275][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3480.881275][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3480.881275][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3480.881275][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3480.881275][T23880] __do_fast_syscall_32+0x129/0x180 [ 3480.881275][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3480.881275][T23880] do_SYSENTER_32+0x73/0x90 [ 3480.881275][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3480.881275][T23880] [ 3480.881275][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3480.881275][T23880] do_recvmmsg+0xc2/0x22e0 [ 3480.881275][T23880] do_recvmmsg+0xc2/0x22e0 [ 3481.559582][T23880] not chained 3280000 origins [ 3481.564291][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3481.564563][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3481.564563][T23880] Call Trace: [ 3481.564563][T23880] dump_stack+0x21c/0x280 [ 3481.564563][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3481.564563][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3481.564563][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3481.564563][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3481.564563][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3481.564563][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3481.564563][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3481.564563][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3481.564563][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3481.564563][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3481.647085][T23880] ? _copy_from_user+0x201/0x310 [ 3481.647085][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3481.647085][T23880] __msan_chain_origin+0x57/0xa0 [ 3481.647085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3481.647085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3481.647085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3481.647085][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3481.647085][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3481.647085][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3481.647085][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3481.647085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3481.647085][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3481.647085][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3481.647085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3481.647085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3481.647085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3481.647085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3481.647085][T23880] do_SYSENTER_32+0x73/0x90 [ 3481.647085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3481.647085][T23880] RIP: 0023:0xf7ff3549 [ 3481.647085][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3481.647085][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3481.647085][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3481.647085][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3481.647085][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3481.647085][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3481.647085][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3481.647085][T23880] Uninit was stored to memory at: [ 3481.647085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3481.647085][T23880] __msan_chain_origin+0x57/0xa0 [ 3481.647085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3481.647085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3481.647085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3481.647085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3481.647085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3481.647085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3481.647085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3481.647085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3481.647085][T23880] do_SYSENTER_32+0x73/0x90 [ 3481.647085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3481.647085][T23880] [ 3481.647085][T23880] Uninit was stored to memory at: [ 3481.647085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3481.647085][T23880] __msan_chain_origin+0x57/0xa0 [ 3481.647085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3481.647085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3481.647085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3481.647085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3481.647085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3481.647085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3481.647085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3481.647085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3481.647085][T23880] do_SYSENTER_32+0x73/0x90 [ 3481.647085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3481.647085][T23880] [ 3481.647085][T23880] Uninit was stored to memory at: [ 3481.647085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3481.647085][T23880] __msan_chain_origin+0x57/0xa0 [ 3481.647085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3481.647085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3481.647085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3481.647085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3481.647085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3481.647085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3481.647085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3481.647085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3481.647085][T23880] do_SYSENTER_32+0x73/0x90 [ 3481.647085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3481.647085][T23880] [ 3481.647085][T23880] Uninit was stored to memory at: [ 3481.647085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3481.647085][T23880] __msan_chain_origin+0x57/0xa0 [ 3481.647085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3481.647085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3481.647085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3481.647085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3481.647085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3481.647085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3481.647085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3481.647085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3481.647085][T23880] do_SYSENTER_32+0x73/0x90 [ 3481.647085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3481.647085][T23880] [ 3481.647085][T23880] Uninit was stored to memory at: [ 3481.647085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3481.647085][T23880] __msan_chain_origin+0x57/0xa0 [ 3481.647085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3481.647085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3481.647085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3481.647085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3481.647085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3481.647085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3481.647085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3481.647085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3481.647085][T23880] do_SYSENTER_32+0x73/0x90 [ 3481.647085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3481.647085][T23880] [ 3481.647085][T23880] Uninit was stored to memory at: [ 3481.647085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3481.647085][T23880] __msan_chain_origin+0x57/0xa0 [ 3481.647085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3481.647085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3481.647085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3481.647085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3481.647085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3481.647085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3481.647085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3481.647085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3481.647085][T23880] do_SYSENTER_32+0x73/0x90 [ 3481.647085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3481.647085][T23880] [ 3481.647085][T23880] Uninit was stored to memory at: [ 3481.647085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3481.647085][T23880] __msan_chain_origin+0x57/0xa0 [ 3481.647085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3481.647085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3481.647085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3481.647085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3481.647085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3481.647085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3481.647085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3481.647085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3481.647085][T23880] do_SYSENTER_32+0x73/0x90 [ 3481.647085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3481.647085][T23880] [ 3481.647085][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3481.647085][T23880] do_recvmmsg+0xc2/0x22e0 [ 3481.647085][T23880] do_recvmmsg+0xc2/0x22e0 [ 3482.559146][T23882] not chained 3290000 origins [ 3482.563855][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3482.564770][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3482.564770][T23882] Call Trace: [ 3482.564770][T23882] dump_stack+0x21c/0x280 [ 3482.564770][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3482.564770][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3482.564770][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3482.564770][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3482.564770][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3482.564770][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3482.564770][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3482.564770][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3482.564770][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3482.564770][T23882] ? _copy_from_user+0x201/0x310 [ 3482.564770][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3482.564770][T23882] __msan_chain_origin+0x57/0xa0 [ 3482.564770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3482.564770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3482.564770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3482.564770][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3482.564770][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3482.564770][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3482.564770][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3482.564770][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3482.564770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3482.564770][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3482.564770][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3482.564770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3482.564770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3482.564770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3482.564770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3482.564770][T23882] do_SYSENTER_32+0x73/0x90 [ 3482.564770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3482.564770][T23882] RIP: 0023:0xf7ff3549 [ 3482.564770][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3482.564770][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3482.564770][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3482.564770][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3482.564770][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3482.564770][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3482.564770][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3482.564770][T23882] Uninit was stored to memory at: [ 3482.564770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3482.564770][T23882] __msan_chain_origin+0x57/0xa0 [ 3482.564770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3482.564770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3482.564770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3482.564770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3482.564770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3482.564770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3482.564770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3482.564770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3482.564770][T23882] do_SYSENTER_32+0x73/0x90 [ 3482.564770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3482.564770][T23882] [ 3482.564770][T23882] Uninit was stored to memory at: [ 3482.564770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3482.564770][T23882] __msan_chain_origin+0x57/0xa0 [ 3482.564770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3482.564770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3482.564770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3482.564770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3482.564770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3482.564770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3482.564770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3482.564770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3482.564770][T23882] do_SYSENTER_32+0x73/0x90 [ 3482.564770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3482.564770][T23882] [ 3482.564770][T23882] Uninit was stored to memory at: [ 3482.564770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3482.564770][T23882] __msan_chain_origin+0x57/0xa0 [ 3482.564770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3482.564770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3482.564770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3482.564770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3482.564770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3482.564770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3482.564770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3482.564770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3482.564770][T23882] do_SYSENTER_32+0x73/0x90 [ 3482.564770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3482.564770][T23882] [ 3482.564770][T23882] Uninit was stored to memory at: [ 3482.564770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3482.564770][T23882] __msan_chain_origin+0x57/0xa0 [ 3482.564770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3482.564770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3482.564770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3482.564770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3482.564770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3482.564770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3482.564770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3482.564770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3482.564770][T23882] do_SYSENTER_32+0x73/0x90 [ 3482.564770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3482.564770][T23882] [ 3482.564770][T23882] Uninit was stored to memory at: [ 3482.564770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3482.564770][T23882] __msan_chain_origin+0x57/0xa0 [ 3482.564770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3482.564770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3482.564770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3482.564770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3482.564770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3482.564770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3482.564770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3482.564770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3482.564770][T23882] do_SYSENTER_32+0x73/0x90 [ 3482.564770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3482.564770][T23882] [ 3482.564770][T23882] Uninit was stored to memory at: [ 3482.564770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3482.564770][T23882] __msan_chain_origin+0x57/0xa0 [ 3482.564770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3482.564770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3482.564770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3482.564770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3482.564770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3482.564770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3482.564770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3482.564770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3482.564770][T23882] do_SYSENTER_32+0x73/0x90 [ 3482.564770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3482.564770][T23882] [ 3482.564770][T23882] Uninit was stored to memory at: [ 3482.564770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3482.564770][T23882] __msan_chain_origin+0x57/0xa0 [ 3482.564770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3482.564770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3482.564770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3482.564770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3482.564770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3482.564770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3482.564770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3482.564770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3482.564770][T23882] do_SYSENTER_32+0x73/0x90 [ 3482.564770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3482.564770][T23882] [ 3482.564770][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3482.564770][T23882] do_recvmmsg+0xc2/0x22e0 [ 3482.564770][T23882] do_recvmmsg+0xc2/0x22e0 [ 3483.394931][T23880] not chained 3300000 origins [ 3483.394952][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3483.394961][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3483.394967][T23880] Call Trace: [ 3483.394993][T23880] dump_stack+0x21c/0x280 [ 3483.395016][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3483.395036][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3483.395051][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3483.395067][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3483.395087][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3483.395102][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3483.395116][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3483.395132][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3483.395151][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3483.395171][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3483.395189][T23880] ? _copy_from_user+0x201/0x310 [ 3483.395236][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3483.404550][T23880] __msan_chain_origin+0x57/0xa0 [ 3483.404550][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3483.404550][T23880] get_compat_msghdr+0x108/0x2b0 [ 3483.404550][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3483.514846][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3483.514846][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3483.514846][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3483.514846][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3483.514846][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3483.514846][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3483.514846][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3483.514846][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3483.514846][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3483.514846][T23880] __do_fast_syscall_32+0x129/0x180 [ 3483.514846][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3483.514846][T23880] do_SYSENTER_32+0x73/0x90 [ 3483.514846][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3483.584715][T23880] RIP: 0023:0xf7ff3549 [ 3483.584715][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3483.584715][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3483.584715][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3483.584715][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3483.584715][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3483.634831][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3483.634831][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3483.654764][T23880] Uninit was stored to memory at: [ 3483.654764][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3483.654764][T23880] __msan_chain_origin+0x57/0xa0 [ 3483.654764][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3483.654764][T23880] get_compat_msghdr+0x108/0x2b0 [ 3483.654764][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3483.654764][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3483.654764][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3483.654764][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3483.654764][T23880] __do_fast_syscall_32+0x129/0x180 [ 3483.654764][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3483.654764][T23880] do_SYSENTER_32+0x73/0x90 [ 3483.654764][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3483.654764][T23880] [ 3483.654764][T23880] Uninit was stored to memory at: [ 3483.654764][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3483.654764][T23880] __msan_chain_origin+0x57/0xa0 [ 3483.654764][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3483.654764][T23880] get_compat_msghdr+0x108/0x2b0 [ 3483.654764][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3483.654764][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3483.654764][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3483.654764][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3483.654764][T23880] __do_fast_syscall_32+0x129/0x180 [ 3483.654764][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3483.654764][T23880] do_SYSENTER_32+0x73/0x90 [ 3483.654764][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3483.654764][T23880] [ 3483.654764][T23880] Uninit was stored to memory at: [ 3483.654764][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3483.654764][T23880] __msan_chain_origin+0x57/0xa0 [ 3483.654764][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3483.654764][T23880] get_compat_msghdr+0x108/0x2b0 [ 3483.654764][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3483.654764][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3483.654764][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3483.654764][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3483.654764][T23880] __do_fast_syscall_32+0x129/0x180 [ 3483.654764][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3483.654764][T23880] do_SYSENTER_32+0x73/0x90 [ 3483.654764][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3483.654764][T23880] [ 3483.654764][T23880] Uninit was stored to memory at: [ 3483.654764][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3483.654764][T23880] __msan_chain_origin+0x57/0xa0 [ 3483.881539][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3483.881539][T23880] get_compat_msghdr+0x108/0x2b0 [ 3483.881539][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3483.881539][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3483.881539][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3483.881539][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3483.881539][T23880] __do_fast_syscall_32+0x129/0x180 [ 3483.881539][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3483.881539][T23880] do_SYSENTER_32+0x73/0x90 [ 3483.881539][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3483.881539][T23880] [ 3483.881539][T23880] Uninit was stored to memory at: [ 3483.881539][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3483.881539][T23880] __msan_chain_origin+0x57/0xa0 [ 3483.881539][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3483.881539][T23880] get_compat_msghdr+0x108/0x2b0 [ 3483.881539][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3483.881539][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3483.881539][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3483.881539][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3483.881539][T23880] __do_fast_syscall_32+0x129/0x180 [ 3483.881539][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3483.881539][T23880] do_SYSENTER_32+0x73/0x90 [ 3483.881539][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3483.881539][T23880] [ 3483.881539][T23880] Uninit was stored to memory at: [ 3483.881539][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3483.881539][T23880] __msan_chain_origin+0x57/0xa0 [ 3483.881539][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3483.881539][T23880] get_compat_msghdr+0x108/0x2b0 [ 3483.881539][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3483.881539][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3483.881539][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3483.881539][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3483.881539][T23880] __do_fast_syscall_32+0x129/0x180 [ 3483.881539][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3483.881539][T23880] do_SYSENTER_32+0x73/0x90 [ 3483.881539][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3483.881539][T23880] [ 3483.881539][T23880] Uninit was stored to memory at: [ 3483.881539][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3483.881539][T23880] __msan_chain_origin+0x57/0xa0 [ 3483.881539][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3483.881539][T23880] get_compat_msghdr+0x108/0x2b0 [ 3483.881539][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3483.881539][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3483.881539][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3483.881539][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3483.881539][T23880] __do_fast_syscall_32+0x129/0x180 [ 3483.881539][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3483.881539][T23880] do_SYSENTER_32+0x73/0x90 [ 3483.881539][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3483.881539][T23880] [ 3483.881539][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3483.881539][T23880] do_recvmmsg+0xc2/0x22e0 [ 3483.881539][T23880] do_recvmmsg+0xc2/0x22e0 [ 3484.333617][T23880] not chained 3310000 origins [ 3484.334545][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3484.344675][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3484.344675][T23880] Call Trace: [ 3484.344675][T23880] dump_stack+0x21c/0x280 [ 3484.344675][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3484.344675][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3484.344675][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3484.344675][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3484.344675][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3484.344675][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3484.344675][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3484.344675][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3484.344675][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3484.344675][T23880] ? _copy_from_user+0x201/0x310 [ 3484.344675][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3484.344675][T23880] __msan_chain_origin+0x57/0xa0 [ 3484.344675][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3484.344675][T23880] get_compat_msghdr+0x108/0x2b0 [ 3484.344675][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3484.344675][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3484.344675][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3484.344675][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3484.344675][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3484.344675][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3484.344675][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3484.344675][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3484.344675][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3484.344675][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3484.344675][T23880] __do_fast_syscall_32+0x129/0x180 [ 3484.344675][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3484.344675][T23880] do_SYSENTER_32+0x73/0x90 [ 3484.344675][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3484.344675][T23880] RIP: 0023:0xf7ff3549 [ 3484.344675][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3484.344675][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3484.344675][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3484.344675][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3484.344675][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3484.344675][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3484.344675][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3484.344675][T23880] Uninit was stored to memory at: [ 3484.344675][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3484.344675][T23880] __msan_chain_origin+0x57/0xa0 [ 3484.344675][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3484.344675][T23880] get_compat_msghdr+0x108/0x2b0 [ 3484.344675][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3484.344675][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3484.344675][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3484.344675][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3484.344675][T23880] __do_fast_syscall_32+0x129/0x180 [ 3484.344675][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3484.344675][T23880] do_SYSENTER_32+0x73/0x90 [ 3484.344675][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3484.344675][T23880] [ 3484.344675][T23880] Uninit was stored to memory at: [ 3484.344675][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3484.344675][T23880] __msan_chain_origin+0x57/0xa0 [ 3484.344675][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3484.344675][T23880] get_compat_msghdr+0x108/0x2b0 [ 3484.344675][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3484.344675][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3484.344675][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3484.344675][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3484.344675][T23880] __do_fast_syscall_32+0x129/0x180 [ 3484.344675][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3484.344675][T23880] do_SYSENTER_32+0x73/0x90 [ 3484.344675][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3484.344675][T23880] [ 3484.344675][T23880] Uninit was stored to memory at: [ 3484.344675][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3484.344675][T23880] __msan_chain_origin+0x57/0xa0 [ 3484.344675][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3484.344675][T23880] get_compat_msghdr+0x108/0x2b0 [ 3484.344675][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3484.344675][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3484.344675][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3484.344675][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3484.344675][T23880] __do_fast_syscall_32+0x129/0x180 [ 3484.344675][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3484.344675][T23880] do_SYSENTER_32+0x73/0x90 [ 3484.344675][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3484.344675][T23880] [ 3484.344675][T23880] Uninit was stored to memory at: [ 3484.344675][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3484.344675][T23880] __msan_chain_origin+0x57/0xa0 [ 3484.344675][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3484.344675][T23880] get_compat_msghdr+0x108/0x2b0 [ 3484.344675][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3484.344675][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3484.344675][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3484.344675][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3484.344675][T23880] __do_fast_syscall_32+0x129/0x180 [ 3484.344675][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3484.344675][T23880] do_SYSENTER_32+0x73/0x90 [ 3484.344675][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3484.344675][T23880] [ 3484.344675][T23880] Uninit was stored to memory at: [ 3484.344675][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3484.344675][T23880] __msan_chain_origin+0x57/0xa0 [ 3484.344675][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3484.344675][T23880] get_compat_msghdr+0x108/0x2b0 [ 3484.344675][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3484.344675][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3484.344675][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3484.344675][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3484.344675][T23880] __do_fast_syscall_32+0x129/0x180 [ 3484.344675][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3484.344675][T23880] do_SYSENTER_32+0x73/0x90 [ 3484.344675][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3484.344675][T23880] [ 3484.344675][T23880] Uninit was stored to memory at: [ 3484.344675][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3484.344675][T23880] __msan_chain_origin+0x57/0xa0 [ 3484.344675][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3484.344675][T23880] get_compat_msghdr+0x108/0x2b0 [ 3484.344675][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3484.344675][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3484.344675][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3484.344675][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3484.344675][T23880] __do_fast_syscall_32+0x129/0x180 [ 3484.344675][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3484.344675][T23880] do_SYSENTER_32+0x73/0x90 [ 3484.344675][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3484.344675][T23880] [ 3484.344675][T23880] Uninit was stored to memory at: [ 3484.344675][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3484.344675][T23880] __msan_chain_origin+0x57/0xa0 [ 3484.344675][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3484.344675][T23880] get_compat_msghdr+0x108/0x2b0 [ 3484.344675][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3484.344675][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3484.344675][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3484.344675][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3484.344675][T23880] __do_fast_syscall_32+0x129/0x180 [ 3484.344675][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3484.344675][T23880] do_SYSENTER_32+0x73/0x90 [ 3484.344675][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3484.344675][T23880] [ 3484.344675][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3484.344675][T23880] do_recvmmsg+0xc2/0x22e0 [ 3484.344675][T23880] do_recvmmsg+0xc2/0x22e0 [ 3485.363187][T23882] not chained 3320000 origins [ 3485.364559][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3485.364559][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3485.364559][T23882] Call Trace: [ 3485.364559][T23882] dump_stack+0x21c/0x280 [ 3485.364559][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3485.364559][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3485.364559][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3485.364559][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3485.364559][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3485.364559][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3485.364559][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3485.364559][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3485.435787][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3485.435787][T23882] ? _copy_from_user+0x201/0x310 [ 3485.435787][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3485.435787][T23882] __msan_chain_origin+0x57/0xa0 [ 3485.435787][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3485.435787][T23882] get_compat_msghdr+0x108/0x2b0 [ 3485.435787][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3485.435787][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3485.435787][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3485.435787][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3485.435787][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3485.435787][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3485.435787][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3485.435787][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3485.435787][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3485.435787][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3485.435787][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3485.435787][T23882] __do_fast_syscall_32+0x129/0x180 [ 3485.435787][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3485.435787][T23882] do_SYSENTER_32+0x73/0x90 [ 3485.435787][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3485.435787][T23882] RIP: 0023:0xf7ff3549 [ 3485.435787][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3485.435787][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3485.435787][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3485.435787][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3485.435787][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3485.435787][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3485.435787][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3485.435787][T23882] Uninit was stored to memory at: [ 3485.435787][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3485.435787][T23882] __msan_chain_origin+0x57/0xa0 [ 3485.435787][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3485.435787][T23882] get_compat_msghdr+0x108/0x2b0 [ 3485.435787][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3485.435787][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3485.435787][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3485.435787][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3485.435787][T23882] __do_fast_syscall_32+0x129/0x180 [ 3485.435787][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3485.435787][T23882] do_SYSENTER_32+0x73/0x90 [ 3485.435787][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3485.435787][T23882] [ 3485.435787][T23882] Uninit was stored to memory at: [ 3485.435787][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3485.435787][T23882] __msan_chain_origin+0x57/0xa0 [ 3485.435787][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3485.435787][T23882] get_compat_msghdr+0x108/0x2b0 [ 3485.435787][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3485.435787][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3485.435787][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3485.435787][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3485.435787][T23882] __do_fast_syscall_32+0x129/0x180 [ 3485.435787][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3485.435787][T23882] do_SYSENTER_32+0x73/0x90 [ 3485.435787][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3485.435787][T23882] [ 3485.435787][T23882] Uninit was stored to memory at: [ 3485.435787][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3485.435787][T23882] __msan_chain_origin+0x57/0xa0 [ 3485.435787][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3485.435787][T23882] get_compat_msghdr+0x108/0x2b0 [ 3485.435787][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3485.435787][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3485.435787][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3485.435787][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3485.435787][T23882] __do_fast_syscall_32+0x129/0x180 [ 3485.435787][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3485.435787][T23882] do_SYSENTER_32+0x73/0x90 [ 3485.435787][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3485.435787][T23882] [ 3485.435787][T23882] Uninit was stored to memory at: [ 3485.435787][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3485.435787][T23882] __msan_chain_origin+0x57/0xa0 [ 3485.435787][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3485.435787][T23882] get_compat_msghdr+0x108/0x2b0 [ 3485.435787][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3485.435787][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3485.435787][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3485.435787][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3485.435787][T23882] __do_fast_syscall_32+0x129/0x180 [ 3485.435787][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3485.435787][T23882] do_SYSENTER_32+0x73/0x90 [ 3485.435787][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3485.435787][T23882] [ 3485.435787][T23882] Uninit was stored to memory at: [ 3485.435787][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3485.435787][T23882] __msan_chain_origin+0x57/0xa0 [ 3485.435787][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3485.435787][T23882] get_compat_msghdr+0x108/0x2b0 [ 3485.435787][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3485.435787][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3485.435787][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3485.435787][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3485.435787][T23882] __do_fast_syscall_32+0x129/0x180 [ 3485.435787][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3485.435787][T23882] do_SYSENTER_32+0x73/0x90 [ 3485.435787][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3485.435787][T23882] [ 3485.435787][T23882] Uninit was stored to memory at: [ 3485.435787][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3485.435787][T23882] __msan_chain_origin+0x57/0xa0 [ 3485.435787][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3485.435787][T23882] get_compat_msghdr+0x108/0x2b0 [ 3485.435787][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3485.435787][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3485.435787][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3485.435787][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3485.435787][T23882] __do_fast_syscall_32+0x129/0x180 [ 3485.435787][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3485.435787][T23882] do_SYSENTER_32+0x73/0x90 [ 3485.435787][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3485.435787][T23882] [ 3485.435787][T23882] Uninit was stored to memory at: [ 3485.435787][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3485.435787][T23882] __msan_chain_origin+0x57/0xa0 [ 3485.435787][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3485.435787][T23882] get_compat_msghdr+0x108/0x2b0 [ 3485.435787][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3485.435787][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3485.435787][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3485.435787][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3485.435787][T23882] __do_fast_syscall_32+0x129/0x180 [ 3485.435787][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3485.435787][T23882] do_SYSENTER_32+0x73/0x90 [ 3485.435787][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3485.435787][T23882] [ 3485.435787][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3485.435787][T23882] do_recvmmsg+0xc2/0x22e0 [ 3485.435787][T23882] do_recvmmsg+0xc2/0x22e0 [ 3486.231035][T23880] not chained 3330000 origins [ 3486.234549][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3486.234549][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3486.234549][T23880] Call Trace: [ 3486.234549][T23880] dump_stack+0x21c/0x280 [ 3486.234549][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3486.234549][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3486.234549][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3486.234549][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3486.234549][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3486.234549][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3486.234549][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3486.234549][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3486.234549][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3486.234549][T23880] ? _copy_from_user+0x201/0x310 [ 3486.234549][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3486.234549][T23880] __msan_chain_origin+0x57/0xa0 [ 3486.234549][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3486.234549][T23880] get_compat_msghdr+0x108/0x2b0 [ 3486.234549][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3486.234549][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3486.234549][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3486.234549][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3486.234549][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3486.234549][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3486.234549][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3486.234549][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3486.234549][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3486.234549][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3486.234549][T23880] __do_fast_syscall_32+0x129/0x180 [ 3486.234549][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3486.234549][T23880] do_SYSENTER_32+0x73/0x90 [ 3486.234549][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3486.234549][T23880] RIP: 0023:0xf7ff3549 [ 3486.234549][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3486.234549][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3486.234549][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3486.234549][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3486.234549][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3486.234549][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3486.234549][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3486.234549][T23880] Uninit was stored to memory at: [ 3486.234549][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3486.234549][T23880] __msan_chain_origin+0x57/0xa0 [ 3486.234549][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3486.234549][T23880] get_compat_msghdr+0x108/0x2b0 [ 3486.234549][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3486.234549][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3486.234549][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3486.234549][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3486.234549][T23880] __do_fast_syscall_32+0x129/0x180 [ 3486.234549][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3486.234549][T23880] do_SYSENTER_32+0x73/0x90 [ 3486.234549][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3486.234549][T23880] [ 3486.234549][T23880] Uninit was stored to memory at: [ 3486.234549][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3486.234549][T23880] __msan_chain_origin+0x57/0xa0 [ 3486.234549][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3486.234549][T23880] get_compat_msghdr+0x108/0x2b0 [ 3486.234549][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3486.234549][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3486.234549][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3486.234549][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3486.234549][T23880] __do_fast_syscall_32+0x129/0x180 [ 3486.234549][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3486.234549][T23880] do_SYSENTER_32+0x73/0x90 [ 3486.234549][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3486.234549][T23880] [ 3486.234549][T23880] Uninit was stored to memory at: [ 3486.234549][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3486.234549][T23880] __msan_chain_origin+0x57/0xa0 [ 3486.234549][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3486.234549][T23880] get_compat_msghdr+0x108/0x2b0 [ 3486.234549][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3486.234549][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3486.234549][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3486.234549][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3486.234549][T23880] __do_fast_syscall_32+0x129/0x180 [ 3486.234549][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3486.234549][T23880] do_SYSENTER_32+0x73/0x90 [ 3486.234549][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3486.234549][T23880] [ 3486.234549][T23880] Uninit was stored to memory at: [ 3486.234549][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3486.234549][T23880] __msan_chain_origin+0x57/0xa0 [ 3486.234549][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3486.234549][T23880] get_compat_msghdr+0x108/0x2b0 [ 3486.234549][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3486.234549][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3486.234549][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3486.234549][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3486.234549][T23880] __do_fast_syscall_32+0x129/0x180 [ 3486.234549][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3486.234549][T23880] do_SYSENTER_32+0x73/0x90 [ 3486.234549][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3486.234549][T23880] [ 3486.234549][T23880] Uninit was stored to memory at: [ 3486.234549][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3486.234549][T23880] __msan_chain_origin+0x57/0xa0 [ 3486.234549][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3486.234549][T23880] get_compat_msghdr+0x108/0x2b0 [ 3486.234549][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3486.234549][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3486.234549][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3486.234549][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3486.234549][T23880] __do_fast_syscall_32+0x129/0x180 [ 3486.234549][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3486.234549][T23880] do_SYSENTER_32+0x73/0x90 [ 3486.234549][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3486.234549][T23880] [ 3486.234549][T23880] Uninit was stored to memory at: [ 3486.234549][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3486.234549][T23880] __msan_chain_origin+0x57/0xa0 [ 3486.234549][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3486.234549][T23880] get_compat_msghdr+0x108/0x2b0 [ 3486.234549][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3486.234549][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3486.234549][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3486.234549][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3486.234549][T23880] __do_fast_syscall_32+0x129/0x180 [ 3486.234549][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3486.234549][T23880] do_SYSENTER_32+0x73/0x90 [ 3486.234549][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3486.234549][T23880] [ 3486.234549][T23880] Uninit was stored to memory at: [ 3486.234549][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3486.234549][T23880] __msan_chain_origin+0x57/0xa0 [ 3486.234549][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3486.234549][T23880] get_compat_msghdr+0x108/0x2b0 [ 3486.234549][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3486.234549][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3486.234549][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3486.234549][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3486.234549][T23880] __do_fast_syscall_32+0x129/0x180 [ 3486.234549][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3486.234549][T23880] do_SYSENTER_32+0x73/0x90 [ 3486.234549][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3486.234549][T23880] [ 3486.234549][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3486.234549][T23880] do_recvmmsg+0xc2/0x22e0 [ 3486.234549][T23880] do_recvmmsg+0xc2/0x22e0 [ 3487.256636][T23880] not chained 3340000 origins [ 3487.261378][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3487.264546][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3487.264546][T23880] Call Trace: [ 3487.264546][T23880] dump_stack+0x21c/0x280 [ 3487.264546][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3487.264546][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3487.296128][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3487.296128][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3487.296128][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3487.296128][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3487.296128][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3487.296128][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3487.296128][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3487.296128][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3487.296128][T23880] ? _copy_from_user+0x201/0x310 [ 3487.296128][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3487.296128][T23880] __msan_chain_origin+0x57/0xa0 [ 3487.296128][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3487.296128][T23880] get_compat_msghdr+0x108/0x2b0 [ 3487.296128][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3487.296128][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3487.296128][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3487.296128][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3487.296128][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3487.296128][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3487.296128][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3487.296128][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3487.296128][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3487.296128][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3487.296128][T23880] __do_fast_syscall_32+0x129/0x180 [ 3487.296128][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3487.296128][T23880] do_SYSENTER_32+0x73/0x90 [ 3487.296128][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3487.296128][T23880] RIP: 0023:0xf7ff3549 [ 3487.444709][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3487.444709][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3487.444709][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3487.444709][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3487.444709][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3487.444709][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3487.444709][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3487.444709][T23880] Uninit was stored to memory at: [ 3487.444709][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3487.444709][T23880] __msan_chain_origin+0x57/0xa0 [ 3487.444709][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3487.444709][T23880] get_compat_msghdr+0x108/0x2b0 [ 3487.444709][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3487.444709][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3487.444709][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3487.444709][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3487.444709][T23880] __do_fast_syscall_32+0x129/0x180 [ 3487.444709][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3487.444709][T23880] do_SYSENTER_32+0x73/0x90 [ 3487.444709][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3487.444709][T23880] [ 3487.444709][T23880] Uninit was stored to memory at: [ 3487.444709][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3487.444709][T23880] __msan_chain_origin+0x57/0xa0 [ 3487.444709][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3487.444709][T23880] get_compat_msghdr+0x108/0x2b0 [ 3487.444709][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3487.444709][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3487.444709][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3487.444709][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3487.444709][T23880] __do_fast_syscall_32+0x129/0x180 [ 3487.444709][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3487.444709][T23880] do_SYSENTER_32+0x73/0x90 [ 3487.444709][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3487.444709][T23880] [ 3487.444709][T23880] Uninit was stored to memory at: [ 3487.444709][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3487.444709][T23880] __msan_chain_origin+0x57/0xa0 [ 3487.444709][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3487.444709][T23880] get_compat_msghdr+0x108/0x2b0 [ 3487.444709][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3487.444709][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3487.444709][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3487.444709][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3487.444709][T23880] __do_fast_syscall_32+0x129/0x180 [ 3487.444709][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3487.444709][T23880] do_SYSENTER_32+0x73/0x90 [ 3487.444709][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3487.444709][T23880] [ 3487.444709][T23880] Uninit was stored to memory at: [ 3487.444709][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3487.444709][T23880] __msan_chain_origin+0x57/0xa0 [ 3487.444709][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3487.444709][T23880] get_compat_msghdr+0x108/0x2b0 [ 3487.444709][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3487.444709][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3487.444709][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3487.444709][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3487.444709][T23880] __do_fast_syscall_32+0x129/0x180 [ 3487.444709][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3487.444709][T23880] do_SYSENTER_32+0x73/0x90 [ 3487.444709][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3487.444709][T23880] [ 3487.444709][T23880] Uninit was stored to memory at: [ 3487.444709][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3487.444709][T23880] __msan_chain_origin+0x57/0xa0 [ 3487.444709][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3487.444709][T23880] get_compat_msghdr+0x108/0x2b0 [ 3487.444709][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3487.444709][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3487.444709][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3487.444709][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3487.444709][T23880] __do_fast_syscall_32+0x129/0x180 [ 3487.444709][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3487.444709][T23880] do_SYSENTER_32+0x73/0x90 [ 3487.444709][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3487.444709][T23880] [ 3487.444709][T23880] Uninit was stored to memory at: [ 3487.444709][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3487.444709][T23880] __msan_chain_origin+0x57/0xa0 [ 3487.444709][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3487.444709][T23880] get_compat_msghdr+0x108/0x2b0 [ 3487.444709][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3487.444709][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3487.444709][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3487.444709][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3487.444709][T23880] __do_fast_syscall_32+0x129/0x180 [ 3487.444709][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3487.444709][T23880] do_SYSENTER_32+0x73/0x90 [ 3487.444709][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3487.444709][T23880] [ 3487.444709][T23880] Uninit was stored to memory at: [ 3487.444709][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3487.444709][T23880] __msan_chain_origin+0x57/0xa0 [ 3487.444709][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3487.444709][T23880] get_compat_msghdr+0x108/0x2b0 [ 3487.444709][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3487.444709][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3487.444709][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3487.444709][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3487.444709][T23880] __do_fast_syscall_32+0x129/0x180 [ 3487.444709][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3487.444709][T23880] do_SYSENTER_32+0x73/0x90 [ 3487.444709][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3487.444709][T23880] [ 3487.444709][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3487.444709][T23880] do_recvmmsg+0xc2/0x22e0 [ 3487.444709][T23880] do_recvmmsg+0xc2/0x22e0 [ 3488.398382][T23882] not chained 3350000 origins [ 3488.403097][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3488.405495][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3488.405495][T23882] Call Trace: [ 3488.405495][T23882] dump_stack+0x21c/0x280 [ 3488.405495][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3488.405495][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3488.405495][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3488.405495][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3488.405495][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3488.405495][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3488.405495][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3488.405495][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3488.405495][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3488.405495][T23882] ? _copy_from_user+0x201/0x310 [ 3488.405495][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3488.405495][T23882] __msan_chain_origin+0x57/0xa0 [ 3488.405495][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3488.405495][T23882] get_compat_msghdr+0x108/0x2b0 [ 3488.405495][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3488.405495][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3488.405495][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3488.405495][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3488.405495][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3488.405495][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3488.405495][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3488.405495][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3488.405495][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3488.405495][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3488.405495][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3488.405495][T23882] __do_fast_syscall_32+0x129/0x180 [ 3488.405495][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3488.405495][T23882] do_SYSENTER_32+0x73/0x90 [ 3488.405495][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3488.405495][T23882] RIP: 0023:0xf7ff3549 [ 3488.405495][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3488.405495][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3488.405495][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3488.405495][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3488.405495][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3488.405495][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3488.405495][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3488.405495][T23882] Uninit was stored to memory at: [ 3488.405495][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3488.405495][T23882] __msan_chain_origin+0x57/0xa0 [ 3488.405495][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3488.405495][T23882] get_compat_msghdr+0x108/0x2b0 [ 3488.405495][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3488.405495][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3488.405495][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3488.405495][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3488.405495][T23882] __do_fast_syscall_32+0x129/0x180 [ 3488.405495][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3488.405495][T23882] do_SYSENTER_32+0x73/0x90 [ 3488.405495][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3488.405495][T23882] [ 3488.405495][T23882] Uninit was stored to memory at: [ 3488.405495][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3488.405495][T23882] __msan_chain_origin+0x57/0xa0 [ 3488.405495][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3488.405495][T23882] get_compat_msghdr+0x108/0x2b0 [ 3488.405495][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3488.405495][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3488.405495][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3488.405495][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3488.405495][T23882] __do_fast_syscall_32+0x129/0x180 [ 3488.405495][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3488.405495][T23882] do_SYSENTER_32+0x73/0x90 [ 3488.405495][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3488.405495][T23882] [ 3488.405495][T23882] Uninit was stored to memory at: [ 3488.405495][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3488.405495][T23882] __msan_chain_origin+0x57/0xa0 [ 3488.405495][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3488.405495][T23882] get_compat_msghdr+0x108/0x2b0 [ 3488.405495][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3488.405495][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3488.405495][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3488.405495][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3488.405495][T23882] __do_fast_syscall_32+0x129/0x180 [ 3488.405495][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3488.405495][T23882] do_SYSENTER_32+0x73/0x90 [ 3488.405495][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3488.405495][T23882] [ 3488.405495][T23882] Uninit was stored to memory at: [ 3488.405495][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3488.405495][T23882] __msan_chain_origin+0x57/0xa0 [ 3488.405495][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3488.405495][T23882] get_compat_msghdr+0x108/0x2b0 [ 3488.405495][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3488.405495][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3488.405495][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3488.405495][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3488.405495][T23882] __do_fast_syscall_32+0x129/0x180 [ 3488.405495][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3488.405495][T23882] do_SYSENTER_32+0x73/0x90 [ 3488.405495][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3488.405495][T23882] [ 3488.405495][T23882] Uninit was stored to memory at: [ 3488.405495][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3488.405495][T23882] __msan_chain_origin+0x57/0xa0 [ 3488.405495][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3488.405495][T23882] get_compat_msghdr+0x108/0x2b0 [ 3488.405495][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3488.405495][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3488.405495][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3488.405495][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3488.405495][T23882] __do_fast_syscall_32+0x129/0x180 [ 3488.405495][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3488.405495][T23882] do_SYSENTER_32+0x73/0x90 [ 3488.405495][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3488.405495][T23882] [ 3488.405495][T23882] Uninit was stored to memory at: [ 3488.405495][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3488.405495][T23882] __msan_chain_origin+0x57/0xa0 [ 3488.405495][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3488.405495][T23882] get_compat_msghdr+0x108/0x2b0 [ 3488.405495][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3488.405495][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3488.405495][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3488.405495][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3488.405495][T23882] __do_fast_syscall_32+0x129/0x180 [ 3488.405495][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3488.405495][T23882] do_SYSENTER_32+0x73/0x90 [ 3488.405495][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3488.405495][T23882] [ 3488.405495][T23882] Uninit was stored to memory at: [ 3488.405495][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3488.405495][T23882] __msan_chain_origin+0x57/0xa0 [ 3488.405495][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3488.405495][T23882] get_compat_msghdr+0x108/0x2b0 [ 3488.405495][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3488.405495][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3488.405495][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3488.405495][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3488.405495][T23882] __do_fast_syscall_32+0x129/0x180 [ 3488.405495][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3488.405495][T23882] do_SYSENTER_32+0x73/0x90 [ 3488.405495][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3488.405495][T23882] [ 3488.405495][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3488.405495][T23882] do_recvmmsg+0xc2/0x22e0 [ 3488.405495][T23882] do_recvmmsg+0xc2/0x22e0 [ 3489.452252][T23882] not chained 3360000 origins [ 3489.454608][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3489.454608][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3489.454608][T23882] Call Trace: [ 3489.454608][T23882] dump_stack+0x21c/0x280 [ 3489.454608][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3489.454608][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3489.454608][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3489.454608][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3489.454608][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3489.454608][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3489.454608][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3489.454608][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3489.454608][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3489.531615][T23882] ? _copy_from_user+0x201/0x310 [ 3489.531615][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] __msan_chain_origin+0x57/0xa0 [ 3489.531615][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3489.531615][T23882] get_compat_msghdr+0x108/0x2b0 [ 3489.531615][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3489.531615][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3489.531615][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3489.531615][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3489.531615][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3489.531615][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3489.531615][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.531615][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.531615][T23882] __do_fast_syscall_32+0x129/0x180 [ 3489.531615][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3489.531615][T23882] do_SYSENTER_32+0x73/0x90 [ 3489.531615][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.531615][T23882] RIP: 0023:0xf7ff3549 [ 3489.531615][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3489.531615][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3489.531615][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3489.531615][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3489.531615][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3489.531615][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3489.531615][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3489.531615][T23882] Uninit was stored to memory at: [ 3489.531615][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3489.531615][T23882] __msan_chain_origin+0x57/0xa0 [ 3489.531615][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3489.531615][T23882] get_compat_msghdr+0x108/0x2b0 [ 3489.531615][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3489.531615][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3489.531615][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.531615][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.531615][T23882] __do_fast_syscall_32+0x129/0x180 [ 3489.531615][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3489.531615][T23882] do_SYSENTER_32+0x73/0x90 [ 3489.531615][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.531615][T23882] [ 3489.531615][T23882] Uninit was stored to memory at: [ 3489.531615][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3489.791553][T23880] not chained 3370000 origins [ 3489.531615][T23882] __msan_chain_origin+0x57/0xa0 [ 3489.794535][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3489.531615][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3489.794535][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3489.531615][T23882] get_compat_msghdr+0x108/0x2b0 [ 3489.794535][T23880] Call Trace: [ 3489.531615][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3489.794535][T23880] dump_stack+0x21c/0x280 [ 3489.531615][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3489.794535][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3489.531615][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.794535][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3489.531615][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.794535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] __do_fast_syscall_32+0x129/0x180 [ 3489.794535][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3489.531615][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3489.794535][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3489.531615][T23882] do_SYSENTER_32+0x73/0x90 [ 3489.794535][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3489.531615][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.794535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] [ 3489.794535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] Uninit was stored to memory at: [ 3489.794535][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3489.531615][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3489.794535][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3489.531615][T23882] __msan_chain_origin+0x57/0xa0 [ 3489.794535][T23880] ? _copy_from_user+0x201/0x310 [ 3489.531615][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3489.794535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] get_compat_msghdr+0x108/0x2b0 [ 3489.794535][T23880] __msan_chain_origin+0x57/0xa0 [ 3489.531615][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3489.794535][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3489.531615][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3489.794535][T23880] get_compat_msghdr+0x108/0x2b0 [ 3489.531615][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.794535][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3489.531615][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.794535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] __do_fast_syscall_32+0x129/0x180 [ 3489.794535][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3489.531615][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3489.794535][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3489.531615][T23882] do_SYSENTER_32+0x73/0x90 [ 3489.794535][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3489.531615][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.794535][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3489.531615][T23882] [ 3489.794535][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3489.531615][T23882] Uninit was stored to memory at: [ 3489.794535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3489.531615][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3489.794535][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.531615][T23882] __msan_chain_origin+0x57/0xa0 [ 3489.794535][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.531615][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3489.794535][T23880] __do_fast_syscall_32+0x129/0x180 [ 3489.531615][T23882] get_compat_msghdr+0x108/0x2b0 [ 3489.794535][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3489.531615][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3489.531615][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3489.794535][T23880] do_SYSENTER_32+0x73/0x90 [ 3489.531615][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.794535][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.794535][T23880] RIP: 0023:0xf7ff3549 [ 3489.531615][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.794535][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3489.531615][T23882] __do_fast_syscall_32+0x129/0x180 [ 3489.794535][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3489.531615][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3489.531615][T23882] do_SYSENTER_32+0x73/0x90 [ 3489.794535][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3489.531615][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.794535][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3489.531615][T23882] [ 3489.794535][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3489.531615][T23882] Uninit was stored to memory at: [ 3489.794535][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3489.531615][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3489.794535][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3489.531615][T23882] __msan_chain_origin+0x57/0xa0 [ 3489.794535][T23880] Uninit was stored to memory at: [ 3489.531615][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3489.794535][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3489.531615][T23882] get_compat_msghdr+0x108/0x2b0 [ 3489.794535][T23880] __msan_chain_origin+0x57/0xa0 [ 3489.531615][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3489.794535][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3489.531615][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3489.794535][T23880] get_compat_msghdr+0x108/0x2b0 [ 3489.531615][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.794535][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3489.531615][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.794535][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3489.531615][T23882] __do_fast_syscall_32+0x129/0x180 [ 3489.794535][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.531615][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3489.794535][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.531615][T23882] do_SYSENTER_32+0x73/0x90 [ 3489.794535][T23880] __do_fast_syscall_32+0x129/0x180 [ 3489.531615][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.794535][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3489.531615][T23882] [ 3489.794535][T23880] do_SYSENTER_32+0x73/0x90 [ 3489.531615][T23882] Uninit was stored to memory at: [ 3489.794535][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.531615][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3489.794535][T23880] [ 3489.531615][T23882] __msan_chain_origin+0x57/0xa0 [ 3489.794535][T23880] Uninit was stored to memory at: [ 3489.531615][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3489.794535][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3489.531615][T23882] get_compat_msghdr+0x108/0x2b0 [ 3489.794535][T23880] __msan_chain_origin+0x57/0xa0 [ 3489.531615][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3489.794535][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3489.531615][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3489.794535][T23880] get_compat_msghdr+0x108/0x2b0 [ 3489.531615][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.794535][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3489.531615][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.794535][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3489.531615][T23882] __do_fast_syscall_32+0x129/0x180 [ 3489.794535][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.531615][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3489.794535][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.531615][T23882] do_SYSENTER_32+0x73/0x90 [ 3489.794535][T23880] __do_fast_syscall_32+0x129/0x180 [ 3489.531615][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.794535][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3489.531615][T23882] [ 3489.794535][T23880] do_SYSENTER_32+0x73/0x90 [ 3489.531615][T23882] Uninit was stored to memory at: [ 3489.794535][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.531615][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3489.794535][T23880] [ 3489.531615][T23882] __msan_chain_origin+0x57/0xa0 [ 3489.794535][T23880] Uninit was stored to memory at: [ 3489.531615][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3489.794535][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3489.531615][T23882] get_compat_msghdr+0x108/0x2b0 [ 3489.794535][T23880] __msan_chain_origin+0x57/0xa0 [ 3489.531615][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3489.794535][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3489.531615][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3489.794535][T23880] get_compat_msghdr+0x108/0x2b0 [ 3489.531615][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.794535][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3489.531615][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.794535][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3489.531615][T23882] __do_fast_syscall_32+0x129/0x180 [ 3489.794535][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3489.531615][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3489.794535][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3489.531615][T23882] do_SYSENTER_32+0x73/0x90 [ 3489.794535][T23880] __do_fast_syscall_32+0x129/0x180 [ 3489.531615][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.794535][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3489.531615][T23882] [ 3489.794535][T23880] do_SYSENTER_32+0x73/0x90 [ 3489.531615][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3489.794535][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3489.531615][T23882] do_recvmmsg+0xc2/0x22e0 [ 3489.794535][T23880] [ 3489.531615][T23882] do_recvmmsg+0xc2/0x22e0 [ 3489.794535][T23880] Uninit was stored to memory at: [ 3489.794535][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3490.700681][T23880] __msan_chain_origin+0x57/0xa0 [ 3490.710257][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3490.712298][T23880] get_compat_msghdr+0x108/0x2b0 [ 3490.712298][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3490.712298][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3490.712298][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3490.712298][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3490.712298][T23880] __do_fast_syscall_32+0x129/0x180 [ 3490.712298][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3490.712298][T23880] do_SYSENTER_32+0x73/0x90 [ 3490.712298][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3490.712298][T23880] [ 3490.712298][T23880] Uninit was stored to memory at: [ 3490.712298][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3490.712298][T23880] __msan_chain_origin+0x57/0xa0 [ 3490.712298][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3490.712298][T23880] get_compat_msghdr+0x108/0x2b0 [ 3490.712298][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3490.712298][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3490.712298][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3490.712298][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3490.712298][T23880] __do_fast_syscall_32+0x129/0x180 [ 3490.712298][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3490.712298][T23880] do_SYSENTER_32+0x73/0x90 [ 3490.712298][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3490.712298][T23880] [ 3490.712298][T23880] Uninit was stored to memory at: [ 3490.712298][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3490.712298][T23880] __msan_chain_origin+0x57/0xa0 [ 3490.712298][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3490.712298][T23880] get_compat_msghdr+0x108/0x2b0 [ 3490.712298][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3490.712298][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3490.712298][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3490.712298][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3490.712298][T23880] __do_fast_syscall_32+0x129/0x180 [ 3490.712298][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3490.712298][T23880] do_SYSENTER_32+0x73/0x90 [ 3490.712298][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3490.712298][T23880] [ 3490.712298][T23880] Uninit was stored to memory at: [ 3490.712298][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3490.712298][T23880] __msan_chain_origin+0x57/0xa0 [ 3490.712298][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3490.712298][T23880] get_compat_msghdr+0x108/0x2b0 [ 3490.712298][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3490.712298][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3490.712298][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3490.712298][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3490.712298][T23880] __do_fast_syscall_32+0x129/0x180 [ 3490.712298][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3490.712298][T23880] do_SYSENTER_32+0x73/0x90 [ 3490.712298][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3490.712298][T23880] [ 3490.712298][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3490.712298][T23880] do_recvmmsg+0xc2/0x22e0 [ 3490.712298][T23880] do_recvmmsg+0xc2/0x22e0 [ 3491.323895][T23882] not chained 3380000 origins [ 3491.324559][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3491.324559][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3491.324559][T23882] Call Trace: [ 3491.324559][T23882] dump_stack+0x21c/0x280 [ 3491.324559][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3491.324559][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3491.324559][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3491.324559][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3491.324559][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3491.324559][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3491.324559][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3491.324559][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3491.324559][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3491.324559][T23882] ? _copy_from_user+0x201/0x310 [ 3491.324559][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3491.324559][T23882] __msan_chain_origin+0x57/0xa0 [ 3491.324559][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3491.324559][T23882] get_compat_msghdr+0x108/0x2b0 [ 3491.324559][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3491.324559][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3491.324559][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3491.324559][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3491.324559][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3491.324559][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3491.324559][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3491.324559][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3491.324559][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3491.324559][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3491.324559][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3491.324559][T23882] __do_fast_syscall_32+0x129/0x180 [ 3491.324559][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3491.324559][T23882] do_SYSENTER_32+0x73/0x90 [ 3491.324559][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3491.324559][T23882] RIP: 0023:0xf7ff3549 [ 3491.324559][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3491.324559][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3491.324559][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3491.324559][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3491.324559][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3491.324559][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3491.324559][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3491.324559][T23882] Uninit was stored to memory at: [ 3491.324559][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3491.324559][T23882] __msan_chain_origin+0x57/0xa0 [ 3491.324559][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3491.324559][T23882] get_compat_msghdr+0x108/0x2b0 [ 3491.324559][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3491.324559][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3491.324559][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3491.324559][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3491.324559][T23882] __do_fast_syscall_32+0x129/0x180 [ 3491.324559][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3491.324559][T23882] do_SYSENTER_32+0x73/0x90 [ 3491.324559][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3491.324559][T23882] [ 3491.324559][T23882] Uninit was stored to memory at: [ 3491.324559][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3491.324559][T23882] __msan_chain_origin+0x57/0xa0 [ 3491.324559][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3491.324559][T23882] get_compat_msghdr+0x108/0x2b0 [ 3491.324559][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3491.324559][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3491.324559][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3491.324559][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3491.324559][T23882] __do_fast_syscall_32+0x129/0x180 [ 3491.324559][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3491.324559][T23882] do_SYSENTER_32+0x73/0x90 [ 3491.324559][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3491.324559][T23882] [ 3491.324559][T23882] Uninit was stored to memory at: [ 3491.324559][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3491.324559][T23882] __msan_chain_origin+0x57/0xa0 [ 3491.324559][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3491.324559][T23882] get_compat_msghdr+0x108/0x2b0 [ 3491.324559][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3491.324559][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3491.324559][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3491.324559][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3491.324559][T23882] __do_fast_syscall_32+0x129/0x180 [ 3491.324559][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3491.324559][T23882] do_SYSENTER_32+0x73/0x90 [ 3491.324559][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3491.324559][T23882] [ 3491.324559][T23882] Uninit was stored to memory at: [ 3491.324559][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3491.324559][T23882] __msan_chain_origin+0x57/0xa0 [ 3491.324559][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3491.324559][T23882] get_compat_msghdr+0x108/0x2b0 [ 3491.324559][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3491.324559][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3491.324559][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3491.324559][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3491.324559][T23882] __do_fast_syscall_32+0x129/0x180 [ 3491.324559][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3491.324559][T23882] do_SYSENTER_32+0x73/0x90 [ 3491.324559][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3491.324559][T23882] [ 3491.324559][T23882] Uninit was stored to memory at: [ 3491.324559][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3491.324559][T23882] __msan_chain_origin+0x57/0xa0 [ 3491.324559][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3491.324559][T23882] get_compat_msghdr+0x108/0x2b0 [ 3491.324559][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3491.324559][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3491.324559][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3491.324559][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3491.324559][T23882] __do_fast_syscall_32+0x129/0x180 [ 3491.324559][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3491.324559][T23882] do_SYSENTER_32+0x73/0x90 [ 3491.324559][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3491.324559][T23882] [ 3491.324559][T23882] Uninit was stored to memory at: [ 3491.324559][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3491.324559][T23882] __msan_chain_origin+0x57/0xa0 [ 3491.324559][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3491.324559][T23882] get_compat_msghdr+0x108/0x2b0 [ 3491.324559][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3491.324559][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3491.324559][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3491.324559][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3491.324559][T23882] __do_fast_syscall_32+0x129/0x180 [ 3491.324559][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3491.324559][T23882] do_SYSENTER_32+0x73/0x90 [ 3491.324559][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3491.324559][T23882] [ 3491.324559][T23882] Uninit was stored to memory at: [ 3491.324559][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3491.324559][T23882] __msan_chain_origin+0x57/0xa0 [ 3491.324559][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3491.324559][T23882] get_compat_msghdr+0x108/0x2b0 [ 3491.324559][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3491.324559][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3491.324559][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3491.324559][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3491.324559][T23882] __do_fast_syscall_32+0x129/0x180 [ 3491.324559][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3491.324559][T23882] do_SYSENTER_32+0x73/0x90 [ 3491.324559][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3491.324559][T23882] [ 3491.324559][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3491.324559][T23882] do_recvmmsg+0xc2/0x22e0 [ 3491.324559][T23882] do_recvmmsg+0xc2/0x22e0 [ 3492.290490][T23880] not chained 3390000 origins [ 3492.294547][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3492.303730][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3492.303730][T23880] Call Trace: [ 3492.303730][T23880] dump_stack+0x21c/0x280 [ 3492.303730][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3492.303730][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3492.303730][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3492.303730][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3492.303730][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3492.303730][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3492.303730][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3492.303730][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3492.303730][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3492.303730][T23880] ? _copy_from_user+0x201/0x310 [ 3492.303730][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3492.303730][T23880] __msan_chain_origin+0x57/0xa0 [ 3492.303730][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3492.303730][T23880] get_compat_msghdr+0x108/0x2b0 [ 3492.303730][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3492.303730][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3492.303730][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3492.303730][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3492.303730][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3492.303730][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3492.303730][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3492.303730][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3492.303730][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3492.303730][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3492.303730][T23880] __do_fast_syscall_32+0x129/0x180 [ 3492.303730][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3492.303730][T23880] do_SYSENTER_32+0x73/0x90 [ 3492.303730][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3492.303730][T23880] RIP: 0023:0xf7ff3549 [ 3492.303730][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3492.303730][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3492.303730][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3492.303730][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3492.303730][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3492.303730][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3492.303730][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3492.303730][T23880] Uninit was stored to memory at: [ 3492.303730][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3492.303730][T23880] __msan_chain_origin+0x57/0xa0 [ 3492.303730][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3492.303730][T23880] get_compat_msghdr+0x108/0x2b0 [ 3492.303730][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3492.303730][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3492.303730][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3492.303730][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3492.303730][T23880] __do_fast_syscall_32+0x129/0x180 [ 3492.303730][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3492.303730][T23880] do_SYSENTER_32+0x73/0x90 [ 3492.303730][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3492.303730][T23880] [ 3492.303730][T23880] Uninit was stored to memory at: [ 3492.303730][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3492.303730][T23880] __msan_chain_origin+0x57/0xa0 [ 3492.303730][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3492.303730][T23880] get_compat_msghdr+0x108/0x2b0 [ 3492.303730][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3492.303730][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3492.303730][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3492.303730][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3492.303730][T23880] __do_fast_syscall_32+0x129/0x180 [ 3492.303730][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3492.303730][T23880] do_SYSENTER_32+0x73/0x90 [ 3492.303730][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3492.303730][T23880] [ 3492.303730][T23880] Uninit was stored to memory at: [ 3492.303730][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3492.303730][T23880] __msan_chain_origin+0x57/0xa0 [ 3492.303730][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3492.303730][T23880] get_compat_msghdr+0x108/0x2b0 [ 3492.303730][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3492.303730][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3492.303730][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3492.303730][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3492.303730][T23880] __do_fast_syscall_32+0x129/0x180 [ 3492.303730][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3492.303730][T23880] do_SYSENTER_32+0x73/0x90 [ 3492.303730][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3492.303730][T23880] [ 3492.303730][T23880] Uninit was stored to memory at: [ 3492.303730][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3492.303730][T23880] __msan_chain_origin+0x57/0xa0 [ 3492.303730][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3492.303730][T23880] get_compat_msghdr+0x108/0x2b0 [ 3492.303730][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3492.303730][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3492.303730][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3492.303730][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3492.303730][T23880] __do_fast_syscall_32+0x129/0x180 [ 3492.303730][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3492.303730][T23880] do_SYSENTER_32+0x73/0x90 [ 3492.303730][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3492.303730][T23880] [ 3492.303730][T23880] Uninit was stored to memory at: [ 3492.303730][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3492.303730][T23880] __msan_chain_origin+0x57/0xa0 [ 3492.303730][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3492.303730][T23880] get_compat_msghdr+0x108/0x2b0 [ 3492.303730][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3492.303730][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3492.303730][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3492.303730][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3492.303730][T23880] __do_fast_syscall_32+0x129/0x180 [ 3492.303730][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3492.303730][T23880] do_SYSENTER_32+0x73/0x90 [ 3492.303730][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3492.303730][T23880] [ 3492.303730][T23880] Uninit was stored to memory at: [ 3492.303730][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3492.303730][T23880] __msan_chain_origin+0x57/0xa0 [ 3492.303730][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3492.303730][T23880] get_compat_msghdr+0x108/0x2b0 [ 3492.303730][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3492.303730][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3492.303730][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3492.303730][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3492.303730][T23880] __do_fast_syscall_32+0x129/0x180 [ 3492.303730][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3492.303730][T23880] do_SYSENTER_32+0x73/0x90 [ 3492.303730][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3492.303730][T23880] [ 3492.303730][T23880] Uninit was stored to memory at: [ 3492.303730][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3492.303730][T23880] __msan_chain_origin+0x57/0xa0 [ 3492.303730][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3492.303730][T23880] get_compat_msghdr+0x108/0x2b0 [ 3492.303730][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3492.303730][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3492.303730][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3492.303730][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3492.303730][T23880] __do_fast_syscall_32+0x129/0x180 [ 3492.303730][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3492.303730][T23880] do_SYSENTER_32+0x73/0x90 [ 3492.303730][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3492.303730][T23880] [ 3492.303730][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3492.303730][T23880] do_recvmmsg+0xc2/0x22e0 [ 3492.303730][T23880] do_recvmmsg+0xc2/0x22e0 [ 3493.434900][T23882] not chained 3400000 origins [ 3493.439757][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3493.444563][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3493.454623][T23882] Call Trace: [ 3493.454623][T23882] dump_stack+0x21c/0x280 [ 3493.454623][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3493.454623][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3493.454623][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3493.454623][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3493.454623][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3493.454623][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3493.454623][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3493.454623][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3493.454623][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3493.454623][T23882] ? _copy_from_user+0x201/0x310 [ 3493.454623][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3493.525343][T23882] __msan_chain_origin+0x57/0xa0 [ 3493.525343][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3493.525343][T23882] get_compat_msghdr+0x108/0x2b0 [ 3493.525343][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3493.525343][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3493.525343][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3493.525343][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3493.525343][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3493.525343][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3493.525343][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3493.525343][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3493.525343][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3493.525343][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.525343][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.525343][T23882] __do_fast_syscall_32+0x129/0x180 [ 3493.525343][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3493.525343][T23882] do_SYSENTER_32+0x73/0x90 [ 3493.525343][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.525343][T23882] RIP: 0023:0xf7ff3549 [ 3493.525343][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3493.525343][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3493.525343][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3493.525343][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3493.525343][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3493.678358][T23880] not chained 3410000 origins [ 3493.525343][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3493.525343][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3493.525343][T23882] Uninit was stored to memory at: [ 3493.684533][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3493.684533][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3493.525343][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3493.684533][T23880] Call Trace: [ 3493.525343][T23882] __msan_chain_origin+0x57/0xa0 [ 3493.684533][T23880] dump_stack+0x21c/0x280 [ 3493.525343][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3493.684533][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3493.525343][T23882] get_compat_msghdr+0x108/0x2b0 [ 3493.684533][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3493.525343][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3493.684533][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3493.525343][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3493.684533][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3493.525343][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.684533][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3493.525343][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.684533][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3493.525343][T23882] __do_fast_syscall_32+0x129/0x180 [ 3493.684533][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3493.525343][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3493.684533][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3493.525343][T23882] do_SYSENTER_32+0x73/0x90 [ 3493.684533][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3493.525343][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.684533][T23880] ? _copy_from_user+0x201/0x310 [ 3493.525343][T23882] [ 3493.684533][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3493.525343][T23882] Uninit was stored to memory at: [ 3493.684533][T23880] __msan_chain_origin+0x57/0xa0 [ 3493.525343][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3493.684533][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3493.525343][T23882] __msan_chain_origin+0x57/0xa0 [ 3493.684533][T23880] get_compat_msghdr+0x108/0x2b0 [ 3493.525343][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3493.684533][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3493.525343][T23882] get_compat_msghdr+0x108/0x2b0 [ 3493.684533][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3493.525343][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3493.684533][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3493.525343][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3493.684533][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3493.525343][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.684533][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3493.525343][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.684533][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3493.525343][T23882] __do_fast_syscall_32+0x129/0x180 [ 3493.684533][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3493.525343][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3493.684533][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3493.525343][T23882] do_SYSENTER_32+0x73/0x90 [ 3493.684533][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.525343][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.684533][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.525343][T23882] [ 3493.684533][T23880] __do_fast_syscall_32+0x129/0x180 [ 3493.525343][T23882] Uninit was stored to memory at: [ 3493.684533][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3493.525343][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3493.684533][T23880] do_SYSENTER_32+0x73/0x90 [ 3493.525343][T23882] __msan_chain_origin+0x57/0xa0 [ 3493.684533][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.525343][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3493.684533][T23880] RIP: 0023:0xf7ff3549 [ 3493.525343][T23882] get_compat_msghdr+0x108/0x2b0 [ 3493.684533][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3493.525343][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3493.684533][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3493.525343][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3493.684533][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3493.525343][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.684533][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3493.525343][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.684533][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3493.525343][T23882] __do_fast_syscall_32+0x129/0x180 [ 3493.684533][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3493.525343][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3493.684533][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3493.684533][T23880] Uninit was stored to memory at: [ 3493.684533][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3493.684533][T23880] __msan_chain_origin+0x57/0xa0 [ 3493.525343][T23882] do_SYSENTER_32+0x73/0x90 [ 3493.684533][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3493.525343][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.684533][T23880] get_compat_msghdr+0x108/0x2b0 [ 3493.525343][T23882] [ 3493.684533][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3493.525343][T23882] Uninit was stored to memory at: [ 3493.684533][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3493.525343][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3493.684533][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.525343][T23882] __msan_chain_origin+0x57/0xa0 [ 3493.684533][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.525343][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3493.684533][T23880] __do_fast_syscall_32+0x129/0x180 [ 3493.525343][T23882] get_compat_msghdr+0x108/0x2b0 [ 3493.684533][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3493.525343][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3493.684533][T23880] do_SYSENTER_32+0x73/0x90 [ 3493.525343][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3493.684533][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.525343][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.684533][T23880] [ 3493.525343][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.684533][T23880] Uninit was stored to memory at: [ 3493.525343][T23882] __do_fast_syscall_32+0x129/0x180 [ 3493.684533][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3493.525343][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3493.684533][T23880] __msan_chain_origin+0x57/0xa0 [ 3493.525343][T23882] do_SYSENTER_32+0x73/0x90 [ 3493.684533][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3493.525343][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.684533][T23880] get_compat_msghdr+0x108/0x2b0 [ 3493.525343][T23882] [ 3493.525343][T23882] Uninit was stored to memory at: [ 3493.684533][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3493.525343][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3493.684533][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3493.525343][T23882] __msan_chain_origin+0x57/0xa0 [ 3493.684533][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.525343][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3493.684533][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.525343][T23882] get_compat_msghdr+0x108/0x2b0 [ 3493.684533][T23880] __do_fast_syscall_32+0x129/0x180 [ 3493.525343][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3493.684533][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3493.525343][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3493.684533][T23880] do_SYSENTER_32+0x73/0x90 [ 3493.525343][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.525343][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.684533][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.525343][T23882] __do_fast_syscall_32+0x129/0x180 [ 3493.684533][T23880] [ 3493.525343][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3493.684533][T23880] Uninit was stored to memory at: [ 3493.525343][T23882] do_SYSENTER_32+0x73/0x90 [ 3493.684533][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3493.525343][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.684533][T23880] __msan_chain_origin+0x57/0xa0 [ 3493.525343][T23882] [ 3493.684533][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3493.525343][T23882] Uninit was stored to memory at: [ 3493.684533][T23880] get_compat_msghdr+0x108/0x2b0 [ 3493.525343][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3493.684533][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3493.525343][T23882] __msan_chain_origin+0x57/0xa0 [ 3493.684533][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3493.525343][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3493.684533][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.525343][T23882] get_compat_msghdr+0x108/0x2b0 [ 3493.684533][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.525343][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3493.684533][T23880] __do_fast_syscall_32+0x129/0x180 [ 3493.525343][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3493.684533][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3493.525343][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.684533][T23880] do_SYSENTER_32+0x73/0x90 [ 3493.525343][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.684533][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.525343][T23882] __do_fast_syscall_32+0x129/0x180 [ 3493.684533][T23880] [ 3493.684533][T23880] Uninit was stored to memory at: [ 3493.525343][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3493.684533][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3493.525343][T23882] do_SYSENTER_32+0x73/0x90 [ 3493.684533][T23880] __msan_chain_origin+0x57/0xa0 [ 3493.525343][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.684533][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3493.525343][T23882] [ 3493.684533][T23880] get_compat_msghdr+0x108/0x2b0 [ 3493.525343][T23882] Uninit was stored to memory at: [ 3493.684533][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3493.525343][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3493.684533][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3493.525343][T23882] __msan_chain_origin+0x57/0xa0 [ 3493.684533][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.525343][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3493.684533][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.525343][T23882] get_compat_msghdr+0x108/0x2b0 [ 3493.684533][T23880] __do_fast_syscall_32+0x129/0x180 [ 3493.525343][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3493.684533][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3493.525343][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3493.684533][T23880] do_SYSENTER_32+0x73/0x90 [ 3493.525343][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3493.684533][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.525343][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3493.684533][T23880] [ 3493.525343][T23882] __do_fast_syscall_32+0x129/0x180 [ 3493.684533][T23880] Uninit was stored to memory at: [ 3493.525343][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3493.684533][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3493.525343][T23882] do_SYSENTER_32+0x73/0x90 [ 3493.684533][T23880] __msan_chain_origin+0x57/0xa0 [ 3493.525343][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3493.684533][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3493.525343][T23882] [ 3493.684533][T23880] get_compat_msghdr+0x108/0x2b0 [ 3493.525343][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3493.684533][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3493.525343][T23882] do_recvmmsg+0xc2/0x22e0 [ 3493.684533][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3493.525343][T23882] do_recvmmsg+0xc2/0x22e0 [ 3493.684533][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3494.774428][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3494.774428][T23880] __do_fast_syscall_32+0x129/0x180 [ 3494.774428][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3494.774428][T23880] do_SYSENTER_32+0x73/0x90 [ 3494.774428][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3494.774428][T23880] [ 3494.774428][T23880] Uninit was stored to memory at: [ 3494.774428][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3494.774428][T23880] __msan_chain_origin+0x57/0xa0 [ 3494.774428][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3494.774428][T23880] get_compat_msghdr+0x108/0x2b0 [ 3494.774428][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3494.774428][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3494.774428][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3494.774428][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3494.774428][T23880] __do_fast_syscall_32+0x129/0x180 [ 3494.774428][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3494.774428][T23880] do_SYSENTER_32+0x73/0x90 [ 3494.774428][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3494.774428][T23880] [ 3494.774428][T23880] Uninit was stored to memory at: [ 3494.774428][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3494.774428][T23880] __msan_chain_origin+0x57/0xa0 [ 3494.774428][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3494.774428][T23880] get_compat_msghdr+0x108/0x2b0 [ 3494.774428][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3494.774428][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3494.774428][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3494.774428][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3494.774428][T23880] __do_fast_syscall_32+0x129/0x180 [ 3494.774428][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3494.774428][T23880] do_SYSENTER_32+0x73/0x90 [ 3494.774428][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3494.774428][T23880] [ 3494.774428][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3494.774428][T23880] do_recvmmsg+0xc2/0x22e0 [ 3494.774428][T23880] do_recvmmsg+0xc2/0x22e0 [ 3495.247429][T23882] not chained 3420000 origins [ 3495.252141][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3495.254564][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3495.266190][T23882] Call Trace: [ 3495.266190][T23882] dump_stack+0x21c/0x280 [ 3495.266190][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3495.266190][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3495.266190][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3495.266190][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3495.266190][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3495.266190][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3495.266190][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3495.266190][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3495.266190][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3495.266190][T23882] ? _copy_from_user+0x201/0x310 [ 3495.266190][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3495.266190][T23882] __msan_chain_origin+0x57/0xa0 [ 3495.266190][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3495.266190][T23882] get_compat_msghdr+0x108/0x2b0 [ 3495.266190][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3495.266190][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3495.266190][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3495.266190][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3495.266190][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3495.266190][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3495.266190][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3495.266190][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3495.266190][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3495.266190][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3495.266190][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3495.266190][T23882] __do_fast_syscall_32+0x129/0x180 [ 3495.266190][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3495.266190][T23882] do_SYSENTER_32+0x73/0x90 [ 3495.266190][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3495.266190][T23882] RIP: 0023:0xf7ff3549 [ 3495.266190][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3495.266190][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3495.266190][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3495.266190][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3495.266190][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3495.266190][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3495.266190][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3495.266190][T23882] Uninit was stored to memory at: [ 3495.266190][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3495.266190][T23882] __msan_chain_origin+0x57/0xa0 [ 3495.266190][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3495.266190][T23882] get_compat_msghdr+0x108/0x2b0 [ 3495.266190][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3495.266190][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3495.266190][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3495.266190][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3495.266190][T23882] __do_fast_syscall_32+0x129/0x180 [ 3495.266190][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3495.266190][T23882] do_SYSENTER_32+0x73/0x90 [ 3495.266190][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3495.266190][T23882] [ 3495.266190][T23882] Uninit was stored to memory at: [ 3495.266190][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3495.266190][T23882] __msan_chain_origin+0x57/0xa0 [ 3495.266190][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3495.266190][T23882] get_compat_msghdr+0x108/0x2b0 [ 3495.266190][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3495.266190][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3495.266190][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3495.266190][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3495.266190][T23882] __do_fast_syscall_32+0x129/0x180 [ 3495.266190][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3495.266190][T23882] do_SYSENTER_32+0x73/0x90 [ 3495.266190][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3495.266190][T23882] [ 3495.266190][T23882] Uninit was stored to memory at: [ 3495.266190][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3495.266190][T23882] __msan_chain_origin+0x57/0xa0 [ 3495.266190][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3495.266190][T23882] get_compat_msghdr+0x108/0x2b0 [ 3495.266190][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3495.266190][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3495.266190][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3495.266190][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3495.266190][T23882] __do_fast_syscall_32+0x129/0x180 [ 3495.266190][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3495.266190][T23882] do_SYSENTER_32+0x73/0x90 [ 3495.266190][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3495.266190][T23882] [ 3495.266190][T23882] Uninit was stored to memory at: [ 3495.266190][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3495.266190][T23882] __msan_chain_origin+0x57/0xa0 [ 3495.266190][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3495.266190][T23882] get_compat_msghdr+0x108/0x2b0 [ 3495.266190][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3495.266190][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3495.266190][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3495.266190][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3495.266190][T23882] __do_fast_syscall_32+0x129/0x180 [ 3495.266190][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3495.266190][T23882] do_SYSENTER_32+0x73/0x90 [ 3495.266190][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3495.266190][T23882] [ 3495.266190][T23882] Uninit was stored to memory at: [ 3495.266190][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3495.266190][T23882] __msan_chain_origin+0x57/0xa0 [ 3495.266190][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3495.266190][T23882] get_compat_msghdr+0x108/0x2b0 [ 3495.266190][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3495.266190][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3495.266190][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3495.266190][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3495.266190][T23882] __do_fast_syscall_32+0x129/0x180 [ 3495.266190][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3495.266190][T23882] do_SYSENTER_32+0x73/0x90 [ 3495.266190][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3495.266190][T23882] [ 3495.266190][T23882] Uninit was stored to memory at: [ 3495.266190][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3495.266190][T23882] __msan_chain_origin+0x57/0xa0 [ 3495.266190][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3495.266190][T23882] get_compat_msghdr+0x108/0x2b0 [ 3495.266190][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3495.266190][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3495.266190][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3495.266190][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3495.266190][T23882] __do_fast_syscall_32+0x129/0x180 [ 3495.266190][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3495.266190][T23882] do_SYSENTER_32+0x73/0x90 [ 3495.266190][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3495.266190][T23882] [ 3495.266190][T23882] Uninit was stored to memory at: [ 3495.266190][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3495.266190][T23882] __msan_chain_origin+0x57/0xa0 [ 3495.266190][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3495.266190][T23882] get_compat_msghdr+0x108/0x2b0 [ 3495.266190][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3495.266190][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3495.266190][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3495.266190][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3495.266190][T23882] __do_fast_syscall_32+0x129/0x180 [ 3495.266190][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3495.266190][T23882] do_SYSENTER_32+0x73/0x90 [ 3495.266190][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3495.266190][T23882] [ 3495.266190][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3495.266190][T23882] do_recvmmsg+0xc2/0x22e0 [ 3495.266190][T23882] do_recvmmsg+0xc2/0x22e0 [ 3496.170436][T23880] not chained 3430000 origins [ 3496.174547][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3496.174547][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3496.174547][T23880] Call Trace: [ 3496.174547][T23880] dump_stack+0x21c/0x280 [ 3496.174547][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3496.174547][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3496.174547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3496.174547][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3496.174547][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3496.174547][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3496.174547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3496.174547][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3496.174547][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3496.174547][T23880] ? _copy_from_user+0x201/0x310 [ 3496.174547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3496.174547][T23880] __msan_chain_origin+0x57/0xa0 [ 3496.174547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3496.174547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3496.174547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3496.174547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3496.174547][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3496.174547][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3496.174547][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3496.174547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3496.174547][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3496.174547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3496.174547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3496.174547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3496.174547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3496.174547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3496.174547][T23880] do_SYSENTER_32+0x73/0x90 [ 3496.174547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3496.174547][T23880] RIP: 0023:0xf7ff3549 [ 3496.174547][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3496.174547][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3496.174547][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3496.174547][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3496.174547][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3496.174547][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3496.174547][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3496.174547][T23880] Uninit was stored to memory at: [ 3496.174547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3496.174547][T23880] __msan_chain_origin+0x57/0xa0 [ 3496.174547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3496.174547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3496.174547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3496.174547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3496.174547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3496.174547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3496.174547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3496.174547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3496.174547][T23880] do_SYSENTER_32+0x73/0x90 [ 3496.174547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3496.174547][T23880] [ 3496.174547][T23880] Uninit was stored to memory at: [ 3496.174547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3496.174547][T23880] __msan_chain_origin+0x57/0xa0 [ 3496.174547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3496.174547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3496.174547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3496.174547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3496.174547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3496.174547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3496.174547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3496.174547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3496.174547][T23880] do_SYSENTER_32+0x73/0x90 [ 3496.174547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3496.174547][T23880] [ 3496.174547][T23880] Uninit was stored to memory at: [ 3496.174547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3496.174547][T23880] __msan_chain_origin+0x57/0xa0 [ 3496.174547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3496.174547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3496.174547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3496.174547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3496.174547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3496.174547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3496.174547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3496.174547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3496.174547][T23880] do_SYSENTER_32+0x73/0x90 [ 3496.174547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3496.174547][T23880] [ 3496.174547][T23880] Uninit was stored to memory at: [ 3496.174547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3496.174547][T23880] __msan_chain_origin+0x57/0xa0 [ 3496.174547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3496.174547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3496.174547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3496.174547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3496.174547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3496.174547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3496.174547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3496.174547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3496.174547][T23880] do_SYSENTER_32+0x73/0x90 [ 3496.174547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3496.174547][T23880] [ 3496.174547][T23880] Uninit was stored to memory at: [ 3496.174547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3496.174547][T23880] __msan_chain_origin+0x57/0xa0 [ 3496.174547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3496.174547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3496.174547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3496.174547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3496.174547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3496.174547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3496.174547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3496.174547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3496.174547][T23880] do_SYSENTER_32+0x73/0x90 [ 3496.174547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3496.174547][T23880] [ 3496.174547][T23880] Uninit was stored to memory at: [ 3496.174547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3496.174547][T23880] __msan_chain_origin+0x57/0xa0 [ 3496.174547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3496.174547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3496.174547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3496.174547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3496.174547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3496.174547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3496.174547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3496.174547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3496.174547][T23880] do_SYSENTER_32+0x73/0x90 [ 3496.174547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3496.174547][T23880] [ 3496.174547][T23880] Uninit was stored to memory at: [ 3496.174547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3496.174547][T23880] __msan_chain_origin+0x57/0xa0 [ 3496.174547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3496.174547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3496.174547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3496.174547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3496.174547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3496.174547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3496.174547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3496.174547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3496.174547][T23880] do_SYSENTER_32+0x73/0x90 [ 3496.174547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3496.174547][T23880] [ 3496.174547][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3496.174547][T23880] do_recvmmsg+0xc2/0x22e0 [ 3496.174547][T23880] do_recvmmsg+0xc2/0x22e0 [ 3497.235427][T23882] not chained 3440000 origins [ 3497.240438][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3497.244561][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3497.244561][T23882] Call Trace: [ 3497.244561][T23882] dump_stack+0x21c/0x280 [ 3497.244561][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3497.244561][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3497.244561][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3497.244561][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3497.244561][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3497.244561][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3497.244561][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3497.244561][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3497.244561][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3497.244561][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3497.244561][T23882] ? _copy_from_user+0x201/0x310 [ 3497.244561][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3497.244561][T23882] __msan_chain_origin+0x57/0xa0 [ 3497.244561][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3497.244561][T23882] get_compat_msghdr+0x108/0x2b0 [ 3497.244561][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3497.244561][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3497.244561][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3497.244561][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3497.244561][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3497.244561][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3497.244561][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3497.244561][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3497.244561][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3497.244561][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3497.244561][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3497.244561][T23882] __do_fast_syscall_32+0x129/0x180 [ 3497.244561][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3497.244561][T23882] do_SYSENTER_32+0x73/0x90 [ 3497.244561][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3497.244561][T23882] RIP: 0023:0xf7ff3549 [ 3497.244561][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3497.244561][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3497.244561][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3497.244561][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3497.244561][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3497.244561][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3497.244561][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3497.244561][T23882] Uninit was stored to memory at: [ 3497.244561][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3497.244561][T23882] __msan_chain_origin+0x57/0xa0 [ 3497.244561][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3497.244561][T23882] get_compat_msghdr+0x108/0x2b0 [ 3497.244561][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3497.244561][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3497.244561][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3497.244561][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3497.244561][T23882] __do_fast_syscall_32+0x129/0x180 [ 3497.244561][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3497.244561][T23882] do_SYSENTER_32+0x73/0x90 [ 3497.244561][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3497.244561][T23882] [ 3497.244561][T23882] Uninit was stored to memory at: [ 3497.244561][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3497.244561][T23882] __msan_chain_origin+0x57/0xa0 [ 3497.244561][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3497.244561][T23882] get_compat_msghdr+0x108/0x2b0 [ 3497.244561][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3497.244561][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3497.244561][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3497.244561][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3497.244561][T23882] __do_fast_syscall_32+0x129/0x180 [ 3497.244561][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3497.244561][T23882] do_SYSENTER_32+0x73/0x90 [ 3497.244561][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3497.244561][T23882] [ 3497.244561][T23882] Uninit was stored to memory at: [ 3497.244561][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3497.244561][T23882] __msan_chain_origin+0x57/0xa0 [ 3497.244561][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3497.244561][T23882] get_compat_msghdr+0x108/0x2b0 [ 3497.244561][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3497.244561][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3497.244561][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3497.244561][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3497.244561][T23882] __do_fast_syscall_32+0x129/0x180 [ 3497.244561][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3497.244561][T23882] do_SYSENTER_32+0x73/0x90 [ 3497.244561][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3497.244561][T23882] [ 3497.244561][T23882] Uninit was stored to memory at: [ 3497.244561][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3497.244561][T23882] __msan_chain_origin+0x57/0xa0 [ 3497.244561][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3497.244561][T23882] get_compat_msghdr+0x108/0x2b0 [ 3497.244561][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3497.244561][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3497.244561][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3497.244561][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3497.244561][T23882] __do_fast_syscall_32+0x129/0x180 [ 3497.244561][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3497.244561][T23882] do_SYSENTER_32+0x73/0x90 [ 3497.244561][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3497.244561][T23882] [ 3497.244561][T23882] Uninit was stored to memory at: [ 3497.244561][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3497.244561][T23882] __msan_chain_origin+0x57/0xa0 [ 3497.244561][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3497.244561][T23882] get_compat_msghdr+0x108/0x2b0 [ 3497.244561][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3497.244561][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3497.244561][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3497.244561][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3497.244561][T23882] __do_fast_syscall_32+0x129/0x180 [ 3497.244561][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3497.244561][T23882] do_SYSENTER_32+0x73/0x90 [ 3497.244561][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3497.244561][T23882] [ 3497.244561][T23882] Uninit was stored to memory at: [ 3497.244561][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3497.244561][T23882] __msan_chain_origin+0x57/0xa0 [ 3497.244561][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3497.244561][T23882] get_compat_msghdr+0x108/0x2b0 [ 3497.244561][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3497.244561][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3497.244561][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3497.244561][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3497.244561][T23882] __do_fast_syscall_32+0x129/0x180 [ 3497.244561][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3497.244561][T23882] do_SYSENTER_32+0x73/0x90 [ 3497.244561][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3497.244561][T23882] [ 3497.244561][T23882] Uninit was stored to memory at: [ 3497.244561][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3497.244561][T23882] __msan_chain_origin+0x57/0xa0 [ 3497.244561][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3497.244561][T23882] get_compat_msghdr+0x108/0x2b0 [ 3497.244561][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3497.244561][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3497.244561][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3497.244561][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3497.244561][T23882] __do_fast_syscall_32+0x129/0x180 [ 3497.244561][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3497.244561][T23882] do_SYSENTER_32+0x73/0x90 [ 3497.244561][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3497.244561][T23882] [ 3497.244561][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3497.244561][T23882] do_recvmmsg+0xc2/0x22e0 [ 3497.244561][T23882] do_recvmmsg+0xc2/0x22e0 [ 3498.311513][T23880] not chained 3450000 origins [ 3498.314622][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3498.314622][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3498.314622][T23880] Call Trace: [ 3498.314622][T23880] dump_stack+0x21c/0x280 [ 3498.314622][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3498.344657][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3498.344657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3498.344657][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3498.344657][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3498.344657][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3498.344657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3498.344657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3498.344657][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3498.344657][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3498.344657][T23880] ? _copy_from_user+0x201/0x310 [ 3498.344657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3498.344657][T23880] __msan_chain_origin+0x57/0xa0 [ 3498.344657][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3498.344657][T23880] get_compat_msghdr+0x108/0x2b0 [ 3498.344657][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3498.344657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3498.344657][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3498.344657][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3498.344657][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3498.344657][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3498.344657][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3498.344657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3498.344657][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3498.344657][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3498.344657][T23880] __do_fast_syscall_32+0x129/0x180 [ 3498.344657][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3498.344657][T23880] do_SYSENTER_32+0x73/0x90 [ 3498.344657][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3498.344657][T23880] RIP: 0023:0xf7ff3549 [ 3498.344657][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3498.344657][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3498.344657][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3498.344657][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3498.344657][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3498.344657][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3498.344657][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3498.344657][T23880] Uninit was stored to memory at: [ 3498.344657][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3498.344657][T23880] __msan_chain_origin+0x57/0xa0 [ 3498.344657][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3498.344657][T23880] get_compat_msghdr+0x108/0x2b0 [ 3498.344657][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3498.344657][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3498.344657][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3498.344657][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3498.344657][T23880] __do_fast_syscall_32+0x129/0x180 [ 3498.344657][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3498.344657][T23880] do_SYSENTER_32+0x73/0x90 [ 3498.344657][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3498.344657][T23880] [ 3498.344657][T23880] Uninit was stored to memory at: [ 3498.344657][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3498.344657][T23880] __msan_chain_origin+0x57/0xa0 [ 3498.344657][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3498.344657][T23880] get_compat_msghdr+0x108/0x2b0 [ 3498.344657][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3498.344657][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3498.344657][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3498.344657][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3498.344657][T23880] __do_fast_syscall_32+0x129/0x180 [ 3498.344657][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3498.344657][T23880] do_SYSENTER_32+0x73/0x90 [ 3498.344657][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3498.344657][T23880] [ 3498.344657][T23880] Uninit was stored to memory at: [ 3498.344657][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3498.344657][T23880] __msan_chain_origin+0x57/0xa0 [ 3498.344657][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3498.344657][T23880] get_compat_msghdr+0x108/0x2b0 [ 3498.344657][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3498.344657][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3498.344657][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3498.344657][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3498.344657][T23880] __do_fast_syscall_32+0x129/0x180 [ 3498.344657][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3498.344657][T23880] do_SYSENTER_32+0x73/0x90 [ 3498.344657][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3498.344657][T23880] [ 3498.344657][T23880] Uninit was stored to memory at: [ 3498.344657][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3498.344657][T23880] __msan_chain_origin+0x57/0xa0 [ 3498.344657][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3498.344657][T23880] get_compat_msghdr+0x108/0x2b0 [ 3498.344657][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3498.344657][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3498.344657][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3498.344657][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3498.344657][T23880] __do_fast_syscall_32+0x129/0x180 [ 3498.344657][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3498.344657][T23880] do_SYSENTER_32+0x73/0x90 [ 3498.344657][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3498.344657][T23880] [ 3498.344657][T23880] Uninit was stored to memory at: [ 3498.344657][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3498.344657][T23880] __msan_chain_origin+0x57/0xa0 [ 3498.344657][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3498.344657][T23880] get_compat_msghdr+0x108/0x2b0 [ 3498.344657][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3498.344657][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3498.344657][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3498.344657][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3498.344657][T23880] __do_fast_syscall_32+0x129/0x180 [ 3498.344657][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3498.344657][T23880] do_SYSENTER_32+0x73/0x90 [ 3498.344657][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3498.344657][T23880] [ 3498.344657][T23880] Uninit was stored to memory at: [ 3498.344657][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3498.344657][T23880] __msan_chain_origin+0x57/0xa0 [ 3498.344657][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3498.344657][T23880] get_compat_msghdr+0x108/0x2b0 [ 3498.344657][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3498.344657][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3498.344657][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3498.344657][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3498.344657][T23880] __do_fast_syscall_32+0x129/0x180 [ 3498.344657][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3498.344657][T23880] do_SYSENTER_32+0x73/0x90 [ 3498.344657][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3498.344657][T23880] [ 3498.344657][T23880] Uninit was stored to memory at: [ 3498.344657][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3498.344657][T23880] __msan_chain_origin+0x57/0xa0 [ 3498.344657][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3498.344657][T23880] get_compat_msghdr+0x108/0x2b0 [ 3498.344657][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3498.344657][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3498.344657][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3498.344657][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3498.344657][T23880] __do_fast_syscall_32+0x129/0x180 [ 3498.344657][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3498.344657][T23880] do_SYSENTER_32+0x73/0x90 [ 3498.344657][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3498.344657][T23880] [ 3498.344657][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3498.344657][T23880] do_recvmmsg+0xc2/0x22e0 [ 3498.344657][T23880] do_recvmmsg+0xc2/0x22e0 [ 3499.423024][T23880] not chained 3460000 origins [ 3499.424547][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3499.424547][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3499.424547][T23880] Call Trace: [ 3499.424547][T23880] dump_stack+0x21c/0x280 [ 3499.424547][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3499.463402][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3499.463402][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3499.463402][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3499.463402][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3499.463402][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3499.463402][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3499.463402][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3499.463402][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3499.463402][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3499.463402][T23880] ? _copy_from_user+0x201/0x310 [ 3499.463402][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3499.463402][T23880] __msan_chain_origin+0x57/0xa0 [ 3499.463402][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3499.463402][T23880] get_compat_msghdr+0x108/0x2b0 [ 3499.463402][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3499.463402][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3499.463402][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3499.463402][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3499.463402][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3499.463402][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3499.463402][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3499.463402][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3499.463402][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3499.463402][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3499.463402][T23880] __do_fast_syscall_32+0x129/0x180 [ 3499.463402][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3499.463402][T23880] do_SYSENTER_32+0x73/0x90 [ 3499.463402][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3499.463402][T23880] RIP: 0023:0xf7ff3549 [ 3499.463402][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3499.463402][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3499.463402][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3499.463402][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3499.463402][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3499.463402][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3499.463402][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3499.463402][T23880] Uninit was stored to memory at: [ 3499.463402][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3499.463402][T23880] __msan_chain_origin+0x57/0xa0 [ 3499.463402][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3499.463402][T23880] get_compat_msghdr+0x108/0x2b0 [ 3499.463402][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3499.463402][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3499.463402][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3499.463402][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3499.463402][T23880] __do_fast_syscall_32+0x129/0x180 [ 3499.463402][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3499.463402][T23880] do_SYSENTER_32+0x73/0x90 [ 3499.463402][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3499.463402][T23880] [ 3499.463402][T23880] Uninit was stored to memory at: [ 3499.463402][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3499.463402][T23880] __msan_chain_origin+0x57/0xa0 [ 3499.463402][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3499.463402][T23880] get_compat_msghdr+0x108/0x2b0 [ 3499.463402][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3499.463402][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3499.463402][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3499.463402][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3499.463402][T23880] __do_fast_syscall_32+0x129/0x180 [ 3499.463402][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3499.463402][T23880] do_SYSENTER_32+0x73/0x90 [ 3499.463402][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3499.463402][T23880] [ 3499.463402][T23880] Uninit was stored to memory at: [ 3499.463402][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3499.463402][T23880] __msan_chain_origin+0x57/0xa0 [ 3499.463402][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3499.463402][T23880] get_compat_msghdr+0x108/0x2b0 [ 3499.463402][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3499.463402][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3499.463402][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3499.463402][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3499.463402][T23880] __do_fast_syscall_32+0x129/0x180 [ 3499.463402][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3499.463402][T23880] do_SYSENTER_32+0x73/0x90 [ 3499.463402][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3499.463402][T23880] [ 3499.463402][T23880] Uninit was stored to memory at: [ 3499.463402][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3499.463402][T23880] __msan_chain_origin+0x57/0xa0 [ 3499.463402][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3499.463402][T23880] get_compat_msghdr+0x108/0x2b0 [ 3499.463402][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3499.463402][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3499.463402][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3499.463402][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3499.463402][T23880] __do_fast_syscall_32+0x129/0x180 [ 3499.463402][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3499.463402][T23880] do_SYSENTER_32+0x73/0x90 [ 3499.463402][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3499.463402][T23880] [ 3499.463402][T23880] Uninit was stored to memory at: [ 3499.463402][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3499.463402][T23880] __msan_chain_origin+0x57/0xa0 [ 3499.463402][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3499.463402][T23880] get_compat_msghdr+0x108/0x2b0 [ 3499.463402][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3499.463402][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3499.463402][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3499.463402][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3499.463402][T23880] __do_fast_syscall_32+0x129/0x180 [ 3499.463402][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3499.463402][T23880] do_SYSENTER_32+0x73/0x90 [ 3499.463402][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3499.463402][T23880] [ 3499.463402][T23880] Uninit was stored to memory at: [ 3499.463402][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3499.463402][T23880] __msan_chain_origin+0x57/0xa0 [ 3499.463402][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3499.463402][T23880] get_compat_msghdr+0x108/0x2b0 [ 3499.463402][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3499.463402][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3499.463402][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3499.463402][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3499.463402][T23880] __do_fast_syscall_32+0x129/0x180 [ 3499.463402][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3499.463402][T23880] do_SYSENTER_32+0x73/0x90 [ 3499.463402][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3499.463402][T23880] [ 3499.463402][T23880] Uninit was stored to memory at: [ 3499.463402][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3499.463402][T23880] __msan_chain_origin+0x57/0xa0 [ 3499.463402][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3499.463402][T23880] get_compat_msghdr+0x108/0x2b0 [ 3499.463402][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3499.463402][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3499.463402][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3499.463402][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3499.463402][T23880] __do_fast_syscall_32+0x129/0x180 [ 3499.463402][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3499.463402][T23880] do_SYSENTER_32+0x73/0x90 [ 3499.463402][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3499.463402][T23880] [ 3499.463402][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3499.463402][T23880] do_recvmmsg+0xc2/0x22e0 [ 3499.463402][T23880] do_recvmmsg+0xc2/0x22e0 [ 3500.540083][T23880] not chained 3470000 origins [ 3500.544547][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3500.544547][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3500.544547][T23880] Call Trace: [ 3500.544547][T23880] dump_stack+0x21c/0x280 [ 3500.544547][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3500.544547][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3500.544547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3500.584637][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3500.584637][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3500.584637][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3500.584637][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3500.584637][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3500.584637][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3500.584637][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3500.584637][T23880] ? _copy_from_user+0x201/0x310 [ 3500.584637][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3500.584637][T23880] __msan_chain_origin+0x57/0xa0 [ 3500.584637][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3500.584637][T23880] get_compat_msghdr+0x108/0x2b0 [ 3500.584637][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3500.584637][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3500.584637][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3500.584637][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3500.584637][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3500.584637][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3500.584637][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3500.584637][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3500.584637][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3500.584637][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3500.584637][T23880] __do_fast_syscall_32+0x129/0x180 [ 3500.584637][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3500.584637][T23880] do_SYSENTER_32+0x73/0x90 [ 3500.584637][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3500.584637][T23880] RIP: 0023:0xf7ff3549 [ 3500.584637][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3500.584637][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3500.584637][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3500.584637][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3500.584637][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3500.584637][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3500.584637][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3500.584637][T23880] Uninit was stored to memory at: [ 3500.584637][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3500.584637][T23880] __msan_chain_origin+0x57/0xa0 [ 3500.584637][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3500.584637][T23880] get_compat_msghdr+0x108/0x2b0 [ 3500.584637][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3500.584637][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3500.584637][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3500.584637][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3500.584637][T23880] __do_fast_syscall_32+0x129/0x180 [ 3500.584637][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3500.584637][T23880] do_SYSENTER_32+0x73/0x90 [ 3500.584637][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3500.584637][T23880] [ 3500.584637][T23880] Uninit was stored to memory at: [ 3500.584637][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3500.584637][T23880] __msan_chain_origin+0x57/0xa0 [ 3500.584637][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3500.584637][T23880] get_compat_msghdr+0x108/0x2b0 [ 3500.584637][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3500.584637][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3500.584637][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3500.584637][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3500.584637][T23880] __do_fast_syscall_32+0x129/0x180 [ 3500.584637][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3500.584637][T23880] do_SYSENTER_32+0x73/0x90 [ 3500.584637][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3500.584637][T23880] [ 3500.584637][T23880] Uninit was stored to memory at: [ 3500.584637][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3500.584637][T23880] __msan_chain_origin+0x57/0xa0 [ 3500.584637][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3500.584637][T23880] get_compat_msghdr+0x108/0x2b0 [ 3500.584637][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3500.584637][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3500.584637][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3500.584637][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3500.584637][T23880] __do_fast_syscall_32+0x129/0x180 [ 3500.584637][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3500.584637][T23880] do_SYSENTER_32+0x73/0x90 [ 3500.584637][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3500.584637][T23880] [ 3500.584637][T23880] Uninit was stored to memory at: [ 3500.584637][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3500.584637][T23880] __msan_chain_origin+0x57/0xa0 [ 3500.584637][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3500.584637][T23880] get_compat_msghdr+0x108/0x2b0 [ 3500.584637][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3500.584637][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3500.584637][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3500.584637][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3500.584637][T23880] __do_fast_syscall_32+0x129/0x180 [ 3500.584637][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3500.584637][T23880] do_SYSENTER_32+0x73/0x90 [ 3500.584637][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3500.584637][T23880] [ 3500.584637][T23880] Uninit was stored to memory at: [ 3500.584637][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3500.584637][T23880] __msan_chain_origin+0x57/0xa0 [ 3500.584637][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3500.584637][T23880] get_compat_msghdr+0x108/0x2b0 [ 3500.584637][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3500.584637][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3500.584637][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3500.584637][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3500.584637][T23880] __do_fast_syscall_32+0x129/0x180 [ 3500.584637][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3500.584637][T23880] do_SYSENTER_32+0x73/0x90 [ 3500.584637][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3500.584637][T23880] [ 3500.584637][T23880] Uninit was stored to memory at: [ 3500.584637][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3500.584637][T23880] __msan_chain_origin+0x57/0xa0 [ 3500.584637][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3500.584637][T23880] get_compat_msghdr+0x108/0x2b0 [ 3500.584637][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3500.584637][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3500.584637][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3500.584637][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3500.584637][T23880] __do_fast_syscall_32+0x129/0x180 [ 3500.584637][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3500.584637][T23880] do_SYSENTER_32+0x73/0x90 [ 3500.584637][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3500.584637][T23880] [ 3500.584637][T23880] Uninit was stored to memory at: [ 3500.584637][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3500.584637][T23880] __msan_chain_origin+0x57/0xa0 [ 3500.584637][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3500.584637][T23880] get_compat_msghdr+0x108/0x2b0 [ 3500.584637][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3500.584637][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3500.584637][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3500.584637][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3500.584637][T23880] __do_fast_syscall_32+0x129/0x180 [ 3500.584637][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3500.584637][T23880] do_SYSENTER_32+0x73/0x90 [ 3500.584637][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3500.584637][T23880] [ 3500.584637][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3500.584637][T23880] do_recvmmsg+0xc2/0x22e0 [ 3500.584637][T23880] do_recvmmsg+0xc2/0x22e0 [ 3501.670045][T23880] not chained 3480000 origins [ 3501.674756][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3501.674756][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3501.674756][T23880] Call Trace: [ 3501.674756][T23880] dump_stack+0x21c/0x280 [ 3501.674756][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3501.674756][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3501.674756][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3501.717244][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3501.717244][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3501.717244][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3501.717244][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3501.717244][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3501.717244][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3501.717244][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3501.717244][T23880] ? _copy_from_user+0x201/0x310 [ 3501.717244][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3501.717244][T23880] __msan_chain_origin+0x57/0xa0 [ 3501.717244][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3501.717244][T23880] get_compat_msghdr+0x108/0x2b0 [ 3501.717244][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3501.717244][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3501.717244][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3501.717244][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3501.717244][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3501.717244][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3501.717244][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3501.717244][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3501.717244][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3501.717244][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3501.717244][T23880] __do_fast_syscall_32+0x129/0x180 [ 3501.717244][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3501.717244][T23880] do_SYSENTER_32+0x73/0x90 [ 3501.717244][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3501.717244][T23880] RIP: 0023:0xf7ff3549 [ 3501.717244][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3501.717244][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3501.717244][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3501.717244][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3501.717244][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3501.717244][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3501.717244][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3501.717244][T23880] Uninit was stored to memory at: [ 3501.717244][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3501.717244][T23880] __msan_chain_origin+0x57/0xa0 [ 3501.717244][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3501.717244][T23880] get_compat_msghdr+0x108/0x2b0 [ 3501.717244][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3501.717244][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3501.717244][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3501.717244][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3501.717244][T23880] __do_fast_syscall_32+0x129/0x180 [ 3501.717244][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3501.717244][T23880] do_SYSENTER_32+0x73/0x90 [ 3501.717244][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3501.717244][T23880] [ 3501.717244][T23880] Uninit was stored to memory at: [ 3501.717244][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3501.717244][T23880] __msan_chain_origin+0x57/0xa0 [ 3501.717244][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3501.717244][T23880] get_compat_msghdr+0x108/0x2b0 [ 3501.717244][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3501.717244][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3501.717244][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3501.717244][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3501.717244][T23880] __do_fast_syscall_32+0x129/0x180 [ 3501.717244][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3501.717244][T23880] do_SYSENTER_32+0x73/0x90 [ 3501.717244][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3501.717244][T23880] [ 3501.717244][T23880] Uninit was stored to memory at: [ 3501.717244][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3501.717244][T23880] __msan_chain_origin+0x57/0xa0 [ 3501.717244][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3501.717244][T23880] get_compat_msghdr+0x108/0x2b0 [ 3501.717244][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3501.717244][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3501.717244][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3501.717244][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3501.717244][T23880] __do_fast_syscall_32+0x129/0x180 [ 3501.717244][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3501.717244][T23880] do_SYSENTER_32+0x73/0x90 [ 3501.717244][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3501.717244][T23880] [ 3501.717244][T23880] Uninit was stored to memory at: [ 3501.717244][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3501.717244][T23880] __msan_chain_origin+0x57/0xa0 [ 3501.717244][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3501.717244][T23880] get_compat_msghdr+0x108/0x2b0 [ 3501.717244][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3501.717244][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3501.717244][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3501.717244][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3501.717244][T23880] __do_fast_syscall_32+0x129/0x180 [ 3501.717244][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3501.717244][T23880] do_SYSENTER_32+0x73/0x90 [ 3501.717244][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3501.717244][T23880] [ 3501.717244][T23880] Uninit was stored to memory at: [ 3501.717244][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3501.717244][T23880] __msan_chain_origin+0x57/0xa0 [ 3501.717244][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3501.717244][T23880] get_compat_msghdr+0x108/0x2b0 [ 3501.717244][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3501.717244][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3501.717244][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3501.717244][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3501.717244][T23880] __do_fast_syscall_32+0x129/0x180 [ 3501.717244][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3501.717244][T23880] do_SYSENTER_32+0x73/0x90 [ 3501.717244][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3501.717244][T23880] [ 3501.717244][T23880] Uninit was stored to memory at: [ 3501.717244][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3501.717244][T23880] __msan_chain_origin+0x57/0xa0 [ 3501.717244][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3501.717244][T23880] get_compat_msghdr+0x108/0x2b0 [ 3501.717244][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3501.717244][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3501.717244][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3501.717244][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3501.717244][T23880] __do_fast_syscall_32+0x129/0x180 [ 3501.717244][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3501.717244][T23880] do_SYSENTER_32+0x73/0x90 [ 3501.717244][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3501.717244][T23880] [ 3501.717244][T23880] Uninit was stored to memory at: [ 3501.717244][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3501.717244][T23880] __msan_chain_origin+0x57/0xa0 [ 3501.717244][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3501.717244][T23880] get_compat_msghdr+0x108/0x2b0 [ 3501.717244][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3501.717244][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3501.717244][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3501.717244][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3501.717244][T23880] __do_fast_syscall_32+0x129/0x180 [ 3501.717244][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3501.717244][T23880] do_SYSENTER_32+0x73/0x90 [ 3501.717244][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3501.717244][T23880] [ 3501.717244][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3501.717244][T23880] do_recvmmsg+0xc2/0x22e0 [ 3501.717244][T23880] do_recvmmsg+0xc2/0x22e0 [ 3502.620755][T23882] not chained 3490000 origins [ 3502.624546][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3502.624546][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3502.624546][T23882] Call Trace: [ 3502.624546][T23882] dump_stack+0x21c/0x280 [ 3502.624546][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3502.624546][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3502.624546][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3502.624546][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3502.624546][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3502.624546][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3502.624546][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3502.624546][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3502.624546][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3502.624546][T23882] ? _copy_from_user+0x201/0x310 [ 3502.624546][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3502.624546][T23882] __msan_chain_origin+0x57/0xa0 [ 3502.624546][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3502.624546][T23882] get_compat_msghdr+0x108/0x2b0 [ 3502.624546][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3502.624546][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3502.624546][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3502.624546][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3502.624546][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3502.624546][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3502.624546][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3502.624546][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3502.624546][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3502.624546][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3502.624546][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3502.624546][T23882] __do_fast_syscall_32+0x129/0x180 [ 3502.624546][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3502.624546][T23882] do_SYSENTER_32+0x73/0x90 [ 3502.624546][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3502.624546][T23882] RIP: 0023:0xf7ff3549 [ 3502.624546][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3502.624546][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3502.624546][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3502.624546][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3502.624546][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3502.624546][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3502.624546][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3502.624546][T23882] Uninit was stored to memory at: [ 3502.624546][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3502.624546][T23882] __msan_chain_origin+0x57/0xa0 [ 3502.624546][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3502.624546][T23882] get_compat_msghdr+0x108/0x2b0 [ 3502.624546][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3502.624546][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3502.624546][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3502.624546][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3502.624546][T23882] __do_fast_syscall_32+0x129/0x180 [ 3502.624546][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3502.624546][T23882] do_SYSENTER_32+0x73/0x90 [ 3502.624546][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3502.624546][T23882] [ 3502.624546][T23882] Uninit was stored to memory at: [ 3502.624546][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3502.624546][T23882] __msan_chain_origin+0x57/0xa0 [ 3502.624546][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3502.624546][T23882] get_compat_msghdr+0x108/0x2b0 [ 3502.624546][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3502.624546][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3502.624546][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3502.624546][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3502.624546][T23882] __do_fast_syscall_32+0x129/0x180 [ 3502.624546][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3502.624546][T23882] do_SYSENTER_32+0x73/0x90 [ 3502.624546][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3502.624546][T23882] [ 3502.624546][T23882] Uninit was stored to memory at: [ 3502.624546][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3502.624546][T23882] __msan_chain_origin+0x57/0xa0 [ 3502.624546][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3502.624546][T23882] get_compat_msghdr+0x108/0x2b0 [ 3502.624546][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3502.624546][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3502.624546][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3502.624546][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3502.624546][T23882] __do_fast_syscall_32+0x129/0x180 [ 3502.624546][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3502.624546][T23882] do_SYSENTER_32+0x73/0x90 [ 3502.624546][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3502.624546][T23882] [ 3502.624546][T23882] Uninit was stored to memory at: [ 3502.624546][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3502.624546][T23882] __msan_chain_origin+0x57/0xa0 [ 3502.624546][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3502.624546][T23882] get_compat_msghdr+0x108/0x2b0 [ 3502.624546][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3502.624546][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3502.624546][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3502.624546][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3502.624546][T23882] __do_fast_syscall_32+0x129/0x180 [ 3502.624546][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3502.624546][T23882] do_SYSENTER_32+0x73/0x90 [ 3502.624546][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3502.624546][T23882] [ 3502.624546][T23882] Uninit was stored to memory at: [ 3502.624546][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3502.624546][T23882] __msan_chain_origin+0x57/0xa0 [ 3502.624546][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3502.624546][T23882] get_compat_msghdr+0x108/0x2b0 [ 3502.624546][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3502.624546][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3502.624546][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3502.624546][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3502.624546][T23882] __do_fast_syscall_32+0x129/0x180 [ 3502.624546][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3502.624546][T23882] do_SYSENTER_32+0x73/0x90 [ 3502.624546][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3502.624546][T23882] [ 3502.624546][T23882] Uninit was stored to memory at: [ 3502.624546][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3502.624546][T23882] __msan_chain_origin+0x57/0xa0 [ 3502.624546][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3502.624546][T23882] get_compat_msghdr+0x108/0x2b0 [ 3502.624546][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3502.624546][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3502.624546][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3502.624546][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3502.624546][T23882] __do_fast_syscall_32+0x129/0x180 [ 3502.624546][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3502.624546][T23882] do_SYSENTER_32+0x73/0x90 [ 3502.624546][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3502.624546][T23882] [ 3502.624546][T23882] Uninit was stored to memory at: [ 3502.624546][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3502.624546][T23882] __msan_chain_origin+0x57/0xa0 [ 3502.624546][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3502.624546][T23882] get_compat_msghdr+0x108/0x2b0 [ 3502.624546][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3502.624546][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3502.624546][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3502.624546][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3502.624546][T23882] __do_fast_syscall_32+0x129/0x180 [ 3502.624546][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3502.624546][T23882] do_SYSENTER_32+0x73/0x90 [ 3502.624546][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3502.624546][T23882] [ 3502.624546][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3502.624546][T23882] do_recvmmsg+0xc2/0x22e0 [ 3502.624546][T23882] do_recvmmsg+0xc2/0x22e0 [ 3503.684208][T23882] not chained 3500000 origins [ 3503.684563][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3503.684563][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3503.684563][T23882] Call Trace: [ 3503.684563][T23882] dump_stack+0x21c/0x280 [ 3503.684563][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3503.684563][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3503.684563][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3503.684563][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3503.684563][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3503.684563][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3503.684563][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3503.684563][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3503.684563][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3503.765429][T23882] ? _copy_from_user+0x201/0x310 [ 3503.765429][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3503.765429][T23882] __msan_chain_origin+0x57/0xa0 [ 3503.765429][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3503.765429][T23882] get_compat_msghdr+0x108/0x2b0 [ 3503.765429][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3503.765429][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3503.765429][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3503.765429][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3503.765429][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3503.765429][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3503.765429][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3503.765429][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3503.765429][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3503.765429][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3503.765429][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3503.765429][T23882] __do_fast_syscall_32+0x129/0x180 [ 3503.765429][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3503.765429][T23882] do_SYSENTER_32+0x73/0x90 [ 3503.765429][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3503.765429][T23882] RIP: 0023:0xf7ff3549 [ 3503.765429][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3503.765429][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3503.765429][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3503.765429][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3503.765429][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3503.765429][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3503.765429][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3503.765429][T23882] Uninit was stored to memory at: [ 3503.765429][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3503.765429][T23882] __msan_chain_origin+0x57/0xa0 [ 3503.765429][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3503.765429][T23882] get_compat_msghdr+0x108/0x2b0 [ 3503.765429][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3503.765429][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3503.765429][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3503.765429][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3503.765429][T23882] __do_fast_syscall_32+0x129/0x180 [ 3503.765429][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3503.765429][T23882] do_SYSENTER_32+0x73/0x90 [ 3503.765429][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3503.765429][T23882] [ 3503.765429][T23882] Uninit was stored to memory at: [ 3503.765429][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3503.765429][T23882] __msan_chain_origin+0x57/0xa0 [ 3503.765429][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3503.765429][T23882] get_compat_msghdr+0x108/0x2b0 [ 3503.765429][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3503.765429][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3503.765429][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3503.765429][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3503.765429][T23882] __do_fast_syscall_32+0x129/0x180 [ 3503.765429][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3503.765429][T23882] do_SYSENTER_32+0x73/0x90 [ 3503.765429][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3503.765429][T23882] [ 3503.765429][T23882] Uninit was stored to memory at: [ 3503.765429][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3503.765429][T23882] __msan_chain_origin+0x57/0xa0 [ 3503.765429][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3503.765429][T23882] get_compat_msghdr+0x108/0x2b0 [ 3503.765429][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3503.765429][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3503.765429][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3503.765429][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3503.765429][T23882] __do_fast_syscall_32+0x129/0x180 [ 3503.765429][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3503.765429][T23882] do_SYSENTER_32+0x73/0x90 [ 3503.765429][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3503.765429][T23882] [ 3503.765429][T23882] Uninit was stored to memory at: [ 3503.765429][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3503.765429][T23882] __msan_chain_origin+0x57/0xa0 [ 3503.765429][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3503.765429][T23882] get_compat_msghdr+0x108/0x2b0 [ 3503.765429][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3503.765429][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3503.765429][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3503.765429][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3503.765429][T23882] __do_fast_syscall_32+0x129/0x180 [ 3503.765429][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3503.765429][T23882] do_SYSENTER_32+0x73/0x90 [ 3503.765429][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3503.765429][T23882] [ 3503.765429][T23882] Uninit was stored to memory at: [ 3503.765429][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3503.765429][T23882] __msan_chain_origin+0x57/0xa0 [ 3503.765429][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3503.765429][T23882] get_compat_msghdr+0x108/0x2b0 [ 3503.765429][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3503.765429][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3503.765429][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3503.765429][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3503.765429][T23882] __do_fast_syscall_32+0x129/0x180 [ 3503.765429][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3503.765429][T23882] do_SYSENTER_32+0x73/0x90 [ 3503.765429][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3503.765429][T23882] [ 3503.765429][T23882] Uninit was stored to memory at: [ 3503.765429][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3503.765429][T23882] __msan_chain_origin+0x57/0xa0 [ 3503.765429][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3503.765429][T23882] get_compat_msghdr+0x108/0x2b0 [ 3503.765429][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3503.765429][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3503.765429][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3503.765429][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3503.765429][T23882] __do_fast_syscall_32+0x129/0x180 [ 3503.765429][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3503.765429][T23882] do_SYSENTER_32+0x73/0x90 [ 3503.765429][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3503.765429][T23882] [ 3503.765429][T23882] Uninit was stored to memory at: [ 3503.765429][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3503.765429][T23882] __msan_chain_origin+0x57/0xa0 [ 3503.765429][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3503.765429][T23882] get_compat_msghdr+0x108/0x2b0 [ 3503.765429][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3503.765429][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3503.765429][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3503.765429][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3503.765429][T23882] __do_fast_syscall_32+0x129/0x180 [ 3503.765429][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3503.765429][T23882] do_SYSENTER_32+0x73/0x90 [ 3503.765429][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3503.765429][T23882] [ 3503.765429][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3503.765429][T23882] do_recvmmsg+0xc2/0x22e0 [ 3503.765429][T23882] do_recvmmsg+0xc2/0x22e0 [ 3504.538049][T23880] not chained 3510000 origins [ 3504.542745][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3504.544668][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3504.544668][T23880] Call Trace: [ 3504.544668][T23880] dump_stack+0x21c/0x280 [ 3504.544668][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3504.544668][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3504.544668][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3504.583758][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3504.583758][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3504.583758][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3504.583758][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3504.583758][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3504.583758][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3504.583758][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3504.583758][T23880] ? _copy_from_user+0x201/0x310 [ 3504.583758][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3504.583758][T23880] __msan_chain_origin+0x57/0xa0 [ 3504.583758][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3504.583758][T23880] get_compat_msghdr+0x108/0x2b0 [ 3504.583758][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3504.583758][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3504.583758][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3504.583758][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3504.583758][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3504.583758][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3504.583758][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3504.583758][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3504.583758][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3504.583758][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3504.583758][T23880] __do_fast_syscall_32+0x129/0x180 [ 3504.583758][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3504.583758][T23880] do_SYSENTER_32+0x73/0x90 [ 3504.583758][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3504.583758][T23880] RIP: 0023:0xf7ff3549 [ 3504.583758][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3504.583758][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3504.583758][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3504.583758][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3504.583758][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3504.583758][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3504.583758][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3504.583758][T23880] Uninit was stored to memory at: [ 3504.583758][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3504.583758][T23880] __msan_chain_origin+0x57/0xa0 [ 3504.583758][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3504.583758][T23880] get_compat_msghdr+0x108/0x2b0 [ 3504.583758][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3504.583758][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3504.583758][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3504.583758][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3504.583758][T23880] __do_fast_syscall_32+0x129/0x180 [ 3504.583758][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3504.583758][T23880] do_SYSENTER_32+0x73/0x90 [ 3504.583758][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3504.583758][T23880] [ 3504.583758][T23880] Uninit was stored to memory at: [ 3504.583758][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3504.583758][T23880] __msan_chain_origin+0x57/0xa0 [ 3504.583758][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3504.583758][T23880] get_compat_msghdr+0x108/0x2b0 [ 3504.583758][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3504.583758][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3504.583758][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3504.583758][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3504.583758][T23880] __do_fast_syscall_32+0x129/0x180 [ 3504.583758][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3504.583758][T23880] do_SYSENTER_32+0x73/0x90 [ 3504.583758][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3504.583758][T23880] [ 3504.583758][T23880] Uninit was stored to memory at: [ 3504.583758][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3504.583758][T23880] __msan_chain_origin+0x57/0xa0 [ 3504.583758][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3504.583758][T23880] get_compat_msghdr+0x108/0x2b0 [ 3504.583758][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3504.583758][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3504.583758][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3504.583758][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3504.583758][T23880] __do_fast_syscall_32+0x129/0x180 [ 3504.583758][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3504.583758][T23880] do_SYSENTER_32+0x73/0x90 [ 3504.583758][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3504.583758][T23880] [ 3504.583758][T23880] Uninit was stored to memory at: [ 3504.583758][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3504.583758][T23880] __msan_chain_origin+0x57/0xa0 [ 3504.583758][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3504.583758][T23880] get_compat_msghdr+0x108/0x2b0 [ 3504.583758][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3504.583758][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3504.583758][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3504.583758][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3504.583758][T23880] __do_fast_syscall_32+0x129/0x180 [ 3504.583758][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3504.583758][T23880] do_SYSENTER_32+0x73/0x90 [ 3504.583758][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3504.583758][T23880] [ 3504.583758][T23880] Uninit was stored to memory at: [ 3504.583758][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3504.583758][T23880] __msan_chain_origin+0x57/0xa0 [ 3504.583758][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3504.583758][T23880] get_compat_msghdr+0x108/0x2b0 [ 3504.583758][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3504.583758][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3504.583758][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3504.583758][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3504.583758][T23880] __do_fast_syscall_32+0x129/0x180 [ 3504.583758][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3504.583758][T23880] do_SYSENTER_32+0x73/0x90 [ 3504.583758][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3504.583758][T23880] [ 3504.583758][T23880] Uninit was stored to memory at: [ 3504.583758][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3504.583758][T23880] __msan_chain_origin+0x57/0xa0 [ 3504.583758][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3504.583758][T23880] get_compat_msghdr+0x108/0x2b0 [ 3504.583758][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3504.583758][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3504.583758][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3504.583758][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3504.583758][T23880] __do_fast_syscall_32+0x129/0x180 [ 3504.583758][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3504.583758][T23880] do_SYSENTER_32+0x73/0x90 [ 3504.583758][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3504.583758][T23880] [ 3504.583758][T23880] Uninit was stored to memory at: [ 3504.583758][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3504.583758][T23880] __msan_chain_origin+0x57/0xa0 [ 3504.583758][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3504.583758][T23880] get_compat_msghdr+0x108/0x2b0 [ 3504.583758][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3504.583758][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3504.583758][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3504.583758][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3504.583758][T23880] __do_fast_syscall_32+0x129/0x180 [ 3504.583758][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3504.583758][T23880] do_SYSENTER_32+0x73/0x90 [ 3504.583758][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3504.583758][T23880] [ 3504.583758][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3504.583758][T23880] do_recvmmsg+0xc2/0x22e0 [ 3504.583758][T23880] do_recvmmsg+0xc2/0x22e0 [ 3505.592094][T23880] not chained 3520000 origins [ 3505.594548][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3505.594548][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3505.594548][T23880] Call Trace: [ 3505.594548][T23880] dump_stack+0x21c/0x280 [ 3505.594548][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3505.594548][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3505.594548][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3505.594548][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3505.594548][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3505.594548][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3505.654782][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3505.654782][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3505.654782][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3505.654782][T23880] ? _copy_from_user+0x201/0x310 [ 3505.654782][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3505.654782][T23880] __msan_chain_origin+0x57/0xa0 [ 3505.654782][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3505.654782][T23880] get_compat_msghdr+0x108/0x2b0 [ 3505.654782][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3505.704962][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3505.704962][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3505.704962][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3505.704962][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3505.704962][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3505.704962][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3505.704962][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3505.704962][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3505.704962][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3505.704962][T23880] __do_fast_syscall_32+0x129/0x180 [ 3505.704962][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3505.704962][T23880] do_SYSENTER_32+0x73/0x90 [ 3505.704962][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3505.704962][T23880] RIP: 0023:0xf7ff3549 [ 3505.704962][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3505.704962][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3505.704962][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3505.704962][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3505.704962][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3505.704962][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3505.704962][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3505.704962][T23880] Uninit was stored to memory at: [ 3505.704962][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3505.704962][T23880] __msan_chain_origin+0x57/0xa0 [ 3505.704962][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3505.704962][T23880] get_compat_msghdr+0x108/0x2b0 [ 3505.704962][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3505.704962][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3505.704962][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3505.704962][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3505.704962][T23880] __do_fast_syscall_32+0x129/0x180 [ 3505.704962][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3505.704962][T23880] do_SYSENTER_32+0x73/0x90 [ 3505.704962][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3505.704962][T23880] [ 3505.704962][T23880] Uninit was stored to memory at: [ 3505.704962][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3505.704962][T23880] __msan_chain_origin+0x57/0xa0 [ 3505.704962][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3505.704962][T23880] get_compat_msghdr+0x108/0x2b0 [ 3505.704962][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3505.704962][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3505.704962][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3505.704962][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3505.704962][T23880] __do_fast_syscall_32+0x129/0x180 [ 3505.704962][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3505.704962][T23880] do_SYSENTER_32+0x73/0x90 [ 3505.704962][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3505.704962][T23880] [ 3505.704962][T23880] Uninit was stored to memory at: [ 3505.704962][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3505.704962][T23880] __msan_chain_origin+0x57/0xa0 [ 3505.704962][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3505.704962][T23880] get_compat_msghdr+0x108/0x2b0 [ 3505.704962][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3505.704962][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3505.704962][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3505.704962][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3505.704962][T23880] __do_fast_syscall_32+0x129/0x180 [ 3505.704962][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3505.704962][T23880] do_SYSENTER_32+0x73/0x90 [ 3505.704962][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3505.704962][T23880] [ 3505.704962][T23880] Uninit was stored to memory at: [ 3505.704962][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3505.704962][T23880] __msan_chain_origin+0x57/0xa0 [ 3505.704962][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3505.704962][T23880] get_compat_msghdr+0x108/0x2b0 [ 3505.704962][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3505.704962][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3505.704962][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3505.704962][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3505.704962][T23880] __do_fast_syscall_32+0x129/0x180 [ 3505.704962][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3505.704962][T23880] do_SYSENTER_32+0x73/0x90 [ 3505.704962][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3505.704962][T23880] [ 3505.704962][T23880] Uninit was stored to memory at: [ 3505.704962][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3505.704962][T23880] __msan_chain_origin+0x57/0xa0 [ 3505.704962][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3505.704962][T23880] get_compat_msghdr+0x108/0x2b0 [ 3505.704962][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3505.704962][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3505.704962][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3505.704962][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3505.704962][T23880] __do_fast_syscall_32+0x129/0x180 [ 3505.704962][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3505.704962][T23880] do_SYSENTER_32+0x73/0x90 [ 3505.704962][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3505.704962][T23880] [ 3505.704962][T23880] Uninit was stored to memory at: [ 3505.704962][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3505.704962][T23880] __msan_chain_origin+0x57/0xa0 [ 3505.704962][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3505.704962][T23880] get_compat_msghdr+0x108/0x2b0 [ 3505.704962][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3505.704962][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3505.704962][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3505.704962][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3505.704962][T23880] __do_fast_syscall_32+0x129/0x180 [ 3505.704962][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3505.704962][T23880] do_SYSENTER_32+0x73/0x90 [ 3505.704962][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3505.704962][T23880] [ 3505.704962][T23880] Uninit was stored to memory at: [ 3505.704962][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3505.704962][T23880] __msan_chain_origin+0x57/0xa0 [ 3505.704962][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3505.704962][T23880] get_compat_msghdr+0x108/0x2b0 [ 3505.704962][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3505.704962][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3505.704962][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3505.704962][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3505.704962][T23880] __do_fast_syscall_32+0x129/0x180 [ 3505.704962][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3505.704962][T23880] do_SYSENTER_32+0x73/0x90 [ 3505.704962][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3505.704962][T23880] [ 3505.704962][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3505.704962][T23880] do_recvmmsg+0xc2/0x22e0 [ 3505.704962][T23880] do_recvmmsg+0xc2/0x22e0 [ 3506.519642][T23882] not chained 3530000 origins [ 3506.524346][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3506.530428][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3506.530428][T23882] Call Trace: [ 3506.530428][T23882] dump_stack+0x21c/0x280 [ 3506.530428][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3506.530428][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3506.530428][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3506.530428][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3506.530428][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3506.530428][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3506.530428][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3506.530428][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3506.530428][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3506.530428][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3506.530428][T23882] ? _copy_from_user+0x201/0x310 [ 3506.530428][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3506.530428][T23882] __msan_chain_origin+0x57/0xa0 [ 3506.530428][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3506.530428][T23882] get_compat_msghdr+0x108/0x2b0 [ 3506.530428][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3506.530428][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3506.530428][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3506.530428][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3506.530428][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3506.530428][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3506.530428][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3506.530428][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3506.530428][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3506.530428][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3506.530428][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3506.530428][T23882] __do_fast_syscall_32+0x129/0x180 [ 3506.530428][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3506.530428][T23882] do_SYSENTER_32+0x73/0x90 [ 3506.530428][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3506.530428][T23882] RIP: 0023:0xf7ff3549 [ 3506.530428][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3506.530428][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3506.530428][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3506.530428][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3506.530428][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3506.530428][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3506.530428][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3506.530428][T23882] Uninit was stored to memory at: [ 3506.530428][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3506.530428][T23882] __msan_chain_origin+0x57/0xa0 [ 3506.530428][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3506.530428][T23882] get_compat_msghdr+0x108/0x2b0 [ 3506.530428][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3506.530428][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3506.530428][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3506.530428][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3506.530428][T23882] __do_fast_syscall_32+0x129/0x180 [ 3506.530428][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3506.530428][T23882] do_SYSENTER_32+0x73/0x90 [ 3506.530428][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3506.530428][T23882] [ 3506.530428][T23882] Uninit was stored to memory at: [ 3506.530428][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3506.530428][T23882] __msan_chain_origin+0x57/0xa0 [ 3506.530428][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3506.530428][T23882] get_compat_msghdr+0x108/0x2b0 [ 3506.530428][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3506.530428][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3506.530428][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3506.530428][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3506.530428][T23882] __do_fast_syscall_32+0x129/0x180 [ 3506.530428][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3506.530428][T23882] do_SYSENTER_32+0x73/0x90 [ 3506.530428][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3506.530428][T23882] [ 3506.530428][T23882] Uninit was stored to memory at: [ 3506.530428][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3506.530428][T23882] __msan_chain_origin+0x57/0xa0 [ 3506.530428][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3506.530428][T23882] get_compat_msghdr+0x108/0x2b0 [ 3506.530428][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3506.530428][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3506.530428][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3506.530428][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3506.530428][T23882] __do_fast_syscall_32+0x129/0x180 [ 3506.530428][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3506.530428][T23882] do_SYSENTER_32+0x73/0x90 [ 3506.530428][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3506.530428][T23882] [ 3506.530428][T23882] Uninit was stored to memory at: [ 3506.530428][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3506.530428][T23882] __msan_chain_origin+0x57/0xa0 [ 3506.530428][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3506.530428][T23882] get_compat_msghdr+0x108/0x2b0 [ 3506.530428][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3506.530428][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3506.530428][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3506.530428][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3506.530428][T23882] __do_fast_syscall_32+0x129/0x180 [ 3506.530428][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3506.530428][T23882] do_SYSENTER_32+0x73/0x90 [ 3506.530428][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3506.530428][T23882] [ 3506.530428][T23882] Uninit was stored to memory at: [ 3506.530428][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3506.530428][T23882] __msan_chain_origin+0x57/0xa0 [ 3506.530428][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3506.530428][T23882] get_compat_msghdr+0x108/0x2b0 [ 3506.530428][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3506.530428][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3506.530428][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3506.530428][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3506.530428][T23882] __do_fast_syscall_32+0x129/0x180 [ 3506.530428][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3506.530428][T23882] do_SYSENTER_32+0x73/0x90 [ 3506.530428][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3506.530428][T23882] [ 3506.530428][T23882] Uninit was stored to memory at: [ 3506.530428][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3506.530428][T23882] __msan_chain_origin+0x57/0xa0 [ 3506.530428][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3506.530428][T23882] get_compat_msghdr+0x108/0x2b0 [ 3506.530428][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3506.530428][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3506.530428][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3506.530428][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3506.530428][T23882] __do_fast_syscall_32+0x129/0x180 [ 3506.530428][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3506.530428][T23882] do_SYSENTER_32+0x73/0x90 [ 3506.530428][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3506.530428][T23882] [ 3506.530428][T23882] Uninit was stored to memory at: [ 3506.530428][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3506.530428][T23882] __msan_chain_origin+0x57/0xa0 [ 3506.530428][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3506.530428][T23882] get_compat_msghdr+0x108/0x2b0 [ 3506.530428][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3506.530428][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3506.530428][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3506.530428][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3506.530428][T23882] __do_fast_syscall_32+0x129/0x180 [ 3506.530428][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3506.530428][T23882] do_SYSENTER_32+0x73/0x90 [ 3506.530428][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3506.530428][T23882] [ 3506.530428][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3506.530428][T23882] do_recvmmsg+0xc2/0x22e0 [ 3506.530428][T23882] do_recvmmsg+0xc2/0x22e0 [ 3507.672974][T23880] not chained 3540000 origins [ 3507.674560][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3507.674560][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3507.674560][T23880] Call Trace: [ 3507.674560][T23880] dump_stack+0x21c/0x280 [ 3507.674560][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3507.674560][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3507.674560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3507.674560][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3507.674560][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3507.674560][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3507.674560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3507.674560][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3507.674560][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3507.674560][T23880] ? _copy_from_user+0x201/0x310 [ 3507.758927][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3507.758927][T23880] __msan_chain_origin+0x57/0xa0 [ 3507.758927][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3507.758927][T23880] get_compat_msghdr+0x108/0x2b0 [ 3507.758927][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3507.758927][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3507.758927][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3507.758927][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3507.758927][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3507.758927][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3507.758927][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3507.758927][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3507.758927][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.758927][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.758927][T23880] __do_fast_syscall_32+0x129/0x180 [ 3507.758927][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3507.758927][T23880] do_SYSENTER_32+0x73/0x90 [ 3507.758927][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.758927][T23880] RIP: 0023:0xf7ff3549 [ 3507.758927][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3507.758927][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3507.758927][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3507.758927][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3507.758927][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3507.758927][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3507.913976][T23882] not chained 3550000 origins [ 3507.758927][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3507.758927][T23880] Uninit was stored to memory at: [ 3507.914528][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3507.914528][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3507.758927][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3507.914528][T23882] Call Trace: [ 3507.758927][T23880] __msan_chain_origin+0x57/0xa0 [ 3507.914528][T23882] dump_stack+0x21c/0x280 [ 3507.758927][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3507.914528][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3507.758927][T23880] get_compat_msghdr+0x108/0x2b0 [ 3507.914528][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3507.758927][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3507.914528][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3507.758927][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3507.914528][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3507.758927][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.914528][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3507.758927][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.914528][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3507.758927][T23880] __do_fast_syscall_32+0x129/0x180 [ 3507.914528][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3507.758927][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3507.914528][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3507.758927][T23880] do_SYSENTER_32+0x73/0x90 [ 3507.914528][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3507.758927][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.914528][T23882] ? _copy_from_user+0x201/0x310 [ 3507.758927][T23880] [ 3507.914528][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3507.758927][T23880] Uninit was stored to memory at: [ 3507.914528][T23882] __msan_chain_origin+0x57/0xa0 [ 3507.758927][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3507.914528][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3507.758927][T23880] __msan_chain_origin+0x57/0xa0 [ 3507.914528][T23882] get_compat_msghdr+0x108/0x2b0 [ 3507.758927][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3507.914528][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3507.758927][T23880] get_compat_msghdr+0x108/0x2b0 [ 3507.914528][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3507.758927][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3507.914528][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3507.758927][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3507.914528][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3507.758927][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.914528][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3507.758927][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.914528][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3507.758927][T23880] __do_fast_syscall_32+0x129/0x180 [ 3507.914528][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3507.758927][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3507.914528][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3507.758927][T23880] do_SYSENTER_32+0x73/0x90 [ 3507.914528][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3507.758927][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.914528][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.758927][T23880] [ 3507.914528][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.758927][T23880] Uninit was stored to memory at: [ 3507.914528][T23882] __do_fast_syscall_32+0x129/0x180 [ 3507.758927][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3507.914528][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3507.758927][T23880] __msan_chain_origin+0x57/0xa0 [ 3507.914528][T23882] do_SYSENTER_32+0x73/0x90 [ 3507.758927][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3507.914528][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.758927][T23880] get_compat_msghdr+0x108/0x2b0 [ 3507.914528][T23882] RIP: 0023:0xf7ff3549 [ 3507.758927][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3507.914528][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3507.758927][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3507.914528][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3507.758927][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.914528][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3507.758927][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.914528][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3507.758927][T23880] __do_fast_syscall_32+0x129/0x180 [ 3507.914528][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3507.758927][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3507.914528][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3507.758927][T23880] do_SYSENTER_32+0x73/0x90 [ 3507.914528][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3507.758927][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.914528][T23882] Uninit was stored to memory at: [ 3507.758927][T23880] [ 3507.914528][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3507.758927][T23880] Uninit was stored to memory at: [ 3507.914528][T23882] __msan_chain_origin+0x57/0xa0 [ 3507.758927][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3507.914528][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3507.758927][T23880] __msan_chain_origin+0x57/0xa0 [ 3507.914528][T23882] get_compat_msghdr+0x108/0x2b0 [ 3507.758927][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3507.914528][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3507.758927][T23880] get_compat_msghdr+0x108/0x2b0 [ 3507.914528][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3507.758927][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3507.914528][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.758927][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3507.914528][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.758927][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.914528][T23882] __do_fast_syscall_32+0x129/0x180 [ 3507.758927][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.914528][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3507.758927][T23880] __do_fast_syscall_32+0x129/0x180 [ 3507.914528][T23882] do_SYSENTER_32+0x73/0x90 [ 3507.758927][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3507.914528][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.758927][T23880] do_SYSENTER_32+0x73/0x90 [ 3507.914528][T23882] [ 3507.758927][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.914528][T23882] Uninit was stored to memory at: [ 3507.758927][T23880] [ 3507.914528][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3507.758927][T23880] Uninit was stored to memory at: [ 3507.914528][T23882] __msan_chain_origin+0x57/0xa0 [ 3507.758927][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3507.914528][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3507.758927][T23880] __msan_chain_origin+0x57/0xa0 [ 3507.914528][T23882] get_compat_msghdr+0x108/0x2b0 [ 3507.758927][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3507.914528][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3507.758927][T23880] get_compat_msghdr+0x108/0x2b0 [ 3507.914528][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3507.758927][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3507.914528][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.758927][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3507.914528][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.758927][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.914528][T23882] __do_fast_syscall_32+0x129/0x180 [ 3507.758927][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.914528][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3507.758927][T23880] __do_fast_syscall_32+0x129/0x180 [ 3507.914528][T23882] do_SYSENTER_32+0x73/0x90 [ 3507.758927][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3507.914528][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.758927][T23880] do_SYSENTER_32+0x73/0x90 [ 3507.914528][T23882] [ 3507.758927][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.914528][T23882] Uninit was stored to memory at: [ 3507.758927][T23880] [ 3507.914528][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3507.758927][T23880] Uninit was stored to memory at: [ 3507.914528][T23882] __msan_chain_origin+0x57/0xa0 [ 3507.758927][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3507.914528][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3507.758927][T23880] __msan_chain_origin+0x57/0xa0 [ 3507.914528][T23882] get_compat_msghdr+0x108/0x2b0 [ 3507.758927][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3507.914528][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3507.758927][T23880] get_compat_msghdr+0x108/0x2b0 [ 3507.914528][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3507.758927][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3507.914528][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.758927][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3507.914528][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.758927][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.914528][T23882] __do_fast_syscall_32+0x129/0x180 [ 3507.758927][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.914528][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3507.758927][T23880] __do_fast_syscall_32+0x129/0x180 [ 3507.914528][T23882] do_SYSENTER_32+0x73/0x90 [ 3507.758927][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3507.914528][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.758927][T23880] do_SYSENTER_32+0x73/0x90 [ 3507.914528][T23882] [ 3507.758927][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.914528][T23882] Uninit was stored to memory at: [ 3507.758927][T23880] [ 3507.914528][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3507.758927][T23880] Uninit was stored to memory at: [ 3507.914528][T23882] __msan_chain_origin+0x57/0xa0 [ 3507.758927][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3507.914528][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3507.758927][T23880] __msan_chain_origin+0x57/0xa0 [ 3507.914528][T23882] get_compat_msghdr+0x108/0x2b0 [ 3507.758927][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3507.914528][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3507.758927][T23880] get_compat_msghdr+0x108/0x2b0 [ 3507.914528][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3507.758927][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3507.914528][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.758927][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3507.914528][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.758927][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3507.914528][T23882] __do_fast_syscall_32+0x129/0x180 [ 3507.758927][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3507.914528][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3507.758927][T23880] __do_fast_syscall_32+0x129/0x180 [ 3507.914528][T23882] do_SYSENTER_32+0x73/0x90 [ 3507.758927][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3507.914528][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.758927][T23880] do_SYSENTER_32+0x73/0x90 [ 3507.914528][T23882] [ 3507.758927][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3507.914528][T23882] Uninit was stored to memory at: [ 3507.758927][T23880] [ 3507.914528][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3507.758927][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3507.914528][T23882] __msan_chain_origin+0x57/0xa0 [ 3507.758927][T23880] do_recvmmsg+0xc2/0x22e0 [ 3507.914528][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3507.758927][T23880] do_recvmmsg+0xc2/0x22e0 [ 3507.914528][T23882] get_compat_msghdr+0x108/0x2b0 [ 3508.995402][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3508.995402][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3508.995402][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.015054][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.015054][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.015054][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.030455][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.030455][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.030455][T23882] [ 3509.030455][T23882] Uninit was stored to memory at: [ 3509.030455][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3509.030455][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.030455][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.030455][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.030455][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.030455][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.030455][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.030455][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.030455][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.030455][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.030455][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.030455][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.030455][T23882] [ 3509.030455][T23882] Uninit was stored to memory at: [ 3509.030455][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3509.030455][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.030455][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.030455][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.030455][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.030455][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.030455][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.030455][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.030455][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.030455][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.030455][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.030455][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.030455][T23882] [ 3509.030455][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3509.030455][T23882] do_recvmmsg+0xc2/0x22e0 [ 3509.030455][T23882] do_recvmmsg+0xc2/0x22e0 [ 3509.473916][T23882] not chained 3560000 origins [ 3509.474545][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3509.474545][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3509.474545][T23882] Call Trace: [ 3509.474545][T23882] dump_stack+0x21c/0x280 [ 3509.474545][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3509.474545][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3509.474545][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3509.474545][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3509.474545][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3509.474545][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3509.534764][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3509.534764][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3509.544686][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3509.544686][T23882] ? _copy_from_user+0x201/0x310 [ 3509.544686][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3509.544686][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.544686][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.544686][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.544686][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.544686][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3509.544686][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3509.544686][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3509.544686][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3509.544686][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3509.544686][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.544686][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3509.544686][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3509.544686][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.544686][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.544686][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.544686][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.544686][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.544686][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.544686][T23882] RIP: 0023:0xf7ff3549 [ 3509.544686][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3509.544686][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3509.544686][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3509.544686][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3509.706199][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3509.706199][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3509.706199][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3509.706199][T23882] Uninit was stored to memory at: [ 3509.706199][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3509.706199][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.706199][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.706199][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.706199][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.706199][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.706199][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.706199][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.706199][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.706199][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.706199][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.706199][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.706199][T23882] [ 3509.706199][T23882] Uninit was stored to memory at: [ 3509.706199][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3509.706199][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.706199][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.706199][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.706199][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.706199][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.706199][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.706199][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.706199][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.706199][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.706199][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.706199][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.706199][T23882] [ 3509.706199][T23882] Uninit was stored to memory at: [ 3509.706199][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3509.706199][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.706199][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.706199][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.706199][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.706199][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.706199][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.706199][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.706199][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.706199][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.706199][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.706199][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.706199][T23882] [ 3509.706199][T23882] Uninit was stored to memory at: [ 3509.706199][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3509.706199][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.706199][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.706199][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.706199][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.706199][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.706199][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.706199][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.706199][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.706199][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.706199][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.706199][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.706199][T23882] [ 3509.706199][T23882] Uninit was stored to memory at: [ 3509.706199][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3509.706199][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.706199][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.706199][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.706199][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.706199][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.706199][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.706199][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.706199][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.706199][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.706199][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.706199][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.706199][T23882] [ 3509.706199][T23882] Uninit was stored to memory at: [ 3509.706199][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3509.706199][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.706199][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.706199][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.706199][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.706199][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.706199][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.706199][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.706199][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.706199][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3509.706199][T23882] do_SYSENTER_32+0x73/0x90 [ 3509.706199][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3509.706199][T23882] [ 3509.706199][T23882] Uninit was stored to memory at: [ 3509.706199][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3509.706199][T23882] __msan_chain_origin+0x57/0xa0 [ 3509.706199][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3509.706199][T23882] get_compat_msghdr+0x108/0x2b0 [ 3509.706199][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3509.706199][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3509.706199][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3509.706199][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3509.706199][T23882] __do_fast_syscall_32+0x129/0x180 [ 3509.706199][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3510.216531][T23882] do_SYSENTER_32+0x73/0x90 [ 3510.216531][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3510.216531][T23882] [ 3510.216531][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3510.216531][T23882] do_recvmmsg+0xc2/0x22e0 [ 3510.216531][T23882] do_recvmmsg+0xc2/0x22e0 [ 3510.470856][T23882] not chained 3570000 origins [ 3510.474673][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3510.474673][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3510.474673][T23882] Call Trace: [ 3510.474673][T23882] dump_stack+0x21c/0x280 [ 3510.474673][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3510.474673][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3510.474673][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3510.474673][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3510.474673][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3510.474673][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3510.474673][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3510.474673][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3510.474673][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3510.474673][T23882] ? _copy_from_user+0x201/0x310 [ 3510.474673][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3510.474673][T23882] __msan_chain_origin+0x57/0xa0 [ 3510.474673][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3510.474673][T23882] get_compat_msghdr+0x108/0x2b0 [ 3510.474673][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3510.474673][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3510.584689][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3510.584689][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3510.584689][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3510.604729][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3510.604729][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3510.604729][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3510.604729][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3510.604729][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3510.604729][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3510.604729][T23882] __do_fast_syscall_32+0x129/0x180 [ 3510.604729][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3510.604729][T23882] do_SYSENTER_32+0x73/0x90 [ 3510.604729][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3510.604729][T23882] RIP: 0023:0xf7ff3549 [ 3510.604729][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3510.604729][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3510.604729][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3510.604729][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3510.604729][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3510.604729][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3510.604729][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3510.604729][T23882] Uninit was stored to memory at: [ 3510.604729][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3510.604729][T23882] __msan_chain_origin+0x57/0xa0 [ 3510.604729][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3510.604729][T23882] get_compat_msghdr+0x108/0x2b0 [ 3510.604729][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3510.604729][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3510.604729][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3510.604729][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3510.604729][T23882] __do_fast_syscall_32+0x129/0x180 [ 3510.604729][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3510.604729][T23882] do_SYSENTER_32+0x73/0x90 [ 3510.604729][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3510.604729][T23882] [ 3510.604729][T23882] Uninit was stored to memory at: [ 3510.604729][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3510.604729][T23882] __msan_chain_origin+0x57/0xa0 [ 3510.604729][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3510.604729][T23882] get_compat_msghdr+0x108/0x2b0 [ 3510.604729][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3510.604729][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3510.604729][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3510.604729][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3510.604729][T23882] __do_fast_syscall_32+0x129/0x180 [ 3510.604729][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3510.604729][T23882] do_SYSENTER_32+0x73/0x90 [ 3510.604729][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3510.604729][T23882] [ 3510.604729][T23882] Uninit was stored to memory at: [ 3510.604729][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3510.604729][T23882] __msan_chain_origin+0x57/0xa0 [ 3510.604729][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3510.604729][T23882] get_compat_msghdr+0x108/0x2b0 [ 3510.604729][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3510.604729][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3510.604729][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3510.604729][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3510.604729][T23882] __do_fast_syscall_32+0x129/0x180 [ 3510.604729][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3510.604729][T23882] do_SYSENTER_32+0x73/0x90 [ 3510.604729][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3510.604729][T23882] [ 3510.604729][T23882] Uninit was stored to memory at: [ 3510.604729][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3510.604729][T23882] __msan_chain_origin+0x57/0xa0 [ 3510.604729][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3510.604729][T23882] get_compat_msghdr+0x108/0x2b0 [ 3510.604729][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3510.604729][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3510.604729][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3510.604729][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3510.604729][T23882] __do_fast_syscall_32+0x129/0x180 [ 3510.604729][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3510.604729][T23882] do_SYSENTER_32+0x73/0x90 [ 3510.604729][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3510.604729][T23882] [ 3510.604729][T23882] Uninit was stored to memory at: [ 3510.604729][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3510.604729][T23882] __msan_chain_origin+0x57/0xa0 [ 3510.604729][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3510.604729][T23882] get_compat_msghdr+0x108/0x2b0 [ 3510.604729][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3510.604729][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3510.604729][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3510.604729][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3510.604729][T23882] __do_fast_syscall_32+0x129/0x180 [ 3510.604729][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3510.604729][T23882] do_SYSENTER_32+0x73/0x90 [ 3510.604729][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3510.604729][T23882] [ 3510.604729][T23882] Uninit was stored to memory at: [ 3510.604729][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3510.604729][T23882] __msan_chain_origin+0x57/0xa0 [ 3510.604729][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3510.604729][T23882] get_compat_msghdr+0x108/0x2b0 [ 3510.604729][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3510.604729][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3510.604729][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3510.604729][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3510.604729][T23882] __do_fast_syscall_32+0x129/0x180 [ 3510.604729][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3510.604729][T23882] do_SYSENTER_32+0x73/0x90 [ 3510.604729][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3510.604729][T23882] [ 3510.604729][T23882] Uninit was stored to memory at: [ 3510.604729][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3510.604729][T23882] __msan_chain_origin+0x57/0xa0 [ 3510.604729][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3510.604729][T23882] get_compat_msghdr+0x108/0x2b0 [ 3510.604729][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3510.604729][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3510.604729][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3510.604729][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3510.604729][T23882] __do_fast_syscall_32+0x129/0x180 [ 3510.604729][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3510.604729][T23882] do_SYSENTER_32+0x73/0x90 [ 3510.604729][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3510.604729][T23882] [ 3510.604729][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3510.604729][T23882] do_recvmmsg+0xc2/0x22e0 [ 3510.604729][T23882] do_recvmmsg+0xc2/0x22e0 [ 3511.356131][T23882] not chained 3580000 origins [ 3511.360838][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3511.364728][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3511.364728][T23882] Call Trace: [ 3511.364728][T23882] dump_stack+0x21c/0x280 [ 3511.364728][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3511.364728][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3511.364728][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3511.364728][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3511.364728][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3511.364728][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3511.364728][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3511.364728][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3511.364728][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3511.364728][T23882] ? _copy_from_user+0x201/0x310 [ 3511.364728][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3511.444664][T23882] __msan_chain_origin+0x57/0xa0 [ 3511.444664][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3511.444664][T23882] get_compat_msghdr+0x108/0x2b0 [ 3511.444664][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3511.444664][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3511.444664][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3511.444664][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3511.444664][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3511.444664][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3511.444664][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3511.444664][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3511.444664][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3511.444664][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3511.444664][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3511.444664][T23882] __do_fast_syscall_32+0x129/0x180 [ 3511.444664][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3511.444664][T23882] do_SYSENTER_32+0x73/0x90 [ 3511.444664][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3511.444664][T23882] RIP: 0023:0xf7ff3549 [ 3511.444664][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3511.444664][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3511.444664][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3511.444664][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3511.444664][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3511.444664][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3511.444664][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3511.444664][T23882] Uninit was stored to memory at: [ 3511.444664][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3511.444664][T23882] __msan_chain_origin+0x57/0xa0 [ 3511.444664][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3511.444664][T23882] get_compat_msghdr+0x108/0x2b0 [ 3511.444664][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3511.444664][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3511.444664][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3511.444664][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3511.444664][T23882] __do_fast_syscall_32+0x129/0x180 [ 3511.444664][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3511.444664][T23882] do_SYSENTER_32+0x73/0x90 [ 3511.444664][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3511.444664][T23882] [ 3511.444664][T23882] Uninit was stored to memory at: [ 3511.444664][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3511.444664][T23882] __msan_chain_origin+0x57/0xa0 [ 3511.444664][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3511.704764][T23882] get_compat_msghdr+0x108/0x2b0 [ 3511.704764][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3511.704764][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3511.704764][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3511.704764][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3511.704764][T23882] __do_fast_syscall_32+0x129/0x180 [ 3511.704764][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3511.704764][T23882] do_SYSENTER_32+0x73/0x90 [ 3511.704764][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3511.704764][T23882] [ 3511.704764][T23882] Uninit was stored to memory at: [ 3511.704764][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3511.704764][T23882] __msan_chain_origin+0x57/0xa0 [ 3511.704764][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3511.704764][T23882] get_compat_msghdr+0x108/0x2b0 [ 3511.704764][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3511.704764][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3511.704764][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3511.704764][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3511.704764][T23882] __do_fast_syscall_32+0x129/0x180 [ 3511.704764][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3511.704764][T23882] do_SYSENTER_32+0x73/0x90 [ 3511.704764][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3511.704764][T23882] [ 3511.704764][T23882] Uninit was stored to memory at: [ 3511.704764][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3511.704764][T23882] __msan_chain_origin+0x57/0xa0 [ 3511.704764][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3511.704764][T23882] get_compat_msghdr+0x108/0x2b0 [ 3511.704764][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3511.704764][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3511.704764][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3511.704764][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3511.704764][T23882] __do_fast_syscall_32+0x129/0x180 [ 3511.704764][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3511.704764][T23882] do_SYSENTER_32+0x73/0x90 [ 3511.704764][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3511.704764][T23882] [ 3511.704764][T23882] Uninit was stored to memory at: [ 3511.704764][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3511.704764][T23882] __msan_chain_origin+0x57/0xa0 [ 3511.704764][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3511.704764][T23882] get_compat_msghdr+0x108/0x2b0 [ 3511.704764][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3511.704764][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3511.704764][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3511.704764][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3511.704764][T23882] __do_fast_syscall_32+0x129/0x180 [ 3511.704764][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3511.704764][T23882] do_SYSENTER_32+0x73/0x90 [ 3511.704764][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3511.704764][T23882] [ 3511.704764][T23882] Uninit was stored to memory at: [ 3511.704764][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3511.704764][T23882] __msan_chain_origin+0x57/0xa0 [ 3511.704764][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3511.704764][T23882] get_compat_msghdr+0x108/0x2b0 [ 3511.704764][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3511.704764][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3511.704764][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3511.704764][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3511.704764][T23882] __do_fast_syscall_32+0x129/0x180 [ 3511.704764][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3511.704764][T23882] do_SYSENTER_32+0x73/0x90 [ 3511.704764][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3511.704764][T23882] [ 3511.704764][T23882] Uninit was stored to memory at: [ 3511.704764][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3511.704764][T23882] __msan_chain_origin+0x57/0xa0 [ 3511.704764][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3511.704764][T23882] get_compat_msghdr+0x108/0x2b0 [ 3511.704764][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3511.704764][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3511.704764][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3511.704764][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3511.704764][T23882] __do_fast_syscall_32+0x129/0x180 [ 3511.704764][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3511.704764][T23882] do_SYSENTER_32+0x73/0x90 [ 3511.704764][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3511.704764][T23882] [ 3511.704764][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3511.704764][T23882] do_recvmmsg+0xc2/0x22e0 [ 3511.704764][T23882] do_recvmmsg+0xc2/0x22e0 [ 3512.283585][T23882] not chained 3590000 origins [ 3512.284553][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3512.284553][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3512.284553][T23882] Call Trace: [ 3512.284553][T23882] dump_stack+0x21c/0x280 [ 3512.284553][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3512.284553][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3512.284553][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3512.284553][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3512.284553][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3512.284553][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3512.284553][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3512.284553][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3512.284553][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3512.284553][T23882] ? _copy_from_user+0x201/0x310 [ 3512.367459][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3512.367459][T23882] __msan_chain_origin+0x57/0xa0 [ 3512.367459][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3512.367459][T23882] get_compat_msghdr+0x108/0x2b0 [ 3512.367459][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3512.367459][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3512.367459][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3512.367459][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3512.367459][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3512.367459][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3512.367459][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3512.367459][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3512.367459][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3512.367459][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3512.367459][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3512.367459][T23882] __do_fast_syscall_32+0x129/0x180 [ 3512.367459][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3512.367459][T23882] do_SYSENTER_32+0x73/0x90 [ 3512.367459][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3512.367459][T23882] RIP: 0023:0xf7ff3549 [ 3512.367459][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3512.367459][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3512.367459][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3512.367459][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3512.367459][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3512.367459][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3512.367459][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3512.367459][T23882] Uninit was stored to memory at: [ 3512.367459][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3512.367459][T23882] __msan_chain_origin+0x57/0xa0 [ 3512.367459][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3512.367459][T23882] get_compat_msghdr+0x108/0x2b0 [ 3512.367459][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3512.367459][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3512.367459][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3512.367459][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3512.367459][T23882] __do_fast_syscall_32+0x129/0x180 [ 3512.367459][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3512.367459][T23882] do_SYSENTER_32+0x73/0x90 [ 3512.367459][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3512.367459][T23882] [ 3512.367459][T23882] Uninit was stored to memory at: [ 3512.367459][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3512.367459][T23882] __msan_chain_origin+0x57/0xa0 [ 3512.367459][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3512.367459][T23882] get_compat_msghdr+0x108/0x2b0 [ 3512.367459][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3512.367459][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3512.367459][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3512.367459][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3512.367459][T23882] __do_fast_syscall_32+0x129/0x180 [ 3512.367459][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3512.367459][T23882] do_SYSENTER_32+0x73/0x90 [ 3512.367459][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3512.367459][T23882] [ 3512.367459][T23882] Uninit was stored to memory at: [ 3512.367459][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3512.367459][T23882] __msan_chain_origin+0x57/0xa0 [ 3512.367459][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3512.367459][T23882] get_compat_msghdr+0x108/0x2b0 [ 3512.367459][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3512.367459][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3512.367459][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3512.367459][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3512.367459][T23882] __do_fast_syscall_32+0x129/0x180 [ 3512.367459][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3512.367459][T23882] do_SYSENTER_32+0x73/0x90 [ 3512.367459][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3512.367459][T23882] [ 3512.367459][T23882] Uninit was stored to memory at: [ 3512.367459][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3512.367459][T23882] __msan_chain_origin+0x57/0xa0 [ 3512.367459][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3512.367459][T23882] get_compat_msghdr+0x108/0x2b0 [ 3512.367459][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3512.367459][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3512.367459][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3512.367459][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3512.367459][T23882] __do_fast_syscall_32+0x129/0x180 [ 3512.367459][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3512.367459][T23882] do_SYSENTER_32+0x73/0x90 [ 3512.367459][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3512.367459][T23882] [ 3512.367459][T23882] Uninit was stored to memory at: [ 3512.367459][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3512.367459][T23882] __msan_chain_origin+0x57/0xa0 [ 3512.367459][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3512.367459][T23882] get_compat_msghdr+0x108/0x2b0 [ 3512.367459][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3512.367459][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3512.367459][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3512.367459][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3512.367459][T23882] __do_fast_syscall_32+0x129/0x180 [ 3512.367459][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3512.367459][T23882] do_SYSENTER_32+0x73/0x90 [ 3512.367459][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3512.367459][T23882] [ 3512.367459][T23882] Uninit was stored to memory at: [ 3512.367459][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3512.367459][T23882] __msan_chain_origin+0x57/0xa0 [ 3512.367459][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3512.367459][T23882] get_compat_msghdr+0x108/0x2b0 [ 3512.367459][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3512.367459][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3512.367459][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3512.367459][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3512.367459][T23882] __do_fast_syscall_32+0x129/0x180 [ 3512.367459][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3512.367459][T23882] do_SYSENTER_32+0x73/0x90 [ 3512.367459][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3512.367459][T23882] [ 3512.367459][T23882] Uninit was stored to memory at: [ 3512.367459][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3512.367459][T23882] __msan_chain_origin+0x57/0xa0 [ 3512.367459][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3512.367459][T23882] get_compat_msghdr+0x108/0x2b0 [ 3512.367459][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3512.367459][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3512.367459][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3512.367459][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3512.367459][T23882] __do_fast_syscall_32+0x129/0x180 [ 3512.367459][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3512.367459][T23882] do_SYSENTER_32+0x73/0x90 [ 3512.367459][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3512.367459][T23882] [ 3512.367459][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3512.367459][T23882] do_recvmmsg+0xc2/0x22e0 [ 3512.367459][T23882] do_recvmmsg+0xc2/0x22e0 [ 3513.352817][T23880] not chained 3600000 origins [ 3513.354556][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3513.354556][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3513.354556][T23880] Call Trace: [ 3513.354556][T23880] dump_stack+0x21c/0x280 [ 3513.354556][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3513.354556][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3513.354556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3513.354556][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3513.354556][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3513.354556][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3513.354556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3513.354556][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3513.354556][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3513.354556][T23880] ? _copy_from_user+0x201/0x310 [ 3513.354556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3513.354556][T23880] __msan_chain_origin+0x57/0xa0 [ 3513.354556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3513.354556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3513.354556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3513.354556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3513.354556][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3513.354556][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3513.354556][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3513.354556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3513.354556][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3513.354556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3513.354556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3513.354556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3513.354556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3513.354556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3513.354556][T23880] do_SYSENTER_32+0x73/0x90 [ 3513.354556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3513.354556][T23880] RIP: 0023:0xf7ff3549 [ 3513.354556][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3513.354556][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3513.354556][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3513.354556][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3513.354556][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3513.354556][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3513.354556][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3513.354556][T23880] Uninit was stored to memory at: [ 3513.354556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3513.354556][T23880] __msan_chain_origin+0x57/0xa0 [ 3513.354556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3513.354556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3513.354556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3513.354556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3513.354556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3513.354556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3513.354556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3513.354556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3513.354556][T23880] do_SYSENTER_32+0x73/0x90 [ 3513.354556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3513.354556][T23880] [ 3513.354556][T23880] Uninit was stored to memory at: [ 3513.354556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3513.354556][T23880] __msan_chain_origin+0x57/0xa0 [ 3513.354556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3513.354556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3513.354556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3513.354556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3513.354556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3513.354556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3513.354556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3513.354556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3513.354556][T23880] do_SYSENTER_32+0x73/0x90 [ 3513.354556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3513.354556][T23880] [ 3513.354556][T23880] Uninit was stored to memory at: [ 3513.354556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3513.354556][T23880] __msan_chain_origin+0x57/0xa0 [ 3513.354556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3513.354556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3513.354556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3513.354556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3513.354556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3513.354556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3513.354556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3513.354556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3513.354556][T23880] do_SYSENTER_32+0x73/0x90 [ 3513.354556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3513.354556][T23880] [ 3513.354556][T23880] Uninit was stored to memory at: [ 3513.354556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3513.354556][T23880] __msan_chain_origin+0x57/0xa0 [ 3513.354556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3513.354556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3513.354556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3513.354556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3513.354556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3513.354556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3513.354556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3513.354556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3513.354556][T23880] do_SYSENTER_32+0x73/0x90 [ 3513.354556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3513.354556][T23880] [ 3513.354556][T23880] Uninit was stored to memory at: [ 3513.354556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3513.354556][T23880] __msan_chain_origin+0x57/0xa0 [ 3513.354556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3513.354556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3513.354556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3513.354556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3513.354556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3513.354556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3513.354556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3513.354556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3513.354556][T23880] do_SYSENTER_32+0x73/0x90 [ 3513.354556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3513.354556][T23880] [ 3513.354556][T23880] Uninit was stored to memory at: [ 3513.354556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3513.354556][T23880] __msan_chain_origin+0x57/0xa0 [ 3513.354556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3513.354556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3513.354556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3513.354556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3513.354556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3513.354556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3513.354556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3513.354556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3513.354556][T23880] do_SYSENTER_32+0x73/0x90 [ 3513.354556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3513.354556][T23880] [ 3513.354556][T23880] Uninit was stored to memory at: [ 3513.354556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3513.354556][T23880] __msan_chain_origin+0x57/0xa0 [ 3513.354556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3513.354556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3513.354556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3513.354556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3513.354556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3513.354556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3513.354556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3513.354556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3513.354556][T23880] do_SYSENTER_32+0x73/0x90 [ 3513.354556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3513.354556][T23880] [ 3513.354556][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3513.354556][T23880] do_recvmmsg+0xc2/0x22e0 [ 3513.354556][T23880] do_recvmmsg+0xc2/0x22e0 [ 3514.197910][T23880] not chained 3610000 origins [ 3514.202611][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3514.209881][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3514.209881][T23880] Call Trace: [ 3514.209881][T23880] dump_stack+0x21c/0x280 [ 3514.209881][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3514.209881][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3514.209881][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3514.209881][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3514.209881][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3514.209881][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3514.209881][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3514.209881][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3514.209881][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3514.209881][T23880] ? _copy_from_user+0x201/0x310 [ 3514.209881][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3514.209881][T23880] __msan_chain_origin+0x57/0xa0 [ 3514.209881][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3514.209881][T23880] get_compat_msghdr+0x108/0x2b0 [ 3514.209881][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3514.209881][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3514.209881][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3514.209881][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3514.209881][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3514.209881][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3514.209881][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3514.209881][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3514.209881][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3514.209881][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3514.209881][T23880] __do_fast_syscall_32+0x129/0x180 [ 3514.209881][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3514.209881][T23880] do_SYSENTER_32+0x73/0x90 [ 3514.209881][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3514.209881][T23880] RIP: 0023:0xf7ff3549 [ 3514.209881][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3514.209881][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3514.209881][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3514.209881][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3514.209881][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3514.209881][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3514.209881][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3514.209881][T23880] Uninit was stored to memory at: [ 3514.209881][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3514.209881][T23880] __msan_chain_origin+0x57/0xa0 [ 3514.209881][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3514.209881][T23880] get_compat_msghdr+0x108/0x2b0 [ 3514.209881][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3514.209881][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3514.209881][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3514.209881][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3514.209881][T23880] __do_fast_syscall_32+0x129/0x180 [ 3514.209881][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3514.209881][T23880] do_SYSENTER_32+0x73/0x90 [ 3514.209881][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3514.209881][T23880] [ 3514.209881][T23880] Uninit was stored to memory at: [ 3514.209881][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3514.209881][T23880] __msan_chain_origin+0x57/0xa0 [ 3514.209881][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3514.209881][T23880] get_compat_msghdr+0x108/0x2b0 [ 3514.209881][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3514.209881][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3514.209881][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3514.209881][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3514.209881][T23880] __do_fast_syscall_32+0x129/0x180 [ 3514.209881][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3514.209881][T23880] do_SYSENTER_32+0x73/0x90 [ 3514.209881][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3514.209881][T23880] [ 3514.209881][T23880] Uninit was stored to memory at: [ 3514.209881][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3514.209881][T23880] __msan_chain_origin+0x57/0xa0 [ 3514.209881][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3514.209881][T23880] get_compat_msghdr+0x108/0x2b0 [ 3514.209881][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3514.209881][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3514.209881][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3514.209881][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3514.209881][T23880] __do_fast_syscall_32+0x129/0x180 [ 3514.209881][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3514.209881][T23880] do_SYSENTER_32+0x73/0x90 [ 3514.209881][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3514.209881][T23880] [ 3514.209881][T23880] Uninit was stored to memory at: [ 3514.209881][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3514.209881][T23880] __msan_chain_origin+0x57/0xa0 [ 3514.209881][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3514.209881][T23880] get_compat_msghdr+0x108/0x2b0 [ 3514.209881][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3514.209881][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3514.209881][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3514.209881][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3514.209881][T23880] __do_fast_syscall_32+0x129/0x180 [ 3514.209881][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3514.209881][T23880] do_SYSENTER_32+0x73/0x90 [ 3514.209881][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3514.209881][T23880] [ 3514.209881][T23880] Uninit was stored to memory at: [ 3514.209881][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3514.209881][T23880] __msan_chain_origin+0x57/0xa0 [ 3514.209881][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3514.209881][T23880] get_compat_msghdr+0x108/0x2b0 [ 3514.209881][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3514.209881][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3514.209881][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3514.209881][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3514.209881][T23880] __do_fast_syscall_32+0x129/0x180 [ 3514.209881][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3514.209881][T23880] do_SYSENTER_32+0x73/0x90 [ 3514.209881][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3514.209881][T23880] [ 3514.209881][T23880] Uninit was stored to memory at: [ 3514.209881][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3514.209881][T23880] __msan_chain_origin+0x57/0xa0 [ 3514.209881][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3514.209881][T23880] get_compat_msghdr+0x108/0x2b0 [ 3514.209881][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3514.209881][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3514.209881][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3514.209881][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3514.209881][T23880] __do_fast_syscall_32+0x129/0x180 [ 3514.209881][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3514.209881][T23880] do_SYSENTER_32+0x73/0x90 [ 3514.209881][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3514.209881][T23880] [ 3514.209881][T23880] Uninit was stored to memory at: [ 3514.209881][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3514.209881][T23880] __msan_chain_origin+0x57/0xa0 [ 3514.209881][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3514.209881][T23880] get_compat_msghdr+0x108/0x2b0 [ 3514.209881][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3514.209881][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3514.209881][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3514.209881][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3514.209881][T23880] __do_fast_syscall_32+0x129/0x180 [ 3514.209881][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3514.209881][T23880] do_SYSENTER_32+0x73/0x90 [ 3514.209881][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3514.209881][T23880] [ 3514.209881][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3514.209881][T23880] do_recvmmsg+0xc2/0x22e0 [ 3514.209881][T23880] do_recvmmsg+0xc2/0x22e0 [ 3515.252987][T23880] not chained 3620000 origins [ 3515.254615][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3515.254615][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3515.254615][T23880] Call Trace: [ 3515.254615][T23880] dump_stack+0x21c/0x280 [ 3515.254615][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3515.254615][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3515.254615][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3515.254615][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3515.254615][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3515.254615][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3515.254615][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3515.254615][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3515.254615][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3515.254615][T23880] ? _copy_from_user+0x201/0x310 [ 3515.254615][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3515.254615][T23880] __msan_chain_origin+0x57/0xa0 [ 3515.254615][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3515.254615][T23880] get_compat_msghdr+0x108/0x2b0 [ 3515.254615][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3515.254615][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3515.254615][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3515.254615][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3515.254615][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3515.254615][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3515.254615][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3515.254615][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3515.254615][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3515.254615][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3515.254615][T23880] __do_fast_syscall_32+0x129/0x180 [ 3515.254615][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3515.254615][T23880] do_SYSENTER_32+0x73/0x90 [ 3515.254615][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3515.254615][T23880] RIP: 0023:0xf7ff3549 [ 3515.254615][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3515.254615][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3515.254615][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3515.254615][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3515.254615][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3515.254615][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3515.254615][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3515.254615][T23880] Uninit was stored to memory at: [ 3515.254615][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3515.254615][T23880] __msan_chain_origin+0x57/0xa0 [ 3515.254615][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3515.254615][T23880] get_compat_msghdr+0x108/0x2b0 [ 3515.254615][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3515.254615][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3515.254615][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3515.254615][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3515.254615][T23880] __do_fast_syscall_32+0x129/0x180 [ 3515.254615][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3515.254615][T23880] do_SYSENTER_32+0x73/0x90 [ 3515.254615][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3515.254615][T23880] [ 3515.254615][T23880] Uninit was stored to memory at: [ 3515.254615][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3515.254615][T23880] __msan_chain_origin+0x57/0xa0 [ 3515.254615][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3515.254615][T23880] get_compat_msghdr+0x108/0x2b0 [ 3515.254615][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3515.254615][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3515.254615][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3515.254615][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3515.254615][T23880] __do_fast_syscall_32+0x129/0x180 [ 3515.254615][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3515.254615][T23880] do_SYSENTER_32+0x73/0x90 [ 3515.254615][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3515.254615][T23880] [ 3515.254615][T23880] Uninit was stored to memory at: [ 3515.254615][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3515.254615][T23880] __msan_chain_origin+0x57/0xa0 [ 3515.254615][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3515.254615][T23880] get_compat_msghdr+0x108/0x2b0 [ 3515.254615][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3515.254615][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3515.254615][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3515.254615][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3515.254615][T23880] __do_fast_syscall_32+0x129/0x180 [ 3515.254615][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3515.254615][T23880] do_SYSENTER_32+0x73/0x90 [ 3515.254615][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3515.254615][T23880] [ 3515.254615][T23880] Uninit was stored to memory at: [ 3515.254615][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3515.254615][T23880] __msan_chain_origin+0x57/0xa0 [ 3515.254615][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3515.254615][T23880] get_compat_msghdr+0x108/0x2b0 [ 3515.254615][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3515.254615][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3515.254615][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3515.254615][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3515.254615][T23880] __do_fast_syscall_32+0x129/0x180 [ 3515.254615][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3515.254615][T23880] do_SYSENTER_32+0x73/0x90 [ 3515.254615][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3515.254615][T23880] [ 3515.254615][T23880] Uninit was stored to memory at: [ 3515.254615][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3515.254615][T23880] __msan_chain_origin+0x57/0xa0 [ 3515.254615][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3515.254615][T23880] get_compat_msghdr+0x108/0x2b0 [ 3515.254615][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3515.254615][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3515.254615][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3515.254615][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3515.254615][T23880] __do_fast_syscall_32+0x129/0x180 [ 3515.254615][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3515.254615][T23880] do_SYSENTER_32+0x73/0x90 [ 3515.254615][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3515.254615][T23880] [ 3515.254615][T23880] Uninit was stored to memory at: [ 3515.254615][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3515.254615][T23880] __msan_chain_origin+0x57/0xa0 [ 3515.254615][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3515.254615][T23880] get_compat_msghdr+0x108/0x2b0 [ 3515.254615][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3515.254615][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3515.254615][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3515.254615][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3515.254615][T23880] __do_fast_syscall_32+0x129/0x180 [ 3515.254615][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3515.254615][T23880] do_SYSENTER_32+0x73/0x90 [ 3515.254615][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3515.254615][T23880] [ 3515.254615][T23880] Uninit was stored to memory at: [ 3515.254615][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3515.254615][T23880] __msan_chain_origin+0x57/0xa0 [ 3515.254615][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3515.254615][T23880] get_compat_msghdr+0x108/0x2b0 [ 3515.254615][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3515.254615][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3515.254615][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3515.254615][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3515.254615][T23880] __do_fast_syscall_32+0x129/0x180 [ 3515.254615][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3515.254615][T23880] do_SYSENTER_32+0x73/0x90 [ 3515.254615][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3515.254615][T23880] [ 3515.254615][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3515.254615][T23880] do_recvmmsg+0xc2/0x22e0 [ 3515.254615][T23880] do_recvmmsg+0xc2/0x22e0 [ 3516.080703][T23880] not chained 3630000 origins [ 3516.084564][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3516.084564][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3516.084564][T23880] Call Trace: [ 3516.084564][T23880] dump_stack+0x21c/0x280 [ 3516.084564][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3516.084564][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3516.084564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3516.084564][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3516.084564][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3516.084564][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3516.084564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3516.084564][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3516.084564][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3516.084564][T23880] ? _copy_from_user+0x201/0x310 [ 3516.084564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3516.084564][T23880] __msan_chain_origin+0x57/0xa0 [ 3516.084564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3516.084564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3516.084564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3516.084564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3516.084564][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3516.084564][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3516.084564][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3516.084564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3516.084564][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3516.084564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3516.084564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3516.084564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3516.084564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3516.084564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3516.084564][T23880] do_SYSENTER_32+0x73/0x90 [ 3516.084564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3516.084564][T23880] RIP: 0023:0xf7ff3549 [ 3516.084564][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3516.084564][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3516.084564][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3516.084564][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3516.084564][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3516.084564][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3516.084564][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3516.084564][T23880] Uninit was stored to memory at: [ 3516.084564][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3516.084564][T23880] __msan_chain_origin+0x57/0xa0 [ 3516.084564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3516.084564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3516.084564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3516.084564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3516.084564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3516.084564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3516.084564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3516.084564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3516.084564][T23880] do_SYSENTER_32+0x73/0x90 [ 3516.084564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3516.084564][T23880] [ 3516.084564][T23880] Uninit was stored to memory at: [ 3516.084564][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3516.084564][T23880] __msan_chain_origin+0x57/0xa0 [ 3516.084564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3516.084564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3516.084564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3516.084564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3516.084564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3516.084564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3516.084564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3516.084564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3516.084564][T23880] do_SYSENTER_32+0x73/0x90 [ 3516.084564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3516.084564][T23880] [ 3516.084564][T23880] Uninit was stored to memory at: [ 3516.084564][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3516.084564][T23880] __msan_chain_origin+0x57/0xa0 [ 3516.084564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3516.084564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3516.084564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3516.084564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3516.084564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3516.084564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3516.084564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3516.084564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3516.084564][T23880] do_SYSENTER_32+0x73/0x90 [ 3516.084564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3516.084564][T23880] [ 3516.084564][T23880] Uninit was stored to memory at: [ 3516.084564][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3516.084564][T23880] __msan_chain_origin+0x57/0xa0 [ 3516.084564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3516.084564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3516.084564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3516.084564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3516.084564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3516.084564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3516.084564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3516.084564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3516.084564][T23880] do_SYSENTER_32+0x73/0x90 [ 3516.084564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3516.084564][T23880] [ 3516.084564][T23880] Uninit was stored to memory at: [ 3516.084564][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3516.084564][T23880] __msan_chain_origin+0x57/0xa0 [ 3516.084564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3516.084564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3516.084564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3516.084564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3516.084564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3516.084564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3516.084564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3516.084564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3516.084564][T23880] do_SYSENTER_32+0x73/0x90 [ 3516.084564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3516.084564][T23880] [ 3516.084564][T23880] Uninit was stored to memory at: [ 3516.084564][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3516.084564][T23880] __msan_chain_origin+0x57/0xa0 [ 3516.084564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3516.084564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3516.084564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3516.084564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3516.084564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3516.084564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3516.084564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3516.084564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3516.084564][T23880] do_SYSENTER_32+0x73/0x90 [ 3516.084564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3516.084564][T23880] [ 3516.084564][T23880] Uninit was stored to memory at: [ 3516.084564][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3516.084564][T23880] __msan_chain_origin+0x57/0xa0 [ 3516.084564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3516.084564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3516.084564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3516.084564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3516.084564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3516.084564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3516.084564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3516.084564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3516.084564][T23880] do_SYSENTER_32+0x73/0x90 [ 3516.084564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3516.084564][T23880] [ 3516.084564][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3516.084564][T23880] do_recvmmsg+0xc2/0x22e0 [ 3516.084564][T23880] do_recvmmsg+0xc2/0x22e0 [ 3517.084036][T23882] not chained 3640000 origins [ 3517.084567][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3517.084567][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3517.084567][T23882] Call Trace: [ 3517.084567][T23882] dump_stack+0x21c/0x280 [ 3517.084567][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3517.084567][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3517.084567][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3517.084567][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3517.084567][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3517.084567][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3517.084567][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3517.084567][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3517.084567][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3517.084567][T23882] ? _copy_from_user+0x201/0x310 [ 3517.084567][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3517.084567][T23882] __msan_chain_origin+0x57/0xa0 [ 3517.084567][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3517.084567][T23882] get_compat_msghdr+0x108/0x2b0 [ 3517.084567][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3517.084567][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3517.084567][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3517.084567][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3517.084567][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3517.084567][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3517.221268][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3517.224638][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3517.224638][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3517.224638][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3517.224638][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3517.224638][T23882] __do_fast_syscall_32+0x129/0x180 [ 3517.224638][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3517.224638][T23882] do_SYSENTER_32+0x73/0x90 [ 3517.224638][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3517.224638][T23882] RIP: 0023:0xf7ff3549 [ 3517.224638][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3517.283747][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3517.283747][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3517.283747][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3517.283747][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3517.283747][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3517.283747][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3517.283747][T23882] Uninit was stored to memory at: [ 3517.283747][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3517.283747][T23882] __msan_chain_origin+0x57/0xa0 [ 3517.283747][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3517.283747][T23882] get_compat_msghdr+0x108/0x2b0 [ 3517.283747][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3517.283747][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3517.283747][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3517.283747][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3517.386217][T23882] __do_fast_syscall_32+0x129/0x180 [ 3517.386217][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3517.386217][T23882] do_SYSENTER_32+0x73/0x90 [ 3517.386217][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3517.386217][T23882] [ 3517.386217][T23882] Uninit was stored to memory at: [ 3517.386217][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3517.386217][T23882] __msan_chain_origin+0x57/0xa0 [ 3517.386217][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3517.386217][T23882] get_compat_msghdr+0x108/0x2b0 [ 3517.386217][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3517.386217][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3517.447779][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3517.447779][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3517.447779][T23882] __do_fast_syscall_32+0x129/0x180 [ 3517.447779][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3517.447779][T23882] do_SYSENTER_32+0x73/0x90 [ 3517.447779][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3517.447779][T23882] [ 3517.447779][T23882] Uninit was stored to memory at: [ 3517.488590][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3517.488590][T23882] __msan_chain_origin+0x57/0xa0 [ 3517.488590][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3517.488590][T23882] get_compat_msghdr+0x108/0x2b0 [ 3517.488590][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3517.488590][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3517.488590][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3517.488590][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3517.488590][T23882] __do_fast_syscall_32+0x129/0x180 [ 3517.488590][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3517.488590][T23882] do_SYSENTER_32+0x73/0x90 [ 3517.488590][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3517.488590][T23882] [ 3517.488590][T23882] Uninit was stored to memory at: [ 3517.488590][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3517.488590][T23882] __msan_chain_origin+0x57/0xa0 [ 3517.488590][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3517.488590][T23882] get_compat_msghdr+0x108/0x2b0 [ 3517.488590][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3517.488590][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3517.488590][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3517.590957][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3517.590957][T23882] __do_fast_syscall_32+0x129/0x180 [ 3517.590957][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3517.590957][T23882] do_SYSENTER_32+0x73/0x90 [ 3517.590957][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3517.590957][T23882] [ 3517.590957][T23882] Uninit was stored to memory at: [ 3517.590957][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3517.590957][T23882] __msan_chain_origin+0x57/0xa0 [ 3517.590957][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3517.590957][T23882] get_compat_msghdr+0x108/0x2b0 [ 3517.590957][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3517.590957][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3517.590957][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3517.590957][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3517.590957][T23882] __do_fast_syscall_32+0x129/0x180 [ 3517.590957][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3517.590957][T23882] do_SYSENTER_32+0x73/0x90 [ 3517.590957][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3517.590957][T23882] [ 3517.693358][T23882] Uninit was stored to memory at: [ 3517.693358][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3517.693358][T23882] __msan_chain_origin+0x57/0xa0 [ 3517.693358][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3517.693358][T23882] get_compat_msghdr+0x108/0x2b0 [ 3517.693358][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3517.693358][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3517.693358][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3517.693358][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3517.693358][T23882] __do_fast_syscall_32+0x129/0x180 [ 3517.693358][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3517.693358][T23882] do_SYSENTER_32+0x73/0x90 [ 3517.693358][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3517.693358][T23882] [ 3517.693358][T23882] Uninit was stored to memory at: [ 3517.693358][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3517.693358][T23882] __msan_chain_origin+0x57/0xa0 [ 3517.693358][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3517.693358][T23882] get_compat_msghdr+0x108/0x2b0 [ 3517.693358][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3517.693358][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3517.795862][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3517.795862][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3517.795862][T23882] __do_fast_syscall_32+0x129/0x180 [ 3517.795862][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3517.795862][T23882] do_SYSENTER_32+0x73/0x90 [ 3517.795862][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3517.795862][T23882] [ 3517.795862][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3517.795862][T23882] do_recvmmsg+0xc2/0x22e0 [ 3517.795862][T23882] do_recvmmsg+0xc2/0x22e0 [ 3518.063763][T23882] not chained 3650000 origins [ 3518.064565][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3518.064565][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3518.064565][T23882] Call Trace: [ 3518.064565][T23882] dump_stack+0x21c/0x280 [ 3518.064565][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3518.064565][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3518.064565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3518.064565][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3518.064565][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3518.064565][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3518.064565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3518.064565][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3518.064565][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3518.064565][T23882] ? _copy_from_user+0x201/0x310 [ 3518.064565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3518.064565][T23882] __msan_chain_origin+0x57/0xa0 [ 3518.064565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3518.064565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3518.064565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3518.064565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3518.064565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3518.064565][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3518.064565][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3518.064565][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3518.064565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3518.064565][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3518.064565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3518.064565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.064565][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.064565][T23882] __do_fast_syscall_32+0x129/0x180 [ 3518.064565][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3518.064565][T23882] do_SYSENTER_32+0x73/0x90 [ 3518.064565][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3518.064565][T23882] RIP: 0023:0xf7ff3549 [ 3518.064565][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3518.064565][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3518.064565][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3518.064565][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3518.064565][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3518.064565][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3518.064565][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3518.064565][T23882] Uninit was stored to memory at: [ 3518.064565][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3518.064565][T23882] __msan_chain_origin+0x57/0xa0 [ 3518.064565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3518.064565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3518.064565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3518.064565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3518.064565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.358741][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.364671][T23882] __do_fast_syscall_32+0x129/0x180 [ 3518.364671][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3518.364671][T23882] do_SYSENTER_32+0x73/0x90 [ 3518.364671][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3518.364671][T23882] [ 3518.364671][T23882] Uninit was stored to memory at: [ 3518.364671][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3518.364671][T23882] __msan_chain_origin+0x57/0xa0 [ 3518.410143][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3518.410143][T23882] get_compat_msghdr+0x108/0x2b0 [ 3518.410143][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3518.410143][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3518.410143][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.410143][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.410143][T23882] __do_fast_syscall_32+0x129/0x180 [ 3518.410143][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3518.410143][T23882] do_SYSENTER_32+0x73/0x90 [ 3518.410143][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3518.410143][T23882] [ 3518.410143][T23882] Uninit was stored to memory at: [ 3518.410143][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3518.410143][T23882] __msan_chain_origin+0x57/0xa0 [ 3518.410143][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3518.410143][T23882] get_compat_msghdr+0x108/0x2b0 [ 3518.410143][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3518.410143][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3518.410143][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.410143][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.410143][T23882] __do_fast_syscall_32+0x129/0x180 [ 3518.410143][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3518.410143][T23882] do_SYSENTER_32+0x73/0x90 [ 3518.410143][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3518.410143][T23882] [ 3518.410143][T23882] Uninit was stored to memory at: [ 3518.410143][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3518.410143][T23882] __msan_chain_origin+0x57/0xa0 [ 3518.410143][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3518.410143][T23882] get_compat_msghdr+0x108/0x2b0 [ 3518.410143][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3518.410143][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3518.410143][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.575959][T23880] not chained 3660000 origins [ 3518.410143][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.581862][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3518.410143][T23882] __do_fast_syscall_32+0x129/0x180 [ 3518.584554][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3518.410143][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3518.584554][T23880] Call Trace: [ 3518.410143][T23882] do_SYSENTER_32+0x73/0x90 [ 3518.584554][T23880] dump_stack+0x21c/0x280 [ 3518.410143][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3518.584554][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3518.410143][T23882] [ 3518.584554][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3518.410143][T23882] Uninit was stored to memory at: [ 3518.584554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3518.410143][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3518.584554][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3518.410143][T23882] __msan_chain_origin+0x57/0xa0 [ 3518.584554][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3518.410143][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3518.584554][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3518.410143][T23882] get_compat_msghdr+0x108/0x2b0 [ 3518.584554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3518.410143][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3518.584554][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3518.410143][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3518.584554][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3518.410143][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.584554][T23880] ? _copy_from_user+0x201/0x310 [ 3518.410143][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.584554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3518.410143][T23882] __do_fast_syscall_32+0x129/0x180 [ 3518.584554][T23880] __msan_chain_origin+0x57/0xa0 [ 3518.410143][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3518.584554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3518.410143][T23882] do_SYSENTER_32+0x73/0x90 [ 3518.584554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3518.410143][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3518.584554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3518.410143][T23882] [ 3518.584554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3518.410143][T23882] Uninit was stored to memory at: [ 3518.584554][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3518.410143][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3518.584554][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3518.410143][T23882] __msan_chain_origin+0x57/0xa0 [ 3518.584554][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3518.410143][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3518.584554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3518.410143][T23882] get_compat_msghdr+0x108/0x2b0 [ 3518.584554][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3518.410143][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3518.584554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3518.410143][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3518.584554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.410143][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.584554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.410143][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.584554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3518.410143][T23882] __do_fast_syscall_32+0x129/0x180 [ 3518.584554][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3518.410143][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3518.584554][T23880] do_SYSENTER_32+0x73/0x90 [ 3518.410143][T23882] do_SYSENTER_32+0x73/0x90 [ 3518.584554][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3518.410143][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3518.584554][T23880] RIP: 0023:0xf7ff3549 [ 3518.410143][T23882] [ 3518.584554][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3518.410143][T23882] Uninit was stored to memory at: [ 3518.584554][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3518.410143][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3518.584554][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3518.410143][T23882] __msan_chain_origin+0x57/0xa0 [ 3518.584554][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3518.410143][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3518.584554][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3518.410143][T23882] get_compat_msghdr+0x108/0x2b0 [ 3518.410143][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3518.584554][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3518.410143][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3518.584554][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3518.410143][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.584554][T23880] Uninit was stored to memory at: [ 3518.410143][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.584554][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3518.410143][T23882] __do_fast_syscall_32+0x129/0x180 [ 3518.584554][T23880] __msan_chain_origin+0x57/0xa0 [ 3518.410143][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3518.584554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3518.410143][T23882] do_SYSENTER_32+0x73/0x90 [ 3518.584554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3518.410143][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3518.584554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3518.410143][T23882] [ 3518.584554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3518.410143][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3518.584554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3518.410143][T23882] do_recvmmsg+0xc2/0x22e0 [ 3518.584554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3518.410143][T23882] do_recvmmsg+0xc2/0x22e0 [ 3518.584554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3519.138436][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3519.138436][T23880] do_SYSENTER_32+0x73/0x90 [ 3519.150938][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3519.155291][T23880] [ 3519.155291][T23880] Uninit was stored to memory at: [ 3519.155291][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3519.155291][T23880] __msan_chain_origin+0x57/0xa0 [ 3519.155291][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3519.155291][T23880] get_compat_msghdr+0x108/0x2b0 [ 3519.155291][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3519.155291][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3519.155291][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3519.155291][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3519.155291][T23880] __do_fast_syscall_32+0x129/0x180 [ 3519.155291][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3519.155291][T23880] do_SYSENTER_32+0x73/0x90 [ 3519.155291][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3519.155291][T23880] [ 3519.155291][T23880] Uninit was stored to memory at: [ 3519.155291][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3519.155291][T23880] __msan_chain_origin+0x57/0xa0 [ 3519.155291][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3519.155291][T23880] get_compat_msghdr+0x108/0x2b0 [ 3519.155291][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3519.155291][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3519.155291][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3519.155291][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3519.155291][T23880] __do_fast_syscall_32+0x129/0x180 [ 3519.155291][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3519.155291][T23880] do_SYSENTER_32+0x73/0x90 [ 3519.155291][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3519.155291][T23880] [ 3519.155291][T23880] Uninit was stored to memory at: [ 3519.155291][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3519.155291][T23880] __msan_chain_origin+0x57/0xa0 [ 3519.155291][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3519.155291][T23880] get_compat_msghdr+0x108/0x2b0 [ 3519.155291][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3519.155291][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3519.155291][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3519.155291][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3519.155291][T23880] __do_fast_syscall_32+0x129/0x180 [ 3519.155291][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3519.155291][T23880] do_SYSENTER_32+0x73/0x90 [ 3519.155291][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3519.155291][T23880] [ 3519.155291][T23880] Uninit was stored to memory at: [ 3519.155291][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3519.155291][T23880] __msan_chain_origin+0x57/0xa0 [ 3519.155291][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3519.155291][T23880] get_compat_msghdr+0x108/0x2b0 [ 3519.155291][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3519.155291][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3519.155291][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3519.155291][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3519.155291][T23880] __do_fast_syscall_32+0x129/0x180 [ 3519.155291][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3519.155291][T23880] do_SYSENTER_32+0x73/0x90 [ 3519.155291][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3519.155291][T23880] [ 3519.155291][T23880] Uninit was stored to memory at: [ 3519.155291][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3519.155291][T23880] __msan_chain_origin+0x57/0xa0 [ 3519.155291][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3519.155291][T23880] get_compat_msghdr+0x108/0x2b0 [ 3519.155291][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3519.155291][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3519.155291][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3519.155291][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3519.155291][T23880] __do_fast_syscall_32+0x129/0x180 [ 3519.155291][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3519.155291][T23880] do_SYSENTER_32+0x73/0x90 [ 3519.155291][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3519.155291][T23880] [ 3519.155291][T23880] Uninit was stored to memory at: [ 3519.155291][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3519.155291][T23880] __msan_chain_origin+0x57/0xa0 [ 3519.155291][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3519.155291][T23880] get_compat_msghdr+0x108/0x2b0 [ 3519.155291][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3519.155291][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3519.155291][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3519.155291][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3519.155291][T23880] __do_fast_syscall_32+0x129/0x180 [ 3519.155291][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3519.155291][T23880] do_SYSENTER_32+0x73/0x90 [ 3519.155291][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3519.155291][T23880] [ 3519.155291][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3519.155291][T23880] do_recvmmsg+0xc2/0x22e0 [ 3519.155291][T23880] do_recvmmsg+0xc2/0x22e0 [ 3519.948428][T23882] not chained 3670000 origins [ 3519.953497][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3519.954550][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3519.954550][T23882] Call Trace: [ 3519.954550][T23882] dump_stack+0x21c/0x280 [ 3519.954550][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3519.954550][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3519.954550][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3519.954550][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3519.954550][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3519.954550][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3519.954550][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3519.954550][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3519.954550][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3519.954550][T23882] ? _copy_from_user+0x201/0x310 [ 3519.954550][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3519.954550][T23882] __msan_chain_origin+0x57/0xa0 [ 3519.954550][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.048973][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.048973][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.048973][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3520.048973][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3520.048973][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3520.048973][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3520.048973][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3520.048973][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.048973][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3520.048973][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3520.048973][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.048973][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.048973][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.048973][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.048973][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.048973][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.048973][T23882] RIP: 0023:0xf7ff3549 [ 3520.048973][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3520.048973][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3520.048973][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3520.048973][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3520.048973][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3520.048973][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3520.048973][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3520.048973][T23882] Uninit was stored to memory at: [ 3520.048973][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.048973][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.048973][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.048973][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.048973][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.048973][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.048973][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.048973][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.048973][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.048973][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.048973][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.048973][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.048973][T23882] [ 3520.048973][T23882] Uninit was stored to memory at: [ 3520.048973][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.048973][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.048973][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.048973][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.048973][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.048973][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.048973][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.048973][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.048973][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.048973][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.048973][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.048973][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.048973][T23882] [ 3520.048973][T23882] Uninit was stored to memory at: [ 3520.048973][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.048973][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.048973][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.048973][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.048973][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.048973][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.048973][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.048973][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.048973][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.048973][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.048973][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.048973][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.048973][T23882] [ 3520.048973][T23882] Uninit was stored to memory at: [ 3520.048973][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.048973][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.048973][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.048973][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.048973][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.048973][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.048973][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.048973][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.048973][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.048973][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.048973][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.048973][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.048973][T23882] [ 3520.048973][T23882] Uninit was stored to memory at: [ 3520.048973][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.048973][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.048973][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.048973][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.048973][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.048973][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.048973][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.048973][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.048973][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.048973][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.048973][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.048973][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.048973][T23882] [ 3520.048973][T23882] Uninit was stored to memory at: [ 3520.048973][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.048973][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.048973][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.048973][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.048973][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.048973][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.048973][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.048973][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.048973][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.048973][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.048973][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.048973][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.048973][T23882] [ 3520.048973][T23882] Uninit was stored to memory at: [ 3520.048973][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.048973][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.048973][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.048973][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.664686][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.664686][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.664686][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.664686][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.664686][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.664686][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.664686][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.664686][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.664686][T23882] [ 3520.664686][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3520.664686][T23882] do_recvmmsg+0xc2/0x22e0 [ 3520.664686][T23882] do_recvmmsg+0xc2/0x22e0 [ 3520.863402][T23882] not chained 3680000 origins [ 3520.865659][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3520.865659][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3520.865659][T23882] Call Trace: [ 3520.865659][T23882] dump_stack+0x21c/0x280 [ 3520.865659][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3520.865659][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3520.904689][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3520.904689][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3520.904689][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3520.904689][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3520.904689][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3520.904689][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3520.904689][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3520.904689][T23882] ? _copy_from_user+0x201/0x310 [ 3520.904689][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3520.904689][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.904689][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.904689][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.904689][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.904689][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3520.904689][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3520.904689][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3520.904689][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3520.904689][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3520.904689][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.904689][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3520.904689][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3520.904689][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.904689][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.904689][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.904689][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.904689][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.904689][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.904689][T23882] RIP: 0023:0xf7ff3549 [ 3520.904689][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3520.904689][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3520.904689][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3520.904689][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3520.904689][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3520.904689][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3520.904689][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3520.904689][T23882] Uninit was stored to memory at: [ 3520.904689][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.904689][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.904689][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.904689][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.904689][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.904689][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.904689][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.904689][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.904689][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.904689][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.904689][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.904689][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.904689][T23882] [ 3520.904689][T23882] Uninit was stored to memory at: [ 3520.904689][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.904689][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.904689][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.904689][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.904689][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.904689][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.904689][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.904689][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.904689][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.904689][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.904689][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.904689][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.904689][T23882] [ 3520.904689][T23882] Uninit was stored to memory at: [ 3520.904689][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.904689][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.904689][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.904689][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.904689][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.904689][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.904689][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.904689][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.904689][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.904689][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.904689][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.904689][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.904689][T23882] [ 3520.904689][T23882] Uninit was stored to memory at: [ 3520.904689][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.904689][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.904689][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.904689][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.904689][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.904689][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.904689][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.904689][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.904689][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.904689][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.904689][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.904689][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.904689][T23882] [ 3520.904689][T23882] Uninit was stored to memory at: [ 3520.904689][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.904689][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.904689][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.904689][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.904689][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.904689][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.904689][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.904689][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.904689][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.904689][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.904689][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.904689][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.904689][T23882] [ 3520.904689][T23882] Uninit was stored to memory at: [ 3520.904689][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.904689][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.904689][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.904689][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.904689][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.904689][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.904689][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.904689][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.904689][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.904689][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.904689][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.904689][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.904689][T23882] [ 3520.904689][T23882] Uninit was stored to memory at: [ 3520.904689][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3520.904689][T23882] __msan_chain_origin+0x57/0xa0 [ 3520.904689][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3520.904689][T23882] get_compat_msghdr+0x108/0x2b0 [ 3520.904689][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3520.904689][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3520.904689][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3520.904689][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3520.904689][T23882] __do_fast_syscall_32+0x129/0x180 [ 3520.904689][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3520.904689][T23882] do_SYSENTER_32+0x73/0x90 [ 3520.904689][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3520.904689][T23882] [ 3520.904689][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3520.904689][T23882] do_recvmmsg+0xc2/0x22e0 [ 3520.904689][T23882] do_recvmmsg+0xc2/0x22e0 [ 3521.711386][T23880] not chained 3690000 origins [ 3521.714558][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3521.714558][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3521.714558][T23880] Call Trace: [ 3521.714558][T23880] dump_stack+0x21c/0x280 [ 3521.714558][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3521.714558][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3521.714558][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3521.714558][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3521.714558][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3521.714558][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3521.714558][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3521.714558][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3521.714558][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3521.714558][T23880] ? _copy_from_user+0x201/0x310 [ 3521.714558][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3521.714558][T23880] __msan_chain_origin+0x57/0xa0 [ 3521.714558][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3521.714558][T23880] get_compat_msghdr+0x108/0x2b0 [ 3521.714558][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3521.714558][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3521.714558][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3521.714558][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3521.714558][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3521.714558][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3521.714558][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3521.714558][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3521.714558][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3521.714558][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3521.714558][T23880] __do_fast_syscall_32+0x129/0x180 [ 3521.714558][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3521.714558][T23880] do_SYSENTER_32+0x73/0x90 [ 3521.714558][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3521.714558][T23880] RIP: 0023:0xf7ff3549 [ 3521.714558][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3521.714558][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3521.714558][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3521.714558][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3521.714558][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3521.714558][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3521.714558][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3521.714558][T23880] Uninit was stored to memory at: [ 3521.714558][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3521.714558][T23880] __msan_chain_origin+0x57/0xa0 [ 3521.714558][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3521.714558][T23880] get_compat_msghdr+0x108/0x2b0 [ 3521.714558][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3521.714558][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3521.714558][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3521.714558][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3521.714558][T23880] __do_fast_syscall_32+0x129/0x180 [ 3521.714558][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3521.714558][T23880] do_SYSENTER_32+0x73/0x90 [ 3521.714558][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3521.714558][T23880] [ 3521.714558][T23880] Uninit was stored to memory at: [ 3521.714558][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3521.714558][T23880] __msan_chain_origin+0x57/0xa0 [ 3521.714558][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3521.714558][T23880] get_compat_msghdr+0x108/0x2b0 [ 3521.714558][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3521.714558][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3521.714558][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3521.714558][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3521.714558][T23880] __do_fast_syscall_32+0x129/0x180 [ 3521.714558][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3521.714558][T23880] do_SYSENTER_32+0x73/0x90 [ 3521.714558][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3521.714558][T23880] [ 3521.714558][T23880] Uninit was stored to memory at: [ 3521.714558][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3521.714558][T23880] __msan_chain_origin+0x57/0xa0 [ 3521.714558][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3521.714558][T23880] get_compat_msghdr+0x108/0x2b0 [ 3521.714558][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3521.714558][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3521.714558][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3521.714558][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3521.714558][T23880] __do_fast_syscall_32+0x129/0x180 [ 3521.714558][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3521.714558][T23880] do_SYSENTER_32+0x73/0x90 [ 3521.714558][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3521.714558][T23880] [ 3521.714558][T23880] Uninit was stored to memory at: [ 3521.714558][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3521.714558][T23880] __msan_chain_origin+0x57/0xa0 [ 3521.714558][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3521.714558][T23880] get_compat_msghdr+0x108/0x2b0 [ 3521.714558][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3521.714558][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3521.714558][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3521.714558][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3521.714558][T23880] __do_fast_syscall_32+0x129/0x180 [ 3521.714558][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3521.714558][T23880] do_SYSENTER_32+0x73/0x90 [ 3521.714558][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3521.714558][T23880] [ 3521.714558][T23880] Uninit was stored to memory at: [ 3521.714558][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3521.714558][T23880] __msan_chain_origin+0x57/0xa0 [ 3521.714558][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3521.714558][T23880] get_compat_msghdr+0x108/0x2b0 [ 3521.714558][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3521.714558][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3521.714558][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3521.714558][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3521.714558][T23880] __do_fast_syscall_32+0x129/0x180 [ 3521.714558][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3521.714558][T23880] do_SYSENTER_32+0x73/0x90 [ 3521.714558][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3521.714558][T23880] [ 3521.714558][T23880] Uninit was stored to memory at: [ 3521.714558][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3521.714558][T23880] __msan_chain_origin+0x57/0xa0 [ 3521.714558][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3521.714558][T23880] get_compat_msghdr+0x108/0x2b0 [ 3521.714558][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3521.714558][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3521.714558][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3521.714558][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3521.714558][T23880] __do_fast_syscall_32+0x129/0x180 [ 3521.714558][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3521.714558][T23880] do_SYSENTER_32+0x73/0x90 [ 3521.714558][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3521.714558][T23880] [ 3521.714558][T23880] Uninit was stored to memory at: [ 3521.714558][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3521.714558][T23880] __msan_chain_origin+0x57/0xa0 [ 3521.714558][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3521.714558][T23880] get_compat_msghdr+0x108/0x2b0 [ 3521.714558][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3521.714558][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3521.714558][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3521.714558][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3521.714558][T23880] __do_fast_syscall_32+0x129/0x180 [ 3521.714558][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3521.714558][T23880] do_SYSENTER_32+0x73/0x90 [ 3521.714558][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3521.714558][T23880] [ 3521.714558][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3521.714558][T23880] do_recvmmsg+0xc2/0x22e0 [ 3521.714558][T23880] do_recvmmsg+0xc2/0x22e0 [ 3522.678469][T23880] not chained 3700000 origins [ 3522.683311][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3522.684549][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3522.684549][T23880] Call Trace: [ 3522.684549][T23880] dump_stack+0x21c/0x280 [ 3522.684549][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3522.713743][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3522.713743][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3522.713743][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3522.713743][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3522.713743][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3522.713743][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3522.713743][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3522.713743][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3522.713743][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3522.713743][T23880] ? _copy_from_user+0x201/0x310 [ 3522.713743][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3522.713743][T23880] __msan_chain_origin+0x57/0xa0 [ 3522.713743][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3522.713743][T23880] get_compat_msghdr+0x108/0x2b0 [ 3522.713743][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3522.713743][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3522.713743][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3522.713743][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3522.713743][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3522.713743][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3522.713743][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3522.713743][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3522.713743][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3522.713743][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3522.713743][T23880] __do_fast_syscall_32+0x129/0x180 [ 3522.713743][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3522.713743][T23880] do_SYSENTER_32+0x73/0x90 [ 3522.713743][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3522.713743][T23880] RIP: 0023:0xf7ff3549 [ 3522.713743][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3522.713743][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3522.713743][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3522.713743][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3522.713743][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3522.713743][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3522.713743][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3522.713743][T23880] Uninit was stored to memory at: [ 3522.713743][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3522.713743][T23880] __msan_chain_origin+0x57/0xa0 [ 3522.713743][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3522.713743][T23880] get_compat_msghdr+0x108/0x2b0 [ 3522.713743][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3522.713743][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3522.713743][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3522.713743][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3522.713743][T23880] __do_fast_syscall_32+0x129/0x180 [ 3522.713743][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3522.713743][T23880] do_SYSENTER_32+0x73/0x90 [ 3522.713743][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3522.713743][T23880] [ 3522.713743][T23880] Uninit was stored to memory at: [ 3522.713743][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3522.713743][T23880] __msan_chain_origin+0x57/0xa0 [ 3522.713743][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3522.713743][T23880] get_compat_msghdr+0x108/0x2b0 [ 3522.713743][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3522.713743][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3522.713743][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3522.713743][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3522.713743][T23880] __do_fast_syscall_32+0x129/0x180 [ 3522.713743][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3522.713743][T23880] do_SYSENTER_32+0x73/0x90 [ 3522.713743][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3522.713743][T23880] [ 3522.713743][T23880] Uninit was stored to memory at: [ 3522.713743][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3522.713743][T23880] __msan_chain_origin+0x57/0xa0 [ 3522.713743][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3522.713743][T23880] get_compat_msghdr+0x108/0x2b0 [ 3522.713743][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3522.713743][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3522.713743][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3522.713743][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3522.713743][T23880] __do_fast_syscall_32+0x129/0x180 [ 3522.713743][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3522.713743][T23880] do_SYSENTER_32+0x73/0x90 [ 3522.713743][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3522.713743][T23880] [ 3522.713743][T23880] Uninit was stored to memory at: [ 3522.713743][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3522.713743][T23880] __msan_chain_origin+0x57/0xa0 [ 3522.713743][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3522.713743][T23880] get_compat_msghdr+0x108/0x2b0 [ 3522.713743][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3522.713743][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3522.713743][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3522.713743][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3522.713743][T23880] __do_fast_syscall_32+0x129/0x180 [ 3522.713743][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3522.713743][T23880] do_SYSENTER_32+0x73/0x90 [ 3522.713743][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3522.713743][T23880] [ 3522.713743][T23880] Uninit was stored to memory at: [ 3522.713743][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3522.713743][T23880] __msan_chain_origin+0x57/0xa0 [ 3522.713743][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3522.713743][T23880] get_compat_msghdr+0x108/0x2b0 [ 3522.713743][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3522.713743][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3522.713743][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3522.713743][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3522.713743][T23880] __do_fast_syscall_32+0x129/0x180 [ 3522.713743][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3522.713743][T23880] do_SYSENTER_32+0x73/0x90 [ 3522.713743][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3522.713743][T23880] [ 3522.713743][T23880] Uninit was stored to memory at: [ 3522.713743][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3522.713743][T23880] __msan_chain_origin+0x57/0xa0 [ 3522.713743][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3522.713743][T23880] get_compat_msghdr+0x108/0x2b0 [ 3522.713743][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3522.713743][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3522.713743][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3522.713743][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3522.713743][T23880] __do_fast_syscall_32+0x129/0x180 [ 3522.713743][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3522.713743][T23880] do_SYSENTER_32+0x73/0x90 [ 3522.713743][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3522.713743][T23880] [ 3522.713743][T23880] Uninit was stored to memory at: [ 3522.713743][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3522.713743][T23880] __msan_chain_origin+0x57/0xa0 [ 3522.713743][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3522.713743][T23880] get_compat_msghdr+0x108/0x2b0 [ 3522.713743][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3522.713743][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3522.713743][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3522.713743][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3522.713743][T23880] __do_fast_syscall_32+0x129/0x180 [ 3522.713743][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3522.713743][T23880] do_SYSENTER_32+0x73/0x90 [ 3522.713743][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3522.713743][T23880] [ 3522.713743][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3522.713743][T23880] do_recvmmsg+0xc2/0x22e0 [ 3522.713743][T23880] do_recvmmsg+0xc2/0x22e0 [ 3523.776903][T23882] not chained 3710000 origins [ 3523.781720][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3523.784566][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3523.784566][T23882] Call Trace: [ 3523.784566][T23882] dump_stack+0x21c/0x280 [ 3523.784566][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3523.784566][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3523.784566][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3523.784566][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3523.784566][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3523.835772][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3523.835772][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3523.835772][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3523.835772][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3523.835772][T23882] ? _copy_from_user+0x201/0x310 [ 3523.835772][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3523.835772][T23882] __msan_chain_origin+0x57/0xa0 [ 3523.835772][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3523.835772][T23882] get_compat_msghdr+0x108/0x2b0 [ 3523.835772][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3523.835772][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3523.835772][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3523.835772][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3523.835772][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3523.835772][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3523.835772][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3523.835772][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3523.835772][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3523.835772][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3523.835772][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3523.835772][T23882] __do_fast_syscall_32+0x129/0x180 [ 3523.835772][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3523.835772][T23882] do_SYSENTER_32+0x73/0x90 [ 3523.835772][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3523.835772][T23882] RIP: 0023:0xf7ff3549 [ 3523.835772][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3523.835772][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3523.835772][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3523.835772][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3523.835772][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3523.835772][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3523.835772][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3523.835772][T23882] Uninit was stored to memory at: [ 3523.835772][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3523.835772][T23882] __msan_chain_origin+0x57/0xa0 [ 3523.835772][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3523.835772][T23882] get_compat_msghdr+0x108/0x2b0 [ 3523.835772][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3523.835772][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3523.835772][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3523.835772][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3523.835772][T23882] __do_fast_syscall_32+0x129/0x180 [ 3523.835772][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3523.835772][T23882] do_SYSENTER_32+0x73/0x90 [ 3523.835772][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3523.835772][T23882] [ 3523.835772][T23882] Uninit was stored to memory at: [ 3523.835772][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3523.835772][T23882] __msan_chain_origin+0x57/0xa0 [ 3523.835772][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3523.835772][T23882] get_compat_msghdr+0x108/0x2b0 [ 3523.835772][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3523.835772][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3523.835772][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3523.835772][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3523.835772][T23882] __do_fast_syscall_32+0x129/0x180 [ 3523.835772][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3523.835772][T23882] do_SYSENTER_32+0x73/0x90 [ 3523.835772][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3523.835772][T23882] [ 3523.835772][T23882] Uninit was stored to memory at: [ 3523.835772][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3523.835772][T23882] __msan_chain_origin+0x57/0xa0 [ 3523.835772][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3523.835772][T23882] get_compat_msghdr+0x108/0x2b0 [ 3523.835772][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3523.835772][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3523.835772][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3523.835772][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3523.835772][T23882] __do_fast_syscall_32+0x129/0x180 [ 3523.835772][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3524.238590][T23880] not chained 3720000 origins [ 3523.835772][T23882] do_SYSENTER_32+0x73/0x90 [ 3524.243793][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3523.835772][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.244531][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3523.835772][T23882] [ 3524.244531][T23880] Call Trace: [ 3523.835772][T23882] Uninit was stored to memory at: [ 3524.244531][T23880] dump_stack+0x21c/0x280 [ 3523.835772][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3524.244531][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3523.835772][T23882] __msan_chain_origin+0x57/0xa0 [ 3524.244531][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3523.835772][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3524.244531][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3523.835772][T23882] get_compat_msghdr+0x108/0x2b0 [ 3524.244531][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3523.835772][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3524.244531][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3523.835772][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3524.244531][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3523.835772][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.244531][T23880] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3523.835772][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3524.244531][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3523.835772][T23882] __do_fast_syscall_32+0x129/0x180 [ 3524.244531][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3523.835772][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3524.244531][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3523.835772][T23882] do_SYSENTER_32+0x73/0x90 [ 3524.244531][T23880] ? _copy_from_user+0x201/0x310 [ 3523.835772][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.244531][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3524.244531][T23880] __msan_chain_origin+0x57/0xa0 [ 3523.835772][T23882] [ 3524.244531][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3523.835772][T23882] Uninit was stored to memory at: [ 3524.244531][T23880] get_compat_msghdr+0x108/0x2b0 [ 3523.835772][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3524.244531][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3523.835772][T23882] __msan_chain_origin+0x57/0xa0 [ 3524.244531][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3523.835772][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3524.244531][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3523.835772][T23882] get_compat_msghdr+0x108/0x2b0 [ 3524.244531][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3523.835772][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3524.244531][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3523.835772][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3524.244531][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3523.835772][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.244531][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3523.835772][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3523.835772][T23882] __do_fast_syscall_32+0x129/0x180 [ 3524.244531][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3523.835772][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3524.244531][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3523.835772][T23882] do_SYSENTER_32+0x73/0x90 [ 3524.244531][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3523.835772][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.244531][T23880] __do_fast_syscall_32+0x129/0x180 [ 3523.835772][T23882] [ 3524.244531][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3523.835772][T23882] Uninit was stored to memory at: [ 3524.244531][T23880] do_SYSENTER_32+0x73/0x90 [ 3523.835772][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3524.244531][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3523.835772][T23882] __msan_chain_origin+0x57/0xa0 [ 3524.244531][T23880] RIP: 0023:0xf7ff3549 [ 3523.835772][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3524.244531][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3523.835772][T23882] get_compat_msghdr+0x108/0x2b0 [ 3524.244531][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3523.835772][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3524.244531][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3523.835772][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3524.244531][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3523.835772][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.244531][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3523.835772][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3524.244531][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3523.835772][T23882] __do_fast_syscall_32+0x129/0x180 [ 3524.244531][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3523.835772][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3524.244531][T23880] Uninit was stored to memory at: [ 3523.835772][T23882] do_SYSENTER_32+0x73/0x90 [ 3524.244531][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3523.835772][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.244531][T23880] __msan_chain_origin+0x57/0xa0 [ 3523.835772][T23882] [ 3524.244531][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3523.835772][T23882] Uninit was stored to memory at: [ 3524.244531][T23880] get_compat_msghdr+0x108/0x2b0 [ 3523.835772][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3524.244531][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3523.835772][T23882] __msan_chain_origin+0x57/0xa0 [ 3524.244531][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3523.835772][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3524.244531][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3523.835772][T23882] get_compat_msghdr+0x108/0x2b0 [ 3524.244531][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3523.835772][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3524.244531][T23880] __do_fast_syscall_32+0x129/0x180 [ 3523.835772][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3524.244531][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3523.835772][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.244531][T23880] do_SYSENTER_32+0x73/0x90 [ 3523.835772][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3524.244531][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3523.835772][T23882] __do_fast_syscall_32+0x129/0x180 [ 3524.244531][T23880] [ 3523.835772][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3524.244531][T23880] Uninit was stored to memory at: [ 3523.835772][T23882] do_SYSENTER_32+0x73/0x90 [ 3524.244531][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3523.835772][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.244531][T23880] __msan_chain_origin+0x57/0xa0 [ 3523.835772][T23882] [ 3524.244531][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3523.835772][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3524.244531][T23880] get_compat_msghdr+0x108/0x2b0 [ 3523.835772][T23882] do_recvmmsg+0xc2/0x22e0 [ 3524.244531][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3523.835772][T23882] do_recvmmsg+0xc2/0x22e0 [ 3524.244531][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3524.919186][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.919186][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3524.931076][T23880] __do_fast_syscall_32+0x129/0x180 [ 3524.931076][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3524.931076][T23880] do_SYSENTER_32+0x73/0x90 [ 3524.931076][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.931076][T23880] [ 3524.931076][T23880] Uninit was stored to memory at: [ 3524.931076][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3524.931076][T23880] __msan_chain_origin+0x57/0xa0 [ 3524.931076][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3524.931076][T23880] get_compat_msghdr+0x108/0x2b0 [ 3524.931076][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3524.931076][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3524.931076][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.931076][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3524.931076][T23880] __do_fast_syscall_32+0x129/0x180 [ 3524.931076][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3524.931076][T23880] do_SYSENTER_32+0x73/0x90 [ 3524.931076][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.931076][T23880] [ 3524.931076][T23880] Uninit was stored to memory at: [ 3524.931076][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3524.931076][T23880] __msan_chain_origin+0x57/0xa0 [ 3524.931076][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3524.931076][T23880] get_compat_msghdr+0x108/0x2b0 [ 3524.931076][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3524.931076][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3524.931076][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.931076][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3524.931076][T23880] __do_fast_syscall_32+0x129/0x180 [ 3524.931076][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3524.931076][T23880] do_SYSENTER_32+0x73/0x90 [ 3524.931076][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.931076][T23880] [ 3524.931076][T23880] Uninit was stored to memory at: [ 3524.931076][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3524.931076][T23880] __msan_chain_origin+0x57/0xa0 [ 3524.931076][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3524.931076][T23880] get_compat_msghdr+0x108/0x2b0 [ 3524.931076][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3524.931076][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3524.931076][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.931076][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3524.931076][T23880] __do_fast_syscall_32+0x129/0x180 [ 3524.931076][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3524.931076][T23880] do_SYSENTER_32+0x73/0x90 [ 3524.931076][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.931076][T23880] [ 3524.931076][T23880] Uninit was stored to memory at: [ 3524.931076][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3524.931076][T23880] __msan_chain_origin+0x57/0xa0 [ 3524.931076][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3524.931076][T23880] get_compat_msghdr+0x108/0x2b0 [ 3524.931076][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3524.931076][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3524.931076][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.931076][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3524.931076][T23880] __do_fast_syscall_32+0x129/0x180 [ 3524.931076][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3524.931076][T23880] do_SYSENTER_32+0x73/0x90 [ 3524.931076][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.931076][T23880] [ 3524.931076][T23880] Uninit was stored to memory at: [ 3524.931076][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3524.931076][T23880] __msan_chain_origin+0x57/0xa0 [ 3524.931076][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3524.931076][T23880] get_compat_msghdr+0x108/0x2b0 [ 3524.931076][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3524.931076][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3524.931076][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3524.931076][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3524.931076][T23880] __do_fast_syscall_32+0x129/0x180 [ 3524.931076][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3524.931076][T23880] do_SYSENTER_32+0x73/0x90 [ 3524.931076][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3524.931076][T23880] [ 3524.931076][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3524.931076][T23880] do_recvmmsg+0xc2/0x22e0 [ 3524.931076][T23880] do_recvmmsg+0xc2/0x22e0 [ 3525.708765][T23880] not chained 3730000 origins [ 3525.713480][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3525.714621][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3525.714621][T23880] Call Trace: [ 3525.714621][T23880] dump_stack+0x21c/0x280 [ 3525.714621][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3525.714621][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3525.714621][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3525.714621][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3525.714621][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3525.714621][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3525.714621][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3525.714621][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3525.781060][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3525.781060][T23880] ? _copy_from_user+0x201/0x310 [ 3525.781060][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3525.781060][T23880] __msan_chain_origin+0x57/0xa0 [ 3525.781060][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3525.781060][T23880] get_compat_msghdr+0x108/0x2b0 [ 3525.781060][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3525.781060][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3525.781060][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3525.781060][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3525.781060][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3525.781060][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3525.781060][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3525.781060][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3525.781060][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3525.781060][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3525.781060][T23880] __do_fast_syscall_32+0x129/0x180 [ 3525.781060][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3525.781060][T23880] do_SYSENTER_32+0x73/0x90 [ 3525.781060][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3525.781060][T23880] RIP: 0023:0xf7ff3549 [ 3525.781060][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3525.781060][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3525.781060][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3525.781060][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3525.781060][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3525.781060][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3525.781060][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3525.781060][T23880] Uninit was stored to memory at: [ 3525.781060][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3525.781060][T23880] __msan_chain_origin+0x57/0xa0 [ 3525.781060][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3525.781060][T23880] get_compat_msghdr+0x108/0x2b0 [ 3525.781060][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3525.781060][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3525.781060][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3525.781060][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3525.781060][T23880] __do_fast_syscall_32+0x129/0x180 [ 3525.781060][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3525.781060][T23880] do_SYSENTER_32+0x73/0x90 [ 3525.781060][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3525.781060][T23880] [ 3525.781060][T23880] Uninit was stored to memory at: [ 3525.781060][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3525.781060][T23880] __msan_chain_origin+0x57/0xa0 [ 3525.781060][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3525.781060][T23880] get_compat_msghdr+0x108/0x2b0 [ 3525.781060][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3525.781060][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3525.781060][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3525.781060][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3525.781060][T23880] __do_fast_syscall_32+0x129/0x180 [ 3525.781060][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3525.781060][T23880] do_SYSENTER_32+0x73/0x90 [ 3525.781060][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3525.781060][T23880] [ 3525.781060][T23880] Uninit was stored to memory at: [ 3525.781060][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3525.781060][T23880] __msan_chain_origin+0x57/0xa0 [ 3525.781060][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3525.781060][T23880] get_compat_msghdr+0x108/0x2b0 [ 3525.781060][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3525.781060][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3525.781060][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3525.781060][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3525.781060][T23880] __do_fast_syscall_32+0x129/0x180 [ 3525.781060][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3525.781060][T23880] do_SYSENTER_32+0x73/0x90 [ 3525.781060][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3525.781060][T23880] [ 3525.781060][T23880] Uninit was stored to memory at: [ 3525.781060][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3525.781060][T23880] __msan_chain_origin+0x57/0xa0 [ 3525.781060][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3525.781060][T23880] get_compat_msghdr+0x108/0x2b0 [ 3525.781060][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3525.781060][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3525.781060][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3525.781060][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3525.781060][T23880] __do_fast_syscall_32+0x129/0x180 [ 3525.781060][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3525.781060][T23880] do_SYSENTER_32+0x73/0x90 [ 3525.781060][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3525.781060][T23880] [ 3525.781060][T23880] Uninit was stored to memory at: [ 3525.781060][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3525.781060][T23880] __msan_chain_origin+0x57/0xa0 [ 3525.781060][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3525.781060][T23880] get_compat_msghdr+0x108/0x2b0 [ 3525.781060][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3525.781060][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3525.781060][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3525.781060][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3525.781060][T23880] __do_fast_syscall_32+0x129/0x180 [ 3525.781060][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3525.781060][T23880] do_SYSENTER_32+0x73/0x90 [ 3525.781060][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3525.781060][T23880] [ 3525.781060][T23880] Uninit was stored to memory at: [ 3525.781060][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3525.781060][T23880] __msan_chain_origin+0x57/0xa0 [ 3525.781060][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3525.781060][T23880] get_compat_msghdr+0x108/0x2b0 [ 3525.781060][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3525.781060][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3525.781060][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3525.781060][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3525.781060][T23880] __do_fast_syscall_32+0x129/0x180 [ 3525.781060][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3525.781060][T23880] do_SYSENTER_32+0x73/0x90 [ 3525.781060][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3525.781060][T23880] [ 3525.781060][T23880] Uninit was stored to memory at: [ 3525.781060][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3525.781060][T23880] __msan_chain_origin+0x57/0xa0 [ 3525.781060][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3525.781060][T23880] get_compat_msghdr+0x108/0x2b0 [ 3525.781060][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3525.781060][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3525.781060][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3525.781060][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3525.781060][T23880] __do_fast_syscall_32+0x129/0x180 [ 3525.781060][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3525.781060][T23880] do_SYSENTER_32+0x73/0x90 [ 3525.781060][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3525.781060][T23880] [ 3525.781060][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3525.781060][T23880] do_recvmmsg+0xc2/0x22e0 [ 3525.781060][T23880] do_recvmmsg+0xc2/0x22e0 [ 3526.561939][T23882] not chained 3740000 origins [ 3526.564922][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3526.564922][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3526.564922][T23882] Call Trace: [ 3526.564922][T23882] dump_stack+0x21c/0x280 [ 3526.564922][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3526.564922][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3526.564922][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3526.564922][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3526.564922][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3526.564922][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3526.564922][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3526.564922][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3526.564922][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3526.564922][T23882] ? _copy_from_user+0x201/0x310 [ 3526.564922][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3526.564922][T23882] __msan_chain_origin+0x57/0xa0 [ 3526.564922][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3526.564922][T23882] get_compat_msghdr+0x108/0x2b0 [ 3526.564922][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3526.564922][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3526.564922][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3526.564922][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3526.564922][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3526.564922][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3526.564922][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3526.564922][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3526.564922][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3526.564922][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3526.564922][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3526.564922][T23882] __do_fast_syscall_32+0x129/0x180 [ 3526.564922][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3526.564922][T23882] do_SYSENTER_32+0x73/0x90 [ 3526.564922][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3526.564922][T23882] RIP: 0023:0xf7ff3549 [ 3526.564922][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3526.564922][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3526.564922][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3526.564922][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3526.564922][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3526.564922][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3526.564922][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3526.564922][T23882] Uninit was stored to memory at: [ 3526.564922][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3526.564922][T23882] __msan_chain_origin+0x57/0xa0 [ 3526.564922][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3526.564922][T23882] get_compat_msghdr+0x108/0x2b0 [ 3526.564922][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3526.564922][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3526.564922][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3526.564922][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3526.564922][T23882] __do_fast_syscall_32+0x129/0x180 [ 3526.564922][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3526.564922][T23882] do_SYSENTER_32+0x73/0x90 [ 3526.564922][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3526.564922][T23882] [ 3526.564922][T23882] Uninit was stored to memory at: [ 3526.564922][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3526.564922][T23882] __msan_chain_origin+0x57/0xa0 [ 3526.564922][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3526.564922][T23882] get_compat_msghdr+0x108/0x2b0 [ 3526.564922][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3526.564922][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3526.564922][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3526.564922][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3526.564922][T23882] __do_fast_syscall_32+0x129/0x180 [ 3526.564922][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3526.564922][T23882] do_SYSENTER_32+0x73/0x90 [ 3526.564922][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3526.564922][T23882] [ 3526.564922][T23882] Uninit was stored to memory at: [ 3526.564922][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3526.564922][T23882] __msan_chain_origin+0x57/0xa0 [ 3526.564922][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3526.564922][T23882] get_compat_msghdr+0x108/0x2b0 [ 3526.564922][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3526.564922][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3526.564922][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3526.564922][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3526.564922][T23882] __do_fast_syscall_32+0x129/0x180 [ 3526.564922][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3526.564922][T23882] do_SYSENTER_32+0x73/0x90 [ 3526.564922][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3526.564922][T23882] [ 3526.564922][T23882] Uninit was stored to memory at: [ 3526.564922][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3526.564922][T23882] __msan_chain_origin+0x57/0xa0 [ 3526.564922][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3526.564922][T23882] get_compat_msghdr+0x108/0x2b0 [ 3526.564922][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3526.564922][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3526.564922][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3526.564922][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3526.564922][T23882] __do_fast_syscall_32+0x129/0x180 [ 3526.564922][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3526.564922][T23882] do_SYSENTER_32+0x73/0x90 [ 3526.564922][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3526.564922][T23882] [ 3526.564922][T23882] Uninit was stored to memory at: [ 3526.564922][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3526.564922][T23882] __msan_chain_origin+0x57/0xa0 [ 3526.564922][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3526.564922][T23882] get_compat_msghdr+0x108/0x2b0 [ 3526.564922][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3526.564922][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3526.564922][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3526.564922][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3526.564922][T23882] __do_fast_syscall_32+0x129/0x180 [ 3526.564922][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3526.564922][T23882] do_SYSENTER_32+0x73/0x90 [ 3526.564922][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3526.564922][T23882] [ 3526.564922][T23882] Uninit was stored to memory at: [ 3526.564922][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3526.564922][T23882] __msan_chain_origin+0x57/0xa0 [ 3526.564922][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3526.564922][T23882] get_compat_msghdr+0x108/0x2b0 [ 3526.564922][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3526.564922][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3526.564922][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3526.564922][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3526.564922][T23882] __do_fast_syscall_32+0x129/0x180 [ 3526.564922][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3526.564922][T23882] do_SYSENTER_32+0x73/0x90 [ 3526.564922][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3526.564922][T23882] [ 3526.564922][T23882] Uninit was stored to memory at: [ 3526.564922][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3526.564922][T23882] __msan_chain_origin+0x57/0xa0 [ 3526.564922][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3526.564922][T23882] get_compat_msghdr+0x108/0x2b0 [ 3526.564922][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3526.564922][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3526.564922][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3526.564922][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3526.564922][T23882] __do_fast_syscall_32+0x129/0x180 [ 3526.564922][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3526.564922][T23882] do_SYSENTER_32+0x73/0x90 [ 3526.564922][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3526.564922][T23882] [ 3526.564922][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3526.564922][T23882] do_recvmmsg+0xc2/0x22e0 [ 3526.564922][T23882] do_recvmmsg+0xc2/0x22e0 [ 3527.554421][T23880] not chained 3750000 origins [ 3527.554547][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3527.554547][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3527.554547][T23880] Call Trace: [ 3527.554547][T23880] dump_stack+0x21c/0x280 [ 3527.554547][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3527.554547][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3527.554547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3527.554547][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3527.554547][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3527.554547][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3527.554547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3527.554547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3527.554547][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3527.554547][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3527.554547][T23880] ? _copy_from_user+0x201/0x310 [ 3527.554547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3527.554547][T23880] __msan_chain_origin+0x57/0xa0 [ 3527.554547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3527.554547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3527.554547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3527.554547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3527.554547][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3527.554547][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3527.554547][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3527.554547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3527.554547][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3527.554547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3527.554547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3527.554547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3527.554547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3527.554547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3527.554547][T23880] do_SYSENTER_32+0x73/0x90 [ 3527.554547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3527.554547][T23880] RIP: 0023:0xf7ff3549 [ 3527.554547][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3527.554547][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3527.554547][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3527.554547][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3527.554547][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3527.554547][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3527.554547][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3527.554547][T23880] Uninit was stored to memory at: [ 3527.554547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3527.554547][T23880] __msan_chain_origin+0x57/0xa0 [ 3527.554547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3527.554547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3527.554547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3527.554547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3527.554547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3527.554547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3527.554547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3527.554547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3527.554547][T23880] do_SYSENTER_32+0x73/0x90 [ 3527.554547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3527.554547][T23880] [ 3527.554547][T23880] Uninit was stored to memory at: [ 3527.554547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3527.554547][T23880] __msan_chain_origin+0x57/0xa0 [ 3527.554547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3527.554547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3527.554547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3527.554547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3527.554547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3527.554547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3527.554547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3527.554547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3527.554547][T23880] do_SYSENTER_32+0x73/0x90 [ 3527.554547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3527.554547][T23880] [ 3527.554547][T23880] Uninit was stored to memory at: [ 3527.554547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3527.554547][T23880] __msan_chain_origin+0x57/0xa0 [ 3527.554547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3527.554547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3527.554547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3527.554547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3527.554547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3527.554547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3527.554547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3527.554547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3527.554547][T23880] do_SYSENTER_32+0x73/0x90 [ 3527.554547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3527.554547][T23880] [ 3527.554547][T23880] Uninit was stored to memory at: [ 3527.554547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3527.554547][T23880] __msan_chain_origin+0x57/0xa0 [ 3527.554547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3527.554547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3527.554547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3527.554547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3527.554547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3527.554547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3527.554547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3527.554547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3527.554547][T23880] do_SYSENTER_32+0x73/0x90 [ 3527.554547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3527.554547][T23880] [ 3527.554547][T23880] Uninit was stored to memory at: [ 3527.554547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3527.554547][T23880] __msan_chain_origin+0x57/0xa0 [ 3527.554547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3527.554547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3527.554547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3527.554547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3527.554547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3527.554547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3527.554547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3527.554547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3527.554547][T23880] do_SYSENTER_32+0x73/0x90 [ 3527.554547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3527.554547][T23880] [ 3527.554547][T23880] Uninit was stored to memory at: [ 3527.554547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3527.554547][T23880] __msan_chain_origin+0x57/0xa0 [ 3527.554547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3527.554547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3527.554547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3527.554547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3527.554547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3527.554547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3527.554547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3527.554547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3527.554547][T23880] do_SYSENTER_32+0x73/0x90 [ 3527.554547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3527.554547][T23880] [ 3527.554547][T23880] Uninit was stored to memory at: [ 3527.554547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3527.554547][T23880] __msan_chain_origin+0x57/0xa0 [ 3527.554547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3527.554547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3527.554547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3527.554547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3527.554547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3527.554547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3527.554547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3527.554547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3527.554547][T23880] do_SYSENTER_32+0x73/0x90 [ 3527.554547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3527.554547][T23880] [ 3527.554547][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3527.554547][T23880] do_recvmmsg+0xc2/0x22e0 [ 3527.554547][T23880] do_recvmmsg+0xc2/0x22e0 [ 3528.552257][T23880] not chained 3760000 origins [ 3528.554549][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3528.554549][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3528.554549][T23880] Call Trace: [ 3528.554549][T23880] dump_stack+0x21c/0x280 [ 3528.554549][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3528.584819][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3528.584819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3528.584819][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3528.584819][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3528.584819][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3528.584819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3528.584819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3528.584819][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3528.584819][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3528.584819][T23880] ? _copy_from_user+0x201/0x310 [ 3528.584819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3528.584819][T23880] __msan_chain_origin+0x57/0xa0 [ 3528.584819][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3528.584819][T23880] get_compat_msghdr+0x108/0x2b0 [ 3528.584819][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3528.584819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3528.584819][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3528.584819][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3528.584819][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3528.584819][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3528.584819][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3528.584819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3528.584819][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3528.584819][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3528.584819][T23880] __do_fast_syscall_32+0x129/0x180 [ 3528.584819][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3528.584819][T23880] do_SYSENTER_32+0x73/0x90 [ 3528.584819][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3528.584819][T23880] RIP: 0023:0xf7ff3549 [ 3528.584819][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3528.584819][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3528.584819][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3528.584819][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3528.584819][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3528.584819][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3528.584819][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3528.584819][T23880] Uninit was stored to memory at: [ 3528.584819][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3528.584819][T23880] __msan_chain_origin+0x57/0xa0 [ 3528.584819][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3528.584819][T23880] get_compat_msghdr+0x108/0x2b0 [ 3528.584819][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3528.584819][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3528.584819][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3528.584819][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3528.584819][T23880] __do_fast_syscall_32+0x129/0x180 [ 3528.584819][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3528.584819][T23880] do_SYSENTER_32+0x73/0x90 [ 3528.584819][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3528.584819][T23880] [ 3528.584819][T23880] Uninit was stored to memory at: [ 3528.584819][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3528.584819][T23880] __msan_chain_origin+0x57/0xa0 [ 3528.584819][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3528.584819][T23880] get_compat_msghdr+0x108/0x2b0 [ 3528.584819][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3528.584819][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3528.584819][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3528.584819][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3528.584819][T23880] __do_fast_syscall_32+0x129/0x180 [ 3528.584819][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3528.584819][T23880] do_SYSENTER_32+0x73/0x90 [ 3528.584819][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3528.584819][T23880] [ 3528.584819][T23880] Uninit was stored to memory at: [ 3528.584819][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3528.584819][T23880] __msan_chain_origin+0x57/0xa0 [ 3528.584819][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3528.584819][T23880] get_compat_msghdr+0x108/0x2b0 [ 3528.584819][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3528.584819][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3528.584819][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3528.584819][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3528.584819][T23880] __do_fast_syscall_32+0x129/0x180 [ 3528.584819][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3528.584819][T23880] do_SYSENTER_32+0x73/0x90 [ 3528.584819][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3528.584819][T23880] [ 3528.584819][T23880] Uninit was stored to memory at: [ 3528.584819][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3528.584819][T23880] __msan_chain_origin+0x57/0xa0 [ 3528.584819][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3528.584819][T23880] get_compat_msghdr+0x108/0x2b0 [ 3528.584819][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3528.584819][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3528.584819][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3528.584819][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3528.584819][T23880] __do_fast_syscall_32+0x129/0x180 [ 3528.584819][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3528.584819][T23880] do_SYSENTER_32+0x73/0x90 [ 3528.584819][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3528.584819][T23880] [ 3528.584819][T23880] Uninit was stored to memory at: [ 3528.584819][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3528.584819][T23880] __msan_chain_origin+0x57/0xa0 [ 3528.584819][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3528.584819][T23880] get_compat_msghdr+0x108/0x2b0 [ 3528.584819][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3528.584819][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3528.584819][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3528.584819][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3528.584819][T23880] __do_fast_syscall_32+0x129/0x180 [ 3528.584819][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3528.584819][T23880] do_SYSENTER_32+0x73/0x90 [ 3528.584819][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3528.584819][T23880] [ 3528.584819][T23880] Uninit was stored to memory at: [ 3528.584819][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3528.584819][T23880] __msan_chain_origin+0x57/0xa0 [ 3528.584819][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3528.584819][T23880] get_compat_msghdr+0x108/0x2b0 [ 3528.584819][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3528.584819][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3528.584819][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3528.584819][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3528.584819][T23880] __do_fast_syscall_32+0x129/0x180 [ 3528.584819][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3528.584819][T23880] do_SYSENTER_32+0x73/0x90 [ 3528.584819][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3528.584819][T23880] [ 3528.584819][T23880] Uninit was stored to memory at: [ 3528.584819][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3528.584819][T23880] __msan_chain_origin+0x57/0xa0 [ 3528.584819][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3528.584819][T23880] get_compat_msghdr+0x108/0x2b0 [ 3528.584819][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3528.584819][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3528.584819][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3528.584819][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3528.584819][T23880] __do_fast_syscall_32+0x129/0x180 [ 3528.584819][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3528.584819][T23880] do_SYSENTER_32+0x73/0x90 [ 3528.584819][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3528.584819][T23880] [ 3528.584819][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3528.584819][T23880] do_recvmmsg+0xc2/0x22e0 [ 3528.584819][T23880] do_recvmmsg+0xc2/0x22e0 [ 3529.566621][T23880] not chained 3770000 origins [ 3529.571317][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3529.574554][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3529.574554][T23880] Call Trace: [ 3529.574554][T23880] dump_stack+0x21c/0x280 [ 3529.574554][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3529.574554][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3529.574554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3529.574554][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3529.574554][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3529.574554][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3529.574554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3529.574554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3529.574554][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3529.574554][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3529.574554][T23880] ? _copy_from_user+0x201/0x310 [ 3529.574554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3529.574554][T23880] __msan_chain_origin+0x57/0xa0 [ 3529.574554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3529.574554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3529.574554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3529.574554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3529.574554][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3529.574554][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3529.574554][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3529.574554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3529.574554][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3529.574554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3529.574554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3529.574554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3529.574554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3529.574554][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3529.574554][T23880] do_SYSENTER_32+0x73/0x90 [ 3529.574554][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3529.574554][T23880] RIP: 0023:0xf7ff3549 [ 3529.574554][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3529.574554][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3529.574554][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3529.574554][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3529.574554][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3529.574554][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3529.574554][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3529.574554][T23880] Uninit was stored to memory at: [ 3529.574554][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3529.574554][T23880] __msan_chain_origin+0x57/0xa0 [ 3529.574554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3529.574554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3529.574554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3529.574554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3529.574554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3529.574554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3529.574554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3529.574554][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3529.574554][T23880] do_SYSENTER_32+0x73/0x90 [ 3529.574554][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3529.574554][T23880] [ 3529.574554][T23880] Uninit was stored to memory at: [ 3529.574554][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3529.574554][T23880] __msan_chain_origin+0x57/0xa0 [ 3529.574554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3529.574554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3529.574554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3529.574554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3529.574554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3529.574554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3529.574554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3529.574554][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3529.574554][T23880] do_SYSENTER_32+0x73/0x90 [ 3529.574554][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3529.574554][T23880] [ 3529.574554][T23880] Uninit was stored to memory at: [ 3529.574554][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3529.574554][T23880] __msan_chain_origin+0x57/0xa0 [ 3529.574554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3529.574554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3529.574554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3529.574554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3529.574554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3529.574554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3529.574554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3529.574554][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3529.574554][T23880] do_SYSENTER_32+0x73/0x90 [ 3529.574554][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3529.574554][T23880] [ 3529.574554][T23880] Uninit was stored to memory at: [ 3529.574554][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3529.574554][T23880] __msan_chain_origin+0x57/0xa0 [ 3529.574554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3529.574554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3529.574554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3529.574554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3529.574554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3529.574554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3529.574554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3529.574554][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3529.574554][T23880] do_SYSENTER_32+0x73/0x90 [ 3529.574554][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3529.574554][T23880] [ 3529.574554][T23880] Uninit was stored to memory at: [ 3529.574554][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3529.574554][T23880] __msan_chain_origin+0x57/0xa0 [ 3529.574554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3529.574554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3529.574554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3529.574554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3529.574554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3529.574554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3529.574554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3529.574554][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3529.574554][T23880] do_SYSENTER_32+0x73/0x90 [ 3529.574554][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3529.574554][T23880] [ 3529.574554][T23880] Uninit was stored to memory at: [ 3529.574554][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3529.574554][T23880] __msan_chain_origin+0x57/0xa0 [ 3529.574554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3529.574554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3529.574554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3529.574554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3529.574554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3529.574554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3529.574554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3529.574554][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3529.574554][T23880] do_SYSENTER_32+0x73/0x90 [ 3529.574554][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3529.574554][T23880] [ 3529.574554][T23880] Uninit was stored to memory at: [ 3529.574554][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3529.574554][T23880] __msan_chain_origin+0x57/0xa0 [ 3529.574554][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3529.574554][T23880] get_compat_msghdr+0x108/0x2b0 [ 3529.574554][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3529.574554][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3529.574554][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3529.574554][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3529.574554][T23880] __do_fast_syscall_32+0x129/0x180 [ 3529.574554][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3529.574554][T23880] do_SYSENTER_32+0x73/0x90 [ 3529.574554][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3529.574554][T23880] [ 3529.574554][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3529.574554][T23880] do_recvmmsg+0xc2/0x22e0 [ 3529.574554][T23880] do_recvmmsg+0xc2/0x22e0 [ 3530.749805][T23882] not chained 3780000 origins [ 3530.754504][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3530.754609][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3530.754609][T23882] Call Trace: [ 3530.754609][T23882] dump_stack+0x21c/0x280 [ 3530.754609][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3530.754609][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3530.754609][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3530.754609][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3530.798681][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3530.798681][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3530.798681][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3530.798681][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3530.798681][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3530.798681][T23882] ? _copy_from_user+0x201/0x310 [ 3530.798681][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3530.798681][T23882] __msan_chain_origin+0x57/0xa0 [ 3530.798681][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3530.798681][T23882] get_compat_msghdr+0x108/0x2b0 [ 3530.798681][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3530.798681][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3530.798681][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3530.798681][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3530.798681][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3530.798681][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3530.798681][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3530.798681][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3530.798681][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3530.798681][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3530.798681][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3530.798681][T23882] __do_fast_syscall_32+0x129/0x180 [ 3530.798681][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3530.798681][T23882] do_SYSENTER_32+0x73/0x90 [ 3530.798681][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3530.798681][T23882] RIP: 0023:0xf7ff3549 [ 3530.798681][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3530.798681][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3530.798681][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3530.798681][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3530.798681][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3530.798681][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3530.798681][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3530.798681][T23882] Uninit was stored to memory at: [ 3530.798681][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3530.798681][T23882] __msan_chain_origin+0x57/0xa0 [ 3530.798681][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3530.798681][T23882] get_compat_msghdr+0x108/0x2b0 [ 3530.798681][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3530.798681][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3530.798681][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3530.798681][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3530.798681][T23882] __do_fast_syscall_32+0x129/0x180 [ 3530.798681][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3530.798681][T23882] do_SYSENTER_32+0x73/0x90 [ 3530.798681][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3530.798681][T23882] [ 3530.798681][T23882] Uninit was stored to memory at: [ 3530.798681][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3530.798681][T23882] __msan_chain_origin+0x57/0xa0 [ 3530.798681][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3530.798681][T23882] get_compat_msghdr+0x108/0x2b0 [ 3530.798681][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3530.798681][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3530.798681][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3530.798681][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3530.798681][T23882] __do_fast_syscall_32+0x129/0x180 [ 3530.798681][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3530.798681][T23882] do_SYSENTER_32+0x73/0x90 [ 3530.798681][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3530.798681][T23882] [ 3530.798681][T23882] Uninit was stored to memory at: [ 3530.798681][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3530.798681][T23882] __msan_chain_origin+0x57/0xa0 [ 3530.798681][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3530.798681][T23882] get_compat_msghdr+0x108/0x2b0 [ 3530.798681][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3530.798681][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.183485][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.183485][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.183485][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.183485][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.183485][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.183485][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.183485][T23882] [ 3531.183485][T23882] Uninit was stored to memory at: [ 3531.183485][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.183485][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.183485][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.183485][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.183485][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.183485][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.183485][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.183485][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.183485][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.183485][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.183485][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.183485][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.183485][T23882] [ 3531.183485][T23882] Uninit was stored to memory at: [ 3531.183485][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.183485][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.183485][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.183485][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.183485][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.183485][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.183485][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.183485][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.183485][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.183485][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.183485][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.183485][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.183485][T23882] [ 3531.183485][T23882] Uninit was stored to memory at: [ 3531.183485][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.183485][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.183485][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.183485][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.183485][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.183485][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.183485][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.183485][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.183485][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.183485][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.183485][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.183485][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.183485][T23882] [ 3531.183485][T23882] Uninit was stored to memory at: [ 3531.183485][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.183485][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.183485][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.183485][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.183485][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.183485][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.183485][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.183485][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.183485][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.183485][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.183485][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.183485][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.183485][T23882] [ 3531.183485][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3531.183485][T23882] do_recvmmsg+0xc2/0x22e0 [ 3531.183485][T23882] do_recvmmsg+0xc2/0x22e0 [ 3531.577428][T23882] not chained 3790000 origins [ 3531.582401][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3531.584555][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3531.584555][T23882] Call Trace: [ 3531.584555][T23882] dump_stack+0x21c/0x280 [ 3531.584555][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3531.584555][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3531.618008][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3531.618008][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3531.618008][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3531.618008][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3531.618008][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3531.618008][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3531.618008][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3531.618008][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3531.618008][T23882] ? _copy_from_user+0x201/0x310 [ 3531.618008][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3531.618008][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.618008][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.618008][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.618008][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.618008][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3531.618008][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3531.618008][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3531.618008][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3531.618008][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3531.618008][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.618008][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3531.618008][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3531.618008][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.618008][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.618008][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.618008][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.618008][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.618008][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.618008][T23882] RIP: 0023:0xf7ff3549 [ 3531.618008][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3531.618008][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3531.795279][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3531.795279][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3531.795279][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3531.795279][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3531.795279][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3531.795279][T23882] Uninit was stored to memory at: [ 3531.795279][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.795279][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.795279][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.795279][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.795279][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.795279][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.795279][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.795279][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.795279][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.795279][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.795279][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.795279][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.795279][T23882] [ 3531.795279][T23882] Uninit was stored to memory at: [ 3531.795279][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.795279][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.795279][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.795279][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.795279][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.795279][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.795279][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.795279][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.795279][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.795279][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.795279][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.795279][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.795279][T23882] [ 3531.795279][T23882] Uninit was stored to memory at: [ 3531.795279][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.795279][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.795279][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.795279][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.795279][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.795279][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.795279][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.795279][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.795279][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.795279][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.795279][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.795279][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.795279][T23882] [ 3531.795279][T23882] Uninit was stored to memory at: [ 3531.795279][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.795279][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.795279][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.795279][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.795279][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.795279][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.795279][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.795279][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.795279][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.795279][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.795279][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.795279][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.795279][T23882] [ 3531.795279][T23882] Uninit was stored to memory at: [ 3531.795279][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.795279][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.795279][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.795279][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.795279][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.795279][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.795279][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.795279][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.795279][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.795279][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.795279][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.795279][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.795279][T23882] [ 3531.795279][T23882] Uninit was stored to memory at: [ 3531.795279][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.795279][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.795279][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.795279][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.795279][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.795279][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.795279][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.795279][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.795279][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.795279][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.795279][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.795279][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.795279][T23882] [ 3531.795279][T23882] Uninit was stored to memory at: [ 3531.795279][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3531.795279][T23882] __msan_chain_origin+0x57/0xa0 [ 3531.795279][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3531.795279][T23882] get_compat_msghdr+0x108/0x2b0 [ 3531.795279][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3531.795279][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3531.795279][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3531.795279][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3531.795279][T23882] __do_fast_syscall_32+0x129/0x180 [ 3531.795279][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3531.795279][T23882] do_SYSENTER_32+0x73/0x90 [ 3531.795279][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3531.795279][T23882] [ 3531.795279][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3531.795279][T23882] do_recvmmsg+0xc2/0x22e0 [ 3531.795279][T23882] do_recvmmsg+0xc2/0x22e0 [ 3533.705009][T23880] not chained 3800000 origins [ 3533.709714][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3533.714550][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3533.714550][T23880] Call Trace: [ 3533.714550][T23880] dump_stack+0x21c/0x280 [ 3533.734819][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3533.734819][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3533.734819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3533.734819][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3533.734819][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3533.734819][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3533.734819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3533.734819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3533.734819][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3533.734819][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3533.734819][T23880] ? _copy_from_user+0x201/0x310 [ 3533.734819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3533.734819][T23880] __msan_chain_origin+0x57/0xa0 [ 3533.734819][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3533.734819][T23880] get_compat_msghdr+0x108/0x2b0 [ 3533.734819][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3533.734819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3533.734819][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3533.734819][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3533.734819][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3533.734819][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3533.734819][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3533.734819][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3533.734819][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3533.864765][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3533.864765][T23880] __do_fast_syscall_32+0x129/0x180 [ 3533.864765][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3533.864765][T23880] do_SYSENTER_32+0x73/0x90 [ 3533.864765][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3533.864765][T23880] RIP: 0023:0xf7ff3549 [ 3533.864765][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3533.864765][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3533.864765][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3533.864765][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3533.864765][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3533.864765][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3533.864765][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3533.864765][T23880] Uninit was stored to memory at: [ 3533.864765][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3533.864765][T23880] __msan_chain_origin+0x57/0xa0 [ 3533.864765][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3533.864765][T23880] get_compat_msghdr+0x108/0x2b0 [ 3533.864765][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3533.864765][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3533.864765][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3533.864765][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3533.864765][T23880] __do_fast_syscall_32+0x129/0x180 [ 3533.864765][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3533.864765][T23880] do_SYSENTER_32+0x73/0x90 [ 3533.864765][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3533.864765][T23880] [ 3533.864765][T23880] Uninit was stored to memory at: [ 3533.864765][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3533.864765][T23880] __msan_chain_origin+0x57/0xa0 [ 3533.864765][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3533.864765][T23880] get_compat_msghdr+0x108/0x2b0 [ 3533.864765][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3533.864765][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3533.864765][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3533.864765][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3533.864765][T23880] __do_fast_syscall_32+0x129/0x180 [ 3533.864765][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3533.864765][T23880] do_SYSENTER_32+0x73/0x90 [ 3533.864765][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3533.864765][T23880] [ 3533.864765][T23880] Uninit was stored to memory at: [ 3533.864765][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3533.864765][T23880] __msan_chain_origin+0x57/0xa0 [ 3533.864765][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3533.864765][T23880] get_compat_msghdr+0x108/0x2b0 [ 3533.864765][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3533.864765][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3533.864765][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3533.864765][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3533.864765][T23880] __do_fast_syscall_32+0x129/0x180 [ 3533.864765][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3533.864765][T23880] do_SYSENTER_32+0x73/0x90 [ 3533.864765][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3533.864765][T23880] [ 3533.864765][T23880] Uninit was stored to memory at: [ 3534.177414][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3534.177414][T23880] __msan_chain_origin+0x57/0xa0 [ 3534.177414][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3534.177414][T23880] get_compat_msghdr+0x108/0x2b0 [ 3534.177414][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3534.177414][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3534.177414][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.177414][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.177414][T23880] __do_fast_syscall_32+0x129/0x180 [ 3534.177414][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3534.177414][T23880] do_SYSENTER_32+0x73/0x90 [ 3534.177414][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.177414][T23880] [ 3534.177414][T23880] Uninit was stored to memory at: [ 3534.177414][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3534.177414][T23880] __msan_chain_origin+0x57/0xa0 [ 3534.177414][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3534.177414][T23880] get_compat_msghdr+0x108/0x2b0 [ 3534.177414][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3534.177414][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3534.177414][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.177414][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.177414][T23880] __do_fast_syscall_32+0x129/0x180 [ 3534.177414][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3534.177414][T23880] do_SYSENTER_32+0x73/0x90 [ 3534.177414][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.177414][T23880] [ 3534.177414][T23880] Uninit was stored to memory at: [ 3534.177414][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3534.177414][T23880] __msan_chain_origin+0x57/0xa0 [ 3534.177414][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3534.177414][T23880] get_compat_msghdr+0x108/0x2b0 [ 3534.177414][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3534.177414][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3534.177414][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.177414][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.177414][T23880] __do_fast_syscall_32+0x129/0x180 [ 3534.177414][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3534.177414][T23880] do_SYSENTER_32+0x73/0x90 [ 3534.177414][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.177414][T23880] [ 3534.177414][T23880] Uninit was stored to memory at: [ 3534.177414][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3534.177414][T23880] __msan_chain_origin+0x57/0xa0 [ 3534.177414][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3534.177414][T23880] get_compat_msghdr+0x108/0x2b0 [ 3534.177414][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3534.177414][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3534.177414][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.177414][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.177414][T23880] __do_fast_syscall_32+0x129/0x180 [ 3534.177414][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3534.177414][T23880] do_SYSENTER_32+0x73/0x90 [ 3534.177414][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.177414][T23880] [ 3534.177414][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3534.177414][T23880] do_recvmmsg+0xc2/0x22e0 [ 3534.177414][T23880] do_recvmmsg+0xc2/0x22e0 [ 3534.655579][T23882] not chained 3810000 origins [ 3534.660279][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3534.664564][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3534.664564][T23882] Call Trace: [ 3534.664564][T23882] dump_stack+0x21c/0x280 [ 3534.664564][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3534.690447][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3534.690447][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3534.690447][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3534.690447][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3534.690447][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3534.690447][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3534.690447][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3534.690447][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3534.690447][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3534.690447][T23882] ? _copy_from_user+0x201/0x310 [ 3534.690447][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3534.690447][T23882] __msan_chain_origin+0x57/0xa0 [ 3534.690447][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3534.690447][T23882] get_compat_msghdr+0x108/0x2b0 [ 3534.690447][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3534.690447][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3534.690447][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3534.690447][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3534.690447][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3534.690447][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3534.690447][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3534.690447][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3534.808402][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3534.814824][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.814824][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.814824][T23882] __do_fast_syscall_32+0x129/0x180 [ 3534.814824][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3534.814824][T23882] do_SYSENTER_32+0x73/0x90 [ 3534.814824][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.814824][T23882] RIP: 0023:0xf7ff3549 [ 3534.814824][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3534.814824][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3534.814824][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3534.883302][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3534.883302][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3534.883302][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3534.883302][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3534.883302][T23882] Uninit was stored to memory at: [ 3534.883302][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3534.883302][T23882] __msan_chain_origin+0x57/0xa0 [ 3534.883302][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3534.883302][T23882] get_compat_msghdr+0x108/0x2b0 [ 3534.883302][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3534.883302][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3534.883302][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.883302][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.883302][T23882] __do_fast_syscall_32+0x129/0x180 [ 3534.883302][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3534.883302][T23882] do_SYSENTER_32+0x73/0x90 [ 3534.883302][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.883302][T23882] [ 3534.883302][T23882] Uninit was stored to memory at: [ 3534.883302][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3534.883302][T23882] __msan_chain_origin+0x57/0xa0 [ 3534.883302][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3534.883302][T23882] get_compat_msghdr+0x108/0x2b0 [ 3534.883302][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3534.883302][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3534.883302][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.883302][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.883302][T23882] __do_fast_syscall_32+0x129/0x180 [ 3534.883302][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3534.883302][T23882] do_SYSENTER_32+0x73/0x90 [ 3534.883302][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.883302][T23882] [ 3534.883302][T23882] Uninit was stored to memory at: [ 3534.883302][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3534.883302][T23882] __msan_chain_origin+0x57/0xa0 [ 3534.883302][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3534.883302][T23882] get_compat_msghdr+0x108/0x2b0 [ 3534.883302][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3534.883302][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3534.883302][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.883302][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.883302][T23882] __do_fast_syscall_32+0x129/0x180 [ 3534.883302][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3534.883302][T23882] do_SYSENTER_32+0x73/0x90 [ 3534.883302][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.883302][T23882] [ 3534.883302][T23882] Uninit was stored to memory at: [ 3534.883302][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3534.883302][T23882] __msan_chain_origin+0x57/0xa0 [ 3534.883302][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3534.883302][T23882] get_compat_msghdr+0x108/0x2b0 [ 3534.883302][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3534.883302][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3534.883302][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.883302][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.883302][T23882] __do_fast_syscall_32+0x129/0x180 [ 3534.883302][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3534.883302][T23882] do_SYSENTER_32+0x73/0x90 [ 3534.883302][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.883302][T23882] [ 3534.883302][T23882] Uninit was stored to memory at: [ 3534.883302][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3534.883302][T23882] __msan_chain_origin+0x57/0xa0 [ 3534.883302][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3534.883302][T23882] get_compat_msghdr+0x108/0x2b0 [ 3534.883302][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3534.883302][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3534.883302][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.883302][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.883302][T23882] __do_fast_syscall_32+0x129/0x180 [ 3534.883302][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3534.883302][T23882] do_SYSENTER_32+0x73/0x90 [ 3534.883302][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.883302][T23882] [ 3534.883302][T23882] Uninit was stored to memory at: [ 3534.883302][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3534.883302][T23882] __msan_chain_origin+0x57/0xa0 [ 3534.883302][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3534.883302][T23882] get_compat_msghdr+0x108/0x2b0 [ 3534.883302][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3534.883302][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3534.883302][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.883302][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.883302][T23882] __do_fast_syscall_32+0x129/0x180 [ 3534.883302][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3534.883302][T23882] do_SYSENTER_32+0x73/0x90 [ 3534.883302][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.883302][T23882] [ 3534.883302][T23882] Uninit was stored to memory at: [ 3534.883302][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3534.883302][T23882] __msan_chain_origin+0x57/0xa0 [ 3534.883302][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3534.883302][T23882] get_compat_msghdr+0x108/0x2b0 [ 3534.883302][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3534.883302][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3534.883302][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3534.883302][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3534.883302][T23882] __do_fast_syscall_32+0x129/0x180 [ 3534.883302][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3534.883302][T23882] do_SYSENTER_32+0x73/0x90 [ 3534.883302][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3534.883302][T23882] [ 3534.883302][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3534.883302][T23882] do_recvmmsg+0xc2/0x22e0 [ 3534.883302][T23882] do_recvmmsg+0xc2/0x22e0 [ 3535.560324][T23880] not chained 3820000 origins [ 3535.564562][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3535.564562][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3535.564562][T23880] Call Trace: [ 3535.564562][T23880] dump_stack+0x21c/0x280 [ 3535.564562][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3535.564562][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3535.564562][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3535.564562][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3535.564562][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3535.564562][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3535.564562][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3535.564562][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3535.564562][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3535.564562][T23880] ? _copy_from_user+0x201/0x310 [ 3535.564562][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3535.564562][T23880] __msan_chain_origin+0x57/0xa0 [ 3535.564562][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3535.564562][T23880] get_compat_msghdr+0x108/0x2b0 [ 3535.564562][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3535.564562][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3535.564562][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3535.564562][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3535.564562][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3535.564562][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3535.564562][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3535.564562][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3535.564562][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3535.564562][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3535.564562][T23880] __do_fast_syscall_32+0x129/0x180 [ 3535.564562][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3535.564562][T23880] do_SYSENTER_32+0x73/0x90 [ 3535.564562][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3535.564562][T23880] RIP: 0023:0xf7ff3549 [ 3535.564562][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3535.564562][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3535.564562][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3535.564562][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3535.564562][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3535.564562][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3535.564562][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3535.564562][T23880] Uninit was stored to memory at: [ 3535.564562][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3535.564562][T23880] __msan_chain_origin+0x57/0xa0 [ 3535.564562][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3535.564562][T23880] get_compat_msghdr+0x108/0x2b0 [ 3535.564562][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3535.564562][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3535.564562][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3535.564562][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3535.564562][T23880] __do_fast_syscall_32+0x129/0x180 [ 3535.564562][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3535.564562][T23880] do_SYSENTER_32+0x73/0x90 [ 3535.564562][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3535.564562][T23880] [ 3535.564562][T23880] Uninit was stored to memory at: [ 3535.564562][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3535.564562][T23880] __msan_chain_origin+0x57/0xa0 [ 3535.564562][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3535.564562][T23880] get_compat_msghdr+0x108/0x2b0 [ 3535.909874][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3535.914639][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3535.920522][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3535.920522][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3535.920522][T23880] __do_fast_syscall_32+0x129/0x180 [ 3535.920522][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3535.920522][T23880] do_SYSENTER_32+0x73/0x90 [ 3535.920522][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3535.920522][T23880] [ 3535.920522][T23880] Uninit was stored to memory at: [ 3535.920522][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3535.920522][T23880] __msan_chain_origin+0x57/0xa0 [ 3535.920522][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3535.920522][T23880] get_compat_msghdr+0x108/0x2b0 [ 3535.920522][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3535.920522][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3535.920522][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3535.920522][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3535.920522][T23880] __do_fast_syscall_32+0x129/0x180 [ 3535.920522][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3535.920522][T23880] do_SYSENTER_32+0x73/0x90 [ 3535.920522][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.022952][T23880] [ 3536.022952][T23880] Uninit was stored to memory at: [ 3536.022952][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3536.022952][T23880] __msan_chain_origin+0x57/0xa0 [ 3536.022952][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3536.022952][T23880] get_compat_msghdr+0x108/0x2b0 [ 3536.022952][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3536.022952][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3536.022952][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.022952][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.022952][T23880] __do_fast_syscall_32+0x129/0x180 [ 3536.022952][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3536.022952][T23880] do_SYSENTER_32+0x73/0x90 [ 3536.022952][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.022952][T23880] [ 3536.022952][T23880] Uninit was stored to memory at: [ 3536.022952][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3536.022952][T23880] __msan_chain_origin+0x57/0xa0 [ 3536.022952][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3536.022952][T23880] get_compat_msghdr+0x108/0x2b0 [ 3536.022952][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3536.022952][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3536.022952][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.022952][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.022952][T23880] __do_fast_syscall_32+0x129/0x180 [ 3536.022952][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3536.022952][T23880] do_SYSENTER_32+0x73/0x90 [ 3536.022952][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.022952][T23880] [ 3536.022952][T23880] Uninit was stored to memory at: [ 3536.022952][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3536.022952][T23880] __msan_chain_origin+0x57/0xa0 [ 3536.022952][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3536.022952][T23880] get_compat_msghdr+0x108/0x2b0 [ 3536.022952][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3536.022952][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3536.022952][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.022952][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.022952][T23880] __do_fast_syscall_32+0x129/0x180 [ 3536.022952][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3536.022952][T23880] do_SYSENTER_32+0x73/0x90 [ 3536.022952][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.022952][T23880] [ 3536.022952][T23880] Uninit was stored to memory at: [ 3536.022952][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3536.022952][T23880] __msan_chain_origin+0x57/0xa0 [ 3536.022952][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3536.022952][T23880] get_compat_msghdr+0x108/0x2b0 [ 3536.022952][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3536.022952][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3536.022952][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.022952][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.022952][T23880] __do_fast_syscall_32+0x129/0x180 [ 3536.022952][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3536.022952][T23880] do_SYSENTER_32+0x73/0x90 [ 3536.022952][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.022952][T23880] [ 3536.022952][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3536.022952][T23880] do_recvmmsg+0xc2/0x22e0 [ 3536.022952][T23880] do_recvmmsg+0xc2/0x22e0 [ 3536.559083][T23882] not chained 3830000 origins [ 3536.563792][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3536.564551][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3536.564551][T23882] Call Trace: [ 3536.584677][T23882] dump_stack+0x21c/0x280 [ 3536.584677][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3536.594730][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3536.594730][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3536.594730][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3536.594730][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3536.594730][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3536.594730][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3536.594730][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3536.594730][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3536.594730][T23882] ? _copy_from_user+0x201/0x310 [ 3536.594730][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3536.594730][T23882] __msan_chain_origin+0x57/0xa0 [ 3536.594730][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3536.594730][T23882] get_compat_msghdr+0x108/0x2b0 [ 3536.664665][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3536.664665][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3536.664665][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3536.664665][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3536.664665][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3536.664665][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3536.664665][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3536.664665][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3536.664665][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3536.664665][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.664665][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.664665][T23882] __do_fast_syscall_32+0x129/0x180 [ 3536.664665][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3536.734695][T23882] do_SYSENTER_32+0x73/0x90 [ 3536.734695][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.734695][T23882] RIP: 0023:0xf7ff3549 [ 3536.734695][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3536.734695][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3536.734695][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3536.734695][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3536.734695][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3536.734695][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3536.734695][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3536.734695][T23882] Uninit was stored to memory at: [ 3536.734695][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3536.734695][T23882] __msan_chain_origin+0x57/0xa0 [ 3536.734695][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3536.734695][T23882] get_compat_msghdr+0x108/0x2b0 [ 3536.734695][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3536.734695][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3536.734695][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.734695][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.734695][T23882] __do_fast_syscall_32+0x129/0x180 [ 3536.734695][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3536.734695][T23882] do_SYSENTER_32+0x73/0x90 [ 3536.734695][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.734695][T23882] [ 3536.734695][T23882] Uninit was stored to memory at: [ 3536.734695][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3536.734695][T23882] __msan_chain_origin+0x57/0xa0 [ 3536.734695][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3536.734695][T23882] get_compat_msghdr+0x108/0x2b0 [ 3536.734695][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3536.734695][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3536.734695][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.734695][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.734695][T23882] __do_fast_syscall_32+0x129/0x180 [ 3536.734695][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3536.734695][T23882] do_SYSENTER_32+0x73/0x90 [ 3536.734695][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.734695][T23882] [ 3536.734695][T23882] Uninit was stored to memory at: [ 3536.734695][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3536.734695][T23882] __msan_chain_origin+0x57/0xa0 [ 3536.734695][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3536.734695][T23882] get_compat_msghdr+0x108/0x2b0 [ 3536.734695][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3536.734695][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3536.734695][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.734695][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.734695][T23882] __do_fast_syscall_32+0x129/0x180 [ 3536.734695][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3536.734695][T23882] do_SYSENTER_32+0x73/0x90 [ 3536.734695][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.734695][T23882] [ 3536.734695][T23882] Uninit was stored to memory at: [ 3536.734695][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3536.734695][T23882] __msan_chain_origin+0x57/0xa0 [ 3536.734695][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3536.734695][T23882] get_compat_msghdr+0x108/0x2b0 [ 3536.734695][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3536.734695][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3536.734695][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.734695][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.734695][T23882] __do_fast_syscall_32+0x129/0x180 [ 3536.734695][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3536.734695][T23882] do_SYSENTER_32+0x73/0x90 [ 3536.734695][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.734695][T23882] [ 3536.734695][T23882] Uninit was stored to memory at: [ 3536.734695][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3536.734695][T23882] __msan_chain_origin+0x57/0xa0 [ 3536.734695][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3536.734695][T23882] get_compat_msghdr+0x108/0x2b0 [ 3536.734695][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3536.734695][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3536.734695][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.734695][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.734695][T23882] __do_fast_syscall_32+0x129/0x180 [ 3536.734695][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3536.734695][T23882] do_SYSENTER_32+0x73/0x90 [ 3536.734695][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.734695][T23882] [ 3536.734695][T23882] Uninit was stored to memory at: [ 3536.734695][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3536.734695][T23882] __msan_chain_origin+0x57/0xa0 [ 3536.734695][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3536.734695][T23882] get_compat_msghdr+0x108/0x2b0 [ 3536.734695][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3536.734695][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3536.734695][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.734695][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.734695][T23882] __do_fast_syscall_32+0x129/0x180 [ 3536.734695][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3536.734695][T23882] do_SYSENTER_32+0x73/0x90 [ 3536.734695][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.734695][T23882] [ 3536.734695][T23882] Uninit was stored to memory at: [ 3536.734695][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3536.734695][T23882] __msan_chain_origin+0x57/0xa0 [ 3536.734695][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3536.734695][T23882] get_compat_msghdr+0x108/0x2b0 [ 3536.734695][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3536.734695][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3536.734695][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3536.734695][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3536.734695][T23882] __do_fast_syscall_32+0x129/0x180 [ 3536.734695][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3536.734695][T23882] do_SYSENTER_32+0x73/0x90 [ 3536.734695][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3536.734695][T23882] [ 3536.734695][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3536.734695][T23882] do_recvmmsg+0xc2/0x22e0 [ 3536.734695][T23882] do_recvmmsg+0xc2/0x22e0 [ 3537.483236][T23880] not chained 3840000 origins [ 3537.484656][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3537.484656][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3537.504709][T23880] Call Trace: [ 3537.504709][T23880] dump_stack+0x21c/0x280 [ 3537.504709][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3537.504709][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3537.504709][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3537.504709][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3537.504709][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3537.504709][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3537.544766][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3537.544766][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3537.544766][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3537.544766][T23880] ? _copy_from_user+0x201/0x310 [ 3537.544766][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3537.544766][T23880] __msan_chain_origin+0x57/0xa0 [ 3537.544766][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3537.544766][T23880] get_compat_msghdr+0x108/0x2b0 [ 3537.544766][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3537.544766][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3537.544766][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3537.544766][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3537.544766][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3537.544766][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3537.544766][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3537.544766][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3537.544766][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3537.544766][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3537.544766][T23880] __do_fast_syscall_32+0x129/0x180 [ 3537.544766][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3537.544766][T23880] do_SYSENTER_32+0x73/0x90 [ 3537.544766][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3537.544766][T23880] RIP: 0023:0xf7ff3549 [ 3537.544766][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3537.544766][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3537.544766][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3537.544766][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3537.544766][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3537.544766][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3537.544766][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3537.544766][T23880] Uninit was stored to memory at: [ 3537.544766][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3537.544766][T23880] __msan_chain_origin+0x57/0xa0 [ 3537.544766][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3537.544766][T23880] get_compat_msghdr+0x108/0x2b0 [ 3537.544766][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3537.544766][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3537.544766][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3537.544766][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3537.544766][T23880] __do_fast_syscall_32+0x129/0x180 [ 3537.544766][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3537.544766][T23880] do_SYSENTER_32+0x73/0x90 [ 3537.544766][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3537.544766][T23880] [ 3537.544766][T23880] Uninit was stored to memory at: [ 3537.544766][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3537.544766][T23880] __msan_chain_origin+0x57/0xa0 [ 3537.544766][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3537.544766][T23880] get_compat_msghdr+0x108/0x2b0 [ 3537.544766][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3537.544766][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3537.544766][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3537.544766][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3537.544766][T23880] __do_fast_syscall_32+0x129/0x180 [ 3537.544766][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3537.544766][T23880] do_SYSENTER_32+0x73/0x90 [ 3537.544766][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3537.544766][T23880] [ 3537.544766][T23880] Uninit was stored to memory at: [ 3537.544766][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3537.544766][T23880] __msan_chain_origin+0x57/0xa0 [ 3537.544766][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3537.544766][T23880] get_compat_msghdr+0x108/0x2b0 [ 3537.544766][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3537.544766][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3537.544766][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3537.544766][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3537.544766][T23880] __do_fast_syscall_32+0x129/0x180 [ 3537.544766][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3537.544766][T23880] do_SYSENTER_32+0x73/0x90 [ 3537.544766][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3537.544766][T23880] [ 3537.544766][T23880] Uninit was stored to memory at: [ 3537.544766][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3537.544766][T23880] __msan_chain_origin+0x57/0xa0 [ 3537.544766][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3537.544766][T23880] get_compat_msghdr+0x108/0x2b0 [ 3537.544766][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3537.544766][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3537.544766][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3537.544766][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3537.544766][T23880] __do_fast_syscall_32+0x129/0x180 [ 3537.544766][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3537.544766][T23880] do_SYSENTER_32+0x73/0x90 [ 3537.544766][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3537.544766][T23880] [ 3537.544766][T23880] Uninit was stored to memory at: [ 3537.544766][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3537.544766][T23880] __msan_chain_origin+0x57/0xa0 [ 3537.544766][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3537.544766][T23880] get_compat_msghdr+0x108/0x2b0 [ 3537.544766][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3537.544766][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3537.544766][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3537.544766][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3537.544766][T23880] __do_fast_syscall_32+0x129/0x180 [ 3537.544766][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3537.544766][T23880] do_SYSENTER_32+0x73/0x90 [ 3537.544766][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3537.544766][T23880] [ 3537.544766][T23880] Uninit was stored to memory at: [ 3537.544766][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3537.544766][T23880] __msan_chain_origin+0x57/0xa0 [ 3537.544766][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3537.544766][T23880] get_compat_msghdr+0x108/0x2b0 [ 3537.544766][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3537.544766][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3537.544766][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3537.544766][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3537.544766][T23880] __do_fast_syscall_32+0x129/0x180 [ 3537.544766][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3537.544766][T23880] do_SYSENTER_32+0x73/0x90 [ 3537.544766][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3537.544766][T23880] [ 3537.544766][T23880] Uninit was stored to memory at: [ 3537.544766][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3537.544766][T23880] __msan_chain_origin+0x57/0xa0 [ 3537.544766][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3537.544766][T23880] get_compat_msghdr+0x108/0x2b0 [ 3537.544766][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3537.544766][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3537.544766][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3537.544766][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3537.544766][T23880] __do_fast_syscall_32+0x129/0x180 [ 3537.544766][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3537.544766][T23880] do_SYSENTER_32+0x73/0x90 [ 3537.544766][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3537.544766][T23880] [ 3537.544766][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3537.544766][T23880] do_recvmmsg+0xc2/0x22e0 [ 3537.544766][T23880] do_recvmmsg+0xc2/0x22e0 [ 3538.558974][T23880] not chained 3850000 origins [ 3538.563679][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3538.564550][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3538.580233][T23880] Call Trace: [ 3538.580233][T23880] dump_stack+0x21c/0x280 [ 3538.580233][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3538.580233][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3538.580233][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3538.580233][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3538.580233][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3538.580233][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3538.580233][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3538.580233][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3538.580233][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3538.580233][T23880] ? _copy_from_user+0x201/0x310 [ 3538.580233][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3538.580233][T23880] __msan_chain_origin+0x57/0xa0 [ 3538.580233][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3538.580233][T23880] get_compat_msghdr+0x108/0x2b0 [ 3538.580233][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3538.580233][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3538.580233][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3538.580233][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3538.580233][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3538.580233][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3538.580233][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3538.580233][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3538.580233][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3538.580233][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3538.580233][T23880] __do_fast_syscall_32+0x129/0x180 [ 3538.580233][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3538.580233][T23880] do_SYSENTER_32+0x73/0x90 [ 3538.580233][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3538.580233][T23880] RIP: 0023:0xf7ff3549 [ 3538.580233][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3538.580233][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3538.580233][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3538.580233][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3538.580233][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3538.580233][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3538.580233][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3538.580233][T23880] Uninit was stored to memory at: [ 3538.580233][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3538.580233][T23880] __msan_chain_origin+0x57/0xa0 [ 3538.580233][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3538.580233][T23880] get_compat_msghdr+0x108/0x2b0 [ 3538.580233][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3538.580233][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3538.580233][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3538.580233][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3538.580233][T23880] __do_fast_syscall_32+0x129/0x180 [ 3538.580233][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3538.580233][T23880] do_SYSENTER_32+0x73/0x90 [ 3538.580233][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3538.580233][T23880] [ 3538.580233][T23880] Uninit was stored to memory at: [ 3538.580233][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3538.580233][T23880] __msan_chain_origin+0x57/0xa0 [ 3538.580233][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3538.580233][T23880] get_compat_msghdr+0x108/0x2b0 [ 3538.580233][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3538.580233][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3538.580233][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3538.580233][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3538.580233][T23880] __do_fast_syscall_32+0x129/0x180 [ 3538.580233][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3538.580233][T23880] do_SYSENTER_32+0x73/0x90 [ 3538.580233][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3538.580233][T23880] [ 3538.580233][T23880] Uninit was stored to memory at: [ 3538.580233][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3538.580233][T23880] __msan_chain_origin+0x57/0xa0 [ 3538.580233][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3538.580233][T23880] get_compat_msghdr+0x108/0x2b0 [ 3538.580233][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3538.580233][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3538.580233][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3538.580233][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3538.580233][T23880] __do_fast_syscall_32+0x129/0x180 [ 3538.580233][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3538.580233][T23880] do_SYSENTER_32+0x73/0x90 [ 3538.580233][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3538.580233][T23880] [ 3538.580233][T23880] Uninit was stored to memory at: [ 3538.580233][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3538.580233][T23880] __msan_chain_origin+0x57/0xa0 [ 3538.580233][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3538.580233][T23880] get_compat_msghdr+0x108/0x2b0 [ 3538.580233][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3538.580233][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3538.580233][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3538.580233][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3538.580233][T23880] __do_fast_syscall_32+0x129/0x180 [ 3538.580233][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3538.580233][T23880] do_SYSENTER_32+0x73/0x90 [ 3538.580233][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3538.580233][T23880] [ 3538.580233][T23880] Uninit was stored to memory at: [ 3538.580233][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3538.580233][T23880] __msan_chain_origin+0x57/0xa0 [ 3538.580233][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3538.580233][T23880] get_compat_msghdr+0x108/0x2b0 [ 3538.580233][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3538.580233][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3538.580233][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3538.580233][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3538.580233][T23880] __do_fast_syscall_32+0x129/0x180 [ 3538.580233][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3538.580233][T23880] do_SYSENTER_32+0x73/0x90 [ 3538.580233][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3538.580233][T23880] [ 3538.580233][T23880] Uninit was stored to memory at: [ 3538.580233][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3538.580233][T23880] __msan_chain_origin+0x57/0xa0 [ 3538.580233][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3538.580233][T23880] get_compat_msghdr+0x108/0x2b0 [ 3538.580233][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3538.580233][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3538.580233][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3538.580233][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3538.580233][T23880] __do_fast_syscall_32+0x129/0x180 [ 3538.580233][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3538.580233][T23880] do_SYSENTER_32+0x73/0x90 [ 3538.580233][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3538.580233][T23880] [ 3538.580233][T23880] Uninit was stored to memory at: [ 3538.580233][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3538.580233][T23880] __msan_chain_origin+0x57/0xa0 [ 3538.580233][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3538.580233][T23880] get_compat_msghdr+0x108/0x2b0 [ 3538.580233][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3538.580233][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3538.580233][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3538.580233][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3538.580233][T23880] __do_fast_syscall_32+0x129/0x180 [ 3538.580233][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3538.580233][T23880] do_SYSENTER_32+0x73/0x90 [ 3538.580233][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3538.580233][T23880] [ 3539.305159][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3539.305159][T23880] do_recvmmsg+0xc2/0x22e0 [ 3539.305159][T23880] do_recvmmsg+0xc2/0x22e0 [ 3539.378325][T23880] not chained 3860000 origins [ 3539.383022][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3539.384546][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3539.394635][T23880] Call Trace: [ 3539.394635][T23880] dump_stack+0x21c/0x280 [ 3539.394635][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3539.414657][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3539.414657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3539.414657][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3539.414657][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3539.414657][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3539.414657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3539.414657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3539.414657][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3539.414657][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3539.414657][T23880] ? _copy_from_user+0x201/0x310 [ 3539.414657][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3539.414657][T23880] __msan_chain_origin+0x57/0xa0 [ 3539.414657][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3539.484682][T23880] get_compat_msghdr+0x108/0x2b0 [ 3539.484682][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3539.484682][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3539.484682][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3539.484682][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3539.484682][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3539.484682][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3539.484682][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3539.484682][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3539.484682][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3539.484682][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3539.484682][T23880] __do_fast_syscall_32+0x129/0x180 [ 3539.484682][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3539.484682][T23880] do_SYSENTER_32+0x73/0x90 [ 3539.484682][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3539.484682][T23880] RIP: 0023:0xf7ff3549 [ 3539.484682][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3539.484682][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3539.484682][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3539.484682][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3539.484682][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3539.484682][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3539.484682][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3539.484682][T23880] Uninit was stored to memory at: [ 3539.484682][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3539.484682][T23880] __msan_chain_origin+0x57/0xa0 [ 3539.484682][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3539.484682][T23880] get_compat_msghdr+0x108/0x2b0 [ 3539.484682][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3539.484682][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3539.484682][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3539.484682][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3539.484682][T23880] __do_fast_syscall_32+0x129/0x180 [ 3539.484682][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3539.484682][T23880] do_SYSENTER_32+0x73/0x90 [ 3539.484682][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3539.484682][T23880] [ 3539.484682][T23880] Uninit was stored to memory at: [ 3539.484682][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3539.484682][T23880] __msan_chain_origin+0x57/0xa0 [ 3539.484682][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3539.484682][T23880] get_compat_msghdr+0x108/0x2b0 [ 3539.484682][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3539.484682][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3539.484682][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3539.484682][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3539.484682][T23880] __do_fast_syscall_32+0x129/0x180 [ 3539.484682][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3539.484682][T23880] do_SYSENTER_32+0x73/0x90 [ 3539.484682][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3539.484682][T23880] [ 3539.484682][T23880] Uninit was stored to memory at: [ 3539.484682][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3539.484682][T23880] __msan_chain_origin+0x57/0xa0 [ 3539.484682][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3539.484682][T23880] get_compat_msghdr+0x108/0x2b0 [ 3539.484682][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3539.484682][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3539.484682][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3539.484682][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3539.484682][T23880] __do_fast_syscall_32+0x129/0x180 [ 3539.484682][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3539.484682][T23880] do_SYSENTER_32+0x73/0x90 [ 3539.484682][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3539.484682][T23880] [ 3539.484682][T23880] Uninit was stored to memory at: [ 3539.484682][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3539.484682][T23880] __msan_chain_origin+0x57/0xa0 [ 3539.484682][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3539.484682][T23880] get_compat_msghdr+0x108/0x2b0 [ 3539.484682][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3539.484682][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3539.484682][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3539.484682][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3539.484682][T23880] __do_fast_syscall_32+0x129/0x180 [ 3539.484682][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3539.484682][T23880] do_SYSENTER_32+0x73/0x90 [ 3539.484682][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3539.484682][T23880] [ 3539.484682][T23880] Uninit was stored to memory at: [ 3539.484682][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3539.484682][T23880] __msan_chain_origin+0x57/0xa0 [ 3539.484682][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3539.484682][T23880] get_compat_msghdr+0x108/0x2b0 [ 3539.484682][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3539.484682][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3539.484682][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3539.484682][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3539.484682][T23880] __do_fast_syscall_32+0x129/0x180 [ 3539.484682][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3539.484682][T23880] do_SYSENTER_32+0x73/0x90 [ 3539.484682][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3539.484682][T23880] [ 3539.484682][T23880] Uninit was stored to memory at: [ 3539.484682][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3539.484682][T23880] __msan_chain_origin+0x57/0xa0 [ 3539.484682][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3539.484682][T23880] get_compat_msghdr+0x108/0x2b0 [ 3539.484682][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3539.484682][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3539.484682][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3539.484682][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3539.484682][T23880] __do_fast_syscall_32+0x129/0x180 [ 3539.484682][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3539.484682][T23880] do_SYSENTER_32+0x73/0x90 [ 3539.484682][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3539.484682][T23880] [ 3539.484682][T23880] Uninit was stored to memory at: [ 3539.484682][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3539.484682][T23880] __msan_chain_origin+0x57/0xa0 [ 3539.484682][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3539.484682][T23880] get_compat_msghdr+0x108/0x2b0 [ 3539.484682][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3539.484682][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3539.484682][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3539.484682][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3539.484682][T23880] __do_fast_syscall_32+0x129/0x180 [ 3539.484682][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3539.484682][T23880] do_SYSENTER_32+0x73/0x90 [ 3539.484682][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3539.484682][T23880] [ 3539.484682][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3539.484682][T23880] do_recvmmsg+0xc2/0x22e0 [ 3539.484682][T23880] do_recvmmsg+0xc2/0x22e0 [ 3540.442707][T23882] not chained 3870000 origins [ 3540.444560][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3540.444560][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3540.444560][T23882] Call Trace: [ 3540.444560][T23882] dump_stack+0x21c/0x280 [ 3540.444560][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3540.444560][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3540.444560][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3540.444560][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3540.444560][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3540.444560][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3540.444560][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3540.444560][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3540.444560][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3540.444560][T23882] ? _copy_from_user+0x201/0x310 [ 3540.526846][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3540.526846][T23882] __msan_chain_origin+0x57/0xa0 [ 3540.526846][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3540.526846][T23882] get_compat_msghdr+0x108/0x2b0 [ 3540.526846][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3540.526846][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3540.526846][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3540.526846][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3540.526846][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3540.526846][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3540.526846][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3540.526846][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3540.526846][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3540.526846][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.526846][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.526846][T23882] __do_fast_syscall_32+0x129/0x180 [ 3540.526846][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3540.526846][T23882] do_SYSENTER_32+0x73/0x90 [ 3540.526846][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.526846][T23882] RIP: 0023:0xf7ff3549 [ 3540.526846][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3540.526846][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3540.526846][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3540.526846][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3540.526846][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3540.526846][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3540.526846][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3540.526846][T23882] Uninit was stored to memory at: [ 3540.526846][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3540.526846][T23882] __msan_chain_origin+0x57/0xa0 [ 3540.526846][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3540.526846][T23882] get_compat_msghdr+0x108/0x2b0 [ 3540.526846][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3540.526846][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3540.526846][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.526846][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.526846][T23882] __do_fast_syscall_32+0x129/0x180 [ 3540.526846][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3540.526846][T23882] do_SYSENTER_32+0x73/0x90 [ 3540.526846][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.526846][T23882] [ 3540.526846][T23882] Uninit was stored to memory at: [ 3540.526846][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3540.526846][T23882] __msan_chain_origin+0x57/0xa0 [ 3540.526846][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3540.526846][T23882] get_compat_msghdr+0x108/0x2b0 [ 3540.526846][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3540.526846][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3540.526846][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.526846][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.526846][T23882] __do_fast_syscall_32+0x129/0x180 [ 3540.526846][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3540.526846][T23882] do_SYSENTER_32+0x73/0x90 [ 3540.526846][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.526846][T23882] [ 3540.526846][T23882] Uninit was stored to memory at: [ 3540.526846][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3540.848669][T23880] not chained 3880000 origins [ 3540.526846][T23882] __msan_chain_origin+0x57/0xa0 [ 3540.854529][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3540.526846][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3540.854529][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3540.526846][T23882] get_compat_msghdr+0x108/0x2b0 [ 3540.854529][T23880] Call Trace: [ 3540.526846][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3540.854529][T23880] dump_stack+0x21c/0x280 [ 3540.526846][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3540.854529][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3540.526846][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.854529][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3540.526846][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.854529][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3540.526846][T23882] __do_fast_syscall_32+0x129/0x180 [ 3540.854529][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3540.526846][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3540.854529][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3540.526846][T23882] do_SYSENTER_32+0x73/0x90 [ 3540.854529][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3540.526846][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.854529][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3540.526846][T23882] [ 3540.854529][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3540.526846][T23882] Uninit was stored to memory at: [ 3540.854529][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3540.526846][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3540.854529][T23880] ? _copy_from_user+0x201/0x310 [ 3540.526846][T23882] __msan_chain_origin+0x57/0xa0 [ 3540.854529][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3540.526846][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3540.854529][T23880] __msan_chain_origin+0x57/0xa0 [ 3540.526846][T23882] get_compat_msghdr+0x108/0x2b0 [ 3540.854529][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3540.526846][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3540.854529][T23880] get_compat_msghdr+0x108/0x2b0 [ 3540.526846][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3540.854529][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3540.526846][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.854529][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3540.526846][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.854529][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3540.526846][T23882] __do_fast_syscall_32+0x129/0x180 [ 3540.854529][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3540.526846][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3540.854529][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3540.526846][T23882] do_SYSENTER_32+0x73/0x90 [ 3540.854529][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3540.526846][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.854529][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3540.526846][T23882] [ 3540.854529][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3540.854529][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.526846][T23882] Uninit was stored to memory at: [ 3540.854529][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.526846][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3540.854529][T23880] __do_fast_syscall_32+0x129/0x180 [ 3540.526846][T23882] __msan_chain_origin+0x57/0xa0 [ 3540.854529][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3540.526846][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3540.854529][T23880] do_SYSENTER_32+0x73/0x90 [ 3540.526846][T23882] get_compat_msghdr+0x108/0x2b0 [ 3540.854529][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.526846][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3540.854529][T23880] RIP: 0023:0xf7ff3549 [ 3540.526846][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3540.854529][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3540.526846][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.854529][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3540.526846][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.854529][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3540.526846][T23882] __do_fast_syscall_32+0x129/0x180 [ 3540.854529][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3540.526846][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3540.854529][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3540.526846][T23882] do_SYSENTER_32+0x73/0x90 [ 3540.854529][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3540.526846][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.854529][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3540.526846][T23882] [ 3540.854529][T23880] Uninit was stored to memory at: [ 3540.526846][T23882] Uninit was stored to memory at: [ 3540.854529][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3540.526846][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3540.854529][T23880] __msan_chain_origin+0x57/0xa0 [ 3540.526846][T23882] __msan_chain_origin+0x57/0xa0 [ 3540.854529][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3540.526846][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3540.854529][T23880] get_compat_msghdr+0x108/0x2b0 [ 3540.526846][T23882] get_compat_msghdr+0x108/0x2b0 [ 3540.854529][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3540.526846][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3540.854529][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3540.526846][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3540.854529][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.526846][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.854529][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.526846][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.854529][T23880] __do_fast_syscall_32+0x129/0x180 [ 3540.526846][T23882] __do_fast_syscall_32+0x129/0x180 [ 3540.854529][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3540.526846][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3540.854529][T23880] do_SYSENTER_32+0x73/0x90 [ 3540.526846][T23882] do_SYSENTER_32+0x73/0x90 [ 3540.854529][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.526846][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.526846][T23882] [ 3540.854529][T23880] [ 3540.526846][T23882] Uninit was stored to memory at: [ 3540.854529][T23880] Uninit was stored to memory at: [ 3540.526846][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3540.854529][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3540.526846][T23882] __msan_chain_origin+0x57/0xa0 [ 3540.854529][T23880] __msan_chain_origin+0x57/0xa0 [ 3540.526846][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3540.854529][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3540.526846][T23882] get_compat_msghdr+0x108/0x2b0 [ 3540.854529][T23880] get_compat_msghdr+0x108/0x2b0 [ 3540.526846][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3540.854529][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3540.526846][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3540.854529][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3540.526846][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.854529][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3540.526846][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.854529][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3540.526846][T23882] __do_fast_syscall_32+0x129/0x180 [ 3540.854529][T23880] __do_fast_syscall_32+0x129/0x180 [ 3540.526846][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3540.854529][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3540.526846][T23882] do_SYSENTER_32+0x73/0x90 [ 3540.854529][T23880] do_SYSENTER_32+0x73/0x90 [ 3540.526846][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.854529][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3540.854529][T23880] [ 3540.526846][T23882] [ 3540.854529][T23880] Uninit was stored to memory at: [ 3540.526846][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3540.854529][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3540.526846][T23882] do_recvmmsg+0xc2/0x22e0 [ 3540.854529][T23880] __msan_chain_origin+0x57/0xa0 [ 3540.526846][T23882] do_recvmmsg+0xc2/0x22e0 [ 3540.854529][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3541.608246][T23880] get_compat_msghdr+0x108/0x2b0 [ 3541.625076][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3541.625076][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3541.625076][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3541.640773][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3541.640773][T23880] __do_fast_syscall_32+0x129/0x180 [ 3541.640773][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3541.640773][T23880] do_SYSENTER_32+0x73/0x90 [ 3541.640773][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3541.640773][T23880] [ 3541.640773][T23880] Uninit was stored to memory at: [ 3541.640773][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3541.640773][T23880] __msan_chain_origin+0x57/0xa0 [ 3541.640773][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3541.640773][T23880] get_compat_msghdr+0x108/0x2b0 [ 3541.640773][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3541.640773][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3541.640773][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3541.640773][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3541.640773][T23880] __do_fast_syscall_32+0x129/0x180 [ 3541.640773][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3541.640773][T23880] do_SYSENTER_32+0x73/0x90 [ 3541.640773][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3541.640773][T23880] [ 3541.640773][T23880] Uninit was stored to memory at: [ 3541.640773][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3541.640773][T23880] __msan_chain_origin+0x57/0xa0 [ 3541.640773][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3541.640773][T23880] get_compat_msghdr+0x108/0x2b0 [ 3541.640773][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3541.640773][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3541.640773][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3541.640773][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3541.640773][T23880] __do_fast_syscall_32+0x129/0x180 [ 3541.640773][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3541.640773][T23880] do_SYSENTER_32+0x73/0x90 [ 3541.640773][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3541.640773][T23880] [ 3541.640773][T23880] Uninit was stored to memory at: [ 3541.640773][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3541.640773][T23880] __msan_chain_origin+0x57/0xa0 [ 3541.640773][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3541.640773][T23880] get_compat_msghdr+0x108/0x2b0 [ 3541.640773][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3541.640773][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3541.640773][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3541.640773][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3541.640773][T23880] __do_fast_syscall_32+0x129/0x180 [ 3541.864832][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3541.864832][T23880] do_SYSENTER_32+0x73/0x90 [ 3541.864832][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3541.864832][T23880] [ 3541.864832][T23880] Uninit was stored to memory at: [ 3541.864832][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3541.864832][T23880] __msan_chain_origin+0x57/0xa0 [ 3541.864832][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3541.864832][T23880] get_compat_msghdr+0x108/0x2b0 [ 3541.864832][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3541.864832][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3541.864832][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3541.864832][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3541.864832][T23880] __do_fast_syscall_32+0x129/0x180 [ 3541.864832][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3541.864832][T23880] do_SYSENTER_32+0x73/0x90 [ 3541.864832][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3541.864832][T23880] [ 3541.864832][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3541.864832][T23880] do_recvmmsg+0xc2/0x22e0 [ 3541.864832][T23880] do_recvmmsg+0xc2/0x22e0 [ 3542.237454][T23880] not chained 3890000 origins [ 3542.242154][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3542.244548][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3542.244548][T23880] Call Trace: [ 3542.244548][T23880] dump_stack+0x21c/0x280 [ 3542.244548][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3542.244548][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3542.244548][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3542.244548][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3542.244548][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3542.244548][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3542.244548][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3542.244548][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3542.244548][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3542.314752][T23880] ? _copy_from_user+0x201/0x310 [ 3542.314752][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3542.314752][T23880] __msan_chain_origin+0x57/0xa0 [ 3542.314752][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3542.314752][T23880] get_compat_msghdr+0x108/0x2b0 [ 3542.314752][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3542.314752][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3542.314752][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3542.314752][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3542.314752][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3542.314752][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3542.314752][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3542.314752][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3542.384744][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3542.384744][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3542.384744][T23880] __do_fast_syscall_32+0x129/0x180 [ 3542.384744][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3542.384744][T23880] do_SYSENTER_32+0x73/0x90 [ 3542.384744][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3542.384744][T23880] RIP: 0023:0xf7ff3549 [ 3542.384744][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3542.384744][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3542.384744][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3542.384744][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3542.384744][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3542.384744][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3542.384744][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3542.384744][T23880] Uninit was stored to memory at: [ 3542.384744][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3542.384744][T23880] __msan_chain_origin+0x57/0xa0 [ 3542.384744][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3542.384744][T23880] get_compat_msghdr+0x108/0x2b0 [ 3542.384744][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3542.384744][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3542.384744][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3542.384744][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3542.384744][T23880] __do_fast_syscall_32+0x129/0x180 [ 3542.384744][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3542.384744][T23880] do_SYSENTER_32+0x73/0x90 [ 3542.384744][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3542.384744][T23880] [ 3542.384744][T23880] Uninit was stored to memory at: [ 3542.384744][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3542.384744][T23880] __msan_chain_origin+0x57/0xa0 [ 3542.384744][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3542.384744][T23880] get_compat_msghdr+0x108/0x2b0 [ 3542.384744][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3542.384744][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3542.384744][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3542.384744][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3542.384744][T23880] __do_fast_syscall_32+0x129/0x180 [ 3542.384744][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3542.384744][T23880] do_SYSENTER_32+0x73/0x90 [ 3542.384744][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3542.384744][T23880] [ 3542.384744][T23880] Uninit was stored to memory at: [ 3542.384744][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3542.384744][T23880] __msan_chain_origin+0x57/0xa0 [ 3542.384744][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3542.384744][T23880] get_compat_msghdr+0x108/0x2b0 [ 3542.384744][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3542.384744][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3542.384744][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3542.384744][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3542.384744][T23880] __do_fast_syscall_32+0x129/0x180 [ 3542.384744][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3542.384744][T23880] do_SYSENTER_32+0x73/0x90 [ 3542.384744][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3542.384744][T23880] [ 3542.384744][T23880] Uninit was stored to memory at: [ 3542.384744][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3542.384744][T23880] __msan_chain_origin+0x57/0xa0 [ 3542.384744][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3542.384744][T23880] get_compat_msghdr+0x108/0x2b0 [ 3542.384744][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3542.384744][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3542.384744][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3542.384744][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3542.384744][T23880] __do_fast_syscall_32+0x129/0x180 [ 3542.384744][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3542.384744][T23880] do_SYSENTER_32+0x73/0x90 [ 3542.384744][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3542.384744][T23880] [ 3542.384744][T23880] Uninit was stored to memory at: [ 3542.384744][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3542.384744][T23880] __msan_chain_origin+0x57/0xa0 [ 3542.384744][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3542.384744][T23880] get_compat_msghdr+0x108/0x2b0 [ 3542.384744][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3542.384744][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3542.384744][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3542.384744][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3542.384744][T23880] __do_fast_syscall_32+0x129/0x180 [ 3542.384744][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3542.384744][T23880] do_SYSENTER_32+0x73/0x90 [ 3542.384744][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3542.384744][T23880] [ 3542.384744][T23880] Uninit was stored to memory at: [ 3542.384744][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3542.384744][T23880] __msan_chain_origin+0x57/0xa0 [ 3542.384744][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3542.384744][T23880] get_compat_msghdr+0x108/0x2b0 [ 3542.384744][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3542.384744][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3542.384744][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3542.384744][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3542.384744][T23880] __do_fast_syscall_32+0x129/0x180 [ 3542.384744][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3542.384744][T23880] do_SYSENTER_32+0x73/0x90 [ 3542.384744][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3542.384744][T23880] [ 3542.384744][T23880] Uninit was stored to memory at: [ 3542.384744][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3542.384744][T23880] __msan_chain_origin+0x57/0xa0 [ 3542.384744][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3542.384744][T23880] get_compat_msghdr+0x108/0x2b0 [ 3542.384744][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3542.384744][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3542.384744][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3542.384744][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3542.384744][T23880] __do_fast_syscall_32+0x129/0x180 [ 3542.384744][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3542.384744][T23880] do_SYSENTER_32+0x73/0x90 [ 3542.384744][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3542.384744][T23880] [ 3542.384744][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3542.384744][T23880] do_recvmmsg+0xc2/0x22e0 [ 3542.384744][T23880] do_recvmmsg+0xc2/0x22e0 [ 3543.037200][T23880] not chained 3900000 origins [ 3543.041904][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3543.044550][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3543.044550][T23880] Call Trace: [ 3543.044550][T23880] dump_stack+0x21c/0x280 [ 3543.044550][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3543.044550][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3543.044550][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3543.044550][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3543.044550][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3543.044550][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3543.044550][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3543.044550][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3543.044550][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3543.044550][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3543.044550][T23880] ? _copy_from_user+0x201/0x310 [ 3543.044550][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3543.044550][T23880] __msan_chain_origin+0x57/0xa0 [ 3543.044550][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3543.044550][T23880] get_compat_msghdr+0x108/0x2b0 [ 3543.044550][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3543.044550][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3543.154800][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3543.154800][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3543.154800][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3543.154800][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3543.154800][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3543.154800][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3543.154800][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3543.154800][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3543.154800][T23880] __do_fast_syscall_32+0x129/0x180 [ 3543.154800][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3543.154800][T23880] do_SYSENTER_32+0x73/0x90 [ 3543.154800][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3543.154800][T23880] RIP: 0023:0xf7ff3549 [ 3543.224762][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3543.224762][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3543.224762][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3543.224762][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3543.224762][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3543.224762][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3543.224762][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3543.224762][T23880] Uninit was stored to memory at: [ 3543.224762][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3543.224762][T23880] __msan_chain_origin+0x57/0xa0 [ 3543.224762][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3543.224762][T23880] get_compat_msghdr+0x108/0x2b0 [ 3543.224762][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3543.224762][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3543.224762][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3543.224762][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3543.224762][T23880] __do_fast_syscall_32+0x129/0x180 [ 3543.224762][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3543.224762][T23880] do_SYSENTER_32+0x73/0x90 [ 3543.224762][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3543.224762][T23880] [ 3543.224762][T23880] Uninit was stored to memory at: [ 3543.224762][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3543.224762][T23880] __msan_chain_origin+0x57/0xa0 [ 3543.224762][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3543.224762][T23880] get_compat_msghdr+0x108/0x2b0 [ 3543.224762][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3543.224762][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3543.224762][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3543.224762][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3543.224762][T23880] __do_fast_syscall_32+0x129/0x180 [ 3543.224762][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3543.224762][T23880] do_SYSENTER_32+0x73/0x90 [ 3543.224762][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3543.224762][T23880] [ 3543.224762][T23880] Uninit was stored to memory at: [ 3543.224762][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3543.224762][T23880] __msan_chain_origin+0x57/0xa0 [ 3543.224762][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3543.224762][T23880] get_compat_msghdr+0x108/0x2b0 [ 3543.224762][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3543.224762][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3543.224762][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3543.224762][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3543.224762][T23880] __do_fast_syscall_32+0x129/0x180 [ 3543.224762][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3543.224762][T23880] do_SYSENTER_32+0x73/0x90 [ 3543.224762][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3543.224762][T23880] [ 3543.224762][T23880] Uninit was stored to memory at: [ 3543.224762][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3543.224762][T23880] __msan_chain_origin+0x57/0xa0 [ 3543.224762][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3543.224762][T23880] get_compat_msghdr+0x108/0x2b0 [ 3543.224762][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3543.224762][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3543.224762][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3543.224762][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3543.224762][T23880] __do_fast_syscall_32+0x129/0x180 [ 3543.224762][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3543.224762][T23880] do_SYSENTER_32+0x73/0x90 [ 3543.224762][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3543.224762][T23880] [ 3543.224762][T23880] Uninit was stored to memory at: [ 3543.224762][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3543.224762][T23880] __msan_chain_origin+0x57/0xa0 [ 3543.224762][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3543.224762][T23880] get_compat_msghdr+0x108/0x2b0 [ 3543.224762][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3543.224762][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3543.224762][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3543.224762][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3543.224762][T23880] __do_fast_syscall_32+0x129/0x180 [ 3543.224762][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3543.224762][T23880] do_SYSENTER_32+0x73/0x90 [ 3543.224762][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3543.224762][T23880] [ 3543.224762][T23880] Uninit was stored to memory at: [ 3543.224762][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3543.224762][T23880] __msan_chain_origin+0x57/0xa0 [ 3543.224762][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3543.224762][T23880] get_compat_msghdr+0x108/0x2b0 [ 3543.224762][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3543.224762][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3543.224762][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3543.224762][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3543.224762][T23880] __do_fast_syscall_32+0x129/0x180 [ 3543.224762][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3543.224762][T23880] do_SYSENTER_32+0x73/0x90 [ 3543.224762][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3543.224762][T23880] [ 3543.224762][T23880] Uninit was stored to memory at: [ 3543.224762][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3543.224762][T23880] __msan_chain_origin+0x57/0xa0 [ 3543.224762][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3543.224762][T23880] get_compat_msghdr+0x108/0x2b0 [ 3543.224762][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3543.224762][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3543.224762][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3543.224762][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3543.224762][T23880] __do_fast_syscall_32+0x129/0x180 [ 3543.224762][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3543.224762][T23880] do_SYSENTER_32+0x73/0x90 [ 3543.224762][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3543.224762][T23880] [ 3543.224762][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3543.224762][T23880] do_recvmmsg+0xc2/0x22e0 [ 3543.224762][T23880] do_recvmmsg+0xc2/0x22e0 [ 3544.171144][T23880] not chained 3910000 origins [ 3544.174560][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3544.174560][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3544.174560][T23880] Call Trace: [ 3544.174560][T23880] dump_stack+0x21c/0x280 [ 3544.174560][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3544.174560][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3544.213263][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3544.213263][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3544.213263][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3544.213263][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3544.213263][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3544.213263][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3544.213263][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3544.213263][T23880] ? _copy_from_user+0x201/0x310 [ 3544.213263][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3544.213263][T23880] __msan_chain_origin+0x57/0xa0 [ 3544.213263][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3544.213263][T23880] get_compat_msghdr+0x108/0x2b0 [ 3544.213263][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3544.213263][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3544.213263][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3544.213263][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3544.213263][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3544.213263][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3544.213263][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3544.213263][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3544.213263][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3544.213263][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3544.213263][T23880] __do_fast_syscall_32+0x129/0x180 [ 3544.213263][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3544.213263][T23880] do_SYSENTER_32+0x73/0x90 [ 3544.213263][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3544.213263][T23880] RIP: 0023:0xf7ff3549 [ 3544.213263][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3544.213263][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3544.213263][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3544.213263][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3544.213263][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3544.213263][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3544.213263][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3544.213263][T23880] Uninit was stored to memory at: [ 3544.213263][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3544.213263][T23880] __msan_chain_origin+0x57/0xa0 [ 3544.213263][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3544.213263][T23880] get_compat_msghdr+0x108/0x2b0 [ 3544.213263][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3544.213263][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3544.213263][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3544.213263][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3544.213263][T23880] __do_fast_syscall_32+0x129/0x180 [ 3544.213263][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3544.213263][T23880] do_SYSENTER_32+0x73/0x90 [ 3544.213263][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3544.213263][T23880] [ 3544.213263][T23880] Uninit was stored to memory at: [ 3544.213263][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3544.213263][T23880] __msan_chain_origin+0x57/0xa0 [ 3544.213263][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3544.213263][T23880] get_compat_msghdr+0x108/0x2b0 [ 3544.213263][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3544.213263][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3544.213263][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3544.213263][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3544.213263][T23880] __do_fast_syscall_32+0x129/0x180 [ 3544.213263][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3544.213263][T23880] do_SYSENTER_32+0x73/0x90 [ 3544.213263][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3544.213263][T23880] [ 3544.213263][T23880] Uninit was stored to memory at: [ 3544.213263][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3544.213263][T23880] __msan_chain_origin+0x57/0xa0 [ 3544.213263][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3544.213263][T23880] get_compat_msghdr+0x108/0x2b0 [ 3544.213263][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3544.213263][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3544.213263][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3544.213263][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3544.213263][T23880] __do_fast_syscall_32+0x129/0x180 [ 3544.213263][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3544.213263][T23880] do_SYSENTER_32+0x73/0x90 [ 3544.213263][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3544.213263][T23880] [ 3544.213263][T23880] Uninit was stored to memory at: [ 3544.213263][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3544.213263][T23880] __msan_chain_origin+0x57/0xa0 [ 3544.213263][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3544.213263][T23880] get_compat_msghdr+0x108/0x2b0 [ 3544.213263][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3544.213263][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3544.213263][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3544.213263][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3544.213263][T23880] __do_fast_syscall_32+0x129/0x180 [ 3544.213263][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3544.213263][T23880] do_SYSENTER_32+0x73/0x90 [ 3544.213263][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3544.213263][T23880] [ 3544.213263][T23880] Uninit was stored to memory at: [ 3544.213263][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3544.213263][T23880] __msan_chain_origin+0x57/0xa0 [ 3544.213263][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3544.213263][T23880] get_compat_msghdr+0x108/0x2b0 [ 3544.213263][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3544.213263][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3544.213263][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3544.213263][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3544.213263][T23880] __do_fast_syscall_32+0x129/0x180 [ 3544.213263][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3544.213263][T23880] do_SYSENTER_32+0x73/0x90 [ 3544.213263][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3544.213263][T23880] [ 3544.213263][T23880] Uninit was stored to memory at: [ 3544.213263][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3544.213263][T23880] __msan_chain_origin+0x57/0xa0 [ 3544.213263][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3544.213263][T23880] get_compat_msghdr+0x108/0x2b0 [ 3544.213263][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3544.213263][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3544.213263][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3544.213263][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3544.213263][T23880] __do_fast_syscall_32+0x129/0x180 [ 3544.213263][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3544.213263][T23880] do_SYSENTER_32+0x73/0x90 [ 3544.213263][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3544.213263][T23880] [ 3544.213263][T23880] Uninit was stored to memory at: [ 3544.213263][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3544.213263][T23880] __msan_chain_origin+0x57/0xa0 [ 3544.213263][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3544.213263][T23880] get_compat_msghdr+0x108/0x2b0 [ 3544.213263][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3544.213263][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3544.213263][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3544.213263][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3544.213263][T23880] __do_fast_syscall_32+0x129/0x180 [ 3544.213263][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3544.213263][T23880] do_SYSENTER_32+0x73/0x90 [ 3544.213263][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3544.213263][T23880] [ 3544.213263][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3544.213263][T23880] do_recvmmsg+0xc2/0x22e0 [ 3544.213263][T23880] do_recvmmsg+0xc2/0x22e0 [ 3544.989433][T23882] not chained 3920000 origins [ 3544.994135][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3544.994628][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3544.994628][T23882] Call Trace: [ 3544.994628][T23882] dump_stack+0x21c/0x280 [ 3544.994628][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3544.994628][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3545.031345][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3545.031345][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3545.031345][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3545.031345][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3545.031345][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3545.031345][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3545.064788][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3545.064788][T23882] ? _copy_from_user+0x201/0x310 [ 3545.064788][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3545.064788][T23882] __msan_chain_origin+0x57/0xa0 [ 3545.064788][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3545.064788][T23882] get_compat_msghdr+0x108/0x2b0 [ 3545.064788][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3545.064788][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3545.104738][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3545.104738][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3545.104738][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3545.104738][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3545.104738][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3545.104738][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3545.104738][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3545.104738][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3545.104738][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3545.104738][T23882] __do_fast_syscall_32+0x129/0x180 [ 3545.104738][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3545.104738][T23882] do_SYSENTER_32+0x73/0x90 [ 3545.104738][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3545.104738][T23882] RIP: 0023:0xf7ff3549 [ 3545.104738][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3545.104738][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3545.104738][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3545.104738][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3545.104738][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3545.104738][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3545.104738][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3545.104738][T23882] Uninit was stored to memory at: [ 3545.104738][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3545.104738][T23882] __msan_chain_origin+0x57/0xa0 [ 3545.104738][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3545.104738][T23882] get_compat_msghdr+0x108/0x2b0 [ 3545.274640][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3545.274640][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3545.274640][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3545.274640][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3545.274640][T23882] __do_fast_syscall_32+0x129/0x180 [ 3545.274640][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3545.274640][T23882] do_SYSENTER_32+0x73/0x90 [ 3545.274640][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3545.274640][T23882] [ 3545.274640][T23882] Uninit was stored to memory at: [ 3545.274640][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3545.274640][T23882] __msan_chain_origin+0x57/0xa0 [ 3545.274640][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3545.274640][T23882] get_compat_msghdr+0x108/0x2b0 [ 3545.344770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3545.344770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3545.344770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3545.344770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3545.344770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3545.344770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3545.344770][T23882] do_SYSENTER_32+0x73/0x90 [ 3545.344770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3545.344770][T23882] [ 3545.344770][T23882] Uninit was stored to memory at: [ 3545.344770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3545.344770][T23882] __msan_chain_origin+0x57/0xa0 [ 3545.344770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3545.344770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3545.344770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3545.344770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3545.344770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3545.344770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3545.344770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3545.344770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3545.344770][T23882] do_SYSENTER_32+0x73/0x90 [ 3545.344770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3545.344770][T23882] [ 3545.344770][T23882] Uninit was stored to memory at: [ 3545.344770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3545.344770][T23882] __msan_chain_origin+0x57/0xa0 [ 3545.344770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3545.344770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3545.344770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3545.344770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3545.344770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3545.344770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3545.344770][T23882] __do_fast_syscall_32+0x129/0x180 [ 3545.344770][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3545.344770][T23882] do_SYSENTER_32+0x73/0x90 [ 3545.344770][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3545.344770][T23882] [ 3545.344770][T23882] Uninit was stored to memory at: [ 3545.344770][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3545.344770][T23882] __msan_chain_origin+0x57/0xa0 [ 3545.344770][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3545.344770][T23882] get_compat_msghdr+0x108/0x2b0 [ 3545.344770][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3545.344770][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3545.344770][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3545.344770][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3545.574657][T23882] __do_fast_syscall_32+0x129/0x180 [ 3545.574657][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3545.574657][T23882] do_SYSENTER_32+0x73/0x90 [ 3545.574657][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3545.574657][T23882] [ 3545.574657][T23882] Uninit was stored to memory at: [ 3545.574657][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3545.574657][T23882] __msan_chain_origin+0x57/0xa0 [ 3545.574657][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3545.574657][T23882] get_compat_msghdr+0x108/0x2b0 [ 3545.574657][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3545.574657][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3545.574657][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3545.574657][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3545.574657][T23882] __do_fast_syscall_32+0x129/0x180 [ 3545.574657][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3545.574657][T23882] do_SYSENTER_32+0x73/0x90 [ 3545.574657][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3545.574657][T23882] [ 3545.574657][T23882] Uninit was stored to memory at: [ 3545.574657][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3545.574657][T23882] __msan_chain_origin+0x57/0xa0 [ 3545.574657][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3545.574657][T23882] get_compat_msghdr+0x108/0x2b0 [ 3545.574657][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3545.574657][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3545.574657][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3545.574657][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3545.574657][T23882] __do_fast_syscall_32+0x129/0x180 [ 3545.574657][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3545.574657][T23882] do_SYSENTER_32+0x73/0x90 [ 3545.574657][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3545.574657][T23882] [ 3545.574657][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3545.574657][T23882] do_recvmmsg+0xc2/0x22e0 [ 3545.574657][T23882] do_recvmmsg+0xc2/0x22e0 [ 3545.965403][T23880] not chained 3930000 origins [ 3545.970121][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3545.974554][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3545.974554][T23880] Call Trace: [ 3545.974554][T23880] dump_stack+0x21c/0x280 [ 3545.974554][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3545.974554][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3545.974554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3545.974554][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3545.974554][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3545.974554][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3545.974554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3545.974554][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3545.974554][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3545.974554][T23880] ? _copy_from_user+0x201/0x310 [ 3545.974554][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3546.056948][T23880] __msan_chain_origin+0x57/0xa0 [ 3546.056948][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3546.056948][T23880] get_compat_msghdr+0x108/0x2b0 [ 3546.056948][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3546.056948][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3546.056948][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3546.056948][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3546.056948][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3546.056948][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3546.056948][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3546.056948][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3546.056948][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.056948][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.056948][T23880] __do_fast_syscall_32+0x129/0x180 [ 3546.056948][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3546.056948][T23880] do_SYSENTER_32+0x73/0x90 [ 3546.056948][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.056948][T23880] RIP: 0023:0xf7ff3549 [ 3546.056948][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3546.056948][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3546.056948][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3546.056948][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3546.056948][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3546.056948][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3546.056948][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3546.056948][T23880] Uninit was stored to memory at: [ 3546.056948][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3546.056948][T23880] __msan_chain_origin+0x57/0xa0 [ 3546.056948][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3546.056948][T23880] get_compat_msghdr+0x108/0x2b0 [ 3546.056948][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3546.056948][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3546.056948][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.056948][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.056948][T23880] __do_fast_syscall_32+0x129/0x180 [ 3546.056948][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3546.056948][T23880] do_SYSENTER_32+0x73/0x90 [ 3546.056948][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.056948][T23880] [ 3546.056948][T23880] Uninit was stored to memory at: [ 3546.056948][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3546.056948][T23880] __msan_chain_origin+0x57/0xa0 [ 3546.056948][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3546.056948][T23880] get_compat_msghdr+0x108/0x2b0 [ 3546.056948][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3546.056948][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3546.056948][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.056948][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.056948][T23880] __do_fast_syscall_32+0x129/0x180 [ 3546.056948][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3546.056948][T23880] do_SYSENTER_32+0x73/0x90 [ 3546.056948][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.056948][T23880] [ 3546.056948][T23880] Uninit was stored to memory at: [ 3546.056948][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3546.056948][T23880] __msan_chain_origin+0x57/0xa0 [ 3546.056948][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3546.056948][T23880] get_compat_msghdr+0x108/0x2b0 [ 3546.056948][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3546.056948][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3546.056948][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.056948][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.056948][T23880] __do_fast_syscall_32+0x129/0x180 [ 3546.056948][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3546.056948][T23880] do_SYSENTER_32+0x73/0x90 [ 3546.056948][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.056948][T23880] [ 3546.056948][T23880] Uninit was stored to memory at: [ 3546.056948][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3546.056948][T23880] __msan_chain_origin+0x57/0xa0 [ 3546.056948][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3546.056948][T23880] get_compat_msghdr+0x108/0x2b0 [ 3546.056948][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3546.056948][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3546.056948][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.056948][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.056948][T23880] __do_fast_syscall_32+0x129/0x180 [ 3546.056948][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3546.056948][T23880] do_SYSENTER_32+0x73/0x90 [ 3546.056948][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.056948][T23880] [ 3546.056948][T23880] Uninit was stored to memory at: [ 3546.056948][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3546.056948][T23880] __msan_chain_origin+0x57/0xa0 [ 3546.056948][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3546.056948][T23880] get_compat_msghdr+0x108/0x2b0 [ 3546.056948][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3546.056948][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3546.056948][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.056948][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.056948][T23880] __do_fast_syscall_32+0x129/0x180 [ 3546.056948][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3546.056948][T23880] do_SYSENTER_32+0x73/0x90 [ 3546.056948][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.056948][T23880] [ 3546.056948][T23880] Uninit was stored to memory at: [ 3546.056948][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3546.056948][T23880] __msan_chain_origin+0x57/0xa0 [ 3546.056948][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3546.056948][T23880] get_compat_msghdr+0x108/0x2b0 [ 3546.056948][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3546.056948][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3546.056948][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.056948][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.056948][T23880] __do_fast_syscall_32+0x129/0x180 [ 3546.056948][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3546.056948][T23880] do_SYSENTER_32+0x73/0x90 [ 3546.056948][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.056948][T23880] [ 3546.056948][T23880] Uninit was stored to memory at: [ 3546.056948][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3546.056948][T23880] __msan_chain_origin+0x57/0xa0 [ 3546.056948][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3546.056948][T23880] get_compat_msghdr+0x108/0x2b0 [ 3546.056948][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3546.056948][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3546.056948][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.056948][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.056948][T23880] __do_fast_syscall_32+0x129/0x180 [ 3546.056948][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3546.056948][T23880] do_SYSENTER_32+0x73/0x90 [ 3546.056948][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.056948][T23880] [ 3546.056948][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3546.056948][T23880] do_recvmmsg+0xc2/0x22e0 [ 3546.056948][T23880] do_recvmmsg+0xc2/0x22e0 [ 3546.900894][T23882] not chained 3940000 origins [ 3546.904565][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3546.904565][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3546.904565][T23882] Call Trace: [ 3546.904565][T23882] dump_stack+0x21c/0x280 [ 3546.904565][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3546.904565][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3546.904565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3546.904565][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3546.904565][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3546.904565][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3546.904565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3546.904565][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3546.904565][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3546.977830][T23882] ? _copy_from_user+0x201/0x310 [ 3546.977830][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3546.977830][T23882] __msan_chain_origin+0x57/0xa0 [ 3546.977830][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3546.977830][T23882] get_compat_msghdr+0x108/0x2b0 [ 3546.977830][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3546.977830][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3546.977830][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3546.977830][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3546.977830][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3546.977830][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3546.977830][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3546.977830][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3546.977830][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3546.977830][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.977830][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.977830][T23882] __do_fast_syscall_32+0x129/0x180 [ 3546.977830][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3546.977830][T23882] do_SYSENTER_32+0x73/0x90 [ 3546.977830][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.977830][T23882] RIP: 0023:0xf7ff3549 [ 3546.977830][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3546.977830][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3546.977830][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3546.977830][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3546.977830][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3546.977830][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3546.977830][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3546.977830][T23882] Uninit was stored to memory at: [ 3546.977830][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3546.977830][T23882] __msan_chain_origin+0x57/0xa0 [ 3546.977830][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3546.977830][T23882] get_compat_msghdr+0x108/0x2b0 [ 3546.977830][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3546.977830][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3546.977830][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3546.977830][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3546.977830][T23882] __do_fast_syscall_32+0x129/0x180 [ 3546.977830][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3546.977830][T23882] do_SYSENTER_32+0x73/0x90 [ 3546.977830][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3546.977830][T23882] [ 3546.977830][T23882] Uninit was stored to memory at: [ 3546.977830][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3546.977830][T23882] __msan_chain_origin+0x57/0xa0 [ 3546.977830][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3546.977830][T23882] get_compat_msghdr+0x108/0x2b0 [ 3546.977830][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3546.977830][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3546.977830][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3547.266627][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3547.274849][T23882] __do_fast_syscall_32+0x129/0x180 [ 3547.278731][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3547.286796][T23882] do_SYSENTER_32+0x73/0x90 [ 3547.286796][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3547.286796][T23882] [ 3547.286796][T23882] Uninit was stored to memory at: [ 3547.286796][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3547.286796][T23882] __msan_chain_origin+0x57/0xa0 [ 3547.286796][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3547.286796][T23882] get_compat_msghdr+0x108/0x2b0 [ 3547.286796][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3547.286796][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3547.286796][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3547.286796][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3547.286796][T23882] __do_fast_syscall_32+0x129/0x180 [ 3547.286796][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3547.286796][T23882] do_SYSENTER_32+0x73/0x90 [ 3547.286796][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3547.286796][T23882] [ 3547.286796][T23882] Uninit was stored to memory at: [ 3547.286796][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3547.286796][T23882] __msan_chain_origin+0x57/0xa0 [ 3547.286796][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3547.389435][T23882] get_compat_msghdr+0x108/0x2b0 [ 3547.389435][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3547.389435][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3547.389435][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3547.389435][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3547.389435][T23882] __do_fast_syscall_32+0x129/0x180 [ 3547.389435][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3547.389435][T23882] do_SYSENTER_32+0x73/0x90 [ 3547.389435][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3547.389435][T23882] [ 3547.389435][T23882] Uninit was stored to memory at: [ 3547.389435][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3547.448524][T23882] __msan_chain_origin+0x57/0xa0 [ 3547.448524][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3547.448524][T23882] get_compat_msghdr+0x108/0x2b0 [ 3547.448524][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3547.448524][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3547.448524][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3547.448524][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3547.448524][T23882] __do_fast_syscall_32+0x129/0x180 [ 3547.491720][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3547.491720][T23882] do_SYSENTER_32+0x73/0x90 [ 3547.491720][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3547.491720][T23882] [ 3547.491720][T23882] Uninit was stored to memory at: [ 3547.491720][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3547.491720][T23882] __msan_chain_origin+0x57/0xa0 [ 3547.491720][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3547.491720][T23882] get_compat_msghdr+0x108/0x2b0 [ 3547.491720][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3547.491720][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3547.491720][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3547.491720][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3547.491720][T23882] __do_fast_syscall_32+0x129/0x180 [ 3547.491720][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3547.491720][T23882] do_SYSENTER_32+0x73/0x90 [ 3547.491720][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3547.491720][T23882] [ 3547.491720][T23882] Uninit was stored to memory at: [ 3547.491720][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3547.594339][T23882] __msan_chain_origin+0x57/0xa0 [ 3547.594339][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3547.594339][T23882] get_compat_msghdr+0x108/0x2b0 [ 3547.594339][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3547.594339][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3547.594339][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3547.594339][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3547.594339][T23882] __do_fast_syscall_32+0x129/0x180 [ 3547.594339][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3547.594339][T23882] do_SYSENTER_32+0x73/0x90 [ 3547.594339][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3547.594339][T23882] [ 3547.594339][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3547.594339][T23882] do_recvmmsg+0xc2/0x22e0 [ 3547.594339][T23882] do_recvmmsg+0xc2/0x22e0 [ 3547.884032][T23880] not chained 3950000 origins [ 3547.884560][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3547.884560][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3547.884560][T23880] Call Trace: [ 3547.884560][T23880] dump_stack+0x21c/0x280 [ 3547.884560][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3547.884560][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3547.884560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3547.884560][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3547.884560][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3547.884560][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3547.884560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3547.884560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3547.884560][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3547.884560][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3547.884560][T23880] ? _copy_from_user+0x201/0x310 [ 3547.884560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3547.884560][T23880] __msan_chain_origin+0x57/0xa0 [ 3547.884560][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3547.884560][T23880] get_compat_msghdr+0x108/0x2b0 [ 3547.884560][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3547.884560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3547.884560][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3547.884560][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3547.884560][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3547.884560][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3547.884560][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3547.884560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3547.884560][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3547.884560][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3547.884560][T23880] __do_fast_syscall_32+0x129/0x180 [ 3547.884560][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3547.884560][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.064616][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.064616][T23880] RIP: 0023:0xf7ff3549 [ 3548.064616][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3548.064616][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3548.064616][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3548.106157][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3548.106157][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3548.106157][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3548.106157][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3548.106157][T23880] Uninit was stored to memory at: [ 3548.106157][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.106157][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.106157][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.106157][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.106157][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.106157][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.106157][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.106157][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.184085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.184085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.184085][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.184085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.184085][T23880] [ 3548.184085][T23880] Uninit was stored to memory at: [ 3548.184085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.184085][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.184085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.184085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.184085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.184085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.184085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.184085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.184085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.184085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.184085][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.184085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.184085][T23880] [ 3548.184085][T23880] Uninit was stored to memory at: [ 3548.184085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.184085][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.184085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.184085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.184085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.184085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.184085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.184085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.184085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.184085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.184085][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.184085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.184085][T23880] [ 3548.184085][T23880] Uninit was stored to memory at: [ 3548.184085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.184085][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.184085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.184085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.184085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.184085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.184085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.184085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.184085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.184085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.184085][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.184085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.184085][T23880] [ 3548.184085][T23880] Uninit was stored to memory at: [ 3548.184085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.184085][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.184085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.184085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.184085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.184085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.184085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.184085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.184085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.184085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.184085][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.184085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.184085][T23880] [ 3548.184085][T23880] Uninit was stored to memory at: [ 3548.184085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.184085][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.184085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.184085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.184085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.184085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.184085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.184085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.184085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.184085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.184085][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.184085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.184085][T23880] [ 3548.184085][T23880] Uninit was stored to memory at: [ 3548.184085][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.184085][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.184085][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.184085][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.184085][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.184085][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.184085][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.184085][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.184085][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.184085][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.184085][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.184085][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.184085][T23880] [ 3548.184085][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3548.184085][T23880] do_recvmmsg+0xc2/0x22e0 [ 3548.184085][T23880] do_recvmmsg+0xc2/0x22e0 [ 3548.909367][T23880] not chained 3960000 origins [ 3548.914062][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3548.914555][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3548.914555][T23880] Call Trace: [ 3548.914555][T23880] dump_stack+0x21c/0x280 [ 3548.914555][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3548.914555][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3548.914555][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3548.914555][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3548.914555][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3548.914555][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3548.914555][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3548.914555][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3548.914555][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3548.914555][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3548.914555][T23880] ? _copy_from_user+0x201/0x310 [ 3548.914555][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3548.914555][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.914555][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.914555][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.914555][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.914555][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3548.914555][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3548.914555][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3548.914555][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3548.914555][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.914555][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3548.914555][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3548.914555][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.914555][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.914555][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.914555][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.914555][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.914555][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.914555][T23880] RIP: 0023:0xf7ff3549 [ 3548.914555][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3548.914555][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3548.914555][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3548.914555][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3548.914555][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3548.914555][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3548.914555][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3548.914555][T23880] Uninit was stored to memory at: [ 3548.914555][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.914555][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.914555][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.914555][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.914555][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.914555][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.914555][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.914555][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.914555][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.914555][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.914555][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.914555][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.914555][T23880] [ 3548.914555][T23880] Uninit was stored to memory at: [ 3548.914555][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.914555][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.914555][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.914555][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.914555][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.914555][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.914555][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.914555][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.914555][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.914555][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.914555][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.914555][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.914555][T23880] [ 3548.914555][T23880] Uninit was stored to memory at: [ 3548.914555][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.914555][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.914555][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.914555][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.914555][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.914555][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.914555][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.914555][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.914555][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.914555][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.914555][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.914555][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.914555][T23880] [ 3548.914555][T23880] Uninit was stored to memory at: [ 3548.914555][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.914555][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.914555][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.914555][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.914555][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.914555][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.914555][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.914555][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.914555][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.914555][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.914555][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.914555][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.914555][T23880] [ 3548.914555][T23880] Uninit was stored to memory at: [ 3548.914555][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.914555][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.914555][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.914555][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.914555][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.914555][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.914555][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.914555][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.914555][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.914555][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.914555][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.914555][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.914555][T23880] [ 3548.914555][T23880] Uninit was stored to memory at: [ 3548.914555][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.914555][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.914555][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.914555][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.914555][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.914555][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.914555][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.914555][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.914555][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.914555][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.914555][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.914555][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.914555][T23880] [ 3548.914555][T23880] Uninit was stored to memory at: [ 3548.914555][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3548.914555][T23880] __msan_chain_origin+0x57/0xa0 [ 3548.914555][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3548.914555][T23880] get_compat_msghdr+0x108/0x2b0 [ 3548.914555][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3548.914555][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3548.914555][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3548.914555][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3548.914555][T23880] __do_fast_syscall_32+0x129/0x180 [ 3548.914555][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3548.914555][T23880] do_SYSENTER_32+0x73/0x90 [ 3548.914555][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3548.914555][T23880] [ 3548.914555][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3548.914555][T23880] do_recvmmsg+0xc2/0x22e0 [ 3548.914555][T23880] do_recvmmsg+0xc2/0x22e0 [ 3550.071091][T23880] not chained 3970000 origins [ 3550.074638][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3550.074638][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3550.074638][T23880] Call Trace: [ 3550.074638][T23880] dump_stack+0x21c/0x280 [ 3550.074638][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3550.074638][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3550.074638][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3550.074638][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3550.074638][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3550.074638][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3550.074638][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3550.074638][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3550.074638][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3550.151374][T23880] ? _copy_from_user+0x201/0x310 [ 3550.151374][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3550.151374][T23880] __msan_chain_origin+0x57/0xa0 [ 3550.151374][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3550.151374][T23880] get_compat_msghdr+0x108/0x2b0 [ 3550.151374][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3550.151374][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3550.151374][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3550.151374][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3550.151374][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3550.151374][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3550.151374][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3550.151374][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3550.151374][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3550.151374][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3550.151374][T23880] __do_fast_syscall_32+0x129/0x180 [ 3550.151374][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3550.151374][T23880] do_SYSENTER_32+0x73/0x90 [ 3550.151374][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3550.151374][T23880] RIP: 0023:0xf7ff3549 [ 3550.151374][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3550.151374][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3550.151374][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3550.151374][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3550.151374][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3550.151374][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3550.151374][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3550.324833][T23880] Uninit was stored to memory at: [ 3550.324833][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3550.324833][T23880] __msan_chain_origin+0x57/0xa0 [ 3550.324833][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3550.324833][T23880] get_compat_msghdr+0x108/0x2b0 [ 3550.324833][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3550.324833][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3550.324833][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3550.324833][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3550.324833][T23880] __do_fast_syscall_32+0x129/0x180 [ 3550.324833][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3550.324833][T23880] do_SYSENTER_32+0x73/0x90 [ 3550.324833][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3550.324833][T23880] [ 3550.324833][T23880] Uninit was stored to memory at: [ 3550.324833][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3550.324833][T23880] __msan_chain_origin+0x57/0xa0 [ 3550.324833][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3550.324833][T23880] get_compat_msghdr+0x108/0x2b0 [ 3550.324833][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3550.324833][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3550.324833][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3550.324833][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3550.324833][T23880] __do_fast_syscall_32+0x129/0x180 [ 3550.324833][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3550.324833][T23880] do_SYSENTER_32+0x73/0x90 [ 3550.324833][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3550.324833][T23880] [ 3550.324833][T23880] Uninit was stored to memory at: [ 3550.324833][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3550.324833][T23880] __msan_chain_origin+0x57/0xa0 [ 3550.324833][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3550.324833][T23880] get_compat_msghdr+0x108/0x2b0 [ 3550.324833][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3550.324833][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3550.324833][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3550.324833][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3550.324833][T23880] __do_fast_syscall_32+0x129/0x180 [ 3550.324833][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3550.324833][T23880] do_SYSENTER_32+0x73/0x90 [ 3550.324833][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3550.324833][T23880] [ 3550.324833][T23880] Uninit was stored to memory at: [ 3550.324833][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3550.324833][T23880] __msan_chain_origin+0x57/0xa0 [ 3550.324833][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3550.324833][T23880] get_compat_msghdr+0x108/0x2b0 [ 3550.324833][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3550.324833][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3550.324833][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3550.324833][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3550.324833][T23880] __do_fast_syscall_32+0x129/0x180 [ 3550.324833][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3550.324833][T23880] do_SYSENTER_32+0x73/0x90 [ 3550.324833][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3550.324833][T23880] [ 3550.324833][T23880] Uninit was stored to memory at: [ 3550.324833][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3550.324833][T23880] __msan_chain_origin+0x57/0xa0 [ 3550.324833][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3550.324833][T23880] get_compat_msghdr+0x108/0x2b0 [ 3550.324833][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3550.324833][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3550.324833][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3550.324833][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3550.324833][T23880] __do_fast_syscall_32+0x129/0x180 [ 3550.324833][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3550.324833][T23880] do_SYSENTER_32+0x73/0x90 [ 3550.324833][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3550.324833][T23880] [ 3550.324833][T23880] Uninit was stored to memory at: [ 3550.324833][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3550.324833][T23880] __msan_chain_origin+0x57/0xa0 [ 3550.324833][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3550.324833][T23880] get_compat_msghdr+0x108/0x2b0 [ 3550.324833][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3550.324833][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3550.324833][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3550.324833][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3550.324833][T23880] __do_fast_syscall_32+0x129/0x180 [ 3550.324833][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3550.324833][T23880] do_SYSENTER_32+0x73/0x90 [ 3550.324833][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3550.324833][T23880] [ 3550.324833][T23880] Uninit was stored to memory at: [ 3550.324833][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3550.324833][T23880] __msan_chain_origin+0x57/0xa0 [ 3550.324833][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3550.324833][T23880] get_compat_msghdr+0x108/0x2b0 [ 3550.324833][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3550.324833][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3550.324833][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3550.324833][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3550.324833][T23880] __do_fast_syscall_32+0x129/0x180 [ 3550.324833][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3550.324833][T23880] do_SYSENTER_32+0x73/0x90 [ 3550.324833][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3550.324833][T23880] [ 3550.324833][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3550.324833][T23880] do_recvmmsg+0xc2/0x22e0 [ 3550.324833][T23880] do_recvmmsg+0xc2/0x22e0 [ 3551.159428][T23882] not chained 3980000 origins [ 3551.164145][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3551.164723][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3551.175690][T23882] Call Trace: [ 3551.183533][T23882] dump_stack+0x21c/0x280 [ 3551.183533][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3551.183533][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3551.183533][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3551.183533][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3551.183533][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3551.183533][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3551.183533][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3551.183533][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3551.183533][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3551.183533][T23882] ? _copy_from_user+0x201/0x310 [ 3551.183533][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3551.254688][T23882] __msan_chain_origin+0x57/0xa0 [ 3551.254688][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3551.254688][T23882] get_compat_msghdr+0x108/0x2b0 [ 3551.254688][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3551.254688][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3551.254688][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3551.254688][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3551.254688][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3551.254688][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3551.254688][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3551.254688][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3551.254688][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3551.254688][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3551.324737][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3551.326718][T23882] __do_fast_syscall_32+0x129/0x180 [ 3551.326718][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3551.326718][T23882] do_SYSENTER_32+0x73/0x90 [ 3551.326718][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3551.326718][T23882] RIP: 0023:0xf7ff3549 [ 3551.326718][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3551.326718][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3551.326718][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3551.326718][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3551.326718][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3551.326718][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3551.326718][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3551.326718][T23882] Uninit was stored to memory at: [ 3551.326718][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3551.326718][T23882] __msan_chain_origin+0x57/0xa0 [ 3551.326718][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3551.326718][T23882] get_compat_msghdr+0x108/0x2b0 [ 3551.326718][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3551.326718][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3551.326718][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3551.326718][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3551.326718][T23882] __do_fast_syscall_32+0x129/0x180 [ 3551.326718][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3551.326718][T23882] do_SYSENTER_32+0x73/0x90 [ 3551.326718][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3551.326718][T23882] [ 3551.326718][T23882] Uninit was stored to memory at: [ 3551.326718][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3551.326718][T23882] __msan_chain_origin+0x57/0xa0 [ 3551.326718][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3551.326718][T23882] get_compat_msghdr+0x108/0x2b0 [ 3551.326718][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3551.326718][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3551.326718][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3551.326718][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3551.326718][T23882] __do_fast_syscall_32+0x129/0x180 [ 3551.326718][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3551.326718][T23882] do_SYSENTER_32+0x73/0x90 [ 3551.326718][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3551.326718][T23882] [ 3551.326718][T23882] Uninit was stored to memory at: [ 3551.326718][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3551.326718][T23882] __msan_chain_origin+0x57/0xa0 [ 3551.326718][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3551.326718][T23882] get_compat_msghdr+0x108/0x2b0 [ 3551.326718][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3551.326718][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3551.326718][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3551.326718][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3551.326718][T23882] __do_fast_syscall_32+0x129/0x180 [ 3551.326718][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3551.326718][T23882] do_SYSENTER_32+0x73/0x90 [ 3551.326718][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3551.326718][T23882] [ 3551.326718][T23882] Uninit was stored to memory at: [ 3551.326718][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3551.326718][T23882] __msan_chain_origin+0x57/0xa0 [ 3551.326718][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3551.326718][T23882] get_compat_msghdr+0x108/0x2b0 [ 3551.326718][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3551.326718][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3551.326718][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3551.326718][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3551.326718][T23882] __do_fast_syscall_32+0x129/0x180 [ 3551.326718][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3551.326718][T23882] do_SYSENTER_32+0x73/0x90 [ 3551.326718][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3551.326718][T23882] [ 3551.326718][T23882] Uninit was stored to memory at: [ 3551.326718][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3551.326718][T23882] __msan_chain_origin+0x57/0xa0 [ 3551.326718][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3551.326718][T23882] get_compat_msghdr+0x108/0x2b0 [ 3551.326718][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3551.326718][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3551.326718][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3551.326718][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3551.326718][T23882] __do_fast_syscall_32+0x129/0x180 [ 3551.326718][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3551.326718][T23882] do_SYSENTER_32+0x73/0x90 [ 3551.326718][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3551.326718][T23882] [ 3551.326718][T23882] Uninit was stored to memory at: [ 3551.326718][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3551.326718][T23882] __msan_chain_origin+0x57/0xa0 [ 3551.326718][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3551.326718][T23882] get_compat_msghdr+0x108/0x2b0 [ 3551.326718][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3551.326718][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3551.326718][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3551.326718][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3551.326718][T23882] __do_fast_syscall_32+0x129/0x180 [ 3551.326718][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3551.326718][T23882] do_SYSENTER_32+0x73/0x90 [ 3551.326718][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3551.326718][T23882] [ 3551.326718][T23882] Uninit was stored to memory at: [ 3551.326718][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3551.326718][T23882] __msan_chain_origin+0x57/0xa0 [ 3551.326718][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3551.326718][T23882] get_compat_msghdr+0x108/0x2b0 [ 3551.326718][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3551.326718][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3551.326718][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3551.326718][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3551.326718][T23882] __do_fast_syscall_32+0x129/0x180 [ 3551.326718][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3551.326718][T23882] do_SYSENTER_32+0x73/0x90 [ 3551.326718][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3551.326718][T23882] [ 3551.326718][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3551.326718][T23882] do_recvmmsg+0xc2/0x22e0 [ 3551.326718][T23882] do_recvmmsg+0xc2/0x22e0 [ 3552.002784][T23880] not chained 3990000 origins [ 3552.004560][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3552.004560][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3552.004560][T23880] Call Trace: [ 3552.004560][T23880] dump_stack+0x21c/0x280 [ 3552.004560][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3552.004560][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3552.004560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3552.004560][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3552.004560][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3552.004560][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3552.004560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3552.004560][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3552.004560][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3552.004560][T23880] ? _copy_from_user+0x201/0x310 [ 3552.004560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3552.004560][T23880] __msan_chain_origin+0x57/0xa0 [ 3552.098338][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3552.098338][T23880] get_compat_msghdr+0x108/0x2b0 [ 3552.098338][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3552.098338][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3552.098338][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3552.098338][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3552.098338][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3552.098338][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3552.098338][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3552.098338][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3552.098338][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3552.098338][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3552.098338][T23880] __do_fast_syscall_32+0x129/0x180 [ 3552.098338][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3552.098338][T23880] do_SYSENTER_32+0x73/0x90 [ 3552.098338][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3552.098338][T23880] RIP: 0023:0xf7ff3549 [ 3552.098338][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3552.098338][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3552.098338][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3552.098338][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3552.098338][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3552.098338][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3552.098338][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3552.098338][T23880] Uninit was stored to memory at: [ 3552.098338][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3552.098338][T23880] __msan_chain_origin+0x57/0xa0 [ 3552.098338][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3552.098338][T23880] get_compat_msghdr+0x108/0x2b0 [ 3552.098338][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3552.098338][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3552.098338][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3552.098338][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3552.098338][T23880] __do_fast_syscall_32+0x129/0x180 [ 3552.098338][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3552.098338][T23880] do_SYSENTER_32+0x73/0x90 [ 3552.098338][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3552.098338][T23880] [ 3552.098338][T23880] Uninit was stored to memory at: [ 3552.098338][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3552.098338][T23880] __msan_chain_origin+0x57/0xa0 [ 3552.098338][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3552.098338][T23880] get_compat_msghdr+0x108/0x2b0 [ 3552.098338][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3552.098338][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3552.098338][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3552.098338][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3552.098338][T23880] __do_fast_syscall_32+0x129/0x180 [ 3552.098338][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3552.098338][T23880] do_SYSENTER_32+0x73/0x90 [ 3552.098338][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3552.098338][T23880] [ 3552.098338][T23880] Uninit was stored to memory at: [ 3552.098338][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3552.098338][T23880] __msan_chain_origin+0x57/0xa0 [ 3552.098338][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3552.098338][T23880] get_compat_msghdr+0x108/0x2b0 [ 3552.098338][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3552.098338][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3552.098338][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3552.098338][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3552.098338][T23880] __do_fast_syscall_32+0x129/0x180 [ 3552.098338][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3552.098338][T23880] do_SYSENTER_32+0x73/0x90 [ 3552.098338][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3552.098338][T23880] [ 3552.098338][T23880] Uninit was stored to memory at: [ 3552.098338][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3552.098338][T23880] __msan_chain_origin+0x57/0xa0 [ 3552.098338][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3552.098338][T23880] get_compat_msghdr+0x108/0x2b0 [ 3552.098338][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3552.098338][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3552.098338][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3552.098338][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3552.098338][T23880] __do_fast_syscall_32+0x129/0x180 [ 3552.098338][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3552.098338][T23880] do_SYSENTER_32+0x73/0x90 [ 3552.098338][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3552.098338][T23880] [ 3552.098338][T23880] Uninit was stored to memory at: [ 3552.098338][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3552.098338][T23880] __msan_chain_origin+0x57/0xa0 [ 3552.098338][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3552.098338][T23880] get_compat_msghdr+0x108/0x2b0 [ 3552.098338][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3552.098338][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3552.098338][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3552.098338][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3552.098338][T23880] __do_fast_syscall_32+0x129/0x180 [ 3552.098338][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3552.098338][T23880] do_SYSENTER_32+0x73/0x90 [ 3552.098338][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3552.098338][T23880] [ 3552.098338][T23880] Uninit was stored to memory at: [ 3552.098338][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3552.098338][T23880] __msan_chain_origin+0x57/0xa0 [ 3552.098338][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3552.098338][T23880] get_compat_msghdr+0x108/0x2b0 [ 3552.098338][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3552.098338][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3552.098338][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3552.098338][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3552.098338][T23880] __do_fast_syscall_32+0x129/0x180 [ 3552.098338][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3552.098338][T23880] do_SYSENTER_32+0x73/0x90 [ 3552.098338][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3552.098338][T23880] [ 3552.098338][T23880] Uninit was stored to memory at: [ 3552.098338][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3552.098338][T23880] __msan_chain_origin+0x57/0xa0 [ 3552.098338][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3552.098338][T23880] get_compat_msghdr+0x108/0x2b0 [ 3552.098338][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3552.098338][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3552.098338][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3552.098338][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3552.098338][T23880] __do_fast_syscall_32+0x129/0x180 [ 3552.098338][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3552.098338][T23880] do_SYSENTER_32+0x73/0x90 [ 3552.098338][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3552.098338][T23880] [ 3552.098338][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3552.098338][T23880] do_recvmmsg+0xc2/0x22e0 [ 3552.098338][T23880] do_recvmmsg+0xc2/0x22e0 [ 3553.000117][T23880] not chained 4000000 origins [ 3553.004557][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3553.004557][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3553.004557][T23880] Call Trace: [ 3553.004557][T23880] dump_stack+0x21c/0x280 [ 3553.004557][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3553.004557][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3553.004557][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3553.004557][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3553.004557][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3553.004557][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3553.004557][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3553.004557][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3553.004557][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3553.004557][T23880] ? _copy_from_user+0x201/0x310 [ 3553.004557][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3553.004557][T23880] __msan_chain_origin+0x57/0xa0 [ 3553.004557][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3553.004557][T23880] get_compat_msghdr+0x108/0x2b0 [ 3553.004557][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3553.004557][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3553.004557][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3553.004557][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3553.004557][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3553.004557][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3553.004557][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3553.004557][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3553.004557][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3553.004557][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3553.004557][T23880] __do_fast_syscall_32+0x129/0x180 [ 3553.004557][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3553.004557][T23880] do_SYSENTER_32+0x73/0x90 [ 3553.004557][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3553.004557][T23880] RIP: 0023:0xf7ff3549 [ 3553.004557][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3553.004557][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3553.004557][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3553.004557][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3553.004557][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3553.004557][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3553.004557][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3553.004557][T23880] Uninit was stored to memory at: [ 3553.004557][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3553.004557][T23880] __msan_chain_origin+0x57/0xa0 [ 3553.004557][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3553.004557][T23880] get_compat_msghdr+0x108/0x2b0 [ 3553.004557][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3553.004557][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3553.004557][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3553.004557][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3553.004557][T23880] __do_fast_syscall_32+0x129/0x180 [ 3553.004557][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3553.004557][T23880] do_SYSENTER_32+0x73/0x90 [ 3553.004557][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3553.004557][T23880] [ 3553.004557][T23880] Uninit was stored to memory at: [ 3553.004557][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3553.004557][T23880] __msan_chain_origin+0x57/0xa0 [ 3553.004557][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3553.004557][T23880] get_compat_msghdr+0x108/0x2b0 [ 3553.004557][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3553.004557][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3553.004557][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3553.004557][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3553.004557][T23880] __do_fast_syscall_32+0x129/0x180 [ 3553.004557][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3553.004557][T23880] do_SYSENTER_32+0x73/0x90 [ 3553.004557][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3553.004557][T23880] [ 3553.004557][T23880] Uninit was stored to memory at: [ 3553.004557][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3553.004557][T23880] __msan_chain_origin+0x57/0xa0 [ 3553.004557][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3553.004557][T23880] get_compat_msghdr+0x108/0x2b0 [ 3553.004557][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3553.004557][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3553.004557][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3553.004557][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3553.004557][T23880] __do_fast_syscall_32+0x129/0x180 [ 3553.004557][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3553.004557][T23880] do_SYSENTER_32+0x73/0x90 [ 3553.004557][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3553.004557][T23880] [ 3553.004557][T23880] Uninit was stored to memory at: [ 3553.004557][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3553.004557][T23880] __msan_chain_origin+0x57/0xa0 [ 3553.004557][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3553.004557][T23880] get_compat_msghdr+0x108/0x2b0 [ 3553.004557][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3553.004557][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3553.004557][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3553.004557][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3553.004557][T23880] __do_fast_syscall_32+0x129/0x180 [ 3553.004557][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3553.004557][T23880] do_SYSENTER_32+0x73/0x90 [ 3553.004557][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3553.004557][T23880] [ 3553.004557][T23880] Uninit was stored to memory at: [ 3553.004557][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3553.004557][T23880] __msan_chain_origin+0x57/0xa0 [ 3553.004557][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3553.004557][T23880] get_compat_msghdr+0x108/0x2b0 [ 3553.004557][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3553.004557][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3553.004557][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3553.004557][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3553.004557][T23880] __do_fast_syscall_32+0x129/0x180 [ 3553.004557][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3553.004557][T23880] do_SYSENTER_32+0x73/0x90 [ 3553.004557][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3553.004557][T23880] [ 3553.004557][T23880] Uninit was stored to memory at: [ 3553.004557][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3553.004557][T23880] __msan_chain_origin+0x57/0xa0 [ 3553.004557][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3553.004557][T23880] get_compat_msghdr+0x108/0x2b0 [ 3553.004557][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3553.004557][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3553.004557][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3553.004557][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3553.004557][T23880] __do_fast_syscall_32+0x129/0x180 [ 3553.004557][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3553.004557][T23880] do_SYSENTER_32+0x73/0x90 [ 3553.004557][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3553.004557][T23880] [ 3553.004557][T23880] Uninit was stored to memory at: [ 3553.004557][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3553.004557][T23880] __msan_chain_origin+0x57/0xa0 [ 3553.004557][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3553.004557][T23880] get_compat_msghdr+0x108/0x2b0 [ 3553.004557][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3553.004557][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3553.004557][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3553.004557][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3553.004557][T23880] __do_fast_syscall_32+0x129/0x180 [ 3553.004557][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3553.004557][T23880] do_SYSENTER_32+0x73/0x90 [ 3553.004557][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3553.004557][T23880] [ 3553.004557][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3553.004557][T23880] do_recvmmsg+0xc2/0x22e0 [ 3553.004557][T23880] do_recvmmsg+0xc2/0x22e0 [ 3554.117351][T23880] not chained 4010000 origins [ 3554.122051][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3554.124548][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3554.134702][T23880] Call Trace: [ 3554.134702][T23880] dump_stack+0x21c/0x280 [ 3554.145226][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3554.145226][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3554.145226][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3554.145226][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3554.145226][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3554.145226][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3554.145226][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3554.145226][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3554.145226][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3554.145226][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3554.145226][T23880] ? _copy_from_user+0x201/0x310 [ 3554.145226][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3554.145226][T23880] __msan_chain_origin+0x57/0xa0 [ 3554.145226][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3554.145226][T23880] get_compat_msghdr+0x108/0x2b0 [ 3554.145226][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3554.145226][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3554.145226][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3554.145226][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3554.145226][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3554.145226][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3554.145226][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3554.145226][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3554.145226][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3554.145226][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3554.145226][T23880] __do_fast_syscall_32+0x129/0x180 [ 3554.145226][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3554.145226][T23880] do_SYSENTER_32+0x73/0x90 [ 3554.145226][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3554.145226][T23880] RIP: 0023:0xf7ff3549 [ 3554.145226][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3554.145226][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3554.145226][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3554.145226][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3554.145226][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3554.145226][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3554.145226][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3554.145226][T23880] Uninit was stored to memory at: [ 3554.145226][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3554.145226][T23880] __msan_chain_origin+0x57/0xa0 [ 3554.145226][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3554.145226][T23880] get_compat_msghdr+0x108/0x2b0 [ 3554.145226][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3554.145226][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3554.145226][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3554.145226][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3554.145226][T23880] __do_fast_syscall_32+0x129/0x180 [ 3554.145226][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3554.145226][T23880] do_SYSENTER_32+0x73/0x90 [ 3554.145226][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3554.145226][T23880] [ 3554.145226][T23880] Uninit was stored to memory at: [ 3554.145226][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3554.145226][T23880] __msan_chain_origin+0x57/0xa0 [ 3554.145226][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3554.145226][T23880] get_compat_msghdr+0x108/0x2b0 [ 3554.145226][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3554.145226][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3554.145226][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3554.145226][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3554.145226][T23880] __do_fast_syscall_32+0x129/0x180 [ 3554.145226][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3554.145226][T23880] do_SYSENTER_32+0x73/0x90 [ 3554.145226][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3554.145226][T23880] [ 3554.145226][T23880] Uninit was stored to memory at: [ 3554.145226][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3554.145226][T23880] __msan_chain_origin+0x57/0xa0 [ 3554.145226][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3554.145226][T23880] get_compat_msghdr+0x108/0x2b0 [ 3554.145226][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3554.145226][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3554.145226][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3554.145226][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3554.145226][T23880] __do_fast_syscall_32+0x129/0x180 [ 3554.145226][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3554.145226][T23880] do_SYSENTER_32+0x73/0x90 [ 3554.145226][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3554.145226][T23880] [ 3554.145226][T23880] Uninit was stored to memory at: [ 3554.145226][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3554.145226][T23880] __msan_chain_origin+0x57/0xa0 [ 3554.145226][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3554.145226][T23880] get_compat_msghdr+0x108/0x2b0 [ 3554.145226][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3554.145226][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3554.145226][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3554.145226][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3554.145226][T23880] __do_fast_syscall_32+0x129/0x180 [ 3554.145226][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3554.145226][T23880] do_SYSENTER_32+0x73/0x90 [ 3554.145226][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3554.145226][T23880] [ 3554.145226][T23880] Uninit was stored to memory at: [ 3554.145226][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3554.145226][T23880] __msan_chain_origin+0x57/0xa0 [ 3554.145226][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3554.145226][T23880] get_compat_msghdr+0x108/0x2b0 [ 3554.145226][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3554.145226][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3554.145226][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3554.145226][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3554.145226][T23880] __do_fast_syscall_32+0x129/0x180 [ 3554.145226][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3554.145226][T23880] do_SYSENTER_32+0x73/0x90 [ 3554.145226][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3554.145226][T23880] [ 3554.145226][T23880] Uninit was stored to memory at: [ 3554.145226][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3554.145226][T23880] __msan_chain_origin+0x57/0xa0 [ 3554.145226][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3554.145226][T23880] get_compat_msghdr+0x108/0x2b0 [ 3554.145226][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3554.145226][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3554.145226][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3554.145226][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3554.145226][T23880] __do_fast_syscall_32+0x129/0x180 [ 3554.145226][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3554.145226][T23880] do_SYSENTER_32+0x73/0x90 [ 3554.145226][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3554.145226][T23880] [ 3554.145226][T23880] Uninit was stored to memory at: [ 3554.145226][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3554.145226][T23880] __msan_chain_origin+0x57/0xa0 [ 3554.145226][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3554.145226][T23880] get_compat_msghdr+0x108/0x2b0 [ 3554.145226][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3554.145226][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3554.145226][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3554.145226][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3554.145226][T23880] __do_fast_syscall_32+0x129/0x180 [ 3554.145226][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3554.145226][T23880] do_SYSENTER_32+0x73/0x90 [ 3554.145226][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3554.145226][T23880] [ 3554.145226][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3554.145226][T23880] do_recvmmsg+0xc2/0x22e0 [ 3554.145226][T23880] do_recvmmsg+0xc2/0x22e0 [ 3555.091249][T23882] not chained 4020000 origins [ 3555.094698][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3555.094698][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3555.094698][T23882] Call Trace: [ 3555.094698][T23882] dump_stack+0x21c/0x280 [ 3555.094698][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3555.094698][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3555.094698][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3555.094698][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.094698][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3555.094698][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3555.154654][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3555.154654][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3555.154654][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3555.154654][T23882] ? _copy_from_user+0x201/0x310 [ 3555.154654][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3555.183531][T23882] __msan_chain_origin+0x57/0xa0 [ 3555.183531][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3555.183531][T23882] get_compat_msghdr+0x108/0x2b0 [ 3555.183531][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3555.183531][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3555.183531][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3555.183531][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3555.183531][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3555.183531][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3555.224783][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3555.224783][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.224783][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3555.224783][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3555.224783][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3555.224783][T23882] __do_fast_syscall_32+0x129/0x180 [ 3555.224783][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3555.224783][T23882] do_SYSENTER_32+0x73/0x90 [ 3555.224783][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3555.224783][T23882] RIP: 0023:0xf7ff3549 [ 3555.224783][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3555.224783][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3555.224783][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3555.224783][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3555.224783][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3555.224783][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3555.224783][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3555.224783][T23882] Uninit was stored to memory at: [ 3555.224783][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3555.224783][T23882] __msan_chain_origin+0x57/0xa0 [ 3555.224783][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3555.224783][T23882] get_compat_msghdr+0x108/0x2b0 [ 3555.224783][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3555.224783][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3555.224783][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3555.224783][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3555.394801][T23882] __do_fast_syscall_32+0x129/0x180 [ 3555.394801][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3555.394801][T23882] do_SYSENTER_32+0x73/0x90 [ 3555.394801][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3555.394801][T23882] [ 3555.394801][T23882] Uninit was stored to memory at: [ 3555.394801][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3555.394801][T23882] __msan_chain_origin+0x57/0xa0 [ 3555.394801][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3555.394801][T23882] get_compat_msghdr+0x108/0x2b0 [ 3555.394801][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3555.394801][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3555.394801][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3555.394801][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3555.394801][T23882] __do_fast_syscall_32+0x129/0x180 [ 3555.394801][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3555.394801][T23882] do_SYSENTER_32+0x73/0x90 [ 3555.394801][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3555.394801][T23882] [ 3555.394801][T23882] Uninit was stored to memory at: [ 3555.394801][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3555.394801][T23882] __msan_chain_origin+0x57/0xa0 [ 3555.394801][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3555.394801][T23882] get_compat_msghdr+0x108/0x2b0 [ 3555.394801][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3555.394801][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3555.394801][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3555.394801][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3555.394801][T23882] __do_fast_syscall_32+0x129/0x180 [ 3555.394801][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3555.394801][T23882] do_SYSENTER_32+0x73/0x90 [ 3555.394801][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3555.394801][T23882] [ 3555.394801][T23882] Uninit was stored to memory at: [ 3555.394801][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3555.394801][T23882] __msan_chain_origin+0x57/0xa0 [ 3555.394801][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3555.394801][T23882] get_compat_msghdr+0x108/0x2b0 [ 3555.394801][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3555.394801][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3555.394801][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3555.394801][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3555.394801][T23882] __do_fast_syscall_32+0x129/0x180 [ 3555.394801][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3555.394801][T23882] do_SYSENTER_32+0x73/0x90 [ 3555.394801][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3555.394801][T23882] [ 3555.394801][T23882] Uninit was stored to memory at: [ 3555.394801][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3555.394801][T23882] __msan_chain_origin+0x57/0xa0 [ 3555.394801][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3555.394801][T23882] get_compat_msghdr+0x108/0x2b0 [ 3555.394801][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3555.394801][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3555.394801][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3555.394801][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3555.394801][T23882] __do_fast_syscall_32+0x129/0x180 [ 3555.394801][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3555.394801][T23882] do_SYSENTER_32+0x73/0x90 [ 3555.394801][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3555.394801][T23882] [ 3555.394801][T23882] Uninit was stored to memory at: [ 3555.394801][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3555.394801][T23882] __msan_chain_origin+0x57/0xa0 [ 3555.394801][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3555.394801][T23882] get_compat_msghdr+0x108/0x2b0 [ 3555.394801][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3555.394801][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3555.394801][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3555.394801][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3555.394801][T23882] __do_fast_syscall_32+0x129/0x180 [ 3555.394801][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3555.394801][T23882] do_SYSENTER_32+0x73/0x90 [ 3555.394801][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3555.394801][T23882] [ 3555.394801][T23882] Uninit was stored to memory at: [ 3555.394801][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3555.394801][T23882] __msan_chain_origin+0x57/0xa0 [ 3555.394801][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3555.394801][T23882] get_compat_msghdr+0x108/0x2b0 [ 3555.394801][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3555.394801][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3555.394801][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3555.394801][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3555.394801][T23882] __do_fast_syscall_32+0x129/0x180 [ 3555.394801][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3555.394801][T23882] do_SYSENTER_32+0x73/0x90 [ 3555.394801][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3555.394801][T23882] [ 3555.394801][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3555.394801][T23882] do_recvmmsg+0xc2/0x22e0 [ 3555.394801][T23882] do_recvmmsg+0xc2/0x22e0 [ 3556.015888][T23880] not chained 4030000 origins [ 3556.020596][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3556.024549][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3556.024549][T23880] Call Trace: [ 3556.024549][T23880] dump_stack+0x21c/0x280 [ 3556.024549][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3556.024549][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3556.024549][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3556.024549][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3556.024549][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3556.024549][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3556.024549][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3556.024549][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3556.024549][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3556.024549][T23880] ? _copy_from_user+0x201/0x310 [ 3556.024549][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3556.104686][T23880] __msan_chain_origin+0x57/0xa0 [ 3556.104686][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3556.104686][T23880] get_compat_msghdr+0x108/0x2b0 [ 3556.104686][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3556.104686][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3556.104686][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3556.134777][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3556.134777][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3556.134777][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3556.134777][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3556.134777][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3556.134777][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3556.134777][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3556.134777][T23880] __do_fast_syscall_32+0x129/0x180 [ 3556.134777][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3556.134777][T23880] do_SYSENTER_32+0x73/0x90 [ 3556.134777][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3556.134777][T23880] RIP: 0023:0xf7ff3549 [ 3556.134777][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3556.204745][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3556.204745][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3556.204745][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3556.204745][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3556.204745][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3556.204745][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3556.204745][T23880] Uninit was stored to memory at: [ 3556.204745][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3556.204745][T23880] __msan_chain_origin+0x57/0xa0 [ 3556.204745][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3556.204745][T23880] get_compat_msghdr+0x108/0x2b0 [ 3556.204745][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3556.204745][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3556.204745][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3556.204745][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3556.204745][T23880] __do_fast_syscall_32+0x129/0x180 [ 3556.204745][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3556.204745][T23880] do_SYSENTER_32+0x73/0x90 [ 3556.204745][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3556.204745][T23880] [ 3556.204745][T23880] Uninit was stored to memory at: [ 3556.204745][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3556.204745][T23880] __msan_chain_origin+0x57/0xa0 [ 3556.204745][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3556.204745][T23880] get_compat_msghdr+0x108/0x2b0 [ 3556.204745][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3556.204745][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3556.204745][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3556.204745][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3556.204745][T23880] __do_fast_syscall_32+0x129/0x180 [ 3556.204745][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3556.204745][T23880] do_SYSENTER_32+0x73/0x90 [ 3556.398333][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3556.398333][T23880] [ 3556.398333][T23880] Uninit was stored to memory at: [ 3556.398333][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3556.398333][T23880] __msan_chain_origin+0x57/0xa0 [ 3556.398333][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3556.398333][T23880] get_compat_msghdr+0x108/0x2b0 [ 3556.398333][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3556.398333][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3556.398333][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3556.398333][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3556.398333][T23880] __do_fast_syscall_32+0x129/0x180 [ 3556.398333][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3556.398333][T23880] do_SYSENTER_32+0x73/0x90 [ 3556.398333][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3556.474821][T23880] [ 3556.474821][T23880] Uninit was stored to memory at: [ 3556.474821][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3556.474821][T23880] __msan_chain_origin+0x57/0xa0 [ 3556.474821][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3556.474821][T23880] get_compat_msghdr+0x108/0x2b0 [ 3556.474821][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3556.474821][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3556.474821][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3556.474821][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3556.474821][T23880] __do_fast_syscall_32+0x129/0x180 [ 3556.474821][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3556.474821][T23880] do_SYSENTER_32+0x73/0x90 [ 3556.474821][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3556.474821][T23880] [ 3556.474821][T23880] Uninit was stored to memory at: [ 3556.474821][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3556.474821][T23880] __msan_chain_origin+0x57/0xa0 [ 3556.474821][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3556.474821][T23880] get_compat_msghdr+0x108/0x2b0 [ 3556.474821][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3556.474821][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3556.474821][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3556.474821][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3556.474821][T23880] __do_fast_syscall_32+0x129/0x180 [ 3556.474821][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3556.474821][T23880] do_SYSENTER_32+0x73/0x90 [ 3556.474821][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3556.474821][T23880] [ 3556.474821][T23880] Uninit was stored to memory at: [ 3556.474821][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3556.474821][T23880] __msan_chain_origin+0x57/0xa0 [ 3556.474821][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3556.474821][T23880] get_compat_msghdr+0x108/0x2b0 [ 3556.474821][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3556.474821][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3556.474821][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3556.474821][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3556.474821][T23880] __do_fast_syscall_32+0x129/0x180 [ 3556.474821][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3556.474821][T23880] do_SYSENTER_32+0x73/0x90 [ 3556.474821][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3556.474821][T23880] [ 3556.474821][T23880] Uninit was stored to memory at: [ 3556.474821][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3556.474821][T23880] __msan_chain_origin+0x57/0xa0 [ 3556.474821][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3556.474821][T23880] get_compat_msghdr+0x108/0x2b0 [ 3556.474821][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3556.474821][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3556.474821][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3556.474821][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3556.474821][T23880] __do_fast_syscall_32+0x129/0x180 [ 3556.474821][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3556.474821][T23880] do_SYSENTER_32+0x73/0x90 [ 3556.474821][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3556.474821][T23880] [ 3556.474821][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3556.474821][T23880] do_recvmmsg+0xc2/0x22e0 [ 3556.474821][T23880] do_recvmmsg+0xc2/0x22e0 [ 3556.948918][T23880] not chained 4040000 origins [ 3556.953633][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3556.954560][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3556.954560][T23880] Call Trace: [ 3556.954560][T23880] dump_stack+0x21c/0x280 [ 3556.954560][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3556.954560][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3556.954560][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3556.954560][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3556.954560][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3557.013186][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3557.013186][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3557.013186][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3557.013186][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3557.013186][T23880] ? _copy_from_user+0x201/0x310 [ 3557.013186][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3557.013186][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.013186][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.013186][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.013186][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.013186][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3557.013186][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3557.013186][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3557.013186][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3557.013186][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.013186][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3557.013186][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3557.013186][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.013186][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.013186][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.013186][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.013186][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.013186][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.013186][T23880] RIP: 0023:0xf7ff3549 [ 3557.013186][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3557.013186][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3557.013186][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3557.013186][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3557.013186][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3557.013186][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3557.013186][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3557.013186][T23880] Uninit was stored to memory at: [ 3557.013186][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3557.013186][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.013186][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.013186][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.013186][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.013186][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.013186][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.013186][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.013186][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.013186][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.013186][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.013186][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.013186][T23880] [ 3557.013186][T23880] Uninit was stored to memory at: [ 3557.013186][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3557.013186][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.013186][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.013186][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.013186][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.013186][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.013186][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.013186][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.013186][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.013186][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.013186][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.013186][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.013186][T23880] [ 3557.013186][T23880] Uninit was stored to memory at: [ 3557.013186][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3557.013186][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.013186][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.013186][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.013186][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.013186][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.013186][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.013186][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.013186][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.013186][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.013186][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.013186][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.013186][T23880] [ 3557.013186][T23880] Uninit was stored to memory at: [ 3557.013186][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3557.013186][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.013186][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.013186][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.013186][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.013186][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.013186][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.013186][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.013186][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.013186][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.013186][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.013186][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.013186][T23880] [ 3557.013186][T23880] Uninit was stored to memory at: [ 3557.013186][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3557.013186][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.013186][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.013186][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.013186][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.013186][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.013186][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.013186][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.013186][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.013186][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.013186][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.013186][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.013186][T23880] [ 3557.013186][T23880] Uninit was stored to memory at: [ 3557.013186][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3557.013186][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.013186][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.013186][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.013186][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.013186][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.013186][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.013186][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.013186][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.013186][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.013186][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.013186][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.013186][T23880] [ 3557.013186][T23880] Uninit was stored to memory at: [ 3557.013186][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3557.013186][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.013186][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.013186][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.013186][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.013186][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.013186][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.013186][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.013186][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.013186][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.013186][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.013186][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.013186][T23880] [ 3557.013186][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3557.013186][T23880] do_recvmmsg+0xc2/0x22e0 [ 3557.013186][T23880] do_recvmmsg+0xc2/0x22e0 [ 3557.901703][T23880] not chained 4050000 origins [ 3557.904568][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3557.904568][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3557.904568][T23880] Call Trace: [ 3557.904568][T23880] dump_stack+0x21c/0x280 [ 3557.904568][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3557.904568][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3557.904568][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3557.904568][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3557.904568][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3557.904568][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3557.904568][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3557.904568][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3557.904568][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3557.904568][T23880] ? _copy_from_user+0x201/0x310 [ 3557.904568][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3557.904568][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.904568][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.904568][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.904568][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.904568][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3557.904568][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3557.904568][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3557.904568][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3557.904568][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.904568][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3557.904568][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3557.904568][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.904568][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.904568][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.904568][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.904568][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.904568][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.904568][T23880] RIP: 0023:0xf7ff3549 [ 3557.904568][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3557.904568][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3557.904568][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3557.904568][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3557.904568][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3557.904568][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3557.904568][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3557.904568][T23880] Uninit was stored to memory at: [ 3557.904568][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3557.904568][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.904568][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3557.904568][T23880] get_compat_msghdr+0x108/0x2b0 [ 3557.904568][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3557.904568][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3557.904568][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3557.904568][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3557.904568][T23880] __do_fast_syscall_32+0x129/0x180 [ 3557.904568][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3557.904568][T23880] do_SYSENTER_32+0x73/0x90 [ 3557.904568][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3557.904568][T23880] [ 3557.904568][T23880] Uninit was stored to memory at: [ 3557.904568][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3557.904568][T23880] __msan_chain_origin+0x57/0xa0 [ 3557.904568][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.255354][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.255354][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.264732][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.264732][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.264732][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.264732][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.264732][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.264732][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.264732][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.264732][T23880] [ 3558.264732][T23880] Uninit was stored to memory at: [ 3558.264732][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.264732][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.264732][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.264732][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.264732][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.264732][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.264732][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.346286][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.346286][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.346286][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.346286][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.346286][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.346286][T23880] [ 3558.346286][T23880] Uninit was stored to memory at: [ 3558.346286][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.346286][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.346286][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.346286][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.346286][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.346286][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.346286][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.346286][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.346286][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.346286][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.346286][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.346286][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.346286][T23880] [ 3558.346286][T23880] Uninit was stored to memory at: [ 3558.346286][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.346286][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.346286][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.346286][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.346286][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.346286][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.346286][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.346286][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.346286][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.346286][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.346286][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.346286][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.346286][T23880] [ 3558.346286][T23880] Uninit was stored to memory at: [ 3558.346286][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.346286][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.346286][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.346286][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.346286][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.346286][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.346286][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.346286][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.346286][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.346286][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.346286][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.346286][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.346286][T23880] [ 3558.346286][T23880] Uninit was stored to memory at: [ 3558.346286][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.346286][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.346286][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.346286][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.346286][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.346286][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.346286][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.346286][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.346286][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.346286][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.346286][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.346286][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.346286][T23880] [ 3558.346286][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3558.346286][T23880] do_recvmmsg+0xc2/0x22e0 [ 3558.346286][T23880] do_recvmmsg+0xc2/0x22e0 [ 3558.779095][T23880] not chained 4060000 origins [ 3558.783968][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3558.784559][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3558.784559][T23880] Call Trace: [ 3558.784559][T23880] dump_stack+0x21c/0x280 [ 3558.784559][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3558.784559][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3558.784559][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3558.784559][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3558.784559][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3558.784559][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3558.784559][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3558.784559][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3558.784559][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3558.784559][T23880] ? _copy_from_user+0x201/0x310 [ 3558.784559][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3558.784559][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.784559][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.784559][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.784559][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.784559][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3558.784559][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3558.784559][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3558.784559][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3558.784559][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.784559][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3558.784559][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3558.784559][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.784559][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.784559][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.784559][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.784559][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.784559][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.784559][T23880] RIP: 0023:0xf7ff3549 [ 3558.784559][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3558.784559][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3558.784559][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3558.784559][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3558.784559][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3558.784559][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3558.784559][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3558.784559][T23880] Uninit was stored to memory at: [ 3558.784559][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.784559][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.784559][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.784559][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.784559][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.784559][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.784559][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.784559][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.784559][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.784559][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.784559][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.784559][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.784559][T23880] [ 3558.784559][T23880] Uninit was stored to memory at: [ 3558.784559][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.784559][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.784559][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.784559][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.784559][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.784559][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.784559][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.784559][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.784559][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.784559][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.784559][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.784559][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.784559][T23880] [ 3558.784559][T23880] Uninit was stored to memory at: [ 3558.784559][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.784559][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.784559][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.784559][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.784559][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.784559][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.784559][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.784559][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.784559][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.784559][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.784559][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.784559][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.784559][T23880] [ 3558.784559][T23880] Uninit was stored to memory at: [ 3558.784559][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.784559][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.784559][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.784559][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.784559][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.784559][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.784559][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.784559][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.784559][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.784559][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.784559][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.784559][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.784559][T23880] [ 3558.784559][T23880] Uninit was stored to memory at: [ 3558.784559][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.784559][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.784559][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.784559][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.784559][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.784559][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.784559][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.784559][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.784559][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.784559][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.784559][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.784559][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.784559][T23880] [ 3558.784559][T23880] Uninit was stored to memory at: [ 3558.784559][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.784559][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.784559][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.784559][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.784559][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.784559][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.784559][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.784559][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.784559][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.784559][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.784559][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.784559][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.784559][T23880] [ 3558.784559][T23880] Uninit was stored to memory at: [ 3558.784559][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3558.784559][T23880] __msan_chain_origin+0x57/0xa0 [ 3558.784559][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3558.784559][T23880] get_compat_msghdr+0x108/0x2b0 [ 3558.784559][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3558.784559][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3558.784559][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3558.784559][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3558.784559][T23880] __do_fast_syscall_32+0x129/0x180 [ 3558.784559][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3558.784559][T23880] do_SYSENTER_32+0x73/0x90 [ 3558.784559][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3558.784559][T23880] [ 3558.784559][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3558.784559][T23880] do_recvmmsg+0xc2/0x22e0 [ 3558.784559][T23880] do_recvmmsg+0xc2/0x22e0 [ 3559.861950][T23882] not chained 4070000 origins [ 3559.864561][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3559.864561][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3559.880330][T23882] Call Trace: [ 3559.880330][T23882] dump_stack+0x21c/0x280 [ 3559.880330][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3559.880330][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3559.880330][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3559.880330][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3559.880330][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3559.880330][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3559.880330][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3559.880330][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3559.880330][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3559.880330][T23882] ? _copy_from_user+0x201/0x310 [ 3559.880330][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3559.880330][T23882] __msan_chain_origin+0x57/0xa0 [ 3559.880330][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3559.880330][T23882] get_compat_msghdr+0x108/0x2b0 [ 3559.880330][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3559.880330][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3559.880330][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3559.880330][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3559.880330][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3559.880330][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3559.880330][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3559.880330][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3559.880330][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3559.880330][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3559.880330][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3559.880330][T23882] __do_fast_syscall_32+0x129/0x180 [ 3559.880330][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3559.880330][T23882] do_SYSENTER_32+0x73/0x90 [ 3559.880330][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3559.880330][T23882] RIP: 0023:0xf7ff3549 [ 3559.880330][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3559.880330][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3559.880330][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3559.880330][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3559.880330][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3559.880330][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3559.880330][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3559.880330][T23882] Uninit was stored to memory at: [ 3559.880330][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3559.880330][T23882] __msan_chain_origin+0x57/0xa0 [ 3559.880330][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3559.880330][T23882] get_compat_msghdr+0x108/0x2b0 [ 3559.880330][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3559.880330][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3559.880330][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3559.880330][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3559.880330][T23882] __do_fast_syscall_32+0x129/0x180 [ 3559.880330][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3559.880330][T23882] do_SYSENTER_32+0x73/0x90 [ 3559.880330][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3559.880330][T23882] [ 3559.880330][T23882] Uninit was stored to memory at: [ 3559.880330][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3559.880330][T23882] __msan_chain_origin+0x57/0xa0 [ 3559.880330][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3559.880330][T23882] get_compat_msghdr+0x108/0x2b0 [ 3559.880330][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3559.880330][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3559.880330][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3559.880330][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3559.880330][T23882] __do_fast_syscall_32+0x129/0x180 [ 3559.880330][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3559.880330][T23882] do_SYSENTER_32+0x73/0x90 [ 3559.880330][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3559.880330][T23882] [ 3559.880330][T23882] Uninit was stored to memory at: [ 3559.880330][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3559.880330][T23882] __msan_chain_origin+0x57/0xa0 [ 3559.880330][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3559.880330][T23882] get_compat_msghdr+0x108/0x2b0 [ 3559.880330][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3559.880330][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3559.880330][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3559.880330][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.306378][T23882] __do_fast_syscall_32+0x129/0x180 [ 3560.306378][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3560.306378][T23882] do_SYSENTER_32+0x73/0x90 [ 3560.306378][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.306378][T23882] [ 3560.306378][T23882] Uninit was stored to memory at: [ 3560.306378][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3560.306378][T23882] __msan_chain_origin+0x57/0xa0 [ 3560.306378][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3560.306378][T23882] get_compat_msghdr+0x108/0x2b0 [ 3560.306378][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3560.306378][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3560.306378][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.306378][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.306378][T23882] __do_fast_syscall_32+0x129/0x180 [ 3560.306378][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3560.306378][T23882] do_SYSENTER_32+0x73/0x90 [ 3560.306378][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.306378][T23882] [ 3560.306378][T23882] Uninit was stored to memory at: [ 3560.306378][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3560.306378][T23882] __msan_chain_origin+0x57/0xa0 [ 3560.306378][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3560.306378][T23882] get_compat_msghdr+0x108/0x2b0 [ 3560.306378][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3560.306378][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3560.306378][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.306378][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.306378][T23882] __do_fast_syscall_32+0x129/0x180 [ 3560.306378][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3560.306378][T23882] do_SYSENTER_32+0x73/0x90 [ 3560.306378][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.469810][T23880] not chained 4080000 origins [ 3560.306378][T23882] [ 3560.474535][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3560.306378][T23882] Uninit was stored to memory at: [ 3560.474535][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3560.306378][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3560.474535][T23880] Call Trace: [ 3560.306378][T23882] __msan_chain_origin+0x57/0xa0 [ 3560.474535][T23880] dump_stack+0x21c/0x280 [ 3560.306378][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3560.474535][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3560.306378][T23882] get_compat_msghdr+0x108/0x2b0 [ 3560.474535][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3560.306378][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3560.474535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3560.306378][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3560.474535][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3560.306378][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.474535][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3560.306378][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.474535][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3560.306378][T23882] __do_fast_syscall_32+0x129/0x180 [ 3560.474535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3560.306378][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3560.474535][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3560.306378][T23882] do_SYSENTER_32+0x73/0x90 [ 3560.474535][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3560.306378][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.474535][T23880] ? _copy_from_user+0x201/0x310 [ 3560.306378][T23882] [ 3560.474535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3560.306378][T23882] Uninit was stored to memory at: [ 3560.474535][T23880] __msan_chain_origin+0x57/0xa0 [ 3560.306378][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3560.474535][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3560.306378][T23882] __msan_chain_origin+0x57/0xa0 [ 3560.474535][T23880] get_compat_msghdr+0x108/0x2b0 [ 3560.306378][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3560.306378][T23882] get_compat_msghdr+0x108/0x2b0 [ 3560.474535][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3560.306378][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3560.474535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3560.306378][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3560.474535][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3560.306378][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.474535][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3560.306378][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.474535][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3560.306378][T23882] __do_fast_syscall_32+0x129/0x180 [ 3560.474535][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3560.306378][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3560.474535][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3560.306378][T23882] do_SYSENTER_32+0x73/0x90 [ 3560.474535][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3560.306378][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.474535][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.306378][T23882] [ 3560.474535][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.306378][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3560.474535][T23880] __do_fast_syscall_32+0x129/0x180 [ 3560.306378][T23882] do_recvmmsg+0xc2/0x22e0 [ 3560.474535][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3560.306378][T23882] do_recvmmsg+0xc2/0x22e0 [ 3560.474535][T23880] do_SYSENTER_32+0x73/0x90 [ 3560.798711][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.809643][T23880] RIP: 0023:0xf7ff3549 [ 3560.809643][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3560.824390][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3560.824390][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3560.824390][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3560.824390][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3560.824390][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3560.824390][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3560.824390][T23880] Uninit was stored to memory at: [ 3560.824390][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3560.824390][T23880] __msan_chain_origin+0x57/0xa0 [ 3560.824390][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3560.824390][T23880] get_compat_msghdr+0x108/0x2b0 [ 3560.824390][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3560.824390][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3560.824390][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.824390][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.824390][T23880] __do_fast_syscall_32+0x129/0x180 [ 3560.824390][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3560.824390][T23880] do_SYSENTER_32+0x73/0x90 [ 3560.824390][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.824390][T23880] [ 3560.824390][T23880] Uninit was stored to memory at: [ 3560.824390][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3560.824390][T23880] __msan_chain_origin+0x57/0xa0 [ 3560.824390][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3560.824390][T23880] get_compat_msghdr+0x108/0x2b0 [ 3560.824390][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3560.824390][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3560.824390][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.824390][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.824390][T23880] __do_fast_syscall_32+0x129/0x180 [ 3560.824390][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3560.824390][T23880] do_SYSENTER_32+0x73/0x90 [ 3560.824390][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.824390][T23880] [ 3560.824390][T23880] Uninit was stored to memory at: [ 3560.824390][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3560.824390][T23880] __msan_chain_origin+0x57/0xa0 [ 3560.824390][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3560.824390][T23880] get_compat_msghdr+0x108/0x2b0 [ 3560.824390][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3560.824390][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3560.824390][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.824390][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.824390][T23880] __do_fast_syscall_32+0x129/0x180 [ 3560.824390][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3560.824390][T23880] do_SYSENTER_32+0x73/0x90 [ 3560.824390][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.824390][T23880] [ 3560.824390][T23880] Uninit was stored to memory at: [ 3560.824390][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3560.824390][T23880] __msan_chain_origin+0x57/0xa0 [ 3560.824390][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3560.824390][T23880] get_compat_msghdr+0x108/0x2b0 [ 3560.824390][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3560.824390][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3560.824390][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.824390][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.824390][T23880] __do_fast_syscall_32+0x129/0x180 [ 3560.824390][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3560.824390][T23880] do_SYSENTER_32+0x73/0x90 [ 3560.824390][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.824390][T23880] [ 3560.824390][T23880] Uninit was stored to memory at: [ 3560.824390][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3560.824390][T23880] __msan_chain_origin+0x57/0xa0 [ 3560.824390][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3560.824390][T23880] get_compat_msghdr+0x108/0x2b0 [ 3560.824390][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3560.824390][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3560.824390][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.824390][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.824390][T23880] __do_fast_syscall_32+0x129/0x180 [ 3560.824390][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3560.824390][T23880] do_SYSENTER_32+0x73/0x90 [ 3560.824390][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.824390][T23880] [ 3560.824390][T23880] Uninit was stored to memory at: [ 3560.824390][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3560.824390][T23880] __msan_chain_origin+0x57/0xa0 [ 3560.824390][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3560.824390][T23880] get_compat_msghdr+0x108/0x2b0 [ 3560.824390][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3560.824390][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3560.824390][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.824390][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.824390][T23880] __do_fast_syscall_32+0x129/0x180 [ 3560.824390][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3560.824390][T23880] do_SYSENTER_32+0x73/0x90 [ 3560.824390][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.824390][T23880] [ 3560.824390][T23880] Uninit was stored to memory at: [ 3560.824390][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3560.824390][T23880] __msan_chain_origin+0x57/0xa0 [ 3560.824390][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3560.824390][T23880] get_compat_msghdr+0x108/0x2b0 [ 3560.824390][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3560.824390][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3560.824390][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3560.824390][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3560.824390][T23880] __do_fast_syscall_32+0x129/0x180 [ 3560.824390][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3560.824390][T23880] do_SYSENTER_32+0x73/0x90 [ 3560.824390][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3560.824390][T23880] [ 3560.824390][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3560.824390][T23880] do_recvmmsg+0xc2/0x22e0 [ 3560.824390][T23880] do_recvmmsg+0xc2/0x22e0 [ 3561.818369][T23880] not chained 4090000 origins [ 3561.823097][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3561.824564][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3561.824564][T23880] Call Trace: [ 3561.824564][T23880] dump_stack+0x21c/0x280 [ 3561.824564][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3561.824564][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3561.824564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3561.824564][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3561.824564][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3561.824564][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3561.824564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3561.824564][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3561.824564][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3561.824564][T23880] ? _copy_from_user+0x201/0x310 [ 3561.824564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3561.824564][T23880] __msan_chain_origin+0x57/0xa0 [ 3561.824564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3561.824564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3561.824564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3561.824564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3561.824564][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3561.824564][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3561.824564][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3561.824564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3561.824564][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3561.824564][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3561.824564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3561.824564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3561.824564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3561.824564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3561.824564][T23880] do_SYSENTER_32+0x73/0x90 [ 3561.824564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3561.824564][T23880] RIP: 0023:0xf7ff3549 [ 3561.824564][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3561.824564][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3561.824564][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3561.824564][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3561.824564][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3561.824564][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3561.824564][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3561.824564][T23880] Uninit was stored to memory at: [ 3561.824564][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3561.824564][T23880] __msan_chain_origin+0x57/0xa0 [ 3561.824564][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3561.824564][T23880] get_compat_msghdr+0x108/0x2b0 [ 3561.824564][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3561.824564][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3561.824564][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3561.824564][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3561.824564][T23880] __do_fast_syscall_32+0x129/0x180 [ 3561.824564][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3561.824564][T23880] do_SYSENTER_32+0x73/0x90 [ 3561.824564][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3561.824564][T23880] [ 3561.824564][T23880] Uninit was stored to memory at: [ 3561.824564][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3561.824564][T23880] __msan_chain_origin+0x57/0xa0 [ 3562.159331][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3562.159331][T23880] get_compat_msghdr+0x108/0x2b0 [ 3562.159331][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3562.159331][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3562.159331][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.159331][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.159331][T23880] __do_fast_syscall_32+0x129/0x180 [ 3562.159331][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3562.159331][T23880] do_SYSENTER_32+0x73/0x90 [ 3562.159331][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.159331][T23880] [ 3562.159331][T23880] Uninit was stored to memory at: [ 3562.159331][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3562.159331][T23880] __msan_chain_origin+0x57/0xa0 [ 3562.159331][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3562.159331][T23880] get_compat_msghdr+0x108/0x2b0 [ 3562.159331][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3562.159331][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3562.159331][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.159331][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.159331][T23880] __do_fast_syscall_32+0x129/0x180 [ 3562.159331][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3562.159331][T23880] do_SYSENTER_32+0x73/0x90 [ 3562.159331][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.159331][T23880] [ 3562.159331][T23880] Uninit was stored to memory at: [ 3562.159331][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3562.159331][T23880] __msan_chain_origin+0x57/0xa0 [ 3562.159331][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3562.159331][T23880] get_compat_msghdr+0x108/0x2b0 [ 3562.159331][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3562.159331][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3562.159331][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.159331][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.159331][T23880] __do_fast_syscall_32+0x129/0x180 [ 3562.159331][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3562.159331][T23880] do_SYSENTER_32+0x73/0x90 [ 3562.159331][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.159331][T23880] [ 3562.159331][T23880] Uninit was stored to memory at: [ 3562.159331][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3562.159331][T23880] __msan_chain_origin+0x57/0xa0 [ 3562.159331][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3562.159331][T23880] get_compat_msghdr+0x108/0x2b0 [ 3562.159331][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3562.159331][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3562.159331][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.159331][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.159331][T23880] __do_fast_syscall_32+0x129/0x180 [ 3562.159331][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3562.159331][T23880] do_SYSENTER_32+0x73/0x90 [ 3562.159331][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.159331][T23880] [ 3562.159331][T23880] Uninit was stored to memory at: [ 3562.159331][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3562.159331][T23880] __msan_chain_origin+0x57/0xa0 [ 3562.159331][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3562.159331][T23880] get_compat_msghdr+0x108/0x2b0 [ 3562.159331][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3562.159331][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3562.159331][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.159331][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.159331][T23880] __do_fast_syscall_32+0x129/0x180 [ 3562.159331][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3562.159331][T23880] do_SYSENTER_32+0x73/0x90 [ 3562.159331][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.159331][T23880] [ 3562.159331][T23880] Uninit was stored to memory at: [ 3562.159331][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3562.159331][T23880] __msan_chain_origin+0x57/0xa0 [ 3562.159331][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3562.159331][T23880] get_compat_msghdr+0x108/0x2b0 [ 3562.159331][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3562.159331][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3562.159331][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.159331][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.159331][T23880] __do_fast_syscall_32+0x129/0x180 [ 3562.159331][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3562.159331][T23880] do_SYSENTER_32+0x73/0x90 [ 3562.159331][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.159331][T23880] [ 3562.159331][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3562.159331][T23880] do_recvmmsg+0xc2/0x22e0 [ 3562.159331][T23880] do_recvmmsg+0xc2/0x22e0 [ 3562.663182][T23882] not chained 4100000 origins [ 3562.664562][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3562.664562][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3562.664562][T23882] Call Trace: [ 3562.664562][T23882] dump_stack+0x21c/0x280 [ 3562.664562][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3562.664562][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3562.664562][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3562.664562][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3562.664562][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3562.664562][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3562.664562][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3562.664562][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3562.664562][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3562.664562][T23882] ? _copy_from_user+0x201/0x310 [ 3562.746679][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3562.746679][T23882] __msan_chain_origin+0x57/0xa0 [ 3562.746679][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3562.746679][T23882] get_compat_msghdr+0x108/0x2b0 [ 3562.746679][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3562.746679][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3562.746679][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3562.746679][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3562.746679][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3562.746679][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3562.746679][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3562.746679][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3562.746679][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3562.746679][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.746679][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.746679][T23882] __do_fast_syscall_32+0x129/0x180 [ 3562.746679][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3562.746679][T23882] do_SYSENTER_32+0x73/0x90 [ 3562.746679][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.746679][T23882] RIP: 0023:0xf7ff3549 [ 3562.746679][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3562.746679][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3562.746679][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3562.746679][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3562.746679][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3562.746679][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3562.746679][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3562.746679][T23882] Uninit was stored to memory at: [ 3562.746679][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3562.746679][T23882] __msan_chain_origin+0x57/0xa0 [ 3562.746679][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3562.746679][T23882] get_compat_msghdr+0x108/0x2b0 [ 3562.746679][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3562.746679][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3562.746679][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.746679][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.746679][T23882] __do_fast_syscall_32+0x129/0x180 [ 3562.746679][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3562.746679][T23882] do_SYSENTER_32+0x73/0x90 [ 3562.746679][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.746679][T23882] [ 3562.746679][T23882] Uninit was stored to memory at: [ 3562.746679][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3562.746679][T23882] __msan_chain_origin+0x57/0xa0 [ 3562.746679][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3562.746679][T23882] get_compat_msghdr+0x108/0x2b0 [ 3562.746679][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3562.746679][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3562.746679][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.746679][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.746679][T23882] __do_fast_syscall_32+0x129/0x180 [ 3562.746679][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3562.746679][T23882] do_SYSENTER_32+0x73/0x90 [ 3562.746679][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.746679][T23882] [ 3562.746679][T23882] Uninit was stored to memory at: [ 3562.746679][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3562.746679][T23882] __msan_chain_origin+0x57/0xa0 [ 3562.746679][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3562.746679][T23882] get_compat_msghdr+0x108/0x2b0 [ 3562.746679][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3562.746679][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3562.746679][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.746679][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.746679][T23882] __do_fast_syscall_32+0x129/0x180 [ 3562.746679][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3562.746679][T23882] do_SYSENTER_32+0x73/0x90 [ 3562.746679][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.746679][T23882] [ 3562.746679][T23882] Uninit was stored to memory at: [ 3562.746679][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3562.746679][T23882] __msan_chain_origin+0x57/0xa0 [ 3562.746679][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3562.746679][T23882] get_compat_msghdr+0x108/0x2b0 [ 3562.746679][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3562.746679][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3562.746679][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.746679][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.746679][T23882] __do_fast_syscall_32+0x129/0x180 [ 3562.746679][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3562.746679][T23882] do_SYSENTER_32+0x73/0x90 [ 3562.746679][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.746679][T23882] [ 3562.746679][T23882] Uninit was stored to memory at: [ 3562.746679][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3562.746679][T23882] __msan_chain_origin+0x57/0xa0 [ 3562.746679][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3562.746679][T23882] get_compat_msghdr+0x108/0x2b0 [ 3562.746679][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3562.746679][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3562.746679][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.746679][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.746679][T23882] __do_fast_syscall_32+0x129/0x180 [ 3562.746679][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3562.746679][T23882] do_SYSENTER_32+0x73/0x90 [ 3562.746679][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.746679][T23882] [ 3562.746679][T23882] Uninit was stored to memory at: [ 3562.746679][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3562.746679][T23882] __msan_chain_origin+0x57/0xa0 [ 3562.746679][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3562.746679][T23882] get_compat_msghdr+0x108/0x2b0 [ 3562.746679][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3562.746679][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3562.746679][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.746679][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.746679][T23882] __do_fast_syscall_32+0x129/0x180 [ 3562.746679][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3562.746679][T23882] do_SYSENTER_32+0x73/0x90 [ 3562.746679][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.746679][T23882] [ 3562.746679][T23882] Uninit was stored to memory at: [ 3562.746679][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3562.746679][T23882] __msan_chain_origin+0x57/0xa0 [ 3562.746679][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3562.746679][T23882] get_compat_msghdr+0x108/0x2b0 [ 3562.746679][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3562.746679][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3562.746679][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3562.746679][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3562.746679][T23882] __do_fast_syscall_32+0x129/0x180 [ 3562.746679][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3562.746679][T23882] do_SYSENTER_32+0x73/0x90 [ 3562.746679][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3562.746679][T23882] [ 3562.746679][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3562.746679][T23882] do_recvmmsg+0xc2/0x22e0 [ 3562.746679][T23882] do_recvmmsg+0xc2/0x22e0 [ 3563.764178][T23882] not chained 4110000 origins [ 3563.764550][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3563.770647][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3563.770647][T23882] Call Trace: [ 3563.770647][T23882] dump_stack+0x21c/0x280 [ 3563.770647][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3563.770647][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3563.770647][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3563.770647][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3563.770647][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3563.770647][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3563.770647][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3563.770647][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3563.770647][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3563.770647][T23882] ? _copy_from_user+0x201/0x310 [ 3563.770647][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3563.770647][T23882] __msan_chain_origin+0x57/0xa0 [ 3563.770647][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3563.770647][T23882] get_compat_msghdr+0x108/0x2b0 [ 3563.770647][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3563.770647][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3563.770647][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3563.884674][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3563.884674][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3563.884674][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3563.884674][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3563.884674][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3563.884674][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3563.884674][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3563.884674][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3563.884674][T23882] __do_fast_syscall_32+0x129/0x180 [ 3563.884674][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3563.884674][T23882] do_SYSENTER_32+0x73/0x90 [ 3563.884674][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3563.884674][T23882] RIP: 0023:0xf7ff3549 [ 3563.954654][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3563.954654][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3563.954654][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3563.954654][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3563.954654][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3563.954654][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3563.954654][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3563.954654][T23882] Uninit was stored to memory at: [ 3563.954654][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3563.954654][T23882] __msan_chain_origin+0x57/0xa0 [ 3563.954654][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3563.954654][T23882] get_compat_msghdr+0x108/0x2b0 [ 3563.954654][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3563.954654][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3563.954654][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3563.954654][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3563.954654][T23882] __do_fast_syscall_32+0x129/0x180 [ 3563.954654][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3563.954654][T23882] do_SYSENTER_32+0x73/0x90 [ 3563.954654][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3563.954654][T23882] [ 3563.954654][T23882] Uninit was stored to memory at: [ 3563.954654][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3563.954654][T23882] __msan_chain_origin+0x57/0xa0 [ 3563.954654][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3563.954654][T23882] get_compat_msghdr+0x108/0x2b0 [ 3563.954654][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3563.954654][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3563.954654][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3563.954654][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3563.954654][T23882] __do_fast_syscall_32+0x129/0x180 [ 3563.954654][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3563.954654][T23882] do_SYSENTER_32+0x73/0x90 [ 3563.954654][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3563.954654][T23882] [ 3563.954654][T23882] Uninit was stored to memory at: [ 3563.954654][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3563.954654][T23882] __msan_chain_origin+0x57/0xa0 [ 3563.954654][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3563.954654][T23882] get_compat_msghdr+0x108/0x2b0 [ 3563.954654][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3563.954654][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3563.954654][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3563.954654][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3563.954654][T23882] __do_fast_syscall_32+0x129/0x180 [ 3563.954654][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3563.954654][T23882] do_SYSENTER_32+0x73/0x90 [ 3563.954654][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3563.954654][T23882] [ 3563.954654][T23882] Uninit was stored to memory at: [ 3563.954654][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3563.954654][T23882] __msan_chain_origin+0x57/0xa0 [ 3563.954654][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3563.954654][T23882] get_compat_msghdr+0x108/0x2b0 [ 3563.954654][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3563.954654][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3563.954654][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3563.954654][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3563.954654][T23882] __do_fast_syscall_32+0x129/0x180 [ 3563.954654][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3563.954654][T23882] do_SYSENTER_32+0x73/0x90 [ 3563.954654][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3563.954654][T23882] [ 3563.954654][T23882] Uninit was stored to memory at: [ 3563.954654][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3563.954654][T23882] __msan_chain_origin+0x57/0xa0 [ 3563.954654][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3563.954654][T23882] get_compat_msghdr+0x108/0x2b0 [ 3563.954654][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3563.954654][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3563.954654][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3563.954654][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3563.954654][T23882] __do_fast_syscall_32+0x129/0x180 [ 3563.954654][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3563.954654][T23882] do_SYSENTER_32+0x73/0x90 [ 3563.954654][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3563.954654][T23882] [ 3563.954654][T23882] Uninit was stored to memory at: [ 3563.954654][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3563.954654][T23882] __msan_chain_origin+0x57/0xa0 [ 3563.954654][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3563.954654][T23882] get_compat_msghdr+0x108/0x2b0 [ 3563.954654][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3563.954654][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3563.954654][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3563.954654][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3563.954654][T23882] __do_fast_syscall_32+0x129/0x180 [ 3563.954654][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3563.954654][T23882] do_SYSENTER_32+0x73/0x90 [ 3563.954654][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3563.954654][T23882] [ 3563.954654][T23882] Uninit was stored to memory at: [ 3563.954654][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3563.954654][T23882] __msan_chain_origin+0x57/0xa0 [ 3563.954654][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3563.954654][T23882] get_compat_msghdr+0x108/0x2b0 [ 3563.954654][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3563.954654][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3563.954654][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3563.954654][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3563.954654][T23882] __do_fast_syscall_32+0x129/0x180 [ 3563.954654][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3563.954654][T23882] do_SYSENTER_32+0x73/0x90 [ 3563.954654][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3563.954654][T23882] [ 3563.954654][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3563.954654][T23882] do_recvmmsg+0xc2/0x22e0 [ 3563.954654][T23882] do_recvmmsg+0xc2/0x22e0 [ 3564.613253][T23882] not chained 4120000 origins [ 3564.614567][T23882] CPU: 1 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3564.614567][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3564.614567][T23882] Call Trace: [ 3564.614567][T23882] dump_stack+0x21c/0x280 [ 3564.614567][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3564.614567][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3564.614567][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3564.614567][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3564.614567][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3564.614567][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3564.614567][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3564.683126][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3564.683126][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3564.683126][T23882] ? _copy_from_user+0x201/0x310 [ 3564.683126][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3564.683126][T23882] __msan_chain_origin+0x57/0xa0 [ 3564.683126][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3564.683126][T23882] get_compat_msghdr+0x108/0x2b0 [ 3564.683126][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3564.683126][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3564.683126][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3564.683126][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3564.683126][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3564.746224][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3564.746224][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3564.746224][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3564.746224][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3564.746224][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3564.746224][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3564.746224][T23882] __do_fast_syscall_32+0x129/0x180 [ 3564.746224][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3564.746224][T23882] do_SYSENTER_32+0x73/0x90 [ 3564.746224][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3564.746224][T23882] RIP: 0023:0xf7ff3549 [ 3564.746224][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3564.746224][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3564.746224][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3564.746224][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3564.746224][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3564.746224][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3564.746224][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3564.746224][T23882] Uninit was stored to memory at: [ 3564.881470][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3564.881470][T23882] __msan_chain_origin+0x57/0xa0 [ 3564.881470][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3564.881470][T23882] get_compat_msghdr+0x108/0x2b0 [ 3564.881470][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3564.881470][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3564.881470][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3564.881470][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3564.881470][T23882] __do_fast_syscall_32+0x129/0x180 [ 3564.881470][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3564.881470][T23882] do_SYSENTER_32+0x73/0x90 [ 3564.881470][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3564.881470][T23882] [ 3564.881470][T23882] Uninit was stored to memory at: [ 3564.881470][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3564.881470][T23882] __msan_chain_origin+0x57/0xa0 [ 3564.881470][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3564.881470][T23882] get_compat_msghdr+0x108/0x2b0 [ 3564.881470][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3564.881470][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3564.881470][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3564.881470][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3564.881470][T23882] __do_fast_syscall_32+0x129/0x180 [ 3564.881470][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3564.881470][T23882] do_SYSENTER_32+0x73/0x90 [ 3564.881470][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.014808][T23882] [ 3565.014808][T23882] Uninit was stored to memory at: [ 3565.014808][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3565.014808][T23882] __msan_chain_origin+0x57/0xa0 [ 3565.014808][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3565.014808][T23882] get_compat_msghdr+0x108/0x2b0 [ 3565.014808][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3565.014808][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3565.014808][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.014808][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.014808][T23882] __do_fast_syscall_32+0x129/0x180 [ 3565.014808][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3565.014808][T23882] do_SYSENTER_32+0x73/0x90 [ 3565.014808][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.084731][T23882] [ 3565.084731][T23882] Uninit was stored to memory at: [ 3565.084731][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3565.084731][T23882] __msan_chain_origin+0x57/0xa0 [ 3565.084731][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3565.084731][T23882] get_compat_msghdr+0x108/0x2b0 [ 3565.084731][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3565.084731][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3565.084731][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.084731][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.084731][T23882] __do_fast_syscall_32+0x129/0x180 [ 3565.084731][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3565.084731][T23882] do_SYSENTER_32+0x73/0x90 [ 3565.084731][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.154773][T23882] [ 3565.154773][T23882] Uninit was stored to memory at: [ 3565.154773][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3565.154773][T23882] __msan_chain_origin+0x57/0xa0 [ 3565.154773][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3565.154773][T23882] get_compat_msghdr+0x108/0x2b0 [ 3565.154773][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3565.154773][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3565.154773][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.154773][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.154773][T23882] __do_fast_syscall_32+0x129/0x180 [ 3565.154773][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3565.154773][T23882] do_SYSENTER_32+0x73/0x90 [ 3565.154773][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.154773][T23882] [ 3565.154773][T23882] Uninit was stored to memory at: [ 3565.154773][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3565.154773][T23882] __msan_chain_origin+0x57/0xa0 [ 3565.154773][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3565.154773][T23882] get_compat_msghdr+0x108/0x2b0 [ 3565.154773][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3565.154773][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3565.154773][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.154773][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.154773][T23882] __do_fast_syscall_32+0x129/0x180 [ 3565.154773][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3565.154773][T23882] do_SYSENTER_32+0x73/0x90 [ 3565.154773][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.154773][T23882] [ 3565.154773][T23882] Uninit was stored to memory at: [ 3565.154773][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3565.154773][T23882] __msan_chain_origin+0x57/0xa0 [ 3565.154773][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3565.154773][T23882] get_compat_msghdr+0x108/0x2b0 [ 3565.154773][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3565.154773][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3565.154773][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.154773][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.154773][T23882] __do_fast_syscall_32+0x129/0x180 [ 3565.154773][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3565.154773][T23882] do_SYSENTER_32+0x73/0x90 [ 3565.154773][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.154773][T23882] [ 3565.154773][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3565.154773][T23882] do_recvmmsg+0xc2/0x22e0 [ 3565.154773][T23882] do_recvmmsg+0xc2/0x22e0 [ 3565.579429][T23880] not chained 4130000 origins [ 3565.584174][T23880] CPU: 0 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3565.584556][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3565.584556][T23880] Call Trace: [ 3565.584556][T23880] dump_stack+0x21c/0x280 [ 3565.584556][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3565.584556][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3565.584556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3565.584556][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3565.584556][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3565.584556][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3565.584556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3565.584556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3565.584556][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3565.584556][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3565.584556][T23880] ? _copy_from_user+0x201/0x310 [ 3565.584556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3565.584556][T23880] __msan_chain_origin+0x57/0xa0 [ 3565.584556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3565.584556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3565.584556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3565.584556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3565.584556][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3565.584556][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3565.584556][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3565.584556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3565.584556][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3565.584556][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3565.584556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.584556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.584556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3565.584556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3565.584556][T23880] do_SYSENTER_32+0x73/0x90 [ 3565.584556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.584556][T23880] RIP: 0023:0xf7ff3549 [ 3565.584556][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3565.584556][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3565.584556][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3565.584556][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3565.584556][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3565.584556][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3565.584556][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3565.584556][T23880] Uninit was stored to memory at: [ 3565.584556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3565.584556][T23880] __msan_chain_origin+0x57/0xa0 [ 3565.584556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3565.584556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3565.584556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3565.584556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3565.584556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.584556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.584556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3565.584556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3565.584556][T23880] do_SYSENTER_32+0x73/0x90 [ 3565.584556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.584556][T23880] [ 3565.584556][T23880] Uninit was stored to memory at: [ 3565.584556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3565.584556][T23880] __msan_chain_origin+0x57/0xa0 [ 3565.584556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3565.584556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3565.584556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3565.584556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3565.584556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.584556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.584556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3565.584556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3565.584556][T23880] do_SYSENTER_32+0x73/0x90 [ 3565.584556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.584556][T23880] [ 3565.584556][T23880] Uninit was stored to memory at: [ 3565.584556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3565.584556][T23880] __msan_chain_origin+0x57/0xa0 [ 3565.584556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3565.584556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3565.584556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3565.584556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3565.584556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.584556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.584556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3565.584556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3565.584556][T23880] do_SYSENTER_32+0x73/0x90 [ 3565.584556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.584556][T23880] [ 3565.584556][T23880] Uninit was stored to memory at: [ 3565.584556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3565.584556][T23880] __msan_chain_origin+0x57/0xa0 [ 3565.584556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3565.584556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3565.584556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3565.584556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3565.584556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.584556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.584556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3565.584556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3565.584556][T23880] do_SYSENTER_32+0x73/0x90 [ 3565.584556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.584556][T23880] [ 3565.584556][T23880] Uninit was stored to memory at: [ 3565.584556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3565.584556][T23880] __msan_chain_origin+0x57/0xa0 [ 3565.584556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3565.584556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3565.584556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3565.584556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3565.584556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.584556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.584556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3565.584556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3565.584556][T23880] do_SYSENTER_32+0x73/0x90 [ 3565.584556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.584556][T23880] [ 3565.584556][T23880] Uninit was stored to memory at: [ 3565.584556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3565.584556][T23880] __msan_chain_origin+0x57/0xa0 [ 3565.584556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3565.584556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3565.584556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3565.584556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3565.584556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.584556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.584556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3565.584556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3565.584556][T23880] do_SYSENTER_32+0x73/0x90 [ 3565.584556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.584556][T23880] [ 3565.584556][T23880] Uninit was stored to memory at: [ 3565.584556][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3565.584556][T23880] __msan_chain_origin+0x57/0xa0 [ 3565.584556][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3565.584556][T23880] get_compat_msghdr+0x108/0x2b0 [ 3565.584556][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3565.584556][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3565.584556][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3565.584556][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3565.584556][T23880] __do_fast_syscall_32+0x129/0x180 [ 3565.584556][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3565.584556][T23880] do_SYSENTER_32+0x73/0x90 [ 3565.584556][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3565.584556][T23880] [ 3565.584556][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3565.584556][T23880] do_recvmmsg+0xc2/0x22e0 [ 3565.584556][T23880] do_recvmmsg+0xc2/0x22e0 [ 3566.691919][T23882] not chained 4140000 origins [ 3566.694563][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3566.694563][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3566.694563][T23882] Call Trace: [ 3566.694563][T23882] dump_stack+0x21c/0x280 [ 3566.694563][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3566.694563][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3566.694563][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3566.694563][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3566.741141][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3566.741141][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3566.741141][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3566.741141][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3566.741141][T23882] ? _copy_from_user+0x201/0x310 [ 3566.741141][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] __msan_chain_origin+0x57/0xa0 [ 3566.741141][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3566.741141][T23882] get_compat_msghdr+0x108/0x2b0 [ 3566.741141][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3566.741141][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3566.741141][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3566.741141][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3566.741141][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3566.741141][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3566.741141][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.741141][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.741141][T23882] __do_fast_syscall_32+0x129/0x180 [ 3566.741141][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3566.741141][T23882] do_SYSENTER_32+0x73/0x90 [ 3566.741141][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.741141][T23882] RIP: 0023:0xf7ff3549 [ 3566.741141][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3566.741141][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3566.741141][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3566.741141][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3566.741141][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3566.741141][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3566.741141][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3566.741141][T23882] Uninit was stored to memory at: [ 3566.741141][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3566.741141][T23882] __msan_chain_origin+0x57/0xa0 [ 3566.741141][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3566.741141][T23882] get_compat_msghdr+0x108/0x2b0 [ 3566.741141][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3566.741141][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3566.741141][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.990924][T23880] not chained 4150000 origins [ 3566.741141][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.994530][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3566.741141][T23882] __do_fast_syscall_32+0x129/0x180 [ 3566.994530][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3566.741141][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3566.994530][T23880] Call Trace: [ 3566.741141][T23882] do_SYSENTER_32+0x73/0x90 [ 3566.994530][T23880] dump_stack+0x21c/0x280 [ 3566.741141][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.994530][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3566.741141][T23882] [ 3566.994530][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3566.741141][T23882] Uninit was stored to memory at: [ 3566.994530][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3566.994530][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3566.741141][T23882] __msan_chain_origin+0x57/0xa0 [ 3566.994530][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3566.741141][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3566.994530][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3566.741141][T23882] get_compat_msghdr+0x108/0x2b0 [ 3566.994530][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3566.741141][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3566.741141][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3566.994530][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.994530][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3566.741141][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.994530][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3566.741141][T23882] __do_fast_syscall_32+0x129/0x180 [ 3566.994530][T23880] ? _copy_from_user+0x201/0x310 [ 3566.741141][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3566.994530][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] do_SYSENTER_32+0x73/0x90 [ 3566.994530][T23880] __msan_chain_origin+0x57/0xa0 [ 3566.741141][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.994530][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3566.741141][T23882] [ 3566.994530][T23880] get_compat_msghdr+0x108/0x2b0 [ 3566.741141][T23882] Uninit was stored to memory at: [ 3566.994530][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3566.741141][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3566.994530][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] __msan_chain_origin+0x57/0xa0 [ 3566.994530][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3566.741141][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3566.994530][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3566.741141][T23882] get_compat_msghdr+0x108/0x2b0 [ 3566.994530][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3566.741141][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3566.994530][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3566.741141][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3566.994530][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3566.741141][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.994530][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3566.741141][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.994530][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.741141][T23882] __do_fast_syscall_32+0x129/0x180 [ 3566.994530][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.741141][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3566.994530][T23880] __do_fast_syscall_32+0x129/0x180 [ 3566.741141][T23882] do_SYSENTER_32+0x73/0x90 [ 3566.994530][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3566.741141][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.994530][T23880] do_SYSENTER_32+0x73/0x90 [ 3566.741141][T23882] [ 3566.994530][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.741141][T23882] Uninit was stored to memory at: [ 3566.994530][T23880] RIP: 0023:0xf7ff3549 [ 3566.741141][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3566.994530][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3566.741141][T23882] __msan_chain_origin+0x57/0xa0 [ 3566.994530][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3566.741141][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3566.994530][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3566.741141][T23882] get_compat_msghdr+0x108/0x2b0 [ 3566.994530][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3566.741141][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3566.994530][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3566.741141][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3566.994530][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3566.741141][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.994530][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3566.741141][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.994530][T23880] Uninit was stored to memory at: [ 3566.741141][T23882] __do_fast_syscall_32+0x129/0x180 [ 3566.994530][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3566.741141][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3566.994530][T23880] __msan_chain_origin+0x57/0xa0 [ 3566.741141][T23882] do_SYSENTER_32+0x73/0x90 [ 3566.994530][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3566.741141][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.994530][T23880] get_compat_msghdr+0x108/0x2b0 [ 3566.741141][T23882] [ 3566.994530][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3566.741141][T23882] Uninit was stored to memory at: [ 3566.994530][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3566.741141][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3566.994530][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.741141][T23882] __msan_chain_origin+0x57/0xa0 [ 3566.994530][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.741141][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3566.994530][T23880] __do_fast_syscall_32+0x129/0x180 [ 3566.741141][T23882] get_compat_msghdr+0x108/0x2b0 [ 3566.994530][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3566.741141][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3566.994530][T23880] do_SYSENTER_32+0x73/0x90 [ 3566.741141][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3566.994530][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.741141][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.994530][T23880] [ 3566.741141][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.994530][T23880] Uninit was stored to memory at: [ 3566.741141][T23882] __do_fast_syscall_32+0x129/0x180 [ 3566.994530][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3566.741141][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3566.994530][T23880] __msan_chain_origin+0x57/0xa0 [ 3566.741141][T23882] do_SYSENTER_32+0x73/0x90 [ 3566.994530][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3566.741141][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.994530][T23880] get_compat_msghdr+0x108/0x2b0 [ 3566.741141][T23882] [ 3566.994530][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3566.741141][T23882] Uninit was stored to memory at: [ 3566.994530][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3566.741141][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3566.994530][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.741141][T23882] __msan_chain_origin+0x57/0xa0 [ 3566.994530][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.741141][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3566.994530][T23880] __do_fast_syscall_32+0x129/0x180 [ 3566.741141][T23882] get_compat_msghdr+0x108/0x2b0 [ 3566.994530][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3566.741141][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3566.994530][T23880] do_SYSENTER_32+0x73/0x90 [ 3566.741141][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3566.994530][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.741141][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.994530][T23880] [ 3566.741141][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.994530][T23880] Uninit was stored to memory at: [ 3566.741141][T23882] __do_fast_syscall_32+0x129/0x180 [ 3566.994530][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3566.741141][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3566.994530][T23880] __msan_chain_origin+0x57/0xa0 [ 3566.741141][T23882] do_SYSENTER_32+0x73/0x90 [ 3566.994530][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3566.741141][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.994530][T23880] get_compat_msghdr+0x108/0x2b0 [ 3566.741141][T23882] [ 3566.994530][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3566.741141][T23882] Uninit was stored to memory at: [ 3566.994530][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3566.741141][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3566.994530][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.741141][T23882] __msan_chain_origin+0x57/0xa0 [ 3566.994530][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.741141][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3566.994530][T23880] __do_fast_syscall_32+0x129/0x180 [ 3566.741141][T23882] get_compat_msghdr+0x108/0x2b0 [ 3566.994530][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3566.741141][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3566.994530][T23880] do_SYSENTER_32+0x73/0x90 [ 3566.741141][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3566.994530][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.741141][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.994530][T23880] [ 3566.741141][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3566.994530][T23880] Uninit was stored to memory at: [ 3566.741141][T23882] __do_fast_syscall_32+0x129/0x180 [ 3566.994530][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3566.741141][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3566.994530][T23880] __msan_chain_origin+0x57/0xa0 [ 3566.741141][T23882] do_SYSENTER_32+0x73/0x90 [ 3566.994530][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3566.741141][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3566.994530][T23880] get_compat_msghdr+0x108/0x2b0 [ 3566.741141][T23882] [ 3566.994530][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3566.741141][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3566.994530][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3566.741141][T23882] do_recvmmsg+0xc2/0x22e0 [ 3566.994530][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3566.741141][T23882] do_recvmmsg+0xc2/0x22e0 [ 3566.994530][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3567.977470][T23880] __do_fast_syscall_32+0x129/0x180 [ 3567.977470][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3567.977470][T23880] do_SYSENTER_32+0x73/0x90 [ 3567.977470][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.000502][T23880] [ 3568.000502][T23880] Uninit was stored to memory at: [ 3568.000502][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3568.000502][T23880] __msan_chain_origin+0x57/0xa0 [ 3568.020432][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3568.020432][T23880] get_compat_msghdr+0x108/0x2b0 [ 3568.020432][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3568.036274][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3568.036274][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.036274][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.036274][T23880] __do_fast_syscall_32+0x129/0x180 [ 3568.036274][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3568.036274][T23880] do_SYSENTER_32+0x73/0x90 [ 3568.036274][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.036274][T23880] [ 3568.036274][T23880] Uninit was stored to memory at: [ 3568.036274][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3568.036274][T23880] __msan_chain_origin+0x57/0xa0 [ 3568.036274][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3568.036274][T23880] get_compat_msghdr+0x108/0x2b0 [ 3568.036274][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3568.036274][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3568.036274][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.036274][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.036274][T23880] __do_fast_syscall_32+0x129/0x180 [ 3568.036274][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3568.036274][T23880] do_SYSENTER_32+0x73/0x90 [ 3568.036274][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.036274][T23880] [ 3568.036274][T23880] Uninit was stored to memory at: [ 3568.036274][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3568.036274][T23880] __msan_chain_origin+0x57/0xa0 [ 3568.036274][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3568.036274][T23880] get_compat_msghdr+0x108/0x2b0 [ 3568.036274][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3568.036274][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3568.036274][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.036274][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.036274][T23880] __do_fast_syscall_32+0x129/0x180 [ 3568.036274][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3568.036274][T23880] do_SYSENTER_32+0x73/0x90 [ 3568.036274][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.036274][T23880] [ 3568.036274][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3568.036274][T23880] do_recvmmsg+0xc2/0x22e0 [ 3568.036274][T23880] do_recvmmsg+0xc2/0x22e0 [ 3568.510190][T23882] not chained 4160000 origins [ 3568.514564][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3568.514564][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3568.514564][T23882] Call Trace: [ 3568.514564][T23882] dump_stack+0x21c/0x280 [ 3568.514564][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3568.514564][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3568.514564][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3568.514564][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3568.514564][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3568.514564][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3568.514564][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3568.514564][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3568.514564][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3568.514564][T23882] ? _copy_from_user+0x201/0x310 [ 3568.514564][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3568.514564][T23882] __msan_chain_origin+0x57/0xa0 [ 3568.514564][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3568.514564][T23882] get_compat_msghdr+0x108/0x2b0 [ 3568.514564][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3568.514564][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3568.514564][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3568.514564][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3568.514564][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3568.514564][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3568.514564][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3568.514564][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3568.514564][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3568.514564][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.514564][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.514564][T23882] __do_fast_syscall_32+0x129/0x180 [ 3568.514564][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3568.514564][T23882] do_SYSENTER_32+0x73/0x90 [ 3568.514564][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.514564][T23882] RIP: 0023:0xf7ff3549 [ 3568.514564][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3568.514564][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3568.514564][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3568.514564][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3568.514564][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3568.514564][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3568.514564][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3568.514564][T23882] Uninit was stored to memory at: [ 3568.514564][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3568.514564][T23882] __msan_chain_origin+0x57/0xa0 [ 3568.514564][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3568.514564][T23882] get_compat_msghdr+0x108/0x2b0 [ 3568.514564][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3568.514564][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3568.514564][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.514564][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.514564][T23882] __do_fast_syscall_32+0x129/0x180 [ 3568.514564][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3568.514564][T23882] do_SYSENTER_32+0x73/0x90 [ 3568.514564][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.514564][T23882] [ 3568.514564][T23882] Uninit was stored to memory at: [ 3568.514564][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3568.514564][T23882] __msan_chain_origin+0x57/0xa0 [ 3568.514564][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3568.514564][T23882] get_compat_msghdr+0x108/0x2b0 [ 3568.514564][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3568.514564][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3568.514564][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.514564][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.514564][T23882] __do_fast_syscall_32+0x129/0x180 [ 3568.514564][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3568.514564][T23882] do_SYSENTER_32+0x73/0x90 [ 3568.514564][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.514564][T23882] [ 3568.514564][T23882] Uninit was stored to memory at: [ 3568.514564][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3568.514564][T23882] __msan_chain_origin+0x57/0xa0 [ 3568.514564][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3568.514564][T23882] get_compat_msghdr+0x108/0x2b0 [ 3568.514564][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3568.514564][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3568.514564][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.514564][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.514564][T23882] __do_fast_syscall_32+0x129/0x180 [ 3568.514564][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3568.514564][T23882] do_SYSENTER_32+0x73/0x90 [ 3568.514564][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.514564][T23882] [ 3568.514564][T23882] Uninit was stored to memory at: [ 3568.514564][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3568.514564][T23882] __msan_chain_origin+0x57/0xa0 [ 3568.514564][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3568.514564][T23882] get_compat_msghdr+0x108/0x2b0 [ 3568.514564][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3568.514564][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3568.514564][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.514564][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.514564][T23882] __do_fast_syscall_32+0x129/0x180 [ 3568.514564][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3568.514564][T23882] do_SYSENTER_32+0x73/0x90 [ 3568.514564][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.514564][T23882] [ 3568.514564][T23882] Uninit was stored to memory at: [ 3568.514564][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3568.514564][T23882] __msan_chain_origin+0x57/0xa0 [ 3568.514564][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3568.514564][T23882] get_compat_msghdr+0x108/0x2b0 [ 3568.514564][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3568.514564][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3568.514564][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.514564][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.514564][T23882] __do_fast_syscall_32+0x129/0x180 [ 3568.514564][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3568.514564][T23882] do_SYSENTER_32+0x73/0x90 [ 3568.514564][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.514564][T23882] [ 3568.514564][T23882] Uninit was stored to memory at: [ 3568.514564][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3568.514564][T23882] __msan_chain_origin+0x57/0xa0 [ 3568.514564][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3568.514564][T23882] get_compat_msghdr+0x108/0x2b0 [ 3568.514564][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3568.514564][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3568.514564][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.514564][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.514564][T23882] __do_fast_syscall_32+0x129/0x180 [ 3568.514564][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3568.514564][T23882] do_SYSENTER_32+0x73/0x90 [ 3568.514564][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.514564][T23882] [ 3568.514564][T23882] Uninit was stored to memory at: [ 3568.514564][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3568.514564][T23882] __msan_chain_origin+0x57/0xa0 [ 3568.514564][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3568.514564][T23882] get_compat_msghdr+0x108/0x2b0 [ 3568.514564][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3568.514564][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3568.514564][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3568.514564][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3568.514564][T23882] __do_fast_syscall_32+0x129/0x180 [ 3568.514564][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3568.514564][T23882] do_SYSENTER_32+0x73/0x90 [ 3568.514564][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3568.514564][T23882] [ 3568.514564][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3568.514564][T23882] do_recvmmsg+0xc2/0x22e0 [ 3568.514564][T23882] do_recvmmsg+0xc2/0x22e0 [ 3569.447963][T23882] not chained 4170000 origins [ 3569.452888][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3569.454558][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3569.454558][T23882] Call Trace: [ 3569.454558][T23882] dump_stack+0x21c/0x280 [ 3569.454558][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3569.454558][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3569.454558][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3569.454558][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3569.454558][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3569.506214][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3569.506214][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3569.506214][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3569.506214][T23882] ? _copy_from_user+0x201/0x310 [ 3569.506214][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] __msan_chain_origin+0x57/0xa0 [ 3569.506214][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3569.506214][T23882] get_compat_msghdr+0x108/0x2b0 [ 3569.506214][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3569.506214][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3569.506214][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3569.506214][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3569.506214][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3569.506214][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3569.506214][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.506214][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.615458][T23880] not chained 4180000 origins [ 3569.506214][T23882] __do_fast_syscall_32+0x129/0x180 [ 3569.506214][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3569.506214][T23882] do_SYSENTER_32+0x73/0x90 [ 3569.506214][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.506214][T23882] RIP: 0023:0xf7ff3549 [ 3569.506214][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3569.506214][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3569.506214][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3569.506214][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3569.506214][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3569.506214][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3569.506214][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3569.506214][T23882] Uninit was stored to memory at: [ 3569.624547][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3569.624547][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3569.506214][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3569.624547][T23880] Call Trace: [ 3569.506214][T23882] __msan_chain_origin+0x57/0xa0 [ 3569.624547][T23880] dump_stack+0x21c/0x280 [ 3569.506214][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3569.624547][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3569.506214][T23882] get_compat_msghdr+0x108/0x2b0 [ 3569.624547][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3569.506214][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3569.624547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3569.624547][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3569.506214][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.624547][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3569.506214][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.624547][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3569.506214][T23882] __do_fast_syscall_32+0x129/0x180 [ 3569.624547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3569.624547][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3569.506214][T23882] do_SYSENTER_32+0x73/0x90 [ 3569.624547][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3569.506214][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.624547][T23880] ? _copy_from_user+0x201/0x310 [ 3569.506214][T23882] [ 3569.624547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] Uninit was stored to memory at: [ 3569.624547][T23880] __msan_chain_origin+0x57/0xa0 [ 3569.506214][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3569.624547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3569.506214][T23882] __msan_chain_origin+0x57/0xa0 [ 3569.624547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3569.506214][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3569.624547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3569.506214][T23882] get_compat_msghdr+0x108/0x2b0 [ 3569.624547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3569.624547][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3569.506214][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3569.624547][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3569.506214][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.624547][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3569.506214][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.624547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3569.506214][T23882] __do_fast_syscall_32+0x129/0x180 [ 3569.624547][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3569.506214][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3569.506214][T23882] do_SYSENTER_32+0x73/0x90 [ 3569.624547][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3569.506214][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.624547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.506214][T23882] [ 3569.624547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.506214][T23882] Uninit was stored to memory at: [ 3569.624547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3569.506214][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3569.624547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3569.506214][T23882] __msan_chain_origin+0x57/0xa0 [ 3569.624547][T23880] do_SYSENTER_32+0x73/0x90 [ 3569.506214][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3569.624547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.506214][T23882] get_compat_msghdr+0x108/0x2b0 [ 3569.624547][T23880] RIP: 0023:0xf7ff3549 [ 3569.506214][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3569.624547][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3569.506214][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3569.624547][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3569.506214][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.624547][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3569.506214][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.624547][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3569.506214][T23882] __do_fast_syscall_32+0x129/0x180 [ 3569.624547][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3569.506214][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3569.624547][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3569.506214][T23882] do_SYSENTER_32+0x73/0x90 [ 3569.624547][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3569.506214][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.506214][T23882] [ 3569.624547][T23880] Uninit was stored to memory at: [ 3569.506214][T23882] Uninit was stored to memory at: [ 3569.624547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3569.506214][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3569.624547][T23880] __msan_chain_origin+0x57/0xa0 [ 3569.506214][T23882] __msan_chain_origin+0x57/0xa0 [ 3569.624547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3569.506214][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3569.624547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3569.506214][T23882] get_compat_msghdr+0x108/0x2b0 [ 3569.624547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3569.506214][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3569.624547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3569.506214][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3569.624547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.506214][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.624547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.506214][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.624547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3569.506214][T23882] __do_fast_syscall_32+0x129/0x180 [ 3569.624547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3569.506214][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3569.624547][T23880] do_SYSENTER_32+0x73/0x90 [ 3569.506214][T23882] do_SYSENTER_32+0x73/0x90 [ 3569.624547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.506214][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.624547][T23880] [ 3569.506214][T23882] [ 3569.624547][T23880] Uninit was stored to memory at: [ 3569.506214][T23882] Uninit was stored to memory at: [ 3569.624547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3569.506214][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3569.624547][T23880] __msan_chain_origin+0x57/0xa0 [ 3569.506214][T23882] __msan_chain_origin+0x57/0xa0 [ 3569.624547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3569.506214][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3569.624547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3569.506214][T23882] get_compat_msghdr+0x108/0x2b0 [ 3569.624547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3569.506214][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3569.624547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3569.506214][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3569.624547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.506214][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.624547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.506214][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.624547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3569.506214][T23882] __do_fast_syscall_32+0x129/0x180 [ 3569.624547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3569.506214][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3569.624547][T23880] do_SYSENTER_32+0x73/0x90 [ 3569.506214][T23882] do_SYSENTER_32+0x73/0x90 [ 3569.624547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.506214][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.624547][T23880] [ 3569.506214][T23882] [ 3569.624547][T23880] Uninit was stored to memory at: [ 3569.506214][T23882] Uninit was stored to memory at: [ 3569.624547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3569.506214][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3569.624547][T23880] __msan_chain_origin+0x57/0xa0 [ 3569.506214][T23882] __msan_chain_origin+0x57/0xa0 [ 3569.624547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3569.506214][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3569.624547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3569.506214][T23882] get_compat_msghdr+0x108/0x2b0 [ 3569.624547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3569.506214][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3569.624547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3569.506214][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3569.624547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.506214][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.624547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.506214][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.624547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3569.506214][T23882] __do_fast_syscall_32+0x129/0x180 [ 3569.506214][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3569.624547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3569.506214][T23882] do_SYSENTER_32+0x73/0x90 [ 3569.506214][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.624547][T23880] do_SYSENTER_32+0x73/0x90 [ 3569.506214][T23882] [ 3569.624547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.506214][T23882] Uninit was stored to memory at: [ 3569.624547][T23880] [ 3569.506214][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3569.624547][T23880] Uninit was stored to memory at: [ 3569.506214][T23882] __msan_chain_origin+0x57/0xa0 [ 3569.624547][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3569.506214][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3569.624547][T23880] __msan_chain_origin+0x57/0xa0 [ 3569.506214][T23882] get_compat_msghdr+0x108/0x2b0 [ 3569.624547][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3569.506214][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3569.624547][T23880] get_compat_msghdr+0x108/0x2b0 [ 3569.506214][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3569.624547][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3569.506214][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.624547][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3569.506214][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.506214][T23882] __do_fast_syscall_32+0x129/0x180 [ 3569.624547][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3569.506214][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3569.624547][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3569.506214][T23882] do_SYSENTER_32+0x73/0x90 [ 3569.624547][T23880] __do_fast_syscall_32+0x129/0x180 [ 3569.506214][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.624547][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3569.506214][T23882] [ 3569.624547][T23880] do_SYSENTER_32+0x73/0x90 [ 3569.506214][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3569.624547][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3569.506214][T23882] do_recvmmsg+0xc2/0x22e0 [ 3569.624547][T23880] [ 3569.506214][T23882] do_recvmmsg+0xc2/0x22e0 [ 3569.624547][T23880] Uninit was stored to memory at: [ 3570.768623][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3570.768623][T23880] __msan_chain_origin+0x57/0xa0 [ 3570.768623][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3570.768623][T23880] get_compat_msghdr+0x108/0x2b0 [ 3570.768623][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3570.768623][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3570.768623][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3570.768623][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3570.768623][T23880] __do_fast_syscall_32+0x129/0x180 [ 3570.768623][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3570.768623][T23880] do_SYSENTER_32+0x73/0x90 [ 3570.768623][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3570.768623][T23880] [ 3570.768623][T23880] Uninit was stored to memory at: [ 3570.768623][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3570.768623][T23880] __msan_chain_origin+0x57/0xa0 [ 3570.768623][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3570.768623][T23880] get_compat_msghdr+0x108/0x2b0 [ 3570.768623][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3570.768623][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3570.768623][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3570.768623][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3570.768623][T23880] __do_fast_syscall_32+0x129/0x180 [ 3570.768623][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3570.768623][T23880] do_SYSENTER_32+0x73/0x90 [ 3570.768623][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3570.768623][T23880] [ 3570.768623][T23880] Uninit was stored to memory at: [ 3570.768623][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3570.768623][T23880] __msan_chain_origin+0x57/0xa0 [ 3570.768623][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3570.768623][T23880] get_compat_msghdr+0x108/0x2b0 [ 3570.768623][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3570.768623][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3570.768623][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3570.768623][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3570.768623][T23880] __do_fast_syscall_32+0x129/0x180 [ 3570.768623][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3570.768623][T23880] do_SYSENTER_32+0x73/0x90 [ 3570.768623][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3570.768623][T23880] [ 3570.768623][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3570.768623][T23880] do_recvmmsg+0xc2/0x22e0 [ 3570.768623][T23880] do_recvmmsg+0xc2/0x22e0 [ 3571.285402][T23880] not chained 4190000 origins [ 3571.290117][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3571.294668][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3571.304702][T23880] Call Trace: [ 3571.304702][T23880] dump_stack+0x21c/0x280 [ 3571.304702][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3571.304702][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3571.304702][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3571.304702][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3571.304702][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3571.304702][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3571.304702][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3571.304702][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3571.304702][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3571.304702][T23880] ? _copy_from_user+0x201/0x310 [ 3571.304702][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3571.304702][T23880] __msan_chain_origin+0x57/0xa0 [ 3571.304702][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3571.304702][T23880] get_compat_msghdr+0x108/0x2b0 [ 3571.304702][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3571.304702][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3571.304702][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3571.304702][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3571.304702][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3571.304702][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3571.304702][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3571.304702][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3571.304702][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3571.304702][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3571.304702][T23880] __do_fast_syscall_32+0x129/0x180 [ 3571.304702][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3571.304702][T23880] do_SYSENTER_32+0x73/0x90 [ 3571.304702][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3571.304702][T23880] RIP: 0023:0xf7ff3549 [ 3571.304702][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3571.304702][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3571.304702][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3571.304702][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3571.304702][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3571.304702][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3571.304702][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3571.304702][T23880] Uninit was stored to memory at: [ 3571.304702][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3571.304702][T23880] __msan_chain_origin+0x57/0xa0 [ 3571.304702][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3571.304702][T23880] get_compat_msghdr+0x108/0x2b0 [ 3571.304702][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3571.304702][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3571.304702][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3571.304702][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3571.304702][T23880] __do_fast_syscall_32+0x129/0x180 [ 3571.304702][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3571.304702][T23880] do_SYSENTER_32+0x73/0x90 [ 3571.304702][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3571.304702][T23880] [ 3571.304702][T23880] Uninit was stored to memory at: [ 3571.304702][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3571.304702][T23880] __msan_chain_origin+0x57/0xa0 [ 3571.304702][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3571.304702][T23880] get_compat_msghdr+0x108/0x2b0 [ 3571.304702][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3571.304702][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3571.304702][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3571.304702][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3571.304702][T23880] __do_fast_syscall_32+0x129/0x180 [ 3571.304702][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3571.304702][T23880] do_SYSENTER_32+0x73/0x90 [ 3571.304702][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3571.304702][T23880] [ 3571.304702][T23880] Uninit was stored to memory at: [ 3571.304702][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3571.304702][T23880] __msan_chain_origin+0x57/0xa0 [ 3571.304702][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3571.304702][T23880] get_compat_msghdr+0x108/0x2b0 [ 3571.304702][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3571.304702][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3571.304702][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3571.304702][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3571.304702][T23880] __do_fast_syscall_32+0x129/0x180 [ 3571.304702][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3571.304702][T23880] do_SYSENTER_32+0x73/0x90 [ 3571.304702][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3571.304702][T23880] [ 3571.304702][T23880] Uninit was stored to memory at: [ 3571.304702][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3571.304702][T23880] __msan_chain_origin+0x57/0xa0 [ 3571.304702][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3571.304702][T23880] get_compat_msghdr+0x108/0x2b0 [ 3571.304702][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3571.304702][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3571.304702][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3571.304702][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3571.304702][T23880] __do_fast_syscall_32+0x129/0x180 [ 3571.304702][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3571.304702][T23880] do_SYSENTER_32+0x73/0x90 [ 3571.304702][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3571.304702][T23880] [ 3571.304702][T23880] Uninit was stored to memory at: [ 3571.304702][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3571.304702][T23880] __msan_chain_origin+0x57/0xa0 [ 3571.304702][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3571.304702][T23880] get_compat_msghdr+0x108/0x2b0 [ 3571.304702][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3571.304702][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3571.304702][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3571.304702][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3571.304702][T23880] __do_fast_syscall_32+0x129/0x180 [ 3571.304702][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3571.304702][T23880] do_SYSENTER_32+0x73/0x90 [ 3571.304702][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3571.304702][T23880] [ 3571.304702][T23880] Uninit was stored to memory at: [ 3571.304702][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3571.304702][T23880] __msan_chain_origin+0x57/0xa0 [ 3571.304702][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3571.304702][T23880] get_compat_msghdr+0x108/0x2b0 [ 3571.304702][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3571.304702][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3571.304702][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3571.304702][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3571.304702][T23880] __do_fast_syscall_32+0x129/0x180 [ 3571.304702][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3571.304702][T23880] do_SYSENTER_32+0x73/0x90 [ 3571.304702][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3571.304702][T23880] [ 3571.304702][T23880] Uninit was stored to memory at: [ 3571.304702][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3571.304702][T23880] __msan_chain_origin+0x57/0xa0 [ 3571.304702][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3571.304702][T23880] get_compat_msghdr+0x108/0x2b0 [ 3571.304702][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3571.304702][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3571.304702][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3571.304702][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3571.304702][T23880] __do_fast_syscall_32+0x129/0x180 [ 3571.304702][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3572.035119][T23880] do_SYSENTER_32+0x73/0x90 [ 3572.035119][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3572.035119][T23880] [ 3572.035119][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3572.035119][T23880] do_recvmmsg+0xc2/0x22e0 [ 3572.035119][T23880] do_recvmmsg+0xc2/0x22e0 [ 3572.246518][T23880] not chained 4200000 origins [ 3572.251307][T23880] CPU: 1 PID: 23880 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3572.254549][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3572.269906][T23880] Call Trace: [ 3572.269906][T23880] dump_stack+0x21c/0x280 [ 3572.269906][T23880] kmsan_internal_chain_origin+0x6f/0x130 [ 3572.269906][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3572.269906][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3572.269906][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3572.269906][T23880] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3572.269906][T23880] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3572.269906][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3572.269906][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3572.269906][T23880] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3572.324737][T23880] ? _copy_from_user+0x201/0x310 [ 3572.324737][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3572.324737][T23880] __msan_chain_origin+0x57/0xa0 [ 3572.324737][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3572.324737][T23880] get_compat_msghdr+0x108/0x2b0 [ 3572.324737][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3572.324737][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3572.324737][T23880] ? kmsan_internal_set_origin+0x85/0xc0 [ 3572.324737][T23880] ? __msan_poison_alloca+0xe9/0x110 [ 3572.324737][T23880] ? __sys_recvmmsg+0xb5/0x5f0 [ 3572.324737][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3572.324737][T23880] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3572.324737][T23880] ? kmsan_get_metadata+0x116/0x180 [ 3572.324737][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3572.324737][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3572.324737][T23880] __do_fast_syscall_32+0x129/0x180 [ 3572.324737][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3572.324737][T23880] do_SYSENTER_32+0x73/0x90 [ 3572.324737][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3572.324737][T23880] RIP: 0023:0xf7ff3549 [ 3572.324737][T23880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3572.324737][T23880] RSP: 002b:00000000f55ed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3572.324737][T23880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3572.324737][T23880] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3572.324737][T23880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3572.324737][T23880] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3572.324737][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3572.324737][T23880] Uninit was stored to memory at: [ 3572.324737][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3572.324737][T23880] __msan_chain_origin+0x57/0xa0 [ 3572.324737][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3572.324737][T23880] get_compat_msghdr+0x108/0x2b0 [ 3572.324737][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3572.324737][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3572.324737][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3572.324737][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3572.324737][T23880] __do_fast_syscall_32+0x129/0x180 [ 3572.324737][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3572.324737][T23880] do_SYSENTER_32+0x73/0x90 [ 3572.324737][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3572.324737][T23880] [ 3572.324737][T23880] Uninit was stored to memory at: [ 3572.324737][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3572.324737][T23880] __msan_chain_origin+0x57/0xa0 [ 3572.324737][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3572.324737][T23880] get_compat_msghdr+0x108/0x2b0 [ 3572.324737][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3572.324737][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3572.324737][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3572.324737][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3572.324737][T23880] __do_fast_syscall_32+0x129/0x180 [ 3572.324737][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3572.324737][T23880] do_SYSENTER_32+0x73/0x90 [ 3572.324737][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3572.324737][T23880] [ 3572.324737][T23880] Uninit was stored to memory at: [ 3572.324737][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3572.324737][T23880] __msan_chain_origin+0x57/0xa0 [ 3572.324737][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3572.324737][T23880] get_compat_msghdr+0x108/0x2b0 [ 3572.324737][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3572.324737][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3572.324737][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3572.324737][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3572.324737][T23880] __do_fast_syscall_32+0x129/0x180 [ 3572.324737][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3572.324737][T23880] do_SYSENTER_32+0x73/0x90 [ 3572.324737][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3572.324737][T23880] [ 3572.324737][T23880] Uninit was stored to memory at: [ 3572.324737][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3572.324737][T23880] __msan_chain_origin+0x57/0xa0 [ 3572.324737][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3572.324737][T23880] get_compat_msghdr+0x108/0x2b0 [ 3572.324737][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3572.324737][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3572.324737][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3572.324737][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3572.324737][T23880] __do_fast_syscall_32+0x129/0x180 [ 3572.324737][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3572.324737][T23880] do_SYSENTER_32+0x73/0x90 [ 3572.324737][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3572.324737][T23880] [ 3572.324737][T23880] Uninit was stored to memory at: [ 3572.324737][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3572.324737][T23880] __msan_chain_origin+0x57/0xa0 [ 3572.324737][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3572.324737][T23880] get_compat_msghdr+0x108/0x2b0 [ 3572.324737][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3572.324737][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3572.324737][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3572.324737][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3572.324737][T23880] __do_fast_syscall_32+0x129/0x180 [ 3572.324737][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3572.324737][T23880] do_SYSENTER_32+0x73/0x90 [ 3572.324737][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3572.324737][T23880] [ 3572.324737][T23880] Uninit was stored to memory at: [ 3572.324737][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3572.324737][T23880] __msan_chain_origin+0x57/0xa0 [ 3572.324737][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3572.324737][T23880] get_compat_msghdr+0x108/0x2b0 [ 3572.324737][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3572.324737][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3572.324737][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3572.324737][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3572.324737][T23880] __do_fast_syscall_32+0x129/0x180 [ 3572.324737][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3572.324737][T23880] do_SYSENTER_32+0x73/0x90 [ 3572.324737][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3572.324737][T23880] [ 3572.324737][T23880] Uninit was stored to memory at: [ 3572.324737][T23880] kmsan_internal_chain_origin+0xad/0x130 [ 3572.324737][T23880] __msan_chain_origin+0x57/0xa0 [ 3572.324737][T23880] __get_compat_msghdr+0x6db/0x9d0 [ 3572.324737][T23880] get_compat_msghdr+0x108/0x2b0 [ 3572.324737][T23880] do_recvmmsg+0xdc7/0x22e0 [ 3572.324737][T23880] __sys_recvmmsg+0x340/0x5f0 [ 3572.324737][T23880] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3572.324737][T23880] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3572.324737][T23880] __do_fast_syscall_32+0x129/0x180 [ 3572.324737][T23880] do_fast_syscall_32+0x6a/0xc0 [ 3572.324737][T23880] do_SYSENTER_32+0x73/0x90 [ 3572.324737][T23880] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3572.324737][T23880] [ 3572.324737][T23880] Local variable ----msg_sys@do_recvmmsg created at: [ 3572.324737][T23880] do_recvmmsg+0xc2/0x22e0 [ 3572.324737][T23880] do_recvmmsg+0xc2/0x22e0 [ 3573.085399][T23882] not chained 4210000 origins [ 3573.090128][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3573.094565][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3573.094565][T23882] Call Trace: [ 3573.094565][T23882] dump_stack+0x21c/0x280 [ 3573.094565][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3573.094565][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3573.094565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3573.094565][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3573.094565][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3573.094565][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3573.094565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3573.094565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3573.094565][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3573.094565][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3573.094565][T23882] ? _copy_from_user+0x201/0x310 [ 3573.094565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3573.094565][T23882] __msan_chain_origin+0x57/0xa0 [ 3573.094565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3573.094565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3573.094565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3573.094565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3573.094565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3573.094565][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3573.094565][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3573.094565][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3573.094565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3573.094565][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3573.094565][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3573.094565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3573.094565][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3573.094565][T23882] __do_fast_syscall_32+0x129/0x180 [ 3573.094565][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3573.094565][T23882] do_SYSENTER_32+0x73/0x90 [ 3573.094565][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3573.094565][T23882] RIP: 0023:0xf7ff3549 [ 3573.094565][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3573.094565][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3573.094565][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3573.094565][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3573.094565][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3573.094565][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3573.094565][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3573.094565][T23882] Uninit was stored to memory at: [ 3573.094565][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3573.094565][T23882] __msan_chain_origin+0x57/0xa0 [ 3573.094565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3573.094565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3573.094565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3573.094565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3573.094565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3573.094565][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3573.094565][T23882] __do_fast_syscall_32+0x129/0x180 [ 3573.094565][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3573.094565][T23882] do_SYSENTER_32+0x73/0x90 [ 3573.094565][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3573.094565][T23882] [ 3573.094565][T23882] Uninit was stored to memory at: [ 3573.094565][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3573.094565][T23882] __msan_chain_origin+0x57/0xa0 [ 3573.094565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3573.094565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3573.094565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3573.094565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3573.094565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3573.094565][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3573.094565][T23882] __do_fast_syscall_32+0x129/0x180 [ 3573.094565][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3573.094565][T23882] do_SYSENTER_32+0x73/0x90 [ 3573.094565][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3573.094565][T23882] [ 3573.094565][T23882] Uninit was stored to memory at: [ 3573.094565][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3573.094565][T23882] __msan_chain_origin+0x57/0xa0 [ 3573.094565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3573.094565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3573.094565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3573.094565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3573.094565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3573.094565][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3573.094565][T23882] __do_fast_syscall_32+0x129/0x180 [ 3573.094565][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3573.094565][T23882] do_SYSENTER_32+0x73/0x90 [ 3573.094565][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3573.094565][T23882] [ 3573.094565][T23882] Uninit was stored to memory at: [ 3573.094565][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3573.094565][T23882] __msan_chain_origin+0x57/0xa0 [ 3573.094565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3573.094565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3573.094565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3573.094565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3573.094565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3573.094565][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3573.094565][T23882] __do_fast_syscall_32+0x129/0x180 [ 3573.094565][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3573.094565][T23882] do_SYSENTER_32+0x73/0x90 [ 3573.094565][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3573.094565][T23882] [ 3573.094565][T23882] Uninit was stored to memory at: [ 3573.094565][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3573.094565][T23882] __msan_chain_origin+0x57/0xa0 [ 3573.094565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3573.094565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3573.094565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3573.094565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3573.094565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3573.094565][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3573.094565][T23882] __do_fast_syscall_32+0x129/0x180 [ 3573.094565][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3573.094565][T23882] do_SYSENTER_32+0x73/0x90 [ 3573.094565][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3573.094565][T23882] [ 3573.094565][T23882] Uninit was stored to memory at: [ 3573.094565][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3573.094565][T23882] __msan_chain_origin+0x57/0xa0 [ 3573.094565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3573.094565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3573.094565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3573.094565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3573.094565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3573.094565][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3573.094565][T23882] __do_fast_syscall_32+0x129/0x180 [ 3573.094565][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3573.094565][T23882] do_SYSENTER_32+0x73/0x90 [ 3573.094565][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3573.094565][T23882] [ 3573.094565][T23882] Uninit was stored to memory at: [ 3573.094565][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3573.094565][T23882] __msan_chain_origin+0x57/0xa0 [ 3573.094565][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3573.094565][T23882] get_compat_msghdr+0x108/0x2b0 [ 3573.094565][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3573.094565][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3573.094565][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3573.094565][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3573.094565][T23882] __do_fast_syscall_32+0x129/0x180 [ 3573.094565][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3573.094565][T23882] do_SYSENTER_32+0x73/0x90 [ 3573.094565][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3573.094565][T23882] [ 3573.094565][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3573.094565][T23882] do_recvmmsg+0xc2/0x22e0 [ 3573.094565][T23882] do_recvmmsg+0xc2/0x22e0 [ 3574.119133][T23882] not chained 4220000 origins [ 3574.123852][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3574.124566][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3574.124566][T23882] Call Trace: [ 3574.124566][T23882] dump_stack+0x21c/0x280 [ 3574.124566][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3574.124566][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3574.124566][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3574.124566][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3574.124566][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3574.124566][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3574.124566][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3574.124566][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3574.124566][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3574.124566][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3574.124566][T23882] ? _copy_from_user+0x201/0x310 [ 3574.124566][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3574.124566][T23882] __msan_chain_origin+0x57/0xa0 [ 3574.124566][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3574.124566][T23882] get_compat_msghdr+0x108/0x2b0 [ 3574.124566][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3574.124566][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3574.124566][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3574.124566][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3574.124566][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3574.124566][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3574.124566][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3574.124566][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3574.124566][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3574.124566][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3574.124566][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3574.124566][T23882] __do_fast_syscall_32+0x129/0x180 [ 3574.124566][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3574.124566][T23882] do_SYSENTER_32+0x73/0x90 [ 3574.124566][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3574.124566][T23882] RIP: 0023:0xf7ff3549 [ 3574.124566][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3574.124566][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3574.124566][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3574.124566][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3574.124566][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3574.124566][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3574.124566][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3574.124566][T23882] Uninit was stored to memory at: [ 3574.124566][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3574.124566][T23882] __msan_chain_origin+0x57/0xa0 [ 3574.124566][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3574.124566][T23882] get_compat_msghdr+0x108/0x2b0 [ 3574.124566][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3574.124566][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3574.124566][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3574.124566][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3574.124566][T23882] __do_fast_syscall_32+0x129/0x180 [ 3574.124566][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3574.124566][T23882] do_SYSENTER_32+0x73/0x90 [ 3574.124566][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3574.124566][T23882] [ 3574.124566][T23882] Uninit was stored to memory at: [ 3574.124566][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3574.124566][T23882] __msan_chain_origin+0x57/0xa0 [ 3574.124566][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3574.124566][T23882] get_compat_msghdr+0x108/0x2b0 [ 3574.124566][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3574.124566][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3574.124566][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3574.124566][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3574.124566][T23882] __do_fast_syscall_32+0x129/0x180 [ 3574.124566][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3574.124566][T23882] do_SYSENTER_32+0x73/0x90 [ 3574.124566][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3574.124566][T23882] [ 3574.124566][T23882] Uninit was stored to memory at: [ 3574.124566][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3574.124566][T23882] __msan_chain_origin+0x57/0xa0 [ 3574.124566][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3574.124566][T23882] get_compat_msghdr+0x108/0x2b0 [ 3574.124566][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3574.124566][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3574.124566][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3574.124566][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3574.124566][T23882] __do_fast_syscall_32+0x129/0x180 [ 3574.124566][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3574.124566][T23882] do_SYSENTER_32+0x73/0x90 [ 3574.124566][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3574.124566][T23882] [ 3574.124566][T23882] Uninit was stored to memory at: [ 3574.124566][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3574.124566][T23882] __msan_chain_origin+0x57/0xa0 [ 3574.124566][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3574.124566][T23882] get_compat_msghdr+0x108/0x2b0 [ 3574.124566][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3574.124566][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3574.124566][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3574.124566][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3574.124566][T23882] __do_fast_syscall_32+0x129/0x180 [ 3574.124566][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3574.124566][T23882] do_SYSENTER_32+0x73/0x90 [ 3574.124566][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3574.124566][T23882] [ 3574.124566][T23882] Uninit was stored to memory at: [ 3574.124566][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3574.124566][T23882] __msan_chain_origin+0x57/0xa0 [ 3574.124566][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3574.124566][T23882] get_compat_msghdr+0x108/0x2b0 [ 3574.124566][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3574.124566][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3574.124566][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3574.124566][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3574.124566][T23882] __do_fast_syscall_32+0x129/0x180 [ 3574.124566][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3574.124566][T23882] do_SYSENTER_32+0x73/0x90 [ 3574.124566][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3574.124566][T23882] [ 3574.124566][T23882] Uninit was stored to memory at: [ 3574.124566][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3574.124566][T23882] __msan_chain_origin+0x57/0xa0 [ 3574.124566][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3574.124566][T23882] get_compat_msghdr+0x108/0x2b0 [ 3574.124566][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3574.124566][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3574.124566][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3574.124566][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3574.124566][T23882] __do_fast_syscall_32+0x129/0x180 [ 3574.124566][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3574.124566][T23882] do_SYSENTER_32+0x73/0x90 [ 3574.124566][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3574.124566][T23882] [ 3574.124566][T23882] Uninit was stored to memory at: [ 3574.124566][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3574.124566][T23882] __msan_chain_origin+0x57/0xa0 [ 3574.124566][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3574.124566][T23882] get_compat_msghdr+0x108/0x2b0 [ 3574.124566][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3574.124566][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3574.124566][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3574.124566][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3574.124566][T23882] __do_fast_syscall_32+0x129/0x180 [ 3574.124566][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3574.124566][T23882] do_SYSENTER_32+0x73/0x90 [ 3574.124566][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3574.124566][T23882] [ 3574.124566][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3574.124566][T23882] do_recvmmsg+0xc2/0x22e0 [ 3574.124566][T23882] do_recvmmsg+0xc2/0x22e0 [ 3575.220398][T23882] not chained 4230000 origins [ 3575.224564][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3575.224564][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3575.240458][T23882] Call Trace: [ 3575.240458][T23882] dump_stack+0x21c/0x280 [ 3575.240458][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3575.240458][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3575.240458][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3575.240458][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3575.240458][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3575.240458][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3575.240458][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3575.240458][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3575.240458][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3575.240458][T23882] ? _copy_from_user+0x201/0x310 [ 3575.240458][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3575.240458][T23882] __msan_chain_origin+0x57/0xa0 [ 3575.240458][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3575.240458][T23882] get_compat_msghdr+0x108/0x2b0 [ 3575.240458][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3575.240458][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3575.240458][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3575.240458][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3575.240458][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3575.240458][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3575.240458][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3575.240458][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3575.240458][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3575.240458][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3575.240458][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3575.240458][T23882] __do_fast_syscall_32+0x129/0x180 [ 3575.240458][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3575.240458][T23882] do_SYSENTER_32+0x73/0x90 [ 3575.400635][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3575.404672][T23882] RIP: 0023:0xf7ff3549 [ 3575.404672][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3575.404672][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3575.404672][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3575.404672][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3575.404672][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3575.404672][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3575.404672][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3575.404672][T23882] Uninit was stored to memory at: [ 3575.404672][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3575.404672][T23882] __msan_chain_origin+0x57/0xa0 [ 3575.404672][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3575.404672][T23882] get_compat_msghdr+0x108/0x2b0 [ 3575.404672][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3575.404672][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3575.404672][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3575.404672][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3575.404672][T23882] __do_fast_syscall_32+0x129/0x180 [ 3575.404672][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3575.404672][T23882] do_SYSENTER_32+0x73/0x90 [ 3575.404672][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3575.404672][T23882] [ 3575.404672][T23882] Uninit was stored to memory at: [ 3575.404672][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3575.404672][T23882] __msan_chain_origin+0x57/0xa0 [ 3575.404672][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3575.404672][T23882] get_compat_msghdr+0x108/0x2b0 [ 3575.404672][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3575.404672][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3575.404672][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3575.404672][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3575.404672][T23882] __do_fast_syscall_32+0x129/0x180 [ 3575.404672][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3575.404672][T23882] do_SYSENTER_32+0x73/0x90 [ 3575.404672][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3575.404672][T23882] [ 3575.404672][T23882] Uninit was stored to memory at: [ 3575.404672][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3575.404672][T23882] __msan_chain_origin+0x57/0xa0 [ 3575.404672][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3575.404672][T23882] get_compat_msghdr+0x108/0x2b0 [ 3575.404672][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3575.404672][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3575.404672][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3575.404672][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3575.404672][T23882] __do_fast_syscall_32+0x129/0x180 [ 3575.404672][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3575.404672][T23882] do_SYSENTER_32+0x73/0x90 [ 3575.404672][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3575.404672][T23882] [ 3575.404672][T23882] Uninit was stored to memory at: [ 3575.404672][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3575.404672][T23882] __msan_chain_origin+0x57/0xa0 [ 3575.404672][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3575.404672][T23882] get_compat_msghdr+0x108/0x2b0 [ 3575.404672][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3575.404672][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3575.404672][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3575.404672][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3575.404672][T23882] __do_fast_syscall_32+0x129/0x180 [ 3575.404672][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3575.404672][T23882] do_SYSENTER_32+0x73/0x90 [ 3575.404672][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3575.404672][T23882] [ 3575.404672][T23882] Uninit was stored to memory at: [ 3575.404672][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3575.404672][T23882] __msan_chain_origin+0x57/0xa0 [ 3575.404672][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3575.404672][T23882] get_compat_msghdr+0x108/0x2b0 [ 3575.404672][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3575.404672][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3575.404672][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3575.404672][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3575.404672][T23882] __do_fast_syscall_32+0x129/0x180 [ 3575.404672][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3575.404672][T23882] do_SYSENTER_32+0x73/0x90 [ 3575.404672][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3575.404672][T23882] [ 3575.404672][T23882] Uninit was stored to memory at: [ 3575.404672][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3575.404672][T23882] __msan_chain_origin+0x57/0xa0 [ 3575.404672][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3575.404672][T23882] get_compat_msghdr+0x108/0x2b0 [ 3575.404672][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3575.404672][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3575.404672][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3575.404672][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3575.404672][T23882] __do_fast_syscall_32+0x129/0x180 [ 3575.404672][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3575.404672][T23882] do_SYSENTER_32+0x73/0x90 [ 3575.404672][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3575.404672][T23882] [ 3575.404672][T23882] Uninit was stored to memory at: [ 3575.404672][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3575.404672][T23882] __msan_chain_origin+0x57/0xa0 [ 3575.404672][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3575.404672][T23882] get_compat_msghdr+0x108/0x2b0 [ 3575.404672][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3575.404672][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3575.404672][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3575.404672][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3575.404672][T23882] __do_fast_syscall_32+0x129/0x180 [ 3575.404672][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3575.404672][T23882] do_SYSENTER_32+0x73/0x90 [ 3575.404672][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3575.404672][T23882] [ 3575.404672][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3575.404672][T23882] do_recvmmsg+0xc2/0x22e0 [ 3575.404672][T23882] do_recvmmsg+0xc2/0x22e0 [ 3576.070388][T23882] not chained 4240000 origins [ 3576.074563][T23882] CPU: 0 PID: 23882 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 3576.074563][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3576.074563][T23882] Call Trace: [ 3576.074563][T23882] dump_stack+0x21c/0x280 [ 3576.074563][T23882] kmsan_internal_chain_origin+0x6f/0x130 [ 3576.074563][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3576.074563][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3576.074563][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3576.074563][T23882] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3576.074563][T23882] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 3576.074563][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3576.074563][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3576.074563][T23882] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3576.074563][T23882] ? _copy_from_user+0x201/0x310 [ 3576.074563][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3576.074563][T23882] __msan_chain_origin+0x57/0xa0 [ 3576.074563][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3576.074563][T23882] get_compat_msghdr+0x108/0x2b0 [ 3576.074563][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3576.074563][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3576.074563][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3576.074563][T23882] ? kmsan_internal_set_origin+0x85/0xc0 [ 3576.074563][T23882] ? __msan_poison_alloca+0xe9/0x110 [ 3576.074563][T23882] ? __sys_recvmmsg+0xb5/0x5f0 [ 3576.074563][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3576.074563][T23882] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3576.074563][T23882] ? kmsan_get_metadata+0x116/0x180 [ 3576.074563][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3576.074563][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3576.074563][T23882] __do_fast_syscall_32+0x129/0x180 [ 3576.074563][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3576.074563][T23882] do_SYSENTER_32+0x73/0x90 [ 3576.074563][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3576.074563][T23882] RIP: 0023:0xf7ff3549 [ 3576.074563][T23882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3576.074563][T23882] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 3576.074563][T23882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 3576.074563][T23882] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 3576.074563][T23882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3576.074563][T23882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3576.074563][T23882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3576.074563][T23882] Uninit was stored to memory at: [ 3576.074563][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3576.074563][T23882] __msan_chain_origin+0x57/0xa0 [ 3576.074563][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3576.074563][T23882] get_compat_msghdr+0x108/0x2b0 [ 3576.074563][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3576.074563][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3576.074563][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3576.074563][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3576.074563][T23882] __do_fast_syscall_32+0x129/0x180 [ 3576.074563][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3576.074563][T23882] do_SYSENTER_32+0x73/0x90 [ 3576.074563][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3576.074563][T23882] [ 3576.074563][T23882] Uninit was stored to memory at: [ 3576.074563][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3576.074563][T23882] __msan_chain_origin+0x57/0xa0 [ 3576.074563][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3576.074563][T23882] get_compat_msghdr+0x108/0x2b0 [ 3576.074563][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3576.074563][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3576.074563][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3576.074563][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3576.074563][T23882] __do_fast_syscall_32+0x129/0x180 [ 3576.074563][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3576.074563][T23882] do_SYSENTER_32+0x73/0x90 [ 3576.074563][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3576.074563][T23882] [ 3576.074563][T23882] Uninit was stored to memory at: [ 3576.074563][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3576.074563][T23882] __msan_chain_origin+0x57/0xa0 [ 3576.074563][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3576.074563][T23882] get_compat_msghdr+0x108/0x2b0 [ 3576.074563][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3576.074563][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3576.074563][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3576.074563][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3576.074563][T23882] __do_fast_syscall_32+0x129/0x180 [ 3576.074563][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3576.074563][T23882] do_SYSENTER_32+0x73/0x90 [ 3576.074563][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3576.074563][T23882] [ 3576.074563][T23882] Uninit was stored to memory at: [ 3576.074563][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3576.074563][T23882] __msan_chain_origin+0x57/0xa0 [ 3576.074563][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3576.074563][T23882] get_compat_msghdr+0x108/0x2b0 [ 3576.074563][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3576.074563][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3576.074563][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3576.074563][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3576.074563][T23882] __do_fast_syscall_32+0x129/0x180 [ 3576.074563][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3576.074563][T23882] do_SYSENTER_32+0x73/0x90 [ 3576.074563][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3576.074563][T23882] [ 3576.074563][T23882] Uninit was stored to memory at: [ 3576.074563][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3576.074563][T23882] __msan_chain_origin+0x57/0xa0 [ 3576.074563][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3576.074563][T23882] get_compat_msghdr+0x108/0x2b0 [ 3576.074563][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3576.074563][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3576.074563][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3576.074563][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3576.074563][T23882] __do_fast_syscall_32+0x129/0x180 [ 3576.074563][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3576.074563][T23882] do_SYSENTER_32+0x73/0x90 [ 3576.074563][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3576.074563][T23882] [ 3576.074563][T23882] Uninit was stored to memory at: [ 3576.074563][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3576.074563][T23882] __msan_chain_origin+0x57/0xa0 [ 3576.074563][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3576.074563][T23882] get_compat_msghdr+0x108/0x2b0 [ 3576.074563][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3576.074563][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3576.074563][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3576.074563][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3576.074563][T23882] __do_fast_syscall_32+0x129/0x180 [ 3576.074563][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3576.074563][T23882] do_SYSENTER_32+0x73/0x90 [ 3576.074563][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3576.074563][T23882] [ 3576.074563][T23882] Uninit was stored to memory at: [ 3576.074563][T23882] kmsan_internal_chain_origin+0xad/0x130 [ 3576.074563][T23882] __msan_chain_origin+0x57/0xa0 [ 3576.074563][T23882] __get_compat_msghdr+0x6db/0x9d0 [ 3576.074563][T23882] get_compat_msghdr+0x108/0x2b0 [ 3576.074563][T23882] do_recvmmsg+0xdc7/0x22e0 [ 3576.074563][T23882] __sys_recvmmsg+0x340/0x5f0 [ 3576.074563][T23882] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 3576.074563][T23882] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 3576.074563][T23882] __do_fast_syscall_32+0x129/0x180 [ 3576.074563][T23882] do_fast_syscall_32+0x6a/0xc0 [ 3576.074563][T23882] do_SYSENTER_32+0x73/0x90 [ 3576.074563][T23882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3576.074563][T23882] [ 3576.074563][T23882] Local variable ----msg_sys@do_recvmmsg created at: [ 3576.074563][T23882] do_recvmmsg+0xc2/0x22e0 [ 3576.074563][T23882] do_recvmmsg+0xc2/0x22e0 [ 3577.635430][T20769] tipc: TX() has been purged, node left! 15:46:40 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000180)={@dev, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b5951e", 0x44, 0x2f, 0x0, @loopback, @mcast2}}}}, 0x0) 15:46:40 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x10) 15:46:40 executing program 5: wait4(0xffffffffffffffff, 0x0, 0x2, 0x0) 15:46:40 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) 15:46:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f000000b340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:46:40 executing program 4: readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/232, 0xe8) 15:46:40 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f0000003300)={&(0x7f0000001f40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, 0x0, 0x0, &(0x7f00000020c0)=[{0x10}], 0x10}, 0x0) 15:46:40 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f00000000c0), 0x10) 15:46:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f000000b340)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) 15:46:41 executing program 2: 15:46:41 executing program 0: 15:46:41 executing program 5: [ 3581.001290][T20769] device hsr_slave_0 left promiscuous mode [ 3581.013011][T20769] device hsr_slave_1 left promiscuous mode [ 3581.024758][T20769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3581.032477][T20769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3581.043789][T20769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3581.051731][T20769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3581.060971][T20769] device bridge_slave_1 left promiscuous mode [ 3581.068133][T20769] bridge0: port 2(bridge_slave_1) entered disabled state [ 3581.081869][T20769] device bridge_slave_0 left promiscuous mode [ 3581.088853][T20769] bridge0: port 1(bridge_slave_0) entered disabled state [ 3581.105747][T20769] device veth1_macvtap left promiscuous mode [ 3581.111806][T20769] device veth0_macvtap left promiscuous mode [ 3581.118261][T20769] device veth1_vlan left promiscuous mode [ 3581.124118][T20769] device veth0_vlan left promiscuous mode [ 3583.611489][T20769] team0 (unregistering): Port device team_slave_1 removed [ 3583.627985][T20769] team0 (unregistering): Port device team_slave_0 removed [ 3583.704862][T20769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3583.744851][T20769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3583.886081][T20769] bond0 (unregistering): Released all slaves [ 3584.012759][T23962] IPVS: ftp: loaded support on port[0] = 21 [ 3584.241909][T23962] chnl_net:caif_netlink_parms(): no params data found [ 3584.372852][T23962] bridge0: port 1(bridge_slave_0) entered blocking state [ 3584.380736][T23962] bridge0: port 1(bridge_slave_0) entered disabled state [ 3584.389698][T23962] device bridge_slave_0 entered promiscuous mode [ 3584.418006][T23962] bridge0: port 2(bridge_slave_1) entered blocking state [ 3584.425634][T23962] bridge0: port 2(bridge_slave_1) entered disabled state [ 3584.435804][T23962] device bridge_slave_1 entered promiscuous mode [ 3584.530791][T23962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3584.559752][T23962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3584.640326][T23962] team0: Port device team_slave_0 added [ 3584.657388][T23962] team0: Port device team_slave_1 added [ 3584.720770][T23962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3584.728902][T23962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3584.755560][T23962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3584.784470][T23962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3584.792448][T23962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3584.818942][T23962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3584.885429][T23962] device hsr_slave_0 entered promiscuous mode [ 3584.899703][T23962] device hsr_slave_1 entered promiscuous mode [ 3584.907595][T23962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3584.915606][T23962] Cannot create hsr debugfs directory [ 3585.348839][T23962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3585.379735][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3585.388307][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3585.409809][T23962] 8021q: adding VLAN 0 to HW filter on device team0 [ 3585.432127][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3585.442078][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3585.452643][T23919] bridge0: port 1(bridge_slave_0) entered blocking state [ 3585.460095][T23919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3585.482557][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3585.492370][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3585.502773][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3585.512715][T23919] bridge0: port 2(bridge_slave_1) entered blocking state [ 3585.520118][T23919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3585.541187][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3585.565916][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3585.595993][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3585.607186][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3585.617787][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3585.628942][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3585.659271][T23962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3585.670112][T23962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3585.690251][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3585.700255][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3585.710872][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3585.721986][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3585.732088][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3585.743008][T23919] Bluetooth: hci3: command 0x0409 tx timeout [ 3585.747206][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3585.787666][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3585.795948][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3585.823992][T23962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3585.938870][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3585.949092][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3585.998261][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3586.007937][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3586.025405][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3586.034505][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3586.044212][T23962] device veth0_vlan entered promiscuous mode [ 3586.070656][T23962] device veth1_vlan entered promiscuous mode [ 3586.080134][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3586.137842][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3586.147663][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3586.168439][T23962] device veth0_macvtap entered promiscuous mode [ 3586.184453][T23962] device veth1_macvtap entered promiscuous mode [ 3586.226952][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3586.237698][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.248560][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3586.259475][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.269654][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3586.280486][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.290677][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3586.301582][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.311822][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3586.322547][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.336330][T23962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3586.344898][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3586.354463][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3586.364287][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3586.374924][T23919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3586.403186][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3586.413797][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.423965][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3586.434771][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.444895][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3586.455727][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.466088][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3586.477417][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.487508][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3586.498254][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.510765][T23962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3586.522498][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3586.532750][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3586.839687][T20769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3586.848176][T20769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3586.870513][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3586.924133][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3586.932689][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3586.941852][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:46:49 executing program 3: 15:46:49 executing program 0: 15:46:49 executing program 5: 15:46:49 executing program 2: 15:46:49 executing program 4: 15:46:49 executing program 1: 15:46:50 executing program 5: 15:46:50 executing program 0: 15:46:50 executing program 2: 15:46:50 executing program 3: 15:46:50 executing program 5: 15:46:50 executing program 0: [ 3587.791230][T13680] Bluetooth: hci3: command 0x041b tx timeout 15:46:50 executing program 3: 15:46:50 executing program 2: 15:46:50 executing program 5: 15:46:51 executing program 0: 15:46:51 executing program 4: 15:46:51 executing program 1: 15:46:51 executing program 2: 15:46:51 executing program 3: 15:46:51 executing program 0: 15:46:51 executing program 5: 15:46:51 executing program 3: 15:46:51 executing program 2: 15:46:52 executing program 5: 15:46:52 executing program 0: 15:46:52 executing program 2: 15:46:52 executing program 0: [ 3589.865936][T13680] Bluetooth: hci3: command 0x040f tx timeout 15:46:52 executing program 4: 15:46:52 executing program 1: 15:46:52 executing program 3: 15:46:52 executing program 2: 15:46:52 executing program 5: 15:46:52 executing program 0: 15:46:53 executing program 3: 15:46:53 executing program 5: 15:46:53 executing program 2: 15:46:53 executing program 0: 15:46:53 executing program 3: 15:46:53 executing program 2: 15:46:54 executing program 4: 15:46:54 executing program 1: 15:46:54 executing program 5: 15:46:54 executing program 0: 15:46:54 executing program 3: 15:46:54 executing program 2: 15:46:54 executing program 0: 15:46:54 executing program 5: 15:46:54 executing program 3: 15:46:54 executing program 2: 15:46:54 executing program 4: [ 3591.945565][ T660] Bluetooth: hci3: command 0x0419 tx timeout 15:46:54 executing program 0: 15:46:54 executing program 5: 15:46:55 executing program 1: 15:46:55 executing program 3: 15:46:55 executing program 2: 15:46:55 executing program 0: 15:46:55 executing program 5: 15:46:55 executing program 2: 15:46:55 executing program 5: 15:46:55 executing program 3: 15:46:55 executing program 0: 15:46:56 executing program 4: 15:46:56 executing program 2: 15:46:56 executing program 5: 15:46:56 executing program 1: 15:46:56 executing program 3: 15:46:56 executing program 0: 15:46:56 executing program 5: 15:46:56 executing program 2: 15:46:57 executing program 0: 15:46:57 executing program 3: 15:46:57 executing program 2: 15:46:57 executing program 5: 15:46:57 executing program 4: 15:46:57 executing program 0: 15:46:57 executing program 3: 15:46:57 executing program 1: 15:46:57 executing program 2: 15:46:57 executing program 5: 15:46:58 executing program 3: 15:46:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={0x0}}, 0x0) 15:46:58 executing program 0: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000007c40)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x120051, r0, 0x0) 15:46:58 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40)='IPVS\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000003500)='devlink\x00') 15:46:58 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000016400)={&(0x7f0000016340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000163c0)={&(0x7f0000016380)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file1', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) 15:46:58 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000003d40)="bc", 0x1) 15:46:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000003a80)={'hsr0\x00', @ifru_mtu}) 15:46:59 executing program 2: pselect6(0x40, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)={0x7ff}, 0x0, 0x0) 15:46:59 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0xa00, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "c109b9214efdf59f12f789457679d57819abff3da4e2784c20dba6918f2e781acce558fd86740f52201df1467fef1b4e58ba51b03ab6adcd0d3c6c029f2e013f"}}, 0x80}}, 0x0) 15:46:59 executing program 0: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) getuid() socket$inet6(0xa, 0x6, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 15:46:59 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3938700}, 0x0) 15:46:59 executing program 1: pipe(&(0x7f0000002340)) 15:46:59 executing program 5: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000002300)) 15:46:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) 15:46:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00') 15:46:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000003680)={@private1, 0x0, 0x0, 0x0, 0xf}, &(0x7f00000036c0)=0x20) 15:46:59 executing program 5: socketpair(0x6, 0x0, 0x0, &(0x7f0000000140)) socketpair(0x0, 0x0, 0x0, &(0x7f0000003b00)) 15:46:59 executing program 3: pselect6(0x40, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)={0x7ff}, &(0x7f0000000ac0)={0x0, 0x3938700}, &(0x7f0000000b40)={&(0x7f0000000b00)={[0x101]}, 0x8}) 15:47:00 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) socket(0x3, 0x0, 0x101) 15:47:00 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') 15:47:00 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3938700}, &(0x7f0000000b40)={&(0x7f0000000b00), 0x8}) 15:47:00 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000800)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1000}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 15:47:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}]}, 0x1c}}, 0x0) 15:47:00 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000001c00)={0x7, 'virt_wifi0\x00'}) 15:47:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 15:47:00 executing program 3: pipe(&(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 15:47:00 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000019c0)={0x3, @default}) 15:47:00 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000001880)='/dev/net/tun\x00', 0x105400, 0x0) 15:47:01 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000800)) 15:47:01 executing program 0: socket$caif_stream(0x25, 0x1, 0x0) 15:47:02 executing program 4: 15:47:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 15:47:02 executing program 3: 15:47:02 executing program 5: 15:47:02 executing program 0: 15:47:02 executing program 1: 15:47:02 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x100800) 15:47:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000016400)={0x0, 0x0, &(0x7f00000163c0)={0x0}}, 0x0) 15:47:02 executing program 0: 15:47:02 executing program 2: 15:47:02 executing program 0: 15:47:02 executing program 2: 15:47:03 executing program 4: 15:47:03 executing program 3: 15:47:03 executing program 5: 15:47:03 executing program 0: 15:47:03 executing program 2: 15:47:03 executing program 1: 15:47:03 executing program 2: 15:47:03 executing program 0: 15:47:03 executing program 5: 15:47:03 executing program 3: 15:47:03 executing program 0: 15:47:03 executing program 5: 15:47:04 executing program 4: 15:47:04 executing program 2: 15:47:04 executing program 0: 15:47:04 executing program 3: 15:47:04 executing program 5: 15:47:05 executing program 1: 15:47:05 executing program 2: 15:47:05 executing program 5: 15:47:05 executing program 3: 15:47:05 executing program 0: 15:47:05 executing program 2: 15:47:05 executing program 3: 15:47:05 executing program 4: 15:47:05 executing program 0: 15:47:05 executing program 5: 15:47:05 executing program 2: 15:47:05 executing program 3: 15:47:06 executing program 1: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) pipe2(&(0x7f0000000380), 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 15:47:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:47:06 executing program 0: 15:47:06 executing program 5: 15:47:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f00000000c0)={0x0, 0xe6, 0x1, [0x1ff]}, 0xa) 15:47:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 15:47:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200), 0x8c) 15:47:06 executing program 4: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x5) 15:47:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000008400000008"], 0xc4}, 0x0) 15:47:06 executing program 3: open(&(0x7f0000000080)='./file0/../file0\x00', 0xabde9f1dc2d2f285, 0x0) 15:47:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000014c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x14}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={r2, 0x0, 0x0, 0x4}, 0x14) 15:47:06 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f0000000000)={0x4, {{0x1c, 0x1c, 0x3}}, {{0x1c, 0x1c, 0x1}}}, 0x108) 15:47:07 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 15:47:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000040)={r1}, 0x8) 15:47:07 executing program 3: r0 = socket(0x2, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xa}, 0xa) 15:47:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, &(0x7f0000000000)="85", 0x1, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 15:47:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 15:47:07 executing program 4: mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) 15:47:07 executing program 5: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x410, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 15:47:07 executing program 2: r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r1, r0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 15:47:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4, 0x0, 0x0) 15:47:07 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x0) 15:47:08 executing program 5: open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) execve(0x0, &(0x7f0000000d80)=[&(0x7f0000000340)='\x00', &(0x7f0000000b80)=')\x00', &(0x7f0000000bc0)=':\\,#\\:{.}\'+-{\x00', &(0x7f0000000c00)='\x00', &(0x7f0000000c40)='\x00', &(0x7f0000000c80)='-+}\x00', &(0x7f0000000cc0)='$\xcd\x00', &(0x7f0000000d00)='+\x00'], &(0x7f0000000f00)=[&(0x7f0000000dc0)='{{\\\x00']) 15:47:08 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x12) 15:47:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000014c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x14}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={r2}, 0x14) 15:47:09 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f0000000040)="fa", 0x1, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) 15:47:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000340)="0f", 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) 15:47:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000340)="0f", 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) 15:47:09 executing program 2: clock_nanosleep(0x5, 0x1, &(0x7f00000000c0), 0x0) 15:47:09 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x7) 15:47:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="1c1c4e2000ffffff00000000000000000000ffff7f000001f9ffdfff00"/118, @ANYRESOCT=r1], 0x98) 15:47:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@init={0x14}, @authinfo={0x10}], 0x24}, 0x0) 15:47:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x4}, 0x10) 15:47:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x105, &(0x7f0000000000)={0x10, 0x2}, 0x10) 15:47:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 15:47:09 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@file={0xa}, 0xa) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) 15:47:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x184, &(0x7f0000000040)={0x10, 0x2}, 0x10) 15:47:10 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080), 0x98) 15:47:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 15:47:10 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 15:47:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x1c}, @sndrcv={0x2c}, @authinfo={0x10}, @sndrcv={0x2c}, @sndinfo={0x1c}, @sndinfo={0x1c}], 0xbc}, 0x0) 15:47:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xb) 15:47:10 executing program 2: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff7000/0x9000)=nil, 0x9000) 15:47:10 executing program 3: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000080)) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 15:47:10 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x246, 0x0) 15:47:10 executing program 5: getgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff]) setresgid(0x0, 0xffffffffffffffff, r0) setgid(r0) 15:47:11 executing program 3: recvfrom$unix(0xffffffffffffffff, &(0x7f0000000400)=""/4085, 0xff5, 0x0, 0x0, 0xffffffffffffff9f) 15:47:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x10, 0x2}, 0x10) r1 = dup2(r0, r0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) 15:47:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xcae}, 0x14) 15:47:11 executing program 5: mlock(&(0x7f0000bfd000/0x400000)=nil, 0x400000) mlock(&(0x7f0000ff4000/0xc000)=nil, 0xc000) 15:47:11 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) 15:47:11 executing program 0: sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="83", 0x1, 0x0, 0x0, 0x0) r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/19) 15:47:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000040)=0x1b) 15:47:12 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[{0x10}], 0x10}, 0x0) 15:47:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 15:47:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a01fb7f"], 0xa) 15:47:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r1, &(0x7f0000002540)=""/138, 0x8a, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)='o', 0x1, 0x0, 0x0, 0x0) 15:47:12 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x40, 0x0, &(0x7f0000000080)) 15:47:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r1, &(0x7f0000002540)=""/138, 0x8a, 0x0, 0x0, 0x0) dup2(r1, r0) 15:47:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000400)={0x1, [0x1]}, 0x6) 15:47:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x10, 0x2}, 0x10) 15:47:12 executing program 5: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5) 15:47:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 15:47:13 executing program 5: execve(0x0, &(0x7f0000000d80)=[&(0x7f0000000340)='\x00', &(0x7f0000000b80)=')\x00', &(0x7f0000000bc0)=':\\,#\\:{.}\'+-{\x00', &(0x7f0000000c00)='\x00', &(0x7f0000000c40)='\x00', &(0x7f0000000c80)='-+}\x00', &(0x7f0000000cc0)='$\xcd\x00', &(0x7f0000000d00)='+\x00'], &(0x7f0000000f00)=[&(0x7f0000000dc0)='{{\\\x00']) 15:47:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x41b}, 0x0, 0x0) 15:47:13 executing program 3: clock_nanosleep(0x5, 0x0, &(0x7f00000010c0), 0x0) 15:47:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x8006, &(0x7f0000000000), &(0x7f0000000240)=0x3) 15:47:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@authinfo={0x10}], 0x10}, 0x0) 15:47:13 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x41, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8) 15:47:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x5, &(0x7f0000001240)={0x10, 0x2}, 0x10) 15:47:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f000001a780)=""/4110, 0x100e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x0) r3 = dup(r2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x1014a, 0x0, 0x0, 0x800e00575) shutdown(r4, 0x0) r6 = socket(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x10, 0x2}, 0x10) shutdown(r5, 0x0) 15:47:14 executing program 5: madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) 15:47:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000240)="83cb74910561d78359b98ff40da59548e4996340e15e2bd61ba05e73a59356c81716155be32e9d7f8438e85e83f3fdf1917840169485496b203d94aaaf8d381a9f4c5d80eaf139adf72e4af423fff955a6b68b581d784b02213fd2317d", 0x5d, 0x20100, &(0x7f0000001240)={0x10, 0x2}, 0x10) 15:47:14 executing program 2: sigaltstack(&(0x7f0000ff7000/0x3000)=nil, 0x0) mlock(&(0x7f0000ff4000/0xc000)=nil, 0xc000) 15:47:14 executing program 5: select(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x80000001}) 15:47:14 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 15:47:15 executing program 4: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1a023dd4c9"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r2 = socket(0x2, 0x5, 0x0) connect$unix(r2, &(0x7f0000000240)=ANY=[], 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x26, &(0x7f00000001c0)={r1}, &(0x7f0000000280)=0x8) 15:47:15 executing program 5: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 15:47:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000001c0)=0x8c) 15:47:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000014c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x14}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000014c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x14}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000100)={r2}, &(0x7f0000000040)=0x8) 15:47:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) 15:47:15 executing program 1: open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:47:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000240)="83cb74910561d78359b98ff40da59548e4996340e15e2bd61ba05e73a59356c81716155be32e9d7f8438e85e83f3fdf1917840169485496b203d94aaaf8d381a9f4c5d80eaf139adf72e4af423fff955a6b68b581d784b02213fd2317d960db66e73e03033c8c71c2c5a31e02213c2b8bcbf3246836661f622995923323d4ad656fbc5e00a8ed28b5c24e7a9ea322cf12a0462a10984222782eb4aab473e5c943d1ebf5d22f48a8e49", 0xa9, 0x20100, &(0x7f0000001240)={0x10, 0x2}, 0x10) 15:47:15 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 15:47:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="1c1c4e2000ffffff00000000000000000000ffff7f000001f9ffdfff00"/128, @ANYRES32=0x0, @ANYBLOB="0800fddd3fffd9950a"], 0x98) 15:47:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000014c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000100)={r1, 0x2, "72c5"}, &(0x7f0000000040)=0xa) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000200)={r2}, 0x8) 15:47:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000001280), &(0x7f0000000000)=0x1002) 15:47:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000014c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000100)={r1, 0x2, "72c5"}, &(0x7f0000000040)=0xa) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000200)={r2, 0x6}, 0x8) 15:47:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f000001a780)=""/4110, 0x100e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = dup(r2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x1014a, 0x0, 0x0, 0x800e00575) shutdown(r4, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r5, 0x0) 15:47:16 executing program 3: r0 = socket$inet6(0x1c, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 15:47:16 executing program 0: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 15:47:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000000)="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", 0x58d, 0x101, &(0x7f0000001000)={0x10, 0x2}, 0x10) 15:47:16 executing program 5: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) 15:47:16 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 15:47:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x10, 0x2}, 0x10) connect(r0, &(0x7f0000000000)=@un=@abs={0x8}, 0x8) 15:47:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0xe, 0x0, 0x0) 15:47:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@prinfo={0x14}], 0x14}, 0x100) 15:47:17 executing program 3: execve(0x0, &(0x7f0000000080), &(0x7f00000002c0)=[&(0x7f0000000080)='\x92\x19\xd9\n\b\xe4\r\x8axv\xe9v\x1dm\xfc\xf5\x10\xa8\b\x81:\x92\r\x8e]\xdd\xf2\x8d\xf5G\xdf\x9e']) 15:47:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c1c4e2000ffffff00000000000000000000ffff7f000001f9ffdfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ce814419965308e8051b000c90fbed3f32c2ffea6"], 0x98) 15:47:17 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) 15:47:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f000001a780)=""/4110, 0x100e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = dup(r2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x1014a, 0x0, 0x0, 0x800e00575) shutdown(r4, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r5, 0x0) 15:47:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x80, 0x0, &(0x7f0000000040)) 15:47:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a012e2f07"], 0xa) 15:47:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x38dfe755}, 0x2f) 15:47:18 executing program 5: r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) pipe2(&(0x7f00000011c0)={0xffffffffffffffff}, 0x0) sendfile(r0, r1, 0x0, 0x0) 15:47:18 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffe53, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1c, 0x1c}, 0x1c) 15:47:19 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x41, &(0x7f00000001c0)=""/4096, &(0x7f00000000c0)=0x1000) 15:47:19 executing program 0: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 15:47:19 executing program 5: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)="ef", 0x1}], 0x1}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 15:47:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000014c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f00000002c0)={r1}, &(0x7f0000000300)=0x8) 15:47:19 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffe53, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x100, &(0x7f00000001c0)={0x1c, 0x1c}, 0x1c) 15:47:19 executing program 0: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x20000000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) 15:47:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f000001a780)=""/4110, 0x100e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = dup(r2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x1014a, 0x0, 0x0, 0x800e00575) shutdown(r4, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r5, 0x0) 15:47:21 executing program 5: pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 15:47:21 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) 15:47:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 15:47:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000e80)={&(0x7f0000000680)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x1a0}, 0x0) 15:47:21 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in={0x0, 0x2}, 0x1c) 15:47:21 executing program 0: mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 15:47:21 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000040)="fa", 0x1, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 15:47:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup2(r1, r0) 15:47:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140), 0x4) 15:47:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) 15:47:21 executing program 0: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 15:47:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000001c0), 0x9) 15:47:23 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 15:47:23 executing program 5: r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 15:47:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000000)="392bd6222e", 0x5) 15:47:23 executing program 0: mlock(&(0x7f0000bfd000/0x400000)=nil, 0x400000) munmap(&(0x7f0000d31000/0x2000)=nil, 0x2000) 15:47:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000040)="59c91df99e4e2d11934282a86f0e5e33b01591809038a1b8a2dc70fbd99b778b416ecb65e39b41ae0b1c93d14ac1a62cc1149ff2180f32a1dea8a450320c521d3cf277880ad214d91e50705bc670945b5bd21a36819bc462f70e6785fd", 0x5d, 0x0, 0x0, 0x0) 15:47:23 executing program 5: nanosleep(&(0x7f0000000000)={0xb5}, &(0x7f0000000080)) execve(0x0, 0x0, 0x0) 15:47:23 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x104, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 15:47:23 executing program 2: open$dir(0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000d80)=[&(0x7f0000000340)='\x00', &(0x7f0000000b80)=')\x00', &(0x7f0000000bc0)=':\\,#\\:{.}\'+-{\x00', &(0x7f0000000c00)='\x00', &(0x7f0000000c40)='\x00', &(0x7f0000000c80)='-+}\x00', &(0x7f0000000cc0)='$\xcd\x00', &(0x7f0000000d00)='+\x00'], &(0x7f0000000f00)=[&(0x7f0000000dc0)='{{\\\x00']) 15:47:23 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) 15:47:24 executing program 2: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0) 15:47:24 executing program 3: mlock(&(0x7f0000bfd000/0x400000)=nil, 0x400000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 15:47:24 executing program 4: execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0) 15:47:24 executing program 0: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x100, 0x0, &(0x7f00000000c0)) 15:47:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000), 0x0, 0x4000, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 15:47:24 executing program 3: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 15:47:24 executing program 5: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee01, 0x0, 0x100) 15:47:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)="bf0942f9c7c3f5aed5ff3fbaa906b45995242c861acf85828b269b5720c052afe02f2453ae651ae340ccaa95bfea41d5cc292c96b742d181b3020b9406cc909e92b06a2a7abb61e889d184b0418c7d1e9ac6ae098df7a08072373c574a", 0x5d, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) 15:47:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) 15:47:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x29) 15:47:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="e8", 0x1, 0x4000, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 15:47:25 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$char_usb(r0, &(0x7f0000000000)="e80d6ffa8dff004ce5611ab1bfbcb85955e97732353df807296c13339e63e3a9716afa7b09cbee504900"/53, 0xfffffffffffffd6d) 15:47:25 executing program 3: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4100, 0x2, &(0x7f00000000c0)) 15:47:25 executing program 0: semget$private(0x0, 0x4, 0xa) 15:47:25 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, &(0x7f0000000000), 0x0, 0x4000080, 0x0, 0x0) 15:47:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 15:47:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x1, &(0x7f0000003bc0)) 15:47:25 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x3) 15:47:26 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x111000, 0x0) 15:47:26 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x1390e0, 0x140) 15:47:26 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1000000000000185}}], 0x1, 0x0, 0x0) 15:47:26 executing program 2: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x800) read$eventfd(r0, &(0x7f00000000c0), 0xffffff74) 15:47:26 executing program 3: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 15:47:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) 15:47:26 executing program 4: semget(0x3, 0x3, 0x392) 15:47:26 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000001d80), 0x0, 0x80) 15:47:26 executing program 2: 15:47:26 executing program 3: 15:47:26 executing program 5: 15:47:27 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x2) 15:47:27 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x5d78c2, 0x0) 15:47:27 executing program 1: 15:47:27 executing program 0: semget$private(0x0, 0x2, 0x4f0) 15:47:27 executing program 5: 15:47:27 executing program 3: 15:47:27 executing program 2: 15:47:27 executing program 4: 15:47:28 executing program 0: 15:47:28 executing program 3: 15:47:28 executing program 5: 15:47:28 executing program 2: 15:47:28 executing program 3: 15:47:28 executing program 0: 15:47:29 executing program 1: 15:47:29 executing program 2: 15:47:29 executing program 5: 15:47:29 executing program 3: 15:47:29 executing program 0: 15:47:29 executing program 4: 15:47:29 executing program 2: 15:47:29 executing program 0: 15:47:29 executing program 3: 15:47:29 executing program 5: 15:47:29 executing program 0: 15:47:29 executing program 5: 15:47:30 executing program 1: 15:47:30 executing program 2: 15:47:30 executing program 3: 15:47:30 executing program 0: 15:47:30 executing program 5: 15:47:30 executing program 4: 15:47:30 executing program 3: 15:47:30 executing program 0: 15:47:30 executing program 2: 15:47:30 executing program 5: 15:47:31 executing program 0: 15:47:31 executing program 3: 15:47:31 executing program 1: 15:47:31 executing program 2: 15:47:31 executing program 5: 15:47:31 executing program 0: 15:47:31 executing program 3: 15:47:31 executing program 4: 15:47:31 executing program 5: 15:47:31 executing program 3: 15:47:31 executing program 0: 15:47:32 executing program 2: 15:47:32 executing program 3: 15:47:32 executing program 2: 15:47:33 executing program 1: 15:47:33 executing program 0: 15:47:33 executing program 5: 15:47:33 executing program 3: 15:47:33 executing program 2: 15:47:33 executing program 4: 15:47:33 executing program 0: 15:47:33 executing program 5: 15:47:33 executing program 3: 15:47:33 executing program 2: 15:47:33 executing program 3: 15:47:33 executing program 2: 15:47:34 executing program 1: 15:47:34 executing program 0: 15:47:34 executing program 5: 15:47:34 executing program 3: 15:47:34 executing program 2: 15:47:34 executing program 4: 15:47:34 executing program 2: 15:47:34 executing program 3: 15:47:34 executing program 0: 15:47:34 executing program 5: 15:47:34 executing program 2: 15:47:34 executing program 0: 15:47:35 executing program 1: 15:47:35 executing program 5: 15:47:35 executing program 3: 15:47:35 executing program 0: 15:47:35 executing program 2: 15:47:35 executing program 4: 15:47:35 executing program 2: 15:47:35 executing program 5: 15:47:35 executing program 3: 15:47:35 executing program 0: 15:47:36 executing program 3: 15:47:36 executing program 5: 15:47:36 executing program 2: 15:47:36 executing program 0: 15:47:36 executing program 5: 15:47:36 executing program 3: 15:47:36 executing program 4: 15:47:36 executing program 1: 15:47:36 executing program 2: 15:47:36 executing program 3: 15:47:36 executing program 0: 15:47:36 executing program 5: 15:47:37 executing program 2: 15:47:37 executing program 0: 15:47:37 executing program 3: 15:47:37 executing program 5: 15:47:37 executing program 3: 15:47:37 executing program 2: 15:47:38 executing program 4: 15:47:38 executing program 0: 15:47:38 executing program 5: 15:47:38 executing program 2: 15:47:38 executing program 3: 15:47:38 executing program 1: 15:47:38 executing program 5: 15:47:38 executing program 0: 15:47:38 executing program 2: 15:47:38 executing program 3: 15:47:38 executing program 5: 15:47:39 executing program 3: 15:47:39 executing program 4: 15:47:39 executing program 0: 15:47:39 executing program 2: 15:47:39 executing program 5: 15:47:39 executing program 3: 15:47:39 executing program 1: 15:47:39 executing program 3: 15:47:39 executing program 2: 15:47:39 executing program 0: 15:47:39 executing program 5: 15:47:40 executing program 3: 15:47:40 executing program 2: 15:47:40 executing program 4: 15:47:40 executing program 0: 15:47:40 executing program 5: 15:47:40 executing program 3: 15:47:40 executing program 2: 15:47:40 executing program 1: 15:47:41 executing program 0: 15:47:41 executing program 2: 15:47:41 executing program 5: 15:47:41 executing program 3: 15:47:41 executing program 0: 15:47:41 executing program 2: 15:47:42 executing program 4: 15:47:42 executing program 5: 15:47:42 executing program 3: 15:47:42 executing program 0: 15:47:42 executing program 2: 15:47:42 executing program 1: 15:47:42 executing program 3: 15:47:42 executing program 2: 15:47:42 executing program 5: 15:47:42 executing program 0: 15:47:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xf2, &(0x7f0000000400)="0af25d55f7436c8be9738e6ef6f65a46deb81b6378c3e79b0b57287749a6503fc9b11951bc3690786d9b963e554531cca77562c294b24e19d3d43257fc4a34fe112cd2cf7247ba66b42c975ce5da983cd540ab699c74a7a9033071781531d049afe379307b06a6d1c7d29614f66b15c7637f7e142850d12f5a3e8e65de16f4371fab61800b91d7edbdbe34e544a3afaa3d17b7d0bf111b490044e88087531e94dacd68658ae53b4a004bfe1bc1efbe7a852854a33529ec32220f6dd8b5733576c8767c884ac4175424fd4b1e2b6c4832531c8e7fd3f0bba712618788ef11e029d28fd225fc270fbf79017a0888f147d44445"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 15:47:42 executing program 2: socket$inet(0x2, 0x0, 0x400) 15:47:43 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x1bfe2d1a, 0x1, &(0x7f0000002300)=[{0x0}], 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB]) 15:47:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x118, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 15:47:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xf3, &(0x7f0000000400)="0af25d55f7436c8be9738e6ef6f65a46deb81b6378c3e79b0b57287749a6503fc9b11951bc3690786d9b963e554531cca77562c294b24e19d3d43257fc4a34fe112cd2cf7247ba66b42c975ce5da983cd540ab699c74a7a9033071781531d049afe379307b06a6d1c7d29614f66b15c7637f7e142850d12f5a3e8e65de16f4371fab61800b91d7edbdbe34e544a3afaa3d17b7d0bf111b490044e88087531e94dacd68658ae53b4a004bfe1bc1efbe7a852854a33529ec32220f6dd8b5733576c8767c884ac4175424fd4b1e2b6c4832531c8e7fd3f0bba712618788ef11e029d28fd225fc270fbf79017a0888f147d4444526"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 15:47:43 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40010063) 15:47:43 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) 15:47:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x18, 0x1, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 15:47:43 executing program 5: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea88d4a3e699e69a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:47:43 executing program 2: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4040) 15:47:43 executing program 3: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:47:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2, 0x0, &(0x7f0000000000)) 15:47:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x17, 0xa, 0x3}, 0x14}}, 0x0) 15:47:44 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x100000000}) 15:47:44 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/nvram\x00', 0x0, 0x0) write$tun(r0, 0x0, 0x0) 15:47:44 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000040)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0x0) 15:47:44 executing program 0: socketpair(0x26, 0x5, 0x6, &(0x7f0000000840)) 15:47:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40000041) 15:47:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') read$char_raw(r0, &(0x7f0000000800)={""/33674}, 0x8400) read$char_usb(r0, 0x0, 0x0) 15:47:45 executing program 1: syz_usb_connect$uac1(0x0, 0x83, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "9ff8", "e8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x81, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 15:47:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) 15:47:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000180)=""/247) 15:47:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/26, &(0x7f0000000040)=0x1a) 15:47:45 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) 15:47:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000580)={0xf, 0x0, 0x0, 0xffff0001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 15:47:45 executing program 3: socket(0x0, 0x4, 0x8) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0) syz_mount_image$gfs2meta(&(0x7f0000000040)='gfs2meta\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000001400)=[{0x0}, {&(0x7f00000001c0)="e39c40155807110500862e84bd1d7f2bacf9d158f7f72b31ea6f4efe17e631c34d49849c127fc72feea15b98af25d6dcdc6c72d2f3c495e534678f9efff8a43dbb398f0e3a119b0097877e022d820fbc5daaa5ae618ef4488dd3db60990e8fbc54665949aec8b208a6725b92dd1334c9f95f6d79c11fb603d127b3e3e2268d902755e7cbcd9ef7fd595dfe7e05ef131486b709856530e274d429e48524b5b20beaa228366c07d59392954f58039d7133ac58587de3e002176c7b93898ce4b363e9", 0xc1, 0xdbd7}, {&(0x7f00000002c0)="fd5deaee7ad5657cb0d946dcf3dc816f0101a4c7cf7d0376838068d95a2ebaaa972553b4924ffd5356511b359e32f9f513b18636cc4cc65ee8690810b91920cd261fdbe5a6041f8a045b3966aa56f3233361e9597b08c199496eeaf2fbf0270a5f7f84e0c2d2db74542cd7dca5935a36945b792459f2d5bdcdfdba3d05870fdc122a6af851d8aa2803dea77479e2dc6f9e2a284651cf5c4c567bf285a9517e39af530d42e621aa2aefadb02bb0347065b8f26b39208f061370fae8bfe4c8a212c44a1a0eb2b39a664d9a57a9c9a2c50e4e374adae7d9464dd8b5216488ffd29a59047b1dfc8def2be060eb47488230b24ae9226eda21a1f8d2a2cb67bc38c8f5573b6bb4f0d992543ad56fcc34959d77228a74f8e6e0d7298da37917a795a967ccca26afbc0b2e689cf63bc303e56ecec997b2c85bee0e3ee152747398ed9e84f367f9dfddfa994339744805c5fc087a0ec9901207b694d4384413711f6b8a79e61aa466f7defd8e644eec439307f8134f79447dafdd68b757f06ded35aca560361b8afee177720169c7cf1335fdb341c68278690f37096d754d624386f9a90b5e3f86c0f577a63828c3eec5786ee7636d16e2ac42dfc5e7e6283cbf65c1cf71fc3f706d66a39fc2711aa0972173bceba098267ba8c14356bab4f3a0579155cdb5c093ddb8fa0d0f4738239b26a8b6d56b80b85e00231b80523647b715e7792e0ba7e8a073c934b57f8aab50cced1a3dca811ff0d8a58c9e3edcfea6383c6a300ab8d9ccfb83510bd5e6fbf6fa8798c0d4475eb03ba0bf92520ed81ef83ebe2b0c247bd0a9247a4cc142ed73bbea3e48d00f8827d0f98cb27c017c8e2d2ba105d7f8b80ae76d3345ad7e21064da1da8c7b8ae274e3fa54800ecc2847714db19039a32ed6ccac31be0873260b1f2ea1b811bd52574aa8d55b6b72d7882d55cada60a2671f6e2ec20dc9afb40d997a1cdd6d479902c8b710f0a713b5e9b69f7847e2f1f6a57f1d531914bd05e152c0f864cd7664ca603c606dc02c58a61f314fce160a90775352e9463561296d833401f3f8dd06e4ac1446648a3abecceda4e1652979c39f80aa4d0a2d0362f8eb864c322077e1083079dda4b0674990186f00de87e590d1a3730bda389686c749fe4bb9685593c0a642d12ac0f74a84f6cc21f1c44f655b3d2bcba0f33e5520a129f108142e9256f14b1c4cee8daaaaab83e096833bc37800634dc688ecceb123caa2c48f4bf19eebbf96c1e82695c89cf609a656a1399e7f1263f177498f2c2ddf1c7b27eb6c8ac4dbeb12107de7bef9bdb395200b9d2f52e3ec0fcfb3789d8535cfd8a3f1b46fd60203fa52dc21d37823f402f711ae90e0c546753e935649f1aeb3c8c0276fa683e7d4ab0a82aa3a8ef8202e8057744541d33eca348f3f8da3d27216518e74a0ae5dbf5f9398a4b0662c405f337f9efc5c534c6f2878ff363ad5074e7c0c26057e459234336ac2c7b9bbf7497291e547abd03c4fbe51ff6b03d55ba076ad603893e6cac68e2c36dd599ecc0079fc324bbab4511963e393702caca28d727cae657e58ab1ed63bf56a081a57fcb0fccf062025019bd79add7797c5c1aa17a32c9c1e8d018ca3869306ed8efbac7c6818ed223dca6ca7e31d905034b7ddeeb452753e3ea5b5ff4f68886aeb0b289fa3bc15ae3f27ac55fef0a2a8370684a4a8326d29de9669114c42a5c8263ba7d15cfc9cdd0947b07873e36e7553b06f8dd985918a3546554267dbc796a33fec6beffe3b53b4a6dd1f308dca6930b132ecd2aebeee172eaa3d0c186ce36eadd2b8b8aee2cf706b880f47a53d2a830aada7cc8166b46d43f382dd62b5d6b31cea4073b1a523d15fa7f1394b1587b120c4bfd65b45840c3dfc7b16f71e9c53a471aa0624b48a7c2dff27b899b9125b92c4de80e1df600118dc5321b081140d12cc07361b2e10cc63d9223833e1f1544d78739105ff80fecab103212bf6e697a44990a775d00f2a673923294edc04394763011029be2ff3678b64f168135d72267c2d54108fa00ade98f4556f09b25cf4205732faad61cb8b163900a89c2689cd8abf672133d177a51e56dffd66706aeacaf2c2fae75b73ca30d70e3b7f657efa0610c67805a4ee27bd9ed19308a7b21e67d8d779c3163ec7b75b06ef87881dc5d23d890201a2da27fe5db5a99da2b34750c46d2784e5d26bbd65301b1e611e8501bf555c622cfae28287d82653648a7cdd11af19358df77d69299c74da0ea7e0a01b341c9d18c2d7728cbba49bf00e6af5001fa6d31249dcc197cc68ffe652bbc5437c7d3d32ac7140545358eb561c5b8ed82e3b9974a2009743e400ed9de89ebf0a58d9b1d0bc4d8802028c2ecb42371af6f0e008b6daf1f5655a07a87ad03ac15f345ce473800dca6ff76294bf000099f8dbba8ee84c29b5d3eac078240a58a41d26381ad3626663b017774062e833e52eec0440c0d20448a5e9e6eaf56b1767330ab01d2526e07114f49e8cb31d5ce9bb633bb74449a4270c075afef4b2dbbe0b94ed28023eea1db54ca998bf8ea1697b70f72bdf3843384aa05b72c4dd5a19adc109048d2d82e331489f9172118d12db45e7e797724f24ea62a0bdf6a477e8cc10eb6cea33d59c9ab766dd0ac0dacd72caf20bb4476c147fa52888099de122aeae0175447dd2eb093d0a9282f1006291c5e332aa76a0f31eb7092e9f72069b018ad35e6bd34af2d08ffa889fbdac5e96669e5dbd0eb9c99ffa20288170b3e2211ba56a85e4d919aefe1419030c9518424113bce58c5c60ec1f7876a1d2cc08cf140aca5a4c254bee07cbb1cd7183cc362226b8189e146a84db0d5dd70631c48da3bc136b270c2771f4c5eb243dcf19785dc9df118cb145637c07fbfeda99893eccf2dcc222e2987c7c100d5ae8d333f005424ef38d54241d5de8cf218d1961d19ca4c8a284579a184706cbddaea84ddca7a96578585d5af16dc8050f6c189ed9544a8bd5bf30eef67d6b4770150b4fbf46d301aab1ea30a2893eeefad092175675cb95e5db45cac92842cb3c51eea590d632e748af3b371b255b6cb108f2bfb8ee270f2c8cf927cc450b6eb91b4f184b1abf6056e83d738e446a0830805ec892b203b71f9480468543951137eb65b301c8efb7b461a571e516fefa6cbfd2d995c07e466857cdb1b4440bcf93fd60a4360aae7e6d5be36930eef4699a6b318d250fd3f6756626176c100ad9a00f2028b56dac72ed5c1d7181789c40bc5efe2f4dd4413c601e57203dc510c7fbff739264f85adb28ebd8b5823cf43417b38df059282016b15af0053b949e4ab75572474dd5dd659ba6ccfc83ff32fb37f416db578cc5ce8b59c9714e90f97c226c56d401150b8ed57ae63cf5517c5ffa4bd316e3ad6ed54095cf9f7c4b22fd7d9c3a0d884ea0abcd29148f6b249a06a9966a9b6799dbc014cb926c80bbb6cd7e3e1bce049fd6bf827cb1e38a6c02011230031b283687a9932c84d82af42274c80a4dd19385beb8fe8ca9ffebadcc9faf180e1361033e3335874daeaeefa981ec6c22649f78f228bc094aeb69bd73ab419a99622e09691a52b74db4f92a77932646c9c7f3c46c91042f30c5118d398b4a53f242435ad73157c775cc709591a04d51764170619027c9bc7e4440b63cb299c70742a66ec3b5274e37c6bc4eeec1a69b80c31380e139b4c5c475e149f27550e81900ea09e9488ca7cd3ef149ea5639060e8e39216bd65a3d9e2dee568cf856bbf594a0f4f1ceb1b71262b9065ed748ce7ec31b26fc626394baecfd641b438b96fd0baa2c17432f24c42dd671f077b551e4474310ff5318722584d948c0c63a96ddf5234e2bac7fb26aa761f6b472171e80c362fb38325b7e5c276269e31d445a21a4465f1aa494445772282e7808f19ebe9ee994ea86e271bf69d3095b5a8adf2cda52c6881eb5b6301731742c2cc690b2e47dee69c0028f2bdbf96332a713840f5b7af77b8c268575b509a79f7177af07f40a32128c93fc385be26f90fe5f1f2b0c01eea7f97e966e33884c85cfaffa6c3d4d55ed31110ab867b5b1b7882dd728a6d2e777579fdadc3185eb2392857111ce6d967cd7a5aa184fb68d89a6b437365b637a5ecbf4b25ddbf2fe1d88f7c94d5a8dfbcf1aba896d959fae3b768ad5bed8ec3b3caebc5499f5819bafd398fddd4ae18791b2eafc21472c086d276ccb2d3cd308de8aade2e47315d3c4e232906bde0a2fdd002665ef60f9dd56afbeea346471d0d178c72a1ed973846760b97e68aaf2e70be8cda9d3c297c334219f5c3a2638c554ff5175dd3f248ad7d999a5ad307a29860a9b6699bb8433753f5dcaacdb1b0497fdec876755d01bd8fbb16155a3e138af7a18cf856162d5464e8a86c368f748654713e0abe74b8cf07c6a8283ca85f3176402c981d7f1fbf7c669495c9a46b66f3fe95ebfb1912c45decff69f1b6a3e787c86d0a0eebebf776de678b3542945c8d39f1b7689e4482ed6f72b79a7bcf3a1278873f69e912eb0b750fe0bf4c951b1f669f1502ae38d6fe1110b99d159ce74f07381c97a3f741100bcb2fec853cbd01e59b83a1290165fa62e7a5a665d3fdf39c74c0fd2c9a1cb1b9e27250cd2fcfd8eb839c8a86757b59e7d3dae508a6e33340c81171b3e8ec7f2f6b68a12d6092a3a0c92d6aa34873bea7383a37e3637196d7176f9b788e4501170769bd17fa5d505bc060efbb138a68d5ddd8e0ed75336f37c49afcabfb3381c55d3059c03fbdc44be7042ad8fdbde37ed4924adfde2ce48b8d2497ff0a7e67b5b975cd6910d12cc1a33e0b24b1d28be571c2eda88b07772ce153ab815c3d45862df521912e6cb9f01fc85aa955d30ee1ded6cbe873cd15bcfd87659f875468ef623377b9563ed20bef7a67fea17fd60b1bc3c5849b683c201215805db9b169db93ab16bb9d12614cb50b24f6563079771cd816b5fcfa376c97207f0a01abc13de64d6bde1bc0bd3eb252802d0e729c3e4eb82b207a216b71825ce6756a2ce40743c169b8cc71cf088a67798b7ed6260f0d4016c9a68bb14372ed902b3a2afa7b5a0bf768614c2c65055ea0f8b4dc782a2dc55a5005ca6fc6bab6607d907e86477914100dfa8cbfe1d9a22224e2614f29bbe7df7830ee3aaed9132da70c4fd7d93276f5d7252e21fbd96126d09c881802109c7d7ff1817ae32b3ee64e6c15c858803f849de20ae63fa366a0bd3edbe85b9b8823352c260e46f875ee880dbacbb74e1566406ed84e53c7bbfc2e5e9f1b11079edbc6eadc8f0e93fce977be1dd67aa0e57820fb9f56c21c0d3e9322079e59458551caa314dade46c3e710eddd0ed0f2522abb128a3429140fbec39cff1b43e580c92b182e39347e2c3ba30819e7ac2efe04b04b8987fa8684fb2f5c684e04b0d0d6f6901b890715120b70dc9ed1e13ee9d54376b8715cd71416a191249dd2210071cb6664d8a135f28b4b0576865aac7e828a1fdeb5e353354cd5f8ea665a225e2cc6e12ddd87f34b660b116180ba926d15401ae49f03cc33c6661acae700036a5a5958bc05496b74e9b5259d9f1f6bcda477cd51dd4b441afa09d8d4eb9621712cf9c15132aaca9002abe0c0a1459bf54862f2e061e54b134edc35e139904998e5447d4353db885fab069cc654c486d507eca8179e223c9f21ab5a39f3483d8e8e033862cc4815b79e9ad0679dcc4e672680275d14fa96a17d4cf3fcbeedb7ce3a9e78383721a089af4617f5de8d776d3a2f69ea3a18aed62aed12ee25036fe482a01877b9aa1016e2b4d0b643e1afd79c6", 0x1000, 0x4}, {&(0x7f00000012c0)="861a14605feb9559fd24dae25087d462e285d6262742f8cde8d9c13939b03b62f89cda1a4c512c7aefcab8b50384039bab702ece1aa1b8c16e938b02657ef7cd6d4e137708e0aa936bbdbdc3801f16c6ef0810536411bfad2cb9585210aa81c6d9e819db7cce4c62dba423d289801b4888a785f2c64ba418f278681331c4cecb4f50d3ffa6d3d7b7d89412d8", 0x8c}], 0x3100fc, &(0x7f0000001500)=ANY=[@ANYBLOB='&,\\.(,^),,,eu', @ANYRESDEC=0xee00, @ANYBLOB]) 15:47:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:47:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000380)={0x0}) 15:47:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 15:47:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x7}]}]}}, &(0x7f0000000800)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 15:47:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xb89c512fd56efc67, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xd6}]}}}]}, 0x3c}}, 0x0) [ 3643.375477][T30961] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3643.615500][T30961] usb 2-1: Using ep0 maxpacket: 16 [ 3643.735021][T30961] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3643.743911][T30961] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3643.757676][T30961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3643.946809][T30961] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3643.956154][T30961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3643.964294][T30961] usb 2-1: Product: syz [ 3643.968861][T30961] usb 2-1: Manufacturer: syz [ 3643.973619][T30961] usb 2-1: SerialNumber: syz [ 3644.345515][T30961] usb 2-1: 0:2 : does not exist [ 3644.387318][T30961] usb 2-1: USB disconnect, device number 5 [ 3645.034894][T30961] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3645.276831][T30961] usb 2-1: Using ep0 maxpacket: 16 [ 3645.415162][T30961] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3645.424084][T30961] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3645.434789][T30961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3645.635070][T30961] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3645.644223][T30961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3645.652522][T30961] usb 2-1: Product: syz [ 3645.656974][T30961] usb 2-1: Manufacturer: syz [ 3645.661726][T30961] usb 2-1: SerialNumber: syz 15:47:48 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2210900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @none}, 0x8) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) 15:47:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 15:47:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) 15:47:48 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "29d4e98f3976815ec425a58425287f79829d632838b39bbc7cf802159593"}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_team\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0x198}, @common=@SET={0x0, 'SET\x00'}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_to_hsr\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x409) 15:47:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x121, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 15:47:48 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x5, 0x0, 0xffe, 0x7fffffff, 0x0, 0xfffe}) [ 3646.011527][T30961] usb 2-1: 0:2 : does not exist [ 3646.113233][T30961] usb 2-1: USB disconnect, device number 6 15:47:49 executing program 3: r0 = socket(0xa, 0x5, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 15:47:49 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 15:47:49 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, r1}, 0x18) 15:47:49 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) clone(0x2210900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) 15:47:49 executing program 2: mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0xd0176, 0xffffffffffffffff, 0x0) 15:47:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)) 15:47:50 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 15:47:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 15:47:51 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, 0x0, 0x0, 0x845, 0x0, 0xffffffffffffff4d) 15:47:51 executing program 0: socketpair(0x1, 0x0, 0x9, 0x0) 15:47:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18}, 0x18) 15:47:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f0000000e00)={'ip6gre0\x00', &(0x7f0000000f00)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote, 0xf}}) 15:47:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xb, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0xa}]}]}, {0x0, [0x0, 0x61, 0x61, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000300)=""/176, 0x37, 0xb0, 0x1}, 0x20) 15:47:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000040)={'macvlan1\x00', @ifru_ivalue}) 15:47:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003340)={0x18, 0x3, &(0x7f0000003180)=@framed, &(0x7f00000031c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:47:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'sit0\x00', 0x0}) 15:47:51 executing program 0: open(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) open(&(0x7f0000000080)='./file1/file0\x00', 0x400000, 0x0) 15:47:51 executing program 3: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2000}], 0x1, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 15:47:52 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000000080)=""/38, 0x26, 0x62, 0x0, 0x0) 15:47:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={0x0, 0x124}}, 0x0) 15:47:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x3, 0x84) bind$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 15:47:52 executing program 3: pipe2(&(0x7f0000000080), 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) 15:47:52 executing program 2: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) 15:47:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 15:47:52 executing program 4: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x1000000000000132}, 0xffffffffffffff70) 15:47:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffeb3}}, 0x0) 15:47:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000080)) 15:47:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffe6}}, 0x0) 15:47:53 executing program 3: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) 15:47:53 executing program 2: r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c, 0x0}}], 0x1, 0x8080) sendmmsg$inet6(r0, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}}], 0x1, 0x0) 15:47:53 executing program 5: sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @dev}}]}, 0x28}}, 0x0) move_pages(0x0, 0x1fffffffffffff60, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x0) [ 3650.868874][T25350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:47:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 15:47:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}}, 0x0) 15:47:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 15:47:54 executing program 2: r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='P'], 0x50}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="df", 0x1}], 0x1}}], 0x2, 0x8080) pause() sendto$inet6(r0, &(0x7f0000003ac0)="a0", 0x1, 0x0, 0x0, 0x0) 15:47:54 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000004900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x28, 0x0, 0x0, "7786ca8fd9162c50311ad6ac0d555db551"}, 0x28}], 0x1, 0x1) 15:47:54 executing program 4: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8915, &(0x7f0000000400)={'batadv0\x00'}) 15:47:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r1, 0x82b531f5c04ae01b, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}}, 0x0) 15:47:54 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:47:54 executing program 3: r0 = socket(0x2, 0x801, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 15:47:54 executing program 0: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='umask=06000000000000000000000,utf8,nls=c']) 15:47:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)=',\x00', 0xfffffffffffffffb) 15:47:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x2000014, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000240)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x334) sendfile(r0, r1, 0x0, 0x1c542) [ 3652.628994][ T31] audit: type=1804 audit(1603986475.371:148): pid=25386 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir017241311/syzkaller.X7t3jJ/2343/file0" dev="sda1" ino=16376 res=1 errno=0 15:47:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r4 = dup2(r1, r3) write$FUSE_POLL(r4, &(0x7f0000000180)={0x18}, 0x18) 15:47:56 executing program 2: io_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, &(0x7f00000000c0)=0x8) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:47:56 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000000000)={[{@umask={'umask'}}, {@errors_remount='errors=remount-ro'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}, {@disable_sparse_no='disable_sparse=no'}, {@errors_remount='errors=remount-ro'}, {@show_sys_files_no='show_sys_files=no'}, {@uid={'uid', 0x3d, 0xee00}}]}) 15:47:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x3f000000) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 15:47:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) statx(r1, &(0x7f0000000040)='\x00', 0x1000, 0x0, &(0x7f0000000080)) 15:47:56 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) [ 3653.536189][T25400] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 3653.547601][T25400] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 3653.651287][T25400] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 3653.662603][T25400] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 15:47:56 executing program 2: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@umask={'umask'}}, {@errors_remount='errors=remount-ro'}, {@nls={'nls', 0x3d, 'cp949'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@fmask={'fmask'}}, {@disable_sparse_no='disable_sparse=no'}, {@errors_remount='errors=remount-ro'}, {@uid={'uid', 0x3d, 0xee00}}]}) 15:47:56 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:47:57 executing program 2: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@mft_zone_multiplier={'mft_zone_multiplier'}, 0x8}]}) [ 3654.388673][ T31] audit: type=1804 audit(1603986477.141:149): pid=25404 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir017241311/syzkaller.X7t3jJ/2344/bus" dev="sda1" ino=16381 res=1 errno=0 [ 3654.491139][ T31] audit: type=1804 audit(1603986477.171:150): pid=25406 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir017241311/syzkaller.X7t3jJ/2344/bus" dev="sda1" ino=16381 res=1 errno=0 [ 3654.517070][ T31] audit: type=1804 audit(1603986477.171:151): pid=25416 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir017241311/syzkaller.X7t3jJ/2344/bus" dev="sda1" ino=16381 res=1 errno=0 [ 3654.541260][ T31] audit: type=1804 audit(1603986477.171:152): pid=25417 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir017241311/syzkaller.X7t3jJ/2344/bus" dev="sda1" ino=16381 res=1 errno=0 [ 3654.565578][ T31] audit: type=1804 audit(1603986477.171:153): pid=25418 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir017241311/syzkaller.X7t3jJ/2344/bus" dev="sda1" ino=16381 res=1 errno=0 15:47:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0}}], 0x2, 0x0) 15:47:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @vsock={0x28, 0x0, 0x0, @local}, @in={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0x3}) 15:47:57 executing program 2: r0 = socket$inet(0x2, 0x803, 0x20) sendmmsg$sock(r0, &(0x7f0000003180)=[{{&(0x7f0000000000)=@un=@abs, 0x80, 0x0}}], 0x1, 0x850) 15:47:58 executing program 1: timer_create(0x5313a081c6426c4f, 0x0, &(0x7f0000000200)) 15:47:58 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:47:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xc8, 0x1c8, 0x100, 0x1c8, 0x0, 0x258, 0x2a0, 0x2a0, 0x2a0, 0x258, 0x4, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bond\x00', 'vxcan1\x00'}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c4) r1 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:47:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @hci={0x1f, 0x8, 0x3}, @generic={0x0, "ad91d9bba82de231ab3d8644f99a"}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x9eec}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xff}}, &(0x7f0000000080)='GPL\x00', 0xff, 0x41, &(0x7f00000000c0)=""/65, 0x40f00, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x6, 0x7, 0x95}, 0x10}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='fsi_master_acf_copro_command\x00', r1}, 0x10) 15:47:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x80) [ 3655.857275][T25449] x_tables: duplicate underflow at hook 2 [ 3655.895600][T25449] x_tables: duplicate underflow at hook 2 15:47:59 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:47:59 executing program 0: openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0xc42, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x51003, 0x0) r0 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0xc42, 0x0) write$char_raw(r0, 0x0, 0x0) 15:47:59 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:47:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x2b) 15:47:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000001180)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80) 15:47:59 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:47:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000001180)=@in6={0xa, 0x0, 0x0, @private2}, 0x80) 15:48:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3d, 0x0, "a3cc25cd8b71fce55c57f9175e48ffc428397f4a9dbd18410dfb81c120bfd02561190478d6fbfdc53ddf937aaf10b37198d6b03d74d942046c39507f84990c0678099971f64ac90a954914b81f9c1ecb"}, 0xd8) syz_emit_ethernet(0x9e, &(0x7f00000002c0)={@local, @random="f8968583fe2f", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x68, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "cf317901c738b823619bc18f06ead949"}, @mss={0x2, 0x4}, @fastopen={0x22, 0xd, "075bbfb64054e076de437b"}, @mptcp=@ack={0x1e, 0xd, 0x0, 0x4, "a6acbba1a9cc2abde0"}, @sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x3, 'L'}]}}}}}}}}, 0x0) 15:48:00 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}}], 0x1, 0x20008050) 15:48:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0x0) 15:48:00 executing program 5: syz_mount_image$ntfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:48:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000001180)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80) 15:48:00 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:00 executing program 2: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0xc42, 0x0) write$char_raw(r0, &(0x7f0000000380)=ANY=[], 0xffffffffffffffdc) openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x8200, 0x0) 15:48:00 executing program 0: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 15:48:00 executing program 5: syz_mount_image$ntfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:48:00 executing program 3: openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0xc42, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x51003, 0x0) r0 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0xc42, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 15:48:01 executing program 5: syz_mount_image$ntfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:48:01 executing program 0: syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0x0, 0x400000) [ 3658.955423][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 3658.955500][ T31] audit: type=1804 audit(1603986481.691:154): pid=25501 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir643359549/syzkaller.LnUlJz/2229/file0" dev="sda1" ino=16382 res=1 errno=0 [ 3658.986958][ T31] audit: type=1804 audit(1603986481.691:155): pid=25512 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir643359549/syzkaller.LnUlJz/2229/file0" dev="sda1" ino=16382 res=1 errno=0 [ 3658.993584][T25514] MD5 Hash mismatch for [fe80::aa]:0->[ff02::1]:20002 L3 index 0 15:48:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 15:48:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) 15:48:02 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:48:02 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000080)="b629086515ddaf07aac34152415de3d882e731178f158e8abe516f1b3dd6038b0446101bc10bcb8a51184f450ad911b358659ced88c2c75eb2da87e000acbc17c6fd881502fa14cfd7da75124f61079d6304f3589506c282c7600f56c381a2ee1149c5617c14e532e0a5e1db3d0460b2153fb0693f844ba11e1cd9081a0dd7f0c3e760b9bc85ff3bc9faec69212e2440d72d78d4b5c7a0903b5effa6f9752ba3ffb8eef8eaf66c3d9899484f", 0xac) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x24000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x2, 0x5, {{0x1a, 0x4, 0x1, 0x1, 0x68, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x47, 0x1, [{0x5, 0xd, "452524b80826f48858a40c"}, {0x2, 0x3, "ab"}, {0x7, 0x5, "307e04"}, {0x5, 0x12, "13ea2877e7bd5f8a0896853dd07975d4"}, {0x5, 0x9, "f0f874b5f2580e"}, {0x5, 0xa, "be2b431d02bdc53b"}, {0x0, 0x7, "f9270cb2c2"}]}, @rr={0x7, 0xb, 0xf9, [@dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x4, 0x0, 0xa, 0x400, 0x20, @loopback, @private1={0xfc, 0x1, [], 0x1}, 0x40, 0x700, 0x3, 0x5}}) select(0x40, &(0x7f0000000400)={0x4d, 0x5, 0x8, 0x5, 0xffffffff, 0xff, 0x3, 0x8}, &(0x7f0000000440)={0x2, 0xfffffffffffffffe, 0x1, 0x30, 0x5, 0x100, 0x0, 0x80000001}, &(0x7f0000000480)={0xfffffffffffeffff, 0x3, 0x2, 0xffffffff, 0x401, 0xffff, 0x6, 0x80}, &(0x7f00000004c0)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x3) r3 = request_key(&(0x7f0000000640)='trusted\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)='syztnl0\x00', 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000700)='cifs.spnego\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)='/dev/zero\x00', 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, r4, 0xfffffffffffffffe, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000007c0)) 15:48:02 executing program 2: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@umask={'umask'}}, {@errors_remount='errors=remount-ro'}, {@nls={'nls', 0x3d, 'cp949'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}, {@disable_sparse_no='disable_sparse=no'}, {@errors_remount='errors=remount-ro'}, {@uid={'uid', 0x3d, 0xee00}}]}) [ 3659.644284][T25527] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3659.644549][T25527] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3659.736811][T25528] vhci_hcd: connection closed [ 3659.740961][T20769] vhci_hcd: stop threads [ 3659.750410][T20769] vhci_hcd: release socket [ 3659.755140][T20769] vhci_hcd: disconnect device 15:48:02 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:02 executing program 2: add_key$keyring(&(0x7f0000000900)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 15:48:02 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:48:02 executing program 3: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x0) 15:48:02 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) [ 3660.278276][T25543] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 3660.284564][T25543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) 15:48:03 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x40000) 15:48:03 executing program 3: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x80000010}) sysfs$2(0x2, 0x5, &(0x7f0000000040)=""/83) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20800, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000100)=[0xffff], &(0x7f0000000140)=[0xce9a], &(0x7f0000000180), &(0x7f00000001c0)=[0xff]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='xen_mmu_alloc_ptpage\x00'}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000002c0)=0x2, 0x4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000300)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fb0\x00', 0x634002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x10) syz_mount_image$nfs4(&(0x7f0000000900)='nfs4\x00', &(0x7f0000000940)='./file0\x00', 0x309, 0xa, &(0x7f0000002dc0)=[{0x0, 0x0, 0xffff}, {&(0x7f0000000980)="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", 0x1000, 0x5}, {&(0x7f0000001980)="d2130e2338f1bc2f11029dd68e9687eeb10b03aafb49b0b7bd4526e23a1237d8a1f2c00784e2be2fab2715ffe39568e3d0dcba214a215e5f736d826f57af880400b36c40e482bcb81430351e45c02e69b505608817cd048c45152e8ceff9db831e3b15dba9897b9ccccfa6a5a782452943d7cde04f71d21521", 0x79, 0x5}, {&(0x7f0000001a00)="eef580416fd438c4a0b4466cb5c6dec3712e59e50f4d99e6c7696201e7a44102c2cffc6c114f62d4723e9936fc79023d9987af830882706834a09300b130e7569094fe153ffa6d70ee00cdc53c57f2986a089a21a47de9b643467fc9515a7b53c9de01ca83fdce53c55b", 0x6a, 0x8}, {&(0x7f0000001a80)="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", 0xff, 0x3}, {&(0x7f0000001b80)="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", 0x1000, 0x7f}, {&(0x7f0000002b80)="bee8439dbf12fa81fc403a5bd1f9124614b690469d", 0x15, 0x4}, {&(0x7f0000002bc0)="33caf8a175365192d440206e37f466fe2dcbb58da69817c06806317f92ea1629d02fb9fd045830107cb15cac7d9828f6a9fe2d2f64748761cd1041c4be", 0x3d, 0x8}, {&(0x7f0000002c00)="ade2e2f976145e032866f526555303ffe71e6f5302a9a42dd7af544f9a11b2dfb638b335503877de8663f229e12bbe099da69270cc9c51d4ef283c42d6a3ff230821fd0d58d684fa9f877043fe79027df2415058fbb4e69dbacc036c83cee4e97305f8e1f2dc696256a848551f5c465aa3fa295a3169095b64715c9d6a5bd2ce73327a1757bc075ee3b6599786e9dd7ef48eed599567101b11863bf5e9", 0x9d, 0x7fff}, {&(0x7f0000002cc0)="43d880ccabb533357b8e405fa7ebdc60c1abed988624747284bee131fd450c01c314870eaedb5c254dafcbfc132ac0a8787e0d295ebcdadc252cb8b8867ab717b7714adfc2ad912fe55a28f1468ee4a8e198b941b38b4f42724889010338b4c9273838d6cb12df9c29824f5b7c5778cf0bcfdc8711436092a253e83b895209e5686842f86e22a24c6298058769515d7a6cda8133dc07cc24f48811bcf94372d5b7ae2572cbb67a411cb0acc75891640e6f34af43f411a6539bd1ee4801f27afcbf43929b84ddeae8518f7fd123cf69ecaf51bb77b336fefcb2272af47c03e45256eb08154a93bbd6fcb8e332ca43", 0xee, 0x200}], 0x800001, &(0x7f0000002ec0)={[{'-,[&[)['}, {'['}, {'xen_mmu_alloc_ptpage\x00'}, {}, {'*%^-^.@'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@subj_role={'subj_role', 0x3d, '/dev/zero\x00'}}, {@context={'context', 0x3d, 'root'}}]}) [ 3660.578950][T13639] usb 9-2: new high-speed USB device number 2 using vhci_hcd 15:48:03 executing program 1: 15:48:03 executing program 0: io_uring_setup(0x48e3, &(0x7f0000000000)) io_uring_setup(0x295e, &(0x7f0000000240)) 15:48:03 executing program 2: read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 15:48:03 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:48:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) 15:48:04 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:04 executing program 2: 15:48:04 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:48:04 executing program 0: 15:48:04 executing program 3: 15:48:04 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@errors_remount='errors=remount-ro', 0x8}]}) 15:48:04 executing program 0: 15:48:05 executing program 1: 15:48:05 executing program 2: 15:48:05 executing program 3: 15:48:05 executing program 0: 15:48:05 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) 15:48:05 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:05 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) 15:48:05 executing program 2: 15:48:05 executing program 3: 15:48:05 executing program 0: 15:48:05 executing program 1: 15:48:06 executing program 2: 15:48:06 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) 15:48:06 executing program 3: 15:48:06 executing program 0: 15:48:06 executing program 2: 15:48:06 executing program 3: 15:48:07 executing program 4: io_setup(0x1, &(0x7f0000000200)) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:07 executing program 0: 15:48:07 executing program 3: 15:48:07 executing program 2: 15:48:07 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)) 15:48:07 executing program 1: [ 3664.800567][T25633] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 15:48:07 executing program 3: 15:48:07 executing program 2: 15:48:07 executing program 0: 15:48:07 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)) 15:48:08 executing program 3: 15:48:08 executing program 2: [ 3665.545209][T25643] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 15:48:08 executing program 4: io_setup(0x1, &(0x7f0000000200)) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:08 executing program 3: 15:48:08 executing program 0: 15:48:08 executing program 5: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)) 15:48:08 executing program 2: 15:48:08 executing program 1: 15:48:09 executing program 3: [ 3666.331950][T25656] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 15:48:09 executing program 2: 15:48:09 executing program 0: 15:48:09 executing program 5: 15:48:09 executing program 3: 15:48:09 executing program 0: 15:48:10 executing program 4: io_setup(0x1, &(0x7f0000000200)) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:10 executing program 5: 15:48:10 executing program 2: 15:48:10 executing program 3: 15:48:10 executing program 0: 15:48:10 executing program 1: 15:48:10 executing program 5: 15:48:10 executing program 2: 15:48:10 executing program 3: 15:48:10 executing program 0: 15:48:11 executing program 2: 15:48:11 executing program 5: 15:48:11 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:11 executing program 3: 15:48:11 executing program 0: 15:48:11 executing program 5: 15:48:11 executing program 2: 15:48:11 executing program 1: 15:48:11 executing program 5: 15:48:11 executing program 0: 15:48:12 executing program 3: 15:48:12 executing program 2: 15:48:12 executing program 0: 15:48:12 executing program 5: 15:48:13 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:13 executing program 3: 15:48:13 executing program 2: bpf$OBJ_GET_PROG(0x9, &(0x7f0000000140)={&(0x7f0000000100)='\x00'}, 0x10) 15:48:13 executing program 5: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000400)={'batadv0\x00'}) 15:48:13 executing program 1: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8970, &(0x7f0000000400)={'batadv0\x00'}) 15:48:13 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002f5ff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$null(0xffffffffffffff9c, 0x0, 0xb82, 0x0) pipe(&(0x7f0000002080)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000003c00)={0x2020}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000005c40)={0x78, 0x0, r5, {0x100400000000007, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x78) write$FUSE_WRITE(r2, &(0x7f0000000540)={0x18, 0xffffffffffffffda, r5, {0x3a}}, 0x18) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') syz_extract_tcp_res$synack(&(0x7f0000000500), 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xa8, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) prctl$PR_SET_THP_DISABLE(0x29, 0x1) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 15:48:13 executing program 5: bpf$MAP_CREATE(0x5, &(0x7f00000000c0), 0x40) 15:48:13 executing program 3: r0 = socket(0xa, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8905, &(0x7f0000000400)={'batadv0\x00'}) 15:48:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000140)=""/235, 0x1000000, 0xeb, 0x1}, 0x20) [ 3670.854494][T25711] CUSE: zero length info key specified 15:48:13 executing program 3: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8943, &(0x7f0000000400)={'batadv0\x00'}) [ 3671.034213][T25722] CUSE: zero length info key specified 15:48:13 executing program 5: syz_emit_ethernet(0x46, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 15:48:13 executing program 0: bpf$OBJ_GET_PROG(0x1d, &(0x7f0000000140)={0x0, 0x7}, 0x10) 15:48:15 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:15 executing program 5: r0 = socket(0x2, 0x3, 0xb0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x27, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_FRAGMENTATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_GW_MODE]}, 0x1c}}, 0xe000) 15:48:15 executing program 3: socket(0xa, 0x801, 0x0) 15:48:15 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc0ed0000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='pstore\x00', 0x0, 0x0) 15:48:15 executing program 2: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5421, &(0x7f0000000400)={'batadv0\x00'}) 15:48:15 executing program 1: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x4b) 15:48:15 executing program 3: bpf$PROG_LOAD(0xb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:48:15 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) 15:48:15 executing program 5: socketpair(0x2, 0x1, 0x81, &(0x7f00000000c0)) 15:48:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000300)=""/192, 0x28, 0xc0, 0x1}, 0x20) 15:48:15 executing program 3: r0 = socket(0x2, 0x801, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x2400800c) 15:48:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x3}, 0x18) ioctl(r2, 0x8916, &(0x7f0000000000)) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl(r2, 0x8936, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 15:48:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:16 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 15:48:16 executing program 5: r0 = socket(0xa, 0x801, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 15:48:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:48:16 executing program 2: bpf$BPF_BTF_LOAD(0x5, 0x0, 0x0) 15:48:16 executing program 1: r0 = socket(0x2, 0x3, 0x1) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x27, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_FRAGMENTATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_GW_MODE]}, 0x1c}}, 0x0) 15:48:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000140)=""/235, 0x32, 0xeb, 0x8}, 0x20) 15:48:16 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x86b) 15:48:16 executing program 0: bpf$OBJ_GET_PROG(0x1e, &(0x7f0000000140)={&(0x7f0000000100)='\x00'}, 0x10) 15:48:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000400)={'batadv0\x00'}) [ 3674.322180][T25781] BPF:[1] ARRAY (anon) [ 3674.326813][T25781] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 3674.332685][T25781] BPF: [ 3674.335807][T25781] BPF:Invalid elem [ 3674.339582][T25781] BPF: [ 3674.339582][T25781] [ 3674.422415][T25781] BPF:[1] ARRAY (anon) [ 3674.426957][T25781] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 3674.432827][T25781] BPF: [ 3674.435882][T25781] BPF:Invalid elem [ 3674.439660][T25781] BPF: [ 3674.439660][T25781] 15:48:17 executing program 3: bpf$OBJ_GET_PROG(0x2, &(0x7f0000000140)={&(0x7f0000000100)='\x00'}, 0x10) 15:48:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000140)=""/235, 0x32, 0xeb, 0x1}, 0x20) 15:48:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:17 executing program 5: r0 = socket(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 15:48:17 executing program 2: bpf$OBJ_GET_PROG(0x23, &(0x7f0000000140)={0x0, 0x7}, 0x10) 15:48:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15}]}) 15:48:17 executing program 3: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000000140)={0x0, 0x0, 0x50}, 0x20) 15:48:17 executing program 1: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 15:48:18 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) utime(0x0, &(0x7f0000000140)={0x5}) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='pstore\x00', 0x0, 0x0) 15:48:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x1348}, 0x40) 15:48:18 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010304"], &(0x7f0000000080)=""/130, 0x50, 0x82, 0x1}, 0x20) 15:48:18 executing program 2: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8937, &(0x7f0000000400)={'batadv0\x00'}) 15:48:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000400) mq_open(&(0x7f0000000000)='m\x00\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000600) clone(0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000008c0)="87d722891829b0ea7920d7539296915be49fcfb437a7f988e0a4016082f3328d0c945adc5db92f567f790e6a42aebe139041d74a5890e20efefcdc01e4721b1ba1f0682f017ca59f059127610682a0b395ca6a64ab5675db7f9c1c76b6715fad85b0c08cf8465bad5877b21a80d56be8d43998789f95c58ad74e63d6a512d4a49232ec43e7bcb97fd73a2f2da0ddfb6876103341e91e4618b48d32df704adab95c181d339c1fb5b0405152e9ccee") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0x3f, @initdev={0xfe, 0x88, [], 0x4, 0x0}}}, {{0xa, 0x4e21, 0x0, @dev}}}, 0x108) 15:48:18 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xea000000, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/235, 0x1a, 0xeb, 0x1}, 0x20) 15:48:19 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:19 executing program 3: getresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8a10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000ddffffff01000085100000000000007155dbd9a512e3f9516300bf21b1a3a58840670000000700"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) close(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) syz_open_dev$sg(0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r1, 0x1) 15:48:19 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0x10}) 15:48:19 executing program 0: bpf$PROG_LOAD(0x21, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:48:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x2}, 0x40) 15:48:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/235, 0x1a, 0xeb, 0x1}, 0x20) 15:48:19 executing program 2: io_setup(0x7ff, &(0x7f00000001c0)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 15:48:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)='B', 0x1}, {&(0x7f00000001c0)="04", 0x1}], 0x2}, 0x0) 15:48:19 executing program 0: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000140)={0x0, 0x0, 0x50}, 0x20) 15:48:19 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) 15:48:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1}}]}}, &(0x7f0000000140)=""/235, 0x32, 0xeb, 0x1}, 0x20) 15:48:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0xf00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 15:48:20 executing program 4: io_setup(0x0, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x401}, 0x40) 15:48:20 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={0x0}}, 0x0) 15:48:20 executing program 5: r0 = socket(0x2, 0x3, 0xb0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xf0ff7f}}, 0x0) 15:48:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, &(0x7f0000000140)=""/235, 0x32, 0xeb, 0x1}, 0x20) 15:48:20 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80108907, 0x0) 15:48:21 executing program 2: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8913, &(0x7f0000000400)={'batadv0\x00'}) 15:48:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) 15:48:21 executing program 3: bpf$OBJ_GET_PROG(0x16, &(0x7f0000000140)={0x0, 0x7}, 0x10) 15:48:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8927, &(0x7f0000000000)={'tunl0\x00', 0x0}) 15:48:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:48:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) 15:48:22 executing program 4: io_setup(0x0, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:22 executing program 5: select(0x40, &(0x7f0000000100)={0x1}, 0x0, 0x0, &(0x7f0000000180)={0x77359400}) 15:48:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)='BF', 0x2}], 0x1}, 0x0) 15:48:22 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0x0) 15:48:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, 0xffffffffffffffff, 0x0) 15:48:22 executing program 1: bpf$PROG_LOAD(0x11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:48:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x15}]}) 15:48:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @typedef]}}, &(0x7f0000000140)=""/235, 0x3e, 0xeb, 0x1}, 0x20) 15:48:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) 15:48:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0xe4ffffff}]}}, &(0x7f0000000300)=""/192, 0x26, 0xc0, 0x1}, 0x20) 15:48:22 executing program 2: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "ceba6438b50fdc5e71927d8516e89e09bd1de8f49373634404b83feb98067199"}) io_setup(0xffff, &(0x7f0000000ac0)=0x0) io_destroy(r0) 15:48:23 executing program 3: r0 = socket(0xa, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8916, &(0x7f0000000400)={'batadv0\x00'}) 15:48:23 executing program 4: io_setup(0x0, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:23 executing program 0: socket(0x2, 0x2, 0xff) 15:48:23 executing program 5: socket(0x11, 0x2, 0x300) 15:48:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) 15:48:23 executing program 2: r0 = socket(0x2, 0x3, 0xb0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x27, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_FRAGMENTATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_GW_MODE]}, 0x1c}}, 0xe) 15:48:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x401}, 0x40) 15:48:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xfffffffffffffebc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val, @val={0x8}, @void}}}, 0x44}}, 0x0) 15:48:23 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6d) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x88, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:48:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891d, &(0x7f0000000000)={'tunl0\x00', 0x0}) 15:48:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)="4246d2", 0x3}], 0x1}, 0x0) 15:48:24 executing program 5: r0 = socket(0xa, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8918, &(0x7f0000000400)={'batadv0\x00'}) 15:48:24 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6000000, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/235, 0x1a, 0xeb, 0x1}, 0x20) 15:48:25 executing program 4: io_setup(0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:25 executing program 3: bpf$BPF_BTF_LOAD(0x4, 0x0, 0x7800) 15:48:25 executing program 5: bpf$OBJ_GET_PROG(0x6, &(0x7f0000000140)={0x0, 0x7}, 0x10) 15:48:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0xea}}, &(0x7f0000000140)=""/235, 0x1a, 0xeb, 0x1}, 0x20) 15:48:25 executing program 0: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000140)={0x0, 0x0, 0x50}, 0x20) 15:48:25 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2}]}}, &(0x7f0000000140)=""/235, 0x32, 0xeb, 0x1}, 0x20) 15:48:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8929, &(0x7f0000000000)={'tunl0\x00', 0x0}) 15:48:25 executing program 3: syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') 15:48:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x201}, 0x14}}, 0x0) 15:48:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x40084504, 0x0) 15:48:25 executing program 2: socketpair(0x2, 0x1, 0x0, &(0x7f00000000c0)) 15:48:25 executing program 3: bpf$BPF_BTF_LOAD(0x20000102, 0x0, 0x0) 15:48:26 executing program 4: io_setup(0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:26 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000400)={'batadv0\x00'}) 15:48:26 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 15:48:26 executing program 2: r0 = socket(0x2, 0x801, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44060000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="040202803c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000500030006000000040004"], 0x644}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8910, &(0x7f0000000400)={'batadv0\x00'}) 15:48:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 15:48:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x80044501, 0x0) 15:48:26 executing program 5: bpf$OBJ_GET_PROG(0x9, &(0x7f0000000140)={&(0x7f0000000100)='\x00', 0x7}, 0x10) 15:48:26 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0xb703, 0x0) 15:48:26 executing program 0: bpf$PROG_LOAD(0x1d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:48:26 executing program 2: bpf$OBJ_GET_PROG(0x1d, &(0x7f0000000140)={&(0x7f0000000100)='\x00'}, 0x10) 15:48:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)="4246d250dfaa70", 0x7}, {&(0x7f00000001c0)="04", 0x1}], 0x2, &(0x7f0000000300)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 15:48:27 executing program 5: bpf$BPF_BTF_LOAD(0x15, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 15:48:27 executing program 4: io_setup(0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:27 executing program 0: bpf$OBJ_GET_PROG(0xd, &(0x7f0000000140)={0x0, 0x7}, 0x10) 15:48:27 executing program 2: bpf$OBJ_GET_PROG(0x22, &(0x7f0000000140)={0x0, 0x7}, 0x10) 15:48:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x200001ea, [@array]}}, &(0x7f0000000140)=""/235, 0x32, 0xeb, 0x1}, 0x20) 15:48:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010050"], &(0x7f0000000080)=""/130, 0x50, 0x82, 0x1}, 0x20) 15:48:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x40044591, 0x0) 15:48:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000300)=""/192, 0x26, 0xc0, 0x1}, 0x20) 15:48:28 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) 15:48:28 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000), 0x0) dup2(r0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400004, 0x0, 0x2011, r1, 0x0) 15:48:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x40044581, 0x0) 15:48:28 executing program 0: socket(0x28, 0x801, 0x0) 15:48:28 executing program 3: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8921, &(0x7f0000000400)={'batadv0\x00'}) 15:48:29 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x48}}, 0x0) 15:48:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 15:48:29 executing program 3: bpf$BPF_BTF_LOAD(0x21, 0x0, 0x0) 15:48:29 executing program 0: socket(0x2, 0x801, 0x6) 15:48:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8930, &(0x7f0000000000)={'tunl0\x00', 0x0}) 15:48:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)="4246d250dfaa7092ce", 0x9}, {&(0x7f00000001c0)="04", 0x1}], 0x2, &(0x7f0000000300)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 15:48:29 executing program 3: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891d, &(0x7f0000000400)={'batadv0\x00'}) 15:48:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000004c0)=ANY=[]}) 15:48:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/235, 0x1a, 0xeb, 0x1}, 0x20) 15:48:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="69705f76746930000000000000000000033f08487e1ec3"]}) 15:48:29 executing program 0: setfsuid(0xee00) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 15:48:30 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:30 executing program 3: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000000140)={0x0, 0x0, 0x50}, 0x20) 15:48:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000080), 0x0) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) 15:48:30 executing program 0: bpf$OBJ_GET_PROG(0x1e, &(0x7f0000000140)={0x0, 0x7}, 0x10) 15:48:30 executing program 2: syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) 15:48:30 executing program 1: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc01047d0, 0x0) 15:48:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:48:30 executing program 2: sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/127, 0xffffffffffffffad, 0x7f}, 0x6b) 15:48:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)='BF', 0x2}, {&(0x7f00000001c0)="04", 0x1}], 0x2}, 0x0) 15:48:31 executing program 0: bpf$OBJ_GET_PROG(0x13, &(0x7f0000000140)={0x0, 0x7}, 0x10) 15:48:31 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0xffffff70}, 0x20) 15:48:31 executing program 3: bpf$PROG_LOAD(0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:48:31 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) 15:48:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f00000004c0), 0x200004c4, &(0x7f0000000280)={&(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x34}}, 0x0) 15:48:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8913, &(0x7f0000000000)={'tunl0\x00', 0x0}) 15:48:31 executing program 3: io_setup(0x7ff, &(0x7f00000001c0)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffb}]) 15:48:31 executing program 1: socket(0x2, 0x3, 0xb0) 15:48:31 executing program 2: bpf$PROG_LOAD(0xd, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:48:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) 15:48:32 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x5460, 0x0) 15:48:32 executing program 3: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8934, &(0x7f0000000400)={'batadv0\x00'}) 15:48:32 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 15:48:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) 15:48:33 executing program 4: io_setup(0x1, &(0x7f0000000200)) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:33 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='\x00'}, 0x10) 15:48:33 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6d) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000fa0000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d697400000000000000f8ff0000000000000000010000027465616d5f736c6176655f310008000000000000000000000000000000000000000000000079aa1b2500000000000000000000000000000000000000000000000000000000000000000000000000000000b500000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000000b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x8e, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0xe, "7d9f5332313f94b70be8934f"}, @fastopen={0x22, 0x6, "aaae2965"}, @fastopen={0x22, 0x5, "9de185"}, @md5sig={0x13, 0x12, "9533e062c17afbcc911cc9f426041419"}, @exp_fastopen={0xfe, 0x9, 0xf989, "e8c137643c"}]}}}}}}}}, 0x0) 15:48:33 executing program 2: r0 = socket(0x2, 0x3, 0xb0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x27, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_FRAGMENTATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_GW_MODE]}, 0x1c}}, 0x10) 15:48:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) 15:48:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, 0x0) 15:48:33 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc, 0x0, 0x5c}) 15:48:33 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000400)={'batadv0\x00'}) 15:48:33 executing program 3: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8914, &(0x7f0000000400)={'batadv0\x00'}) 15:48:33 executing program 0: r0 = socket(0x2, 0x3, 0xb0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x27, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_FRAGMENTATION_ENABLED, @BATADV_ATTR_GW_SEL_CLASS, @BATADV_ATTR_GW_MODE]}, 0x1c}}, 0x7000000) 15:48:33 executing program 2: r0 = socket(0x2, 0x801, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44060000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="040202803c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004"], 0x644}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8910, &(0x7f0000000400)={'batadv0\x00'}) 15:48:33 executing program 0: r0 = socket(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8905, 0x0) 15:48:34 executing program 4: io_setup(0x1, &(0x7f0000000200)) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:34 executing program 5: bpf$BPF_BTF_LOAD(0x13, &(0x7f0000000140)={0x0, 0x0, 0x50}, 0x20) 15:48:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', 0x0}) 15:48:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000003480)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, 0x0}}], 0x1, 0x0) 15:48:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8942, &(0x7f0000000000)={'tunl0\x00', 0x0}) 15:48:34 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], &(0x7f0000000080)=""/130, 0x50, 0x82, 0x8}, 0x20) 15:48:34 executing program 2: bpf$BPF_BTF_LOAD(0x14, 0x0, 0x0) 15:48:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 15:48:34 executing program 0: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 15:48:34 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890c, &(0x7f0000000400)={'batadv0\x00'}) 15:48:35 executing program 2: r0 = socket(0x2, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) 15:48:35 executing program 0: bpf$OBJ_GET_PROG(0x9, &(0x7f0000000140)={0x0, 0x700}, 0x10) [ 3692.992573][T26178] BPF:Invalid magic [ 3692.997635][T26178] BPF:Invalid magic 15:48:35 executing program 4: io_setup(0x1, &(0x7f0000000200)) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:35 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x1f, 0x34, 0x10, 0x13, 0x6, 0x2, 0x3}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_AIE_ON(r0, 0x7001) 15:48:35 executing program 3: bpf$BPF_BTF_LOAD(0x1a, 0x0, 0x0) 15:48:35 executing program 0: 15:48:35 executing program 2: 15:48:35 executing program 1: 15:48:36 executing program 2: 15:48:36 executing program 3: 15:48:36 executing program 0: 15:48:36 executing program 5: 15:48:36 executing program 2: 15:48:36 executing program 0: 15:48:37 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:37 executing program 3: 15:48:37 executing program 5: 15:48:37 executing program 2: 15:48:37 executing program 0: 15:48:37 executing program 1: 15:48:37 executing program 3: 15:48:37 executing program 2: 15:48:37 executing program 0: 15:48:37 executing program 5: 15:48:37 executing program 3: 15:48:37 executing program 2: 15:48:38 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:38 executing program 0: 15:48:38 executing program 5: 15:48:38 executing program 2: 15:48:38 executing program 3: 15:48:38 executing program 1: 15:48:38 executing program 0: 15:48:38 executing program 3: 15:48:38 executing program 5: 15:48:38 executing program 2: 15:48:39 executing program 0: 15:48:39 executing program 3: 15:48:39 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:39 executing program 5: 15:48:39 executing program 2: 15:48:39 executing program 0: 15:48:39 executing program 3: 15:48:39 executing program 1: 15:48:40 executing program 0: 15:48:40 executing program 5: 15:48:40 executing program 3: 15:48:40 executing program 2: 15:48:40 executing program 5: 15:48:40 executing program 3: 15:48:41 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000240)) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x80) 15:48:41 executing program 2: 15:48:41 executing program 5: 15:48:41 executing program 3: 15:48:41 executing program 1: 15:48:41 executing program 3: 15:48:41 executing program 2: 15:48:41 executing program 5: 15:48:41 executing program 0: 15:48:41 executing program 3: 15:48:41 executing program 2: 15:48:42 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000240)) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:42 executing program 5: 15:48:42 executing program 0: 15:48:42 executing program 3: 15:48:42 executing program 2: 15:48:42 executing program 1: 15:48:42 executing program 3: 15:48:42 executing program 2: 15:48:42 executing program 0: 15:48:42 executing program 5: 15:48:43 executing program 2: 15:48:43 executing program 0: 15:48:44 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000240)) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:44 executing program 3: 15:48:44 executing program 5: 15:48:44 executing program 2: 15:48:44 executing program 0: 15:48:44 executing program 1: 15:48:44 executing program 2: 15:48:44 executing program 5: 15:48:44 executing program 3: 15:48:44 executing program 0: 15:48:44 executing program 3: 15:48:44 executing program 2: 15:48:45 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:45 executing program 0: 15:48:45 executing program 5: 15:48:45 executing program 3: 15:48:45 executing program 2: 15:48:45 executing program 1: 15:48:45 executing program 3: 15:48:45 executing program 0: 15:48:45 executing program 5: 15:48:45 executing program 2: 15:48:46 executing program 3: 15:48:46 executing program 0: 15:48:46 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:46 executing program 5: 15:48:46 executing program 2: 15:48:46 executing program 3: 15:48:46 executing program 0: 15:48:46 executing program 1: 15:48:47 executing program 0: 15:48:47 executing program 2: 15:48:47 executing program 3: 15:48:47 executing program 5: 15:48:47 executing program 2: 15:48:47 executing program 0: 15:48:48 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:48 executing program 3: 15:48:48 executing program 2: 15:48:48 executing program 0: 15:48:48 executing program 1: 15:48:48 executing program 5: 15:48:48 executing program 5: 15:48:48 executing program 3: 15:48:48 executing program 2: 15:48:48 executing program 0: 15:48:48 executing program 5: 15:48:48 executing program 2: 15:48:49 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:49 executing program 3: 15:48:49 executing program 0: 15:48:49 executing program 5: 15:48:49 executing program 2: 15:48:49 executing program 1: 15:48:49 executing program 5: [ 3706.825574][T24183] Bluetooth: hci3: command 0x0406 tx timeout 15:48:49 executing program 3: 15:48:49 executing program 0: 15:48:49 executing program 2: 15:48:50 executing program 5: 15:48:50 executing program 0: 15:48:50 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:50 executing program 3: 15:48:50 executing program 2: 15:48:50 executing program 0: 15:48:50 executing program 5: 15:48:50 executing program 1: 15:48:50 executing program 3: 15:48:50 executing program 2: 15:48:50 executing program 5: 15:48:51 executing program 0: 15:48:51 executing program 3: 15:48:51 executing program 2: 15:48:52 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:52 executing program 5: 15:48:52 executing program 0: 15:48:52 executing program 3: 15:48:52 executing program 2: 15:48:52 executing program 1: 15:48:52 executing program 3: 15:48:52 executing program 5: 15:48:52 executing program 2: 15:48:52 executing program 0: 15:48:52 executing program 3: 15:48:52 executing program 2: 15:48:53 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:53 executing program 5: 15:48:53 executing program 0: 15:48:53 executing program 3: 15:48:53 executing program 2: 15:48:53 executing program 1: 15:48:53 executing program 5: 15:48:53 executing program 0: 15:48:53 executing program 2: 15:48:53 executing program 3: 15:48:53 executing program 5: 15:48:53 executing program 3: 15:48:54 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:54 executing program 2: 15:48:54 executing program 3: 15:48:54 executing program 5: 15:48:54 executing program 0: 15:48:54 executing program 1: 15:48:54 executing program 5: 15:48:54 executing program 0: 15:48:54 executing program 3: 15:48:55 executing program 2: 15:48:55 executing program 5: 15:48:55 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x130, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 15:48:56 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) 15:48:56 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x10}}, @timestamping={{0x10}}], 0x20}, 0x0) 15:48:56 executing program 0: io_setup(0x400, &(0x7f00000002c0)=0x0) io_submit(r0, 0x300, &(0x7f0000000840)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 15:48:56 executing program 5: syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xffffffff, 0x240) 15:48:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5421, &(0x7f0000000400)) 15:48:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8910, &(0x7f0000000400)) 15:48:56 executing program 5: openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4000, 0x0) 15:48:56 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000740)="6172303157215cf1a2e5c49ea047e411388658bf8b5069949324a2961d83cd34038d28bbf8a64ca73851d4354ce28192f3ecf11a98121475128850908d346cc7616cb952fdb37769e2f3ac22049a4ae63756854214d3a0ce3d9551acf1c0718c6c5876ee40527ae1b6d7378b7695ecbd7872f0ee251bae28f8f687841eff7b968ff7957ca7e1f1f3028a6b8622eb37b9fb2f4de6f133594fce6b507b68120be37361a35300c49355b2998d5e7ed0ad40a8a791e42db4b289721c018710efeb56c1515372c184ecb5c1c74914a051853d469ed26044115b49ace387443615a2b9defb761103a9cd675139fc8c9215ffc0fdd00ef65b0c7e28dbda7c1b4e18f5cec26e303271dd28b816a72d76f7c231797536f0226ed8c9f6cdf60236cdcb249870af860fa30f0c42f2fabfe1156c598f63ea1f739e03b7f3af3d04a07e0e08b4f09c3b86481cddcbe0d0527ea4ebdc1182088726110ed4ab8ef5b98dc10086ef3e97319e195d0661d9a7e391b735c107946d2bc5948ce0dfff7613e0862015503fbfdf813bc2679f7f71a06e06b6dfa244122c24b48af27ba59cc0be4c28d061150958911e5d868b2e9a772bc47680a18928cffd75e7f174b7bd22bd552a10ed34cd60ae21be0ff4acaed83ed5c073d6816c7af73cda2fc18418e07673bcfaef7d2e87ee2e82f84b33ceb5c75d2d29674d39c5604bd34433b63b3d80b91022290817c01259c45332688e43353550b8614de2711777510697cc49fed0f2dfceb4b569d901daf7a115a02fed3eb2ac4c9659adaf5ee29aa63e8c286e1f4eed237192b516d96e8dc21836b9f57f33341efaf494ffa3427319209d4fd4f23c6ad03d84b23ade476dff7691529359d4a611bf759656bcee83f19a857b3e00148569c595bd29236be0341930d3ac5fc207b2083c30d9", 0x293}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x155555ad, &(0x7f00000006c0)=[{&(0x7f00000005c0)="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", 0x0, 0x9}], 0x10800, &(0x7f0000000780)=ANY=[]) 15:48:56 executing program 2: r0 = syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 15:48:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 15:48:56 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 15:48:57 executing program 2: syz_io_uring_setup(0x130, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 15:48:58 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x0) 15:48:58 executing program 0: waitid(0x0, 0x0, 0x0, 0x21000002, 0x0) 15:48:58 executing program 5: io_setup(0x5, &(0x7f0000000040)=0x0) r1 = eventfd2(0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x3ff, 0x0, 0x1, r2}]) 15:48:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffe, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 15:48:58 executing program 3: socket$inet6(0xa, 0x3, 0xff) 15:48:58 executing program 1: syz_mount_image$iso9660(&(0x7f0000002300)='iso9660\x00', &(0x7f0000002340)='./file0\x00', 0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f00000024c0)={[{@sbsector={'sbsector'}}]}) 15:48:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) 15:48:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f0000000080)={'wlan1\x00'}) 15:48:58 executing program 0: socketpair(0x11, 0xa, 0xff86, &(0x7f0000000040)) 15:48:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 15:48:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000280)={&(0x7f0000000080), 0x8, &(0x7f0000000240)={0x0}}, 0x0) 15:48:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) 15:48:59 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x0) 15:48:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@uid={'uid', 0x3d, 0xee01}}]}) 15:48:59 executing program 5: r0 = syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x3, 0x0, 0x0) 15:48:59 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:48:59 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@mode={'mode'}}]}) 15:48:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) io_setup(0x5af, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000017c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 15:48:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891f, &(0x7f0000000080)={'wlan1\x00'}) 15:48:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x7, &(0x7f0000000000), 0x4) 15:48:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8980, 0x0) 15:49:00 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:00 executing program 3: r0 = socket(0x2, 0x2, 0x0) getpeername$packet(r0, 0x0, 0x0) 15:49:00 executing program 5: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xffffffff, 0x44a43) 15:49:00 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x0) 15:49:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8910, &(0x7f0000000080)={'wlan1\x00'}) 15:49:00 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:00 executing program 5: r0 = getpgid(0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) 15:49:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000040)=@hci={0x1f, 0x8, 0x4}, 0x80, 0x0}, 0x0) 15:49:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000040)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="f3", 0x1}, {&(0x7f0000000180)='P', 0x1}, {&(0x7f00000001c0)="8a", 0x1}], 0x3}, 0x2000c8c0) 15:49:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8946, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) 15:49:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, 0x0) 15:49:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8913, &(0x7f00000004c0)={'sit0\x00', 0x0}) 15:49:01 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(r0, 0x0, 0x0) 15:49:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, &(0x7f0000000080)={'wlan1\x00'}) 15:49:02 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) 15:49:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 15:49:02 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={0x0}}, 0x0) 15:49:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x78e3, 0x0, 0xbbb5, 0x0, 0x0, "707a0d5b146ea691b6fb5619114e56c42c0016"}) 15:49:02 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x2, 0x802) write$vhost_msg(r0, 0x0, 0x0) 15:49:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x5, 0x0, 0x0, "217eefc496f8a98da3720bf501df1ddc35853b8cfb32bc0b6ca5527395bd3643ef5e3a4a6c5c7050d8c69e4cb9acce1c3faf214fa16a63bf3c38169f7a0398"}, 0x80, 0x0}, 0x0) 15:49:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1}, 0x40) 15:49:02 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) 15:49:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894a, &(0x7f0000000080)={'wlan1\x00'}) 15:49:02 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:03 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) 15:49:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) 15:49:03 executing program 3: r0 = syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_setup(0x27df, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 15:49:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 15:49:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f00000000c0)) 15:49:03 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8912, &(0x7f00000004c0)={'sit0\x00', 0x0}) 15:49:03 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 15:49:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@fat=@flush='flush'}, {@fat=@nocase='nocase'}]}) 15:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0x3}, 0x14}}, 0x0) 15:49:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) 15:49:05 executing program 4: io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) 15:49:05 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0xffff0000}, 0x0) 15:49:05 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:05 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8983, &(0x7f0000000400)) 15:49:05 executing program 5: clock_gettime(0x570e6f95ddaa68f9, 0x0) 15:49:05 executing program 1: io_setup(0x5, &(0x7f0000000040)=0x0) r1 = eventfd2(0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 15:49:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x9, 0x2, 0x5, 0x9}, 0x40) 15:49:05 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1}, 0x4) 15:49:05 executing program 2: syz_io_uring_setup(0x12dd, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) 15:49:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7}, 0x40) 15:49:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 15:49:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, 0x0) 15:49:06 executing program 2: syz_io_uring_setup(0x12dd, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:06 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000040)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="8a", 0x1}], 0x2}, 0x2000c8c0) 15:49:06 executing program 5: r0 = syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x5, 0x0, 0x0) 15:49:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe59, 0x0, 0x0, 0x0, 0xfffffffffffffdb1}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 15:49:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 15:49:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'ip6gre0\x00', 0x0}) 15:49:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @dev}}) 15:49:06 executing program 2: syz_io_uring_setup(0x12dd, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:06 executing program 5: r0 = syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x5, 0x0, 0x0) 15:49:06 executing program 3: r0 = syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000003, 0x12, r0, 0x0) 15:49:07 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000040)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="8a", 0x1}], 0x2}, 0x0) 15:49:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) write$vga_arbiter(r0, 0x0, 0x0) 15:49:07 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) io_setup(0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 15:49:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) io_setup(0x5af, &(0x7f0000000000)=0x0) eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000017c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 15:49:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @loopback}, 0xc) 15:49:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup(r1) getsockopt$inet_udp_int(r2, 0x11, 0xa, 0x0, &(0x7f00000000c0)) 15:49:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0}) 15:49:08 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x9}, &(0x7f00000001c0), 0x0) 15:49:08 executing program 3: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffe, 0xc0b41) 15:49:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 15:49:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000200)=0x1, 0x4) 15:49:08 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0), 0x0) 15:49:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 15:49:08 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 15:49:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000400)) 15:49:09 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 15:49:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000040)=@hci={0x1f, 0x0, 0x8}, 0x80, 0x0}, 0x0) 15:49:09 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={0x0}, 0x300}, 0x0) 15:49:09 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0), 0x0) 15:49:09 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1400}, 0x0) 15:49:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000040)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) 15:49:09 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x7}, 0x0) 15:49:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000040)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{0x0, 0x43050000}, {&(0x7f0000000180)='P', 0x1}], 0x2}, 0x0) 15:49:09 executing program 0: 15:49:10 executing program 2: syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0), 0x0) 15:49:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000780)=ANY=[]}) 15:49:10 executing program 0: syz_io_uring_setup(0x5eb3, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x12dd, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 3727.906942][T26830] Kernel panic - not syncing: kmsan_in_runtime: -1 [ 3727.913478][T26830] CPU: 0 PID: 26830 Comm: io_wq_manager Not tainted 5.9.0-rc8-syzkaller #0 [ 3727.914565][T26830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3727.922451][T26830] Call Trace: [ 3727.922451][T26830] dump_stack+0x21c/0x280 [ 3727.922451][T26830] panic+0x4c8/0xea7 [ 3727.922451][T26830] ? kmsan_report+0x1e0/0x1e0 [ 3727.922451][T26830] ? find_next_and_bit+0x421/0x530 [ 3727.922451][T26830] __msan_instrument_asm_store+0x12d/0x130 [ 3727.922451][T26830] _raw_spin_lock_irqsave+0x5a/0x110 [ 3727.922451][T26830] load_balance+0x23f5/0x5030 [ 3727.922451][T26830] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3727.922451][T26830] newidle_balance+0x477/0x12e0 [ 3727.922451][T26830] pick_next_task_fair+0x49d/0x1250 [ 3727.922451][T26830] pick_next_task+0x18e/0x6b0 [ 3727.922451][T26830] __schedule+0x24b/0x590 [ 3727.922451][T26830] schedule+0x260/0x330 [ 3727.922451][T26830] schedule_preempt_disabled+0xe/0x10 [ 3727.922451][T26830] kthread+0x421/0x560 [ 3727.922451][T26830] ? io_wq_create+0xfd0/0xfd0 [ 3727.922451][T26830] ? kthread_blkcg+0x110/0x110 [ 3727.922451][T26830] ret_from_fork+0x1f/0x30 [ 3727.922451][T26830] Kernel Offset: disabled [ 3727.922451][T26830] Rebooting in 86400 seconds..