [ 557.432270][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 557.437974][T16345] __msan_chain_origin+0x50/0x90 [ 557.442897][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 557.447991][T16345] get_compat_msghdr+0x108/0x2b0 [ 557.452922][T16345] do_recvmmsg+0xdba/0x22c0 [ 557.457404][T16345] __sys_recvmmsg+0x5dd/0x610 [ 557.462061][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.468110][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.474247][T16345] __do_fast_syscall_32+0x2af/0x480 [ 557.479426][T16345] do_fast_syscall_32+0x6b/0xd0 [ 557.484276][T16345] do_SYSENTER_32+0x73/0x90 [ 557.488760][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.495059][T16345] [ 557.497365][T16345] Uninit was stored to memory at: [ 557.502373][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 557.508073][T16345] __msan_chain_origin+0x50/0x90 [ 557.512997][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 557.518092][T16345] get_compat_msghdr+0x108/0x2b0 [ 557.523012][T16345] do_recvmmsg+0xdba/0x22c0 [ 557.527495][T16345] __sys_recvmmsg+0x5dd/0x610 [ 557.532151][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.538198][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.544332][T16345] __do_fast_syscall_32+0x2af/0x480 [ 557.549512][T16345] do_fast_syscall_32+0x6b/0xd0 [ 557.554343][T16345] do_SYSENTER_32+0x73/0x90 [ 557.558832][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.565130][T16345] [ 557.567436][T16345] Uninit was stored to memory at: [ 557.572465][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 557.578182][T16345] __msan_chain_origin+0x50/0x90 [ 557.583100][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 557.588191][T16345] get_compat_msghdr+0x108/0x2b0 [ 557.593111][T16345] do_recvmmsg+0xdba/0x22c0 [ 557.597593][T16345] __sys_recvmmsg+0x5dd/0x610 [ 557.602248][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.608311][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.614451][T16345] __do_fast_syscall_32+0x2af/0x480 [ 557.619628][T16345] do_fast_syscall_32+0x6b/0xd0 [ 557.624464][T16345] do_SYSENTER_32+0x73/0x90 [ 557.628949][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.635247][T16345] [ 557.637551][T16345] Uninit was stored to memory at: [ 557.642559][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 557.648258][T16345] __msan_chain_origin+0x50/0x90 [ 557.653177][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 557.658275][T16345] get_compat_msghdr+0x108/0x2b0 [ 557.663199][T16345] do_recvmmsg+0xdba/0x22c0 [ 557.667681][T16345] __sys_recvmmsg+0x5dd/0x610 [ 557.672340][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.678387][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.684523][T16345] __do_fast_syscall_32+0x2af/0x480 [ 557.689702][T16345] do_fast_syscall_32+0x6b/0xd0 [ 557.694539][T16345] do_SYSENTER_32+0x73/0x90 [ 557.699023][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.705323][T16345] [ 557.707629][T16345] Uninit was stored to memory at: [ 557.712655][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 557.718355][T16345] __msan_chain_origin+0x50/0x90 [ 557.723276][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 557.728369][T16345] get_compat_msghdr+0x108/0x2b0 [ 557.733307][T16345] do_recvmmsg+0xdba/0x22c0 [ 557.737787][T16345] __sys_recvmmsg+0x5dd/0x610 [ 557.742455][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 557.748533][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 557.754670][T16345] __do_fast_syscall_32+0x2af/0x480 [ 557.759848][T16345] do_fast_syscall_32+0x6b/0xd0 [ 557.764681][T16345] do_SYSENTER_32+0x73/0x90 [ 557.769183][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 557.775480][T16345] [ 557.777786][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 557.784441][T16345] do_recvmmsg+0xc2/0x22c0 [ 557.788835][T16345] do_recvmmsg+0xc2/0x22c0 [ 558.006522][T16345] not chained 1290000 origins [ 558.011268][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 558.019952][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.030023][T16345] Call Trace: [ 558.033352][T16345] dump_stack+0x21c/0x280 [ 558.037725][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 558.043475][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 558.048616][T16345] ? kmsan_get_metadata+0x116/0x180 [ 558.053842][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 558.059679][T16345] ? kmsan_get_metadata+0x116/0x180 [ 558.064912][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 558.070782][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 558.076878][T16345] ? kmsan_get_metadata+0x116/0x180 [ 558.082105][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 558.087686][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 558.093792][T16345] ? _copy_from_user+0x221/0x330 [ 558.098768][T16345] ? kmsan_get_metadata+0x116/0x180 [ 558.104005][T16345] __msan_chain_origin+0x50/0x90 [ 558.108981][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 558.114164][T16345] get_compat_msghdr+0x108/0x2b0 [ 558.119143][T16345] do_recvmmsg+0xdba/0x22c0 [ 558.123686][T16345] ? __msan_get_context_state+0x9/0x20 [ 558.129199][T16345] ? kmsan_get_metadata+0x116/0x180 [ 558.134436][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 558.140366][T16345] ? kmsan_get_metadata+0x116/0x180 [ 558.145621][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 558.150938][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 558.155734][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 558.160533][T16345] __sys_recvmmsg+0x5dd/0x610 [ 558.165261][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.171374][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.177561][T16345] __do_fast_syscall_32+0x2af/0x480 [ 558.182819][T16345] do_fast_syscall_32+0x6b/0xd0 [ 558.187706][T16345] do_SYSENTER_32+0x73/0x90 [ 558.192247][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.198595][T16345] RIP: 0023:0xf7f31549 [ 558.202671][T16345] Code: Bad RIP value. [ 558.206762][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 558.215164][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 558.223161][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.231149][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.239131][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.247126][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.255120][T16345] Uninit was stored to memory at: [ 558.260146][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 558.265856][T16345] __msan_chain_origin+0x50/0x90 [ 558.270785][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 558.275894][T16345] get_compat_msghdr+0x108/0x2b0 [ 558.280816][T16345] do_recvmmsg+0xdba/0x22c0 [ 558.285307][T16345] __sys_recvmmsg+0x5dd/0x610 [ 558.289972][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.296049][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.302211][T16345] __do_fast_syscall_32+0x2af/0x480 [ 558.307403][T16345] do_fast_syscall_32+0x6b/0xd0 [ 558.312242][T16345] do_SYSENTER_32+0x73/0x90 [ 558.316739][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.323042][T16345] [ 558.325350][T16345] Uninit was stored to memory at: [ 558.330370][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 558.336094][T16345] __msan_chain_origin+0x50/0x90 [ 558.341019][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 558.346117][T16345] get_compat_msghdr+0x108/0x2b0 [ 558.351039][T16345] do_recvmmsg+0xdba/0x22c0 [ 558.355527][T16345] __sys_recvmmsg+0x5dd/0x610 [ 558.360190][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.366242][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.372488][T16345] __do_fast_syscall_32+0x2af/0x480 [ 558.377706][T16345] do_fast_syscall_32+0x6b/0xd0 [ 558.382564][T16345] do_SYSENTER_32+0x73/0x90 [ 558.387079][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.393394][T16345] [ 558.395703][T16345] Uninit was stored to memory at: [ 558.400719][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 558.406439][T16345] __msan_chain_origin+0x50/0x90 [ 558.411365][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 558.416476][T16345] get_compat_msghdr+0x108/0x2b0 [ 558.421407][T16345] do_recvmmsg+0xdba/0x22c0 [ 558.425900][T16345] __sys_recvmmsg+0x5dd/0x610 [ 558.430575][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.436650][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.442798][T16345] __do_fast_syscall_32+0x2af/0x480 [ 558.447995][T16345] do_fast_syscall_32+0x6b/0xd0 [ 558.452866][T16345] do_SYSENTER_32+0x73/0x90 [ 558.457363][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.463668][T16345] [ 558.465981][T16345] Uninit was stored to memory at: [ 558.471002][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 558.476717][T16345] __msan_chain_origin+0x50/0x90 [ 558.481655][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 558.486763][T16345] get_compat_msghdr+0x108/0x2b0 [ 558.491738][T16345] do_recvmmsg+0xdba/0x22c0 [ 558.496236][T16345] __sys_recvmmsg+0x5dd/0x610 [ 558.500903][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.506962][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.513270][T16345] __do_fast_syscall_32+0x2af/0x480 [ 558.518468][T16345] do_fast_syscall_32+0x6b/0xd0 [ 558.523320][T16345] do_SYSENTER_32+0x73/0x90 [ 558.527822][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.534131][T16345] [ 558.536491][T16345] Uninit was stored to memory at: [ 558.541522][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 558.547287][T16345] __msan_chain_origin+0x50/0x90 [ 558.552223][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 558.557334][T16345] get_compat_msghdr+0x108/0x2b0 [ 558.562265][T16345] do_recvmmsg+0xdba/0x22c0 [ 558.566765][T16345] __sys_recvmmsg+0x5dd/0x610 [ 558.571434][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.577499][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.583649][T16345] __do_fast_syscall_32+0x2af/0x480 [ 558.588842][T16345] do_fast_syscall_32+0x6b/0xd0 [ 558.593744][T16345] do_SYSENTER_32+0x73/0x90 [ 558.598269][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.604577][T16345] [ 558.606890][T16345] Uninit was stored to memory at: [ 558.611912][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 558.617625][T16345] __msan_chain_origin+0x50/0x90 [ 558.622571][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 558.627677][T16345] get_compat_msghdr+0x108/0x2b0 [ 558.632641][T16345] do_recvmmsg+0xdba/0x22c0 [ 558.637136][T16345] __sys_recvmmsg+0x5dd/0x610 [ 558.641802][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.647862][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.654010][T16345] __do_fast_syscall_32+0x2af/0x480 [ 558.659216][T16345] do_fast_syscall_32+0x6b/0xd0 [ 558.664059][T16345] do_SYSENTER_32+0x73/0x90 [ 558.668549][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.674849][T16345] [ 558.677157][T16345] Uninit was stored to memory at: [ 558.682169][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 558.687877][T16345] __msan_chain_origin+0x50/0x90 [ 558.692801][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 558.697914][T16345] get_compat_msghdr+0x108/0x2b0 [ 558.702921][T16345] do_recvmmsg+0xdba/0x22c0 [ 558.707408][T16345] __sys_recvmmsg+0x5dd/0x610 [ 558.712068][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 558.718123][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 558.724265][T16345] __do_fast_syscall_32+0x2af/0x480 [ 558.729450][T16345] do_fast_syscall_32+0x6b/0xd0 [ 558.734285][T16345] do_SYSENTER_32+0x73/0x90 [ 558.738774][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 558.745076][T16345] [ 558.747405][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 558.754068][T16345] do_recvmmsg+0xc2/0x22c0 [ 558.758469][T16345] do_recvmmsg+0xc2/0x22c0 [ 558.999632][T16345] not chained 1300000 origins [ 559.004372][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 559.013046][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.023108][T16345] Call Trace: [ 559.026421][T16345] dump_stack+0x21c/0x280 [ 559.030782][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 559.036528][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 559.041664][T16345] ? kmsan_get_metadata+0x116/0x180 [ 559.046883][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 559.052706][T16345] ? kmsan_get_metadata+0x116/0x180 [ 559.057923][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 559.063747][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 559.069830][T16345] ? kmsan_get_metadata+0x116/0x180 [ 559.075050][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 559.080615][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 559.086714][T16345] ? _copy_from_user+0x221/0x330 [ 559.091680][T16345] ? kmsan_get_metadata+0x116/0x180 [ 559.096900][T16345] __msan_chain_origin+0x50/0x90 [ 559.101864][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 559.107018][T16345] get_compat_msghdr+0x108/0x2b0 [ 559.111987][T16345] do_recvmmsg+0xdba/0x22c0 [ 559.116518][T16345] ? __msan_get_context_state+0x9/0x20 [ 559.122018][T16345] ? kmsan_get_metadata+0x116/0x180 [ 559.127241][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 559.133166][T16345] ? kmsan_get_metadata+0x116/0x180 [ 559.138395][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 559.143702][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 559.148481][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 559.153263][T16345] __sys_recvmmsg+0x5dd/0x610 [ 559.157942][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.164010][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.170152][T16345] __do_fast_syscall_32+0x2af/0x480 [ 559.175347][T16345] do_fast_syscall_32+0x6b/0xd0 [ 559.180185][T16345] do_SYSENTER_32+0x73/0x90 [ 559.184679][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.190988][T16345] RIP: 0023:0xf7f31549 [ 559.195033][T16345] Code: Bad RIP value. [ 559.199080][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 559.207490][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 559.215465][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.223427][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.231387][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 559.239360][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.247344][T16345] Uninit was stored to memory at: [ 559.252375][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 559.258101][T16345] __msan_chain_origin+0x50/0x90 [ 559.263029][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 559.268144][T16345] get_compat_msghdr+0x108/0x2b0 [ 559.273085][T16345] do_recvmmsg+0xdba/0x22c0 [ 559.277581][T16345] __sys_recvmmsg+0x5dd/0x610 [ 559.282255][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.288310][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.294451][T16345] __do_fast_syscall_32+0x2af/0x480 [ 559.299637][T16345] do_fast_syscall_32+0x6b/0xd0 [ 559.304472][T16345] do_SYSENTER_32+0x73/0x90 [ 559.308961][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.315273][T16345] [ 559.317605][T16345] Uninit was stored to memory at: [ 559.322649][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 559.328372][T16345] __msan_chain_origin+0x50/0x90 [ 559.333304][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 559.338403][T16345] get_compat_msghdr+0x108/0x2b0 [ 559.343327][T16345] do_recvmmsg+0xdba/0x22c0 [ 559.347812][T16345] __sys_recvmmsg+0x5dd/0x610 [ 559.352487][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.358556][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.364698][T16345] __do_fast_syscall_32+0x2af/0x480 [ 559.369883][T16345] do_fast_syscall_32+0x6b/0xd0 [ 559.374722][T16345] do_SYSENTER_32+0x73/0x90 [ 559.379210][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.385512][T16345] [ 559.387822][T16345] Uninit was stored to memory at: [ 559.392837][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 559.398544][T16345] __msan_chain_origin+0x50/0x90 [ 559.403469][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 559.408563][T16345] get_compat_msghdr+0x108/0x2b0 [ 559.413493][T16345] do_recvmmsg+0xdba/0x22c0 [ 559.417990][T16345] __sys_recvmmsg+0x5dd/0x610 [ 559.422695][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.428853][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.435019][T16345] __do_fast_syscall_32+0x2af/0x480 [ 559.440225][T16345] do_fast_syscall_32+0x6b/0xd0 [ 559.445067][T16345] do_SYSENTER_32+0x73/0x90 [ 559.449555][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.455894][T16345] [ 559.458204][T16345] Uninit was stored to memory at: [ 559.463220][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 559.468975][T16345] __msan_chain_origin+0x50/0x90 [ 559.473901][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 559.478996][T16345] get_compat_msghdr+0x108/0x2b0 [ 559.483919][T16345] do_recvmmsg+0xdba/0x22c0 [ 559.488406][T16345] __sys_recvmmsg+0x5dd/0x610 [ 559.493072][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.499125][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.505266][T16345] __do_fast_syscall_32+0x2af/0x480 [ 559.510468][T16345] do_fast_syscall_32+0x6b/0xd0 [ 559.515305][T16345] do_SYSENTER_32+0x73/0x90 [ 559.519798][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.526140][T16345] [ 559.528464][T16345] Uninit was stored to memory at: [ 559.533497][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 559.539221][T16345] __msan_chain_origin+0x50/0x90 [ 559.544166][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 559.549302][T16345] get_compat_msghdr+0x108/0x2b0 [ 559.554238][T16345] do_recvmmsg+0xdba/0x22c0 [ 559.558731][T16345] __sys_recvmmsg+0x5dd/0x610 [ 559.563398][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.569456][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.575604][T16345] __do_fast_syscall_32+0x2af/0x480 [ 559.580790][T16345] do_fast_syscall_32+0x6b/0xd0 [ 559.585630][T16345] do_SYSENTER_32+0x73/0x90 [ 559.590120][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.596437][T16345] [ 559.598748][T16345] Uninit was stored to memory at: [ 559.603765][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 559.609485][T16345] __msan_chain_origin+0x50/0x90 [ 559.614414][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 559.619511][T16345] get_compat_msghdr+0x108/0x2b0 [ 559.624435][T16345] do_recvmmsg+0xdba/0x22c0 [ 559.628919][T16345] __sys_recvmmsg+0x5dd/0x610 [ 559.633585][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.639646][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.645811][T16345] __do_fast_syscall_32+0x2af/0x480 [ 559.651020][T16345] do_fast_syscall_32+0x6b/0xd0 [ 559.655860][T16345] do_SYSENTER_32+0x73/0x90 [ 559.660363][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.666666][T16345] [ 559.668973][T16345] Uninit was stored to memory at: [ 559.673986][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 559.679691][T16345] __msan_chain_origin+0x50/0x90 [ 559.684619][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 559.689722][T16345] get_compat_msghdr+0x108/0x2b0 [ 559.694647][T16345] do_recvmmsg+0xdba/0x22c0 [ 559.699134][T16345] __sys_recvmmsg+0x5dd/0x610 [ 559.703800][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 559.709870][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 559.716015][T16345] __do_fast_syscall_32+0x2af/0x480 [ 559.721202][T16345] do_fast_syscall_32+0x6b/0xd0 [ 559.726037][T16345] do_SYSENTER_32+0x73/0x90 [ 559.730527][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 559.736831][T16345] [ 559.739141][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 559.745821][T16345] do_recvmmsg+0xc2/0x22c0 [ 559.750408][T16345] do_recvmmsg+0xc2/0x22c0 [ 560.031036][T16345] not chained 1310000 origins [ 560.035781][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 560.044464][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.054551][T16345] Call Trace: [ 560.057871][T16345] dump_stack+0x21c/0x280 [ 560.062232][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 560.067987][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 560.073127][T16345] ? kmsan_get_metadata+0x116/0x180 [ 560.078348][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 560.084185][T16345] ? kmsan_get_metadata+0x116/0x180 [ 560.089410][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 560.095250][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 560.101345][T16345] ? kmsan_get_metadata+0x116/0x180 [ 560.106567][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 560.112138][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 560.118235][T16345] ? _copy_from_user+0x221/0x330 [ 560.123230][T16345] ? kmsan_get_metadata+0x116/0x180 [ 560.128480][T16345] __msan_chain_origin+0x50/0x90 [ 560.133447][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 560.138609][T16345] get_compat_msghdr+0x108/0x2b0 [ 560.143585][T16345] do_recvmmsg+0xdba/0x22c0 [ 560.148101][T16345] ? __msan_get_context_state+0x9/0x20 [ 560.153577][T16345] ? kmsan_get_metadata+0x116/0x180 [ 560.158782][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 560.164688][T16345] ? kmsan_get_metadata+0x116/0x180 [ 560.169915][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 560.175212][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 560.179959][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 560.184735][T16345] __sys_recvmmsg+0x5dd/0x610 [ 560.189451][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.195526][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.201681][T16345] __do_fast_syscall_32+0x2af/0x480 [ 560.206910][T16345] do_fast_syscall_32+0x6b/0xd0 [ 560.211790][T16345] do_SYSENTER_32+0x73/0x90 [ 560.216304][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.222635][T16345] RIP: 0023:0xf7f31549 [ 560.226696][T16345] Code: Bad RIP value. [ 560.230766][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 560.239170][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 560.247134][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.255100][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.263079][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 560.271062][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.279039][T16345] Uninit was stored to memory at: [ 560.284084][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 560.289828][T16345] __msan_chain_origin+0x50/0x90 [ 560.294765][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 560.299876][T16345] get_compat_msghdr+0x108/0x2b0 [ 560.304815][T16345] do_recvmmsg+0xdba/0x22c0 [ 560.309307][T16345] __sys_recvmmsg+0x5dd/0x610 [ 560.314096][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.320205][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.326375][T16345] __do_fast_syscall_32+0x2af/0x480 [ 560.331567][T16345] do_fast_syscall_32+0x6b/0xd0 [ 560.336415][T16345] do_SYSENTER_32+0x73/0x90 [ 560.341059][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.347366][T16345] [ 560.349678][T16345] Uninit was stored to memory at: [ 560.354695][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 560.360404][T16345] __msan_chain_origin+0x50/0x90 [ 560.365334][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 560.370433][T16345] get_compat_msghdr+0x108/0x2b0 [ 560.375363][T16345] do_recvmmsg+0xdba/0x22c0 [ 560.379863][T16345] __sys_recvmmsg+0x5dd/0x610 [ 560.384576][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.390637][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.396784][T16345] __do_fast_syscall_32+0x2af/0x480 [ 560.401972][T16345] do_fast_syscall_32+0x6b/0xd0 [ 560.406950][T16345] do_SYSENTER_32+0x73/0x90 [ 560.411460][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.417784][T16345] [ 560.420095][T16345] Uninit was stored to memory at: [ 560.425132][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 560.430875][T16345] __msan_chain_origin+0x50/0x90 [ 560.435864][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 560.440970][T16345] get_compat_msghdr+0x108/0x2b0 [ 560.445898][T16345] do_recvmmsg+0xdba/0x22c0 [ 560.450385][T16345] __sys_recvmmsg+0x5dd/0x610 [ 560.455091][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.461191][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.467340][T16345] __do_fast_syscall_32+0x2af/0x480 [ 560.472550][T16345] do_fast_syscall_32+0x6b/0xd0 [ 560.477407][T16345] do_SYSENTER_32+0x73/0x90 [ 560.481909][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.488241][T16345] [ 560.490555][T16345] Uninit was stored to memory at: [ 560.495573][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 560.501282][T16345] __msan_chain_origin+0x50/0x90 [ 560.506210][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 560.511334][T16345] get_compat_msghdr+0x108/0x2b0 [ 560.516264][T16345] do_recvmmsg+0xdba/0x22c0 [ 560.520775][T16345] __sys_recvmmsg+0x5dd/0x610 [ 560.525459][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.531522][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.537687][T16345] __do_fast_syscall_32+0x2af/0x480 [ 560.542931][T16345] do_fast_syscall_32+0x6b/0xd0 [ 560.547788][T16345] do_SYSENTER_32+0x73/0x90 [ 560.552293][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.558610][T16345] [ 560.560923][T16345] Uninit was stored to memory at: [ 560.565939][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 560.571649][T16345] __msan_chain_origin+0x50/0x90 [ 560.576577][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 560.581681][T16345] get_compat_msghdr+0x108/0x2b0 [ 560.586702][T16345] do_recvmmsg+0xdba/0x22c0 [ 560.591194][T16345] __sys_recvmmsg+0x5dd/0x610 [ 560.595864][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.601924][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.608071][T16345] __do_fast_syscall_32+0x2af/0x480 [ 560.613283][T16345] do_fast_syscall_32+0x6b/0xd0 [ 560.618153][T16345] do_SYSENTER_32+0x73/0x90 [ 560.622658][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.628990][T16345] [ 560.631301][T16345] Uninit was stored to memory at: [ 560.636321][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 560.642044][T16345] __msan_chain_origin+0x50/0x90 [ 560.647011][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 560.652159][T16345] get_compat_msghdr+0x108/0x2b0 [ 560.657089][T16345] do_recvmmsg+0xdba/0x22c0 [ 560.661576][T16345] __sys_recvmmsg+0x5dd/0x610 [ 560.666251][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.672312][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.678463][T16345] __do_fast_syscall_32+0x2af/0x480 [ 560.683671][T16345] do_fast_syscall_32+0x6b/0xd0 [ 560.689060][T16345] do_SYSENTER_32+0x73/0x90 [ 560.693563][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.699881][T16345] [ 560.702190][T16345] Uninit was stored to memory at: [ 560.707208][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 560.712953][T16345] __msan_chain_origin+0x50/0x90 [ 560.717896][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 560.723012][T16345] get_compat_msghdr+0x108/0x2b0 [ 560.727952][T16345] do_recvmmsg+0xdba/0x22c0 [ 560.732447][T16345] __sys_recvmmsg+0x5dd/0x610 [ 560.737129][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 560.743202][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 560.749371][T16345] __do_fast_syscall_32+0x2af/0x480 [ 560.754574][T16345] do_fast_syscall_32+0x6b/0xd0 [ 560.759446][T16345] do_SYSENTER_32+0x73/0x90 [ 560.763969][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 560.770287][T16345] [ 560.772610][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 560.779293][T16345] do_recvmmsg+0xc2/0x22c0 [ 560.783708][T16345] do_recvmmsg+0xc2/0x22c0 [ 561.022156][T16345] not chained 1320000 origins [ 561.027011][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 561.035691][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.045768][T16345] Call Trace: [ 561.049085][T16345] dump_stack+0x21c/0x280 [ 561.053446][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 561.059191][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 561.064327][T16345] ? kmsan_get_metadata+0x116/0x180 [ 561.069545][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 561.075372][T16345] ? kmsan_get_metadata+0x116/0x180 [ 561.080594][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 561.086423][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 561.092508][T16345] ? kmsan_get_metadata+0x116/0x180 [ 561.097735][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 561.103309][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 561.109407][T16345] ? _copy_from_user+0x221/0x330 [ 561.114368][T16345] ? kmsan_get_metadata+0x116/0x180 [ 561.119587][T16345] __msan_chain_origin+0x50/0x90 [ 561.124555][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 561.129714][T16345] get_compat_msghdr+0x108/0x2b0 [ 561.134695][T16345] do_recvmmsg+0xdba/0x22c0 [ 561.139232][T16345] ? __msan_get_context_state+0x9/0x20 [ 561.144736][T16345] ? kmsan_get_metadata+0x116/0x180 [ 561.149963][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 561.155895][T16345] ? kmsan_get_metadata+0x116/0x180 [ 561.161120][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 561.166424][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 561.171202][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 561.175992][T16345] __sys_recvmmsg+0x5dd/0x610 [ 561.180711][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.186823][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.192999][T16345] __do_fast_syscall_32+0x2af/0x480 [ 561.198230][T16345] do_fast_syscall_32+0x6b/0xd0 [ 561.203105][T16345] do_SYSENTER_32+0x73/0x90 [ 561.207634][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.213971][T16345] RIP: 0023:0xf7f31549 [ 561.218059][T16345] Code: Bad RIP value. [ 561.222141][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 561.230608][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 561.238620][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.246631][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.254625][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 561.262630][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.270675][T16345] Uninit was stored to memory at: [ 561.275714][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 561.281451][T16345] __msan_chain_origin+0x50/0x90 [ 561.286412][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 561.291542][T16345] get_compat_msghdr+0x108/0x2b0 [ 561.296523][T16345] do_recvmmsg+0xdba/0x22c0 [ 561.301052][T16345] __sys_recvmmsg+0x5dd/0x610 [ 561.305754][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.311854][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.318023][T16345] __do_fast_syscall_32+0x2af/0x480 [ 561.323257][T16345] do_fast_syscall_32+0x6b/0xd0 [ 561.328114][T16345] do_SYSENTER_32+0x73/0x90 [ 561.332642][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.338959][T16345] [ 561.341282][T16345] Uninit was stored to memory at: [ 561.346371][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 561.352273][T16345] __msan_chain_origin+0x50/0x90 [ 561.357221][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 561.362389][T16345] get_compat_msghdr+0x108/0x2b0 [ 561.367341][T16345] do_recvmmsg+0xdba/0x22c0 [ 561.371849][T16345] __sys_recvmmsg+0x5dd/0x610 [ 561.376539][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.382645][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.388813][T16345] __do_fast_syscall_32+0x2af/0x480 [ 561.394077][T16345] do_fast_syscall_32+0x6b/0xd0 [ 561.398953][T16345] do_SYSENTER_32+0x73/0x90 [ 561.403471][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.409813][T16345] [ 561.412193][T16345] Uninit was stored to memory at: [ 561.417275][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 561.423130][T16345] __msan_chain_origin+0x50/0x90 [ 561.428083][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 561.433204][T16345] get_compat_msghdr+0x108/0x2b0 [ 561.438150][T16345] do_recvmmsg+0xdba/0x22c0 [ 561.442668][T16345] __sys_recvmmsg+0x5dd/0x610 [ 561.447399][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.453531][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.459719][T16345] __do_fast_syscall_32+0x2af/0x480 [ 561.464929][T16345] do_fast_syscall_32+0x6b/0xd0 [ 561.469805][T16345] do_SYSENTER_32+0x73/0x90 [ 561.474322][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.480695][T16345] [ 561.483029][T16345] Uninit was stored to memory at: [ 561.488076][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 561.493808][T16345] __msan_chain_origin+0x50/0x90 [ 561.498752][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 561.503877][T16345] get_compat_msghdr+0x108/0x2b0 [ 561.508830][T16345] do_recvmmsg+0xdba/0x22c0 [ 561.513386][T16345] __sys_recvmmsg+0x5dd/0x610 [ 561.518083][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.524222][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.530395][T16345] __do_fast_syscall_32+0x2af/0x480 [ 561.535616][T16345] do_fast_syscall_32+0x6b/0xd0 [ 561.540492][T16345] do_SYSENTER_32+0x73/0x90 [ 561.545019][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.551332][T16345] [ 561.553648][T16345] Uninit was stored to memory at: [ 561.558685][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 561.564431][T16345] __msan_chain_origin+0x50/0x90 [ 561.569393][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 561.574511][T16345] get_compat_msghdr+0x108/0x2b0 [ 561.579469][T16345] do_recvmmsg+0xdba/0x22c0 [ 561.583975][T16345] __sys_recvmmsg+0x5dd/0x610 [ 561.588670][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.594745][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.600918][T16345] __do_fast_syscall_32+0x2af/0x480 [ 561.606148][T16345] do_fast_syscall_32+0x6b/0xd0 [ 561.611021][T16345] do_SYSENTER_32+0x73/0x90 [ 561.615549][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.621860][T16345] [ 561.624195][T16345] Uninit was stored to memory at: [ 561.629249][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 561.634992][T16345] __msan_chain_origin+0x50/0x90 [ 561.639937][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 561.645055][T16345] get_compat_msghdr+0x108/0x2b0 [ 561.650017][T16345] do_recvmmsg+0xdba/0x22c0 [ 561.654536][T16345] __sys_recvmmsg+0x5dd/0x610 [ 561.659211][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.665261][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.671405][T16345] __do_fast_syscall_32+0x2af/0x480 [ 561.676597][T16345] do_fast_syscall_32+0x6b/0xd0 [ 561.681433][T16345] do_SYSENTER_32+0x73/0x90 [ 561.685937][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.692240][T16345] [ 561.694546][T16345] Uninit was stored to memory at: [ 561.699563][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 561.705270][T16345] __msan_chain_origin+0x50/0x90 [ 561.710197][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 561.715296][T16345] get_compat_msghdr+0x108/0x2b0 [ 561.720216][T16345] do_recvmmsg+0xdba/0x22c0 [ 561.724703][T16345] __sys_recvmmsg+0x5dd/0x610 [ 561.729372][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 561.735444][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 561.741605][T16345] __do_fast_syscall_32+0x2af/0x480 [ 561.746795][T16345] do_fast_syscall_32+0x6b/0xd0 [ 561.751649][T16345] do_SYSENTER_32+0x73/0x90 [ 561.756146][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 561.762455][T16345] [ 561.764777][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 561.771448][T16345] do_recvmmsg+0xc2/0x22c0 [ 561.775860][T16345] do_recvmmsg+0xc2/0x22c0 [ 562.077848][T16345] not chained 1330000 origins [ 562.082570][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 562.091240][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.101288][T16345] Call Trace: [ 562.104579][T16345] dump_stack+0x21c/0x280 [ 562.108903][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 562.114618][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 562.119723][T16345] ? kmsan_get_metadata+0x116/0x180 [ 562.124930][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.130746][T16345] ? kmsan_get_metadata+0x116/0x180 [ 562.135937][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.141732][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 562.147789][T16345] ? kmsan_get_metadata+0x116/0x180 [ 562.152977][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 562.158516][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 562.164584][T16345] ? _copy_from_user+0x221/0x330 [ 562.169510][T16345] ? kmsan_get_metadata+0x116/0x180 [ 562.174698][T16345] __msan_chain_origin+0x50/0x90 [ 562.179629][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 562.184764][T16345] get_compat_msghdr+0x108/0x2b0 [ 562.189699][T16345] do_recvmmsg+0xdba/0x22c0 [ 562.194216][T16345] ? __msan_get_context_state+0x9/0x20 [ 562.199673][T16345] ? kmsan_get_metadata+0x116/0x180 [ 562.204879][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 562.210765][T16345] ? kmsan_get_metadata+0x116/0x180 [ 562.215960][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 562.221233][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 562.225984][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 562.230733][T16345] __sys_recvmmsg+0x5dd/0x610 [ 562.235439][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.241544][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.247689][T16345] __do_fast_syscall_32+0x2af/0x480 [ 562.252885][T16345] do_fast_syscall_32+0x6b/0xd0 [ 562.257724][T16345] do_SYSENTER_32+0x73/0x90 [ 562.262218][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.268542][T16345] RIP: 0023:0xf7f31549 [ 562.272595][T16345] Code: Bad RIP value. [ 562.276657][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 562.285069][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 562.293065][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.301044][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.309005][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 562.316971][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.324945][T16345] Uninit was stored to memory at: [ 562.329963][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 562.335667][T16345] __msan_chain_origin+0x50/0x90 [ 562.340589][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 562.345699][T16345] get_compat_msghdr+0x108/0x2b0 [ 562.350645][T16345] do_recvmmsg+0xdba/0x22c0 [ 562.355190][T16345] __sys_recvmmsg+0x5dd/0x610 [ 562.359878][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.365932][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.372070][T16345] __do_fast_syscall_32+0x2af/0x480 [ 562.377257][T16345] do_fast_syscall_32+0x6b/0xd0 [ 562.382091][T16345] do_SYSENTER_32+0x73/0x90 [ 562.386632][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.392969][T16345] [ 562.395275][T16345] Uninit was stored to memory at: [ 562.400289][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 562.406003][T16345] __msan_chain_origin+0x50/0x90 [ 562.410926][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 562.416023][T16345] get_compat_msghdr+0x108/0x2b0 [ 562.420955][T16345] do_recvmmsg+0xdba/0x22c0 [ 562.425530][T16345] __sys_recvmmsg+0x5dd/0x610 [ 562.430193][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.436252][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.442393][T16345] __do_fast_syscall_32+0x2af/0x480 [ 562.447590][T16345] do_fast_syscall_32+0x6b/0xd0 [ 562.452429][T16345] do_SYSENTER_32+0x73/0x90 [ 562.456948][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.463267][T16345] [ 562.465575][T16345] Uninit was stored to memory at: [ 562.470618][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 562.476324][T16345] __msan_chain_origin+0x50/0x90 [ 562.481245][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 562.486356][T16345] get_compat_msghdr+0x108/0x2b0 [ 562.491276][T16345] do_recvmmsg+0xdba/0x22c0 [ 562.495764][T16345] __sys_recvmmsg+0x5dd/0x610 [ 562.500427][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.506481][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.512674][T16345] __do_fast_syscall_32+0x2af/0x480 [ 562.518047][T16345] do_fast_syscall_32+0x6b/0xd0 [ 562.522889][T16345] do_SYSENTER_32+0x73/0x90 [ 562.527410][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.533713][T16345] [ 562.536022][T16345] Uninit was stored to memory at: [ 562.541121][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 562.546825][T16345] __msan_chain_origin+0x50/0x90 [ 562.551749][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 562.556878][T16345] get_compat_msghdr+0x108/0x2b0 [ 562.561798][T16345] do_recvmmsg+0xdba/0x22c0 [ 562.566302][T16345] __sys_recvmmsg+0x5dd/0x610 [ 562.570981][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.577033][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.583180][T16345] __do_fast_syscall_32+0x2af/0x480 [ 562.588384][T16345] do_fast_syscall_32+0x6b/0xd0 [ 562.593232][T16345] do_SYSENTER_32+0x73/0x90 [ 562.597718][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.604019][T16345] [ 562.606341][T16345] Uninit was stored to memory at: [ 562.611373][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 562.617078][T16345] __msan_chain_origin+0x50/0x90 [ 562.622001][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 562.627100][T16345] get_compat_msghdr+0x108/0x2b0 [ 562.632019][T16345] do_recvmmsg+0xdba/0x22c0 [ 562.636507][T16345] __sys_recvmmsg+0x5dd/0x610 [ 562.641172][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.647243][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.653384][T16345] __do_fast_syscall_32+0x2af/0x480 [ 562.658579][T16345] do_fast_syscall_32+0x6b/0xd0 [ 562.663412][T16345] do_SYSENTER_32+0x73/0x90 [ 562.667897][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.674207][T16345] [ 562.676541][T16345] Uninit was stored to memory at: [ 562.681575][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 562.687285][T16345] __msan_chain_origin+0x50/0x90 [ 562.692236][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 562.697351][T16345] get_compat_msghdr+0x108/0x2b0 [ 562.702270][T16345] do_recvmmsg+0xdba/0x22c0 [ 562.706863][T16345] __sys_recvmmsg+0x5dd/0x610 [ 562.711527][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.717584][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.723741][T16345] __do_fast_syscall_32+0x2af/0x480 [ 562.728927][T16345] do_fast_syscall_32+0x6b/0xd0 [ 562.733766][T16345] do_SYSENTER_32+0x73/0x90 [ 562.738254][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.744555][T16345] [ 562.746864][T16345] Uninit was stored to memory at: [ 562.751878][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 562.757596][T16345] __msan_chain_origin+0x50/0x90 [ 562.762528][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 562.767654][T16345] get_compat_msghdr+0x108/0x2b0 [ 562.772590][T16345] do_recvmmsg+0xdba/0x22c0 [ 562.777093][T16345] __sys_recvmmsg+0x5dd/0x610 [ 562.781765][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 562.787838][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 562.793997][T16345] __do_fast_syscall_32+0x2af/0x480 [ 562.799185][T16345] do_fast_syscall_32+0x6b/0xd0 [ 562.804024][T16345] do_SYSENTER_32+0x73/0x90 [ 562.808513][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 562.814813][T16345] [ 562.817121][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 562.823782][T16345] do_recvmmsg+0xc2/0x22c0 [ 562.828191][T16345] do_recvmmsg+0xc2/0x22c0 [ 563.080494][T16345] not chained 1340000 origins [ 563.085243][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 563.093922][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.103992][T16345] Call Trace: [ 563.107312][T16345] dump_stack+0x21c/0x280 [ 563.111672][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 563.117426][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 563.122570][T16345] ? kmsan_get_metadata+0x116/0x180 [ 563.127796][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 563.133626][T16345] ? kmsan_get_metadata+0x116/0x180 [ 563.138852][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 563.144691][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 563.150782][T16345] ? kmsan_get_metadata+0x116/0x180 [ 563.156008][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 563.161582][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 563.167676][T16345] ? _copy_from_user+0x221/0x330 [ 563.172739][T16345] ? kmsan_get_metadata+0x116/0x180 [ 563.178052][T16345] __msan_chain_origin+0x50/0x90 [ 563.183024][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 563.188192][T16345] get_compat_msghdr+0x108/0x2b0 [ 563.193174][T16345] do_recvmmsg+0xdba/0x22c0 [ 563.197710][T16345] ? __msan_get_context_state+0x9/0x20 [ 563.203216][T16345] ? kmsan_get_metadata+0x116/0x180 [ 563.208446][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 563.214373][T16345] ? kmsan_get_metadata+0x116/0x180 [ 563.219608][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 563.224923][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 563.229706][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 563.234500][T16345] __sys_recvmmsg+0x5dd/0x610 [ 563.239256][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.245373][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.251555][T16345] __do_fast_syscall_32+0x2af/0x480 [ 563.256796][T16345] do_fast_syscall_32+0x6b/0xd0 [ 563.261678][T16345] do_SYSENTER_32+0x73/0x90 [ 563.266209][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.272552][T16345] RIP: 0023:0xf7f31549 [ 563.276621][T16345] Code: Bad RIP value. [ 563.280718][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 563.289155][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 563.297149][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.305138][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.313128][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 563.321117][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.329122][T16345] Uninit was stored to memory at: [ 563.334170][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 563.339903][T16345] __msan_chain_origin+0x50/0x90 [ 563.344863][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 563.349996][T16345] get_compat_msghdr+0x108/0x2b0 [ 563.354953][T16345] do_recvmmsg+0xdba/0x22c0 [ 563.359461][T16345] __sys_recvmmsg+0x5dd/0x610 [ 563.364127][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.370180][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.376364][T16345] __do_fast_syscall_32+0x2af/0x480 [ 563.381557][T16345] do_fast_syscall_32+0x6b/0xd0 [ 563.386427][T16345] do_SYSENTER_32+0x73/0x90 [ 563.390913][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.397232][T16345] [ 563.399551][T16345] Uninit was stored to memory at: [ 563.404598][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 563.410330][T16345] __msan_chain_origin+0x50/0x90 [ 563.415288][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 563.420412][T16345] get_compat_msghdr+0x108/0x2b0 [ 563.425366][T16345] do_recvmmsg+0xdba/0x22c0 [ 563.429873][T16345] __sys_recvmmsg+0x5dd/0x610 [ 563.434539][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.440643][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.446813][T16345] __do_fast_syscall_32+0x2af/0x480 [ 563.452015][T16345] do_fast_syscall_32+0x6b/0xd0 [ 563.456852][T16345] do_SYSENTER_32+0x73/0x90 [ 563.461341][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.467660][T16345] [ 563.469986][T16345] Uninit was stored to memory at: [ 563.474999][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 563.480699][T16345] __msan_chain_origin+0x50/0x90 [ 563.485628][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 563.490723][T16345] get_compat_msghdr+0x108/0x2b0 [ 563.495643][T16345] do_recvmmsg+0xdba/0x22c0 [ 563.500129][T16345] __sys_recvmmsg+0x5dd/0x610 [ 563.504792][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.510848][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.517031][T16345] __do_fast_syscall_32+0x2af/0x480 [ 563.522214][T16345] do_fast_syscall_32+0x6b/0xd0 [ 563.527047][T16345] do_SYSENTER_32+0x73/0x90 [ 563.531534][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.537831][T16345] [ 563.540140][T16345] Uninit was stored to memory at: [ 563.545149][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 563.550850][T16345] __msan_chain_origin+0x50/0x90 [ 563.555784][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 563.560911][T16345] get_compat_msghdr+0x108/0x2b0 [ 563.565831][T16345] do_recvmmsg+0xdba/0x22c0 [ 563.570329][T16345] __sys_recvmmsg+0x5dd/0x610 [ 563.574989][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.581040][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.587178][T16345] __do_fast_syscall_32+0x2af/0x480 [ 563.592373][T16345] do_fast_syscall_32+0x6b/0xd0 [ 563.597208][T16345] do_SYSENTER_32+0x73/0x90 [ 563.601695][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.607995][T16345] [ 563.610320][T16345] Uninit was stored to memory at: [ 563.615334][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 563.621033][T16345] __msan_chain_origin+0x50/0x90 [ 563.625953][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 563.631045][T16345] get_compat_msghdr+0x108/0x2b0 [ 563.635965][T16345] do_recvmmsg+0xdba/0x22c0 [ 563.640451][T16345] __sys_recvmmsg+0x5dd/0x610 [ 563.645115][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.651165][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.657318][T16345] __do_fast_syscall_32+0x2af/0x480 [ 563.662514][T16345] do_fast_syscall_32+0x6b/0xd0 [ 563.667373][T16345] do_SYSENTER_32+0x73/0x90 [ 563.671902][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.678203][T16345] [ 563.680509][T16345] Uninit was stored to memory at: [ 563.685523][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 563.691223][T16345] __msan_chain_origin+0x50/0x90 [ 563.696146][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 563.701239][T16345] get_compat_msghdr+0x108/0x2b0 [ 563.706163][T16345] do_recvmmsg+0xdba/0x22c0 [ 563.710646][T16345] __sys_recvmmsg+0x5dd/0x610 [ 563.715331][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.721377][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.727518][T16345] __do_fast_syscall_32+0x2af/0x480 [ 563.732715][T16345] do_fast_syscall_32+0x6b/0xd0 [ 563.737562][T16345] do_SYSENTER_32+0x73/0x90 [ 563.742050][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.748365][T16345] [ 563.750672][T16345] Uninit was stored to memory at: [ 563.755682][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 563.761395][T16345] __msan_chain_origin+0x50/0x90 [ 563.766333][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 563.771427][T16345] get_compat_msghdr+0x108/0x2b0 [ 563.776361][T16345] do_recvmmsg+0xdba/0x22c0 [ 563.780860][T16345] __sys_recvmmsg+0x5dd/0x610 [ 563.785525][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 563.791573][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 563.797711][T16345] __do_fast_syscall_32+0x2af/0x480 [ 563.802912][T16345] do_fast_syscall_32+0x6b/0xd0 [ 563.807745][T16345] do_SYSENTER_32+0x73/0x90 [ 563.812228][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 563.818528][T16345] [ 563.820834][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 563.827494][T16345] do_recvmmsg+0xc2/0x22c0 [ 563.831914][T16345] do_recvmmsg+0xc2/0x22c0 [ 564.112449][T16345] not chained 1350000 origins [ 564.117178][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 564.125835][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.135882][T16345] Call Trace: [ 564.139169][T16345] dump_stack+0x21c/0x280 [ 564.143515][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 564.149245][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 564.154371][T16345] ? kmsan_get_metadata+0x116/0x180 [ 564.159580][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 564.165380][T16345] ? kmsan_get_metadata+0x116/0x180 [ 564.170571][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 564.176372][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 564.182459][T16345] ? kmsan_get_metadata+0x116/0x180 [ 564.187668][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 564.193222][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 564.199324][T16345] ? _copy_from_user+0x221/0x330 [ 564.204260][T16345] ? kmsan_get_metadata+0x116/0x180 [ 564.209480][T16345] __msan_chain_origin+0x50/0x90 [ 564.214432][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 564.219592][T16345] get_compat_msghdr+0x108/0x2b0 [ 564.224592][T16345] do_recvmmsg+0xdba/0x22c0 [ 564.229117][T16345] ? __msan_get_context_state+0x9/0x20 [ 564.234583][T16345] ? kmsan_get_metadata+0x116/0x180 [ 564.239779][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 564.245672][T16345] ? kmsan_get_metadata+0x116/0x180 [ 564.250898][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 564.256178][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 564.260957][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 564.265718][T16345] __sys_recvmmsg+0x5dd/0x610 [ 564.270405][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.276506][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.282670][T16345] __do_fast_syscall_32+0x2af/0x480 [ 564.287889][T16345] do_fast_syscall_32+0x6b/0xd0 [ 564.292752][T16345] do_SYSENTER_32+0x73/0x90 [ 564.297286][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.303636][T16345] RIP: 0023:0xf7f31549 [ 564.307703][T16345] Code: Bad RIP value. [ 564.311756][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 564.320558][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 564.328537][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.336578][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.344550][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.352563][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.360701][T16345] Uninit was stored to memory at: [ 564.365724][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 564.371448][T16345] __msan_chain_origin+0x50/0x90 [ 564.376380][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 564.381484][T16345] get_compat_msghdr+0x108/0x2b0 [ 564.386430][T16345] do_recvmmsg+0xdba/0x22c0 [ 564.390923][T16345] __sys_recvmmsg+0x5dd/0x610 [ 564.395596][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.401658][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.407805][T16345] __do_fast_syscall_32+0x2af/0x480 [ 564.413018][T16345] do_fast_syscall_32+0x6b/0xd0 [ 564.417875][T16345] do_SYSENTER_32+0x73/0x90 [ 564.422386][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.428696][T16345] [ 564.431014][T16345] Uninit was stored to memory at: [ 564.436169][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 564.441995][T16345] __msan_chain_origin+0x50/0x90 [ 564.446945][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 564.452046][T16345] get_compat_msghdr+0x108/0x2b0 [ 564.456981][T16345] do_recvmmsg+0xdba/0x22c0 [ 564.461479][T16345] __sys_recvmmsg+0x5dd/0x610 [ 564.466236][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.472427][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.478593][T16345] __do_fast_syscall_32+0x2af/0x480 [ 564.483808][T16345] do_fast_syscall_32+0x6b/0xd0 [ 564.488668][T16345] do_SYSENTER_32+0x73/0x90 [ 564.493181][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.499515][T16345] [ 564.501835][T16345] Uninit was stored to memory at: [ 564.506859][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 564.512762][T16345] __msan_chain_origin+0x50/0x90 [ 564.517714][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 564.522842][T16345] get_compat_msghdr+0x108/0x2b0 [ 564.527791][T16345] do_recvmmsg+0xdba/0x22c0 [ 564.532291][T16345] __sys_recvmmsg+0x5dd/0x610 [ 564.537121][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.543212][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.549397][T16345] __do_fast_syscall_32+0x2af/0x480 [ 564.554761][T16345] do_fast_syscall_32+0x6b/0xd0 [ 564.559610][T16345] do_SYSENTER_32+0x73/0x90 [ 564.564125][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.570456][T16345] [ 564.572782][T16345] Uninit was stored to memory at: [ 564.572805][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 564.572824][T16345] __msan_chain_origin+0x50/0x90 [ 564.572844][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 564.572860][T16345] get_compat_msghdr+0x108/0x2b0 [ 564.572877][T16345] do_recvmmsg+0xdba/0x22c0 [ 564.572910][T16345] __sys_recvmmsg+0x5dd/0x610 [ 564.572930][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.572950][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.572971][T16345] __do_fast_syscall_32+0x2af/0x480 [ 564.573044][T16345] do_fast_syscall_32+0x6b/0xd0 [ 564.630499][T16345] do_SYSENTER_32+0x73/0x90 [ 564.635180][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.641496][T16345] [ 564.643913][T16345] Uninit was stored to memory at: [ 564.648970][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 564.654701][T16345] __msan_chain_origin+0x50/0x90 [ 564.659788][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 564.664917][T16345] get_compat_msghdr+0x108/0x2b0 [ 564.669847][T16345] do_recvmmsg+0xdba/0x22c0 [ 564.674449][T16345] __sys_recvmmsg+0x5dd/0x610 [ 564.679183][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.685289][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.691460][T16345] __do_fast_syscall_32+0x2af/0x480 [ 564.696665][T16345] do_fast_syscall_32+0x6b/0xd0 [ 564.701528][T16345] do_SYSENTER_32+0x73/0x90 [ 564.706032][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.712347][T16345] [ 564.714669][T16345] Uninit was stored to memory at: [ 564.719697][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 564.725462][T16345] __msan_chain_origin+0x50/0x90 [ 564.730450][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 564.735564][T16345] get_compat_msghdr+0x108/0x2b0 [ 564.740497][T16345] do_recvmmsg+0xdba/0x22c0 [ 564.744997][T16345] __sys_recvmmsg+0x5dd/0x610 [ 564.749672][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.755750][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.761899][T16345] __do_fast_syscall_32+0x2af/0x480 [ 564.767129][T16345] do_fast_syscall_32+0x6b/0xd0 [ 564.772003][T16345] do_SYSENTER_32+0x73/0x90 [ 564.776608][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.782949][T16345] [ 564.785286][T16345] Uninit was stored to memory at: [ 564.790342][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 564.796063][T16345] __msan_chain_origin+0x50/0x90 [ 564.801046][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 564.806155][T16345] get_compat_msghdr+0x108/0x2b0 [ 564.811103][T16345] do_recvmmsg+0xdba/0x22c0 [ 564.815604][T16345] __sys_recvmmsg+0x5dd/0x610 [ 564.820375][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 564.826478][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 564.832644][T16345] __do_fast_syscall_32+0x2af/0x480 [ 564.837861][T16345] do_fast_syscall_32+0x6b/0xd0 [ 564.842811][T16345] do_SYSENTER_32+0x73/0x90 [ 564.847410][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 564.853730][T16345] [ 564.856138][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 564.862822][T16345] do_recvmmsg+0xc2/0x22c0 [ 564.867254][T16345] do_recvmmsg+0xc2/0x22c0 [ 565.090727][T16345] not chained 1360000 origins [ 565.095569][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 565.104256][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.114350][T16345] Call Trace: [ 565.117678][T16345] dump_stack+0x21c/0x280 [ 565.122078][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 565.127853][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 565.133005][T16345] ? kmsan_get_metadata+0x116/0x180 [ 565.138360][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 565.144318][T16345] ? kmsan_get_metadata+0x116/0x180 [ 565.149549][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 565.155388][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 565.161487][T16345] ? kmsan_get_metadata+0x116/0x180 [ 565.166809][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 565.172391][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 565.178623][T16345] ? _copy_from_user+0x221/0x330 [ 565.183597][T16345] ? kmsan_get_metadata+0x116/0x180 [ 565.188826][T16345] __msan_chain_origin+0x50/0x90 [ 565.193874][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 565.199178][T16345] get_compat_msghdr+0x108/0x2b0 [ 565.204257][T16345] do_recvmmsg+0xdba/0x22c0 [ 565.208887][T16345] ? __msan_get_context_state+0x9/0x20 [ 565.214399][T16345] ? kmsan_get_metadata+0x116/0x180 [ 565.219635][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 565.225567][T16345] ? kmsan_get_metadata+0x116/0x180 [ 565.230980][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 565.236300][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 565.241091][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 565.246062][T16345] __sys_recvmmsg+0x5dd/0x610 [ 565.250829][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.256948][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.263167][T16345] __do_fast_syscall_32+0x2af/0x480 [ 565.268502][T16345] do_fast_syscall_32+0x6b/0xd0 [ 565.273402][T16345] do_SYSENTER_32+0x73/0x90 [ 565.278063][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.284416][T16345] RIP: 0023:0xf7f31549 [ 565.288702][T16345] Code: Bad RIP value. [ 565.292791][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 565.301540][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 565.309539][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.317537][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.325536][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 565.333620][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.341637][T16345] Uninit was stored to memory at: [ 565.346713][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 565.352462][T16345] __msan_chain_origin+0x50/0x90 [ 565.357433][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 565.362573][T16345] get_compat_msghdr+0x108/0x2b0 [ 565.367558][T16345] do_recvmmsg+0xdba/0x22c0 [ 565.372088][T16345] __sys_recvmmsg+0x5dd/0x610 [ 565.376885][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.382980][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.389177][T16345] __do_fast_syscall_32+0x2af/0x480 [ 565.394419][T16345] do_fast_syscall_32+0x6b/0xd0 [ 565.399297][T16345] do_SYSENTER_32+0x73/0x90 [ 565.403926][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.410274][T16345] [ 565.412632][T16345] Uninit was stored to memory at: [ 565.417704][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 565.423453][T16345] __msan_chain_origin+0x50/0x90 [ 565.428417][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 565.433644][T16345] get_compat_msghdr+0x108/0x2b0 [ 565.438783][T16345] do_recvmmsg+0xdba/0x22c0 [ 565.443312][T16345] __sys_recvmmsg+0x5dd/0x610 [ 565.448190][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.454464][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.460780][T16345] __do_fast_syscall_32+0x2af/0x480 [ 565.466011][T16345] do_fast_syscall_32+0x6b/0xd0 [ 565.471116][T16345] do_SYSENTER_32+0x73/0x90 [ 565.475658][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.482017][T16345] [ 565.484364][T16345] Uninit was stored to memory at: [ 565.489418][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 565.495179][T16345] __msan_chain_origin+0x50/0x90 [ 565.500355][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 565.505493][T16345] get_compat_msghdr+0x108/0x2b0 [ 565.510457][T16345] do_recvmmsg+0xdba/0x22c0 [ 565.514988][T16345] __sys_recvmmsg+0x5dd/0x610 [ 565.519717][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.525811][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.531990][T16345] __do_fast_syscall_32+0x2af/0x480 [ 565.537224][T16345] do_fast_syscall_32+0x6b/0xd0 [ 565.542101][T16345] do_SYSENTER_32+0x73/0x90 [ 565.546635][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.553168][T16345] [ 565.555513][T16345] Uninit was stored to memory at: [ 565.560562][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 565.566323][T16345] __msan_chain_origin+0x50/0x90 [ 565.571294][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 565.576424][T16345] get_compat_msghdr+0x108/0x2b0 [ 565.581358][T16345] do_recvmmsg+0xdba/0x22c0 [ 565.585874][T16345] __sys_recvmmsg+0x5dd/0x610 [ 565.590552][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.596757][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.602922][T16345] __do_fast_syscall_32+0x2af/0x480 [ 565.608508][T16345] do_fast_syscall_32+0x6b/0xd0 [ 565.613376][T16345] do_SYSENTER_32+0x73/0x90 [ 565.617892][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.624558][T16345] [ 565.626896][T16345] Uninit was stored to memory at: [ 565.632011][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 565.637733][T16345] __msan_chain_origin+0x50/0x90 [ 565.642831][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 565.648057][T16345] get_compat_msghdr+0x108/0x2b0 [ 565.653017][T16345] do_recvmmsg+0xdba/0x22c0 [ 565.657530][T16345] __sys_recvmmsg+0x5dd/0x610 [ 565.662203][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.668283][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.674450][T16345] __do_fast_syscall_32+0x2af/0x480 [ 565.679661][T16345] do_fast_syscall_32+0x6b/0xd0 [ 565.684520][T16345] do_SYSENTER_32+0x73/0x90 [ 565.689039][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.695578][T16345] [ 565.697901][T16345] Uninit was stored to memory at: [ 565.702941][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 565.708674][T16345] __msan_chain_origin+0x50/0x90 [ 565.713613][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 565.718821][T16345] get_compat_msghdr+0x108/0x2b0 [ 565.723766][T16345] do_recvmmsg+0xdba/0x22c0 [ 565.728280][T16345] __sys_recvmmsg+0x5dd/0x610 [ 565.733058][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.739268][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.745433][T16345] __do_fast_syscall_32+0x2af/0x480 [ 565.750644][T16345] do_fast_syscall_32+0x6b/0xd0 [ 565.755511][T16345] do_SYSENTER_32+0x73/0x90 [ 565.760013][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.766335][T16345] [ 565.768672][T16345] Uninit was stored to memory at: [ 565.773714][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 565.779448][T16345] __msan_chain_origin+0x50/0x90 [ 565.784401][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 565.789744][T16345] get_compat_msghdr+0x108/0x2b0 [ 565.794812][T16345] do_recvmmsg+0xdba/0x22c0 [ 565.799312][T16345] __sys_recvmmsg+0x5dd/0x610 [ 565.804142][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 565.810229][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 565.816384][T16345] __do_fast_syscall_32+0x2af/0x480 [ 565.821577][T16345] do_fast_syscall_32+0x6b/0xd0 [ 565.826429][T16345] do_SYSENTER_32+0x73/0x90 [ 565.831042][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 565.837356][T16345] [ 565.839734][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 565.846407][T16345] do_recvmmsg+0xc2/0x22c0 [ 565.850946][T16345] do_recvmmsg+0xc2/0x22c0 [ 566.072600][T16345] not chained 1370000 origins [ 566.077440][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 566.086213][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.096278][T16345] Call Trace: [ 566.099576][T16345] dump_stack+0x21c/0x280 [ 566.103948][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 566.109704][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 566.114977][T16345] ? kmsan_get_metadata+0x116/0x180 [ 566.120183][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 566.125992][T16345] ? kmsan_get_metadata+0x116/0x180 [ 566.131310][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 566.137131][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 566.143232][T16345] ? kmsan_get_metadata+0x116/0x180 [ 566.148734][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 566.154303][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 566.160409][T16345] ? _copy_from_user+0x221/0x330 [ 566.165368][T16345] ? kmsan_get_metadata+0x116/0x180 [ 566.170581][T16345] __msan_chain_origin+0x50/0x90 [ 566.175732][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 566.180949][T16345] get_compat_msghdr+0x108/0x2b0 [ 566.185900][T16345] do_recvmmsg+0xdba/0x22c0 [ 566.190495][T16345] ? __msan_get_context_state+0x9/0x20 [ 566.195968][T16345] ? kmsan_get_metadata+0x116/0x180 [ 566.201176][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 566.207186][T16345] ? kmsan_get_metadata+0x116/0x180 [ 566.212407][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 566.217716][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 566.222511][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 566.227598][T16345] __sys_recvmmsg+0x5dd/0x610 [ 566.232291][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.238375][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.244674][T16345] __do_fast_syscall_32+0x2af/0x480 [ 566.250072][T16345] do_fast_syscall_32+0x6b/0xd0 [ 566.254925][T16345] do_SYSENTER_32+0x73/0x90 [ 566.259433][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.265760][T16345] RIP: 0023:0xf7f31549 [ 566.269821][T16345] Code: Bad RIP value. [ 566.273883][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 566.282292][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 566.290265][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.298421][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.306539][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 566.314537][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.322794][T16345] Uninit was stored to memory at: [ 566.327860][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 566.333942][T16345] __msan_chain_origin+0x50/0x90 [ 566.338884][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 566.344016][T16345] get_compat_msghdr+0x108/0x2b0 [ 566.348973][T16345] do_recvmmsg+0xdba/0x22c0 [ 566.353475][T16345] __sys_recvmmsg+0x5dd/0x610 [ 566.358154][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.364479][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.370649][T16345] __do_fast_syscall_32+0x2af/0x480 [ 566.375865][T16345] do_fast_syscall_32+0x6b/0xd0 [ 566.380919][T16345] do_SYSENTER_32+0x73/0x90 [ 566.385440][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.391768][T16345] [ 566.394224][T16345] Uninit was stored to memory at: [ 566.399300][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 566.405061][T16345] __msan_chain_origin+0x50/0x90 [ 566.410026][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 566.415179][T16345] get_compat_msghdr+0x108/0x2b0 [ 566.420265][T16345] do_recvmmsg+0xdba/0x22c0 [ 566.424964][T16345] __sys_recvmmsg+0x5dd/0x610 [ 566.429685][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.435792][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.442061][T16345] __do_fast_syscall_32+0x2af/0x480 [ 566.447294][T16345] do_fast_syscall_32+0x6b/0xd0 [ 566.452182][T16345] do_SYSENTER_32+0x73/0x90 [ 566.456840][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.463165][T16345] [ 566.465507][T16345] Uninit was stored to memory at: [ 566.470702][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 566.476515][T16345] __msan_chain_origin+0x50/0x90 [ 566.481450][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 566.486562][T16345] get_compat_msghdr+0x108/0x2b0 [ 566.491496][T16345] do_recvmmsg+0xdba/0x22c0 [ 566.496013][T16345] __sys_recvmmsg+0x5dd/0x610 [ 566.500720][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.506780][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.513029][T16345] __do_fast_syscall_32+0x2af/0x480 [ 566.518290][T16345] do_fast_syscall_32+0x6b/0xd0 [ 566.523160][T16345] do_SYSENTER_32+0x73/0x90 [ 566.527677][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.534004][T16345] [ 566.536371][T16345] Uninit was stored to memory at: [ 566.541395][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 566.547129][T16345] __msan_chain_origin+0x50/0x90 [ 566.552083][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 566.557195][T16345] get_compat_msghdr+0x108/0x2b0 [ 566.562142][T16345] do_recvmmsg+0xdba/0x22c0 [ 566.566654][T16345] __sys_recvmmsg+0x5dd/0x610 [ 566.571354][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.577436][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.583600][T16345] __do_fast_syscall_32+0x2af/0x480 [ 566.588827][T16345] do_fast_syscall_32+0x6b/0xd0 [ 566.593675][T16345] do_SYSENTER_32+0x73/0x90 [ 566.598172][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.604489][T16345] [ 566.606826][T16345] Uninit was stored to memory at: [ 566.611864][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 566.617582][T16345] __msan_chain_origin+0x50/0x90 [ 566.622544][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 566.627685][T16345] get_compat_msghdr+0x108/0x2b0 [ 566.632631][T16345] do_recvmmsg+0xdba/0x22c0 [ 566.637147][T16345] __sys_recvmmsg+0x5dd/0x610 [ 566.641818][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.647899][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.654151][T16345] __do_fast_syscall_32+0x2af/0x480 [ 566.659370][T16345] do_fast_syscall_32+0x6b/0xd0 [ 566.664231][T16345] do_SYSENTER_32+0x73/0x90 [ 566.668746][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.675229][T16345] [ 566.677631][T16345] Uninit was stored to memory at: [ 566.682685][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 566.688418][T16345] __msan_chain_origin+0x50/0x90 [ 566.693370][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 566.698479][T16345] get_compat_msghdr+0x108/0x2b0 [ 566.703428][T16345] do_recvmmsg+0xdba/0x22c0 [ 566.707940][T16345] __sys_recvmmsg+0x5dd/0x610 [ 566.712626][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.718822][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.724985][T16345] __do_fast_syscall_32+0x2af/0x480 [ 566.730195][T16345] do_fast_syscall_32+0x6b/0xd0 [ 566.735055][T16345] do_SYSENTER_32+0x73/0x90 [ 566.739674][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.745985][T16345] [ 566.748306][T16345] Uninit was stored to memory at: [ 566.753358][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 566.759088][T16345] __msan_chain_origin+0x50/0x90 [ 566.764058][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 566.769188][T16345] get_compat_msghdr+0x108/0x2b0 [ 566.774149][T16345] do_recvmmsg+0xdba/0x22c0 [ 566.778677][T16345] __sys_recvmmsg+0x5dd/0x610 [ 566.783479][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 566.789558][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 566.795709][T16345] __do_fast_syscall_32+0x2af/0x480 [ 566.800988][T16345] do_fast_syscall_32+0x6b/0xd0 [ 566.805837][T16345] do_SYSENTER_32+0x73/0x90 [ 566.810402][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 566.816717][T16345] [ 566.819036][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 566.825704][T16345] do_recvmmsg+0xc2/0x22c0 [ 566.830300][T16345] do_recvmmsg+0xc2/0x22c0 [ 567.035774][T16345] not chained 1380000 origins [ 567.040652][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 567.049372][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.059458][T16345] Call Trace: [ 567.062793][T16345] dump_stack+0x21c/0x280 [ 567.067184][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 567.072977][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 567.078216][T16345] ? kmsan_get_metadata+0x116/0x180 [ 567.083554][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 567.089391][T16345] ? kmsan_get_metadata+0x116/0x180 [ 567.094642][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 567.100504][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 567.106640][T16345] ? kmsan_get_metadata+0x116/0x180 [ 567.111980][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 567.117558][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 567.123695][T16345] ? _copy_from_user+0x221/0x330 [ 567.128664][T16345] ? kmsan_get_metadata+0x116/0x180 [ 567.133927][T16345] __msan_chain_origin+0x50/0x90 [ 567.138910][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 567.144071][T16345] get_compat_msghdr+0x108/0x2b0 [ 567.149047][T16345] do_recvmmsg+0xdba/0x22c0 [ 567.153577][T16345] ? __msan_get_context_state+0x9/0x20 [ 567.159074][T16345] ? kmsan_get_metadata+0x116/0x180 [ 567.164343][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 567.170285][T16345] ? kmsan_get_metadata+0x116/0x180 [ 567.175622][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 567.180928][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 567.185707][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 567.190496][T16345] __sys_recvmmsg+0x5dd/0x610 [ 567.195277][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.201398][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.207602][T16345] __do_fast_syscall_32+0x2af/0x480 [ 567.212856][T16345] do_fast_syscall_32+0x6b/0xd0 [ 567.217751][T16345] do_SYSENTER_32+0x73/0x90 [ 567.222349][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.228693][T16345] RIP: 0023:0xf7f31549 [ 567.232767][T16345] Code: Bad RIP value. [ 567.236844][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 567.245274][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 567.253383][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.261369][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.269442][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 567.277432][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.285499][T16345] Uninit was stored to memory at: [ 567.290548][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 567.296289][T16345] __msan_chain_origin+0x50/0x90 [ 567.301252][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 567.306385][T16345] get_compat_msghdr+0x108/0x2b0 [ 567.311362][T16345] do_recvmmsg+0xdba/0x22c0 [ 567.315897][T16345] __sys_recvmmsg+0x5dd/0x610 [ 567.320658][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.326870][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.333049][T16345] __do_fast_syscall_32+0x2af/0x480 [ 567.338267][T16345] do_fast_syscall_32+0x6b/0xd0 [ 567.343149][T16345] do_SYSENTER_32+0x73/0x90 [ 567.347678][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.354009][T16345] [ 567.356350][T16345] Uninit was stored to memory at: [ 567.361403][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 567.367153][T16345] __msan_chain_origin+0x50/0x90 [ 567.372120][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 567.377370][T16345] get_compat_msghdr+0x108/0x2b0 [ 567.382338][T16345] do_recvmmsg+0xdba/0x22c0 [ 567.386860][T16345] __sys_recvmmsg+0x5dd/0x610 [ 567.391554][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.397655][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.403932][T16345] __do_fast_syscall_32+0x2af/0x480 [ 567.409184][T16345] do_fast_syscall_32+0x6b/0xd0 [ 567.414053][T16345] do_SYSENTER_32+0x73/0x90 [ 567.418781][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.425112][T16345] [ 567.427470][T16345] Uninit was stored to memory at: [ 567.432602][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 567.438340][T16345] __msan_chain_origin+0x50/0x90 [ 567.443385][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 567.448519][T16345] get_compat_msghdr+0x108/0x2b0 [ 567.453751][T16345] do_recvmmsg+0xdba/0x22c0 [ 567.458271][T16345] __sys_recvmmsg+0x5dd/0x610 [ 567.462965][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.469064][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.475231][T16345] __do_fast_syscall_32+0x2af/0x480 [ 567.480452][T16345] do_fast_syscall_32+0x6b/0xd0 [ 567.485427][T16345] do_SYSENTER_32+0x73/0x90 [ 567.489957][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.496294][T16345] [ 567.498635][T16345] Uninit was stored to memory at: [ 567.503698][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 567.509434][T16345] __msan_chain_origin+0x50/0x90 [ 567.514399][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 567.519537][T16345] get_compat_msghdr+0x108/0x2b0 [ 567.524493][T16345] do_recvmmsg+0xdba/0x22c0 [ 567.529018][T16345] __sys_recvmmsg+0x5dd/0x610 [ 567.533715][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.539800][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.545969][T16345] __do_fast_syscall_32+0x2af/0x480 [ 567.551191][T16345] do_fast_syscall_32+0x6b/0xd0 [ 567.556068][T16345] do_SYSENTER_32+0x73/0x90 [ 567.560761][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.567095][T16345] [ 567.569445][T16345] Uninit was stored to memory at: [ 567.574494][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 567.580270][T16345] __msan_chain_origin+0x50/0x90 [ 567.585227][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 567.590396][T16345] get_compat_msghdr+0x108/0x2b0 [ 567.595367][T16345] do_recvmmsg+0xdba/0x22c0 [ 567.599884][T16345] __sys_recvmmsg+0x5dd/0x610 [ 567.604582][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.610666][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.616835][T16345] __do_fast_syscall_32+0x2af/0x480 [ 567.622052][T16345] do_fast_syscall_32+0x6b/0xd0 [ 567.627051][T16345] do_SYSENTER_32+0x73/0x90 [ 567.631577][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.637924][T16345] [ 567.640310][T16345] Uninit was stored to memory at: [ 567.645367][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 567.651102][T16345] __msan_chain_origin+0x50/0x90 [ 567.656146][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 567.661287][T16345] get_compat_msghdr+0x108/0x2b0 [ 567.666221][T16345] do_recvmmsg+0xdba/0x22c0 [ 567.670717][T16345] __sys_recvmmsg+0x5dd/0x610 [ 567.675390][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.681449][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.687623][T16345] __do_fast_syscall_32+0x2af/0x480 [ 567.692831][T16345] do_fast_syscall_32+0x6b/0xd0 [ 567.697689][T16345] do_SYSENTER_32+0x73/0x90 [ 567.702186][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.708500][T16345] [ 567.710821][T16345] Uninit was stored to memory at: [ 567.715838][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 567.721550][T16345] __msan_chain_origin+0x50/0x90 [ 567.726483][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 567.731617][T16345] get_compat_msghdr+0x108/0x2b0 [ 567.736563][T16345] do_recvmmsg+0xdba/0x22c0 [ 567.741058][T16345] __sys_recvmmsg+0x5dd/0x610 [ 567.745827][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 567.751922][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 567.758071][T16345] __do_fast_syscall_32+0x2af/0x480 [ 567.763277][T16345] do_fast_syscall_32+0x6b/0xd0 [ 567.768149][T16345] do_SYSENTER_32+0x73/0x90 [ 567.772675][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 567.778999][T16345] [ 567.781320][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 567.787985][T16345] do_recvmmsg+0xc2/0x22c0 [ 567.792391][T16345] do_recvmmsg+0xc2/0x22c0 [ 568.009991][T16345] not chained 1390000 origins [ 568.014992][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 568.023663][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.033810][T16345] Call Trace: [ 568.037100][T16345] dump_stack+0x21c/0x280 [ 568.041436][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 568.047174][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 568.052337][T16345] ? kmsan_get_metadata+0x116/0x180 [ 568.057535][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 568.063368][T16345] ? kmsan_get_metadata+0x116/0x180 [ 568.068577][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 568.074381][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 568.080459][T16345] ? kmsan_get_metadata+0x116/0x180 [ 568.085787][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 568.091347][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 568.097443][T16345] ? _copy_from_user+0x221/0x330 [ 568.102399][T16345] ? kmsan_get_metadata+0x116/0x180 [ 568.107597][T16345] __msan_chain_origin+0x50/0x90 [ 568.112548][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 568.117690][T16345] get_compat_msghdr+0x108/0x2b0 [ 568.122673][T16345] do_recvmmsg+0xdba/0x22c0 [ 568.127253][T16345] ? __msan_get_context_state+0x9/0x20 [ 568.132934][T16345] ? kmsan_get_metadata+0x116/0x180 [ 568.138152][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 568.144269][T16345] ? kmsan_get_metadata+0x116/0x180 [ 568.149575][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 568.154954][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 568.159748][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 568.164530][T16345] __sys_recvmmsg+0x5dd/0x610 [ 568.169505][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.175784][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.182278][T16345] __do_fast_syscall_32+0x2af/0x480 [ 568.187492][T16345] do_fast_syscall_32+0x6b/0xd0 [ 568.192345][T16345] do_SYSENTER_32+0x73/0x90 [ 568.196852][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.203192][T16345] RIP: 0023:0xf7f31549 [ 568.207287][T16345] Code: Bad RIP value. [ 568.211390][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 568.219808][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 568.227807][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.235769][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.243742][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 568.251721][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.259744][T16345] Uninit was stored to memory at: [ 568.264776][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 568.270506][T16345] __msan_chain_origin+0x50/0x90 [ 568.275440][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 568.280562][T16345] get_compat_msghdr+0x108/0x2b0 [ 568.285496][T16345] do_recvmmsg+0xdba/0x22c0 [ 568.289992][T16345] __sys_recvmmsg+0x5dd/0x610 [ 568.294660][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.300716][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.306890][T16345] __do_fast_syscall_32+0x2af/0x480 [ 568.312110][T16345] do_fast_syscall_32+0x6b/0xd0 [ 568.316973][T16345] do_SYSENTER_32+0x73/0x90 [ 568.321519][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.327970][T16345] [ 568.330290][T16345] Uninit was stored to memory at: [ 568.335448][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 568.341207][T16345] __msan_chain_origin+0x50/0x90 [ 568.346502][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 568.351714][T16345] get_compat_msghdr+0x108/0x2b0 [ 568.356648][T16345] do_recvmmsg+0xdba/0x22c0 [ 568.361173][T16345] __sys_recvmmsg+0x5dd/0x610 [ 568.366025][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.372085][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.378241][T16345] __do_fast_syscall_32+0x2af/0x480 [ 568.383462][T16345] do_fast_syscall_32+0x6b/0xd0 [ 568.388320][T16345] do_SYSENTER_32+0x73/0x90 [ 568.392823][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.399140][T16345] [ 568.401460][T16345] Uninit was stored to memory at: [ 568.406573][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 568.412381][T16345] __msan_chain_origin+0x50/0x90 [ 568.417325][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 568.422432][T16345] get_compat_msghdr+0x108/0x2b0 [ 568.427395][T16345] do_recvmmsg+0xdba/0x22c0 [ 568.431907][T16345] __sys_recvmmsg+0x5dd/0x610 [ 568.436746][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.442829][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.449002][T16345] __do_fast_syscall_32+0x2af/0x480 [ 568.454439][T16345] do_fast_syscall_32+0x6b/0xd0 [ 568.459296][T16345] do_SYSENTER_32+0x73/0x90 [ 568.463904][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.470345][T16345] [ 568.472676][T16345] Uninit was stored to memory at: [ 568.477724][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 568.483460][T16345] __msan_chain_origin+0x50/0x90 [ 568.488412][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 568.493524][T16345] get_compat_msghdr+0x108/0x2b0 [ 568.498550][T16345] do_recvmmsg+0xdba/0x22c0 [ 568.503083][T16345] __sys_recvmmsg+0x5dd/0x610 [ 568.507780][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.514220][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.520381][T16345] __do_fast_syscall_32+0x2af/0x480 [ 568.525602][T16345] do_fast_syscall_32+0x6b/0xd0 [ 568.530470][T16345] do_SYSENTER_32+0x73/0x90 [ 568.535005][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.541347][T16345] [ 568.543706][T16345] Uninit was stored to memory at: [ 568.548764][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 568.554484][T16345] __msan_chain_origin+0x50/0x90 [ 568.559628][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 568.564750][T16345] get_compat_msghdr+0x108/0x2b0 [ 568.569702][T16345] do_recvmmsg+0xdba/0x22c0 [ 568.574206][T16345] __sys_recvmmsg+0x5dd/0x610 [ 568.578879][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.584958][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.591127][T16345] __do_fast_syscall_32+0x2af/0x480 [ 568.596473][T16345] do_fast_syscall_32+0x6b/0xd0 [ 568.601334][T16345] do_SYSENTER_32+0x73/0x90 [ 568.605839][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.612167][T16345] [ 568.614487][T16345] Uninit was stored to memory at: [ 568.619511][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 568.625245][T16345] __msan_chain_origin+0x50/0x90 [ 568.630195][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 568.635320][T16345] get_compat_msghdr+0x108/0x2b0 [ 568.640275][T16345] do_recvmmsg+0xdba/0x22c0 [ 568.644788][T16345] __sys_recvmmsg+0x5dd/0x610 [ 568.649493][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.655574][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.661815][T16345] __do_fast_syscall_32+0x2af/0x480 [ 568.667016][T16345] do_fast_syscall_32+0x6b/0xd0 [ 568.671892][T16345] do_SYSENTER_32+0x73/0x90 [ 568.676394][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.682714][T16345] [ 568.685058][T16345] Uninit was stored to memory at: [ 568.690424][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 568.696154][T16345] __msan_chain_origin+0x50/0x90 [ 568.701089][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 568.706338][T16345] get_compat_msghdr+0x108/0x2b0 [ 568.711271][T16345] do_recvmmsg+0xdba/0x22c0 [ 568.715766][T16345] __sys_recvmmsg+0x5dd/0x610 [ 568.720442][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 568.726523][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 568.732674][T16345] __do_fast_syscall_32+0x2af/0x480 [ 568.738204][T16345] do_fast_syscall_32+0x6b/0xd0 [ 568.743260][T16345] do_SYSENTER_32+0x73/0x90 [ 568.747792][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 568.754130][T16345] [ 568.756478][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 568.763174][T16345] do_recvmmsg+0xc2/0x22c0 [ 568.767600][T16345] do_recvmmsg+0xc2/0x22c0 [ 568.990104][T16345] not chained 1400000 origins [ 568.995104][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 569.003805][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.013891][T16345] Call Trace: [ 569.017235][T16345] dump_stack+0x21c/0x280 [ 569.021617][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 569.027387][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 569.032544][T16345] ? kmsan_get_metadata+0x116/0x180 [ 569.037923][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 569.043780][T16345] ? kmsan_get_metadata+0x116/0x180 [ 569.049026][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 569.054878][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 569.061149][T16345] ? kmsan_get_metadata+0x116/0x180 [ 569.066390][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 569.071976][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 569.078215][T16345] ? _copy_from_user+0x221/0x330 [ 569.083280][T16345] ? kmsan_get_metadata+0x116/0x180 [ 569.088605][T16345] __msan_chain_origin+0x50/0x90 [ 569.093587][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 569.099010][T16345] get_compat_msghdr+0x108/0x2b0 [ 569.104132][T16345] do_recvmmsg+0xdba/0x22c0 [ 569.108680][T16345] ? __msan_get_context_state+0x9/0x20 [ 569.114286][T16345] ? kmsan_get_metadata+0x116/0x180 [ 569.119665][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 569.125606][T16345] ? kmsan_get_metadata+0x116/0x180 [ 569.130855][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 569.136294][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 569.141100][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 569.145919][T16345] __sys_recvmmsg+0x5dd/0x610 [ 569.150931][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.157234][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.163664][T16345] __do_fast_syscall_32+0x2af/0x480 [ 569.168926][T16345] do_fast_syscall_32+0x6b/0xd0 [ 569.173917][T16345] do_SYSENTER_32+0x73/0x90 [ 569.178470][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.184984][T16345] RIP: 0023:0xf7f31549 [ 569.189076][T16345] Code: Bad RIP value. [ 569.193182][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 569.201808][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 569.209903][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.218002][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 569.226266][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 569.234280][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.242389][T16345] Uninit was stored to memory at: [ 569.247552][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 569.253497][T16345] __msan_chain_origin+0x50/0x90 [ 569.258708][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 569.264038][T16345] get_compat_msghdr+0x108/0x2b0 [ 569.269022][T16345] do_recvmmsg+0xdba/0x22c0 [ 569.273651][T16345] __sys_recvmmsg+0x5dd/0x610 [ 569.278370][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.284487][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.290683][T16345] __do_fast_syscall_32+0x2af/0x480 [ 569.295924][T16345] do_fast_syscall_32+0x6b/0xd0 [ 569.300969][T16345] do_SYSENTER_32+0x73/0x90 [ 569.305519][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.311866][T16345] [ 569.314216][T16345] Uninit was stored to memory at: [ 569.319372][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 569.325677][T16345] __msan_chain_origin+0x50/0x90 [ 569.330796][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 569.336040][T16345] get_compat_msghdr+0x108/0x2b0 [ 569.341228][T16345] do_recvmmsg+0xdba/0x22c0 [ 569.345770][T16345] __sys_recvmmsg+0x5dd/0x610 [ 569.350489][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.356721][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.362920][T16345] __do_fast_syscall_32+0x2af/0x480 [ 569.368162][T16345] do_fast_syscall_32+0x6b/0xd0 [ 569.373145][T16345] do_SYSENTER_32+0x73/0x90 [ 569.377782][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.384132][T16345] [ 569.386489][T16345] Uninit was stored to memory at: [ 569.391557][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 569.397408][T16345] __msan_chain_origin+0x50/0x90 [ 569.402392][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 569.407647][T16345] get_compat_msghdr+0x108/0x2b0 [ 569.412812][T16345] do_recvmmsg+0xdba/0x22c0 [ 569.417544][T16345] __sys_recvmmsg+0x5dd/0x610 [ 569.422583][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.428791][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.434998][T16345] __do_fast_syscall_32+0x2af/0x480 [ 569.440462][T16345] do_fast_syscall_32+0x6b/0xd0 [ 569.445630][T16345] do_SYSENTER_32+0x73/0x90 [ 569.450352][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.456963][T16345] [ 569.459550][T16345] Uninit was stored to memory at: [ 569.464708][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 569.470472][T16345] __msan_chain_origin+0x50/0x90 [ 569.475454][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 569.480697][T16345] get_compat_msghdr+0x108/0x2b0 [ 569.485781][T16345] do_recvmmsg+0xdba/0x22c0 [ 569.490409][T16345] __sys_recvmmsg+0x5dd/0x610 [ 569.495394][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.501556][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.507800][T16345] __do_fast_syscall_32+0x2af/0x480 [ 569.513049][T16345] do_fast_syscall_32+0x6b/0xd0 [ 569.518272][T16345] do_SYSENTER_32+0x73/0x90 [ 569.522818][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.529174][T16345] [ 569.531521][T16345] Uninit was stored to memory at: [ 569.536780][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 569.542827][T16345] __msan_chain_origin+0x50/0x90 [ 569.547813][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 569.552985][T16345] get_compat_msghdr+0x108/0x2b0 [ 569.558045][T16345] do_recvmmsg+0xdba/0x22c0 [ 569.562574][T16345] __sys_recvmmsg+0x5dd/0x610 [ 569.569299][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.575582][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.582575][T16345] __do_fast_syscall_32+0x2af/0x480 [ 569.587936][T16345] do_fast_syscall_32+0x6b/0xd0 [ 569.592912][T16345] do_SYSENTER_32+0x73/0x90 [ 569.597581][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.604001][T16345] [ 569.606510][T16345] Uninit was stored to memory at: [ 569.611554][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 569.617354][T16345] __msan_chain_origin+0x50/0x90 [ 569.622452][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 569.627600][T16345] get_compat_msghdr+0x108/0x2b0 [ 569.632654][T16345] do_recvmmsg+0xdba/0x22c0 [ 569.637197][T16345] __sys_recvmmsg+0x5dd/0x610 [ 569.641944][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.648028][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.654466][T16345] __do_fast_syscall_32+0x2af/0x480 [ 569.659831][T16345] do_fast_syscall_32+0x6b/0xd0 [ 569.664714][T16345] do_SYSENTER_32+0x73/0x90 [ 569.669441][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.675763][T16345] [ 569.678222][T16345] Uninit was stored to memory at: [ 569.683279][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 569.689230][T16345] __msan_chain_origin+0x50/0x90 [ 569.694209][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 569.699358][T16345] get_compat_msghdr+0x108/0x2b0 [ 569.704330][T16345] do_recvmmsg+0xdba/0x22c0 [ 569.708850][T16345] __sys_recvmmsg+0x5dd/0x610 [ 569.713562][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 569.719662][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 569.725933][T16345] __do_fast_syscall_32+0x2af/0x480 [ 569.731158][T16345] do_fast_syscall_32+0x6b/0xd0 [ 569.736029][T16345] do_SYSENTER_32+0x73/0x90 [ 569.741133][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 569.747506][T16345] [ 569.750140][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 569.756896][T16345] do_recvmmsg+0xc2/0x22c0 [ 569.761326][T16345] do_recvmmsg+0xc2/0x22c0 [ 569.960954][T16345] not chained 1410000 origins [ 569.966086][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 569.975035][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.985256][T16345] Call Trace: [ 569.988606][T16345] dump_stack+0x21c/0x280 [ 569.993114][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 569.999169][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 570.004422][T16345] ? kmsan_get_metadata+0x116/0x180 [ 570.009748][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 570.015716][T16345] ? kmsan_get_metadata+0x116/0x180 [ 570.021101][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 570.026942][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 570.033237][T16345] ? kmsan_get_metadata+0x116/0x180 [ 570.038534][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 570.044268][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 570.050543][T16345] ? _copy_from_user+0x221/0x330 [ 570.055559][T16345] ? kmsan_get_metadata+0x116/0x180 [ 570.060799][T16345] __msan_chain_origin+0x50/0x90 [ 570.065916][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 570.071279][T16345] get_compat_msghdr+0x108/0x2b0 [ 570.076259][T16345] do_recvmmsg+0xdba/0x22c0 [ 570.080877][T16345] ? __msan_get_context_state+0x9/0x20 [ 570.086372][T16345] ? kmsan_get_metadata+0x116/0x180 [ 570.091800][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 570.097789][T16345] ? kmsan_get_metadata+0x116/0x180 [ 570.103208][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 570.108584][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 570.113425][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 570.118322][T16345] __sys_recvmmsg+0x5dd/0x610 [ 570.123065][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.129447][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.136028][T16345] __do_fast_syscall_32+0x2af/0x480 [ 570.141515][T16345] do_fast_syscall_32+0x6b/0xd0 [ 570.146400][T16345] do_SYSENTER_32+0x73/0x90 [ 570.150954][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.157368][T16345] RIP: 0023:0xf7f31549 [ 570.161448][T16345] Code: Bad RIP value. [ 570.165548][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 570.174286][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 570.182537][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 570.190713][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 570.198712][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 570.206808][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.215034][T16345] Uninit was stored to memory at: [ 570.220109][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 570.225963][T16345] __msan_chain_origin+0x50/0x90 [ 570.231205][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 570.236342][T16345] get_compat_msghdr+0x108/0x2b0 [ 570.241302][T16345] do_recvmmsg+0xdba/0x22c0 [ 570.245859][T16345] __sys_recvmmsg+0x5dd/0x610 [ 570.250660][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.257269][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.263468][T16345] __do_fast_syscall_32+0x2af/0x480 [ 570.268705][T16345] do_fast_syscall_32+0x6b/0xd0 [ 570.273727][T16345] do_SYSENTER_32+0x73/0x90 [ 570.278253][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.284590][T16345] [ 570.287136][T16345] Uninit was stored to memory at: [ 570.292461][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 570.298372][T16345] __msan_chain_origin+0x50/0x90 [ 570.303673][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 570.308832][T16345] get_compat_msghdr+0x108/0x2b0 [ 570.314027][T16345] do_recvmmsg+0xdba/0x22c0 [ 570.318582][T16345] __sys_recvmmsg+0x5dd/0x610 [ 570.323618][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.329885][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.336316][T16345] __do_fast_syscall_32+0x2af/0x480 [ 570.341789][T16345] do_fast_syscall_32+0x6b/0xd0 [ 570.346787][T16345] do_SYSENTER_32+0x73/0x90 [ 570.351310][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.357881][T16345] [ 570.360340][T16345] Uninit was stored to memory at: [ 570.365408][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 570.371420][T16345] __msan_chain_origin+0x50/0x90 [ 570.376544][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 570.381869][T16345] get_compat_msghdr+0x108/0x2b0 [ 570.386834][T16345] do_recvmmsg+0xdba/0x22c0 [ 570.391494][T16345] __sys_recvmmsg+0x5dd/0x610 [ 570.396337][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.402575][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.409032][T16345] __do_fast_syscall_32+0x2af/0x480 [ 570.414263][T16345] do_fast_syscall_32+0x6b/0xd0 [ 570.419235][T16345] do_SYSENTER_32+0x73/0x90 [ 570.424281][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.430639][T16345] [ 570.433239][T16345] Uninit was stored to memory at: [ 570.438578][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 570.444793][T16345] __msan_chain_origin+0x50/0x90 [ 570.449788][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 570.454972][T16345] get_compat_msghdr+0x108/0x2b0 [ 570.460260][T16345] do_recvmmsg+0xdba/0x22c0 [ 570.465036][T16345] __sys_recvmmsg+0x5dd/0x610 [ 570.470018][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.476223][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.482591][T16345] __do_fast_syscall_32+0x2af/0x480 [ 570.488106][T16345] do_fast_syscall_32+0x6b/0xd0 [ 570.493138][T16345] do_SYSENTER_32+0x73/0x90 [ 570.497803][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.504154][T16345] [ 570.506512][T16345] Uninit was stored to memory at: [ 570.511772][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 570.517749][T16345] __msan_chain_origin+0x50/0x90 [ 570.523002][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 570.528251][T16345] get_compat_msghdr+0x108/0x2b0 [ 570.533394][T16345] do_recvmmsg+0xdba/0x22c0 [ 570.538109][T16345] __sys_recvmmsg+0x5dd/0x610 [ 570.542969][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.549245][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.555531][T16345] __do_fast_syscall_32+0x2af/0x480 [ 570.560785][T16345] do_fast_syscall_32+0x6b/0xd0 [ 570.565683][T16345] do_SYSENTER_32+0x73/0x90 [ 570.570245][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.576661][T16345] [ 570.579165][T16345] Uninit was stored to memory at: [ 570.584275][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 570.590181][T16345] __msan_chain_origin+0x50/0x90 [ 570.595213][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 570.600425][T16345] get_compat_msghdr+0x108/0x2b0 [ 570.605409][T16345] do_recvmmsg+0xdba/0x22c0 [ 570.609963][T16345] __sys_recvmmsg+0x5dd/0x610 [ 570.614877][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.621134][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.627484][T16345] __do_fast_syscall_32+0x2af/0x480 [ 570.632903][T16345] do_fast_syscall_32+0x6b/0xd0 [ 570.637928][T16345] do_SYSENTER_32+0x73/0x90 [ 570.642594][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.648954][T16345] [ 570.651311][T16345] Uninit was stored to memory at: [ 570.656673][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 570.662564][T16345] __msan_chain_origin+0x50/0x90 [ 570.667564][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 570.673790][T16345] get_compat_msghdr+0x108/0x2b0 [ 570.678771][T16345] do_recvmmsg+0xdba/0x22c0 [ 570.683436][T16345] __sys_recvmmsg+0x5dd/0x610 [ 570.688200][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 570.694290][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 570.701149][T16345] __do_fast_syscall_32+0x2af/0x480 [ 570.706464][T16345] do_fast_syscall_32+0x6b/0xd0 [ 570.711345][T16345] do_SYSENTER_32+0x73/0x90 [ 570.716073][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 570.722785][T16345] [ 570.725167][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 570.732148][T16345] do_recvmmsg+0xc2/0x22c0 [ 570.736971][T16345] do_recvmmsg+0xc2/0x22c0 [ 571.048189][T16345] not chained 1420000 origins [ 571.052973][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 571.061942][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.072128][T16345] Call Trace: [ 571.075477][T16345] dump_stack+0x21c/0x280 [ 571.079870][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 571.085746][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 571.090948][T16345] ? kmsan_get_metadata+0x116/0x180 [ 571.096285][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 571.102163][T16345] ? kmsan_get_metadata+0x116/0x180 [ 571.107443][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 571.113347][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 571.113372][T16345] ? kmsan_get_metadata+0x116/0x180 [ 571.113394][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 571.113421][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 571.113455][T16345] ? _copy_from_user+0x221/0x330 [ 571.113483][T16345] ? kmsan_get_metadata+0x116/0x180 [ 571.113553][T16345] __msan_chain_origin+0x50/0x90 [ 571.152632][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 571.157966][T16345] get_compat_msghdr+0x108/0x2b0 [ 571.163030][T16345] do_recvmmsg+0xdba/0x22c0 [ 571.167726][T16345] ? __msan_get_context_state+0x9/0x20 [ 571.173550][T16345] ? kmsan_get_metadata+0x116/0x180 [ 571.178807][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 571.184738][T16345] ? kmsan_get_metadata+0x116/0x180 [ 571.190090][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 571.195662][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 571.200470][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 571.205371][T16345] __sys_recvmmsg+0x5dd/0x610 [ 571.210087][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.216603][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.222964][T16345] __do_fast_syscall_32+0x2af/0x480 [ 571.228264][T16345] do_fast_syscall_32+0x6b/0xd0 [ 571.233399][T16345] do_SYSENTER_32+0x73/0x90 [ 571.237970][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.244572][T16345] RIP: 0023:0xf7f31549 [ 571.248658][T16345] Code: Bad RIP value. [ 571.252942][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 571.261580][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 571.269820][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.277947][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.286354][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 571.294560][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.302790][T16345] Uninit was stored to memory at: [ 571.307890][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 571.313832][T16345] __msan_chain_origin+0x50/0x90 [ 571.318917][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 571.324247][T16345] get_compat_msghdr+0x108/0x2b0 [ 571.329209][T16345] do_recvmmsg+0xdba/0x22c0 [ 571.333975][T16345] __sys_recvmmsg+0x5dd/0x610 [ 571.338712][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.344837][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.351028][T16345] __do_fast_syscall_32+0x2af/0x480 [ 571.356492][T16345] do_fast_syscall_32+0x6b/0xd0 [ 571.361543][T16345] do_SYSENTER_32+0x73/0x90 [ 571.366188][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.372657][T16345] [ 571.375011][T16345] Uninit was stored to memory at: [ 571.380347][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 571.386176][T16345] __msan_chain_origin+0x50/0x90 [ 571.391186][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 571.396519][T16345] get_compat_msghdr+0x108/0x2b0 [ 571.401596][T16345] do_recvmmsg+0xdba/0x22c0 [ 571.406208][T16345] __sys_recvmmsg+0x5dd/0x610 [ 571.411210][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.417324][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.423639][T16345] __do_fast_syscall_32+0x2af/0x480 [ 571.428866][T16345] do_fast_syscall_32+0x6b/0xd0 [ 571.433746][T16345] do_SYSENTER_32+0x73/0x90 [ 571.438401][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.445424][T16345] [ 571.447888][T16345] Uninit was stored to memory at: [ 571.452965][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 571.458934][T16345] __msan_chain_origin+0x50/0x90 [ 571.463895][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 571.469239][T16345] get_compat_msghdr+0x108/0x2b0 [ 571.474387][T16345] do_recvmmsg+0xdba/0x22c0 [ 571.479051][T16345] __sys_recvmmsg+0x5dd/0x610 [ 571.483911][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.490182][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.496624][T16345] __do_fast_syscall_32+0x2af/0x480 [ 571.502078][T16345] do_fast_syscall_32+0x6b/0xd0 [ 571.507167][T16345] do_SYSENTER_32+0x73/0x90 [ 571.511739][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.518207][T16345] [ 571.520597][T16345] Uninit was stored to memory at: [ 571.525765][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 571.531962][T16345] __msan_chain_origin+0x50/0x90 [ 571.537492][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 571.542808][T16345] get_compat_msghdr+0x108/0x2b0 [ 571.547907][T16345] do_recvmmsg+0xdba/0x22c0 [ 571.552603][T16345] __sys_recvmmsg+0x5dd/0x610 [ 571.557331][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.563528][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.569883][T16345] __do_fast_syscall_32+0x2af/0x480 [ 571.575108][T16345] do_fast_syscall_32+0x6b/0xd0 [ 571.580190][T16345] do_SYSENTER_32+0x73/0x90 [ 571.584719][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.591177][T16345] [ 571.593513][T16345] Uninit was stored to memory at: [ 571.598929][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 571.605243][T16345] __msan_chain_origin+0x50/0x90 [ 571.610560][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 571.615920][T16345] get_compat_msghdr+0x108/0x2b0 [ 571.621236][T16345] do_recvmmsg+0xdba/0x22c0 [ 571.625989][T16345] __sys_recvmmsg+0x5dd/0x610 [ 571.630688][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.636809][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.643132][T16345] __do_fast_syscall_32+0x2af/0x480 [ 571.648560][T16345] do_fast_syscall_32+0x6b/0xd0 [ 571.653804][T16345] do_SYSENTER_32+0x73/0x90 [ 571.658436][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.664902][T16345] [ 571.667421][T16345] Uninit was stored to memory at: [ 571.672606][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 571.678601][T16345] __msan_chain_origin+0x50/0x90 [ 571.683772][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 571.689192][T16345] get_compat_msghdr+0x108/0x2b0 [ 571.694266][T16345] do_recvmmsg+0xdba/0x22c0 [ 571.698790][T16345] __sys_recvmmsg+0x5dd/0x610 [ 571.703693][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.709793][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.716025][T16345] __do_fast_syscall_32+0x2af/0x480 [ 571.721394][T16345] do_fast_syscall_32+0x6b/0xd0 [ 571.726531][T16345] do_SYSENTER_32+0x73/0x90 [ 571.731194][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.737651][T16345] [ 571.739991][T16345] Uninit was stored to memory at: [ 571.745057][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 571.750822][T16345] __msan_chain_origin+0x50/0x90 [ 571.755927][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 571.761064][T16345] get_compat_msghdr+0x108/0x2b0 [ 571.766214][T16345] do_recvmmsg+0xdba/0x22c0 [ 571.770875][T16345] __sys_recvmmsg+0x5dd/0x610 [ 571.775580][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 571.781838][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 571.788025][T16345] __do_fast_syscall_32+0x2af/0x480 [ 571.793434][T16345] do_fast_syscall_32+0x6b/0xd0 [ 571.798432][T16345] do_SYSENTER_32+0x73/0x90 [ 571.803199][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 571.809619][T16345] [ 571.811955][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 571.819176][T16345] do_recvmmsg+0xc2/0x22c0 [ 571.823835][T16345] do_recvmmsg+0xc2/0x22c0 [ 572.093442][T16345] not chained 1430000 origins [ 572.098450][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 572.107362][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.117674][T16345] Call Trace: [ 572.121023][T16345] dump_stack+0x21c/0x280 [ 572.125433][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 572.131230][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 572.137052][T16345] ? kmsan_get_metadata+0x116/0x180 [ 572.142318][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 572.148206][T16345] ? kmsan_get_metadata+0x116/0x180 [ 572.153557][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 572.159523][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 572.165652][T16345] ? kmsan_get_metadata+0x116/0x180 [ 572.171024][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 572.176730][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 572.182868][T16345] ? _copy_from_user+0x221/0x330 [ 572.188089][T16345] ? kmsan_get_metadata+0x116/0x180 [ 572.193356][T16345] __msan_chain_origin+0x50/0x90 [ 572.198504][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 572.204026][T16345] get_compat_msghdr+0x108/0x2b0 [ 572.209126][T16345] do_recvmmsg+0xdba/0x22c0 [ 572.213707][T16345] ? __msan_get_context_state+0x9/0x20 [ 572.219566][T16345] ? kmsan_get_metadata+0x116/0x180 [ 572.224845][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 572.231017][T16345] ? kmsan_get_metadata+0x116/0x180 [ 572.236293][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 572.241649][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 572.246470][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 572.251476][T16345] __sys_recvmmsg+0x5dd/0x610 [ 572.256330][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.262483][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.268900][T16345] __do_fast_syscall_32+0x2af/0x480 [ 572.274264][T16345] do_fast_syscall_32+0x6b/0xd0 [ 572.279347][T16345] do_SYSENTER_32+0x73/0x90 [ 572.284194][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.290574][T16345] RIP: 0023:0xf7f31549 [ 572.294776][T16345] Code: Bad RIP value. [ 572.299054][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 572.307525][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 572.315798][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.323823][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.332205][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 572.340395][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.348413][T16345] Uninit was stored to memory at: [ 572.353685][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 572.359611][T16345] __msan_chain_origin+0x50/0x90 [ 572.364720][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 572.370244][T16345] get_compat_msghdr+0x108/0x2b0 [ 572.375230][T16345] do_recvmmsg+0xdba/0x22c0 [ 572.380051][T16345] __sys_recvmmsg+0x5dd/0x610 [ 572.384832][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.391223][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.397669][T16345] __do_fast_syscall_32+0x2af/0x480 [ 572.402941][T16345] do_fast_syscall_32+0x6b/0xd0 [ 572.407862][T16345] do_SYSENTER_32+0x73/0x90 [ 572.412432][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.419039][T16345] [ 572.421418][T16345] Uninit was stored to memory at: [ 572.426521][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 572.432375][T16345] __msan_chain_origin+0x50/0x90 [ 572.437762][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 572.443046][T16345] get_compat_msghdr+0x108/0x2b0 [ 572.448053][T16345] do_recvmmsg+0xdba/0x22c0 [ 572.452800][T16345] __sys_recvmmsg+0x5dd/0x610 [ 572.457549][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.464196][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.470980][T16345] __do_fast_syscall_32+0x2af/0x480 [ 572.476701][T16345] do_fast_syscall_32+0x6b/0xd0 [ 572.481674][T16345] do_SYSENTER_32+0x73/0x90 [ 572.486209][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.492856][T16345] [ 572.495314][T16345] Uninit was stored to memory at: [ 572.500374][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 572.506135][T16345] __msan_chain_origin+0x50/0x90 [ 572.511589][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 572.516848][T16345] get_compat_msghdr+0x108/0x2b0 [ 572.521999][T16345] do_recvmmsg+0xdba/0x22c0 [ 572.526770][T16345] __sys_recvmmsg+0x5dd/0x610 [ 572.531684][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.537999][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.544300][T16345] __do_fast_syscall_32+0x2af/0x480 [ 572.549735][T16345] do_fast_syscall_32+0x6b/0xd0 [ 572.554809][T16345] do_SYSENTER_32+0x73/0x90 [ 572.559380][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.565948][T16345] [ 572.568510][T16345] Uninit was stored to memory at: [ 572.573584][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 572.579578][T16345] __msan_chain_origin+0x50/0x90 [ 572.584610][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 572.589751][T16345] get_compat_msghdr+0x108/0x2b0 [ 572.594734][T16345] do_recvmmsg+0xdba/0x22c0 [ 572.599330][T16345] __sys_recvmmsg+0x5dd/0x610 [ 572.604037][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.610222][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.616576][T16345] __do_fast_syscall_32+0x2af/0x480 [ 572.621927][T16345] do_fast_syscall_32+0x6b/0xd0 [ 572.626811][T16345] do_SYSENTER_32+0x73/0x90 [ 572.631619][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.638076][T16345] [ 572.640583][T16345] Uninit was stored to memory at: [ 572.645787][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 572.651667][T16345] __msan_chain_origin+0x50/0x90 [ 572.656654][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 572.661806][T16345] get_compat_msghdr+0x108/0x2b0 [ 572.666897][T16345] do_recvmmsg+0xdba/0x22c0 [ 572.671420][T16345] __sys_recvmmsg+0x5dd/0x610 [ 572.676172][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.682308][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.688572][T16345] __do_fast_syscall_32+0x2af/0x480 [ 572.694138][T16345] do_fast_syscall_32+0x6b/0xd0 [ 572.699045][T16345] do_SYSENTER_32+0x73/0x90 [ 572.703731][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.710242][T16345] [ 572.712590][T16345] Uninit was stored to memory at: [ 572.717756][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 572.723710][T16345] __msan_chain_origin+0x50/0x90 [ 572.728721][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 572.733872][T16345] get_compat_msghdr+0x108/0x2b0 [ 572.738844][T16345] do_recvmmsg+0xdba/0x22c0 [ 572.743621][T16345] __sys_recvmmsg+0x5dd/0x610 [ 572.748652][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.755205][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.761825][T16345] __do_fast_syscall_32+0x2af/0x480 [ 572.767064][T16345] do_fast_syscall_32+0x6b/0xd0 [ 572.772134][T16345] do_SYSENTER_32+0x73/0x90 [ 572.776796][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.783515][T16345] [ 572.785848][T16345] Uninit was stored to memory at: [ 572.790914][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 572.797088][T16345] __msan_chain_origin+0x50/0x90 [ 572.802101][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 572.807246][T16345] get_compat_msghdr+0x108/0x2b0 [ 572.812336][T16345] do_recvmmsg+0xdba/0x22c0 [ 572.816855][T16345] __sys_recvmmsg+0x5dd/0x610 [ 572.821562][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 572.827745][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 572.833939][T16345] __do_fast_syscall_32+0x2af/0x480 [ 572.840570][T16345] do_fast_syscall_32+0x6b/0xd0 [ 572.845536][T16345] do_SYSENTER_32+0x73/0x90 [ 572.850176][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 572.856511][T16345] [ 572.858856][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 572.865554][T16345] do_recvmmsg+0xc2/0x22c0 [ 572.870199][T16345] do_recvmmsg+0xc2/0x22c0 [ 573.111712][T16345] not chained 1440000 origins [ 573.116888][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 573.125683][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.135998][T16345] Call Trace: [ 573.139522][T16345] dump_stack+0x21c/0x280 [ 573.143920][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 573.149709][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 573.155074][T16345] ? kmsan_get_metadata+0x116/0x180 [ 573.160440][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 573.166313][T16345] ? kmsan_get_metadata+0x116/0x180 [ 573.171578][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 573.177603][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 573.183902][T16345] ? kmsan_get_metadata+0x116/0x180 [ 573.189159][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 573.194774][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 573.200909][T16345] ? _copy_from_user+0x221/0x330 [ 573.206005][T16345] ? kmsan_get_metadata+0x116/0x180 [ 573.211454][T16345] __msan_chain_origin+0x50/0x90 [ 573.216620][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 573.221905][T16345] get_compat_msghdr+0x108/0x2b0 [ 573.226909][T16345] do_recvmmsg+0xdba/0x22c0 [ 573.231469][T16345] ? __msan_get_context_state+0x9/0x20 [ 573.237209][T16345] ? kmsan_get_metadata+0x116/0x180 [ 573.242483][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 573.248745][T16345] ? kmsan_get_metadata+0x116/0x180 [ 573.254014][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 573.259505][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 573.264546][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 573.269366][T16345] __sys_recvmmsg+0x5dd/0x610 [ 573.274132][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.280376][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.286650][T16345] __do_fast_syscall_32+0x2af/0x480 [ 573.292029][T16345] do_fast_syscall_32+0x6b/0xd0 [ 573.297213][T16345] do_SYSENTER_32+0x73/0x90 [ 573.302120][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.308800][T16345] RIP: 0023:0xf7f31549 [ 573.313015][T16345] Code: Bad RIP value. [ 573.317124][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 573.326277][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 573.334456][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.342789][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.351059][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 573.359614][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.371739][T16345] Uninit was stored to memory at: [ 573.376884][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 573.383188][T16345] __msan_chain_origin+0x50/0x90 [ 573.388414][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 573.393871][T16345] get_compat_msghdr+0x108/0x2b0 [ 573.398840][T16345] do_recvmmsg+0xdba/0x22c0 [ 573.403489][T16345] __sys_recvmmsg+0x5dd/0x610 [ 573.408500][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.414617][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.420994][T16345] __do_fast_syscall_32+0x2af/0x480 [ 573.426343][T16345] do_fast_syscall_32+0x6b/0xd0 [ 573.431429][T16345] do_SYSENTER_32+0x73/0x90 [ 573.436217][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.443045][T16345] [ 573.445411][T16345] Uninit was stored to memory at: [ 573.450673][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 573.456417][T16345] __msan_chain_origin+0x50/0x90 [ 573.461552][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 573.466693][T16345] get_compat_msghdr+0x108/0x2b0 [ 573.472010][T16345] do_recvmmsg+0xdba/0x22c0 [ 573.476684][T16345] __sys_recvmmsg+0x5dd/0x610 [ 573.481382][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.487477][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.493842][T16345] __do_fast_syscall_32+0x2af/0x480 [ 573.499205][T16345] do_fast_syscall_32+0x6b/0xd0 [ 573.504250][T16345] do_SYSENTER_32+0x73/0x90 [ 573.508938][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.515290][T16345] [ 573.517666][T16345] Uninit was stored to memory at: [ 573.523089][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 573.529327][T16345] __msan_chain_origin+0x50/0x90 [ 573.534330][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 573.539636][T16345] get_compat_msghdr+0x108/0x2b0 [ 573.544606][T16345] do_recvmmsg+0xdba/0x22c0 [ 573.549123][T16345] __sys_recvmmsg+0x5dd/0x610 [ 573.553972][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.560178][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.566357][T16345] __do_fast_syscall_32+0x2af/0x480 [ 573.571882][T16345] do_fast_syscall_32+0x6b/0xd0 [ 573.577067][T16345] do_SYSENTER_32+0x73/0x90 [ 573.581885][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.588489][T16345] [ 573.590877][T16345] Uninit was stored to memory at: [ 573.596145][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 573.601881][T16345] __msan_chain_origin+0x50/0x90 [ 573.606929][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 573.612254][T16345] get_compat_msghdr+0x108/0x2b0 [ 573.617456][T16345] do_recvmmsg+0xdba/0x22c0 [ 573.622154][T16345] __sys_recvmmsg+0x5dd/0x610 [ 573.626853][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.633080][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.639453][T16345] __do_fast_syscall_32+0x2af/0x480 [ 573.644683][T16345] do_fast_syscall_32+0x6b/0xd0 [ 573.649659][T16345] do_SYSENTER_32+0x73/0x90 [ 573.654467][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.660812][T16345] [ 573.663151][T16345] Uninit was stored to memory at: [ 573.668227][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 573.674188][T16345] __msan_chain_origin+0x50/0x90 [ 573.679558][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 573.684686][T16345] get_compat_msghdr+0x108/0x2b0 [ 573.690065][T16345] do_recvmmsg+0xdba/0x22c0 [ 573.694602][T16345] __sys_recvmmsg+0x5dd/0x610 [ 573.699445][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.705765][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.712043][T16345] __do_fast_syscall_32+0x2af/0x480 [ 573.717316][T16345] do_fast_syscall_32+0x6b/0xd0 [ 573.722187][T16345] do_SYSENTER_32+0x73/0x90 [ 573.726850][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.733185][T16345] [ 573.735545][T16345] Uninit was stored to memory at: [ 573.740784][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 573.746525][T16345] __msan_chain_origin+0x50/0x90 [ 573.751741][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 573.756888][T16345] get_compat_msghdr+0x108/0x2b0 [ 573.761855][T16345] do_recvmmsg+0xdba/0x22c0 [ 573.766378][T16345] __sys_recvmmsg+0x5dd/0x610 [ 573.771069][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.777176][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.783391][T16345] __do_fast_syscall_32+0x2af/0x480 [ 573.788625][T16345] do_fast_syscall_32+0x6b/0xd0 [ 573.793600][T16345] do_SYSENTER_32+0x73/0x90 [ 573.798161][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.804577][T16345] [ 573.807065][T16345] Uninit was stored to memory at: [ 573.812190][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 573.818068][T16345] __msan_chain_origin+0x50/0x90 [ 573.823041][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 573.828298][T16345] get_compat_msghdr+0x108/0x2b0 [ 573.833351][T16345] do_recvmmsg+0xdba/0x22c0 [ 573.838186][T16345] __sys_recvmmsg+0x5dd/0x610 [ 573.843109][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 573.849410][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 573.855584][T16345] __do_fast_syscall_32+0x2af/0x480 [ 573.861045][T16345] do_fast_syscall_32+0x6b/0xd0 [ 573.865925][T16345] do_SYSENTER_32+0x73/0x90 [ 573.870457][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 573.876782][T16345] [ 573.879111][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 573.886093][T16345] do_recvmmsg+0xc2/0x22c0 [ 573.890656][T16345] do_recvmmsg+0xc2/0x22c0 [ 574.180992][T16345] not chained 1450000 origins [ 574.186070][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 574.195043][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.205224][T16345] Call Trace: [ 574.208810][T16345] dump_stack+0x21c/0x280 [ 574.213159][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 574.219034][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 574.224258][T16345] ? kmsan_get_metadata+0x116/0x180 [ 574.229520][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 574.235349][T16345] ? kmsan_get_metadata+0x116/0x180 [ 574.240616][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 574.246435][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 574.252531][T16345] ? kmsan_get_metadata+0x116/0x180 [ 574.257923][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 574.263488][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 574.269626][T16345] ? _copy_from_user+0x221/0x330 [ 574.274648][T16345] ? kmsan_get_metadata+0x116/0x180 [ 574.280050][T16345] __msan_chain_origin+0x50/0x90 [ 574.285010][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 574.290685][T16345] get_compat_msghdr+0x108/0x2b0 [ 574.295703][T16345] do_recvmmsg+0xdba/0x22c0 [ 574.300225][T16345] ? __msan_get_context_state+0x9/0x20 [ 574.305793][T16345] ? kmsan_get_metadata+0x116/0x180 [ 574.311060][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 574.317321][T16345] ? kmsan_get_metadata+0x116/0x180 [ 574.322766][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 574.328074][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 574.332852][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 574.337634][T16345] __sys_recvmmsg+0x5dd/0x610 [ 574.342345][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.348719][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.355027][T16345] __do_fast_syscall_32+0x2af/0x480 [ 574.360426][T16345] do_fast_syscall_32+0x6b/0xd0 [ 574.365761][T16345] do_SYSENTER_32+0x73/0x90 [ 574.370587][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.376929][T16345] RIP: 0023:0xf7f31549 [ 574.380995][T16345] Code: Bad RIP value. [ 574.385201][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 574.394054][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 574.402215][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.410381][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.418574][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 574.426835][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.434970][T16345] Uninit was stored to memory at: [ 574.440180][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 574.446329][T16345] __msan_chain_origin+0x50/0x90 [ 574.451884][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 574.457036][T16345] get_compat_msghdr+0x108/0x2b0 [ 574.462107][T16345] do_recvmmsg+0xdba/0x22c0 [ 574.466634][T16345] __sys_recvmmsg+0x5dd/0x610 [ 574.471458][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.477547][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.483776][T16345] __do_fast_syscall_32+0x2af/0x480 [ 574.488991][T16345] do_fast_syscall_32+0x6b/0xd0 [ 574.493852][T16345] do_SYSENTER_32+0x73/0x90 [ 574.498450][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.504916][T16345] [ 574.507406][T16345] Uninit was stored to memory at: [ 574.512602][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 574.518457][T16345] __msan_chain_origin+0x50/0x90 [ 574.523540][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 574.528872][T16345] get_compat_msghdr+0x108/0x2b0 [ 574.533820][T16345] do_recvmmsg+0xdba/0x22c0 [ 574.538438][T16345] __sys_recvmmsg+0x5dd/0x610 [ 574.543267][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.549362][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.555586][T16345] __do_fast_syscall_32+0x2af/0x480 [ 574.560930][T16345] do_fast_syscall_32+0x6b/0xd0 [ 574.565792][T16345] do_SYSENTER_32+0x73/0x90 [ 574.570317][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.576642][T16345] [ 574.578970][T16345] Uninit was stored to memory at: [ 574.584018][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 574.589751][T16345] __msan_chain_origin+0x50/0x90 [ 574.594703][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 574.599824][T16345] get_compat_msghdr+0x108/0x2b0 [ 574.604768][T16345] do_recvmmsg+0xdba/0x22c0 [ 574.609314][T16345] __sys_recvmmsg+0x5dd/0x610 [ 574.614037][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.620118][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.626319][T16345] __do_fast_syscall_32+0x2af/0x480 [ 574.631525][T16345] do_fast_syscall_32+0x6b/0xd0 [ 574.636383][T16345] do_SYSENTER_32+0x73/0x90 [ 574.640896][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.647211][T16345] [ 574.649532][T16345] Uninit was stored to memory at: [ 574.654562][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 574.660307][T16345] __msan_chain_origin+0x50/0x90 [ 574.665270][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 574.670406][T16345] get_compat_msghdr+0x108/0x2b0 [ 574.675346][T16345] do_recvmmsg+0xdba/0x22c0 [ 574.679849][T16345] __sys_recvmmsg+0x5dd/0x610 [ 574.684527][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.690610][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.696778][T16345] __do_fast_syscall_32+0x2af/0x480 [ 574.701988][T16345] do_fast_syscall_32+0x6b/0xd0 [ 574.706855][T16345] do_SYSENTER_32+0x73/0x90 [ 574.711364][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.717680][T16345] [ 574.720004][T16345] Uninit was stored to memory at: [ 574.725031][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 574.730747][T16345] __msan_chain_origin+0x50/0x90 [ 574.735688][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 574.740798][T16345] get_compat_msghdr+0x108/0x2b0 [ 574.745753][T16345] do_recvmmsg+0xdba/0x22c0 [ 574.750257][T16345] __sys_recvmmsg+0x5dd/0x610 [ 574.754952][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.761033][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.767202][T16345] __do_fast_syscall_32+0x2af/0x480 [ 574.772412][T16345] do_fast_syscall_32+0x6b/0xd0 [ 574.777270][T16345] do_SYSENTER_32+0x73/0x90 [ 574.781800][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.788113][T16345] [ 574.790430][T16345] Uninit was stored to memory at: [ 574.795470][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 574.801201][T16345] __msan_chain_origin+0x50/0x90 [ 574.806141][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 574.811254][T16345] get_compat_msghdr+0x108/0x2b0 [ 574.816195][T16345] do_recvmmsg+0xdba/0x22c0 [ 574.820707][T16345] __sys_recvmmsg+0x5dd/0x610 [ 574.825384][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.831451][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.837629][T16345] __do_fast_syscall_32+0x2af/0x480 [ 574.842827][T16345] do_fast_syscall_32+0x6b/0xd0 [ 574.847676][T16345] do_SYSENTER_32+0x73/0x90 [ 574.852178][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.858487][T16345] [ 574.860802][T16345] Uninit was stored to memory at: [ 574.865849][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 574.871668][T16345] __msan_chain_origin+0x50/0x90 [ 574.876622][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 574.881743][T16345] get_compat_msghdr+0x108/0x2b0 [ 574.886682][T16345] do_recvmmsg+0xdba/0x22c0 [ 574.891193][T16345] __sys_recvmmsg+0x5dd/0x610 [ 574.895872][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 574.901939][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 574.908098][T16345] __do_fast_syscall_32+0x2af/0x480 [ 574.913304][T16345] do_fast_syscall_32+0x6b/0xd0 [ 574.918152][T16345] do_SYSENTER_32+0x73/0x90 [ 574.922671][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 574.929066][T16345] [ 574.931386][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 574.938058][T16345] do_recvmmsg+0xc2/0x22c0 [ 574.942485][T16345] do_recvmmsg+0xc2/0x22c0 [ 575.205538][T16345] not chained 1460000 origins [ 575.210293][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 575.218984][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.229059][T16345] Call Trace: [ 575.232386][T16345] dump_stack+0x21c/0x280 [ 575.236760][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 575.242518][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 575.247670][T16345] ? kmsan_get_metadata+0x116/0x180 [ 575.252909][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 575.258756][T16345] ? kmsan_get_metadata+0x116/0x180 [ 575.263994][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 575.269876][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 575.276135][T16345] ? kmsan_get_metadata+0x116/0x180 [ 575.281369][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 575.286952][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 575.293674][T16345] ? _copy_from_user+0x221/0x330 [ 575.298655][T16345] ? kmsan_get_metadata+0x116/0x180 [ 575.303884][T16345] __msan_chain_origin+0x50/0x90 [ 575.308859][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 575.314026][T16345] get_compat_msghdr+0x108/0x2b0 [ 575.319010][T16345] do_recvmmsg+0xdba/0x22c0 [ 575.323554][T16345] ? __msan_get_context_state+0x9/0x20 [ 575.329060][T16345] ? kmsan_get_metadata+0x116/0x180 [ 575.334299][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 575.340246][T16345] ? kmsan_get_metadata+0x116/0x180 [ 575.345484][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 575.350806][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 575.355597][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 575.360443][T16345] __sys_recvmmsg+0x5dd/0x610 [ 575.365185][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.371303][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.377500][T16345] __do_fast_syscall_32+0x2af/0x480 [ 575.382766][T16345] do_fast_syscall_32+0x6b/0xd0 [ 575.387652][T16345] do_SYSENTER_32+0x73/0x90 [ 575.392183][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.398535][T16345] RIP: 0023:0xf7f31549 [ 575.402611][T16345] Code: Bad RIP value. [ 575.406668][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 575.415195][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 575.423171][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.431194][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.439180][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 575.447152][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.455158][T16345] Uninit was stored to memory at: [ 575.460187][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 575.467141][T16345] __msan_chain_origin+0x50/0x90 [ 575.472078][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 575.477196][T16345] get_compat_msghdr+0x108/0x2b0 [ 575.482145][T16345] do_recvmmsg+0xdba/0x22c0 [ 575.486666][T16345] __sys_recvmmsg+0x5dd/0x610 [ 575.491349][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.497414][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.503566][T16345] __do_fast_syscall_32+0x2af/0x480 [ 575.508760][T16345] do_fast_syscall_32+0x6b/0xd0 [ 575.513622][T16345] do_SYSENTER_32+0x73/0x90 [ 575.518133][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.524442][T16345] [ 575.526769][T16345] Uninit was stored to memory at: [ 575.534140][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 575.539854][T16345] __msan_chain_origin+0x50/0x90 [ 575.544786][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 575.549906][T16345] get_compat_msghdr+0x108/0x2b0 [ 575.554836][T16345] do_recvmmsg+0xdba/0x22c0 [ 575.559339][T16345] __sys_recvmmsg+0x5dd/0x610 [ 575.564011][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.570073][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.576242][T16345] __do_fast_syscall_32+0x2af/0x480 [ 575.581437][T16345] do_fast_syscall_32+0x6b/0xd0 [ 575.586281][T16345] do_SYSENTER_32+0x73/0x90 [ 575.590880][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.597549][T16345] [ 575.599862][T16345] Uninit was stored to memory at: [ 575.604884][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 575.610601][T16345] __msan_chain_origin+0x50/0x90 [ 575.615548][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 575.620654][T16345] get_compat_msghdr+0x108/0x2b0 [ 575.625598][T16345] do_recvmmsg+0xdba/0x22c0 [ 575.630093][T16345] __sys_recvmmsg+0x5dd/0x610 [ 575.634773][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.640848][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.647009][T16345] __do_fast_syscall_32+0x2af/0x480 [ 575.652212][T16345] do_fast_syscall_32+0x6b/0xd0 [ 575.657059][T16345] do_SYSENTER_32+0x73/0x90 [ 575.661555][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.667878][T16345] [ 575.670190][T16345] Uninit was stored to memory at: [ 575.675212][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 575.680936][T16345] __msan_chain_origin+0x50/0x90 [ 575.685881][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 575.691006][T16345] get_compat_msghdr+0x108/0x2b0 [ 575.695947][T16345] do_recvmmsg+0xdba/0x22c0 [ 575.700454][T16345] __sys_recvmmsg+0x5dd/0x610 [ 575.705131][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.711205][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.717356][T16345] __do_fast_syscall_32+0x2af/0x480 [ 575.722565][T16345] do_fast_syscall_32+0x6b/0xd0 [ 575.727418][T16345] do_SYSENTER_32+0x73/0x90 [ 575.731927][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.738236][T16345] [ 575.740561][T16345] Uninit was stored to memory at: [ 575.745582][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 575.751298][T16345] __msan_chain_origin+0x50/0x90 [ 575.756231][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 575.761351][T16345] get_compat_msghdr+0x108/0x2b0 [ 575.766279][T16345] do_recvmmsg+0xdba/0x22c0 [ 575.770770][T16345] __sys_recvmmsg+0x5dd/0x610 [ 575.775447][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.781509][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.787767][T16345] __do_fast_syscall_32+0x2af/0x480 [ 575.792960][T16345] do_fast_syscall_32+0x6b/0xd0 [ 575.797801][T16345] do_SYSENTER_32+0x73/0x90 [ 575.802311][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.808616][T16345] [ 575.810939][T16345] Uninit was stored to memory at: [ 575.816098][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 575.821821][T16345] __msan_chain_origin+0x50/0x90 [ 575.826755][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 575.831859][T16345] get_compat_msghdr+0x108/0x2b0 [ 575.836804][T16345] do_recvmmsg+0xdba/0x22c0 [ 575.841384][T16345] __sys_recvmmsg+0x5dd/0x610 [ 575.846054][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.852149][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.858304][T16345] __do_fast_syscall_32+0x2af/0x480 [ 575.863520][T16345] do_fast_syscall_32+0x6b/0xd0 [ 575.868364][T16345] do_SYSENTER_32+0x73/0x90 [ 575.872860][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.879169][T16345] [ 575.881484][T16345] Uninit was stored to memory at: [ 575.886518][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 575.892236][T16345] __msan_chain_origin+0x50/0x90 [ 575.897167][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 575.902269][T16345] get_compat_msghdr+0x108/0x2b0 [ 575.907202][T16345] do_recvmmsg+0xdba/0x22c0 [ 575.911714][T16345] __sys_recvmmsg+0x5dd/0x610 [ 575.916388][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 575.922485][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 575.928662][T16345] __do_fast_syscall_32+0x2af/0x480 [ 575.933869][T16345] do_fast_syscall_32+0x6b/0xd0 [ 575.938713][T16345] do_SYSENTER_32+0x73/0x90 [ 575.943224][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 575.949527][T16345] [ 575.951841][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 575.958526][T16345] do_recvmmsg+0xc2/0x22c0 [ 575.962935][T16345] do_recvmmsg+0xc2/0x22c0 [ 576.220389][T16345] not chained 1470000 origins [ 576.225133][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 576.233817][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.243975][T16345] Call Trace: [ 576.247297][T16345] dump_stack+0x21c/0x280 [ 576.251659][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 576.257495][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 576.262638][T16345] ? kmsan_get_metadata+0x116/0x180 [ 576.267869][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 576.273709][T16345] ? kmsan_get_metadata+0x116/0x180 [ 576.278934][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 576.284767][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 576.290857][T16345] ? kmsan_get_metadata+0x116/0x180 [ 576.296139][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 576.301737][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 576.307839][T16345] ? _copy_from_user+0x221/0x330 [ 576.312807][T16345] ? kmsan_get_metadata+0x116/0x180 [ 576.318135][T16345] __msan_chain_origin+0x50/0x90 [ 576.323109][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 576.328280][T16345] get_compat_msghdr+0x108/0x2b0 [ 576.333262][T16345] do_recvmmsg+0xdba/0x22c0 [ 576.337801][T16345] ? __msan_get_context_state+0x9/0x20 [ 576.343305][T16345] ? kmsan_get_metadata+0x116/0x180 [ 576.348537][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 576.354501][T16345] ? kmsan_get_metadata+0x116/0x180 [ 576.359760][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 576.365082][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 576.369839][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 576.374630][T16345] __sys_recvmmsg+0x5dd/0x610 [ 576.379412][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.385493][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.391646][T16345] __do_fast_syscall_32+0x2af/0x480 [ 576.396861][T16345] do_fast_syscall_32+0x6b/0xd0 [ 576.401710][T16345] do_SYSENTER_32+0x73/0x90 [ 576.406211][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.412554][T16345] RIP: 0023:0xf7f31549 [ 576.416653][T16345] Code: Bad RIP value. [ 576.420740][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 576.429152][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 576.437140][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.445123][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.453110][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 576.461078][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.469058][T16345] Uninit was stored to memory at: [ 576.474086][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 576.479799][T16345] __msan_chain_origin+0x50/0x90 [ 576.484733][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 576.489862][T16345] get_compat_msghdr+0x108/0x2b0 [ 576.494805][T16345] do_recvmmsg+0xdba/0x22c0 [ 576.499303][T16345] __sys_recvmmsg+0x5dd/0x610 [ 576.503992][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.510053][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.516205][T16345] __do_fast_syscall_32+0x2af/0x480 [ 576.521409][T16345] do_fast_syscall_32+0x6b/0xd0 [ 576.526256][T16345] do_SYSENTER_32+0x73/0x90 [ 576.530753][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.537075][T16345] [ 576.539386][T16345] Uninit was stored to memory at: [ 576.544405][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 576.550132][T16345] __msan_chain_origin+0x50/0x90 [ 576.555074][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 576.560198][T16345] get_compat_msghdr+0x108/0x2b0 [ 576.565139][T16345] do_recvmmsg+0xdba/0x22c0 [ 576.569628][T16345] __sys_recvmmsg+0x5dd/0x610 [ 576.574295][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.580372][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.586533][T16345] __do_fast_syscall_32+0x2af/0x480 [ 576.591739][T16345] do_fast_syscall_32+0x6b/0xd0 [ 576.596594][T16345] do_SYSENTER_32+0x73/0x90 [ 576.601104][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.607410][T16345] [ 576.609724][T16345] Uninit was stored to memory at: [ 576.614742][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 576.620449][T16345] __msan_chain_origin+0x50/0x90 [ 576.625384][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 576.630500][T16345] get_compat_msghdr+0x108/0x2b0 [ 576.635425][T16345] do_recvmmsg+0xdba/0x22c0 [ 576.639926][T16345] __sys_recvmmsg+0x5dd/0x610 [ 576.644594][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.650654][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.656817][T16345] __do_fast_syscall_32+0x2af/0x480 [ 576.662027][T16345] do_fast_syscall_32+0x6b/0xd0 [ 576.666881][T16345] do_SYSENTER_32+0x73/0x90 [ 576.671397][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.677716][T16345] [ 576.680031][T16345] Uninit was stored to memory at: [ 576.685077][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 576.690817][T16345] __msan_chain_origin+0x50/0x90 [ 576.695762][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 576.700872][T16345] get_compat_msghdr+0x108/0x2b0 [ 576.705812][T16345] do_recvmmsg+0xdba/0x22c0 [ 576.710305][T16345] __sys_recvmmsg+0x5dd/0x610 [ 576.714976][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.721051][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.727201][T16345] __do_fast_syscall_32+0x2af/0x480 [ 576.732406][T16345] do_fast_syscall_32+0x6b/0xd0 [ 576.737252][T16345] do_SYSENTER_32+0x73/0x90 [ 576.741748][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.748055][T16345] [ 576.750381][T16345] Uninit was stored to memory at: [ 576.755400][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 576.761113][T16345] __msan_chain_origin+0x50/0x90 [ 576.766045][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 576.771158][T16345] get_compat_msghdr+0x108/0x2b0 [ 576.776107][T16345] do_recvmmsg+0xdba/0x22c0 [ 576.780686][T16345] __sys_recvmmsg+0x5dd/0x610 [ 576.785361][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.791437][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.797602][T16345] __do_fast_syscall_32+0x2af/0x480 [ 576.802797][T16345] do_fast_syscall_32+0x6b/0xd0 [ 576.807639][T16345] do_SYSENTER_32+0x73/0x90 [ 576.812144][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.818464][T16345] [ 576.820788][T16345] Uninit was stored to memory at: [ 576.825807][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 576.831512][T16345] __msan_chain_origin+0x50/0x90 [ 576.836443][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 576.841556][T16345] get_compat_msghdr+0x108/0x2b0 [ 576.846499][T16345] do_recvmmsg+0xdba/0x22c0 [ 576.850999][T16345] __sys_recvmmsg+0x5dd/0x610 [ 576.855665][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.861726][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.867878][T16345] __do_fast_syscall_32+0x2af/0x480 [ 576.873070][T16345] do_fast_syscall_32+0x6b/0xd0 [ 576.877910][T16345] do_SYSENTER_32+0x73/0x90 [ 576.882422][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.888749][T16345] [ 576.891073][T16345] Uninit was stored to memory at: [ 576.896118][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 576.901840][T16345] __msan_chain_origin+0x50/0x90 [ 576.906772][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 576.911887][T16345] get_compat_msghdr+0x108/0x2b0 [ 576.916814][T16345] do_recvmmsg+0xdba/0x22c0 [ 576.921303][T16345] __sys_recvmmsg+0x5dd/0x610 [ 576.925971][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 576.932033][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 576.938199][T16345] __do_fast_syscall_32+0x2af/0x480 [ 576.943516][T16345] do_fast_syscall_32+0x6b/0xd0 [ 576.948371][T16345] do_SYSENTER_32+0x73/0x90 [ 576.952879][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 576.959197][T16345] [ 576.961524][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 576.968191][T16345] do_recvmmsg+0xc2/0x22c0 [ 576.972604][T16345] do_recvmmsg+0xc2/0x22c0 [ 577.295118][T16345] not chained 1480000 origins [ 577.299877][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 577.308562][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.318664][T16345] Call Trace: [ 577.321991][T16345] dump_stack+0x21c/0x280 [ 577.326360][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 577.332122][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 577.337267][T16345] ? kmsan_get_metadata+0x116/0x180 [ 577.342490][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 577.348346][T16345] ? kmsan_get_metadata+0x116/0x180 [ 577.353567][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 577.359446][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 577.365575][T16345] ? kmsan_get_metadata+0x116/0x180 [ 577.370803][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 577.376384][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 577.382487][T16345] ? _copy_from_user+0x221/0x330 [ 577.387457][T16345] ? kmsan_get_metadata+0x116/0x180 [ 577.392689][T16345] __msan_chain_origin+0x50/0x90 [ 577.397643][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 577.402796][T16345] get_compat_msghdr+0x108/0x2b0 [ 577.407777][T16345] do_recvmmsg+0xdba/0x22c0 [ 577.412281][T16345] ? __msan_get_context_state+0x9/0x20 [ 577.417766][T16345] ? kmsan_get_metadata+0x116/0x180 [ 577.422994][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 577.428928][T16345] ? kmsan_get_metadata+0x116/0x180 [ 577.434151][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 577.439431][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 577.444198][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 577.448956][T16345] __sys_recvmmsg+0x5dd/0x610 [ 577.453645][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.459714][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.465871][T16345] __do_fast_syscall_32+0x2af/0x480 [ 577.471072][T16345] do_fast_syscall_32+0x6b/0xd0 [ 577.475933][T16345] do_SYSENTER_32+0x73/0x90 [ 577.480428][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.486755][T16345] RIP: 0023:0xf7f31549 [ 577.490813][T16345] Code: Bad RIP value. [ 577.495667][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 577.504070][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 577.512045][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.520026][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.527993][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 577.535968][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.543960][T16345] Uninit was stored to memory at: [ 577.548978][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 577.554700][T16345] __msan_chain_origin+0x50/0x90 [ 577.559638][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 577.564750][T16345] get_compat_msghdr+0x108/0x2b0 [ 577.569684][T16345] do_recvmmsg+0xdba/0x22c0 [ 577.574185][T16345] __sys_recvmmsg+0x5dd/0x610 [ 577.578850][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.584919][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.591064][T16345] __do_fast_syscall_32+0x2af/0x480 [ 577.596255][T16345] do_fast_syscall_32+0x6b/0xd0 [ 577.601105][T16345] do_SYSENTER_32+0x73/0x90 [ 577.605602][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.611921][T16345] [ 577.614231][T16345] Uninit was stored to memory at: [ 577.619247][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 577.624960][T16345] __msan_chain_origin+0x50/0x90 [ 577.629884][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 577.634995][T16345] get_compat_msghdr+0x108/0x2b0 [ 577.639914][T16345] do_recvmmsg+0xdba/0x22c0 [ 577.644414][T16345] __sys_recvmmsg+0x5dd/0x610 [ 577.649104][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.655189][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.661358][T16345] __do_fast_syscall_32+0x2af/0x480 [ 577.666644][T16345] do_fast_syscall_32+0x6b/0xd0 [ 577.671490][T16345] do_SYSENTER_32+0x73/0x90 [ 577.675993][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.682296][T16345] [ 577.684605][T16345] Uninit was stored to memory at: [ 577.689620][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 577.695328][T16345] __msan_chain_origin+0x50/0x90 [ 577.700253][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 577.705351][T16345] get_compat_msghdr+0x108/0x2b0 [ 577.710287][T16345] do_recvmmsg+0xdba/0x22c0 [ 577.714789][T16345] __sys_recvmmsg+0x5dd/0x610 [ 577.719453][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.725522][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.731676][T16345] __do_fast_syscall_32+0x2af/0x480 [ 577.736862][T16345] do_fast_syscall_32+0x6b/0xd0 [ 577.741720][T16345] do_SYSENTER_32+0x73/0x90 [ 577.746229][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.752539][T16345] [ 577.754866][T16345] Uninit was stored to memory at: [ 577.759917][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 577.765637][T16345] __msan_chain_origin+0x50/0x90 [ 577.770577][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 577.775679][T16345] get_compat_msghdr+0x108/0x2b0 [ 577.780599][T16345] do_recvmmsg+0xdba/0x22c0 [ 577.785083][T16345] __sys_recvmmsg+0x5dd/0x610 [ 577.789758][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.795829][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.801970][T16345] __do_fast_syscall_32+0x2af/0x480 [ 577.807162][T16345] do_fast_syscall_32+0x6b/0xd0 [ 577.812016][T16345] do_SYSENTER_32+0x73/0x90 [ 577.816525][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.822830][T16345] [ 577.826183][T16345] Uninit was stored to memory at: [ 577.831200][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 577.836908][T16345] __msan_chain_origin+0x50/0x90 [ 577.841841][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 577.846939][T16345] get_compat_msghdr+0x108/0x2b0 [ 577.851871][T16345] do_recvmmsg+0xdba/0x22c0 [ 577.856359][T16345] __sys_recvmmsg+0x5dd/0x610 [ 577.861024][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.867096][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.873262][T16345] __do_fast_syscall_32+0x2af/0x480 [ 577.878448][T16345] do_fast_syscall_32+0x6b/0xd0 [ 577.883286][T16345] do_SYSENTER_32+0x73/0x90 [ 577.887807][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.894113][T16345] [ 577.896432][T16345] Uninit was stored to memory at: [ 577.901450][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 577.907159][T16345] __msan_chain_origin+0x50/0x90 [ 577.912093][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 577.917204][T16345] get_compat_msghdr+0x108/0x2b0 [ 577.922147][T16345] do_recvmmsg+0xdba/0x22c0 [ 577.926651][T16345] __sys_recvmmsg+0x5dd/0x610 [ 577.931317][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 577.937390][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 577.943552][T16345] __do_fast_syscall_32+0x2af/0x480 [ 577.948742][T16345] do_fast_syscall_32+0x6b/0xd0 [ 577.953579][T16345] do_SYSENTER_32+0x73/0x90 [ 577.958072][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 577.964377][T16345] [ 577.966686][T16345] Uninit was stored to memory at: [ 577.971717][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 577.977438][T16345] __msan_chain_origin+0x50/0x90 [ 577.982392][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 577.987525][T16345] get_compat_msghdr+0x108/0x2b0 [ 577.992470][T16345] do_recvmmsg+0xdba/0x22c0 [ 577.996986][T16345] __sys_recvmmsg+0x5dd/0x610 [ 578.001650][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.007708][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.013866][T16345] __do_fast_syscall_32+0x2af/0x480 [ 578.019069][T16345] do_fast_syscall_32+0x6b/0xd0 [ 578.023907][T16345] do_SYSENTER_32+0x73/0x90 [ 578.028394][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.034696][T16345] [ 578.037020][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 578.043685][T16345] do_recvmmsg+0xc2/0x22c0 [ 578.048100][T16345] do_recvmmsg+0xc2/0x22c0 [ 578.296282][T16345] not chained 1490000 origins [ 578.301038][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 578.309726][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.319805][T16345] Call Trace: [ 578.323132][T16345] dump_stack+0x21c/0x280 [ 578.327502][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 578.333260][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 578.338405][T16345] ? kmsan_get_metadata+0x116/0x180 [ 578.343633][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 578.349474][T16345] ? kmsan_get_metadata+0x116/0x180 [ 578.354708][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 578.360548][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 578.366642][T16345] ? kmsan_get_metadata+0x116/0x180 [ 578.371878][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 578.377456][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 578.383558][T16345] ? _copy_from_user+0x221/0x330 [ 578.388533][T16345] ? kmsan_get_metadata+0x116/0x180 [ 578.393761][T16345] __msan_chain_origin+0x50/0x90 [ 578.398730][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 578.403909][T16345] get_compat_msghdr+0x108/0x2b0 [ 578.408893][T16345] do_recvmmsg+0xdba/0x22c0 [ 578.413435][T16345] ? __msan_get_context_state+0x9/0x20 [ 578.418944][T16345] ? kmsan_get_metadata+0x116/0x180 [ 578.424188][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 578.430120][T16345] ? kmsan_get_metadata+0x116/0x180 [ 578.435358][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 578.440684][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 578.445480][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 578.450276][T16345] __sys_recvmmsg+0x5dd/0x610 [ 578.455009][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.461125][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.467344][T16345] __do_fast_syscall_32+0x2af/0x480 [ 578.472587][T16345] do_fast_syscall_32+0x6b/0xd0 [ 578.477467][T16345] do_SYSENTER_32+0x73/0x90 [ 578.482002][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.488351][T16345] RIP: 0023:0xf7f31549 [ 578.492424][T16345] Code: Bad RIP value. [ 578.496502][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 578.504944][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 578.512918][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.520888][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.528896][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 578.536867][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.544867][T16345] Uninit was stored to memory at: [ 578.549898][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 578.555618][T16345] __msan_chain_origin+0x50/0x90 [ 578.560554][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 578.565684][T16345] get_compat_msghdr+0x108/0x2b0 [ 578.570627][T16345] do_recvmmsg+0xdba/0x22c0 [ 578.575127][T16345] __sys_recvmmsg+0x5dd/0x610 [ 578.579820][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.585891][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.592044][T16345] __do_fast_syscall_32+0x2af/0x480 [ 578.597250][T16345] do_fast_syscall_32+0x6b/0xd0 [ 578.602111][T16345] do_SYSENTER_32+0x73/0x90 [ 578.606632][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.612951][T16345] [ 578.615281][T16345] Uninit was stored to memory at: [ 578.620322][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 578.626042][T16345] __msan_chain_origin+0x50/0x90 [ 578.631002][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 578.636125][T16345] get_compat_msghdr+0x108/0x2b0 [ 578.641059][T16345] do_recvmmsg+0xdba/0x22c0 [ 578.645580][T16345] __sys_recvmmsg+0x5dd/0x610 [ 578.650272][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.656343][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.662508][T16345] __do_fast_syscall_32+0x2af/0x480 [ 578.667747][T16345] do_fast_syscall_32+0x6b/0xd0 [ 578.672622][T16345] do_SYSENTER_32+0x73/0x90 [ 578.677132][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.683451][T16345] [ 578.685766][T16345] Uninit was stored to memory at: [ 578.690789][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 578.696516][T16345] __msan_chain_origin+0x50/0x90 [ 578.701459][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 578.706578][T16345] get_compat_msghdr+0x108/0x2b0 [ 578.711546][T16345] do_recvmmsg+0xdba/0x22c0 [ 578.716060][T16345] __sys_recvmmsg+0x5dd/0x610 [ 578.720769][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.726876][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.733052][T16345] __do_fast_syscall_32+0x2af/0x480 [ 578.738255][T16345] do_fast_syscall_32+0x6b/0xd0 [ 578.743104][T16345] do_SYSENTER_32+0x73/0x90 [ 578.747606][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.753913][T16345] [ 578.756227][T16345] Uninit was stored to memory at: [ 578.761264][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 578.767000][T16345] __msan_chain_origin+0x50/0x90 [ 578.771948][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 578.777085][T16345] get_compat_msghdr+0x108/0x2b0 [ 578.782031][T16345] do_recvmmsg+0xdba/0x22c0 [ 578.786539][T16345] __sys_recvmmsg+0x5dd/0x610 [ 578.791238][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.797311][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.803466][T16345] __do_fast_syscall_32+0x2af/0x480 [ 578.808661][T16345] do_fast_syscall_32+0x6b/0xd0 [ 578.813512][T16345] do_SYSENTER_32+0x73/0x90 [ 578.818017][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.824327][T16345] [ 578.826645][T16345] Uninit was stored to memory at: [ 578.831666][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 578.837386][T16345] __msan_chain_origin+0x50/0x90 [ 578.842336][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 578.847447][T16345] get_compat_msghdr+0x108/0x2b0 [ 578.852384][T16345] do_recvmmsg+0xdba/0x22c0 [ 578.857168][T16345] __sys_recvmmsg+0x5dd/0x610 [ 578.861865][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.867934][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.874093][T16345] __do_fast_syscall_32+0x2af/0x480 [ 578.879311][T16345] do_fast_syscall_32+0x6b/0xd0 [ 578.884188][T16345] do_SYSENTER_32+0x73/0x90 [ 578.888688][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.895009][T16345] [ 578.897323][T16345] Uninit was stored to memory at: [ 578.902343][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 578.908072][T16345] __msan_chain_origin+0x50/0x90 [ 578.913006][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 578.918118][T16345] get_compat_msghdr+0x108/0x2b0 [ 578.923054][T16345] do_recvmmsg+0xdba/0x22c0 [ 578.927556][T16345] __sys_recvmmsg+0x5dd/0x610 [ 578.932252][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 578.938318][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 578.944470][T16345] __do_fast_syscall_32+0x2af/0x480 [ 578.949668][T16345] do_fast_syscall_32+0x6b/0xd0 [ 578.954533][T16345] do_SYSENTER_32+0x73/0x90 [ 578.959031][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.965338][T16345] [ 578.967650][T16345] Uninit was stored to memory at: [ 578.972695][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 578.978415][T16345] __msan_chain_origin+0x50/0x90 [ 578.983367][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 578.988472][T16345] get_compat_msghdr+0x108/0x2b0 [ 578.993407][T16345] do_recvmmsg+0xdba/0x22c0 [ 578.997918][T16345] __sys_recvmmsg+0x5dd/0x610 [ 579.002599][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.008674][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.014927][T16345] __do_fast_syscall_32+0x2af/0x480 [ 579.020126][T16345] do_fast_syscall_32+0x6b/0xd0 [ 579.024989][T16345] do_SYSENTER_32+0x73/0x90 [ 579.029518][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.035840][T16345] [ 579.038157][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 579.044826][T16345] do_recvmmsg+0xc2/0x22c0 [ 579.049255][T16345] do_recvmmsg+0xc2/0x22c0 [ 579.315210][T16345] not chained 1500000 origins [ 579.319989][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 579.328681][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.338755][T16345] Call Trace: [ 579.342079][T16345] dump_stack+0x21c/0x280 [ 579.346452][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 579.352213][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 579.357363][T16345] ? kmsan_get_metadata+0x116/0x180 [ 579.362602][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 579.368446][T16345] ? kmsan_get_metadata+0x116/0x180 [ 579.373677][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 579.379520][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 579.385619][T16345] ? kmsan_get_metadata+0x116/0x180 [ 579.390848][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 579.396441][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 579.402550][T16345] ? _copy_from_user+0x221/0x330 [ 579.407525][T16345] ? kmsan_get_metadata+0x116/0x180 [ 579.412758][T16345] __msan_chain_origin+0x50/0x90 [ 579.417728][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 579.422895][T16345] get_compat_msghdr+0x108/0x2b0 [ 579.427880][T16345] do_recvmmsg+0xdba/0x22c0 [ 579.432427][T16345] ? __msan_get_context_state+0x9/0x20 [ 579.437944][T16345] ? kmsan_get_metadata+0x116/0x180 [ 579.443198][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 579.449135][T16345] ? kmsan_get_metadata+0x116/0x180 [ 579.454373][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 579.459710][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 579.464514][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 579.469425][T16345] __sys_recvmmsg+0x5dd/0x610 [ 579.474187][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.480269][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.486427][T16345] __do_fast_syscall_32+0x2af/0x480 [ 579.491633][T16345] do_fast_syscall_32+0x6b/0xd0 [ 579.496607][T16345] do_SYSENTER_32+0x73/0x90 [ 579.501114][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.507492][T16345] RIP: 0023:0xf7f31549 [ 579.511562][T16345] Code: Bad RIP value. [ 579.515620][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 579.524028][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 579.532010][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.539977][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.547965][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 579.555935][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.563926][T16345] Uninit was stored to memory at: [ 579.568970][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 579.574705][T16345] __msan_chain_origin+0x50/0x90 [ 579.579651][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 579.584778][T16345] get_compat_msghdr+0x108/0x2b0 [ 579.589714][T16345] do_recvmmsg+0xdba/0x22c0 [ 579.594213][T16345] __sys_recvmmsg+0x5dd/0x610 [ 579.598885][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.604948][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.611157][T16345] __do_fast_syscall_32+0x2af/0x480 [ 579.616367][T16345] do_fast_syscall_32+0x6b/0xd0 [ 579.621233][T16345] do_SYSENTER_32+0x73/0x90 [ 579.625748][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.632056][T16345] [ 579.634372][T16345] Uninit was stored to memory at: [ 579.639394][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 579.645131][T16345] __msan_chain_origin+0x50/0x90 [ 579.650060][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 579.655168][T16345] get_compat_msghdr+0x108/0x2b0 [ 579.660098][T16345] do_recvmmsg+0xdba/0x22c0 [ 579.664608][T16345] __sys_recvmmsg+0x5dd/0x610 [ 579.669278][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.675339][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.681499][T16345] __do_fast_syscall_32+0x2af/0x480 [ 579.686708][T16345] do_fast_syscall_32+0x6b/0xd0 [ 579.691566][T16345] do_SYSENTER_32+0x73/0x90 [ 579.696100][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.702416][T16345] [ 579.704747][T16345] Uninit was stored to memory at: [ 579.709783][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 579.715502][T16345] __msan_chain_origin+0x50/0x90 [ 579.720450][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 579.725610][T16345] get_compat_msghdr+0x108/0x2b0 [ 579.730565][T16345] do_recvmmsg+0xdba/0x22c0 [ 579.735083][T16345] __sys_recvmmsg+0x5dd/0x610 [ 579.739787][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.745870][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.752031][T16345] __do_fast_syscall_32+0x2af/0x480 [ 579.757251][T16345] do_fast_syscall_32+0x6b/0xd0 [ 579.762111][T16345] do_SYSENTER_32+0x73/0x90 [ 579.766661][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.772976][T16345] [ 579.775311][T16345] Uninit was stored to memory at: [ 579.780360][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 579.786097][T16345] __msan_chain_origin+0x50/0x90 [ 579.791047][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 579.796176][T16345] get_compat_msghdr+0x108/0x2b0 [ 579.801157][T16345] do_recvmmsg+0xdba/0x22c0 [ 579.805669][T16345] __sys_recvmmsg+0x5dd/0x610 [ 579.810370][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.816450][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.822626][T16345] __do_fast_syscall_32+0x2af/0x480 [ 579.827858][T16345] do_fast_syscall_32+0x6b/0xd0 [ 579.832716][T16345] do_SYSENTER_32+0x73/0x90 [ 579.837229][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.843544][T16345] [ 579.845862][T16345] Uninit was stored to memory at: [ 579.851003][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 579.856731][T16345] __msan_chain_origin+0x50/0x90 [ 579.861695][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 579.866838][T16345] get_compat_msghdr+0x108/0x2b0 [ 579.871782][T16345] do_recvmmsg+0xdba/0x22c0 [ 579.876313][T16345] __sys_recvmmsg+0x5dd/0x610 [ 579.880999][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.887088][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.893363][T16345] __do_fast_syscall_32+0x2af/0x480 [ 579.898574][T16345] do_fast_syscall_32+0x6b/0xd0 [ 579.903434][T16345] do_SYSENTER_32+0x73/0x90 [ 579.907979][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.914299][T16345] [ 579.916621][T16345] Uninit was stored to memory at: [ 579.921663][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 579.927398][T16345] __msan_chain_origin+0x50/0x90 [ 579.932348][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 579.937470][T16345] get_compat_msghdr+0x108/0x2b0 [ 579.942414][T16345] do_recvmmsg+0xdba/0x22c0 [ 579.946942][T16345] __sys_recvmmsg+0x5dd/0x610 [ 579.951641][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 579.957806][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 579.963971][T16345] __do_fast_syscall_32+0x2af/0x480 [ 579.969179][T16345] do_fast_syscall_32+0x6b/0xd0 [ 579.974045][T16345] do_SYSENTER_32+0x73/0x90 [ 579.978558][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 579.984896][T16345] [ 579.987221][T16345] Uninit was stored to memory at: [ 579.992277][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 579.998042][T16345] __msan_chain_origin+0x50/0x90 [ 580.002994][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 580.008132][T16345] get_compat_msghdr+0x108/0x2b0 [ 580.013081][T16345] do_recvmmsg+0xdba/0x22c0 [ 580.017625][T16345] __sys_recvmmsg+0x5dd/0x610 [ 580.022315][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.028498][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.034666][T16345] __do_fast_syscall_32+0x2af/0x480 [ 580.039871][T16345] do_fast_syscall_32+0x6b/0xd0 [ 580.044734][T16345] do_SYSENTER_32+0x73/0x90 [ 580.049256][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.055583][T16345] [ 580.057951][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 580.064647][T16345] do_recvmmsg+0xc2/0x22c0 [ 580.069080][T16345] do_recvmmsg+0xc2/0x22c0 [ 580.330411][T16345] not chained 1510000 origins [ 580.335166][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 580.343857][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.353930][T16345] Call Trace: [ 580.357258][T16345] dump_stack+0x21c/0x280 [ 580.361633][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 580.367435][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 580.372620][T16345] ? kmsan_get_metadata+0x116/0x180 [ 580.377857][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 580.383698][T16345] ? kmsan_get_metadata+0x116/0x180 [ 580.388983][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 580.394830][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 580.400960][T16345] ? kmsan_get_metadata+0x116/0x180 [ 580.406202][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 580.411787][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 580.417899][T16345] ? _copy_from_user+0x221/0x330 [ 580.422907][T16345] ? kmsan_get_metadata+0x116/0x180 [ 580.428140][T16345] __msan_chain_origin+0x50/0x90 [ 580.433146][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 580.438342][T16345] get_compat_msghdr+0x108/0x2b0 [ 580.443365][T16345] do_recvmmsg+0xdba/0x22c0 [ 580.447910][T16345] ? __msan_get_context_state+0x9/0x20 [ 580.453414][T16345] ? kmsan_get_metadata+0x116/0x180 [ 580.458646][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 580.464576][T16345] ? kmsan_get_metadata+0x116/0x180 [ 580.469814][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 580.475172][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 580.479938][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 580.484701][T16345] __sys_recvmmsg+0x5dd/0x610 [ 580.489427][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.495510][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.501669][T16345] __do_fast_syscall_32+0x2af/0x480 [ 580.506880][T16345] do_fast_syscall_32+0x6b/0xd0 [ 580.511739][T16345] do_SYSENTER_32+0x73/0x90 [ 580.516249][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.522585][T16345] RIP: 0023:0xf7f31549 [ 580.526642][T16345] Code: Bad RIP value. [ 580.530711][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 580.539121][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 580.547090][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.555079][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.563051][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 580.571025][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.579697][T16345] Uninit was stored to memory at: [ 580.584726][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 580.590447][T16345] __msan_chain_origin+0x50/0x90 [ 580.595386][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 580.600499][T16345] get_compat_msghdr+0x108/0x2b0 [ 580.605436][T16345] do_recvmmsg+0xdba/0x22c0 [ 580.609948][T16345] __sys_recvmmsg+0x5dd/0x610 [ 580.614643][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.620728][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.626886][T16345] __do_fast_syscall_32+0x2af/0x480 [ 580.632080][T16345] do_fast_syscall_32+0x6b/0xd0 [ 580.636934][T16345] do_SYSENTER_32+0x73/0x90 [ 580.641468][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.647792][T16345] [ 580.650124][T16345] Uninit was stored to memory at: [ 580.655149][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 580.660883][T16345] __msan_chain_origin+0x50/0x90 [ 580.665820][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 580.670926][T16345] get_compat_msghdr+0x108/0x2b0 [ 580.675862][T16345] do_recvmmsg+0xdba/0x22c0 [ 580.680372][T16345] __sys_recvmmsg+0x5dd/0x610 [ 580.685046][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.691116][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.697270][T16345] __do_fast_syscall_32+0x2af/0x480 [ 580.702484][T16345] do_fast_syscall_32+0x6b/0xd0 [ 580.707441][T16345] do_SYSENTER_32+0x73/0x90 [ 580.711959][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.718280][T16345] [ 580.720593][T16345] Uninit was stored to memory at: [ 580.725620][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 580.731337][T16345] __msan_chain_origin+0x50/0x90 [ 580.736271][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 580.741377][T16345] get_compat_msghdr+0x108/0x2b0 [ 580.746313][T16345] do_recvmmsg+0xdba/0x22c0 [ 580.750826][T16345] __sys_recvmmsg+0x5dd/0x610 [ 580.755524][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.761593][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.767744][T16345] __do_fast_syscall_32+0x2af/0x480 [ 580.772943][T16345] do_fast_syscall_32+0x6b/0xd0 [ 580.777801][T16345] do_SYSENTER_32+0x73/0x90 [ 580.782298][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.788618][T16345] [ 580.790936][T16345] Uninit was stored to memory at: [ 580.795957][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 580.801671][T16345] __msan_chain_origin+0x50/0x90 [ 580.806604][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 580.811706][T16345] get_compat_msghdr+0x108/0x2b0 [ 580.816650][T16345] do_recvmmsg+0xdba/0x22c0 [ 580.821146][T16345] __sys_recvmmsg+0x5dd/0x610 [ 580.825833][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.831915][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.838076][T16345] __do_fast_syscall_32+0x2af/0x480 [ 580.843271][T16345] do_fast_syscall_32+0x6b/0xd0 [ 580.848112][T16345] do_SYSENTER_32+0x73/0x90 [ 580.852611][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.858919][T16345] [ 580.861235][T16345] Uninit was stored to memory at: [ 580.866267][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 580.871980][T16345] __msan_chain_origin+0x50/0x90 [ 580.876915][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 580.882034][T16345] get_compat_msghdr+0x108/0x2b0 [ 580.886980][T16345] do_recvmmsg+0xdba/0x22c0 [ 580.891480][T16345] __sys_recvmmsg+0x5dd/0x610 [ 580.896159][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.902232][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.908389][T16345] __do_fast_syscall_32+0x2af/0x480 [ 580.913597][T16345] do_fast_syscall_32+0x6b/0xd0 [ 580.918439][T16345] do_SYSENTER_32+0x73/0x90 [ 580.922938][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.929246][T16345] [ 580.931555][T16345] Uninit was stored to memory at: [ 580.936581][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 580.942307][T16345] __msan_chain_origin+0x50/0x90 [ 580.947246][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 580.952394][T16345] get_compat_msghdr+0x108/0x2b0 [ 580.957328][T16345] do_recvmmsg+0xdba/0x22c0 [ 580.961827][T16345] __sys_recvmmsg+0x5dd/0x610 [ 580.966507][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 580.972587][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 580.978742][T16345] __do_fast_syscall_32+0x2af/0x480 [ 580.983942][T16345] do_fast_syscall_32+0x6b/0xd0 [ 580.988809][T16345] do_SYSENTER_32+0x73/0x90 [ 580.993334][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 580.999645][T16345] [ 581.001961][T16345] Uninit was stored to memory at: [ 581.006992][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 581.012715][T16345] __msan_chain_origin+0x50/0x90 [ 581.017657][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 581.022773][T16345] get_compat_msghdr+0x108/0x2b0 [ 581.027714][T16345] do_recvmmsg+0xdba/0x22c0 [ 581.032216][T16345] __sys_recvmmsg+0x5dd/0x610 [ 581.036902][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.042973][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.049148][T16345] __do_fast_syscall_32+0x2af/0x480 [ 581.054362][T16345] do_fast_syscall_32+0x6b/0xd0 [ 581.059214][T16345] do_SYSENTER_32+0x73/0x90 [ 581.063723][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.070136][T16345] [ 581.072467][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 581.079156][T16345] do_recvmmsg+0xc2/0x22c0 [ 581.083572][T16345] do_recvmmsg+0xc2/0x22c0 [ 581.304703][T16345] not chained 1520000 origins [ 581.309454][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 581.318139][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.328213][T16345] Call Trace: [ 581.331563][T16345] dump_stack+0x21c/0x280 [ 581.335942][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 581.341711][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 581.346861][T16345] ? kmsan_get_metadata+0x116/0x180 [ 581.352101][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 581.357961][T16345] ? kmsan_get_metadata+0x116/0x180 [ 581.363204][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 581.369047][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 581.375148][T16345] ? kmsan_get_metadata+0x116/0x180 [ 581.380387][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 581.385974][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 581.392086][T16345] ? _copy_from_user+0x221/0x330 [ 581.397068][T16345] ? kmsan_get_metadata+0x116/0x180 [ 581.402307][T16345] __msan_chain_origin+0x50/0x90 [ 581.407289][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 581.412485][T16345] get_compat_msghdr+0x108/0x2b0 [ 581.417488][T16345] do_recvmmsg+0xdba/0x22c0 [ 581.422035][T16345] ? __msan_get_context_state+0x9/0x20 [ 581.427552][T16345] ? kmsan_get_metadata+0x116/0x180 [ 581.432797][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 581.438736][T16345] ? kmsan_get_metadata+0x116/0x180 [ 581.443984][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 581.449321][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 581.454117][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 581.458921][T16345] __sys_recvmmsg+0x5dd/0x610 [ 581.463661][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.469916][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.476133][T16345] __do_fast_syscall_32+0x2af/0x480 [ 581.481386][T16345] do_fast_syscall_32+0x6b/0xd0 [ 581.486279][T16345] do_SYSENTER_32+0x73/0x90 [ 581.490827][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.497180][T16345] RIP: 0023:0xf7f31549 [ 581.501270][T16345] Code: Bad RIP value. [ 581.505356][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 581.513790][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 581.521777][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.529764][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.537742][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 581.545719][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.553703][T16345] Uninit was stored to memory at: [ 581.558740][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 581.564466][T16345] __msan_chain_origin+0x50/0x90 [ 581.569409][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 581.574532][T16345] get_compat_msghdr+0x108/0x2b0 [ 581.579473][T16345] do_recvmmsg+0xdba/0x22c0 [ 581.583999][T16345] __sys_recvmmsg+0x5dd/0x610 [ 581.588706][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.594867][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.601032][T16345] __do_fast_syscall_32+0x2af/0x480 [ 581.606245][T16345] do_fast_syscall_32+0x6b/0xd0 [ 581.611107][T16345] do_SYSENTER_32+0x73/0x90 [ 581.615624][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.621951][T16345] [ 581.624274][T16345] Uninit was stored to memory at: [ 581.629310][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 581.635057][T16345] __msan_chain_origin+0x50/0x90 [ 581.640004][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 581.645122][T16345] get_compat_msghdr+0x108/0x2b0 [ 581.650165][T16345] do_recvmmsg+0xdba/0x22c0 [ 581.654674][T16345] __sys_recvmmsg+0x5dd/0x610 [ 581.659378][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.665485][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.671672][T16345] __do_fast_syscall_32+0x2af/0x480 [ 581.676909][T16345] do_fast_syscall_32+0x6b/0xd0 [ 581.681770][T16345] do_SYSENTER_32+0x73/0x90 [ 581.686283][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.692626][T16345] [ 581.694950][T16345] Uninit was stored to memory at: [ 581.699997][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 581.705736][T16345] __msan_chain_origin+0x50/0x90 [ 581.710690][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 581.715820][T16345] get_compat_msghdr+0x108/0x2b0 [ 581.720780][T16345] do_recvmmsg+0xdba/0x22c0 [ 581.725290][T16345] __sys_recvmmsg+0x5dd/0x610 [ 581.730008][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.736112][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.742297][T16345] __do_fast_syscall_32+0x2af/0x480 [ 581.747503][T16345] do_fast_syscall_32+0x6b/0xd0 [ 581.752362][T16345] do_SYSENTER_32+0x73/0x90 [ 581.756874][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.763196][T16345] [ 581.765530][T16345] Uninit was stored to memory at: [ 581.770587][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 581.776319][T16345] __msan_chain_origin+0x50/0x90 [ 581.781283][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 581.786417][T16345] get_compat_msghdr+0x108/0x2b0 [ 581.791371][T16345] do_recvmmsg+0xdba/0x22c0 [ 581.795887][T16345] __sys_recvmmsg+0x5dd/0x610 [ 581.800590][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.806671][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.812867][T16345] __do_fast_syscall_32+0x2af/0x480 [ 581.818083][T16345] do_fast_syscall_32+0x6b/0xd0 [ 581.822947][T16345] do_SYSENTER_32+0x73/0x90 [ 581.827482][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.833797][T16345] [ 581.836126][T16345] Uninit was stored to memory at: [ 581.841168][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 581.846908][T16345] __msan_chain_origin+0x50/0x90 [ 581.851858][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 581.856977][T16345] get_compat_msghdr+0x108/0x2b0 [ 581.861957][T16345] do_recvmmsg+0xdba/0x22c0 [ 581.866499][T16345] __sys_recvmmsg+0x5dd/0x610 [ 581.871279][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.877368][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.883529][T16345] __do_fast_syscall_32+0x2af/0x480 [ 581.888740][T16345] do_fast_syscall_32+0x6b/0xd0 [ 581.893616][T16345] do_SYSENTER_32+0x73/0x90 [ 581.898167][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.904517][T16345] [ 581.906846][T16345] Uninit was stored to memory at: [ 581.911914][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 581.917665][T16345] __msan_chain_origin+0x50/0x90 [ 581.922626][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 581.927747][T16345] get_compat_msghdr+0x108/0x2b0 [ 581.932701][T16345] do_recvmmsg+0xdba/0x22c0 [ 581.937230][T16345] __sys_recvmmsg+0x5dd/0x610 [ 581.941933][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 581.948013][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 581.954202][T16345] __do_fast_syscall_32+0x2af/0x480 [ 581.959414][T16345] do_fast_syscall_32+0x6b/0xd0 [ 581.964294][T16345] do_SYSENTER_32+0x73/0x90 [ 581.968826][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 581.975163][T16345] [ 581.977493][T16345] Uninit was stored to memory at: [ 581.982590][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 581.988345][T16345] __msan_chain_origin+0x50/0x90 [ 581.993288][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 581.998413][T16345] get_compat_msghdr+0x108/0x2b0 [ 582.003358][T16345] do_recvmmsg+0xdba/0x22c0 [ 582.007869][T16345] __sys_recvmmsg+0x5dd/0x610 [ 582.012590][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.018699][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.024871][T16345] __do_fast_syscall_32+0x2af/0x480 [ 582.030077][T16345] do_fast_syscall_32+0x6b/0xd0 [ 582.034941][T16345] do_SYSENTER_32+0x73/0x90 [ 582.039483][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.045805][T16345] [ 582.048171][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 582.054858][T16345] do_recvmmsg+0xc2/0x22c0 [ 582.059285][T16345] do_recvmmsg+0xc2/0x22c0 [ 582.289832][T16345] not chained 1530000 origins [ 582.294594][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 582.303286][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.313369][T16345] Call Trace: [ 582.316702][T16345] dump_stack+0x21c/0x280 [ 582.321086][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 582.326879][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 582.332041][T16345] ? kmsan_get_metadata+0x116/0x180 [ 582.337288][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 582.343137][T16345] ? kmsan_get_metadata+0x116/0x180 [ 582.348383][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 582.354243][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 582.360353][T16345] ? kmsan_get_metadata+0x116/0x180 [ 582.365601][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 582.371193][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 582.377322][T16345] ? _copy_from_user+0x221/0x330 [ 582.382310][T16345] ? kmsan_get_metadata+0x116/0x180 [ 582.387549][T16345] __msan_chain_origin+0x50/0x90 [ 582.392584][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 582.397831][T16345] get_compat_msghdr+0x108/0x2b0 [ 582.402835][T16345] do_recvmmsg+0xdba/0x22c0 [ 582.407386][T16345] ? __msan_get_context_state+0x9/0x20 [ 582.412920][T16345] ? kmsan_get_metadata+0x116/0x180 [ 582.418210][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 582.424156][T16345] ? kmsan_get_metadata+0x116/0x180 [ 582.429413][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 582.434738][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 582.439536][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 582.444358][T16345] __sys_recvmmsg+0x5dd/0x610 [ 582.449119][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.455248][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.461441][T16345] __do_fast_syscall_32+0x2af/0x480 [ 582.466704][T16345] do_fast_syscall_32+0x6b/0xd0 [ 582.471572][T16345] do_SYSENTER_32+0x73/0x90 [ 582.476135][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.482499][T16345] RIP: 0023:0xf7f31549 [ 582.486587][T16345] Code: Bad RIP value. [ 582.490647][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 582.499065][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 582.507054][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.515030][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.523010][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 582.531000][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.539002][T16345] Uninit was stored to memory at: [ 582.544055][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 582.549820][T16345] __msan_chain_origin+0x50/0x90 [ 582.554795][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 582.559911][T16345] get_compat_msghdr+0x108/0x2b0 [ 582.564863][T16345] do_recvmmsg+0xdba/0x22c0 [ 582.569388][T16345] __sys_recvmmsg+0x5dd/0x610 [ 582.574091][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.580179][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.586347][T16345] __do_fast_syscall_32+0x2af/0x480 [ 582.591552][T16345] do_fast_syscall_32+0x6b/0xd0 [ 582.596449][T16345] do_SYSENTER_32+0x73/0x90 [ 582.600968][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.607316][T16345] [ 582.609657][T16345] Uninit was stored to memory at: [ 582.614711][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 582.620451][T16345] __msan_chain_origin+0x50/0x90 [ 582.625400][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 582.630528][T16345] get_compat_msghdr+0x108/0x2b0 [ 582.635477][T16345] do_recvmmsg+0xdba/0x22c0 [ 582.639981][T16345] __sys_recvmmsg+0x5dd/0x610 [ 582.644682][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.650767][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.656940][T16345] __do_fast_syscall_32+0x2af/0x480 [ 582.662174][T16345] do_fast_syscall_32+0x6b/0xd0 [ 582.667053][T16345] do_SYSENTER_32+0x73/0x90 [ 582.671564][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.677901][T16345] [ 582.680237][T16345] Uninit was stored to memory at: [ 582.685368][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 582.691089][T16345] __msan_chain_origin+0x50/0x90 [ 582.696065][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 582.701213][T16345] get_compat_msghdr+0x108/0x2b0 [ 582.706159][T16345] do_recvmmsg+0xdba/0x22c0 [ 582.710673][T16345] __sys_recvmmsg+0x5dd/0x610 [ 582.715363][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.721437][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.727596][T16345] __do_fast_syscall_32+0x2af/0x480 [ 582.732800][T16345] do_fast_syscall_32+0x6b/0xd0 [ 582.737672][T16345] do_SYSENTER_32+0x73/0x90 [ 582.742200][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.748518][T16345] [ 582.750861][T16345] Uninit was stored to memory at: [ 582.755900][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 582.761641][T16345] __msan_chain_origin+0x50/0x90 [ 582.766591][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 582.771712][T16345] get_compat_msghdr+0x108/0x2b0 [ 582.776672][T16345] do_recvmmsg+0xdba/0x22c0 [ 582.781178][T16345] __sys_recvmmsg+0x5dd/0x610 [ 582.785865][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.791943][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.798138][T16345] __do_fast_syscall_32+0x2af/0x480 [ 582.803359][T16345] do_fast_syscall_32+0x6b/0xd0 [ 582.808213][T16345] do_SYSENTER_32+0x73/0x90 [ 582.812724][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.819085][T16345] [ 582.821426][T16345] Uninit was stored to memory at: [ 582.826475][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 582.832194][T16345] __msan_chain_origin+0x50/0x90 [ 582.837143][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 582.842293][T16345] get_compat_msghdr+0x108/0x2b0 [ 582.847234][T16345] do_recvmmsg+0xdba/0x22c0 [ 582.851741][T16345] __sys_recvmmsg+0x5dd/0x610 [ 582.856457][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.862601][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.868777][T16345] __do_fast_syscall_32+0x2af/0x480 [ 582.873987][T16345] do_fast_syscall_32+0x6b/0xd0 [ 582.878842][T16345] do_SYSENTER_32+0x73/0x90 [ 582.883352][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.889663][T16345] [ 582.891984][T16345] Uninit was stored to memory at: [ 582.897018][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 582.902747][T16345] __msan_chain_origin+0x50/0x90 [ 582.907688][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 582.912809][T16345] get_compat_msghdr+0x108/0x2b0 [ 582.917749][T16345] do_recvmmsg+0xdba/0x22c0 [ 582.922254][T16345] __sys_recvmmsg+0x5dd/0x610 [ 582.926946][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 582.933021][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 582.939179][T16345] __do_fast_syscall_32+0x2af/0x480 [ 582.944400][T16345] do_fast_syscall_32+0x6b/0xd0 [ 582.949282][T16345] do_SYSENTER_32+0x73/0x90 [ 582.953796][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 582.960110][T16345] [ 582.962440][T16345] Uninit was stored to memory at: [ 582.967504][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 582.973227][T16345] __msan_chain_origin+0x50/0x90 [ 582.978184][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 582.983302][T16345] get_compat_msghdr+0x108/0x2b0 [ 582.988241][T16345] do_recvmmsg+0xdba/0x22c0 [ 582.992789][T16345] __sys_recvmmsg+0x5dd/0x610 [ 582.997476][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.003546][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.009704][T16345] __do_fast_syscall_32+0x2af/0x480 [ 583.014925][T16345] do_fast_syscall_32+0x6b/0xd0 [ 583.019795][T16345] do_SYSENTER_32+0x73/0x90 [ 583.024307][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.030618][T16345] [ 583.032940][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 583.039620][T16345] do_recvmmsg+0xc2/0x22c0 [ 583.044036][T16345] do_recvmmsg+0xc2/0x22c0 [ 583.305290][T16345] not chained 1540000 origins [ 583.310061][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 583.318750][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.328875][T16345] Call Trace: [ 583.332201][T16345] dump_stack+0x21c/0x280 [ 583.336603][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 583.342362][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 583.347520][T16345] ? kmsan_get_metadata+0x116/0x180 [ 583.352766][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.358619][T16345] ? kmsan_get_metadata+0x116/0x180 [ 583.363856][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.369703][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 583.375806][T16345] ? kmsan_get_metadata+0x116/0x180 [ 583.381046][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 583.386633][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 583.392745][T16345] ? _copy_from_user+0x221/0x330 [ 583.397724][T16345] ? kmsan_get_metadata+0x116/0x180 [ 583.402962][T16345] __msan_chain_origin+0x50/0x90 [ 583.407939][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 583.413120][T16345] get_compat_msghdr+0x108/0x2b0 [ 583.418115][T16345] do_recvmmsg+0xdba/0x22c0 [ 583.422678][T16345] ? __msan_get_context_state+0x9/0x20 [ 583.428200][T16345] ? kmsan_get_metadata+0x116/0x180 [ 583.433444][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 583.439394][T16345] ? kmsan_get_metadata+0x116/0x180 [ 583.444642][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 583.449973][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 583.454767][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 583.459573][T16345] __sys_recvmmsg+0x5dd/0x610 [ 583.464316][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.470442][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.476634][T16345] __do_fast_syscall_32+0x2af/0x480 [ 583.481894][T16345] do_fast_syscall_32+0x6b/0xd0 [ 583.486789][T16345] do_SYSENTER_32+0x73/0x90 [ 583.491332][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.497684][T16345] RIP: 0023:0xf7f31549 [ 583.501761][T16345] Code: Bad RIP value. [ 583.505843][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 583.514283][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 583.522281][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.530280][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.538382][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 583.546398][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.554379][T16345] Uninit was stored to memory at: [ 583.559416][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 583.565138][T16345] __msan_chain_origin+0x50/0x90 [ 583.570078][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 583.575191][T16345] get_compat_msghdr+0x108/0x2b0 [ 583.580127][T16345] do_recvmmsg+0xdba/0x22c0 [ 583.584653][T16345] __sys_recvmmsg+0x5dd/0x610 [ 583.589357][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.595437][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.601595][T16345] __do_fast_syscall_32+0x2af/0x480 [ 583.606837][T16345] do_fast_syscall_32+0x6b/0xd0 [ 583.611695][T16345] do_SYSENTER_32+0x73/0x90 [ 583.616217][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.622537][T16345] [ 583.624873][T16345] Uninit was stored to memory at: [ 583.629920][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 583.636164][T16345] __msan_chain_origin+0x50/0x90 [ 583.641112][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 583.646232][T16345] get_compat_msghdr+0x108/0x2b0 [ 583.651179][T16345] do_recvmmsg+0xdba/0x22c0 [ 583.655681][T16345] __sys_recvmmsg+0x5dd/0x610 [ 583.660365][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.666481][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.672641][T16345] __do_fast_syscall_32+0x2af/0x480 [ 583.677865][T16345] do_fast_syscall_32+0x6b/0xd0 [ 583.682738][T16345] do_SYSENTER_32+0x73/0x90 [ 583.687253][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.693578][T16345] [ 583.695907][T16345] Uninit was stored to memory at: [ 583.700934][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 583.706668][T16345] __msan_chain_origin+0x50/0x90 [ 583.711623][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 583.716754][T16345] get_compat_msghdr+0x108/0x2b0 [ 583.721711][T16345] do_recvmmsg+0xdba/0x22c0 [ 583.726217][T16345] __sys_recvmmsg+0x5dd/0x610 [ 583.730902][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.737004][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.743168][T16345] __do_fast_syscall_32+0x2af/0x480 [ 583.748374][T16345] do_fast_syscall_32+0x6b/0xd0 [ 583.753231][T16345] do_SYSENTER_32+0x73/0x90 [ 583.757736][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.764047][T16345] [ 583.766369][T16345] Uninit was stored to memory at: [ 583.771419][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 583.777150][T16345] __msan_chain_origin+0x50/0x90 [ 583.782094][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 583.787231][T16345] get_compat_msghdr+0x108/0x2b0 [ 583.792173][T16345] do_recvmmsg+0xdba/0x22c0 [ 583.796696][T16345] __sys_recvmmsg+0x5dd/0x610 [ 583.801378][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.807450][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.813605][T16345] __do_fast_syscall_32+0x2af/0x480 [ 583.818806][T16345] do_fast_syscall_32+0x6b/0xd0 [ 583.823680][T16345] do_SYSENTER_32+0x73/0x90 [ 583.828189][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.834498][T16345] [ 583.836827][T16345] Uninit was stored to memory at: [ 583.841866][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 583.847610][T16345] __msan_chain_origin+0x50/0x90 [ 583.852566][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 583.857689][T16345] get_compat_msghdr+0x108/0x2b0 [ 583.862642][T16345] do_recvmmsg+0xdba/0x22c0 [ 583.867153][T16345] __sys_recvmmsg+0x5dd/0x610 [ 583.871831][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.877903][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.884063][T16345] __do_fast_syscall_32+0x2af/0x480 [ 583.889264][T16345] do_fast_syscall_32+0x6b/0xd0 [ 583.894120][T16345] do_SYSENTER_32+0x73/0x90 [ 583.898638][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.904947][T16345] [ 583.907260][T16345] Uninit was stored to memory at: [ 583.912285][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 583.918005][T16345] __msan_chain_origin+0x50/0x90 [ 583.922951][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 583.928060][T16345] get_compat_msghdr+0x108/0x2b0 [ 583.932996][T16345] do_recvmmsg+0xdba/0x22c0 [ 583.937513][T16345] __sys_recvmmsg+0x5dd/0x610 [ 583.942206][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 583.948278][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 583.954448][T16345] __do_fast_syscall_32+0x2af/0x480 [ 583.959653][T16345] do_fast_syscall_32+0x6b/0xd0 [ 583.964508][T16345] do_SYSENTER_32+0x73/0x90 [ 583.969036][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 583.975350][T16345] [ 583.977683][T16345] Uninit was stored to memory at: [ 583.982819][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 583.988556][T16345] __msan_chain_origin+0x50/0x90 [ 583.993511][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 583.998622][T16345] get_compat_msghdr+0x108/0x2b0 [ 584.003563][T16345] do_recvmmsg+0xdba/0x22c0 [ 584.008062][T16345] __sys_recvmmsg+0x5dd/0x610 [ 584.012739][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.018831][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.024987][T16345] __do_fast_syscall_32+0x2af/0x480 [ 584.030188][T16345] do_fast_syscall_32+0x6b/0xd0 [ 584.035040][T16345] do_SYSENTER_32+0x73/0x90 [ 584.039548][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.045860][T16345] [ 584.048180][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 584.054857][T16345] do_recvmmsg+0xc2/0x22c0 [ 584.059274][T16345] do_recvmmsg+0xc2/0x22c0 [ 584.322769][T16345] not chained 1550000 origins [ 584.327524][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 584.336209][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.346290][T16345] Call Trace: [ 584.349621][T16345] dump_stack+0x21c/0x280 [ 584.354001][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 584.359764][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 584.364919][T16345] ? kmsan_get_metadata+0x116/0x180 [ 584.370167][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 584.376021][T16345] ? kmsan_get_metadata+0x116/0x180 [ 584.381270][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 584.387117][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 584.393230][T16345] ? kmsan_get_metadata+0x116/0x180 [ 584.398466][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 584.404067][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 584.410194][T16345] ? _copy_from_user+0x221/0x330 [ 584.415178][T16345] ? kmsan_get_metadata+0x116/0x180 [ 584.420411][T16345] __msan_chain_origin+0x50/0x90 [ 584.425397][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 584.430572][T16345] get_compat_msghdr+0x108/0x2b0 [ 584.435564][T16345] do_recvmmsg+0xdba/0x22c0 [ 584.440114][T16345] ? __msan_get_context_state+0x9/0x20 [ 584.445632][T16345] ? kmsan_get_metadata+0x116/0x180 [ 584.450881][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 584.456819][T16345] ? kmsan_get_metadata+0x116/0x180 [ 584.462065][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 584.467387][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 584.472187][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 584.476993][T16345] __sys_recvmmsg+0x5dd/0x610 [ 584.481734][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.487857][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.494049][T16345] __do_fast_syscall_32+0x2af/0x480 [ 584.499297][T16345] do_fast_syscall_32+0x6b/0xd0 [ 584.504230][T16345] do_SYSENTER_32+0x73/0x90 [ 584.508791][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.515152][T16345] RIP: 0023:0xf7f31549 [ 584.519212][T16345] Code: Bad RIP value. [ 584.523274][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 584.531695][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 584.539668][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.547644][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.555615][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 584.563601][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.571580][T16345] Uninit was stored to memory at: [ 584.576613][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 584.582337][T16345] __msan_chain_origin+0x50/0x90 [ 584.587298][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 584.592426][T16345] get_compat_msghdr+0x108/0x2b0 [ 584.597371][T16345] do_recvmmsg+0xdba/0x22c0 [ 584.601870][T16345] __sys_recvmmsg+0x5dd/0x610 [ 584.606549][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.612642][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.618814][T16345] __do_fast_syscall_32+0x2af/0x480 [ 584.624029][T16345] do_fast_syscall_32+0x6b/0xd0 [ 584.628885][T16345] do_SYSENTER_32+0x73/0x90 [ 584.633389][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.639697][T16345] [ 584.642027][T16345] Uninit was stored to memory at: [ 584.647051][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 584.652784][T16345] __msan_chain_origin+0x50/0x90 [ 584.657724][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 584.662854][T16345] get_compat_msghdr+0x108/0x2b0 [ 584.667802][T16345] do_recvmmsg+0xdba/0x22c0 [ 584.672313][T16345] __sys_recvmmsg+0x5dd/0x610 [ 584.676988][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.683055][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.689709][T16345] __do_fast_syscall_32+0x2af/0x480 [ 584.694919][T16345] do_fast_syscall_32+0x6b/0xd0 [ 584.699772][T16345] do_SYSENTER_32+0x73/0x90 [ 584.704277][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.710676][T16345] [ 584.713007][T16345] Uninit was stored to memory at: [ 584.718031][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 584.723768][T16345] __msan_chain_origin+0x50/0x90 [ 584.728708][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 584.733829][T16345] get_compat_msghdr+0x108/0x2b0 [ 584.738766][T16345] do_recvmmsg+0xdba/0x22c0 [ 584.743271][T16345] __sys_recvmmsg+0x5dd/0x610 [ 584.747952][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.754025][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.760183][T16345] __do_fast_syscall_32+0x2af/0x480 [ 584.765389][T16345] do_fast_syscall_32+0x6b/0xd0 [ 584.770244][T16345] do_SYSENTER_32+0x73/0x90 [ 584.774749][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.781057][T16345] [ 584.783374][T16345] Uninit was stored to memory at: [ 584.788425][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 584.794169][T16345] __msan_chain_origin+0x50/0x90 [ 584.799121][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 584.804250][T16345] get_compat_msghdr+0x108/0x2b0 [ 584.809191][T16345] do_recvmmsg+0xdba/0x22c0 [ 584.813712][T16345] __sys_recvmmsg+0x5dd/0x610 [ 584.818393][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.824488][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.830645][T16345] __do_fast_syscall_32+0x2af/0x480 [ 584.835858][T16345] do_fast_syscall_32+0x6b/0xd0 [ 584.840705][T16345] do_SYSENTER_32+0x73/0x90 [ 584.845210][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.851539][T16345] [ 584.853858][T16345] Uninit was stored to memory at: [ 584.858906][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 584.864630][T16345] __msan_chain_origin+0x50/0x90 [ 584.869568][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 584.874699][T16345] get_compat_msghdr+0x108/0x2b0 [ 584.879650][T16345] do_recvmmsg+0xdba/0x22c0 [ 584.884191][T16345] __sys_recvmmsg+0x5dd/0x610 [ 584.888879][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.894952][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.901126][T16345] __do_fast_syscall_32+0x2af/0x480 [ 584.906358][T16345] do_fast_syscall_32+0x6b/0xd0 [ 584.911229][T16345] do_SYSENTER_32+0x73/0x90 [ 584.915734][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.922042][T16345] [ 584.924361][T16345] Uninit was stored to memory at: [ 584.929388][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 584.935107][T16345] __msan_chain_origin+0x50/0x90 [ 584.940045][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 584.945164][T16345] get_compat_msghdr+0x108/0x2b0 [ 584.950100][T16345] do_recvmmsg+0xdba/0x22c0 [ 584.954603][T16345] __sys_recvmmsg+0x5dd/0x610 [ 584.959281][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 584.965373][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 584.971579][T16345] __do_fast_syscall_32+0x2af/0x480 [ 584.976780][T16345] do_fast_syscall_32+0x6b/0xd0 [ 584.981628][T16345] do_SYSENTER_32+0x73/0x90 [ 584.986139][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 584.992497][T16345] [ 584.994835][T16345] Uninit was stored to memory at: [ 584.999877][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 585.005617][T16345] __msan_chain_origin+0x50/0x90 [ 585.010572][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 585.015706][T16345] get_compat_msghdr+0x108/0x2b0 [ 585.020650][T16345] do_recvmmsg+0xdba/0x22c0 [ 585.025170][T16345] __sys_recvmmsg+0x5dd/0x610 [ 585.029849][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.036007][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.042192][T16345] __do_fast_syscall_32+0x2af/0x480 [ 585.047398][T16345] do_fast_syscall_32+0x6b/0xd0 [ 585.052251][T16345] do_SYSENTER_32+0x73/0x90 [ 585.056757][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.063067][T16345] [ 585.065396][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 585.072076][T16345] do_recvmmsg+0xc2/0x22c0 [ 585.076485][T16345] do_recvmmsg+0xc2/0x22c0 [ 585.299717][T16345] not chained 1560000 origins [ 585.304474][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 585.313172][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.323288][T16345] Call Trace: [ 585.326614][T16345] dump_stack+0x21c/0x280 [ 585.330980][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 585.336788][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 585.341938][T16345] ? kmsan_get_metadata+0x116/0x180 [ 585.347176][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 585.353060][T16345] ? kmsan_get_metadata+0x116/0x180 [ 585.358377][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 585.364220][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 585.370321][T16345] ? kmsan_get_metadata+0x116/0x180 [ 585.375559][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 585.381147][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 585.387255][T16345] ? _copy_from_user+0x221/0x330 [ 585.392228][T16345] ? kmsan_get_metadata+0x116/0x180 [ 585.397460][T16345] __msan_chain_origin+0x50/0x90 [ 585.402437][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 585.407617][T16345] get_compat_msghdr+0x108/0x2b0 [ 585.412604][T16345] do_recvmmsg+0xdba/0x22c0 [ 585.417153][T16345] ? __msan_get_context_state+0x9/0x20 [ 585.422663][T16345] ? kmsan_get_metadata+0x116/0x180 [ 585.427898][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 585.433827][T16345] ? kmsan_get_metadata+0x116/0x180 [ 585.439067][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 585.444390][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 585.449181][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 585.453980][T16345] __sys_recvmmsg+0x5dd/0x610 [ 585.458710][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.464926][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.471125][T16345] __do_fast_syscall_32+0x2af/0x480 [ 585.476417][T16345] do_fast_syscall_32+0x6b/0xd0 [ 585.481303][T16345] do_SYSENTER_32+0x73/0x90 [ 585.485838][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.492174][T16345] RIP: 0023:0xf7f31549 [ 585.496270][T16345] Code: Bad RIP value. [ 585.500355][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 585.508802][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 585.516771][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.524747][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.532730][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 585.540727][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.548713][T16345] Uninit was stored to memory at: [ 585.553775][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 585.559507][T16345] __msan_chain_origin+0x50/0x90 [ 585.564457][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 585.569582][T16345] get_compat_msghdr+0x108/0x2b0 [ 585.574543][T16345] do_recvmmsg+0xdba/0x22c0 [ 585.579051][T16345] __sys_recvmmsg+0x5dd/0x610 [ 585.583736][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.589811][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.595977][T16345] __do_fast_syscall_32+0x2af/0x480 [ 585.601184][T16345] do_fast_syscall_32+0x6b/0xd0 [ 585.606047][T16345] do_SYSENTER_32+0x73/0x90 [ 585.610571][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.616891][T16345] [ 585.619213][T16345] Uninit was stored to memory at: [ 585.624247][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 585.629975][T16345] __msan_chain_origin+0x50/0x90 [ 585.634924][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 585.640047][T16345] get_compat_msghdr+0x108/0x2b0 [ 585.644997][T16345] do_recvmmsg+0xdba/0x22c0 [ 585.649529][T16345] __sys_recvmmsg+0x5dd/0x610 [ 585.654229][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.660305][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.666468][T16345] __do_fast_syscall_32+0x2af/0x480 [ 585.671683][T16345] do_fast_syscall_32+0x6b/0xd0 [ 585.676548][T16345] do_SYSENTER_32+0x73/0x90 [ 585.681077][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.687424][T16345] [ 585.689746][T16345] Uninit was stored to memory at: [ 585.694789][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 585.700514][T16345] __msan_chain_origin+0x50/0x90 [ 585.705465][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 585.710610][T16345] get_compat_msghdr+0x108/0x2b0 [ 585.715566][T16345] do_recvmmsg+0xdba/0x22c0 [ 585.720083][T16345] __sys_recvmmsg+0x5dd/0x610 [ 585.724782][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.730863][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.737032][T16345] __do_fast_syscall_32+0x2af/0x480 [ 585.742255][T16345] do_fast_syscall_32+0x6b/0xd0 [ 585.747124][T16345] do_SYSENTER_32+0x73/0x90 [ 585.751641][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.757957][T16345] [ 585.760292][T16345] Uninit was stored to memory at: [ 585.765329][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 585.771068][T16345] __msan_chain_origin+0x50/0x90 [ 585.776027][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 585.781159][T16345] get_compat_msghdr+0x108/0x2b0 [ 585.786121][T16345] do_recvmmsg+0xdba/0x22c0 [ 585.790634][T16345] __sys_recvmmsg+0x5dd/0x610 [ 585.795330][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.801420][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.807589][T16345] __do_fast_syscall_32+0x2af/0x480 [ 585.812815][T16345] do_fast_syscall_32+0x6b/0xd0 [ 585.817673][T16345] do_SYSENTER_32+0x73/0x90 [ 585.822185][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.828499][T16345] [ 585.830831][T16345] Uninit was stored to memory at: [ 585.835862][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 585.841608][T16345] __msan_chain_origin+0x50/0x90 [ 585.846555][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 585.851673][T16345] get_compat_msghdr+0x108/0x2b0 [ 585.856618][T16345] do_recvmmsg+0xdba/0x22c0 [ 585.861147][T16345] __sys_recvmmsg+0x5dd/0x610 [ 585.865850][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.871930][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.878134][T16345] __do_fast_syscall_32+0x2af/0x480 [ 585.883347][T16345] do_fast_syscall_32+0x6b/0xd0 [ 585.888203][T16345] do_SYSENTER_32+0x73/0x90 [ 585.892710][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.899023][T16345] [ 585.901340][T16345] Uninit was stored to memory at: [ 585.906370][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 585.912122][T16345] __msan_chain_origin+0x50/0x90 [ 585.917063][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 585.922175][T16345] get_compat_msghdr+0x108/0x2b0 [ 585.927118][T16345] do_recvmmsg+0xdba/0x22c0 [ 585.931617][T16345] __sys_recvmmsg+0x5dd/0x610 [ 585.936347][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 585.942438][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 585.948602][T16345] __do_fast_syscall_32+0x2af/0x480 [ 585.953786][T16345] do_fast_syscall_32+0x6b/0xd0 [ 585.958612][T16345] do_SYSENTER_32+0x73/0x90 [ 585.963113][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 585.969412][T16345] [ 585.971718][T16345] Uninit was stored to memory at: [ 585.976743][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 585.982471][T16345] __msan_chain_origin+0x50/0x90 [ 585.987420][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 585.992540][T16345] get_compat_msghdr+0x108/0x2b0 [ 585.997487][T16345] do_recvmmsg+0xdba/0x22c0 [ 586.001980][T16345] __sys_recvmmsg+0x5dd/0x610 [ 586.006656][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.012721][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.018892][T16345] __do_fast_syscall_32+0x2af/0x480 [ 586.024119][T16345] do_fast_syscall_32+0x6b/0xd0 [ 586.028992][T16345] do_SYSENTER_32+0x73/0x90 [ 586.033499][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.039810][T16345] [ 586.042125][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 586.048811][T16345] do_recvmmsg+0xc2/0x22c0 [ 586.053238][T16345] do_recvmmsg+0xc2/0x22c0 [ 586.273342][T16345] not chained 1570000 origins [ 586.278090][T16345] CPU: 1 PID: 16345 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 586.286776][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.296851][T16345] Call Trace: [ 586.300176][T16345] dump_stack+0x21c/0x280 [ 586.304543][T16345] kmsan_internal_chain_origin+0x6f/0x130 [ 586.310295][T16345] ? skb_recv_datagram+0x46e/0x4f0 [ 586.315443][T16345] ? kmsan_get_metadata+0x116/0x180 [ 586.320671][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 586.326510][T16345] ? kmsan_get_metadata+0x116/0x180 [ 586.331744][T16345] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 586.337595][T16345] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 586.343695][T16345] ? kmsan_get_metadata+0x116/0x180 [ 586.348929][T16345] ? kmsan_set_origin_checked+0x95/0xf0 [ 586.354512][T16345] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 586.360629][T16345] ? _copy_from_user+0x221/0x330 [ 586.365611][T16345] ? kmsan_get_metadata+0x116/0x180 [ 586.370840][T16345] __msan_chain_origin+0x50/0x90 [ 586.375814][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 586.380981][T16345] get_compat_msghdr+0x108/0x2b0 [ 586.385963][T16345] do_recvmmsg+0xdba/0x22c0 [ 586.390502][T16345] ? __msan_get_context_state+0x9/0x20 [ 586.396013][T16345] ? kmsan_get_metadata+0x116/0x180 [ 586.401253][T16345] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 586.407182][T16345] ? kmsan_get_metadata+0x116/0x180 [ 586.412422][T16345] ? __msan_poison_alloca+0xf0/0x120 [ 586.417736][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 586.422526][T16345] ? __sys_recvmmsg+0xbb/0x610 [ 586.427322][T16345] __sys_recvmmsg+0x5dd/0x610 [ 586.432056][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.438176][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.444470][T16345] __do_fast_syscall_32+0x2af/0x480 [ 586.449717][T16345] do_fast_syscall_32+0x6b/0xd0 [ 586.454596][T16345] do_SYSENTER_32+0x73/0x90 [ 586.459132][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.465474][T16345] RIP: 0023:0xf7f31549 [ 586.469545][T16345] Code: Bad RIP value. [ 586.473618][T16345] RSP: 002b:00000000f552b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 586.482047][T16345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 586.490034][T16345] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 586.498026][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 586.506016][T16345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 586.513998][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 586.521975][T16345] Uninit was stored to memory at: [ 586.527032][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 586.532766][T16345] __msan_chain_origin+0x50/0x90 [ 586.537714][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 586.542821][T16345] get_compat_msghdr+0x108/0x2b0 [ 586.547750][T16345] do_recvmmsg+0xdba/0x22c0 [ 586.552256][T16345] __sys_recvmmsg+0x5dd/0x610 [ 586.556939][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.562998][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.569172][T16345] __do_fast_syscall_32+0x2af/0x480 [ 586.574366][T16345] do_fast_syscall_32+0x6b/0xd0 [ 586.579223][T16345] do_SYSENTER_32+0x73/0x90 [ 586.583719][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.590036][T16345] [ 586.592344][T16345] Uninit was stored to memory at: [ 586.597449][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 586.603177][T16345] __msan_chain_origin+0x50/0x90 [ 586.608131][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 586.613331][T16345] get_compat_msghdr+0x108/0x2b0 [ 586.618291][T16345] do_recvmmsg+0xdba/0x22c0 [ 586.622798][T16345] __sys_recvmmsg+0x5dd/0x610 [ 586.627472][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.633529][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.639694][T16345] __do_fast_syscall_32+0x2af/0x480 [ 586.644900][T16345] do_fast_syscall_32+0x6b/0xd0 [ 586.649747][T16345] do_SYSENTER_32+0x73/0x90 [ 586.654259][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.660673][T16345] [ 586.662984][T16345] Uninit was stored to memory at: [ 586.668005][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 586.673714][T16345] __msan_chain_origin+0x50/0x90 [ 586.678657][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 586.683758][T16345] get_compat_msghdr+0x108/0x2b0 [ 586.688697][T16345] do_recvmmsg+0xdba/0x22c0 [ 586.693188][T16345] __sys_recvmmsg+0x5dd/0x610 [ 586.697868][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.703939][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.710081][T16345] __do_fast_syscall_32+0x2af/0x480 [ 586.715284][T16345] do_fast_syscall_32+0x6b/0xd0 [ 586.720146][T16345] do_SYSENTER_32+0x73/0x90 [ 586.724651][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.730969][T16345] [ 586.733281][T16345] Uninit was stored to memory at: [ 586.738297][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 586.744002][T16345] __msan_chain_origin+0x50/0x90 [ 586.748924][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 586.754019][T16345] get_compat_msghdr+0x108/0x2b0 [ 586.758936][T16345] do_recvmmsg+0xdba/0x22c0 [ 586.763421][T16345] __sys_recvmmsg+0x5dd/0x610 [ 586.768083][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.774161][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.780299][T16345] __do_fast_syscall_32+0x2af/0x480 [ 586.785489][T16345] do_fast_syscall_32+0x6b/0xd0 [ 586.790321][T16345] do_SYSENTER_32+0x73/0x90 [ 586.794811][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.801121][T16345] [ 586.803429][T16345] Uninit was stored to memory at: [ 586.808453][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 586.814604][T16345] __msan_chain_origin+0x50/0x90 [ 586.819540][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 586.824685][T16345] get_compat_msghdr+0x108/0x2b0 [ 586.829650][T16345] do_recvmmsg+0xdba/0x22c0 [ 586.834178][T16345] __sys_recvmmsg+0x5dd/0x610 [ 586.838856][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.844922][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.851057][T16345] __do_fast_syscall_32+0x2af/0x480 [ 586.856240][T16345] do_fast_syscall_32+0x6b/0xd0 [ 586.861075][T16345] do_SYSENTER_32+0x73/0x90 [ 586.865582][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.871888][T16345] [ 586.874232][T16345] Uninit was stored to memory at: [ 586.879243][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 586.884957][T16345] __msan_chain_origin+0x50/0x90 [ 586.889881][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 586.894989][T16345] get_compat_msghdr+0x108/0x2b0 [ 586.899909][T16345] do_recvmmsg+0xdba/0x22c0 [ 586.904408][T16345] __sys_recvmmsg+0x5dd/0x610 [ 586.909066][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.915114][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.921269][T16345] __do_fast_syscall_32+0x2af/0x480 [ 586.926467][T16345] do_fast_syscall_32+0x6b/0xd0 [ 586.931307][T16345] do_SYSENTER_32+0x73/0x90 [ 586.935802][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 586.942112][T16345] [ 586.944479][T16345] Uninit was stored to memory at: [ 586.949516][T16345] kmsan_internal_chain_origin+0xad/0x130 [ 586.955224][T16345] __msan_chain_origin+0x50/0x90 [ 586.960160][T16345] __get_compat_msghdr+0x6db/0x9d0 [ 586.965263][T16345] get_compat_msghdr+0x108/0x2b0 [ 586.970177][T16345] do_recvmmsg+0xdba/0x22c0 [ 586.974711][T16345] __sys_recvmmsg+0x5dd/0x610 [ 586.979378][T16345] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 586.985436][T16345] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 586.991584][T16345] __do_fast_syscall_32+0x2af/0x480 [ 586.996776][T16345] do_fast_syscall_32+0x6b/0xd0 [ 587.001633][T16345] do_SYSENTER_32+0x73/0x90 [ 587.006224][T16345] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.012530][T16345] [ 587.014862][T16345] Local variable ----msg_sys@do_recvmmsg created at: [ 587.021515][T16345] do_recvmmsg+0xc2/0x22c0 [ 587.025914][T16345] do_recvmmsg+0xc2/0x22c0 11:36:04 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:36:04 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', 'macvlan\x00'}, &(0x7f0000000100)='macvlan\x00', 0x8, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) clone(0x4040000, 0x0, 0x0, 0x0, 0x0) 11:36:04 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@local, @in6=@local}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe4) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:04 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f00000002c0)) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1406, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004014}, 0x10) 11:36:04 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) 11:36:04 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c588, 0x0, 0x0, 0x0, 0x0) [ 587.424197][T16527] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 587.444658][T16527] device gretap0 entered promiscuous mode [ 587.450508][T16527] device macvlan2 entered promiscuous mode [ 587.506590][T16533] IPVS: ftp: loaded support on port[0] = 21 [ 587.691217][T16535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16535 comm=syz-executor.1 11:36:05 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x9e) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 587.771073][T16527] device gretap0 left promiscuous mode 11:36:05 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) [ 587.932213][T16540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16540 comm=syz-executor.1 11:36:05 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x108) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x0, 0x6}) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000003c0)) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xb8, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bb12d6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45931a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e08ae77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa426}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f819b14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9661c63}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ccb9f42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41d0}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x134ebb25}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cbe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e382fce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65db}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x44015) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) 11:36:06 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x111000, 0x14f, 0x4}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0xba, 0xc5, 0xff, 0xda6f, 0x302c, 0x1}) 11:36:06 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) 11:36:06 executing program 0: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc04c5611, &(0x7f0000000080)={0x7, 0x1, 0x4, 0x4000, 0x3, {0x77359400}, {0x4, 0x1, 0x7f, 0xf9, 0x80, 0x7f, "1b8c6d5a"}, 0x2, 0x3, @planes=&(0x7f0000000040)={0x0, 0x3, @mem_offset, 0x5}, 0x4}) mq_unlink(&(0x7f0000000100)='\x05\x004dE') set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket$inet6_sctp(0xa, 0x2, 0x84) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000000), 0x4000223, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3, 0x3a7f}, 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x3}, 0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r3, 0x3, 0x80}, 0x8) [ 588.869434][T16536] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 588.889529][T16536] device gretap0 entered promiscuous mode [ 588.895472][T16536] device macvlan2 entered promiscuous mode [ 589.064284][T16536] device gretap0 left promiscuous mode 11:36:07 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) 11:36:07 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x2, 0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x7) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000240)) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @any, 0x3}, 0xa) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x3ff, 0x3, 0x3, 0xe35c}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:07 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) 11:36:07 executing program 0: set_mempolicy(0x0, &(0x7f0000000200)=0x1, 0x3) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:07 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x80) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa0) inotify_rm_watch(r0, r1) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) inotify_rm_watch(r0, r3) inotify_rm_watch(0xffffffffffffffff, r3) 11:36:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c5bc, 0x0, 0x0, 0x0, 0x0) 11:36:09 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) 11:36:09 executing program 2: set_mempolicy(0x1, &(0x7f0000000200)=0x44, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:09 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000240)=0x1) 11:36:09 executing program 0: getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/203, 0xcb) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1144}, 0x1, 0x0, 0x0, 0x1}, 0x41) 11:36:09 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000000000001000000440001000c00070000000000000000000c0006006c626c637200000008000b000000700008000800000000000800090000000000080001000a000000080005"], 0x58}}, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000140)={0x8001, 0x7, [0x9, 0x401, 0x3, 0x81, 0x7], 0x3ff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000180)=""/62) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r1, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x5) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 591.949646][T16631] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 592.151963][T16631] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 11:36:09 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) 11:36:09 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) socket$nl_crypto(0x10, 0x3, 0x15) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:09 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) r3 = socket(0x10, 0x2, 0x0) close(r3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) splice(r7, 0x0, r4, 0x0, 0x80000003, 0x6) r8 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8, 0x400000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000000080)) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 592.512014][T16649] IPVS: ftp: loaded support on port[0] = 21 11:36:10 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000080)) fcntl$setsig(r3, 0xa, 0x3) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550d, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f0000000200)=0xfffffffffffffff8, 0x0) clone(0x91092500, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x3ff, 0x42080) [ 592.882952][T16663] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 592.903557][T16663] device gretap0 entered promiscuous mode [ 592.909510][T16663] device macvlan2 entered promiscuous mode [ 593.022130][T16665] IPVS: ftp: loaded support on port[0] = 21 [ 593.194022][T16663] device gretap0 left promiscuous mode 11:36:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='];@-*,\x00', 0x0, r0) set_mempolicy(0x4000, &(0x7f0000000200)=0x3, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000040)) 11:36:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c5d1, 0x0, 0x0, 0x0, 0x0) 11:36:11 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:36:11 executing program 5: syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) umount2(&(0x7f0000006840)='./file0\x00', 0x2) syz_mount_image$afs(&(0x7f00000014c0)='afs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dyn='dyn'}]}) 11:36:11 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x4200) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 594.049405][T16681] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 594.073559][T16681] device gretap0 entered promiscuous mode [ 594.079439][T16681] device macvlan2 entered promiscuous mode [ 594.126754][T16727] IPVS: ftp: loaded support on port[0] = 21 [ 594.353889][T16681] device gretap0 left promiscuous mode 11:36:12 executing program 0: ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f00000000c0)={&(0x7f0000000040)=""/94, 0x5e}) process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/42, 0x2a}], 0x1, &(0x7f0000002480)=[{&(0x7f0000002280)=""/157, 0x9d}, {&(0x7f0000002340)}, {&(0x7f0000002380)=""/252, 0xfc}], 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = socket(0x10, 0x2, 0x0) close(r4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, &(0x7f0000000100)) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000002340)=0x9bb, 0x4) setreuid(0x0, r3) fsetxattr$security_capability(r1, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x7, 0x1}, {0x1, 0x20}], r3}, 0x18, 0x2) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:12 executing program 2: set_mempolicy(0x4000, &(0x7f0000000000)=0x5, 0x8) r0 = openat$dsp(0xffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xdba7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x1000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x6}}]}, 0xa0}}, 0x1) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000080)) fsync(0xffffffffffffffff) r1 = openat$null(0xffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000100)=0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:12 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x4043, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000140)=@v2, 0x14, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x7fff) 11:36:12 executing program 1: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0xfab3) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x0, 0x8}) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r0, 0x0) [ 595.285754][ T29] audit: type=1800 audit(1600169772.708:79): pid=16749 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16310 res=0 [ 595.440522][ T29] audit: type=1800 audit(1600169772.748:80): pid=16749 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16310 res=0 11:36:13 executing program 4: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getpeername(r0, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x6b8aeec0, 0x0, 0x0, 0x0, 0x0) 11:36:13 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x4043, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000140)=@v2, 0x14, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x7fff) 11:36:13 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0x6) r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x400, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200400d2}, 0x0) 11:36:13 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) syz_read_part_table(0x9, 0x6, &(0x7f0000001480)=[{&(0x7f0000000000)="8e3008b37da039c22c150f4a8e65b32a5a728fa05aabd08dd563529e6810b7c5901a3c377953e53d3e04306b51ba9fc41e2be4e5d226161195a2b7810c2ee9154c67be17dd346008c24c0a2c72c71cbdb51cb1ab1879c6e4f30a2ec84b201aca35e62c16b864000da0671a916183ba791f56512cb0ef787bc7dd4339bdf038bd850470a2766e0678cda6c672768fd1c8cf251627316c1d1f4b9d11a99f894605e1c0140464a12890a1b21d6cee44", 0xae, 0xfffffffa}, {&(0x7f00000000c0)="ab497844acbf32933dbbd71d951788d82baa90bd6333e2a3b89502316535edb3b1b63830f720f67a3009e40055bb71a048cb14a8fcadbc3e6c56621b8c06823565703f7fa961d815bf7298f2cdf1d0f833f11960bca0bdbd354f2cafc5babbe385620468fc057dc79bd2e50d47528c296c4f99318f0f2ad33fe630a92c537b943bf89e3014cbd10f56ca561484bec9985c86ac067427e2ba98f82ce37680228d6f31a3f1b42f76965b67ffdd498e11253808f0276df33958c653c3ee3abaa748d6f12055417d987aaa2ba37bf8f00dfff3d90ec8c6b496ca829fc9f0afe019defcdc91a60480452e6edcc909a2cb7a1a7d5bccbd68d0", 0xf6, 0x51d3}, {&(0x7f0000000240)="0add35ace7c6cdff36576df3a6ea3d2d45dc0ea0c082c4df630b06b441293e3e9ec37e69313aa44d0f477ad9b09744f2bc9b25793d63e0028804eb55f534164db7a3dfc0143b06e5abcd8ac946d4f76a847208498bb8b8f2e438e3122c757a30d13580aeec05762ce472402e9872f304d9ed2e45a93fed2421fb169ddebc5894f37550f003151997e7edd25341c4870ea58fd431253c7c30d4d502ee56133d98ee6d776b2bf8e76926283597f3205c509b47b23c439529c0b6d98f7ea439e2b20e6b43c5d6", 0xc5, 0x7}, {&(0x7f0000001500)="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", 0x10a4, 0x7ff}, {&(0x7f0000001340)="74f314acef1f3130671b325f6bbd9be2c486e5bb631ed4e6bfc8018c4c68b946f1588286567f2ba2bd2f5ed90be82d02f2b4446f80351834193846fdc3c18c43516cbec1a825872ce99231a2576f6de411d84b108eb2d75db2203bb8222efbb24c2378ba5ea7c893c4cbe78258031b0640e674aabc240ffe970180d53d9f4906dad59f9262e14f99c1b1b98d08fb0b5638ff7dfb7dfc9ad35b7212feb474c6244107c6988ff5e72a278c8621079e", 0xae, 0x7}, {&(0x7f0000001400)="45e3d91936ea0ba7b323c1d24ef1163aa6c579efde40e01f48cef19460302760cefe0d37789f26ecc71c7e732642948dea12d30143363d51fdae142b2a99fade8138ad3bb7b8a4124bb1af11c38a85d5c7dc1e947fc5d3e7d11a9a372417ab839be0c1a5210ac3e3bcbca53512961e2b8a7402ecf61e6c84", 0x78, 0x6f53}]) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 596.201917][ T29] audit: type=1800 audit(1600169773.618:81): pid=16769 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16359 res=0 11:36:14 executing program 4: set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x80000001) clone(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x202000, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000040)) 11:36:14 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x808, 0x3) clone(0x28800100, 0x0, 0x0, 0x0, 0x0) 11:36:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c5fc, 0x0, 0x0, 0x0, 0x0) 11:36:14 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:36:14 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x4043, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000140)=@v2, 0x14, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x7fff) 11:36:14 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0xb8801100, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x964, 0x1, 0x5, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x1}, 0x3, 0xe1, 0x7, 0x8, 0xd, 'syz0\x00', "cd4a66b1e0dd7f3c57e441a16e7a4daaa227bd58c3dc354196bb44884f6a82e5", "7e7917a21357e6cf0499cb8a7eb4acb4cec9ffe837e39e1056c67d4b6dd41a11", [{0x8, 0x5, {0x1, 0x8}}, {0x1, 0x6, {0x1, 0x1}}, {0x6, 0x0, {0x2, 0xfff}}, {0xc467, 0x3, {0x1, 0x20}}, {0x100, 0x3, {0x1, 0x3f}}, {0x8001, 0x61f7, {0x3, 0x81}}, {0x9, 0x8001, {0x1, 0x28fe}}, {0x7fff, 0x100, {0x2, 0x1}}, {0x3f, 0x8, {0x1, 0x4a4}}, {0x4, 0x3, {0x1, 0x8000}}, {0xfc00, 0x0, {0x0, 0x3}}, {0x4, 0x1000, {0x1, 0x977}}, {0x1, 0xdd, {0x3, 0x8000}}, {0x1, 0x7, {0x0, 0x7}}, {0x2, 0x8, {0x3, 0x7fff}}, {0x200, 0x7, {0x3, 0x6}}, {0x5, 0x3, {0x2, 0x6}}, {0x4b05, 0x7, {0x2, 0x3}}, {0xf23, 0x200, {0x0, 0x1f}}, {0xf711, 0x8, {0x1, 0x135e}}, {0x1, 0x1, {0x0, 0x80000001}}, {0x7f, 0x5, {0x1, 0x4}}, {0x200, 0x9, {0x3, 0x69}}, {0x3, 0x4, {0x3, 0x3ff}}, {0xa9, 0x6, {0x2, 0x2}}, {0xe60d, 0x2, {0x2, 0x200}}, {0x1, 0x3, {0x2, 0x40}}, {0x30f, 0x5, {0x2, 0x7312}}, {0x9, 0x7, {0x3, 0x3ff}}, {0x6, 0x2, {0x3, 0x5}}, {0x6, 0x4, {0x3, 0x5}}, {0x100, 0x40, {0x0, 0x80000001}}, {0x9, 0x81, {0x3, 0x3}}, {0xffff, 0x7, {0x0, 0x800}}, {0x38, 0x6, {0x2, 0x2}}, {0x6, 0x800, {0x2, 0x7}}, {0x3, 0xde, {0x2, 0xd233}}, {0x6, 0x3, {0x2, 0x3ff}}, {0x7, 0xffff, {0x3, 0x101}}, {0x7fff, 0x8001, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{}, 0x4, 0x9, 0x8, 0x0, 0x7, 'syz1\x00', "a00cdbb1dccedb85c7597294d7b53d2f47ac98b7812bbf6ff7a5965aed82f023", "2e025cfe39a095729f0a167bdf8b4648db57a6c5b8d4ab27e1242491598a4faf", [{0x4, 0x0, {0x0, 0x21}}, {0x4, 0x5, {0x3, 0x1b53}}, {0x9, 0xffff, {0x0, 0x101}}, {0x9, 0x2, {0x3, 0x6}}, {0x8, 0x1, {0x3, 0x1}}, {0xc6, 0x8, {0x2, 0x1}}, {0xa72, 0xfe, {0x2, 0x8}}, {0x1, 0x8b9, {0x1, 0x1}}, {0x9, 0x1, {0xf7c9c0903f2c7e5d, 0x9000000}}, {0x71, 0xa863, {0x1, 0x6}}, {0x848, 0x8, {0x1}}, {0x5, 0xff, {0x3, 0x1000}}, {0x1, 0xfff, {0x3, 0x5235}}, {0x5, 0x9, {0x0, 0xb9}}, {0x8, 0x5, {0x3}}, {0x200, 0x1, {0x1, 0x5}}, {0x17a8, 0x6, {0x1, 0xffff0000}}, {0xc41c, 0x1, {0x2, 0x5}}, {0x2, 0x26, {0x1, 0x5}}, {0x7, 0x58f3, {0x3}}, {0x7, 0x8, {0x1, 0x6}}, {0x1, 0xc4, {0x3, 0x5}}, {0x3, 0x5, {0x3, 0x6}}, {0x8a, 0x800, {0x0, 0x6}}, {0x93, 0xd9, {0x2, 0x8}}, {0x0, 0x0, {0x0, 0x7fff}}, {0x3, 0x8, {0x2, 0x4}}, {0x9, 0x7, {0x1, 0x3}}, {0x100, 0x2d6, {0x1, 0x2}}, {0x5, 0x6, {0x1, 0x2}}, {0x6, 0x7f, {0x0, 0xf21c}}, {0x8000, 0x5, {0x3, 0x96}}, {0x0, 0x2, {0x3, 0x7fff}}, {0x2b8b, 0x2, {0x1, 0xc0a9}}, {0x2, 0x6, {0x0, 0x80000001}}, {0x3, 0x2b1, {0x2, 0x3}}, {0xff, 0x5, {0x3, 0x3}}, {0x888, 0x4, {0x3, 0xb3}}, {0x9, 0x3e, {0x0, 0x2}}, {0xaf, 0xd828, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x5d4dc509d566d62a, 0x8000}, 0xe3, 0xe8, 0x8001, 0x3, 0xa, 'syz1\x00', "4a5b87be56323d3a09f73e131340dc8f802fb29611bc0600e3b195f62426468c", "cfe2753501f5b44b6140b711f95ddf85001274d70618782bad994953a87be2ee", [{0x7, 0xc3d, {0x2, 0x388}}, {0x2, 0x1, {0x1, 0x4}}, {0x1, 0x7, {0x1, 0x5}}, {0x5, 0x0, {0x1, 0x1f}}, {0x0, 0x6, {0x3, 0xff}}, {0x1, 0x6, {0x1, 0xb9}}, {0xfff, 0x81, {0x3, 0x3}}, {0x8, 0x4, {0x2, 0xa41}}, {0x4, 0xfff8, {0x3, 0xc3ee}}, {0x200, 0x2, {0x2, 0xffff}}, {0x1000, 0x9, {0x3, 0x8001}}, {0x40, 0x0, {0x0, 0x8001}}, {0x401, 0x1, {0x3, 0x5}}, {0x5, 0x46, {0x2, 0x80000}}, {0x2, 0x4, {0x0, 0x5}}, {0x6, 0x8000, {0x0, 0x6}}, {0x7fff, 0x0, {0x3}}, {0x3, 0x1, {0x1, 0x8}}, {0x8001, 0x3f, {0x3, 0xffff}}, {0x200, 0x7f, {0x0, 0xffffffff}}, {0x5, 0x5, {0x1, 0x5}}, {0x0, 0xe3, {0x1, 0x7f}}, {0x87d, 0x7ff, {0x1, 0x6}}, {0x6, 0x1ff, {0x0, 0x3}}, {0x75, 0xffff, {0x1, 0x8}}, {0x8, 0x40, {0x1, 0x8}}, {0x3, 0x7, {0x2, 0x10000}}, {0x9, 0x7, {0x3, 0x5}}, {0x401, 0x1ad, {0x0, 0x8000}}, {0x5e4a, 0x5}, {0x80, 0x1, {0x2, 0x7ff}}, {0x1, 0x20, {0x0, 0x8}}, {0x991b, 0x100, {0x1}}, {0x72f6, 0x5, {0x3, 0x248c}}, {0x4, 0x7fff, {0x3, 0xffff}}, {0x8, 0x2, {0x1, 0xfffffffd}}, {0x2, 0x1, {0x2, 0x845}}, {0xd744, 0xfffe, {0x3, 0x7fffffff}}, {0x9, 0x3, {0x1, 0x2}}, {0x7, 0x3ff, {0x2, 0x400}}]}}}, {{0x254, 0x1, {{0x1, 0xfff}, 0x46, 0x40, 0x6a, 0x6, 0x25, 'syz0\x00', "72223e29a25b42b11a739f0e9ba4584024988dc5e7ad738fc42b0c7f16d22223", "432bd410ee65b4f70a9cff35c3e4ad1de5e1dd103b6a54fb7550e573ceec7bf8", [{0x1, 0x8, {0x0, 0x10001}}, {0x1f, 0x5, {0x2}}, {0xdea1, 0x5, {0x3, 0xff}}, {0x6, 0x7, {0x1, 0x9}}, {0xff, 0xc267, {0x3, 0x3ff}}, {0x8, 0xde, {0x3, 0x5}}, {0x7, 0x3ff, {0x3, 0xb29e}}, {0x9, 0xb5, {0x3, 0x10001}}, {0x4, 0x1, {0x3, 0x2}}, {0x2c7, 0xee, {0x1, 0x9}}, {0x1, 0x81, {0x1, 0x576}}, {0x3, 0x7ff, {0x3, 0x2dce00}}, {0x4, 0x1, {0x2, 0xaa}}, {0x4, 0xb, {0x0, 0x9}}, {0x81, 0xfb, {0x1, 0x3f}}, {0x81, 0x7, {0x3, 0x3ff}}, {0x9, 0x40, {0x3, 0x10000}}, {0x74a, 0x1ff, {0x1, 0x3}}, {0x9, 0x1, {0x2, 0x44}}, {0x9, 0x3, {0x3, 0xe689}}, {0x800, 0x3, {0x0, 0x5}}, {0x40, 0x2ea, {0x0, 0x101}}, {0x1, 0xe5, {0x3, 0x7}}, {0x3, 0xfdb6, {0x1}}, {0x4, 0xdb7, {0x2, 0x81}}, {0x3, 0x7, {0x0, 0x7fff}}, {0x5, 0x1, {0x0, 0x3}}, {0xbfd, 0x0, {0x3, 0x8001}}, {0x7, 0x0, {0x1, 0x8}}, {0x5, 0xbe, {0x3, 0xffffffc1}}, {0x6, 0x9, {0x2, 0x7}}, {0x0, 0x400, {0x1, 0x1}}, {0x0, 0x7d, {0x0, 0x2}}, {0x1, 0x401, {0x2}}, {0x8001, 0xba, {0x2, 0x1}}, {0x0, 0x5, {0x0, 0x5}}, {0x3, 0x8, {0x2, 0x37b7}}, {0x7, 0x313, {0x3, 0x1ff}}, {0x1, 0x0, {0x1, 0x9}}, {0x0, 0x2, {0x0, 0x2662}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) 11:36:14 executing program 1: set_mempolicy(0x8003, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 597.529233][ T29] audit: type=1800 audit(1600169774.948:82): pid=16799 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16336 res=0 [ 597.740876][T16810] IPVS: ftp: loaded support on port[0] = 21 11:36:15 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x4043, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000140)=@v2, 0x14, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x7fff) 11:36:15 executing program 0: set_mempolicy(0xee3460b2c983f81, &(0x7f0000000200)=0x1, 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xffffffff, 0x2}) 11:36:15 executing program 2: set_mempolicy(0x8000, &(0x7f0000000000)=0x8000000000009, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:15 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000240)={[0x2, 0x7, 0xfffff9e6, 0x80000000, 0xfffff001, 0x1, 0x9, 0x4, 0x80, 0x80000001, 0x2, 0x2, 0x1, 0x2, 0xbcef, 0x6, 0x0, 0x0, 0x7, 0x5, 0x200, 0x7ff, 0x0, 0x2614, 0x0, 0x8, 0x4, 0x6, 0x2, 0x200, 0xec23, 0x20000000, 0x8, 0x6, 0x6, 0x4, 0x2, 0x4, 0x4, 0x4, 0x0, 0x2, 0x4, 0x3, 0x2, 0x5, 0x6, 0x8, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x4, 0xe13, 0x8, 0x5, 0xfffffffd, 0x3, 0x6, 0xc65, 0x8, 0x890, 0x81, 0x9, 0x34e, 0x9, 0x7, 0x80000001, 0x40, 0x0, 0x3f, 0x7fff, 0x10001, 0x7fffffff, 0x5, 0x52ce, 0xfffffff9, 0x8f13, 0xaf, 0x1, 0x6, 0x2, 0x6, 0x8, 0x527, 0x3, 0x6, 0x4, 0xde23db8, 0x2, 0x5, 0x101, 0xfffffff9, 0x8, 0x9, 0x0, 0x5, 0x1, 0x428, 0x5, 0x4, 0xc245, 0x3, 0x7, 0xff, 0x4a, 0xfffff001, 0x7, 0x4, 0x0, 0x4, 0xfffffff7, 0xffff, 0x80000001, 0x6, 0x8, 0x8, 0x9, 0x7, 0x7d, 0x40, 0x3, 0x5, 0x1, 0x80, 0x2, 0x100, 0x1, 0xb0, 0x8, 0x6b4b, 0x0, 0x6, 0x10001, 0xffffffff, 0x3, 0x5, 0x3, 0x1f, 0x80000001, 0x567, 0x3, 0x4, 0x6a, 0x2, 0x8000, 0x6, 0x2, 0x7f, 0x18d, 0x6, 0x9, 0x9, 0x15, 0x1, 0x80000000, 0xc45, 0x2a, 0x5, 0xfffffff8, 0x6, 0x8001, 0x8, 0x3f, 0x3, 0x61, 0x1, 0x81, 0x81, 0xffff0000, 0x8, 0x2, 0x5232622c, 0x100, 0x7fffffff, 0x0, 0x1f, 0x7fffffff, 0x0, 0xe67, 0x8, 0x1, 0xfffff801, 0x3, 0x75, 0x6, 0x2bcf, 0x6, 0x3, 0xd64, 0x80000000, 0x6, 0x1, 0x3f, 0x5, 0x40, 0x7a3, 0x8, 0x6, 0x9, 0x8000, 0x1f, 0x7, 0xba, 0x7ff, 0x261efd18, 0x6, 0x0, 0x101, 0x9, 0x9, 0xfffffffc, 0x3ff, 0x9b0f, 0x4, 0x2, 0x6, 0x6, 0xfffffffa, 0x6, 0x3b, 0x1, 0x4, 0x8, 0x3, 0x2, 0x0, 0x6, 0x3, 0x40, 0x6, 0x4, 0x1, 0x77fa1230, 0x7, 0x3, 0xd194, 0x68, 0x1, 0x6, 0x401, 0x453649d0, 0x4, 0x2, 0x49, 0x4, 0x9, 0x59, 0x9166, 0x7, 0x2, 0x100, 0x4, 0xfffffffc, 0x80000000, 0x5, 0x100, 0xfff, 0x8, 0x4, 0x80000000, 0x0, 0xfffffff8, 0x6, 0xe4, 0x3, 0xfffffff9, 0x100, 0x8001, 0x46fd7cf3, 0x800, 0xfffffff9, 0xfff, 0xfffffff9, 0xfffffffc, 0x2b7, 0x200, 0x6, 0x4db, 0x1ff, 0xca0c, 0xc9, 0xff, 0x5, 0xcc6, 0x101, 0x1, 0xc000000, 0x7e04, 0xd5, 0x3, 0xffffffff, 0x8, 0x0, 0x2, 0x4, 0xc1e, 0x2, 0xffffffff, 0x6, 0x80, 0x5, 0x2, 0x2fe, 0x5, 0x3, 0x5, 0x200, 0xffffffff, 0xfff, 0x9, 0xda, 0x3, 0x0, 0x10000, 0x87, 0x7fffffff, 0x7ff, 0x8, 0x4, 0x3721be9e, 0x38, 0x8, 0x6, 0xfffffffa, 0xffff8001, 0x8, 0x3, 0x8, 0x10001, 0x19, 0x0, 0x6, 0x3, 0x6, 0x4, 0x1d3, 0x1f, 0x2, 0x6, 0x5, 0xffffffff, 0x401, 0x100000, 0x7, 0x8, 0x0, 0x2, 0xffffffff, 0xffffffff, 0x400, 0x2, 0x8, 0x2, 0x3, 0x1470, 0x81, 0x6, 0x5, 0x4, 0x5, 0x9, 0x1, 0x2, 0xaf, 0x7, 0x61, 0x1000, 0x0, 0x5, 0x80c0, 0x7, 0x41f, 0x1ff, 0x11, 0x9, 0x2, 0x7, 0x4, 0x20, 0x28000000, 0x8, 0x1000, 0x200, 0x5, 0xff, 0x1, 0x0, 0x5, 0x78e1, 0x6, 0x8, 0xffffff00, 0x7, 0x6, 0x0, 0x4f4, 0xda41, 0x20, 0x3, 0x1, 0xc71, 0xfffffffe, 0x6, 0x1, 0x3, 0x6, 0x200, 0x75b5, 0xfffffff8, 0x1, 0x0, 0xe0000000, 0x7, 0xab1, 0x7, 0x7, 0x2, 0xfffffffd, 0xfffffff7, 0x3, 0x9, 0x2, 0x7, 0x8, 0xf4b, 0xa7b, 0x9, 0x7fffffff, 0x7, 0x7, 0x1, 0x9, 0x5, 0x80000001, 0x4, 0xd426, 0x3, 0xfff, 0x10000, 0xfffffffb, 0xfffeffff, 0x2, 0x4, 0x78f72c74, 0xfff, 0x7, 0x3, 0x8, 0x0, 0x0, 0x81, 0x3a8d8570, 0x80000000, 0x1, 0x3, 0x2, 0x5, 0x7, 0x3f, 0x5, 0x0, 0x4, 0x81, 0x5, 0x9, 0x6, 0x81, 0x1, 0x1ff0, 0x2, 0x1f, 0x2, 0x4, 0xffffffff, 0x80000001, 0x1000, 0xae1, 0x93c5, 0x9, 0x7, 0x4524000, 0x1000, 0x62e7, 0x0, 0x6, 0x2, 0x8, 0xfffffff9, 0x8, 0x200, 0xffff, 0x1f, 0xffffffff, 0x80000000, 0x2, 0x8000, 0x1, 0x5d1, 0x454061da, 0x3, 0x4, 0x10001, 0x9, 0x8, 0x9, 0x9, 0x6, 0x3, 0x20, 0xffff, 0x0, 0x8, 0xffff, 0x200, 0x7ff, 0x6, 0x7, 0x8, 0x100000, 0xffffffff, 0x0, 0x2, 0x0, 0x9, 0x6, 0x7d, 0x1, 0x200, 0x8, 0x1d82, 0x5, 0xff, 0xffff805e, 0x5, 0x400, 0x3, 0x9, 0x19, 0x5, 0x800, 0x7fffffff, 0x7, 0x6, 0x4, 0x101, 0x9, 0x8000, 0x6, 0x7, 0x7fff, 0xff, 0x57d1, 0x54, 0x4, 0x2, 0x1, 0x401, 0x9, 0x3f, 0x1, 0x2, 0x401, 0x1, 0x6, 0x7ff, 0xa, 0xfffff801, 0x7, 0x0, 0x3, 0x9, 0x3, 0x9, 0x0, 0x7, 0x3, 0x0, 0x7, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3, 0x3ff, 0xffffffff, 0x0, 0xd2, 0x200, 0x3f, 0x800, 0x8000, 0x3, 0x0, 0x0, 0x9, 0x5cb8, 0x2, 0x1, 0x7, 0x7fff, 0x2c43, 0x6, 0x0, 0x8, 0x4, 0x80000001, 0x62d3, 0x7, 0x6, 0x2, 0x9, 0xfff, 0x100, 0xffff, 0x9, 0x40000000, 0x5, 0x169, 0x5, 0x76de, 0x4c8, 0x1ff, 0x4000, 0x4, 0x1, 0x40, 0x81, 0xaf1, 0x1, 0x8, 0x9, 0x8, 0x5d, 0x8, 0x80000001, 0xc0b, 0x3f, 0x1ff, 0x2, 0x8, 0x2, 0x2, 0x7, 0x2, 0x6, 0x6, 0x6, 0xffff, 0xecf, 0xffff0000, 0x3, 0x20, 0x155, 0x6, 0x7, 0x7fff, 0x4, 0xcf5, 0x4, 0x81, 0x40, 0x7fff, 0x9, 0x4, 0x7, 0x3, 0x9abd, 0x4b6e, 0x10000, 0x4, 0x6, 0x6, 0x4, 0x4, 0x6, 0x7ff, 0x1, 0x0, 0x2, 0x2, 0x7, 0x6, 0x6, 0x2, 0x72, 0x3, 0x100, 0x81c3, 0x8, 0x38, 0x800, 0x7, 0x5, 0x7, 0x4, 0x7fe0, 0x8000, 0xe02, 0x200, 0x0, 0x9, 0x8000, 0x7, 0x10001, 0x3, 0x197, 0x5, 0x8, 0x0, 0x800, 0x9, 0x9, 0x101, 0x81, 0x10001, 0x4, 0x1, 0x2, 0x3, 0x6, 0x2, 0x200, 0x8dcc, 0x400, 0x4, 0x4, 0x3, 0x4, 0x4c, 0x0, 0x6, 0x1, 0x9, 0x10001, 0x10000, 0x80000000, 0x4, 0x0, 0x80, 0x10001, 0x7ff, 0x6, 0x4, 0x8, 0x3f, 0x8001, 0x0, 0x7fff, 0x4, 0x3, 0x3f0, 0xaf1, 0x80, 0xe476, 0x3, 0x0, 0x423, 0x7, 0x4, 0x3a84, 0x7ff, 0xffff80bb, 0xffffffff, 0x7, 0x8, 0x5, 0x800, 0x417b28f4, 0x80000001, 0x9, 0x63, 0x9, 0x100, 0x66ba, 0x9, 0x4, 0x6, 0x101, 0x3, 0xbd, 0x7fff, 0x7, 0xa34, 0xfffffffd, 0x7, 0xff, 0x80, 0x7fff, 0x40, 0x1, 0x7, 0x7ff, 0x0, 0x7, 0x5, 0x8001, 0x80000000, 0x6, 0x9, 0x9, 0xffffffff, 0x7e, 0x2, 0x1, 0x6, 0x80, 0xd940, 0x9, 0x259, 0x1000, 0x6, 0xfffffff7, 0x0, 0x2, 0xff, 0xfa9, 0x1000, 0x7, 0x4, 0x20, 0x2, 0x5, 0x81, 0x8001, 0x1, 0xcfb7, 0x81, 0x1, 0x1, 0x100, 0x4a7, 0x8, 0x4, 0x101, 0x8, 0x7, 0x0, 0x4, 0x5, 0x3, 0x99, 0x10001, 0x8, 0x9, 0xffff, 0x3, 0x7fffffff, 0x1, 0x1, 0xfc000, 0xffffffff, 0x7, 0x1000, 0x6, 0x20, 0x2, 0x1000, 0x11, 0x4, 0xb7e, 0x1, 0x20, 0x80000000, 0xffffff66, 0x7ff, 0x0, 0x8, 0x200, 0x0, 0x1, 0xfff, 0xffffff80, 0x7fff, 0x4698, 0xffffffff, 0x2000, 0x4, 0x10000, 0xfffffffa, 0x2, 0x2, 0x10000, 0x0, 0x5, 0x5, 0x5, 0x0, 0x0, 0x40, 0xad1, 0xffffffff, 0x1, 0x2d2d, 0x2, 0x9e5, 0x7f, 0x9, 0x6, 0x0, 0x5, 0x7, 0x0, 0x6, 0x5, 0x5, 0xf6, 0x5, 0x1, 0x80000000, 0x3ff, 0x3, 0x8b74, 0x7c0, 0x7, 0x1, 0x7, 0x7, 0xfffffffc, 0xe80d, 0x20, 0x3ff, 0x6, 0x6, 0x7a6, 0xe828, 0x9e78, 0xb98, 0x2, 0x1, 0x6, 0x1, 0x2, 0xeddb, 0x1, 0x7, 0x7, 0x1, 0x7, 0xd12, 0x3b34, 0x40, 0x3f, 0x7, 0x8, 0x2, 0x7f, 0x10000, 0x10001, 0x40, 0x1000, 0x0, 0x101, 0xfffffffb, 0x2, 0x8, 0x0, 0x7, 0x40, 0x2, 0x8, 0x0, 0x80000000, 0x7, 0x20, 0x8000, 0x800, 0x8001, 0x6, 0x2, 0x81, 0x7e, 0x8, 0x9776, 0x2aa8, 0x100, 0x9, 0x280, 0x7f, 0x6, 0x6, 0x1, 0x0, 0x8, 0x7fff, 0x0, 0x715, 0x0, 0x9, 0x8, 0x6, 0x9, 0x32, 0x101, 0x4, 0x3b, 0x7, 0xced, 0x0, 0x4, 0x20, 0x5, 0x6, 0x78, 0xe2, 0x4, 0x200, 0x2, 0x1169, 0x7, 0x2, 0x4, 0x8, 0x4, 0x71e, 0x4, 0x2, 0xfff, 0xffff, 0x1, 0x2, 0xfffffffd]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 598.418473][ T29] audit: type=1800 audit(1600169775.838:83): pid=16833 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16348 res=0 [ 598.466646][T16836] IPVS: ftp: loaded support on port[0] = 21 11:36:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000000), 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 11:36:15 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000040)={0x0, 0x1, 0x8000}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_GROUP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) writev(r1, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x30}}, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, 0x0, 0x20000001) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x2}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 11:36:16 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x1020080, 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @val={0x2, 0x3, 0xcf1d, 0x6, 0x40, 0x8}, @ipx={0xffff, 0x84, 0x5, 0x14, {@random=0x1, @current, 0x6}, {@random=0x1ff, @random="27ea48edddbe", 0x1ff}, "2f380b083d786b283f8c97574cb22a268589c2e6372ea3aa35dfdc741035098da2e12e0c9a3671e9fc2efd78be8a2d0e849142c2ed1b21e4d51431d3b9c4dcbb9afe61fa6596e37cd40aed630fb8fe0512e6588fd15d05243f7a4dda8ec9a92f248479f3c174"}}, 0x8e) r0 = socket(0xb, 0x5, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) 11:36:16 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1a) 11:36:16 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x20000000, 0x0, 0x0, 0x0, 0x0) [ 599.230127][T16877] IPVS: ftp: loaded support on port[0] = 21 11:36:16 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x3, 0x7f) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 599.780300][T16904] IPVS: ftp: loaded support on port[0] = 21 11:36:17 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) openat$char_raw_ctl(0xffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x2000, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000100)=""/230, &(0x7f0000000240)=0xe6) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 11:36:18 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockname$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:18 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x27c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1f, @private1={0xfc, 0x1, [], 0x1}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffa, @mcast1, 0xd3f7}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x53, 0x3, "4246e26951e5a16537e86553ae932083699c0a7eb5efca254e36a9d39b7cc1f3d5834acd2878950aed48673f909fd5b8059df970429bf4953c9f4fa2a78385024b1839ddb7a5ec4a22dfed2ee9d02c"}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xea}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "eeebde6447593b417f8ca0a3c0482968e12ca9aae7e2eae42805c9a33e1e1ce813"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6e6956f462decec080233d226ebd2d6e083e20412b5c4c39971bdf4c14"}}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1615}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa42}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf082}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8091}, 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:18 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe4) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) setresuid(r0, 0xee00, r2) 11:36:18 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) [ 600.988357][T16948] IPVS: ftp: loaded support on port[0] = 21 11:36:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000040)={0x0, 0x1, 0x8000}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_GROUP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) writev(r1, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x30}}, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, 0x0, 0x20000001) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x2}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) [ 601.406557][T16979] IPVS: ftp: loaded support on port[0] = 21 11:36:19 executing program 4: r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x8ca, @ipv4={[], [], @broadcast}, 0x9}, @in6={0xa, 0x4e21, 0x7, @private0, 0x81}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, @in6={0xa, 0x4e22, 0x7, @private0, 0x6}], 0x90) 11:36:19 executing program 2: set_mempolicy(0x4000, &(0x7f0000000100)=0x1, 0xffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000000c0)=0x320000) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x88100) fspick(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000003c0)=""/111) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000480)={r0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@loopback, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x158, 0x0, 0xfff, 0x400, 0x10000, 0x180000, r5}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x84ca8, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',accesscr=00000000000000000013,\x00']) 11:36:19 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x7fffffff) clone(0x11abb08e178aeb7d, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000040)="b9", 0x1) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x1, 0x4, [{r5, 0x0, 0x4000, 0xfffffffffffff000}, {r0, 0x0, 0x1000, 0x2000}, {r0, 0x0, 0x39a86c41909bc140}, {r0, 0x0, 0x0, 0x8000}]}) 11:36:19 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') set_mempolicy(0x8000, &(0x7f0000000200)=0xfffffffffffffff8, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000040)={0x0, 0x1, 0x8000}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_GROUP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) writev(r1, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x30}}, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, 0x0, 0x20000001) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x2}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 11:36:19 executing program 3: r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x290, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "dc010fe0d2bf490efe914b054945f3192d84c8c3f0c184e51f61864ecc3cc94713a4c5"}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd823}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8a3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x708}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @local, 0x1f}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x15}, 0x4050) [ 602.298733][ T610] tipc: TX() has been purged, node left! [ 602.480821][T17022] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 602.500556][T17022] device macvlan3 entered promiscuous mode 11:36:20 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000080)=0x456000, &(0x7f0000000140)=0x4) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) [ 602.606238][T17031] Unknown ioctl 1074296131 11:36:20 executing program 3: set_mempolicy(0x0, &(0x7f0000000200)=0x8, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3, 0x1, 0x40, 0x81, 0x2, 0x3, 0x0, 0x2a8, 0x40, 0x2df, 0x3, 0x2, 0x38, 0x1, 0x5, 0x8001, 0x9}, [{0x1, 0x81, 0x33600000, 0x100000009, 0x2, 0x200, 0x2, 0x1}, {0x1, 0x10001, 0x3ff, 0x5, 0x1, 0x7ff, 0x10000, 0xf7}], "8afd2cedf9683af08109fc4b96e7c4c8a47b763dfcd1deab36608ec341a0610348dd644ba1bb31ecb85ccc4ee522ccdffbbc4da2f5e1e699cc2c906187a39e13e293da5144f5a14e63f307aaea4ea9f341b2495843eb9141bde30d801a2fbe49990f7d5d9d6a99292e951f2ffdd99a8c5a119ec3fb4020b11a6d0bc9583b0f2ff7e97add46a4a3475a2e93f7ea", [[], [], [], [], []]}, 0x63d) [ 603.276709][T17031] Unknown ioctl 1074296131 11:36:20 executing program 1: set_mempolicy(0x0, &(0x7f0000000200)=0x1, 0x3) r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) clone(0x20020000, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x1}) [ 603.645117][T17025] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 603.666961][T17025] device macvlan3 entered promiscuous mode 11:36:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000040)={0x0, 0x1, 0x8000}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_GROUP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) writev(r1, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x30}}, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, 0x0, 0x20000001) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x2}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 11:36:21 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000180)='(.)\x00', r6}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0xc) ioctl$CHAR_RAW_PBSZGET(r3, 0x127b, &(0x7f0000000080)) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x5, 0x4) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x9, 0x504000) ioctl$PPPIOCGIDLE(r0, 0x8008743f, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:22 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) 11:36:22 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0xff, 0x20, [0x1, 0x6982, 0xffffffff, 0x2], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2000000000000003, &(0x7f00000000c0)=0x89}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'hsr0\x00', {}, 0x3}) 11:36:22 executing program 2: set_mempolicy(0x0, &(0x7f0000000000)=0x4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:23 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x1, 0x796, 0x6, {0x0, 0xd675}, 0x800, 0x7}) 11:36:23 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x73, 0x0) 11:36:23 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x200003) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"cba05f71192144ae6fecc61f7da4c51f5441bdae157690ad416fa58a5b6c", 0x7, 0xffff, 0x0, [0xfffff9b0, 0xffff, 0x1, 0x7ff, 0x4, 0xffff0001, 0x9, 0x2, 0x67, 0x7fffffff, 0x1, 0x10000, 0x3, 0x8000, 0x200, 0x10001, 0x7, 0x34c5]}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4014f50b, &(0x7f00000000c0)={0x1, 0x80, 0x32}) 11:36:23 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200001, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x14c, r2, 0x10, 0x1, 0x800, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7554ed3a}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000500)={0x8, @capture={0x1000, 0x1, {0x8, 0x101}, 0x3, 0x8001}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000400)={0x2, @sdr={0x38414762, 0x6}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000114001700000000000000046574683a6c6f0000000000e3ffffff0000000000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 11:36:24 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x4f, @private1, 0x1}}, 0x24) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:24 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x110, 0xffffffffffffffff, 0x6) 11:36:24 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x73, 0x0) 11:36:24 executing program 1: socketpair(0x2b, 0x0, 0x80, &(0x7f0000000000)) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:24 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0x6, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:24 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x10a, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) [ 607.773492][T17130] IPVS: ftp: loaded support on port[0] = 21 11:36:25 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa080, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x23e}, &(0x7f0000000080)=0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:25 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x73, 0x0) [ 608.437694][T17163] IPVS: ftp: loaded support on port[0] = 21 11:36:25 executing program 0: setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000040), 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) read(r2, &(0x7f0000000340)=""/250, 0xfa) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0xa00, 0x70bd2c, 0x259fdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4048801) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0xa, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0xc8b, 0x100}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x205) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) recvfrom$inet6(r0, &(0x7f0000000280)=""/75, 0x4b, 0x40002000, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x1}, 0x1c) 11:36:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2b0f00000000000000001100000007007f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x59, 0xac, "20dc6882f7c021f2b23124fb31fcd02fe02d436aac1b3de71e96efb43c5f40a1c9c9ce6e86a9f16f2294d1a37ff3bad1863ebf2812773c25ee14b14de2484d63e4a0e1f92882d1b39d2143f108e4414cb602300fc6"}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x592}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x3) clone(0x1800100, 0x0, 0x0, 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x78b, 0x7a4282) 11:36:26 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = openat$vimc2(0xffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) fsync(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:26 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2d}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x80000001, 0xe9, 0x800, 0x2, 0x91, 0x3, 0x6}, &(0x7f00000001c0)=0x9c) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r0, 0x2, 0xd734, 0xd0f9}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r2, 0x1}, &(0x7f0000000440)=0x8) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd700053020000000000004c000680040002004100040067636d286165732900000000000000000000000000000000000000000000000019000000df021b322160424670776f33000c6e3d4bbe3dd89d79c4280000008f653778ac607df86b897193222cc15ed99ca77787cc14f5ff4610179065b5bcaec0436a0502a62c5b454d"], 0x60}, 0x1, 0x0, 0x0, 0xc1}, 0x4000010) clone(0x7e62808da5daebce, 0x0, 0x0, 0x0, 0x0) [ 609.096821][T17200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=17200 comm=syz-executor.3 11:36:26 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x408000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000040)="59a588110cc15b8d2e2aa82b95af153c95931cced3681250680cb5dffc6ed52f7973b4aa607835d991f2562f26b17e32dcb61947ad32f1bdb55a30e3defa05a2da4f465326808b509ac5f75b35223dc5505a26cd164eca25b0ed646bc6e2d458e36d67830a3774be22ca1006e1bdfced800319ac5443497a55c6212f51813fa30f90bc18d853f17f95a8ae48aa81c306c422d730d5e2c36f02e319c54c6e82670c4c0998c4f015ea445a2e199676840b7b257005ff934fe615153171a288d9b04e3968c639d0fd82c448e8b172c8a55ee91e8a4d0d7532452591b9b25b163d11512f815cbf", &(0x7f0000000240)=""/4096, 0x4}, 0x1c) 11:36:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 11:36:26 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000640), 0x2) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f00000001c0)=[{&(0x7f0000000080)="32bbea4368abd873e55abf92ec365b24087dc75c7d145f59199f523d4061e5b196a298a7c90c21fb269abe4480d8945682191b685440e63404f842389ef3f5ad3035a484b3ecc6aa4a490466eb1a85c0972372ee6135d62ac7c0dfcd0920aa6247b98410e4707f5430c768c9ed5689c4b262e7a2743a5b9c222e4d9d24964d92135de5447b7b01f6ea866442618dcc5001b4beac85445c636e6eeadacc2fd65c520a33330f37ab6affd29deca054b47fa52945842a8fcedae5abe003d864d0e5976e2a7c15bbc89e8c4db38084d3007b228e5a21", 0xd4, 0x1}, {&(0x7f0000000240)="aaaebdc3159ad54452cdd6db09482dfd228984633608756d919a908027520cebf1272ee384b225ecb0d664deae2cd9d53ae991b788cee2ef90759764cd7390be7920ec5df756acdd168cdb35a0f48dd8f3a2b7aefbdcc442b4bdb0413bc4e036ce6e26812e7f93c9ec917d68c2a2b819cdfe1f9c487bcffecf1f768cae21ad7e0753d8d1e683f5fcc0c6106d0bce8597a38bc3321068a9d0594360f0243b5c4e18f1e892a1f18bf629e15f33626253160073e0cda9d73f8667681790088f0edd8c", 0xc1, 0x9}, {&(0x7f0000000180)="2e5581d98e6a954031f2813cdf5069f8adb376a4c14b8c8e2217a2909108d207a241cc97f1b198b4f2", 0x29, 0x4}, {&(0x7f0000000340)="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", 0xfa, 0xb4e}, {&(0x7f0000000440)="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", 0xfa, 0x80}], 0xa11001, &(0x7f0000000540)=ANY=[@ANYBLOB="636f6465706167653d6d61636963656c616e642c73657373696f6e3d3078303030303030303030303030303030332c706172743d3078303030303030303030303031303030312c756d61736b3d30303030303030303030303030303030303037373737372c756d61736b3d30303030303030303030303030303030303030303030312c706172743d3078303030303030303030303030303030362c747970653d39ede7f12c747970653db34333d12c696f636861727365743d63703835372c666f776e65723d", @ANYRESDEC=r1, @ANYBLOB='\x00\x00']) syz_open_dev$tty20(0xc, 0x4, 0x0) 11:36:27 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000000040)={"3fb451a23f2883c8b6a8fb4549a54cee20bb4fed2ef872db8c08a239992b", 0x897, 0xd52, 0x6, [0xbff1, 0x3, 0x6, 0x32, 0x2, 0x7ff, 0xfffeffff, 0x401, 0xffff, 0x3f, 0x80000001, 0x1ff, 0x10000, 0xc11, 0x3, 0x6, 0x7, 0x2]}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={0x0, @sco={0x1f, @fixed={[], 0x12}}, @hci={0x1f, 0x1, 0x4}, @xdp={0x2c, 0x0, 0x0, 0x2c}, 0x7, 0x0, 0x0, 0x0, 0xed31, &(0x7f0000000540)='gre0\x00', 0xb7, 0x400, 0x5}) fcntl$getown(r6, 0x9) ioctl$CHAR_RAW_RAGET(r0, 0x1263, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:27 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x73, 0x0) 11:36:27 executing program 1: set_mempolicy(0x0, &(0x7f0000000200)=0x1, 0x29) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044146, &(0x7f0000000000)=0x6456) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:27 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x400854d6, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) write(0xffffffffffffffff, &(0x7f0000000040)="b9", 0x1) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 11:36:28 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000000c}) 11:36:28 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="b9", 0x1) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 610.816024][T17251] IPVS: ftp: loaded support on port[0] = 21 11:36:28 executing program 4: set_mempolicy(0x0, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x4, 0x4, 0xfb, 0x6, @time={0x8, 0x400}, {0x7c, 0x7}, {0x7f, 0x9}, @time=@time={0x6}}, {0x0, 0x0, 0x81, 0x3, @tick=0x40, {0x80, 0x9}, {0x6}, @raw8={"1cf3a4099bca4bf2786416c9"}}, {0x7, 0x2, 0x23, 0x8, @tick=0x200, {0x6, 0x7}, {0x0, 0x8}, @quote={{0x5, 0x2}, 0x7fff, &(0x7f0000000040)={0x1, 0x1, 0x8, 0x20, @time={0x6, 0x7}, {0x1, 0xd3}, {0x0, 0x1}, @queue={0xff, {0x7ff, 0x1}}}}}, {0x81, 0xa1, 0x0, 0x0, @time={0x800, 0x1}, {0x5, 0xb6}, {0x3, 0xb5}, @connect={{0xe1, 0x20}, {0xf4, 0x96}}}, {0x6, 0x80, 0x3f, 0x8, @tick=0x1, {0x16, 0x3f}, {0x3}, @note={0x3, 0x3, 0x1, 0x81, 0xffff}}, {0x59, 0x1, 0x20, 0x4, @time={0x8000, 0x1f}, {0x1, 0x1}, {0x1f, 0x5}, @quote={{0x2, 0x1}, 0x4, &(0x7f0000000080)={0x9, 0x3, 0x1, 0x6, @time={0xce, 0x5}, {0x6, 0x1}, {0x3, 0x5}, @control={0xc7, 0x325f, 0x4}}}}, {0x3, 0x7, 0x81, 0x6, @time={0x5, 0x8001}, {0xff, 0x20}, {0x2}, @control={0x0, 0x3, 0x1f}}], 0xc4) [ 611.111623][ T29] audit: type=1400 audit(1600169788.528:84): avc: denied { block_suspend } for pid=17269 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 11:36:28 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=[{'CD', @void}, {'MIC', @val={' \'', 'Capture', '\' '}}, {'DIGITAL1', @void}, {'IGAIN', @val={' \'', 'Line Capture Switch', '\' '}}, {'DIGITAL1', @val={' \'', 'CD', '\' '}}, {'VOLUME', @val={' \'', 'Capture', '\' '}}], 0xa9) r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x7}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="b9", 0x1) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4004ae52, &(0x7f00000000c0)=0xfffffffffffff000) accept4(0xffffffffffffffff, &(0x7f0000000100)=@qipcrtr, &(0x7f0000000180)=0x80, 0x0) r2 = openat$mice(0xffffff9c, &(0x7f0000000280)='/dev/input/mice\x00', 0x30080) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 611.400789][T17280] IPVS: ftp: loaded support on port[0] = 21 11:36:29 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000000c}) 11:36:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xffffffff, 0x3, 0xff, 0x2, 0x1, 0xe274, 0x1, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x5, 0x3f, 0x0, 0x5, 0x8}}, &(0x7f0000000100)=0xb0) r2 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000240)=""/197) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x207, 0x9, 0x7, r1}, 0x10) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 11:36:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xde3, 0x101043) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x400, 0x3}, 0xfffffffffffffe9d) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 612.229329][T17335] IPVS: ftp: loaded support on port[0] = 21 11:36:29 executing program 4: set_mempolicy(0x1, &(0x7f0000000200)=0x1000, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:29 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="1898c61c93d4cbd8a5712683a8fa3bf220e5a5e95288de2ec9cc80891257f4ed6ce48a0ca7a103a9b27119caa2091f2d579d030e1b98c7293acb9f0da652cbafdca97fb5bd", 0x45}], 0x1) r1 = openat$nvram(0xffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x8100, 0x0) r2 = openat$zero(0xffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYBLOB="02002bbd7000fcdbdf250200000008000700ac14141f0800040001000000080004000300000008000c000300000008000200070000000d0001006c6973743a7365"], 0x54}, 0x1, 0x0, 0x0, 0x80d4}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b098436dc63c00000252c078bbb231380d44926c94ce0d78aa12d79ef557d5e169f0164b29c6fc7708c12101f4f23b6c20e9ba3f23fc98225b1635fbe65fc11ac87cb9d8e4045bc4995b3dfd73b7ccc45ea1806dab2f2adc1bc267061645c01024d8d8cd463a49f22648df304e0f5d68da2d6b91f6d993405cbb4b3b7a", @ANYRES16=r3, @ANYBLOB="00022cbd7000fedbdf250500000008000400a790421008000200070000000800040003000000080004000100000006000b0015000000"], 0x3c}, 0x1, 0x0, 0x0, 0x885}, 0x10) ioctl$VIDIOC_S_EDID(r1, 0xc0245629, &(0x7f00000000c0)={0x0, 0xb3, 0x0, [], &(0x7f0000000080)=0x1}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)={0xffffffffffffff1e, 0x6, 0x0, {0x6, 0x6, 0x3, 0x0, '-$}\xfc\x80\x00'/18}}, 0x2c) 11:36:29 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000000c}) [ 612.542150][T17349] IPVS: ftp: loaded support on port[0] = 21 11:36:30 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="b9", 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc004240a, 0xfffffffffffffffe) 11:36:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x7) clone(0x2308280, 0x0, 0x0, 0x0, 0x0) r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2c8940, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 11:36:30 executing program 0: set_mempolicy(0x2, &(0x7f0000000000)=0xe3, 0x6) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:30 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:31 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000000c}) 11:36:31 executing program 2: set_mempolicy(0x1, &(0x7f0000000200)=0x1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}, @NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x61}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0xac}, 0x1, 0x0, 0x0, 0xc801}, 0x10) 11:36:31 executing program 3: set_mempolicy(0x0, &(0x7f0000000200)=0x9, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 11:36:31 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xb5a, 0x7fffffff]}, 0x8, 0x80000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40005) 11:36:31 executing program 1: r0 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x4, 0x6, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000020) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:36:31 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) [ 614.696231][T17430] IPVS: ftp: loaded support on port[0] = 21 [ 614.884182][ T29] audit: type=1400 audit(1600169792.308:85): avc: denied { node_bind } for pid=17435 comm="syz-executor.5" saddr=172.20.20.44 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 615.044950][ T29] audit: type=1400 audit(1600169792.348:86): avc: denied { name_connect } for pid=17435 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 11:36:32 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0xb5f, 0xffffffffffffffff, &(0x7f0000000040)=0x80, 0x0, 0xf) 11:36:32 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 11:36:32 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000000)=""/118, 0x76, 0x0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f00000000c0)) 11:36:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002a) [ 615.457742][T17466] IPVS: ftp: loaded support on port[0] = 21 11:36:32 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0x1, &(0x7f0000000000)="e6e00eb8f87181660c94757ad1ccfd8c0a1d", &(0x7f0000000040)=""/190}, 0x1c) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000280)=""/59, 0x3b, 0x2043, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r1 = openat$null(0xffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x4b6302, 0x0) accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c, 0x0) keyctl$search(0xa, r0, &(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0) keyctl$assume_authority(0x10, r0) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x20c40, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 11:36:33 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) [ 615.944811][T17496] IPVS: ftp: loaded support on port[0] = 21 11:36:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4040) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x108, r2, 0x20, 0x70bd26, 0x9, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x7fffffff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc, 0x8f, 0x2df4}, {0xc, 0x90, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x100}, {0xc, 0x90, 0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004004) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 616.327546][T17511] IPVS: ftp: loaded support on port[0] = 21 11:36:34 executing program 0: set_mempolicy(0x2, &(0x7f0000000000)=0x3f, 0x784) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x20000000000}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfefffe00}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa9b}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd1a}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40020814}, 0x4000000) write(r0, &(0x7f0000000040)="b9", 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x4240a543) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 11:36:34 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="b9", 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='cachefiles_wait_active\x00'}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0185649, &(0x7f00000002c0)={0x708000, 0x7, 0x7b3, r7, 0x0, &(0x7f0000000280)={0x9a090c, 0xfffff000, [], @value64=0xdfb}}) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r1, 0x0, r3, 0x0, 0x80000001, 0xa) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') clone(0x2000, 0x0, 0x0, 0x0, 0x0) 11:36:34 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 11:36:34 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x9, 0x5, &(0x7f0000000000)="418abbacaa113b5db8266e9707d6058386bf4866386f532e3a7d32c1993dfb72df30af6a4684dc78a2045e3692d7b7750142d56c66a656d10e34fb271c6b9d60121e5c408fff4abde20993a623", 0x4d) [ 617.122335][T17562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=17562 comm=syz-executor.0 11:36:34 executing program 2: set_mempolicy(0x2, &(0x7f0000000040)=0x8, 0x10000003) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$full(0xffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101080, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x3, 0x1, 0xfffffffc, 0x9, 0xffffff30, 0x4, 0x100}) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x35c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9f1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x121aa3db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x56, 0x3, "03075c65b48b5d66410ff871a5a0ace2ae7caebd3a65d9243fdb713bd0b86b53a4fcd1c4b568a179844a38aba84971fef02ca926d31a6d88df3bc0caf5ea7b7ee68dba0816eb8c008c2809ed346ffb5f532b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ID={0xca, 0x3, "f34b0db453488e14dfb5b2a03f7e56774a18dd5c9d11ef33a21910c3a9f3498a9d68fe5c90dd3a54f34eb6ba18f53b30159128c918c3320d3af210d1c3ff579cef2c18e519d0c357704a8e57189ce44a8b700fc97ad9a20cf165e9f7ebcabeee55e41c8c3fb5f95c7f83ea999b4905835aac2d2a4c8c3daa7a9b26baca41ca58711991d92437394fc4c897835162c4ac77988d9b9dd0b0d245ca8287a0803d91317be592b1cc4a3a08a1df1e6d9d4c2405dd5d5a6b37728453ac3e606b901e81ea6896c0a6bc"}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff24d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa69d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x40001}, 0x11) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) [ 617.295200][T17572] IPVS: ftp: loaded support on port[0] = 21 11:36:35 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_getparam(r0, &(0x7f0000000040)) [ 617.586925][T17593] IPVS: ftp: loaded support on port[0] = 21 11:36:35 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 11:36:35 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x2ac, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_TAIL={0x201, 0xf, "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"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2c, 0x3, "c9b62261adc5daa9a9741fafdf681c429aa9f12bcd7da5fe0f49083233004e4df6f8d722408b6335"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2d, 0x3, "d701177277a471efda7fb568ef026c7631d76318fd5a51758e79cb2ab09ce856e0b7f17b53eafa67e9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x22, 0x3, "6a3c43b3d0953f50830c4bde8a2c252cb06e0cdb38db8270aec00a51c32c"}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x801}, 0x40) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:35 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)={0x62, 0xfffffffc, "71d9243fa100e8fd0a021a3694f65069cd7dac40a5c46e61c2fac86c1787aeaefea102d0344e0b5603f0a061d1ceb104498e6b1b4396f4d6bf1677888e43fda7810d77bcf1047e4840416a3985d4224d00cf79631d151b58306f"}, 0xa0002) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000000)={"f176f93680a20115d23d0a1b46d5718f", 0x0, 0x0, {0x101, 0x101}, {0x3f, 0x4}, 0x4, [0x3, 0x0, 0x101, 0x0, 0x0, 0x8, 0x20, 0x5, 0x9a0, 0xa504, 0x2, 0x0, 0x383, 0x187867ac, 0x3, 0x7]}) [ 618.298466][T17629] IPVS: ftp: loaded support on port[0] = 21 11:36:35 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) getpgid(0xffffffffffffffff) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:35 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 11:36:36 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x480400, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 618.738474][T17627] IPVS: ftp: loaded support on port[0] = 21 11:36:36 executing program 4: set_mempolicy(0x3, &(0x7f0000000200), 0x3) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:36 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x302100, 0x0, 0x0, 0x0, 0x0) 11:36:36 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x3, 0x3) r0 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x302) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x9, 0x8) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 11:36:36 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) [ 619.408600][ T387] tipc: TX() has been purged, node left! 11:36:36 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0xb3953ee9, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="a4ce0575e02369b47158efaf082b5b0984094e83be4255b76f4097a947e7fd389c198f253c4b935dcb60f05a2ece347eee202291808870293dc3fb6a894a6eff7c57b846bdcdc888ff094217c20470492119a8c011e6a955cd46d660d448e729a2c0", 0x62}], 0x8000, &(0x7f00000002c0)={[{@nobarrier='nobarrier'}, {@nodiscard='nodiscard'}, {@usrquota='usrquota'}, {@dax='dax'}, {@noquota='noquota'}, {@uqnoenforce='uqnoenforce'}, {@swidth={'swidth', 0x3d, 0xb9}}, {@logdev={'logdev', 0x3d, './file0'}}, {@lazytime='lazytime'}], [{@fowner_eq={'fowner', 0x3d, r0}}]}) 11:36:37 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) rt_sigtimedwait(&(0x7f0000000000)={[0xfffffff8, 0x6]}, 0x0, &(0x7f0000000040), 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc71b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0x38, 0x1, 0x3, 0x1, 0x1, 0x85, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xae}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x6}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x4, 0x0, 0x8, 0x10, 0x3}, 0xac, &(0x7f0000000100)={0x5, 0xf, 0xac, 0x6, [@generic={0x27, 0x10, 0x1, "ce8359655992bd6620c6d6f10c4b7be128d0bb772b095f291d41b618e1c51c89df33f959"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b1513abdcd39436f63428768197d6011"}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x401, 0xf, 0x8, [0xff0000, 0x3f00, 0xff00c0, 0xc000, 0x1fe000f, 0xc000]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x9, 0x0, 0xffff, [0xfffff0, 0xc0, 0xf, 0x0, 0xff00f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x36, "e522c185c73131828eab9466673b9692"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "88ebf44a988a50270ca1c53cfde6c993"}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x441}}, {0xaa, &(0x7f0000000240)=@string={0xaa, 0x3, "2c22ea5ad0b219ef7f61ba54d1820c2bf11d80db3aa95fd6bb8e76ba5df2da7e2738e3a303575cef467daa69a62270f645ed28cca83ded51c8d0b458e1a18d63c054ef4661ea544a7021b44945aed92d61c9d3ef2ad7cfa8b8b00e2dc4ff5a72adc42b07ce4fcfa3483cc0782b4224ff8a7c72efdd26c5287c3ca2d773085a22b7308a45b2e7dc509610ae651675d68087e2ec7ea4b436ab2e12325115889e6e45a0ebe519135184"}}]}) 11:36:37 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x40, 0x7, 0x5, 0xfffffff7, 0x7f}) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) [ 620.405847][T17709] IPVS: ftp: loaded support on port[0] = 21 [ 620.792695][T17740] IPVS: ftp: loaded support on port[0] = 21 11:36:38 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@gid={'gid', 0x3d, r1}}]}) 11:36:38 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0xfff, 0x3, 0xfc, &(0x7f0000000000)="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"}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:38 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x3) clone(0x94118380, 0x0, 0x0, 0x0, 0x0) 11:36:38 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x4009, 0xfffffffe, 0x5}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 621.389162][T17769] tmpfs: Bad value for 'gid' 11:36:39 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x4, 0x8370) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:39 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x20000000000400, 0x9de2) 11:36:39 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000000)) 11:36:39 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@gid={'gid', 0x3d, r1}}]}) 11:36:39 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x20, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000080)={r0, 0x6, 0xff, 0x7ff}) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 622.386134][T17791] tmpfs: Bad value for 'gid' 11:36:40 executing program 3: set_mempolicy(0x8001, &(0x7f0000000200)=0x7f, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000240)=""/4096) 11:36:40 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x7fff, [0xcd, 0x2], 0x9}, 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) geteuid() 11:36:40 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@gid={'gid', 0x3d, r1}}]}) 11:36:40 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x4400) [ 623.219052][T17805] IPVS: ftp: loaded support on port[0] = 21 11:36:40 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000040)="b9", 0x1) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000000)) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000240)={0x0, 0x0, @ioapic}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 623.304275][T17807] tmpfs: Bad value for 'gid' 11:36:40 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) 11:36:41 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@gid={'gid', 0x3d, r1}}]}) 11:36:41 executing program 0: clone(0x80000000, 0x0, 0x0, 0x0, 0x0) [ 623.955429][T17808] IPVS: ftp: loaded support on port[0] = 21 11:36:41 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x94d}, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 624.396445][T17871] tmpfs: Bad value for 'gid' 11:36:42 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x10001, 0x144c2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000002c0)={0x8, 0x7}) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000280)={0xfffffffffffffffc, 0x6, 0x7ff}) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f00000000c0)=0x5) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x240488c9}, 0x4000805) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYRESOCT, @ANYBLOB="f9f43e22141d098425e20841fd670e7700112f3a91864339bb8f8dadd211405f9307071d4837ee97e2ea2e40a9"], 0x1c}}, 0x20008000) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) clone(0x8100, 0x0, 0x0, 0x0, 0x0) 11:36:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @dev}}) write$tun(r0, &(0x7f0000000300)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7d}, @ipv6=@tcp={0x0, 0x6, "5d631e", 0x57, 0x6, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"fd017da4687a0469b366af5865e72e06c440f72d1e5fad7d8c41bced96c139f5246859b546894ed518cafad1b6fa8c66b154fbd54b981c6dc470da98d3d4beb77f3f22"}}}}}, 0x89) 11:36:42 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) socket$bt_hidp(0x1f, 0x3, 0x6) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="8f1198377d397b8a5e0457137de451fcb49f116f7ac88e3fcb769d0116417a5d9fff437d739c7a07b7426cb7e4117e204f091616b4ea", 0x36, 0x4000041, &(0x7f0000000040)={0xa, 0x0, 0x9c, @dev={0xfe, 0x80, [], 0x43}, 0x200, 0x3}, 0x20) [ 624.938404][ T387] tipc: TX() has been purged, node left! 11:36:42 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8001}, 0x8) 11:36:42 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x901d600, 0x0, 0x0, 0x0, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss], 0x2) r0 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x5, 0x200080) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000080)) 11:36:42 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x401, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x2, @pix={0x8, 0xffffffff, 0x34325241, 0x3, 0x0, 0x3f, 0xa, 0x80, 0x1, 0x8, 0x1, 0x6}}) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x220000, &(0x7f0000000240)="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", &(0x7f0000001240), &(0x7f0000000040), &(0x7f0000000080)="253d94c2a2220926398515bf3bee80f3b8562ca4eb260ab74ec01a00a47170682e473b6435984c43d47bf58c71a0f5c30bf9d6432053e77b627728304b89cc492200") [ 625.429142][T17894] IPVS: ftp: loaded support on port[0] = 21 11:36:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0x0, 0x0, 0xffffffff, 0xec46, 0x2, 0x9}) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000001080)="76fcb05f507ae1b51be78433c60c68e8433277a2fc3ea03671ebee3021851d08f2eda5468becf4e9be041e1765e8e3edc1b2d336114d4baaaad9a330b978d4", 0x3f) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000040)="b9", 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000300)={{0xa, 0x4, 0x7fffffff, 0xf5, 'syz0\x00', 0x6}, 0x6, 0x200, 0xffffffff, 0x0, 0x5, 0x2, 'syz0\x00', &(0x7f0000000280)=['-{:$-[\xa2:*\'%:\x00', '/dev/snd/midiC#D#\x00', ')\x00', '/dev/snd/midiC#D#\x00', '/dev/snd/midiC#D#\x00'], 0x45, [], [0x0, 0x9, 0x358, 0x3]}) modify_ldt$write2(0x11, &(0x7f0000001000), 0x10) modify_ldt$read(0x0, &(0x7f0000000000)=""/4096, 0x1000) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x7ff, 0x10001) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000040)="b9", 0x1) ioctl$VIDIOC_ENUMSTD(r4, 0xc0405619, &(0x7f00000001c0)={0x0, 0xbe781a498c656529, "0100c6a869f0c9d706662ccd52906ef1f71ebece3ac27361", {0x800, 0x8000}, 0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000240)={0x0, 0x1, [0x2, 0x96d1, 0x9, 0x4, 0x7f, 0xafd]}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000001040)={0x1, 'nr0\x00'}) r5 = signalfd4(r0, &(0x7f0000000440)={[0x9]}, 0x8, 0xc0800) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f00000004c0)=0x4) write$midi(r1, &(0x7f0000000000)="5c1b426ecb1462720f6165122e8b7e5e9f27c094c98ec6af070bc1c9f0286654c0c0b99360aa15fac04ba484d0e5000e8274edf0fda34f42b555e18cc4204a07fe278efa4f07e26ba5c08e7a2eeb6589a4030e06040178f269cc94ea7fdf57b8b5f0a96c5a414f0b6f577f9d4e03f53687a6ac214f56bffabd2bac12d1dd5ba1d44b423b58fdade510df126a17a3656433e45054d013b66255b637a0add7a6d3bc5872be8d6ff8f4c9bf564434b8da8c4bb13500e595cefbb42c4a9e8fad45ef57de0ce8522981ffa5d003d0c13335176ef53adbcdfbc5c461aa767299c637ed8b68f3fca5c12d8b2a421a", 0xeb) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:43 executing program 1: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x8000) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)=0x7) 11:36:43 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x2094000, 0x0, 0x0, 0x0, 0x0) [ 626.199584][T17895] IPVS: ftp: loaded support on port[0] = 21 11:36:44 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = openat$ashmem(0xffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x181040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x9, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x0, 0x24) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) r4 = socket(0x10, 0x80002, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x5}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000001380)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0xa, 0x0, 0x0, 0x6d, 0x4, 0x1, {0x0, 0x0, r0}}, 0x1ff) vmsplice(r0, &(0x7f0000001340)=[{&(0x7f0000000040)="8aad400c29fdb9cc687e3409012e2e23cf708a3e6f16330d228365c84012680929d541fbf33642e13c317760d67528b6ced7e4a9254fd85d0803a5158b44", 0x3e}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000100)="d078b72a0855c6e6433147da11edadba00c4a345781ceb603a4b20ae0cf718e029705fe9088bfb760a36d75cdfa43ca44e2d8067685c2b0225feaa19a34c776e0762bb35a824d64a9702af1361add806230c844b924b78b5741177558e5c95bf76b88f4e175398f82c489bb78ec49425c13f381944a3f581358f669851d834f34d22864c6cd13d25801122edd7584edf57ead55a8917115064c2699ea80ad83aa6ff42617f60e34d2a1d425510e9e1692570c95cffb5cdc716bb7e10acf87ad2a18ac16ee8a84fe89820ca89581fff49c5c97cd55c2449192a8459652c501234bbf40cdffacb0480ec", 0xe9}, {&(0x7f0000001240)="d4b3195151d164c52ce006caa74e9ced2543cfb824f62a61d928c6c6d7a5b5a4815d762a6207fdaf29767c6bb0a953c6ef52ac00fedc0db1097006f9ba64e543ca013e0860bfad366f1c13e1dddeec077d476f65110ce76d8689031b6ac86f07b21077a44275a72b5ad9746db2a5f4f7b75f7fae353aa8d9ae955d34d107ec3ca9bf0a29c754abb32814b3f82cbcbd2f588a0bdb24bf60b3b5c193fa90a4dd8e9d6994054e1436394b5a0ee6d64af0d281bc5d02b80496c82484cdad87398c874d651c231a4c1d13e3fead8ad7ffa81c01e1555d61ed6e11eccc614f8b43ab2a62e62272aeb538191405b98da645b5814b4dd5", 0xf3}], 0x4, 0x2) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 11:36:44 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xad, "c089f9e057bc2e40671652cb2e53d86b29fd84a36ba89bb3177632a4a09bc8e218fc467cb9c3459f322cc0eb41bd954e25ba7c0cbf14786af18a728fe29aa3bfb58e68b38e44a18ad80e3e5c674d16711580af0f7b667ddce745c9639ad36d10a3ab49e7f024e078728e3e8adffb369a2d15d28c945a82a9c93027456581e05cd1bc22fdacd37267cb855e213e3e68f89c663c60578f964c4e1cdfb857a6917e4333bb8cdc86cd86d3b30e867e"}, &(0x7f00000000c0)=0xb5) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/83) 11:36:44 executing program 4: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) clone(0x8000100, 0x0, 0x0, 0x0, 0x0) 11:36:45 executing program 4: set_mempolicy(0x8000, &(0x7f00000001c0)=0x100000000, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:36:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @dev}}) write$tun(r0, &(0x7f0000000300)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7d}, @ipv6=@tcp={0x0, 0x6, "5d631e", 0x57, 0x6, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"fd017da4687a0469b366af5865e72e06c440f72d1e5fad7d8c41bced96c139f5246859b546894ed518cafad1b6fa8c66b154fbd54b981c6dc470da98d3d4beb77f3f22"}}}}}, 0x89) 11:36:47 executing program 3: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x10001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0xdc2, @mcast2, 0x9}], 0x4c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x8b6}, 0x8) 11:36:47 executing program 1: set_mempolicy(0x4000, &(0x7f0000000000)=0x20000000006, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:36:47 executing program 4: set_mempolicy(0x8000, &(0x7f0000000200)=0x5, 0x3) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x18, 0x17, {0x5, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x830}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x20004010) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x9, 0x2, 0x80000001, 0x7, "0b8bdfb0b591f70dbe20f84f9fb4cfea4da998", 0x0, 0x7}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x201c1}, 0x0) 11:36:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @dev}}) write$tun(r0, &(0x7f0000000300)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7d}, @ipv6=@tcp={0x0, 0x6, "5d631e", 0x57, 0x6, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"fd017da4687a0469b366af5865e72e06c440f72d1e5fad7d8c41bced96c139f5246859b546894ed518cafad1b6fa8c66b154fbd54b981c6dc470da98d3d4beb77f3f22"}}}}}, 0x89) 11:36:47 executing program 2: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "6702f0bc441263"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001240)={r1, 0x46}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x2, 0x3, 0x36a4, 0x4, 0x6, 0x400}) io_destroy(0x0) 11:36:47 executing program 0: set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000080)=""/36, 0x1}) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x1407, 0x400, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x800) [ 630.118524][T17973] ===================================================== [ 630.125563][T17973] BUG: KMSAN: uninit-value in __tipc_nl_compat_dumpit+0x5cd/0x1450 [ 630.133491][T17973] CPU: 0 PID: 17973 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 630.142270][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.152354][T17973] Call Trace: [ 630.155686][T17973] dump_stack+0x21c/0x280 [ 630.160064][T17973] kmsan_report+0xf7/0x1e0 [ 630.164519][T17973] __msan_warning+0x58/0xa0 [ 630.169071][T17973] __tipc_nl_compat_dumpit+0x5cd/0x1450 [ 630.174689][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.179936][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.185213][T17973] ? __alloc_skb+0x894/0xb30 [ 630.189885][T17973] tipc_nl_compat_dumpit+0x7f9/0x9d0 [ 630.195261][T17973] tipc_nl_compat_recv+0x119c/0x2bf0 [ 630.200621][T17973] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 630.206796][T17973] ? __tipc_nl_add_sk_info+0xdc0/0xdc0 [ 630.212317][T17973] ? tipc_nl_compat_name_table_dump+0xd50/0xd50 [ 630.218609][T17973] ? tipc_netlink_compat_stop+0x40/0x40 [ 630.224210][T17973] genl_rcv_msg+0x1703/0x18a0 [ 630.228968][T17973] ? kmsan_set_origin_checked+0x95/0xf0 [ 630.234580][T17973] netlink_rcv_skb+0x6d7/0x7e0 [ 630.239400][T17973] ? genl_rcv+0x80/0x80 [ 630.243621][T17973] genl_rcv+0x63/0x80 [ 630.247651][T17973] netlink_unicast+0x11c8/0x1490 [ 630.252649][T17973] ? genl_pernet_exit+0x90/0x90 [ 630.257566][T17973] netlink_sendmsg+0x173a/0x1840 [ 630.262580][T17973] ____sys_sendmsg+0xc82/0x1240 [ 630.267500][T17973] ? netlink_getsockopt+0x1b20/0x1b20 [ 630.272924][T17973] __sys_sendmsg+0x6d1/0x840 [ 630.277590][T17973] ? kmsan_copy_to_user+0x81/0x90 [ 630.282682][T17973] ? put_old_timespec32+0x231/0x2d0 [ 630.287932][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.293177][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.298427][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.303683][T17973] __se_compat_sys_sendmsg+0xa7/0xc0 [ 630.309160][T17973] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 630.314675][T17973] __do_fast_syscall_32+0x2af/0x480 [ 630.319973][T17973] do_fast_syscall_32+0x6b/0xd0 [ 630.324886][T17973] do_SYSENTER_32+0x73/0x90 [ 630.329447][T17973] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.335815][T17973] RIP: 0023:0xf7f87549 [ 630.339902][T17973] Code: Bad RIP value. [ 630.344003][T17973] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 630.352454][T17973] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000640 [ 630.360467][T17973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.368481][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.376489][T17973] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 630.384493][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.392504][T17973] [ 630.394857][T17973] Uninit was created at: [ 630.399155][T17973] kmsan_internal_poison_shadow+0x66/0xd0 [ 630.404916][T17973] kmsan_slab_alloc+0x8a/0xe0 [ 630.409641][T17973] __kmalloc_node_track_caller+0xeab/0x12e0 [ 630.415579][T17973] __alloc_skb+0x35f/0xb30 [ 630.420040][T17973] tipc_nl_compat_dumpit+0x77c/0x9d0 [ 630.425387][T17973] tipc_nl_compat_recv+0x119c/0x2bf0 [ 630.430719][T17973] genl_rcv_msg+0x1703/0x18a0 [ 630.435436][T17973] netlink_rcv_skb+0x6d7/0x7e0 [ 630.440239][T17973] genl_rcv+0x63/0x80 [ 630.444254][T17973] netlink_unicast+0x11c8/0x1490 [ 630.449227][T17973] netlink_sendmsg+0x173a/0x1840 [ 630.454207][T17973] ____sys_sendmsg+0xc82/0x1240 [ 630.459091][T17973] __sys_sendmsg+0x6d1/0x840 [ 630.463747][T17973] __se_compat_sys_sendmsg+0xa7/0xc0 [ 630.469077][T17973] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 630.474610][T17973] __do_fast_syscall_32+0x2af/0x480 [ 630.479850][T17973] do_fast_syscall_32+0x6b/0xd0 [ 630.484749][T17973] do_SYSENTER_32+0x73/0x90 [ 630.489288][T17973] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.495632][T17973] ===================================================== [ 630.502608][T17973] Disabling lock debugging due to kernel taint [ 630.508803][T17973] Kernel panic - not syncing: panic_on_warn set ... [ 630.515450][T17973] CPU: 0 PID: 17973 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 630.525531][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.535612][T17973] Call Trace: [ 630.538950][T17973] dump_stack+0x21c/0x280 [ 630.543331][T17973] panic+0x4d7/0xef7 [ 630.547298][T17973] ? add_taint+0x17c/0x210 [ 630.551774][T17973] kmsan_report+0x1df/0x1e0 [ 630.556357][T17973] __msan_warning+0x58/0xa0 [ 630.560919][T17973] __tipc_nl_compat_dumpit+0x5cd/0x1450 [ 630.566513][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.571758][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.577023][T17973] ? __alloc_skb+0x894/0xb30 [ 630.581676][T17973] tipc_nl_compat_dumpit+0x7f9/0x9d0 [ 630.587027][T17973] tipc_nl_compat_recv+0x119c/0x2bf0 [ 630.592369][T17973] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 630.598499][T17973] ? __tipc_nl_add_sk_info+0xdc0/0xdc0 [ 630.604003][T17973] ? tipc_nl_compat_name_table_dump+0xd50/0xd50 [ 630.610291][T17973] ? tipc_netlink_compat_stop+0x40/0x40 [ 630.615884][T17973] genl_rcv_msg+0x1703/0x18a0 [ 630.620633][T17973] ? kmsan_set_origin_checked+0x95/0xf0 [ 630.626239][T17973] netlink_rcv_skb+0x6d7/0x7e0 [ 630.631049][T17973] ? genl_rcv+0x80/0x80 [ 630.635264][T17973] genl_rcv+0x63/0x80 [ 630.639285][T17973] netlink_unicast+0x11c8/0x1490 [ 630.644271][T17973] ? genl_pernet_exit+0x90/0x90 [ 630.649193][T17973] netlink_sendmsg+0x173a/0x1840 [ 630.654211][T17973] ____sys_sendmsg+0xc82/0x1240 [ 630.659124][T17973] ? netlink_getsockopt+0x1b20/0x1b20 [ 630.664553][T17973] __sys_sendmsg+0x6d1/0x840 [ 630.669219][T17973] ? kmsan_copy_to_user+0x81/0x90 [ 630.674301][T17973] ? put_old_timespec32+0x231/0x2d0 [ 630.679534][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.684765][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.689997][T17973] ? kmsan_get_metadata+0x116/0x180 [ 630.695236][T17973] __se_compat_sys_sendmsg+0xa7/0xc0 [ 630.700581][T17973] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 630.706086][T17973] __do_fast_syscall_32+0x2af/0x480 [ 630.711326][T17973] do_fast_syscall_32+0x6b/0xd0 [ 630.716215][T17973] do_SYSENTER_32+0x73/0x90 [ 630.720739][T17973] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 630.727077][T17973] RIP: 0023:0xf7f87549 [ 630.731142][T17973] Code: Bad RIP value. [ 630.735211][T17973] RSP: 002b:00000000f55810cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 630.743630][T17973] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000640 [ 630.751618][T17973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.759617][T17973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.767975][T17973] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 630.775981][T17973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.785127][T17973] Kernel Offset: disabled [ 630.789524][T17973] Rebooting in 86400 seconds..