_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1461.023337][T22634] do_recvmmsg+0xbc/0x2300 [ 1461.027811][T22629] [ 1461.034672][T22634] do_recvmmsg+0xbc/0x2300 [ 1461.041236][T22629] Uninit was stored to memory at: [ 1461.058041][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1461.063872][T22629] __msan_chain_origin+0x57/0xa0 [ 1461.068839][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1461.073977][T22629] get_compat_msghdr+0x108/0x2b0 [ 1461.078940][T22629] do_recvmmsg+0xdaf/0x2300 [ 1461.083477][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1461.089048][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1461.095142][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1461.101351][T22629] __do_fast_syscall_32+0x102/0x160 [ 1461.106579][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1461.111457][T22629] do_SYSENTER_32+0x73/0x90 [ 1461.115989][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1461.122577][T22629] [ 1461.124922][T22629] Uninit was stored to memory at: [ 1461.129969][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1461.135707][T22629] __msan_chain_origin+0x57/0xa0 [ 1461.140659][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1461.145787][T22629] get_compat_msghdr+0x108/0x2b0 [ 1461.150740][T22629] do_recvmmsg+0xdaf/0x2300 [ 1461.155263][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1461.159955][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1461.166062][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1461.172255][T22629] __do_fast_syscall_32+0x102/0x160 [ 1461.177477][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1461.182369][T22629] do_SYSENTER_32+0x73/0x90 [ 1461.186895][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1461.193226][T22629] [ 1461.195578][T22629] Uninit was stored to memory at: [ 1461.200650][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1461.206397][T22629] __msan_chain_origin+0x57/0xa0 [ 1461.211361][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1461.216498][T22629] get_compat_msghdr+0x108/0x2b0 [ 1461.221464][T22629] do_recvmmsg+0xdaf/0x2300 [ 1461.225996][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1461.230748][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1461.236849][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1461.243032][T22629] __do_fast_syscall_32+0x102/0x160 [ 1461.248259][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1461.253158][T22629] do_SYSENTER_32+0x73/0x90 [ 1461.257699][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1461.264030][T22629] [ 1461.266366][T22629] Uninit was stored to memory at: [ 1461.271420][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1461.277160][T22629] __msan_chain_origin+0x57/0xa0 [ 1461.282137][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1461.287295][T22629] get_compat_msghdr+0x108/0x2b0 [ 1461.292272][T22629] do_recvmmsg+0xdaf/0x2300 [ 1461.296810][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1461.301512][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1461.307607][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1461.313800][T22629] __do_fast_syscall_32+0x102/0x160 [ 1461.319026][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1461.323911][T22629] do_SYSENTER_32+0x73/0x90 [ 1461.328453][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1461.334788][T22629] [ 1461.337127][T22629] Uninit was stored to memory at: [ 1461.342178][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1461.347926][T22629] __msan_chain_origin+0x57/0xa0 [ 1461.352889][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1461.358025][T22629] get_compat_msghdr+0x108/0x2b0 [ 1461.362989][T22629] do_recvmmsg+0xdaf/0x2300 [ 1461.367519][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1461.372225][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1461.378325][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1461.384526][T22629] __do_fast_syscall_32+0x102/0x160 [ 1461.389754][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1461.394633][T22629] do_SYSENTER_32+0x73/0x90 [ 1461.399167][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1461.405590][T22629] [ 1461.407930][T22629] Local variable ----msg_sys@do_recvmmsg created at: [ 1461.414625][T22629] do_recvmmsg+0xbc/0x2300 [ 1461.419069][T22629] do_recvmmsg+0xbc/0x2300 [ 1461.671064][T22634] not chained 5160000 origins [ 1461.675798][T22634] CPU: 0 PID: 22634 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1461.684581][T22634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.694653][T22634] Call Trace: [ 1461.697964][T22634] dump_stack+0x21c/0x280 [ 1461.702319][T22634] kmsan_internal_chain_origin+0x6f/0x130 [ 1461.708079][T22634] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1461.714164][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1461.719392][T22634] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1461.725231][T22634] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1461.731334][T22634] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1461.736743][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1461.741991][T22634] ? kmsan_internal_set_origin+0x85/0xc0 [ 1461.747849][T22634] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1461.753961][T22634] ? _copy_from_user+0x1cd/0x2d0 [ 1461.758932][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1461.764149][T22634] __msan_chain_origin+0x57/0xa0 [ 1461.769100][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1461.774232][T22634] get_compat_msghdr+0x108/0x2b0 [ 1461.779229][T22634] do_recvmmsg+0xdaf/0x2300 [ 1461.783757][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1461.788989][T22634] ? kmsan_internal_check_memory+0xb1/0x520 [ 1461.795081][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1461.802581][T22634] ? kmsan_internal_set_origin+0x85/0xc0 [ 1461.808245][T22634] ? __msan_poison_alloca+0xe9/0x110 [ 1461.813564][T22634] ? __sys_recvmmsg+0xb5/0x5f0 [ 1461.818397][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1461.823145][T22634] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1461.828979][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1461.834231][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1461.840342][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1461.846567][T22634] __do_fast_syscall_32+0x102/0x160 [ 1461.851825][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1461.856716][T22634] do_SYSENTER_32+0x73/0x90 [ 1461.861518][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1461.867870][T22634] RIP: 0023:0xf7fdd549 [ 1461.871964][T22634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1461.891633][T22634] RSP: 002b:00000000f55b60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1461.900084][T22634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1461.908094][T22634] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1461.916111][T22634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1461.924108][T22634] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1461.932140][T22634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1461.940136][T22634] Uninit was stored to memory at: [ 1461.945200][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1461.950944][T22634] __msan_chain_origin+0x57/0xa0 [ 1461.955925][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1461.961060][T22634] get_compat_msghdr+0x108/0x2b0 [ 1461.966046][T22634] do_recvmmsg+0xdaf/0x2300 [ 1461.970574][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1461.975284][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1461.981377][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1461.987661][T22634] __do_fast_syscall_32+0x102/0x160 [ 1461.992877][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1461.997735][T22634] do_SYSENTER_32+0x73/0x90 [ 1462.002262][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1462.008588][T22634] [ 1462.010951][T22634] Uninit was stored to memory at: [ 1462.016000][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1462.021736][T22634] __msan_chain_origin+0x57/0xa0 [ 1462.026699][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1462.031819][T22634] get_compat_msghdr+0x108/0x2b0 [ 1462.036773][T22634] do_recvmmsg+0xdaf/0x2300 [ 1462.041297][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1462.046001][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1462.052111][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1462.058294][T22634] __do_fast_syscall_32+0x102/0x160 [ 1462.063514][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1462.068370][T22634] do_SYSENTER_32+0x73/0x90 [ 1462.072892][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1462.079225][T22634] [ 1462.081558][T22634] Uninit was stored to memory at: [ 1462.086608][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1462.093138][T22634] __msan_chain_origin+0x57/0xa0 [ 1462.098100][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1462.103256][T22634] get_compat_msghdr+0x108/0x2b0 [ 1462.108482][T22634] do_recvmmsg+0xdaf/0x2300 [ 1462.113006][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1462.117744][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1462.123843][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1462.130045][T22634] __do_fast_syscall_32+0x102/0x160 [ 1462.135290][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1462.140168][T22634] do_SYSENTER_32+0x73/0x90 [ 1462.144727][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1462.151058][T22634] [ 1462.153416][T22634] Uninit was stored to memory at: [ 1462.158488][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1462.164236][T22634] __msan_chain_origin+0x57/0xa0 [ 1462.169211][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1462.174339][T22634] get_compat_msghdr+0x108/0x2b0 [ 1462.179294][T22634] do_recvmmsg+0xdaf/0x2300 [ 1462.183840][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1462.188539][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1462.194752][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1462.200941][T22634] __do_fast_syscall_32+0x102/0x160 [ 1462.206177][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1462.211198][T22634] do_SYSENTER_32+0x73/0x90 [ 1462.215929][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1462.222261][T22634] [ 1462.224604][T22634] Uninit was stored to memory at: [ 1462.229670][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1462.235421][T22634] __msan_chain_origin+0x57/0xa0 [ 1462.240390][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1462.245550][T22634] get_compat_msghdr+0x108/0x2b0 [ 1462.250525][T22634] do_recvmmsg+0xdaf/0x2300 [ 1462.255053][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1462.259776][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1462.265872][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1462.272054][T22634] __do_fast_syscall_32+0x102/0x160 [ 1462.277418][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1462.282321][T22634] do_SYSENTER_32+0x73/0x90 [ 1462.286882][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1462.293215][T22634] [ 1462.295553][T22634] Uninit was stored to memory at: [ 1462.300607][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1462.306359][T22634] __msan_chain_origin+0x57/0xa0 [ 1462.311325][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1462.316471][T22634] get_compat_msghdr+0x108/0x2b0 [ 1462.321444][T22634] do_recvmmsg+0xdaf/0x2300 [ 1462.328764][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1462.333477][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1462.339584][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1462.345774][T22634] __do_fast_syscall_32+0x102/0x160 [ 1462.351179][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1462.356065][T22634] do_SYSENTER_32+0x73/0x90 [ 1462.360655][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1462.367143][T22634] [ 1462.369498][T22634] Uninit was stored to memory at: [ 1462.374558][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1462.380301][T22634] __msan_chain_origin+0x57/0xa0 [ 1462.385261][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1462.390426][T22634] get_compat_msghdr+0x108/0x2b0 [ 1462.395384][T22634] do_recvmmsg+0xdaf/0x2300 [ 1462.399920][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1462.404621][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1462.410837][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1462.417051][T22634] __do_fast_syscall_32+0x102/0x160 [ 1462.422288][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1462.427163][T22634] do_SYSENTER_32+0x73/0x90 [ 1462.431687][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1462.438016][T22634] [ 1462.440352][T22634] Local variable ----msg_sys@do_recvmmsg created at: [ 1462.447052][T22634] do_recvmmsg+0xbc/0x2300 [ 1462.451495][T22634] do_recvmmsg+0xbc/0x2300 [ 1462.654301][T22629] not chained 5170000 origins [ 1462.659037][T22629] CPU: 1 PID: 22629 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1462.667824][T22629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.677904][T22629] Call Trace: [ 1462.681263][T22629] dump_stack+0x21c/0x280 [ 1462.685627][T22629] kmsan_internal_chain_origin+0x6f/0x130 [ 1462.691387][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1462.697489][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1462.702728][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1462.708832][T22629] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1462.714959][T22629] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1462.720405][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1462.725649][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1462.731325][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1462.737423][T22629] ? _copy_from_user+0x1cd/0x2d0 [ 1462.742401][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1462.747662][T22629] __msan_chain_origin+0x57/0xa0 [ 1462.752642][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1462.757791][T22629] get_compat_msghdr+0x108/0x2b0 [ 1462.762906][T22629] do_recvmmsg+0xdaf/0x2300 [ 1462.767450][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1462.772685][T22629] ? kmsan_internal_check_memory+0xb1/0x520 [ 1462.778724][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1462.783964][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1462.789625][T22629] ? __msan_poison_alloca+0xe9/0x110 [ 1462.794938][T22629] ? __sys_recvmmsg+0xb5/0x5f0 [ 1462.799727][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1462.804424][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1462.810252][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1462.815502][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1462.821604][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1462.827784][T22629] __do_fast_syscall_32+0x102/0x160 [ 1462.833007][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1462.837878][T22629] do_SYSENTER_32+0x73/0x90 [ 1462.842407][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1462.848835][T22629] RIP: 0023:0xf7fdd549 [ 1462.852922][T22629] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1462.872575][T22629] RSP: 002b:00000000f55d70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1462.881014][T22629] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1462.889009][T22629] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1462.897004][T22629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1462.904993][T22629] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1462.912982][T22629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1462.920998][T22629] Uninit was stored to memory at: [ 1462.926091][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1462.931831][T22629] __msan_chain_origin+0x57/0xa0 [ 1462.936791][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1462.941967][T22629] get_compat_msghdr+0x108/0x2b0 [ 1462.946928][T22629] do_recvmmsg+0xdaf/0x2300 [ 1462.951451][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1462.956149][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1462.962244][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1462.968421][T22629] __do_fast_syscall_32+0x102/0x160 [ 1462.973707][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1462.978585][T22629] do_SYSENTER_32+0x73/0x90 [ 1462.983215][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1462.989542][T22629] [ 1462.991961][T22629] Uninit was stored to memory at: [ 1462.997008][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1463.002841][T22629] __msan_chain_origin+0x57/0xa0 [ 1463.007816][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1463.012943][T22629] get_compat_msghdr+0x108/0x2b0 [ 1463.017906][T22629] do_recvmmsg+0xdaf/0x2300 [ 1463.022425][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1463.027122][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1463.033213][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1463.039385][T22629] __do_fast_syscall_32+0x102/0x160 [ 1463.044603][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1463.049476][T22629] do_SYSENTER_32+0x73/0x90 [ 1463.054008][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1463.060364][T22629] [ 1463.062699][T22629] Uninit was stored to memory at: [ 1463.067748][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1463.073481][T22629] __msan_chain_origin+0x57/0xa0 [ 1463.078435][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1463.083604][T22629] get_compat_msghdr+0x108/0x2b0 [ 1463.088562][T22629] do_recvmmsg+0xdaf/0x2300 [ 1463.093086][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1463.097784][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1463.103873][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1463.110050][T22629] __do_fast_syscall_32+0x102/0x160 [ 1463.115275][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1463.120140][T22629] do_SYSENTER_32+0x73/0x90 [ 1463.124662][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1463.131246][T22629] [ 1463.133574][T22629] Uninit was stored to memory at: [ 1463.138618][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1463.144356][T22629] __msan_chain_origin+0x57/0xa0 [ 1463.149309][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1463.154439][T22629] get_compat_msghdr+0x108/0x2b0 [ 1463.159395][T22629] do_recvmmsg+0xdaf/0x2300 [ 1463.163917][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1463.168615][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1463.174702][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1463.180877][T22629] __do_fast_syscall_32+0x102/0x160 [ 1463.186098][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1463.191149][T22629] do_SYSENTER_32+0x73/0x90 [ 1463.195674][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1463.201998][T22629] [ 1463.204456][T22629] Uninit was stored to memory at: [ 1463.209512][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1463.215300][T22629] __msan_chain_origin+0x57/0xa0 [ 1463.220269][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1463.225405][T22629] get_compat_msghdr+0x108/0x2b0 [ 1463.230450][T22629] do_recvmmsg+0xdaf/0x2300 [ 1463.234984][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1463.239689][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1463.245890][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1463.252278][T22629] __do_fast_syscall_32+0x102/0x160 [ 1463.257499][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1463.262373][T22629] do_SYSENTER_32+0x73/0x90 [ 1463.267006][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1463.273329][T22629] [ 1463.275659][T22629] Uninit was stored to memory at: [ 1463.280949][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1463.286690][T22629] __msan_chain_origin+0x57/0xa0 [ 1463.291642][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1463.296768][T22629] get_compat_msghdr+0x108/0x2b0 [ 1463.301722][T22629] do_recvmmsg+0xdaf/0x2300 [ 1463.306706][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1463.311406][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1463.317562][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1463.323988][T22629] __do_fast_syscall_32+0x102/0x160 [ 1463.329212][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1463.334081][T22629] do_SYSENTER_32+0x73/0x90 [ 1463.338728][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1463.345054][T22629] [ 1463.347390][T22629] Uninit was stored to memory at: [ 1463.352439][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1463.358178][T22629] __msan_chain_origin+0x57/0xa0 [ 1463.363140][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1463.368270][T22629] get_compat_msghdr+0x108/0x2b0 [ 1463.373230][T22629] do_recvmmsg+0xdaf/0x2300 [ 1463.377868][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1463.382564][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1463.389107][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1463.395311][T22629] __do_fast_syscall_32+0x102/0x160 [ 1463.400531][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1463.406099][T22629] do_SYSENTER_32+0x73/0x90 [ 1463.410627][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1463.416956][T22629] [ 1463.419293][T22629] Local variable ----msg_sys@do_recvmmsg created at: [ 1463.425989][T22629] do_recvmmsg+0xbc/0x2300 [ 1463.430423][T22629] do_recvmmsg+0xbc/0x2300 [ 1463.631120][T22634] not chained 5180000 origins [ 1463.635851][T22634] CPU: 0 PID: 22634 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1463.644712][T22634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.654783][T22634] Call Trace: [ 1463.658109][T22634] dump_stack+0x21c/0x280 [ 1463.662566][T22634] kmsan_internal_chain_origin+0x6f/0x130 [ 1463.668315][T22634] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1463.674413][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1463.679732][T22634] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1463.685928][T22634] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1463.692026][T22634] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1463.697427][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1463.702665][T22634] ? kmsan_internal_set_origin+0x85/0xc0 [ 1463.708438][T22634] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1463.714541][T22634] ? _copy_from_user+0x1cd/0x2d0 [ 1463.719525][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1463.724761][T22634] __msan_chain_origin+0x57/0xa0 [ 1463.729746][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1463.734906][T22634] get_compat_msghdr+0x108/0x2b0 [ 1463.739893][T22634] do_recvmmsg+0xdaf/0x2300 [ 1463.744447][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1463.749680][T22634] ? kmsan_internal_check_memory+0xb1/0x520 [ 1463.755599][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1463.760847][T22634] ? kmsan_internal_set_origin+0x85/0xc0 [ 1463.766518][T22634] ? __msan_poison_alloca+0xe9/0x110 [ 1463.771837][T22634] ? __sys_recvmmsg+0xb5/0x5f0 [ 1463.776624][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1463.781352][T22634] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1463.787284][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1463.792546][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1463.798641][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1463.804931][T22634] __do_fast_syscall_32+0x102/0x160 [ 1463.810266][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1463.815147][T22634] do_SYSENTER_32+0x73/0x90 [ 1463.819681][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1463.826118][T22634] RIP: 0023:0xf7fdd549 [ 1463.830205][T22634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1463.849859][T22634] RSP: 002b:00000000f55b60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1463.858305][T22634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1463.866320][T22634] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1463.874335][T22634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1463.882335][T22634] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1463.890335][T22634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1463.898330][T22634] Uninit was stored to memory at: [ 1463.903572][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1463.909314][T22634] __msan_chain_origin+0x57/0xa0 [ 1463.914359][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1463.919491][T22634] get_compat_msghdr+0x108/0x2b0 [ 1463.924706][T22634] do_recvmmsg+0xdaf/0x2300 [ 1463.929240][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1463.934300][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1463.940398][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1463.946574][T22634] __do_fast_syscall_32+0x102/0x160 [ 1463.951791][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1463.956665][T22634] do_SYSENTER_32+0x73/0x90 [ 1463.961190][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1463.967526][T22634] [ 1463.969855][T22634] Uninit was stored to memory at: [ 1463.975012][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1463.980769][T22634] __msan_chain_origin+0x57/0xa0 [ 1463.985732][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1463.990888][T22634] get_compat_msghdr+0x108/0x2b0 [ 1463.995860][T22634] do_recvmmsg+0xdaf/0x2300 [ 1464.000396][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1464.006058][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1464.012179][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1464.018384][T22634] __do_fast_syscall_32+0x102/0x160 [ 1464.023612][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1464.028494][T22634] do_SYSENTER_32+0x73/0x90 [ 1464.033041][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1464.039477][T22634] [ 1464.041828][T22634] Uninit was stored to memory at: [ 1464.046988][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1464.052743][T22634] __msan_chain_origin+0x57/0xa0 [ 1464.057717][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1464.062865][T22634] get_compat_msghdr+0x108/0x2b0 [ 1464.067846][T22634] do_recvmmsg+0xdaf/0x2300 [ 1464.072373][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1464.077328][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1464.083422][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1464.089687][T22634] __do_fast_syscall_32+0x102/0x160 [ 1464.094912][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1464.099793][T22634] do_SYSENTER_32+0x73/0x90 [ 1464.104327][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1464.110649][T22634] [ 1464.112983][T22634] Uninit was stored to memory at: [ 1464.118025][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1464.123790][T22634] __msan_chain_origin+0x57/0xa0 [ 1464.128767][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1464.133891][T22634] get_compat_msghdr+0x108/0x2b0 [ 1464.139194][T22634] do_recvmmsg+0xdaf/0x2300 [ 1464.143800][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1464.150446][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1464.156623][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1464.162804][T22634] __do_fast_syscall_32+0x102/0x160 [ 1464.168039][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1464.172912][T22634] do_SYSENTER_32+0x73/0x90 [ 1464.177424][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1464.183851][T22634] [ 1464.186193][T22634] Uninit was stored to memory at: [ 1464.191242][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1464.196979][T22634] __msan_chain_origin+0x57/0xa0 [ 1464.201929][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1464.207060][T22634] get_compat_msghdr+0x108/0x2b0 [ 1464.212023][T22634] do_recvmmsg+0xdaf/0x2300 [ 1464.216541][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1464.221237][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1464.227348][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1464.233533][T22634] __do_fast_syscall_32+0x102/0x160 [ 1464.238765][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1464.243635][T22634] do_SYSENTER_32+0x73/0x90 [ 1464.248155][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1464.254499][T22634] [ 1464.256838][T22634] Uninit was stored to memory at: [ 1464.261891][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1464.267634][T22634] __msan_chain_origin+0x57/0xa0 [ 1464.272611][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1464.277872][T22634] get_compat_msghdr+0x108/0x2b0 [ 1464.282948][T22634] do_recvmmsg+0xdaf/0x2300 [ 1464.287481][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1464.292396][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1464.298488][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1464.304670][T22634] __do_fast_syscall_32+0x102/0x160 [ 1464.309903][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1464.314847][T22634] do_SYSENTER_32+0x73/0x90 [ 1464.319373][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1464.325703][T22634] [ 1464.328038][T22634] Uninit was stored to memory at: [ 1464.333528][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1464.339308][T22634] __msan_chain_origin+0x57/0xa0 [ 1464.344275][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1464.349407][T22634] get_compat_msghdr+0x108/0x2b0 [ 1464.354362][T22634] do_recvmmsg+0xdaf/0x2300 [ 1464.358881][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1464.363574][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1464.369662][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1464.375846][T22634] __do_fast_syscall_32+0x102/0x160 [ 1464.381065][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1464.385942][T22634] do_SYSENTER_32+0x73/0x90 [ 1464.390480][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1464.396829][T22634] [ 1464.399170][T22634] Local variable ----msg_sys@do_recvmmsg created at: [ 1464.405874][T22634] do_recvmmsg+0xbc/0x2300 [ 1464.410304][T22634] do_recvmmsg+0xbc/0x2300 [ 1464.638852][T22629] not chained 5190000 origins [ 1464.643598][T22629] CPU: 0 PID: 22629 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1464.652386][T22629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.662472][T22629] Call Trace: [ 1464.665780][T22629] dump_stack+0x21c/0x280 [ 1464.670136][T22629] kmsan_internal_chain_origin+0x6f/0x130 [ 1464.675910][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1464.682007][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1464.687677][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1464.693591][T22629] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1464.699907][T22629] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1464.705306][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1464.710776][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1464.716446][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1464.722714][T22629] ? _copy_from_user+0x1cd/0x2d0 [ 1464.727678][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1464.732990][T22629] __msan_chain_origin+0x57/0xa0 [ 1464.737950][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1464.743097][T22629] get_compat_msghdr+0x108/0x2b0 [ 1464.748080][T22629] do_recvmmsg+0xdaf/0x2300 [ 1464.752608][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1464.757824][T22629] ? kmsan_internal_check_memory+0xb1/0x520 [ 1464.763735][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1464.768955][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1464.774699][T22629] ? __msan_poison_alloca+0xe9/0x110 [ 1464.780038][T22629] ? __sys_recvmmsg+0xb5/0x5f0 [ 1464.784954][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1464.789682][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1464.795509][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1464.800755][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1464.806843][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1464.813131][T22629] __do_fast_syscall_32+0x102/0x160 [ 1464.818553][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1464.823438][T22629] do_SYSENTER_32+0x73/0x90 [ 1464.827968][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1464.834314][T22629] RIP: 0023:0xf7fdd549 [ 1464.838401][T22629] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1464.859176][T22629] RSP: 002b:00000000f55d70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1464.867619][T22629] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1464.875634][T22629] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.883634][T22629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1464.891743][T22629] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1464.899825][T22629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1464.907817][T22629] Uninit was stored to memory at: [ 1464.912876][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1464.919186][T22629] __msan_chain_origin+0x57/0xa0 [ 1464.924147][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1464.929288][T22629] get_compat_msghdr+0x108/0x2b0 [ 1464.934248][T22629] do_recvmmsg+0xdaf/0x2300 [ 1464.938778][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1464.943480][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1464.949574][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1464.955992][T22629] __do_fast_syscall_32+0x102/0x160 [ 1464.961213][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1464.966081][T22629] do_SYSENTER_32+0x73/0x90 [ 1464.970692][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1464.977020][T22629] [ 1464.979353][T22629] Uninit was stored to memory at: [ 1464.984410][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1464.990176][T22629] __msan_chain_origin+0x57/0xa0 [ 1464.995134][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.000347][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.005325][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.009863][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.014564][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.020652][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.026918][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.032150][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.037016][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.041536][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.047867][T22629] [ 1465.050194][T22629] Uninit was stored to memory at: [ 1465.055243][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1465.061095][T22629] __msan_chain_origin+0x57/0xa0 [ 1465.066155][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.071280][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.076269][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.080823][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.085516][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.091597][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.097776][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.103201][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.108075][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.112600][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.118919][T22629] [ 1465.121263][T22629] Uninit was stored to memory at: [ 1465.126308][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1465.132155][T22629] __msan_chain_origin+0x57/0xa0 [ 1465.137323][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.142461][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.147424][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.151957][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.156648][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.162726][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.168895][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.174525][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.179380][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.183914][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.190227][T22629] [ 1465.192571][T22629] Uninit was stored to memory at: [ 1465.197619][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1465.203348][T22629] __msan_chain_origin+0x57/0xa0 [ 1465.208309][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.213456][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.218414][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.222935][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.227622][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.233708][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.239877][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.245092][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.249982][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.254503][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.260914][T22629] [ 1465.263245][T22629] Uninit was stored to memory at: [ 1465.268287][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1465.275151][T22629] __msan_chain_origin+0x57/0xa0 [ 1465.280212][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.285692][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.290651][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.295182][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.299869][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.305964][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.312153][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.317376][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.322330][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.326908][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.333238][T22629] [ 1465.335576][T22629] Uninit was stored to memory at: [ 1465.340802][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1465.346548][T22629] __msan_chain_origin+0x57/0xa0 [ 1465.351509][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.356812][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.361790][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.366411][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.371109][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.377195][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.383383][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.388592][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.393462][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.397994][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.404318][T22629] [ 1465.406684][T22629] Local variable ----msg_sys@do_recvmmsg created at: [ 1465.413403][T22629] do_recvmmsg+0xbc/0x2300 [ 1465.417843][T22629] do_recvmmsg+0xbc/0x2300 [ 1465.505450][T22629] not chained 5200000 origins [ 1465.510174][T22629] CPU: 1 PID: 22629 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1465.519027][T22629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.529180][T22629] Call Trace: [ 1465.532491][T22629] dump_stack+0x21c/0x280 [ 1465.536930][T22629] kmsan_internal_chain_origin+0x6f/0x130 [ 1465.543194][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1465.549275][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1465.554502][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1465.560317][T22629] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1465.566394][T22629] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1465.571779][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1465.576991][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1465.582639][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1465.588718][T22629] ? _copy_from_user+0x1cd/0x2d0 [ 1465.593663][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1465.598879][T22629] __msan_chain_origin+0x57/0xa0 [ 1465.603830][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.608958][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.613913][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.618441][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1465.623657][T22629] ? kmsan_internal_check_memory+0xb1/0x520 [ 1465.629573][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1465.634787][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1465.640546][T22629] ? __msan_poison_alloca+0xe9/0x110 [ 1465.645858][T22629] ? __sys_recvmmsg+0xb5/0x5f0 [ 1465.650741][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.655440][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1465.661264][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1465.666481][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.672568][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.678739][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.683967][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.688836][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.693381][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.699715][T22629] RIP: 0023:0xf7fdd549 [ 1465.703799][T22629] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1465.723433][T22629] RSP: 002b:00000000f55d70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1465.734129][T22629] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1465.742119][T22629] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1465.750109][T22629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1465.758114][T22629] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1465.766125][T22629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1465.774121][T22629] Uninit was stored to memory at: [ 1465.779300][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1465.785052][T22629] __msan_chain_origin+0x57/0xa0 [ 1465.790017][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.795170][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.800156][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.804670][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.809636][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.820598][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.826776][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.831995][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.837152][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.841679][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.848094][T22629] [ 1465.850440][T22629] Uninit was stored to memory at: [ 1465.855502][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1465.861228][T22629] __msan_chain_origin+0x57/0xa0 [ 1465.866178][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.871311][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.876262][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.880779][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.885486][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.891560][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.897728][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.902979][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.907847][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.912364][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.918772][T22629] [ 1465.921104][T22629] Uninit was stored to memory at: [ 1465.926155][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1465.931897][T22629] __msan_chain_origin+0x57/0xa0 [ 1465.937135][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1465.942261][T22629] get_compat_msghdr+0x108/0x2b0 [ 1465.947225][T22629] do_recvmmsg+0xdaf/0x2300 [ 1465.951755][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1465.956442][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1465.963745][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1465.969960][T22629] __do_fast_syscall_32+0x102/0x160 [ 1465.975188][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1465.980056][T22629] do_SYSENTER_32+0x73/0x90 [ 1465.984580][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1465.990899][T22629] [ 1465.993229][T22629] Uninit was stored to memory at: [ 1465.998310][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1466.004049][T22629] __msan_chain_origin+0x57/0xa0 [ 1466.009000][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1466.014127][T22629] get_compat_msghdr+0x108/0x2b0 [ 1466.019076][T22629] do_recvmmsg+0xdaf/0x2300 [ 1466.023593][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1466.028276][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1466.034371][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1466.040540][T22629] __do_fast_syscall_32+0x102/0x160 [ 1466.045755][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1466.050614][T22629] do_SYSENTER_32+0x73/0x90 [ 1466.055140][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1466.061472][T22629] [ 1466.063818][T22629] Uninit was stored to memory at: [ 1466.068879][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1466.074612][T22629] __msan_chain_origin+0x57/0xa0 [ 1466.079561][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1466.084685][T22629] get_compat_msghdr+0x108/0x2b0 [ 1466.089644][T22629] do_recvmmsg+0xdaf/0x2300 [ 1466.094160][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1466.098857][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1466.105647][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1466.112183][T22629] __do_fast_syscall_32+0x102/0x160 [ 1466.117422][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1466.122284][T22629] do_SYSENTER_32+0x73/0x90 [ 1466.126805][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1466.133129][T22629] [ 1466.135457][T22629] Uninit was stored to memory at: [ 1466.140507][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1466.146256][T22629] __msan_chain_origin+0x57/0xa0 [ 1466.151217][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1466.156336][T22629] get_compat_msghdr+0x108/0x2b0 [ 1466.161280][T22629] do_recvmmsg+0xdaf/0x2300 [ 1466.165796][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1466.170499][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1466.176697][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1466.182872][T22629] __do_fast_syscall_32+0x102/0x160 [ 1466.188080][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1466.192950][T22629] do_SYSENTER_32+0x73/0x90 [ 1466.197464][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1466.203789][T22629] [ 1466.206140][T22629] Uninit was stored to memory at: [ 1466.211192][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1466.216932][T22629] __msan_chain_origin+0x57/0xa0 [ 1466.221917][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1466.227049][T22629] get_compat_msghdr+0x108/0x2b0 [ 1466.232005][T22629] do_recvmmsg+0xdaf/0x2300 [ 1466.236532][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1466.241222][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1466.247305][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1466.253488][T22629] __do_fast_syscall_32+0x102/0x160 [ 1466.258710][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1466.263843][T22629] do_SYSENTER_32+0x73/0x90 [ 1466.268362][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1466.274781][T22629] [ 1466.277121][T22629] Local variable ----msg_sys@do_recvmmsg created at: [ 1466.283815][T22629] do_recvmmsg+0xbc/0x2300 [ 1466.288254][T22629] do_recvmmsg+0xbc/0x2300 [ 1466.591717][T22629] not chained 5210000 origins [ 1466.596435][T22629] CPU: 0 PID: 22629 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1466.605201][T22629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.615275][T22629] Call Trace: [ 1466.618610][T22629] dump_stack+0x21c/0x280 [ 1466.622971][T22629] kmsan_internal_chain_origin+0x6f/0x130 [ 1466.628717][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1466.634796][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1466.640010][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1466.645857][T22629] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1466.651967][T22629] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1466.657384][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1466.662606][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1466.668330][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1466.674424][T22629] ? _copy_from_user+0x1cd/0x2d0 [ 1466.679381][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1466.684604][T22629] __msan_chain_origin+0x57/0xa0 [ 1466.689560][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1466.694702][T22629] get_compat_msghdr+0x108/0x2b0 [ 1466.699768][T22629] do_recvmmsg+0xdaf/0x2300 [ 1466.704293][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1466.709618][T22629] ? kmsan_internal_check_memory+0xb1/0x520 [ 1466.716579][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1466.721808][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1466.727458][T22629] ? __msan_poison_alloca+0xe9/0x110 [ 1466.733112][T22629] ? __sys_recvmmsg+0xb5/0x5f0 [ 1466.737889][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1466.742614][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1466.748473][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1466.753788][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1466.761184][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1466.767397][T22629] __do_fast_syscall_32+0x102/0x160 [ 1466.772625][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1466.777494][T22629] do_SYSENTER_32+0x73/0x90 [ 1466.782027][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1466.788371][T22629] RIP: 0023:0xf7fdd549 [ 1466.792458][T22629] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1466.812136][T22629] RSP: 002b:00000000f55d70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1466.820593][T22629] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1466.828590][T22629] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1466.837282][T22629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1466.845366][T22629] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1466.853397][T22629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1466.861411][T22629] Uninit was stored to memory at: [ 1466.866456][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1466.872203][T22629] __msan_chain_origin+0x57/0xa0 [ 1466.877275][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1466.882405][T22629] get_compat_msghdr+0x108/0x2b0 [ 1466.887388][T22629] do_recvmmsg+0xdaf/0x2300 [ 1466.891900][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1466.896589][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1466.902678][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1466.908934][T22629] __do_fast_syscall_32+0x102/0x160 [ 1466.914171][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1466.919035][T22629] do_SYSENTER_32+0x73/0x90 [ 1466.923555][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1466.929875][T22629] [ 1466.932231][T22629] Uninit was stored to memory at: [ 1466.937272][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1466.943000][T22629] __msan_chain_origin+0x57/0xa0 [ 1466.947948][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1466.953082][T22629] get_compat_msghdr+0x108/0x2b0 [ 1466.958059][T22629] do_recvmmsg+0xdaf/0x2300 [ 1466.962612][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1466.967325][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1466.973524][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1466.979694][T22629] __do_fast_syscall_32+0x102/0x160 [ 1466.984907][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1466.989771][T22629] do_SYSENTER_32+0x73/0x90 [ 1466.994293][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.000613][T22629] [ 1467.002965][T22629] Uninit was stored to memory at: [ 1467.008014][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1467.013774][T22629] __msan_chain_origin+0x57/0xa0 [ 1467.020913][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1467.026042][T22629] get_compat_msghdr+0x108/0x2b0 [ 1467.031021][T22629] do_recvmmsg+0xdaf/0x2300 [ 1467.035559][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1467.040255][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.046346][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.052534][T22629] __do_fast_syscall_32+0x102/0x160 [ 1467.057777][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1467.062671][T22629] do_SYSENTER_32+0x73/0x90 [ 1467.067197][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.073527][T22629] [ 1467.075853][T22629] Uninit was stored to memory at: [ 1467.080982][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1467.086720][T22629] __msan_chain_origin+0x57/0xa0 [ 1467.091705][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1467.096836][T22629] get_compat_msghdr+0x108/0x2b0 [ 1467.101789][T22629] do_recvmmsg+0xdaf/0x2300 [ 1467.106313][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1467.111011][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.117108][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.123290][T22629] __do_fast_syscall_32+0x102/0x160 [ 1467.128533][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1467.133404][T22629] do_SYSENTER_32+0x73/0x90 [ 1467.137932][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.144258][T22629] [ 1467.146593][T22629] Uninit was stored to memory at: [ 1467.151652][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1467.157401][T22629] __msan_chain_origin+0x57/0xa0 [ 1467.162360][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1467.167511][T22629] get_compat_msghdr+0x108/0x2b0 [ 1467.172465][T22629] do_recvmmsg+0xdaf/0x2300 [ 1467.176996][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1467.181686][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.187766][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.193937][T22629] __do_fast_syscall_32+0x102/0x160 [ 1467.199153][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1467.204038][T22629] do_SYSENTER_32+0x73/0x90 [ 1467.208562][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.214882][T22629] [ 1467.217210][T22629] Uninit was stored to memory at: [ 1467.222255][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1467.227988][T22629] __msan_chain_origin+0x57/0xa0 [ 1467.232942][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1467.238084][T22629] get_compat_msghdr+0x108/0x2b0 [ 1467.243042][T22629] do_recvmmsg+0xdaf/0x2300 [ 1467.247564][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1467.252274][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.258361][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.264550][T22629] __do_fast_syscall_32+0x102/0x160 [ 1467.269772][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1467.274662][T22629] do_SYSENTER_32+0x73/0x90 [ 1467.279189][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.285538][T22629] [ 1467.287871][T22629] Uninit was stored to memory at: [ 1467.292918][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1467.298657][T22629] __msan_chain_origin+0x57/0xa0 [ 1467.303704][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1467.308839][T22629] get_compat_msghdr+0x108/0x2b0 [ 1467.313820][T22629] do_recvmmsg+0xdaf/0x2300 [ 1467.319752][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1467.324451][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.330547][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.336777][T22629] __do_fast_syscall_32+0x102/0x160 [ 1467.342090][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1467.346967][T22629] do_SYSENTER_32+0x73/0x90 [ 1467.351510][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.357963][T22629] [ 1467.360300][T22629] Local variable ----msg_sys@do_recvmmsg created at: [ 1467.366998][T22629] do_recvmmsg+0xbc/0x2300 [ 1467.371540][T22629] do_recvmmsg+0xbc/0x2300 [ 1467.436010][T22634] not chained 5220000 origins [ 1467.440838][T22634] CPU: 0 PID: 22634 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1467.449608][T22634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.459773][T22634] Call Trace: [ 1467.463098][T22634] dump_stack+0x21c/0x280 [ 1467.467468][T22634] kmsan_internal_chain_origin+0x6f/0x130 [ 1467.473223][T22634] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1467.479412][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1467.484619][T22634] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1467.490440][T22634] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1467.496518][T22634] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1467.501906][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1467.507176][T22634] ? kmsan_internal_set_origin+0x85/0xc0 [ 1467.512825][T22634] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1467.518907][T22634] ? _copy_from_user+0x1cd/0x2d0 [ 1467.523859][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1467.529127][T22634] __msan_chain_origin+0x57/0xa0 [ 1467.534081][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1467.539212][T22634] get_compat_msghdr+0x108/0x2b0 [ 1467.544170][T22634] do_recvmmsg+0xdaf/0x2300 [ 1467.548688][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1467.553904][T22634] ? kmsan_internal_check_memory+0xb1/0x520 [ 1467.559805][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1467.565112][T22634] ? kmsan_internal_set_origin+0x85/0xc0 [ 1467.570774][T22634] ? __msan_poison_alloca+0xe9/0x110 [ 1467.576089][T22634] ? __sys_recvmmsg+0xb5/0x5f0 [ 1467.580930][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1467.585640][T22634] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1467.591463][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1467.596710][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.602819][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.609191][T22634] __do_fast_syscall_32+0x102/0x160 [ 1467.614524][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1467.619397][T22634] do_SYSENTER_32+0x73/0x90 [ 1467.623926][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.630291][T22634] RIP: 0023:0xf7fdd549 [ 1467.634384][T22634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1467.654106][T22634] RSP: 002b:00000000f55b60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1467.662539][T22634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1467.670654][T22634] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.678642][T22634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1467.686733][T22634] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1467.694809][T22634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1467.702797][T22634] Uninit was stored to memory at: [ 1467.707851][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1467.713588][T22634] __msan_chain_origin+0x57/0xa0 [ 1467.718544][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1467.723674][T22634] get_compat_msghdr+0x108/0x2b0 [ 1467.728760][T22634] do_recvmmsg+0xdaf/0x2300 [ 1467.733299][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1467.738011][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.744141][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.750320][T22634] __do_fast_syscall_32+0x102/0x160 [ 1467.755550][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1467.760424][T22634] do_SYSENTER_32+0x73/0x90 [ 1467.764958][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.771284][T22634] [ 1467.773613][T22634] Uninit was stored to memory at: [ 1467.778790][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1467.784524][T22634] __msan_chain_origin+0x57/0xa0 [ 1467.789482][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1467.794781][T22634] get_compat_msghdr+0x108/0x2b0 [ 1467.799746][T22634] do_recvmmsg+0xdaf/0x2300 [ 1467.804272][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1467.808981][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.815070][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.821334][T22634] __do_fast_syscall_32+0x102/0x160 [ 1467.826564][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1467.831434][T22634] do_SYSENTER_32+0x73/0x90 [ 1467.835954][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.842283][T22634] [ 1467.844635][T22634] Uninit was stored to memory at: [ 1467.849683][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1467.855418][T22634] __msan_chain_origin+0x57/0xa0 [ 1467.860369][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1467.865493][T22634] get_compat_msghdr+0x108/0x2b0 [ 1467.870443][T22634] do_recvmmsg+0xdaf/0x2300 [ 1467.874958][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1467.879650][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.885728][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.891892][T22634] __do_fast_syscall_32+0x102/0x160 [ 1467.897106][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1467.901978][T22634] do_SYSENTER_32+0x73/0x90 [ 1467.906498][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.912823][T22634] [ 1467.915149][T22634] Uninit was stored to memory at: [ 1467.920195][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1467.925941][T22634] __msan_chain_origin+0x57/0xa0 [ 1467.930978][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1467.936102][T22634] get_compat_msghdr+0x108/0x2b0 [ 1467.941054][T22634] do_recvmmsg+0xdaf/0x2300 [ 1467.945844][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1467.950528][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1467.956618][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1467.962984][T22634] __do_fast_syscall_32+0x102/0x160 [ 1467.968279][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1467.973142][T22634] do_SYSENTER_32+0x73/0x90 [ 1467.977656][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1467.984063][T22634] [ 1467.986389][T22634] Uninit was stored to memory at: [ 1467.991428][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1467.997170][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.002117][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.007410][T22634] get_compat_msghdr+0x108/0x2b0 [ 1468.012359][T22634] do_recvmmsg+0xdaf/0x2300 [ 1468.016876][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1468.021583][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1468.027669][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1468.033837][T22634] __do_fast_syscall_32+0x102/0x160 [ 1468.039051][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1468.044094][T22634] do_SYSENTER_32+0x73/0x90 [ 1468.048614][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1468.054932][T22634] [ 1468.057364][T22634] Uninit was stored to memory at: [ 1468.062405][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1468.068130][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.073164][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.078280][T22634] get_compat_msghdr+0x108/0x2b0 [ 1468.083286][T22634] do_recvmmsg+0xdaf/0x2300 [ 1468.087795][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1468.092491][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1468.098582][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1468.104751][T22634] __do_fast_syscall_32+0x102/0x160 [ 1468.109961][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1468.114821][T22634] do_SYSENTER_32+0x73/0x90 [ 1468.119353][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1468.125670][T22634] [ 1468.127994][T22634] Uninit was stored to memory at: [ 1468.133031][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1468.138753][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.143698][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.148815][T22634] get_compat_msghdr+0x108/0x2b0 [ 1468.153769][T22634] do_recvmmsg+0xdaf/0x2300 [ 1468.158297][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1468.163015][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1468.169287][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1468.175465][T22634] __do_fast_syscall_32+0x102/0x160 [ 1468.180713][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1468.185590][T22634] do_SYSENTER_32+0x73/0x90 [ 1468.190143][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1468.196472][T22634] [ 1468.198804][T22634] Local variable ----msg_sys@do_recvmmsg created at: [ 1468.205519][T22634] do_recvmmsg+0xbc/0x2300 [ 1468.209988][T22634] do_recvmmsg+0xbc/0x2300 [ 1468.357180][T22634] not chained 5230000 origins [ 1468.361907][T22634] CPU: 0 PID: 22634 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1468.370699][T22634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.380779][T22634] Call Trace: [ 1468.384098][T22634] dump_stack+0x21c/0x280 [ 1468.388453][T22634] kmsan_internal_chain_origin+0x6f/0x130 [ 1468.394292][T22634] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1468.400370][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1468.405582][T22634] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1468.411395][T22634] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1468.417474][T22634] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1468.422864][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1468.428196][T22634] ? kmsan_internal_set_origin+0x85/0xc0 [ 1468.433871][T22634] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1468.439951][T22634] ? _copy_from_user+0x1cd/0x2d0 [ 1468.444908][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1468.450119][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.455083][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.460217][T22634] get_compat_msghdr+0x108/0x2b0 [ 1468.465183][T22634] do_recvmmsg+0xdaf/0x2300 [ 1468.469698][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1468.474918][T22634] ? kmsan_internal_check_memory+0xb1/0x520 [ 1468.480846][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1468.486069][T22634] ? kmsan_internal_set_origin+0x85/0xc0 [ 1468.491715][T22634] ? __msan_poison_alloca+0xe9/0x110 [ 1468.497039][T22634] ? __sys_recvmmsg+0xb5/0x5f0 [ 1468.501813][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1468.506502][T22634] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1468.512320][T22634] ? kmsan_get_metadata+0x116/0x180 [ 1468.517532][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1468.523621][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1468.529806][T22634] __do_fast_syscall_32+0x102/0x160 [ 1468.535025][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1468.539976][T22634] do_SYSENTER_32+0x73/0x90 [ 1468.544506][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1468.550859][T22634] RIP: 0023:0xf7fdd549 [ 1468.554964][T22634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1468.575109][T22634] RSP: 002b:00000000f55b60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1468.583582][T22634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1468.591590][T22634] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1468.599762][T22634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1468.607756][T22634] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1468.615753][T22634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1468.623758][T22634] Uninit was stored to memory at: [ 1468.629029][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1468.634764][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.639714][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.644856][T22634] get_compat_msghdr+0x108/0x2b0 [ 1468.649821][T22634] do_recvmmsg+0xdaf/0x2300 [ 1468.654339][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1468.659025][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1468.665139][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1468.671352][T22634] __do_fast_syscall_32+0x102/0x160 [ 1468.676583][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1468.681450][T22634] do_SYSENTER_32+0x73/0x90 [ 1468.685968][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1468.692287][T22634] [ 1468.694608][T22634] Uninit was stored to memory at: [ 1468.699653][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1468.705397][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.710342][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.715459][T22634] get_compat_msghdr+0x108/0x2b0 [ 1468.720489][T22634] do_recvmmsg+0xdaf/0x2300 [ 1468.725009][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1468.729789][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1468.735900][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1468.742091][T22634] __do_fast_syscall_32+0x102/0x160 [ 1468.747314][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1468.752275][T22634] do_SYSENTER_32+0x73/0x90 [ 1468.756798][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1468.763121][T22634] [ 1468.765466][T22634] Uninit was stored to memory at: [ 1468.770527][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1468.776288][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.781276][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.786410][T22634] get_compat_msghdr+0x108/0x2b0 [ 1468.791372][T22634] do_recvmmsg+0xdaf/0x2300 [ 1468.795912][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1468.800618][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1468.806715][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1468.812898][T22634] __do_fast_syscall_32+0x102/0x160 [ 1468.818125][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1468.823044][T22634] do_SYSENTER_32+0x73/0x90 [ 1468.827590][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1468.834069][T22634] [ 1468.836426][T22634] Uninit was stored to memory at: [ 1468.841493][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1468.847240][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.852221][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.857357][T22634] get_compat_msghdr+0x108/0x2b0 [ 1468.862317][T22634] do_recvmmsg+0xdaf/0x2300 [ 1468.866847][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1468.871728][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1468.877835][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1468.884012][T22634] __do_fast_syscall_32+0x102/0x160 [ 1468.889232][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1468.894121][T22634] do_SYSENTER_32+0x73/0x90 [ 1468.898663][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1468.904986][T22634] [ 1468.907320][T22634] Uninit was stored to memory at: [ 1468.912372][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1468.918112][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.923094][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.928237][T22634] get_compat_msghdr+0x108/0x2b0 [ 1468.933203][T22634] do_recvmmsg+0xdaf/0x2300 [ 1468.937730][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1468.942434][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1468.948528][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1468.954726][T22634] __do_fast_syscall_32+0x102/0x160 [ 1468.959947][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1468.964853][T22634] do_SYSENTER_32+0x73/0x90 [ 1468.969379][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1468.975702][T22634] [ 1468.978039][T22634] Uninit was stored to memory at: [ 1468.983111][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1468.988866][T22634] __msan_chain_origin+0x57/0xa0 [ 1468.993833][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1468.999075][T22634] get_compat_msghdr+0x108/0x2b0 [ 1469.004052][T22634] do_recvmmsg+0xdaf/0x2300 [ 1469.008588][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1469.013312][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1469.019596][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1469.025794][T22634] __do_fast_syscall_32+0x102/0x160 [ 1469.031038][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1469.035914][T22634] do_SYSENTER_32+0x73/0x90 [ 1469.040463][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1469.046792][T22634] [ 1469.049132][T22634] Uninit was stored to memory at: [ 1469.054203][T22634] kmsan_internal_chain_origin+0xad/0x130 [ 1469.059981][T22634] __msan_chain_origin+0x57/0xa0 [ 1469.064951][T22634] __get_compat_msghdr+0x6db/0x9d0 [ 1469.070105][T22634] get_compat_msghdr+0x108/0x2b0 [ 1469.075075][T22634] do_recvmmsg+0xdaf/0x2300 [ 1469.079627][T22634] __sys_recvmmsg+0x340/0x5f0 [ 1469.084343][T22634] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1469.090453][T22634] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1469.096640][T22634] __do_fast_syscall_32+0x102/0x160 [ 1469.101879][T22634] do_fast_syscall_32+0x6a/0xc0 [ 1469.106794][T22634] do_SYSENTER_32+0x73/0x90 [ 1469.111330][T22634] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1469.117674][T22634] [ 1469.120024][T22634] Local variable ----msg_sys@do_recvmmsg created at: [ 1469.126868][T22634] do_recvmmsg+0xbc/0x2300 [ 1469.131316][T22634] do_recvmmsg+0xbc/0x2300 [ 1469.447329][T22629] not chained 5240000 origins [ 1469.452057][T22629] CPU: 0 PID: 22629 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1469.460829][T22629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.470894][T22629] Call Trace: [ 1469.474207][T22629] dump_stack+0x21c/0x280 [ 1469.478560][T22629] kmsan_internal_chain_origin+0x6f/0x130 [ 1469.484304][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1469.495018][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1469.500331][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1469.506167][T22629] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1469.512256][T22629] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1469.517658][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1469.523077][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1469.528750][T22629] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1469.534846][T22629] ? _copy_from_user+0x1cd/0x2d0 [ 1469.539806][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1469.545031][T22629] __msan_chain_origin+0x57/0xa0 [ 1469.550010][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1469.555177][T22629] get_compat_msghdr+0x108/0x2b0 [ 1469.560173][T22629] do_recvmmsg+0xdaf/0x2300 [ 1469.564702][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1469.569928][T22629] ? kmsan_internal_check_memory+0xb1/0x520 [ 1469.575870][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1469.581124][T22629] ? kmsan_internal_set_origin+0x85/0xc0 [ 1469.586850][T22629] ? __msan_poison_alloca+0xe9/0x110 [ 1469.592255][T22629] ? __sys_recvmmsg+0xb5/0x5f0 [ 1469.597669][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1469.602373][T22629] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1469.608199][T22629] ? kmsan_get_metadata+0x116/0x180 [ 1469.613442][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1469.619540][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1469.625810][T22629] __do_fast_syscall_32+0x102/0x160 [ 1469.631061][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1469.635939][T22629] do_SYSENTER_32+0x73/0x90 [ 1469.640473][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1469.646841][T22629] RIP: 0023:0xf7fdd549 [ 1469.650932][T22629] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1469.672049][T22629] RSP: 002b:00000000f55d70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1469.680506][T22629] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1469.688502][T22629] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1469.696488][T22629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1469.704928][T22629] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1469.712915][T22629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1469.721969][T22629] Uninit was stored to memory at: [ 1469.727031][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1469.732809][T22629] __msan_chain_origin+0x57/0xa0 [ 1469.737757][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1469.742903][T22629] get_compat_msghdr+0x108/0x2b0 [ 1469.747887][T22629] do_recvmmsg+0xdaf/0x2300 [ 1469.752402][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1469.757094][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1469.763186][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1469.769361][T22629] __do_fast_syscall_32+0x102/0x160 [ 1469.774569][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1469.779431][T22629] do_SYSENTER_32+0x73/0x90 [ 1469.783951][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1469.790380][T22629] [ 1469.792713][T22629] Uninit was stored to memory at: [ 1469.798019][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1469.803754][T22629] __msan_chain_origin+0x57/0xa0 [ 1469.808710][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1469.813841][T22629] get_compat_msghdr+0x108/0x2b0 [ 1469.818801][T22629] do_recvmmsg+0xdaf/0x2300 [ 1469.823325][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1469.828019][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1469.834110][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1469.840293][T22629] __do_fast_syscall_32+0x102/0x160 [ 1469.845521][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1469.850393][T22629] do_SYSENTER_32+0x73/0x90 [ 1469.854920][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1469.861259][T22629] [ 1469.863592][T22629] Uninit was stored to memory at: [ 1469.869096][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1469.874840][T22629] __msan_chain_origin+0x57/0xa0 [ 1469.879796][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1469.884943][T22629] get_compat_msghdr+0x108/0x2b0 [ 1469.889899][T22629] do_recvmmsg+0xdaf/0x2300 [ 1469.894590][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1469.899286][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1469.905453][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1469.911630][T22629] __do_fast_syscall_32+0x102/0x160 [ 1469.916868][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1469.921728][T22629] do_SYSENTER_32+0x73/0x90 [ 1469.926254][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1469.932581][T22629] [ 1469.935090][T22629] Uninit was stored to memory at: [ 1469.940136][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1469.945867][T22629] __msan_chain_origin+0x57/0xa0 [ 1469.950810][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1469.955925][T22629] get_compat_msghdr+0x108/0x2b0 [ 1469.960872][T22629] do_recvmmsg+0xdaf/0x2300 [ 1469.965396][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1469.970082][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1469.976168][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1469.982612][T22629] __do_fast_syscall_32+0x102/0x160 [ 1469.987832][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1469.992689][T22629] do_SYSENTER_32+0x73/0x90 [ 1469.997215][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1470.003553][T22629] [ 1470.005880][T22629] Uninit was stored to memory at: [ 1470.010920][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1470.016679][T22629] __msan_chain_origin+0x57/0xa0 [ 1470.021632][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1470.026761][T22629] get_compat_msghdr+0x108/0x2b0 [ 1470.031716][T22629] do_recvmmsg+0xdaf/0x2300 [ 1470.036232][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1470.040921][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1470.047000][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1470.053169][T22629] __do_fast_syscall_32+0x102/0x160 [ 1470.058379][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1470.063252][T22629] do_SYSENTER_32+0x73/0x90 [ 1470.067769][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1470.074091][T22629] [ 1470.076418][T22629] Uninit was stored to memory at: [ 1470.081479][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1470.087211][T22629] __msan_chain_origin+0x57/0xa0 [ 1470.092181][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1470.097295][T22629] get_compat_msghdr+0x108/0x2b0 [ 1470.102269][T22629] do_recvmmsg+0xdaf/0x2300 [ 1470.106794][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1470.111485][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1470.117569][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1470.123756][T22629] __do_fast_syscall_32+0x102/0x160 [ 1470.128963][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1470.133821][T22629] do_SYSENTER_32+0x73/0x90 [ 1470.138334][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1470.144651][T22629] [ 1470.146991][T22629] Uninit was stored to memory at: [ 1470.152032][T22629] kmsan_internal_chain_origin+0xad/0x130 [ 1470.157769][T22629] __msan_chain_origin+0x57/0xa0 [ 1470.162723][T22629] __get_compat_msghdr+0x6db/0x9d0 [ 1470.167840][T22629] get_compat_msghdr+0x108/0x2b0 [ 1470.172806][T22629] do_recvmmsg+0xdaf/0x2300 [ 1470.177313][T22629] __sys_recvmmsg+0x340/0x5f0 [ 1470.182003][T22629] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1470.188088][T22629] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1470.194268][T22629] __do_fast_syscall_32+0x102/0x160 [ 1470.199479][T22629] do_fast_syscall_32+0x6a/0xc0 [ 1470.204341][T22629] do_SYSENTER_32+0x73/0x90 [ 1470.208853][T22629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1470.215167][T22629] [ 1470.217492][T22629] Local variable ----msg_sys@do_recvmmsg created at: [ 1470.224201][T22629] do_recvmmsg+0xbc/0x2300 [ 1470.228626][T22629] do_recvmmsg+0xbc/0x2300 06:59:44 executing program 3: poll(0x0, 0x0, 0xe5) clone(0x2000411cf7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 06:59:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000007c100010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) 06:59:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mq_open(&(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/sockstat\x00') writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)="83", 0x1}], 0x1) write$uinput_user_dev(r3, &(0x7f00000008c0)={'syz1\x00', {0xe560, 0x200, 0x3}, 0x41, [0x7, 0x101, 0x0, 0x6, 0x4, 0x5, 0x10001, 0x0, 0x0, 0x8001, 0x8, 0x81f3, 0x0, 0x5, 0xfffffffd, 0xe5f, 0x9, 0xffff8001, 0x0, 0x8, 0x7, 0x1, 0x1aa, 0x933d, 0x4, 0x5, 0x800, 0xc, 0x8, 0x0, 0x4, 0x3, 0x1, 0x101, 0x9, 0x800, 0x0, 0x4, 0x1, 0x8001, 0x47, 0x2, 0x3, 0x7, 0xfa36, 0x5, 0x3, 0x0, 0x3f, 0x3, 0x6dd, 0x9, 0x6, 0xce2, 0x7fffffff, 0x33, 0x0, 0x6, 0x4, 0x0, 0xfffffffd, 0x9, 0x9603, 0x1], [0x7, 0x3f, 0xc591, 0x2, 0x10001, 0x9, 0x1, 0xffffff99, 0xfff, 0x3f, 0x80000001, 0x3, 0x4, 0x2, 0x1, 0x5, 0x8000, 0x6, 0x1, 0xfffffff8, 0x1ff, 0x1, 0x7fffffff, 0x1c, 0x2, 0x1, 0x1, 0x7, 0x7fffffff, 0x6, 0x9d, 0x80000000, 0x4, 0x5, 0x6, 0x9a, 0x8, 0xcd18, 0x7ff, 0x720d, 0x0, 0x9, 0x4, 0x3f, 0x0, 0x9, 0x6, 0x3, 0xde0a, 0x7b3, 0x5, 0x0, 0x10000, 0x80000001, 0x3ff, 0x4b, 0x6b, 0x1, 0x3ff, 0x1, 0x8, 0x81, 0x7ff, 0x9], [0x4, 0x0, 0x1, 0x6, 0xe5, 0x24, 0x90, 0x80, 0x80000000, 0x6, 0x80e000, 0x8, 0x0, 0x1, 0x80000001, 0x51fc, 0x9, 0xffffffff, 0x7226, 0x1ff, 0x3, 0x3, 0x1be, 0x0, 0x5, 0x3, 0xff, 0xb7, 0x1, 0xfffffcfa, 0x2, 0xfffff767, 0x0, 0x3, 0x30d545b0, 0x5, 0x53f, 0x8, 0x7, 0xfffffffc, 0x3, 0x1f, 0x3f, 0x9, 0x6, 0x9, 0x0, 0x9, 0x8, 0xbb, 0x6, 0x3, 0x1, 0x2, 0x1, 0x1, 0x9, 0xb1c, 0xc525, 0xb7, 0x400, 0x2, 0x0, 0xffffffff], [0x10000, 0x1, 0x1, 0x6f, 0x10001, 0x3, 0x20, 0x2, 0x200, 0x3f, 0x6, 0x9, 0x4, 0x9, 0x6, 0x4, 0xa5, 0x81, 0x8000, 0x10000, 0xfff, 0x4, 0xbb8, 0x0, 0x7fff, 0x62b, 0xa, 0x100, 0xa7f, 0xd8b2, 0xaf1, 0x3f, 0x7, 0x10001, 0xffffffff, 0x100, 0x0, 0xc2, 0xe6, 0x1, 0xffff, 0x800, 0xffff, 0x7, 0x3, 0xbe1, 0x1, 0x6, 0xffffffff, 0x1f, 0xffffff80, 0x81, 0x401, 0x3, 0x1a36, 0x9, 0x3, 0x2e, 0x8, 0x6, 0xd20, 0x9, 0x6, 0x5]}, 0x45c) 06:59:44 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) preadv(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x48, 0x0) 06:59:44 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 06:59:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x121c40, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) listen(r0, 0x10001) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0xffff, 0x0, 0x4, 0x9, 0x20}}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 06:59:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000007c400010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) 06:59:45 executing program 0: ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000180)={0x2, 0x2, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mq_open(&(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) r3 = signalfd4(r2, &(0x7f00000001c0), 0x8, 0x800) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000240)=""/146) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:59:45 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) preadv(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x48, 0x0) 06:59:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000200010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) [ 1471.972673][T22694] pic_ioport_write: 15 callbacks suppressed [ 1471.972709][T22694] kvm: pic: level sensitive irq not supported [ 1472.021040][T22694] kvm: pic: level sensitive irq not supported [ 1472.076784][T22694] kvm: pic: level sensitive irq not supported [ 1472.114705][T22694] kvm: pic: level sensitive irq not supported [ 1472.160247][T22694] kvm: pic: level sensitive irq not supported [ 1472.202492][T22694] kvm: pic: level sensitive irq not supported [ 1472.259169][T22694] kvm: pic: level sensitive irq not supported [ 1472.329244][T22694] kvm: pic: level sensitive irq not supported [ 1472.370277][T22694] kvm: pic: level sensitive irq not supported 06:59:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000300010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) 06:59:46 executing program 0: write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x2, 0x0, {0x3, 0x10001, 0x7ff}}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(0xffffffffffffffff, r0) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000180)=0x2, 0x4) r3 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40200) sendfile64(r3, 0xffffffffffffffff, &(0x7f0000000240)=0x400, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mq_open(&(0x7f0000000080)='/d\xe5v/hwrng\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20002) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1472.415616][T22694] kvm: pic: level sensitive irq not supported [ 1476.324989][ T8493] device hsr_slave_0 left promiscuous mode [ 1476.356608][ T8493] device hsr_slave_1 left promiscuous mode [ 1476.403288][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1476.411635][ T8493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.427176][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.435210][ T8493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.451178][ T8493] device bridge_slave_1 left promiscuous mode [ 1476.458245][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.496287][ T8493] device bridge_slave_0 left promiscuous mode [ 1476.503449][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.542802][ T8493] device veth1_macvtap left promiscuous mode [ 1476.548957][ T8493] device veth0_macvtap left promiscuous mode [ 1476.555517][ T8493] device veth1_vlan left promiscuous mode [ 1476.561591][ T8493] device veth0_vlan left promiscuous mode [ 1479.434372][ T8493] team0 (unregistering): Port device team_slave_1 removed [ 1479.455770][ T8493] team0 (unregistering): Port device team_slave_0 removed [ 1479.472166][ T8493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.491226][ T8493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.573546][ T8493] bond0 (unregistering): Released all slaves [ 1479.592934][T22247] Bluetooth: hci2: command 0x0409 tx timeout [ 1479.650020][T22738] IPVS: ftp: loaded support on port[0] = 21 [ 1479.651339][T22736] IPVS: ftp: loaded support on port[0] = 21 [ 1480.106683][ T8503] Bluetooth: hci3: command 0x0409 tx timeout [ 1480.135452][T22736] chnl_net:caif_netlink_parms(): no params data found [ 1480.150768][T22738] chnl_net:caif_netlink_parms(): no params data found [ 1480.447133][T22736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.454668][T22736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.464833][T22736] device bridge_slave_0 entered promiscuous mode [ 1480.536124][T22738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.543903][T22738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.554067][T22738] device bridge_slave_0 entered promiscuous mode [ 1480.564199][T22736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.573932][T22736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.584021][T22736] device bridge_slave_1 entered promiscuous mode [ 1480.592463][T22738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.599887][T22738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.610422][T22738] device bridge_slave_1 entered promiscuous mode [ 1480.706994][T22738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.722542][T22736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.737626][T22738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.761188][T22736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.847492][T22736] team0: Port device team_slave_0 added [ 1480.861902][T22738] team0: Port device team_slave_0 added [ 1480.886541][T22738] team0: Port device team_slave_1 added [ 1480.898850][T22736] team0: Port device team_slave_1 added [ 1480.992666][T22736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.999840][T22736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.026577][T22736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.039998][T22738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.047992][T22738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.075915][T22738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.089606][T22736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.096804][T22736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.123311][T22736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.137031][T22738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.145530][T22738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.172327][T22738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.253765][T22736] device hsr_slave_0 entered promiscuous mode [ 1481.266868][T22736] device hsr_slave_1 entered promiscuous mode [ 1481.276144][T22736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1481.284716][T22736] Cannot create hsr debugfs directory [ 1481.351213][T22738] device hsr_slave_0 entered promiscuous mode [ 1481.362542][T22738] device hsr_slave_1 entered promiscuous mode [ 1481.376198][T22738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1481.384146][T22738] Cannot create hsr debugfs directory [ 1481.622525][ T8503] Bluetooth: hci2: command 0x041b tx timeout [ 1482.129678][T22736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.154319][T22738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.182740][ T8503] Bluetooth: hci3: command 0x041b tx timeout [ 1482.205616][ T2084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1482.214940][ T2084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1482.234349][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1482.244013][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1482.261083][T22738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.284267][T22736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.302896][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1482.315322][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1482.325064][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.333007][ T8503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.349126][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1482.358873][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1482.369106][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1482.379061][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.387126][ T8503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.416919][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1482.427425][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1482.437979][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1482.448193][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.455649][ T8503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.508347][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1482.520111][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1482.529882][T22279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.537505][T22279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.546569][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1482.558260][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1482.569211][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1482.580838][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1482.608104][ T2084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1482.620426][ T2084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1482.651198][ T2084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1482.662064][ T2084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1482.673940][ T2084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1482.688974][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1482.699957][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1482.711843][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1482.740889][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1482.751574][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1482.777137][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1482.787530][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1482.808433][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1482.820227][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1482.840953][T22738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1482.862733][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1482.873655][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1482.908945][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1482.920120][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1482.941242][T22736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1482.991940][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1483.000403][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1483.019707][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1483.030120][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1483.058633][T22736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1483.084330][T22738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1483.318930][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1483.329542][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1483.356075][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1483.366817][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1483.431713][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1483.445700][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1483.479271][T22736] device veth0_vlan entered promiscuous mode [ 1483.507853][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1483.517294][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1483.565452][T22736] device veth1_vlan entered promiscuous mode [ 1483.589528][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1483.599512][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1483.609803][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1483.635414][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1483.648020][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1483.657779][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1483.671810][T22738] device veth0_vlan entered promiscuous mode [ 1483.711778][T22279] Bluetooth: hci2: command 0x040f tx timeout [ 1483.750896][T22738] device veth1_vlan entered promiscuous mode [ 1483.763516][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1483.808103][T22736] device veth0_macvtap entered promiscuous mode [ 1483.818894][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1483.829379][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1483.850378][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1483.878741][T22736] device veth1_macvtap entered promiscuous mode [ 1483.926550][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1483.938276][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1483.948836][T22279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1483.986724][T22738] device veth0_macvtap entered promiscuous mode [ 1484.001040][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1484.011960][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.022072][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1484.033135][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.043357][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1484.053995][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.065560][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1484.076312][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.089744][T22736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1484.098627][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1484.108686][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1484.119404][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1484.132600][T22738] device veth1_macvtap entered promiscuous mode [ 1484.171074][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1484.184038][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.194383][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1484.205129][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.215984][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1484.226790][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.237367][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1484.248180][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.260913][T22736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1484.271042][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1484.272843][ T8503] Bluetooth: hci3: command 0x040f tx timeout [ 1484.281389][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1484.295796][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1484.384905][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1484.395786][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.406395][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1484.417311][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.428008][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1484.438839][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.448988][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1484.459735][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.469879][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1484.480715][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.495198][T22738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1484.505094][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1484.515889][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1484.549330][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1484.560244][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.573497][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1484.584277][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.594396][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1484.605107][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.615272][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1484.625961][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.636120][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1484.646831][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1484.661757][T22738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1484.681057][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1484.691981][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1485.296035][ T8493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.296139][ T8493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.321141][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1485.422848][T21409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.430791][T21409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.439011][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1485.603350][T21409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.605731][ T8493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.611322][T21409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.619441][ T8493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.620335][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1485.644844][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1485.784500][ T8503] Bluetooth: hci2: command 0x0419 tx timeout 07:00:00 executing program 3: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x1a1}}], 0x4000246, 0x0, 0x0) clone(0x2000411cf7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) 07:00:00 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) preadv(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x48, 0x0) 07:00:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000400010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) 07:00:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$mice(0xffffff9c, 0x0, 0x158800) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000003cc0)=0x1, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mq_open(&(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0xb15b, {{0xa, 0x4e23, 0x8, @loopback, 0x1}}}, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:00:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x121c40, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) listen(r0, 0x10001) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0xffff, 0x0, 0x4, 0x9, 0x20}}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 07:00:00 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000005140)) [ 1486.342410][ T3255] Bluetooth: hci3: command 0x0419 tx timeout 07:00:00 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1, 0x0, 0x0) 07:00:00 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x34}, 0x10) 07:00:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mq_open(&(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:00:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000500010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) 07:00:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpid() r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x121c40, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0xffff, 0x0, 0x4, 0x9, 0x20}}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 07:00:01 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 1487.511244][T23232] pic_ioport_write: 5 callbacks suppressed [ 1487.511278][T23232] kvm: pic: level sensitive irq not supported [ 1487.567444][T23224] not chained 5250000 origins [ 1487.578256][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1487.587029][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.597107][T23224] Call Trace: [ 1487.600428][T23224] dump_stack+0x21c/0x280 [ 1487.604780][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1487.610544][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1487.616632][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1487.621857][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1487.627690][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1487.633793][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1487.639320][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1487.645165][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1487.650401][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1487.656074][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1487.662172][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1487.667134][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1487.672368][T23224] __msan_chain_origin+0x57/0xa0 [ 1487.677348][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1487.682496][T23224] get_compat_msghdr+0x108/0x2b0 [ 1487.687559][T23224] do_recvmmsg+0xdaf/0x2300 [ 1487.692271][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1487.697503][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1487.703428][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1487.708657][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1487.714324][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1487.719648][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1487.724439][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1487.729142][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1487.734972][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1487.740204][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.746300][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.752494][T23224] __do_fast_syscall_32+0x102/0x160 [ 1487.757999][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1487.762926][T23224] do_SYSENTER_32+0x73/0x90 [ 1487.767594][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.773955][T23224] RIP: 0023:0xf7fd0549 [ 1487.778170][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1487.797898][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1487.806345][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1487.814346][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1487.822346][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1487.830350][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1487.838469][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1487.846463][T23224] Uninit was stored to memory at: [ 1487.851532][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1487.857384][T23224] __msan_chain_origin+0x57/0xa0 [ 1487.862354][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1487.867501][T23224] get_compat_msghdr+0x108/0x2b0 [ 1487.872479][T23224] do_recvmmsg+0xdaf/0x2300 [ 1487.877015][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1487.881745][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.887845][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.894045][T23224] __do_fast_syscall_32+0x102/0x160 [ 1487.899280][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1487.904204][T23224] do_SYSENTER_32+0x73/0x90 [ 1487.908744][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.915077][T23224] [ 1487.917412][T23224] Uninit was stored to memory at: [ 1487.922469][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1487.928225][T23224] __msan_chain_origin+0x57/0xa0 [ 1487.933194][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1487.938340][T23224] get_compat_msghdr+0x108/0x2b0 [ 1487.943313][T23224] do_recvmmsg+0xdaf/0x2300 [ 1487.947847][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1487.952712][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.958864][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.965066][T23224] __do_fast_syscall_32+0x102/0x160 [ 1487.970342][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1487.976231][T23224] do_SYSENTER_32+0x73/0x90 [ 1487.980763][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.987110][T23224] [ 1487.989446][T23224] Uninit was stored to memory at: [ 1487.994523][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1488.000284][T23224] __msan_chain_origin+0x57/0xa0 [ 1488.005241][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1488.010376][T23224] get_compat_msghdr+0x108/0x2b0 [ 1488.015349][T23224] do_recvmmsg+0xdaf/0x2300 [ 1488.019881][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1488.024606][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1488.030724][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1488.036915][T23224] __do_fast_syscall_32+0x102/0x160 [ 1488.042130][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1488.047027][T23224] do_SYSENTER_32+0x73/0x90 [ 1488.051571][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1488.057900][T23224] [ 1488.060232][T23224] Uninit was stored to memory at: [ 1488.065297][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1488.071037][T23224] __msan_chain_origin+0x57/0xa0 [ 1488.076002][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1488.081215][T23224] get_compat_msghdr+0x108/0x2b0 [ 1488.086171][T23224] do_recvmmsg+0xdaf/0x2300 [ 1488.090691][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1488.095386][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1488.101484][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1488.107666][T23224] __do_fast_syscall_32+0x102/0x160 [ 1488.112940][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1488.117811][T23224] do_SYSENTER_32+0x73/0x90 [ 1488.122342][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1488.128686][T23224] [ 1488.131024][T23224] Uninit was stored to memory at: [ 1488.136140][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1488.141897][T23224] __msan_chain_origin+0x57/0xa0 [ 1488.146852][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1488.151986][T23224] get_compat_msghdr+0x108/0x2b0 [ 1488.156962][T23224] do_recvmmsg+0xdaf/0x2300 [ 1488.161488][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1488.166198][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1488.172291][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1488.178467][T23224] __do_fast_syscall_32+0x102/0x160 [ 1488.183703][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1488.188567][T23224] do_SYSENTER_32+0x73/0x90 [ 1488.193105][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1488.199428][T23224] [ 1488.201756][T23224] Uninit was stored to memory at: [ 1488.206826][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1488.212560][T23224] __msan_chain_origin+0x57/0xa0 [ 1488.217515][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1488.222648][T23224] get_compat_msghdr+0x108/0x2b0 [ 1488.227632][T23224] do_recvmmsg+0xdaf/0x2300 [ 1488.232153][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1488.236857][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1488.242949][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1488.249127][T23224] __do_fast_syscall_32+0x102/0x160 [ 1488.254600][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1488.259472][T23224] do_SYSENTER_32+0x73/0x90 [ 1488.264007][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1488.270337][T23224] [ 1488.272671][T23224] Uninit was stored to memory at: [ 1488.277720][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1488.283460][T23224] __msan_chain_origin+0x57/0xa0 [ 1488.288423][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1488.293550][T23224] get_compat_msghdr+0x108/0x2b0 [ 1488.298527][T23224] do_recvmmsg+0xdaf/0x2300 [ 1488.303044][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1488.307735][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1488.313830][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1488.319996][T23224] __do_fast_syscall_32+0x102/0x160 [ 1488.325210][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1488.330077][T23224] do_SYSENTER_32+0x73/0x90 [ 1488.334622][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1488.341905][T23224] [ 1488.344254][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1488.351062][T23224] do_recvmmsg+0xbc/0x2300 [ 1488.355502][T23224] do_recvmmsg+0xbc/0x2300 [ 1489.343214][T23221] not chained 5260000 origins [ 1489.347954][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1489.356816][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.367001][T23221] Call Trace: [ 1489.370330][T23221] dump_stack+0x21c/0x280 [ 1489.374688][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1489.380436][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1489.386541][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1489.391804][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1489.397634][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1489.403717][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1489.409107][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1489.414937][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1489.420158][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1489.425811][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1489.431898][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1489.436850][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1489.442057][T23221] __msan_chain_origin+0x57/0xa0 [ 1489.447014][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1489.452149][T23221] get_compat_msghdr+0x108/0x2b0 [ 1489.457113][T23221] do_recvmmsg+0xdaf/0x2300 [ 1489.461730][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1489.467826][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1489.473052][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1489.479021][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1489.484264][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1489.489911][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1489.495247][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1489.500050][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1489.504757][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1489.510602][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1489.515831][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.521929][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.528129][T23221] __do_fast_syscall_32+0x102/0x160 [ 1489.533358][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1489.538269][T23221] do_SYSENTER_32+0x73/0x90 [ 1489.542806][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.549166][T23221] RIP: 0023:0xf7fd0549 [ 1489.553271][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1489.573177][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1489.581624][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1489.589619][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1489.597612][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1489.605638][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1489.613636][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1489.621631][T23221] Uninit was stored to memory at: [ 1489.626696][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1489.632459][T23221] __msan_chain_origin+0x57/0xa0 [ 1489.637420][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1489.642551][T23221] get_compat_msghdr+0x108/0x2b0 [ 1489.647509][T23221] do_recvmmsg+0xdaf/0x2300 [ 1489.652033][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1489.656738][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.662855][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.669080][T23221] __do_fast_syscall_32+0x102/0x160 [ 1489.674311][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1489.679170][T23221] do_SYSENTER_32+0x73/0x90 [ 1489.683707][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.690027][T23221] [ 1489.692361][T23221] Uninit was stored to memory at: [ 1489.697405][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1489.703135][T23221] __msan_chain_origin+0x57/0xa0 [ 1489.708077][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1489.713197][T23221] get_compat_msghdr+0x108/0x2b0 [ 1489.718150][T23221] do_recvmmsg+0xdaf/0x2300 [ 1489.722663][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1489.727460][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.733541][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.739705][T23221] __do_fast_syscall_32+0x102/0x160 [ 1489.744916][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1489.749801][T23221] do_SYSENTER_32+0x73/0x90 [ 1489.754318][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.760641][T23221] [ 1489.762977][T23221] Uninit was stored to memory at: [ 1489.768044][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1489.773787][T23221] __msan_chain_origin+0x57/0xa0 [ 1489.778741][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1489.783883][T23221] get_compat_msghdr+0x108/0x2b0 [ 1489.788853][T23221] do_recvmmsg+0xdaf/0x2300 [ 1489.793384][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1489.798084][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.804161][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.810330][T23221] __do_fast_syscall_32+0x102/0x160 [ 1489.815546][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1489.820409][T23221] do_SYSENTER_32+0x73/0x90 [ 1489.824923][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.831243][T23221] [ 1489.833584][T23221] Uninit was stored to memory at: [ 1489.838659][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1489.844389][T23221] __msan_chain_origin+0x57/0xa0 [ 1489.849341][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1489.854494][T23221] get_compat_msghdr+0x108/0x2b0 [ 1489.859436][T23221] do_recvmmsg+0xdaf/0x2300 [ 1489.863962][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1489.868653][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.874723][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.880885][T23221] __do_fast_syscall_32+0x102/0x160 [ 1489.886093][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1489.890948][T23221] do_SYSENTER_32+0x73/0x90 [ 1489.895458][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.902728][T23221] [ 1489.905053][T23221] Uninit was stored to memory at: [ 1489.910090][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1489.915816][T23221] __msan_chain_origin+0x57/0xa0 [ 1489.920760][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1489.925876][T23221] get_compat_msghdr+0x108/0x2b0 [ 1489.930822][T23221] do_recvmmsg+0xdaf/0x2300 [ 1489.935335][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1489.940039][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.946115][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.952288][T23221] __do_fast_syscall_32+0x102/0x160 [ 1489.957844][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1489.962710][T23221] do_SYSENTER_32+0x73/0x90 [ 1489.967242][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.973613][T23221] [ 1489.975951][T23221] Uninit was stored to memory at: [ 1489.981117][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1489.986875][T23221] __msan_chain_origin+0x57/0xa0 [ 1489.991837][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1489.996969][T23221] get_compat_msghdr+0x108/0x2b0 [ 1490.001932][T23221] do_recvmmsg+0xdaf/0x2300 [ 1490.006458][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1490.011153][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1490.017235][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1490.023411][T23221] __do_fast_syscall_32+0x102/0x160 [ 1490.028653][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1490.033521][T23221] do_SYSENTER_32+0x73/0x90 [ 1490.038046][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1490.044374][T23221] [ 1490.046709][T23221] Uninit was stored to memory at: [ 1490.051767][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1490.057507][T23221] __msan_chain_origin+0x57/0xa0 [ 1490.062466][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1490.067598][T23221] get_compat_msghdr+0x108/0x2b0 [ 1490.072561][T23221] do_recvmmsg+0xdaf/0x2300 [ 1490.077090][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1490.081792][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1490.087881][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1490.094079][T23221] __do_fast_syscall_32+0x102/0x160 [ 1490.099313][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1490.104210][T23221] do_SYSENTER_32+0x73/0x90 [ 1490.108742][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1490.115069][T23221] [ 1490.117404][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1490.124117][T23221] do_recvmmsg+0xbc/0x2300 [ 1490.128563][T23221] do_recvmmsg+0xbc/0x2300 [ 1491.029130][T23221] not chained 5270000 origins [ 1491.033862][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1491.042639][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.052711][T23221] Call Trace: [ 1491.056031][T23221] dump_stack+0x21c/0x280 [ 1491.060387][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1491.066138][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1491.072229][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1491.077452][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1491.083286][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1491.089375][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1491.094771][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1491.099999][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1491.105653][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1491.111737][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1491.116690][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1491.121929][T23221] __msan_chain_origin+0x57/0xa0 [ 1491.126890][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1491.132022][T23221] get_compat_msghdr+0x108/0x2b0 [ 1491.136987][T23221] do_recvmmsg+0xdaf/0x2300 [ 1491.141516][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1491.147611][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1491.152862][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1491.158783][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1491.164012][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1491.169674][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1491.174990][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1491.179772][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1491.184474][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1491.190307][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1491.195558][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1491.201650][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1491.207828][T23221] __do_fast_syscall_32+0x102/0x160 [ 1491.213222][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1491.218093][T23221] do_SYSENTER_32+0x73/0x90 [ 1491.222656][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1491.229004][T23221] RIP: 0023:0xf7fd0549 [ 1491.233096][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1491.252738][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1491.261209][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1491.269212][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1491.277209][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1491.285207][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1491.293204][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1491.301212][T23221] Uninit was stored to memory at: [ 1491.306297][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1491.312034][T23221] __msan_chain_origin+0x57/0xa0 [ 1491.316989][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1491.322285][T23221] get_compat_msghdr+0x108/0x2b0 [ 1491.327259][T23221] do_recvmmsg+0xdaf/0x2300 [ 1491.331789][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1491.336493][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1491.342602][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1491.348791][T23221] __do_fast_syscall_32+0x102/0x160 [ 1491.354016][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1491.358896][T23221] do_SYSENTER_32+0x73/0x90 [ 1491.363452][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1491.369785][T23221] [ 1491.372128][T23221] Uninit was stored to memory at: [ 1491.377194][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1491.382962][T23221] __msan_chain_origin+0x57/0xa0 [ 1491.387926][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1491.393063][T23221] get_compat_msghdr+0x108/0x2b0 [ 1491.398026][T23221] do_recvmmsg+0xdaf/0x2300 [ 1491.402557][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1491.407259][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1491.413445][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1491.419624][T23221] __do_fast_syscall_32+0x102/0x160 [ 1491.425216][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1491.430084][T23221] do_SYSENTER_32+0x73/0x90 [ 1491.434608][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1491.440933][T23221] [ 1491.443280][T23221] Uninit was stored to memory at: [ 1491.448326][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1491.455366][T23221] __msan_chain_origin+0x57/0xa0 [ 1491.460324][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1491.465448][T23221] get_compat_msghdr+0x108/0x2b0 [ 1491.470394][T23221] do_recvmmsg+0xdaf/0x2300 [ 1491.474991][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1491.479674][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1491.485773][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1491.491974][T23221] __do_fast_syscall_32+0x102/0x160 [ 1491.497210][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1491.502080][T23221] do_SYSENTER_32+0x73/0x90 [ 1491.506620][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1491.512939][T23221] [ 1491.515268][T23221] Uninit was stored to memory at: [ 1491.520341][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1491.526080][T23221] __msan_chain_origin+0x57/0xa0 [ 1491.531040][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1491.536181][T23221] get_compat_msghdr+0x108/0x2b0 [ 1491.541153][T23221] do_recvmmsg+0xdaf/0x2300 [ 1491.546642][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1491.551357][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1491.557457][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1491.563647][T23221] __do_fast_syscall_32+0x102/0x160 [ 1491.569067][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1491.573945][T23221] do_SYSENTER_32+0x73/0x90 [ 1491.578477][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1491.584815][T23221] [ 1491.587156][T23221] Uninit was stored to memory at: [ 1491.592209][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1491.597945][T23221] __msan_chain_origin+0x57/0xa0 [ 1491.602896][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1491.608020][T23221] get_compat_msghdr+0x108/0x2b0 [ 1491.612976][T23221] do_recvmmsg+0xdaf/0x2300 [ 1491.617518][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1491.622243][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1491.628338][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1491.634537][T23221] __do_fast_syscall_32+0x102/0x160 [ 1491.639761][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1491.644638][T23221] do_SYSENTER_32+0x73/0x90 [ 1491.649177][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1491.655503][T23221] [ 1491.657841][T23221] Uninit was stored to memory at: [ 1491.662886][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1491.668619][T23221] __msan_chain_origin+0x57/0xa0 [ 1491.673570][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1491.678712][T23221] get_compat_msghdr+0x108/0x2b0 [ 1491.683666][T23221] do_recvmmsg+0xdaf/0x2300 [ 1491.688176][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1491.692866][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1491.698953][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1491.705124][T23221] __do_fast_syscall_32+0x102/0x160 [ 1491.710331][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1491.715189][T23221] do_SYSENTER_32+0x73/0x90 [ 1491.719702][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1491.726061][T23221] [ 1491.728394][T23221] Uninit was stored to memory at: [ 1491.733436][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1491.739181][T23221] __msan_chain_origin+0x57/0xa0 [ 1491.744151][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1491.749273][T23221] get_compat_msghdr+0x108/0x2b0 [ 1491.754228][T23221] do_recvmmsg+0xdaf/0x2300 [ 1491.758752][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1491.763572][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1491.769668][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1491.775844][T23221] __do_fast_syscall_32+0x102/0x160 [ 1491.781064][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1491.785951][T23221] do_SYSENTER_32+0x73/0x90 [ 1491.790472][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1491.796805][T23221] [ 1491.799163][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1491.805941][T23221] do_recvmmsg+0xbc/0x2300 [ 1491.810405][T23221] do_recvmmsg+0xbc/0x2300 [ 1492.487902][T23224] not chained 5280000 origins [ 1492.492642][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1492.501417][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.511485][T23224] Call Trace: [ 1492.514949][T23224] dump_stack+0x21c/0x280 [ 1492.519323][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1492.525056][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1492.530268][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1492.536112][T23224] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1492.542193][T23224] ? sched_clock_cpu+0x5e/0x950 [ 1492.547059][T23224] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1492.553149][T23224] ? sched_clock_cpu+0x5e/0x950 [ 1492.558027][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1492.564141][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1492.569360][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1492.574572][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1492.580392][T23224] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1492.586476][T23224] ? idle_cpu+0x9a/0x1d0 [ 1492.590745][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1492.595966][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1492.601642][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1492.607738][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1492.612695][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1492.617913][T23224] __msan_chain_origin+0x57/0xa0 [ 1492.622878][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1492.628036][T23224] get_compat_msghdr+0x108/0x2b0 [ 1492.633024][T23224] do_recvmmsg+0xdaf/0x2300 [ 1492.637546][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1492.642767][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1492.648693][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1492.653941][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1492.659604][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1492.664918][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1492.669725][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1492.674427][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1492.680278][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1492.685520][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1492.691609][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1492.697794][T23224] __do_fast_syscall_32+0x102/0x160 [ 1492.703019][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1492.707896][T23224] do_SYSENTER_32+0x73/0x90 [ 1492.712428][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1492.718779][T23224] RIP: 0023:0xf7fd0549 [ 1492.722873][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1492.743111][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1492.751565][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1492.759575][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1492.767590][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1492.775592][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1492.783596][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1492.791618][T23224] Uninit was stored to memory at: [ 1492.797012][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1492.802760][T23224] __msan_chain_origin+0x57/0xa0 [ 1492.807722][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1492.812866][T23224] get_compat_msghdr+0x108/0x2b0 [ 1492.817833][T23224] do_recvmmsg+0xdaf/0x2300 [ 1492.822367][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1492.827070][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1492.833178][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1492.839374][T23224] __do_fast_syscall_32+0x102/0x160 [ 1492.844702][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1492.849586][T23224] do_SYSENTER_32+0x73/0x90 [ 1492.854142][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1492.861530][T23224] [ 1492.863864][T23224] Uninit was stored to memory at: [ 1492.868921][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1492.874851][T23224] __msan_chain_origin+0x57/0xa0 [ 1492.879810][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1492.884951][T23224] get_compat_msghdr+0x108/0x2b0 [ 1492.889924][T23224] do_recvmmsg+0xdaf/0x2300 [ 1492.894450][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1492.899232][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1492.905320][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1492.911494][T23224] __do_fast_syscall_32+0x102/0x160 [ 1492.916731][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1492.921601][T23224] do_SYSENTER_32+0x73/0x90 [ 1492.926145][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1492.932490][T23224] [ 1492.934920][T23224] Uninit was stored to memory at: [ 1492.940023][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1492.945767][T23224] __msan_chain_origin+0x57/0xa0 [ 1492.950734][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1492.955870][T23224] get_compat_msghdr+0x108/0x2b0 [ 1492.960852][T23224] do_recvmmsg+0xdaf/0x2300 [ 1492.965373][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1492.970072][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1492.976177][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1492.982355][T23224] __do_fast_syscall_32+0x102/0x160 [ 1492.987586][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1492.992463][T23224] do_SYSENTER_32+0x73/0x90 [ 1492.997167][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.003604][T23224] [ 1493.005944][T23224] Uninit was stored to memory at: [ 1493.010998][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1493.016754][T23224] __msan_chain_origin+0x57/0xa0 [ 1493.021731][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1493.026970][T23224] get_compat_msghdr+0x108/0x2b0 [ 1493.031952][T23224] do_recvmmsg+0xdaf/0x2300 [ 1493.036497][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1493.041250][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.047349][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.053621][T23224] __do_fast_syscall_32+0x102/0x160 [ 1493.058851][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1493.063734][T23224] do_SYSENTER_32+0x73/0x90 [ 1493.068266][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.074681][T23224] [ 1493.077014][T23224] Uninit was stored to memory at: [ 1493.082065][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1493.087803][T23224] __msan_chain_origin+0x57/0xa0 [ 1493.092765][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1493.097906][T23224] get_compat_msghdr+0x108/0x2b0 [ 1493.102877][T23224] do_recvmmsg+0xdaf/0x2300 [ 1493.107395][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1493.112099][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.118193][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.124370][T23224] __do_fast_syscall_32+0x102/0x160 [ 1493.129581][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1493.134449][T23224] do_SYSENTER_32+0x73/0x90 [ 1493.138967][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.145302][T23224] [ 1493.147640][T23224] Uninit was stored to memory at: [ 1493.152707][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1493.158448][T23224] __msan_chain_origin+0x57/0xa0 [ 1493.163430][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1493.168586][T23224] get_compat_msghdr+0x108/0x2b0 [ 1493.173559][T23224] do_recvmmsg+0xdaf/0x2300 [ 1493.178086][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1493.182790][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.188897][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.195083][T23224] __do_fast_syscall_32+0x102/0x160 [ 1493.200309][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1493.205187][T23224] do_SYSENTER_32+0x73/0x90 [ 1493.209807][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.216134][T23224] [ 1493.218465][T23224] Uninit was stored to memory at: [ 1493.223535][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1493.229274][T23224] __msan_chain_origin+0x57/0xa0 [ 1493.234252][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1493.239379][T23224] get_compat_msghdr+0x108/0x2b0 [ 1493.244357][T23224] do_recvmmsg+0xdaf/0x2300 [ 1493.248870][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1493.253563][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.259657][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.265836][T23224] __do_fast_syscall_32+0x102/0x160 [ 1493.271080][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1493.275949][T23224] do_SYSENTER_32+0x73/0x90 [ 1493.280473][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.286901][T23224] [ 1493.289243][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1493.295938][T23224] do_recvmmsg+0xbc/0x2300 [ 1493.300372][T23224] do_recvmmsg+0xbc/0x2300 [ 1493.602680][T23221] not chained 5290000 origins [ 1493.607421][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1493.616207][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.626295][T23221] Call Trace: [ 1493.629616][T23221] dump_stack+0x21c/0x280 [ 1493.633969][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1493.639712][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1493.645892][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1493.651116][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1493.657126][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1493.663252][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1493.668653][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1493.673871][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1493.679525][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1493.685617][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1493.690570][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1493.695828][T23221] __msan_chain_origin+0x57/0xa0 [ 1493.700892][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1493.706036][T23221] get_compat_msghdr+0x108/0x2b0 [ 1493.711100][T23221] do_recvmmsg+0xdaf/0x2300 [ 1493.715617][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1493.721723][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1493.726963][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1493.732881][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1493.738095][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1493.743767][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1493.749076][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1493.753855][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1493.758548][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1493.764407][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1493.769631][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.775735][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.781941][T23221] __do_fast_syscall_32+0x102/0x160 [ 1493.787173][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1493.792051][T23221] do_SYSENTER_32+0x73/0x90 [ 1493.796674][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.803039][T23221] RIP: 0023:0xf7fd0549 [ 1493.807128][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1493.826779][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1493.835484][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1493.836002][T23224] not chained 5300000 origins [ 1493.843493][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1493.856139][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1493.864152][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1493.872154][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1493.880144][T23221] Uninit was stored to memory at: [ 1493.880171][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1493.880198][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.885253][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1493.894011][T23224] Call Trace: [ 1493.904096][T23221] __msan_chain_origin+0x57/0xa0 [ 1493.909799][T23224] dump_stack+0x21c/0x280 [ 1493.913068][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1493.917990][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1493.922318][T23221] get_compat_msghdr+0x108/0x2b0 [ 1493.927426][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1493.933570][T23221] do_recvmmsg+0xdaf/0x2300 [ 1493.938501][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1493.944563][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1493.949065][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1493.954258][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.958943][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1493.964747][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.970822][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1493.976907][T23221] __do_fast_syscall_32+0x102/0x160 [ 1493.983236][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1493.988615][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1493.993797][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1493.998982][T23221] do_SYSENTER_32+0x73/0x90 [ 1494.003820][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1494.009471][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.013979][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1494.020038][T23221] [ 1494.026397][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1494.031299][T23221] Uninit was stored to memory at: [ 1494.033623][T23224] __msan_chain_origin+0x57/0xa0 [ 1494.038811][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1494.043828][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1494.048762][T23221] __msan_chain_origin+0x57/0xa0 [ 1494.054491][T23224] get_compat_msghdr+0x108/0x2b0 [ 1494.059588][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1494.064510][T23224] do_recvmmsg+0xdaf/0x2300 [ 1494.069442][T23221] get_compat_msghdr+0x108/0x2b0 [ 1494.074544][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1494.079040][T23221] do_recvmmsg+0xdaf/0x2300 [ 1494.083984][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1494.089178][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1494.093796][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1494.099680][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.104350][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1494.109534][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.115959][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1494.121596][T23221] __do_fast_syscall_32+0x102/0x160 [ 1494.127761][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1494.133047][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1494.138241][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1494.143116][T23221] do_SYSENTER_32+0x73/0x90 [ 1494.147966][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1494.152627][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.157146][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1494.162925][T23221] [ 1494.169266][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.174423][T23221] Uninit was stored to memory at: [ 1494.176755][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.182815][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1494.188172][T23224] __do_fast_syscall_32+0x102/0x160 [ 1494.194315][T23221] __msan_chain_origin+0x57/0xa0 [ 1494.200045][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1494.205241][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1494.210176][T23224] do_SYSENTER_32+0x73/0x90 [ 1494.215010][T23221] get_compat_msghdr+0x108/0x2b0 [ 1494.220116][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.224600][T23221] do_recvmmsg+0xdaf/0x2300 [ 1494.229522][T23224] RIP: 0023:0xf7fd0549 [ 1494.235857][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1494.240347][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1494.244409][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.249067][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 [ 1494.268694][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.274725][T23224] ORIG_RAX: 0000000000000151 [ 1494.280813][T23221] __do_fast_syscall_32+0x102/0x160 [ 1494.286949][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1494.291622][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1494.296874][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1494.304862][T23221] do_SYSENTER_32+0x73/0x90 [ 1494.309710][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1494.317895][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.322380][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1494.330342][T23221] [ 1494.336673][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1494.344653][T23221] Uninit was stored to memory at: [ 1494.346980][T23224] Uninit was stored to memory at: [ 1494.354983][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1494.360005][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1494.365030][T23221] __msan_chain_origin+0x57/0xa0 [ 1494.370762][T23224] __msan_chain_origin+0x57/0xa0 [ 1494.376568][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1494.381504][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1494.386426][T23221] get_compat_msghdr+0x108/0x2b0 [ 1494.391528][T23224] get_compat_msghdr+0x108/0x2b0 [ 1494.396639][T23221] do_recvmmsg+0xdaf/0x2300 [ 1494.401560][T23224] do_recvmmsg+0xdaf/0x2300 [ 1494.406489][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1494.410981][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1494.415477][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.420142][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.424853][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.430936][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.436988][T23221] __do_fast_syscall_32+0x102/0x160 [ 1494.443138][T23224] __do_fast_syscall_32+0x102/0x160 [ 1494.449288][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1494.454479][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1494.459661][T23221] do_SYSENTER_32+0x73/0x90 [ 1494.464501][T23224] do_SYSENTER_32+0x73/0x90 [ 1494.469342][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.473932][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.478403][T23221] [ 1494.484759][T23224] [ 1494.491072][T23221] Uninit was stored to memory at: [ 1494.493382][T23224] Uninit was stored to memory at: [ 1494.495739][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1494.500736][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1494.505761][T23221] __msan_chain_origin+0x57/0xa0 [ 1494.511472][T23224] __msan_chain_origin+0x57/0xa0 [ 1494.517184][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1494.522125][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1494.527057][T23221] get_compat_msghdr+0x108/0x2b0 [ 1494.532160][T23224] get_compat_msghdr+0x108/0x2b0 [ 1494.537277][T23221] do_recvmmsg+0xdaf/0x2300 [ 1494.542211][T23224] do_recvmmsg+0xdaf/0x2300 [ 1494.547130][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1494.547168][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.551683][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1494.556176][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.560848][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.566896][T23221] __do_fast_syscall_32+0x102/0x160 [ 1494.571559][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.577732][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1494.583793][T23224] __do_fast_syscall_32+0x102/0x160 [ 1494.588988][T23221] do_SYSENTER_32+0x73/0x90 [ 1494.595140][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1494.599983][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.605162][T23224] do_SYSENTER_32+0x73/0x90 [ 1494.609632][T23221] [ 1494.614491][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.620790][T23221] Uninit was stored to memory at: [ 1494.625286][T23224] [ 1494.627667][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1494.633969][T23224] Uninit was stored to memory at: [ 1494.639006][T23221] __msan_chain_origin+0x57/0xa0 [ 1494.641331][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1494.647249][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1494.652265][T23224] __msan_chain_origin+0x57/0xa0 [ 1494.657222][T23221] get_compat_msghdr+0x108/0x2b0 [ 1494.662944][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1494.668048][T23221] do_recvmmsg+0xdaf/0x2300 [ 1494.672986][T23224] get_compat_msghdr+0x108/0x2b0 [ 1494.677940][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1494.683048][T23224] do_recvmmsg+0xdaf/0x2300 [ 1494.687553][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.692480][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1494.697166][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.701662][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.707753][T23221] __do_fast_syscall_32+0x102/0x160 [ 1494.712609][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.718758][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1494.724858][T23224] __do_fast_syscall_32+0x102/0x160 [ 1494.730090][T23221] do_SYSENTER_32+0x73/0x90 [ 1494.736259][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1494.741203][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.746390][T23224] do_SYSENTER_32+0x73/0x90 [ 1494.750975][T23221] [ 1494.755850][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.762159][T23221] Uninit was stored to memory at: [ 1494.766652][T23224] [ 1494.769004][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1494.775314][T23224] Uninit was stored to memory at: [ 1494.780355][T23221] __msan_chain_origin+0x57/0xa0 [ 1494.782694][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1494.788580][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1494.793606][T23224] __msan_chain_origin+0x57/0xa0 [ 1494.798556][T23221] get_compat_msghdr+0x108/0x2b0 [ 1494.804369][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1494.809489][T23221] do_recvmmsg+0xdaf/0x2300 [ 1494.814408][T23224] get_compat_msghdr+0x108/0x2b0 [ 1494.819366][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1494.824459][T23224] do_recvmmsg+0xdaf/0x2300 [ 1494.828949][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.833874][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1494.838549][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.843035][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.849199][T23221] __do_fast_syscall_32+0x102/0x160 [ 1494.853868][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.860076][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1494.866137][T23224] __do_fast_syscall_32+0x102/0x160 [ 1494.871331][T23221] do_SYSENTER_32+0x73/0x90 [ 1494.877473][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1494.882310][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.887495][T23224] do_SYSENTER_32+0x73/0x90 [ 1494.891982][T23221] [ 1494.896855][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.903240][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1494.907724][T23224] [ 1494.910060][T23221] do_recvmmsg+0xbc/0x2300 [ 1494.916357][T23224] Uninit was stored to memory at: [ 1494.923222][T23221] do_recvmmsg+0xbc/0x2300 [ 1494.925538][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1494.945070][T23224] __msan_chain_origin+0x57/0xa0 [ 1494.950037][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1494.955177][T23224] get_compat_msghdr+0x108/0x2b0 [ 1494.960144][T23224] do_recvmmsg+0xdaf/0x2300 [ 1494.964696][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1494.969399][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.975957][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.982140][T23224] __do_fast_syscall_32+0x102/0x160 [ 1494.987357][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1494.992227][T23224] do_SYSENTER_32+0x73/0x90 [ 1494.996778][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.003130][T23224] [ 1495.005463][T23224] Uninit was stored to memory at: [ 1495.010515][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1495.016271][T23224] __msan_chain_origin+0x57/0xa0 [ 1495.021228][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1495.026366][T23224] get_compat_msghdr+0x108/0x2b0 [ 1495.031321][T23224] do_recvmmsg+0xdaf/0x2300 [ 1495.035843][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1495.040536][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.046619][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.052796][T23224] __do_fast_syscall_32+0x102/0x160 [ 1495.058011][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1495.062902][T23224] do_SYSENTER_32+0x73/0x90 [ 1495.067417][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.073736][T23224] [ 1495.076074][T23224] Uninit was stored to memory at: [ 1495.081120][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1495.086855][T23224] __msan_chain_origin+0x57/0xa0 [ 1495.091821][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1495.096956][T23224] get_compat_msghdr+0x108/0x2b0 [ 1495.101919][T23224] do_recvmmsg+0xdaf/0x2300 [ 1495.106447][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1495.111145][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.117233][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.123572][T23224] __do_fast_syscall_32+0x102/0x160 [ 1495.128801][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1495.133670][T23224] do_SYSENTER_32+0x73/0x90 [ 1495.138210][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.144532][T23224] [ 1495.147028][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1495.153717][T23224] do_recvmmsg+0xbc/0x2300 [ 1495.158151][T23224] do_recvmmsg+0xbc/0x2300 [ 1495.385555][T23221] not chained 5310000 origins [ 1495.390291][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1495.399234][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.409346][T23221] Call Trace: [ 1495.412710][T23221] dump_stack+0x21c/0x280 [ 1495.417101][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1495.422854][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1495.428953][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1495.434185][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1495.440032][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1495.446124][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1495.451574][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1495.456797][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1495.462547][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1495.468638][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1495.473604][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1495.478849][T23221] __msan_chain_origin+0x57/0xa0 [ 1495.483818][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1495.488960][T23221] get_compat_msghdr+0x108/0x2b0 [ 1495.493931][T23221] do_recvmmsg+0xdaf/0x2300 [ 1495.498455][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1495.504551][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1495.509799][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1495.515721][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1495.520940][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1495.526613][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1495.531924][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1495.536720][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1495.541440][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1495.547276][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1495.552533][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.558631][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.564822][T23221] __do_fast_syscall_32+0x102/0x160 [ 1495.570044][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1495.574916][T23221] do_SYSENTER_32+0x73/0x90 [ 1495.579431][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.585792][T23221] RIP: 0023:0xf7fd0549 [ 1495.589876][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1495.609516][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1495.617959][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1495.625946][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1495.633954][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1495.641964][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1495.649965][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1495.658423][T23221] Uninit was stored to memory at: [ 1495.663484][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1495.669229][T23221] __msan_chain_origin+0x57/0xa0 [ 1495.674294][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1495.680556][T23221] get_compat_msghdr+0x108/0x2b0 [ 1495.685523][T23221] do_recvmmsg+0xdaf/0x2300 [ 1495.690068][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1495.694778][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.700869][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.707058][T23221] __do_fast_syscall_32+0x102/0x160 [ 1495.712287][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1495.717175][T23221] do_SYSENTER_32+0x73/0x90 [ 1495.721774][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.728107][T23221] [ 1495.730446][T23221] Uninit was stored to memory at: [ 1495.735498][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1495.741344][T23221] __msan_chain_origin+0x57/0xa0 [ 1495.746328][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1495.751530][T23221] get_compat_msghdr+0x108/0x2b0 [ 1495.756488][T23221] do_recvmmsg+0xdaf/0x2300 [ 1495.761127][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1495.765825][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.771914][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.778100][T23221] __do_fast_syscall_32+0x102/0x160 [ 1495.783326][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1495.788201][T23221] do_SYSENTER_32+0x73/0x90 [ 1495.792730][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.799069][T23221] [ 1495.801472][T23221] Uninit was stored to memory at: [ 1495.806562][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1495.812304][T23221] __msan_chain_origin+0x57/0xa0 [ 1495.817261][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1495.822392][T23221] get_compat_msghdr+0x108/0x2b0 [ 1495.827433][T23221] do_recvmmsg+0xdaf/0x2300 [ 1495.831966][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1495.836660][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.842742][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.848914][T23221] __do_fast_syscall_32+0x102/0x160 [ 1495.854143][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1495.859028][T23221] do_SYSENTER_32+0x73/0x90 [ 1495.860118][T23224] not chained 5320000 origins [ 1495.863562][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.868229][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1495.874535][T23221] [ 1495.883296][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.885612][T23221] Uninit was stored to memory at: [ 1495.895704][T23224] Call Trace: [ 1495.900760][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1495.904026][T23224] dump_stack+0x21c/0x280 [ 1495.909725][T23221] __msan_chain_origin+0x57/0xa0 [ 1495.914041][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1495.918989][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1495.924721][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1495.929816][T23221] get_compat_msghdr+0x108/0x2b0 [ 1495.935886][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1495.940847][T23221] do_recvmmsg+0xdaf/0x2300 [ 1495.946043][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1495.950556][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1495.956369][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1495.961036][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.967097][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1495.973178][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.978540][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1495.984700][T23221] __do_fast_syscall_32+0x102/0x160 [ 1495.989889][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1495.995097][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1496.000753][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1496.005603][T23221] do_SYSENTER_32+0x73/0x90 [ 1496.011758][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1496.016260][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.021207][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1496.027516][T23221] [ 1496.032759][T23224] __msan_chain_origin+0x57/0xa0 [ 1496.035076][T23221] Uninit was stored to memory at: [ 1496.040125][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1496.045145][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1496.050246][T23224] get_compat_msghdr+0x108/0x2b0 [ 1496.055953][T23221] __msan_chain_origin+0x57/0xa0 [ 1496.060886][T23224] do_recvmmsg+0xdaf/0x2300 [ 1496.065806][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1496.070288][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1496.075386][T23221] get_compat_msghdr+0x108/0x2b0 [ 1496.080607][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1496.085544][T23221] do_recvmmsg+0xdaf/0x2300 [ 1496.091426][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1496.095921][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1496.101110][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1496.105780][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.111409][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1496.117473][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.122735][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1496.128882][T23221] __do_fast_syscall_32+0x102/0x160 [ 1496.133681][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1496.138879][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1496.143535][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1496.148381][T23221] do_SYSENTER_32+0x73/0x90 [ 1496.154195][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1496.158677][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.163869][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.170167][T23221] [ 1496.176277][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.178577][T23221] Uninit was stored to memory at: [ 1496.184753][T23224] __do_fast_syscall_32+0x102/0x160 [ 1496.189769][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1496.194971][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1496.200693][T23221] __msan_chain_origin+0x57/0xa0 [ 1496.205547][T23224] do_SYSENTER_32+0x73/0x90 [ 1496.210477][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1496.214972][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.220070][T23221] get_compat_msghdr+0x108/0x2b0 [ 1496.226394][T23224] RIP: 0023:0xf7fd0549 [ 1496.231335][T23221] do_recvmmsg+0xdaf/0x2300 [ 1496.235390][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1496.239899][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1496.259499][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 [ 1496.264164][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.264194][T23224] ORIG_RAX: 0000000000000151 [ 1496.270278][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.276331][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1496.281195][T23221] __do_fast_syscall_32+0x102/0x160 [ 1496.287336][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1496.295335][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1496.300526][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1496.308514][T23221] do_SYSENTER_32+0x73/0x90 [ 1496.313340][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1496.321329][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.325826][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1496.333793][T23221] [ 1496.340122][T23224] Uninit was stored to memory at: [ 1496.348090][T23221] Uninit was stored to memory at: [ 1496.350432][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1496.355435][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1496.360446][T23224] __msan_chain_origin+0x57/0xa0 [ 1496.366157][T23221] __msan_chain_origin+0x57/0xa0 [ 1496.371875][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1496.376979][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1496.381945][T23224] get_compat_msghdr+0x108/0x2b0 [ 1496.387043][T23221] get_compat_msghdr+0x108/0x2b0 [ 1496.392146][T23224] do_recvmmsg+0xdaf/0x2300 [ 1496.397065][T23221] do_recvmmsg+0xdaf/0x2300 [ 1496.401993][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1496.406571][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1496.411068][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.415731][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.420415][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.426478][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.432586][T23224] __do_fast_syscall_32+0x102/0x160 [ 1496.438726][T23221] __do_fast_syscall_32+0x102/0x160 [ 1496.444872][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1496.450057][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1496.455264][T23224] do_SYSENTER_32+0x73/0x90 [ 1496.460093][T23221] do_SYSENTER_32+0x73/0x90 [ 1496.465062][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.469552][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.474049][T23224] [ 1496.480384][T23221] [ 1496.486701][T23224] Uninit was stored to memory at: [ 1496.489016][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1496.491356][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1496.496378][T23221] do_recvmmsg+0xbc/0x2300 [ 1496.503041][T23224] __msan_chain_origin+0x57/0xa0 [ 1496.508774][T23221] do_recvmmsg+0xbc/0x2300 [ 1496.513178][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1496.527616][T23224] get_compat_msghdr+0x108/0x2b0 [ 1496.532575][T23224] do_recvmmsg+0xdaf/0x2300 [ 1496.537106][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1496.541805][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.547985][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.554167][T23224] __do_fast_syscall_32+0x102/0x160 [ 1496.559577][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1496.564507][T23224] do_SYSENTER_32+0x73/0x90 [ 1496.569037][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.575497][T23224] [ 1496.578025][T23224] Uninit was stored to memory at: [ 1496.583156][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1496.588921][T23224] __msan_chain_origin+0x57/0xa0 [ 1496.593892][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1496.599025][T23224] get_compat_msghdr+0x108/0x2b0 [ 1496.603989][T23224] do_recvmmsg+0xdaf/0x2300 [ 1496.608519][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1496.613216][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.619319][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.625587][T23224] __do_fast_syscall_32+0x102/0x160 [ 1496.630806][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1496.635676][T23224] do_SYSENTER_32+0x73/0x90 [ 1496.640217][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.646545][T23224] [ 1496.648927][T23224] Uninit was stored to memory at: [ 1496.654018][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1496.659778][T23224] __msan_chain_origin+0x57/0xa0 [ 1496.664742][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1496.669920][T23224] get_compat_msghdr+0x108/0x2b0 [ 1496.674914][T23224] do_recvmmsg+0xdaf/0x2300 [ 1496.679442][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1496.684163][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.690248][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.696524][T23224] __do_fast_syscall_32+0x102/0x160 [ 1496.701747][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1496.706613][T23224] do_SYSENTER_32+0x73/0x90 [ 1496.711147][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.717585][T23224] [ 1496.719920][T23224] Uninit was stored to memory at: [ 1496.724982][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1496.731684][T23224] __msan_chain_origin+0x57/0xa0 [ 1496.736657][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1496.741793][T23224] get_compat_msghdr+0x108/0x2b0 [ 1496.746760][T23224] do_recvmmsg+0xdaf/0x2300 [ 1496.751288][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1496.755992][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.762107][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.768294][T23224] __do_fast_syscall_32+0x102/0x160 [ 1496.770164][T23221] not chained 5330000 origins [ 1496.773532][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1496.778213][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1496.783071][T23224] do_SYSENTER_32+0x73/0x90 [ 1496.791921][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.796459][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.806501][T23221] Call Trace: [ 1496.812853][T23224] [ 1496.816180][T23221] dump_stack+0x21c/0x280 [ 1496.818493][T23224] Uninit was stored to memory at: [ 1496.822846][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1496.827855][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1496.833591][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1496.839327][T23224] __msan_chain_origin+0x57/0xa0 [ 1496.845501][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1496.850452][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1496.855645][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1496.860758][T23224] get_compat_msghdr+0x108/0x2b0 [ 1496.866680][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1496.871603][T23224] do_recvmmsg+0xdaf/0x2300 [ 1496.877660][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1496.882157][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1496.887520][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1496.892193][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.897389][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1496.903444][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.909066][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1496.915214][T23224] __do_fast_syscall_32+0x102/0x160 [ 1496.921265][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1496.926492][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1496.931636][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1496.936486][T23224] do_SYSENTER_32+0x73/0x90 [ 1496.941698][T23221] __msan_chain_origin+0x57/0xa0 [ 1496.946404][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.951328][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1496.957632][T23224] [ 1496.962763][T23221] get_compat_msghdr+0x108/0x2b0 [ 1496.965058][T23224] Uninit was stored to memory at: [ 1496.970278][T23221] do_recvmmsg+0xdaf/0x2300 [ 1496.975304][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1496.979796][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1496.985520][T23224] __msan_chain_origin+0x57/0xa0 [ 1496.991591][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1496.996553][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1497.001765][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1497.006866][T23224] get_compat_msghdr+0x108/0x2b0 [ 1497.012752][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1497.017686][T23224] do_recvmmsg+0xdaf/0x2300 [ 1497.022870][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1497.027379][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1497.033019][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1497.037700][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1497.043086][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1497.049160][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1497.054910][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1497.061070][T23224] __do_fast_syscall_32+0x102/0x160 [ 1497.065741][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1497.070959][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1497.076782][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1497.081628][T23224] do_SYSENTER_32+0x73/0x90 [ 1497.086844][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1497.091335][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1497.097388][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1497.103688][T23224] [ 1497.109883][T23221] __do_fast_syscall_32+0x102/0x160 [ 1497.112182][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1497.117492][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1497.124176][T23224] do_recvmmsg+0xbc/0x2300 [ 1497.129033][T23221] do_SYSENTER_32+0x73/0x90 [ 1497.133434][T23224] do_recvmmsg+0xbc/0x2300 [ 1497.137924][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1497.148664][T23221] RIP: 0023:0xf7fd0549 [ 1497.152850][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1497.172505][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1497.180962][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1497.189012][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1497.198314][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1497.206315][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1497.214320][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1497.222310][T23221] Uninit was stored to memory at: [ 1497.227374][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1497.233137][T23221] __msan_chain_origin+0x57/0xa0 [ 1497.238104][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1497.243242][T23221] get_compat_msghdr+0x108/0x2b0 [ 1497.248223][T23221] do_recvmmsg+0xdaf/0x2300 [ 1497.252815][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1497.257513][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1497.263606][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1497.269781][T23221] __do_fast_syscall_32+0x102/0x160 [ 1497.274995][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1497.279907][T23221] do_SYSENTER_32+0x73/0x90 [ 1497.284779][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1497.291111][T23221] [ 1497.293435][T23221] Uninit was stored to memory at: [ 1497.298475][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1497.304210][T23221] __msan_chain_origin+0x57/0xa0 [ 1497.309161][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1497.314287][T23221] get_compat_msghdr+0x108/0x2b0 [ 1497.319246][T23221] do_recvmmsg+0xdaf/0x2300 [ 1497.323766][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1497.328582][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1497.335688][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1497.341927][T23221] __do_fast_syscall_32+0x102/0x160 [ 1497.347176][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1497.352065][T23221] do_SYSENTER_32+0x73/0x90 [ 1497.356602][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1497.363113][T23221] [ 1497.365466][T23221] Uninit was stored to memory at: [ 1497.370518][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1497.376278][T23221] __msan_chain_origin+0x57/0xa0 [ 1497.381243][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1497.386485][T23221] get_compat_msghdr+0x108/0x2b0 [ 1497.391456][T23221] do_recvmmsg+0xdaf/0x2300 [ 1497.396000][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1497.400724][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1497.406822][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1497.412995][T23221] __do_fast_syscall_32+0x102/0x160 [ 1497.418207][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1497.423078][T23221] do_SYSENTER_32+0x73/0x90 [ 1497.427600][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1497.433925][T23221] [ 1497.436325][T23221] Uninit was stored to memory at: [ 1497.441373][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1497.447112][T23221] __msan_chain_origin+0x57/0xa0 [ 1497.452097][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1497.459316][T23221] get_compat_msghdr+0x108/0x2b0 [ 1497.464277][T23221] do_recvmmsg+0xdaf/0x2300 [ 1497.468803][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1497.473598][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1497.479686][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1497.485865][T23221] __do_fast_syscall_32+0x102/0x160 [ 1497.491749][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1497.496619][T23221] do_SYSENTER_32+0x73/0x90 [ 1497.501147][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1497.507470][T23221] [ 1497.509806][T23221] Uninit was stored to memory at: [ 1497.514915][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1497.520679][T23221] __msan_chain_origin+0x57/0xa0 [ 1497.525639][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1497.530770][T23221] get_compat_msghdr+0x108/0x2b0 [ 1497.535843][T23221] do_recvmmsg+0xdaf/0x2300 [ 1497.540384][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1497.545097][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1497.551199][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1497.557390][T23221] __do_fast_syscall_32+0x102/0x160 [ 1497.562723][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1497.567595][T23221] do_SYSENTER_32+0x73/0x90 [ 1497.572129][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1497.578461][T23221] [ 1497.580820][T23221] Uninit was stored to memory at: [ 1497.586031][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1497.591773][T23221] __msan_chain_origin+0x57/0xa0 [ 1497.596731][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1497.601895][T23221] get_compat_msghdr+0x108/0x2b0 [ 1497.607121][T23221] do_recvmmsg+0xdaf/0x2300 [ 1497.612174][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1497.616893][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1497.628053][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1497.634302][T23221] __do_fast_syscall_32+0x102/0x160 [ 1497.639526][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1497.644406][T23221] do_SYSENTER_32+0x73/0x90 [ 1497.648939][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1497.655284][T23221] [ 1497.657644][T23221] Uninit was stored to memory at: [ 1497.662722][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1497.668465][T23221] __msan_chain_origin+0x57/0xa0 [ 1497.673512][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1497.678732][T23221] get_compat_msghdr+0x108/0x2b0 [ 1497.683718][T23221] do_recvmmsg+0xdaf/0x2300 [ 1497.688248][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1497.692969][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1497.699336][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1497.706310][T23221] __do_fast_syscall_32+0x102/0x160 [ 1497.711716][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1497.716594][T23221] do_SYSENTER_32+0x73/0x90 [ 1497.721127][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1497.727452][T23221] [ 1497.729788][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1497.736498][T23221] do_recvmmsg+0xbc/0x2300 [ 1497.740951][T23221] do_recvmmsg+0xbc/0x2300 [ 1498.058647][T23221] not chained 5340000 origins [ 1498.063371][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1498.072159][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1498.082247][T23221] Call Trace: [ 1498.085563][T23221] dump_stack+0x21c/0x280 [ 1498.089925][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1498.095671][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1498.101759][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1498.106993][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1498.112843][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1498.118924][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1498.124335][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1498.129554][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1498.135211][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1498.141290][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1498.146239][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1498.151454][T23221] __msan_chain_origin+0x57/0xa0 [ 1498.156407][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1498.161549][T23221] get_compat_msghdr+0x108/0x2b0 [ 1498.166602][T23221] do_recvmmsg+0xdaf/0x2300 [ 1498.171120][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1498.177226][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1498.182461][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1498.188406][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1498.193628][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1498.199310][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1498.204650][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1498.209435][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1498.214155][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1498.219974][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1498.225186][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.231271][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.237550][T23221] __do_fast_syscall_32+0x102/0x160 [ 1498.242774][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1498.247663][T23221] do_SYSENTER_32+0x73/0x90 [ 1498.252271][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.258651][T23221] RIP: 0023:0xf7fd0549 [ 1498.262736][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1498.282367][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1498.290806][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1498.298812][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1498.306818][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1498.314812][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1498.322824][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1498.330809][T23221] Uninit was stored to memory at: [ 1498.335857][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1498.341590][T23221] __msan_chain_origin+0x57/0xa0 [ 1498.346550][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1498.351701][T23221] get_compat_msghdr+0x108/0x2b0 [ 1498.356653][T23221] do_recvmmsg+0xdaf/0x2300 [ 1498.361168][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1498.365862][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.371951][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.378129][T23221] __do_fast_syscall_32+0x102/0x160 [ 1498.383346][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1498.388213][T23221] do_SYSENTER_32+0x73/0x90 [ 1498.392767][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.399093][T23221] [ 1498.401424][T23221] Uninit was stored to memory at: [ 1498.406587][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1498.412325][T23221] __msan_chain_origin+0x57/0xa0 [ 1498.417348][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1498.422475][T23221] get_compat_msghdr+0x108/0x2b0 [ 1498.427434][T23221] do_recvmmsg+0xdaf/0x2300 [ 1498.431949][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1498.436641][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.442723][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.448890][T23221] __do_fast_syscall_32+0x102/0x160 [ 1498.454105][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1498.459016][T23221] do_SYSENTER_32+0x73/0x90 [ 1498.464323][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.470647][T23221] [ 1498.472982][T23221] Uninit was stored to memory at: [ 1498.478042][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1498.483803][T23221] __msan_chain_origin+0x57/0xa0 [ 1498.488764][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1498.493897][T23221] get_compat_msghdr+0x108/0x2b0 [ 1498.498945][T23221] do_recvmmsg+0xdaf/0x2300 [ 1498.503470][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1498.508171][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.514260][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.520439][T23221] __do_fast_syscall_32+0x102/0x160 [ 1498.525662][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1498.530536][T23221] do_SYSENTER_32+0x73/0x90 [ 1498.536020][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.542378][T23221] [ 1498.544710][T23221] Uninit was stored to memory at: [ 1498.549758][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1498.555527][T23221] __msan_chain_origin+0x57/0xa0 [ 1498.560490][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1498.565631][T23221] get_compat_msghdr+0x108/0x2b0 [ 1498.570596][T23221] do_recvmmsg+0xdaf/0x2300 [ 1498.575121][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1498.579819][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.585902][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.592081][T23221] __do_fast_syscall_32+0x102/0x160 [ 1498.597293][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1498.602162][T23221] do_SYSENTER_32+0x73/0x90 [ 1498.606679][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.613003][T23221] [ 1498.615337][T23221] Uninit was stored to memory at: [ 1498.620389][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1498.626133][T23221] __msan_chain_origin+0x57/0xa0 [ 1498.631105][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1498.636249][T23221] get_compat_msghdr+0x108/0x2b0 [ 1498.641231][T23221] do_recvmmsg+0xdaf/0x2300 [ 1498.645797][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1498.650507][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.656623][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.663240][T23221] __do_fast_syscall_32+0x102/0x160 [ 1498.668471][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1498.673437][T23221] do_SYSENTER_32+0x73/0x90 [ 1498.677991][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.684324][T23221] [ 1498.686656][T23221] Uninit was stored to memory at: [ 1498.691793][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1498.697524][T23221] __msan_chain_origin+0x57/0xa0 [ 1498.702475][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1498.707611][T23221] get_compat_msghdr+0x108/0x2b0 [ 1498.712563][T23221] do_recvmmsg+0xdaf/0x2300 [ 1498.717085][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1498.721777][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.727897][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.734093][T23221] __do_fast_syscall_32+0x102/0x160 [ 1498.739301][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1498.744163][T23221] do_SYSENTER_32+0x73/0x90 [ 1498.749273][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.755618][T23221] [ 1498.757950][T23221] Uninit was stored to memory at: [ 1498.763081][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1498.768814][T23221] __msan_chain_origin+0x57/0xa0 [ 1498.773792][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1498.778919][T23221] get_compat_msghdr+0x108/0x2b0 [ 1498.783878][T23221] do_recvmmsg+0xdaf/0x2300 [ 1498.788953][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1498.794012][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.800287][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.806487][T23221] __do_fast_syscall_32+0x102/0x160 [ 1498.811718][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1498.816592][T23221] do_SYSENTER_32+0x73/0x90 [ 1498.821140][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.827792][T23221] [ 1498.830190][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1498.836965][T23221] do_recvmmsg+0xbc/0x2300 [ 1498.841392][T23221] do_recvmmsg+0xbc/0x2300 [ 1499.050827][T23221] not chained 5350000 origins [ 1499.055639][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1499.064415][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.074486][T23221] Call Trace: [ 1499.077822][T23221] dump_stack+0x21c/0x280 [ 1499.082501][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1499.088267][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1499.094376][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1499.099618][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1499.105475][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1499.111558][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1499.117002][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1499.122259][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1499.128354][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1499.134616][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1499.139572][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1499.144813][T23221] __msan_chain_origin+0x57/0xa0 [ 1499.149774][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1499.154923][T23221] get_compat_msghdr+0x108/0x2b0 [ 1499.159980][T23221] do_recvmmsg+0xdaf/0x2300 [ 1499.164519][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1499.170631][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1499.175943][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1499.181859][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1499.187094][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1499.192761][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1499.198083][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1499.202985][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1499.207706][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1499.213679][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1499.218989][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.225118][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.231317][T23221] __do_fast_syscall_32+0x102/0x160 [ 1499.236545][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1499.241426][T23221] do_SYSENTER_32+0x73/0x90 [ 1499.245972][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.252369][T23221] RIP: 0023:0xf7fd0549 [ 1499.256469][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1499.276100][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1499.284550][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1499.292666][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1499.300669][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1499.308687][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1499.316678][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1499.324669][T23221] Uninit was stored to memory at: [ 1499.329838][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1499.335579][T23221] __msan_chain_origin+0x57/0xa0 [ 1499.340563][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1499.346052][T23221] get_compat_msghdr+0x108/0x2b0 [ 1499.351045][T23221] do_recvmmsg+0xdaf/0x2300 [ 1499.355569][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1499.360527][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.366644][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.372822][T23221] __do_fast_syscall_32+0x102/0x160 [ 1499.378055][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1499.382950][T23221] do_SYSENTER_32+0x73/0x90 [ 1499.387478][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.393803][T23221] [ 1499.396159][T23221] Uninit was stored to memory at: [ 1499.401216][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1499.408520][T23221] __msan_chain_origin+0x57/0xa0 [ 1499.413479][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1499.418618][T23221] get_compat_msghdr+0x108/0x2b0 [ 1499.423584][T23221] do_recvmmsg+0xdaf/0x2300 [ 1499.428128][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1499.432855][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.438953][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.445334][T23221] __do_fast_syscall_32+0x102/0x160 [ 1499.450554][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1499.455514][T23221] do_SYSENTER_32+0x73/0x90 [ 1499.460565][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.466978][T23221] [ 1499.469312][T23221] Uninit was stored to memory at: [ 1499.474798][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1499.480541][T23221] __msan_chain_origin+0x57/0xa0 [ 1499.485500][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1499.491595][T23221] get_compat_msghdr+0x108/0x2b0 [ 1499.496558][T23221] do_recvmmsg+0xdaf/0x2300 [ 1499.501085][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1499.505792][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.512351][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.518545][T23221] __do_fast_syscall_32+0x102/0x160 [ 1499.523773][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1499.528656][T23221] do_SYSENTER_32+0x73/0x90 [ 1499.533181][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.539621][T23221] [ 1499.540205][T23224] not chained 5360000 origins [ 1499.541969][T23221] Uninit was stored to memory at: [ 1499.546665][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1499.551699][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1499.560548][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.566284][T23221] __msan_chain_origin+0x57/0xa0 [ 1499.576323][T23224] Call Trace: [ 1499.581285][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1499.584552][T23224] dump_stack+0x21c/0x280 [ 1499.589653][T23221] get_compat_msghdr+0x108/0x2b0 [ 1499.593996][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1499.598928][T23221] do_recvmmsg+0xdaf/0x2300 [ 1499.604657][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1499.609149][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1499.615243][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1499.619945][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.625143][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1499.631245][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.637184][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1499.643372][T23221] __do_fast_syscall_32+0x102/0x160 [ 1499.649439][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1499.654629][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1499.659994][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1499.664854][T23221] do_SYSENTER_32+0x73/0x90 [ 1499.670058][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1499.674555][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.680195][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1499.686509][T23221] [ 1499.692682][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1499.694987][T23221] Uninit was stored to memory at: [ 1499.699951][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1499.705262][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1499.710527][T23224] __msan_chain_origin+0x57/0xa0 [ 1499.716246][T23221] __msan_chain_origin+0x57/0xa0 [ 1499.721263][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1499.726198][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1499.731312][T23224] get_compat_msghdr+0x108/0x2b0 [ 1499.736440][T23221] get_compat_msghdr+0x108/0x2b0 [ 1499.741372][T23224] do_recvmmsg+0xdaf/0x2300 [ 1499.746754][T23221] do_recvmmsg+0xdaf/0x2300 [ 1499.751255][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1499.755934][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1499.761134][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1499.765811][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.771709][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1499.777812][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.783114][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1499.789355][T23221] __do_fast_syscall_32+0x102/0x160 [ 1499.795272][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1499.800784][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1499.806056][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1499.810925][T23221] do_SYSENTER_32+0x73/0x90 [ 1499.815795][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1499.820299][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.824970][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1499.831287][T23221] [ 1499.837108][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1499.839420][T23221] Uninit was stored to memory at: [ 1499.844639][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.849739][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1499.855825][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.861616][T23221] __msan_chain_origin+0x57/0xa0 [ 1499.867766][T23224] __do_fast_syscall_32+0x102/0x160 [ 1499.872714][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1499.877994][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1499.883090][T23221] get_compat_msghdr+0x108/0x2b0 [ 1499.888125][T23224] do_SYSENTER_32+0x73/0x90 [ 1499.893056][T23221] do_recvmmsg+0xdaf/0x2300 [ 1499.897743][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.902246][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1499.908739][T23224] RIP: 0023:0xf7fd0549 [ 1499.913946][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.918004][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1499.924094][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.943857][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 [ 1499.950006][T23221] __do_fast_syscall_32+0x102/0x160 [ 1499.950044][T23224] ORIG_RAX: 0000000000000151 [ 1499.956174][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1499.961977][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1499.966662][T23221] do_SYSENTER_32+0x73/0x90 [ 1499.971483][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1499.979599][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.984080][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1499.992045][T23221] [ 1499.998381][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1500.006366][T23221] Uninit was stored to memory at: [ 1500.008687][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.016675][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1500.021666][T23224] Uninit was stored to memory at: [ 1500.029746][T23221] __msan_chain_origin+0x57/0xa0 [ 1500.035464][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1500.040490][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1500.045416][T23224] __msan_chain_origin+0x57/0xa0 [ 1500.051136][T23221] get_compat_msghdr+0x108/0x2b0 [ 1500.056232][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1500.061165][T23221] do_recvmmsg+0xdaf/0x2300 [ 1500.066099][T23224] get_compat_msghdr+0x108/0x2b0 [ 1500.071205][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1500.075705][T23224] do_recvmmsg+0xdaf/0x2300 [ 1500.080637][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.085307][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1500.089804][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.095859][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.100541][T23221] __do_fast_syscall_32+0x102/0x160 [ 1500.106686][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.112745][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1500.117930][T23224] __do_fast_syscall_32+0x102/0x160 [ 1500.124100][T23221] do_SYSENTER_32+0x73/0x90 [ 1500.128940][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1500.134132][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.138645][T23224] do_SYSENTER_32+0x73/0x90 [ 1500.143471][T23221] [ 1500.149827][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.154299][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1500.156632][T23224] [ 1500.162991][T23221] do_recvmmsg+0xbc/0x2300 [ 1500.169639][T23224] Uninit was stored to memory at: [ 1500.171974][T23221] do_recvmmsg+0xbc/0x2300 [ 1500.176384][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1500.191525][T23224] __msan_chain_origin+0x57/0xa0 [ 1500.196511][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1500.201643][T23224] get_compat_msghdr+0x108/0x2b0 [ 1500.206600][T23224] do_recvmmsg+0xdaf/0x2300 [ 1500.211126][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1500.215834][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.221925][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.228111][T23224] __do_fast_syscall_32+0x102/0x160 [ 1500.233370][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1500.238257][T23224] do_SYSENTER_32+0x73/0x90 [ 1500.242795][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.249144][T23224] [ 1500.251507][T23224] Uninit was stored to memory at: [ 1500.256570][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1500.262314][T23224] __msan_chain_origin+0x57/0xa0 [ 1500.267271][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1500.272413][T23224] get_compat_msghdr+0x108/0x2b0 [ 1500.277400][T23224] do_recvmmsg+0xdaf/0x2300 [ 1500.281931][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1500.286641][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.292734][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.298915][T23224] __do_fast_syscall_32+0x102/0x160 [ 1500.304156][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1500.309042][T23224] do_SYSENTER_32+0x73/0x90 [ 1500.313575][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.319905][T23224] [ 1500.322250][T23224] Uninit was stored to memory at: [ 1500.327305][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1500.333659][T23224] __msan_chain_origin+0x57/0xa0 [ 1500.338631][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1500.343774][T23224] get_compat_msghdr+0x108/0x2b0 [ 1500.348742][T23224] do_recvmmsg+0xdaf/0x2300 [ 1500.353277][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1500.357988][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.364118][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.370339][T23224] __do_fast_syscall_32+0x102/0x160 [ 1500.375649][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1500.380530][T23224] do_SYSENTER_32+0x73/0x90 [ 1500.385055][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.391382][T23224] [ 1500.393721][T23224] Uninit was stored to memory at: [ 1500.398772][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1500.404525][T23224] __msan_chain_origin+0x57/0xa0 [ 1500.409484][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1500.414608][T23224] get_compat_msghdr+0x108/0x2b0 [ 1500.419594][T23224] do_recvmmsg+0xdaf/0x2300 [ 1500.424120][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1500.425759][T23221] not chained 5370000 origins [ 1500.428846][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.433531][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1500.439687][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.448423][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.454614][T23224] __do_fast_syscall_32+0x102/0x160 [ 1500.464660][T23221] Call Trace: [ 1500.469885][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1500.473158][T23221] dump_stack+0x21c/0x280 [ 1500.478001][T23224] do_SYSENTER_32+0x73/0x90 [ 1500.482334][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1500.486835][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.492550][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1500.498845][T23224] [ 1500.504924][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1500.507214][T23224] Uninit was stored to memory at: [ 1500.512414][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1500.517429][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1500.523492][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1500.529201][T23224] __msan_chain_origin+0x57/0xa0 [ 1500.535259][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1500.540183][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1500.545551][T23221] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1500.550658][T23224] get_compat_msghdr+0x108/0x2b0 [ 1500.556722][T23221] ? idle_cpu+0x9a/0x1d0 [ 1500.561652][T23224] do_recvmmsg+0xdaf/0x2300 [ 1500.565876][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1500.570384][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1500.575583][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1500.580246][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.585890][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1500.591948][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.597991][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1500.604155][T23224] __do_fast_syscall_32+0x102/0x160 [ 1500.609084][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1500.614280][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1500.619460][T23221] __msan_chain_origin+0x57/0xa0 [ 1500.624330][T23224] do_SYSENTER_32+0x73/0x90 [ 1500.629272][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1500.633775][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.638961][T23221] get_compat_msghdr+0x108/0x2b0 [ 1500.651519][T23224] [ 1500.656467][T23221] do_recvmmsg+0xdaf/0x2300 [ 1500.658772][T23224] Uninit was stored to memory at: [ 1500.663280][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1500.668308][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1500.674370][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1500.680089][T23224] __msan_chain_origin+0x57/0xa0 [ 1500.685305][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1500.690228][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1500.696109][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1500.701290][T23224] get_compat_msghdr+0x108/0x2b0 [ 1500.706499][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1500.711426][T23224] do_recvmmsg+0xdaf/0x2300 [ 1500.717063][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1500.721573][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1500.726858][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1500.731546][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.736301][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1500.742364][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.747036][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1500.753191][T23224] __do_fast_syscall_32+0x102/0x160 [ 1500.758985][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1500.764185][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1500.769392][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.774242][T23224] do_SYSENTER_32+0x73/0x90 [ 1500.780311][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.784818][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.790981][T23221] __do_fast_syscall_32+0x102/0x160 [ 1500.797308][T23224] [ 1500.802532][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1500.804848][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1500.809795][T23221] do_SYSENTER_32+0x73/0x90 [ 1500.816487][T23224] do_recvmmsg+0xbc/0x2300 [ 1500.820989][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.825412][T23224] do_recvmmsg+0xbc/0x2300 [ 1500.831726][T23221] RIP: 0023:0xf7fd0549 [ 1500.840205][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1500.859854][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1500.868293][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1500.876327][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1500.884319][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1500.892328][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1500.900331][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.908313][T23221] Uninit was stored to memory at: [ 1500.913455][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1500.919197][T23221] __msan_chain_origin+0x57/0xa0 [ 1500.924191][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1500.929322][T23221] get_compat_msghdr+0x108/0x2b0 [ 1500.934274][T23221] do_recvmmsg+0xdaf/0x2300 [ 1500.938790][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1500.943483][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1500.949567][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1500.955758][T23221] __do_fast_syscall_32+0x102/0x160 [ 1500.961179][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1500.966135][T23221] do_SYSENTER_32+0x73/0x90 [ 1500.970665][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1500.977011][T23221] [ 1500.979450][T23221] Uninit was stored to memory at: [ 1500.984502][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1500.990321][T23221] __msan_chain_origin+0x57/0xa0 [ 1500.995273][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1501.000399][T23221] get_compat_msghdr+0x108/0x2b0 [ 1501.005356][T23221] do_recvmmsg+0xdaf/0x2300 [ 1501.009891][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1501.014634][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.021336][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.027528][T23221] __do_fast_syscall_32+0x102/0x160 [ 1501.032922][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1501.037783][T23221] do_SYSENTER_32+0x73/0x90 [ 1501.042323][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.048655][T23221] [ 1501.050986][T23221] Uninit was stored to memory at: [ 1501.056031][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1501.061763][T23221] __msan_chain_origin+0x57/0xa0 [ 1501.066711][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1501.071830][T23221] get_compat_msghdr+0x108/0x2b0 [ 1501.076847][T23221] do_recvmmsg+0xdaf/0x2300 [ 1501.081364][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1501.086168][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.092247][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.098412][T23221] __do_fast_syscall_32+0x102/0x160 [ 1501.103624][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1501.108486][T23221] do_SYSENTER_32+0x73/0x90 [ 1501.113005][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.119328][T23221] [ 1501.121654][T23221] Uninit was stored to memory at: [ 1501.126697][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1501.132448][T23221] __msan_chain_origin+0x57/0xa0 [ 1501.137402][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1501.142619][T23221] get_compat_msghdr+0x108/0x2b0 [ 1501.147570][T23221] do_recvmmsg+0xdaf/0x2300 [ 1501.152093][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1501.156794][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.162880][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.169054][T23221] __do_fast_syscall_32+0x102/0x160 [ 1501.174571][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1501.179535][T23221] do_SYSENTER_32+0x73/0x90 [ 1501.184090][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.190423][T23221] [ 1501.192932][T23221] Uninit was stored to memory at: [ 1501.197986][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1501.203757][T23221] __msan_chain_origin+0x57/0xa0 [ 1501.208740][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1501.213955][T23221] get_compat_msghdr+0x108/0x2b0 [ 1501.218912][T23221] do_recvmmsg+0xdaf/0x2300 [ 1501.224047][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1501.228773][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.234892][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.241332][T23221] __do_fast_syscall_32+0x102/0x160 [ 1501.246552][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1501.251458][T23221] do_SYSENTER_32+0x73/0x90 [ 1501.256169][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.262585][T23221] [ 1501.264912][T23221] Uninit was stored to memory at: [ 1501.269968][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1501.275715][T23221] __msan_chain_origin+0x57/0xa0 [ 1501.280670][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1501.285794][T23221] get_compat_msghdr+0x108/0x2b0 [ 1501.290749][T23221] do_recvmmsg+0xdaf/0x2300 [ 1501.295262][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1501.300659][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.306766][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.312942][T23221] __do_fast_syscall_32+0x102/0x160 [ 1501.318180][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1501.323043][T23221] do_SYSENTER_32+0x73/0x90 [ 1501.327676][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.334102][T23221] [ 1501.336562][T23221] Uninit was stored to memory at: [ 1501.341637][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1501.347374][T23221] __msan_chain_origin+0x57/0xa0 [ 1501.352473][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1501.357607][T23221] get_compat_msghdr+0x108/0x2b0 [ 1501.362559][T23221] do_recvmmsg+0xdaf/0x2300 [ 1501.367075][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1501.371771][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.377985][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.384335][T23221] __do_fast_syscall_32+0x102/0x160 [ 1501.389550][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1501.394413][T23221] do_SYSENTER_32+0x73/0x90 [ 1501.398956][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.405275][T23221] [ 1501.407604][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1501.414294][T23221] do_recvmmsg+0xbc/0x2300 [ 1501.418900][T23221] do_recvmmsg+0xbc/0x2300 [ 1501.709787][T23221] not chained 5380000 origins [ 1501.714511][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1501.723452][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1501.733532][T23221] Call Trace: [ 1501.736858][T23221] dump_stack+0x21c/0x280 [ 1501.741223][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1501.746971][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1501.753096][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1501.758315][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1501.764139][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1501.770916][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1501.776308][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1501.781573][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1501.787410][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1501.793522][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1501.798480][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1501.803728][T23221] __msan_chain_origin+0x57/0xa0 [ 1501.808696][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1501.813833][T23221] get_compat_msghdr+0x108/0x2b0 [ 1501.818837][T23221] do_recvmmsg+0xdaf/0x2300 [ 1501.823362][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1501.829454][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1501.834692][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1501.840612][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1501.845842][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1501.851573][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1501.856888][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1501.861678][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1501.866375][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1501.872201][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1501.877426][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.883561][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.889760][T23221] __do_fast_syscall_32+0x102/0x160 [ 1501.894986][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1501.899864][T23221] do_SYSENTER_32+0x73/0x90 [ 1501.904386][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.910747][T23221] RIP: 0023:0xf7fd0549 [ 1501.914857][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1501.934496][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1501.942934][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1501.950950][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1501.958937][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1501.966921][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1501.974915][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1501.982902][T23221] Uninit was stored to memory at: [ 1501.987962][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1501.993754][T23221] __msan_chain_origin+0x57/0xa0 [ 1501.998711][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1502.003836][T23221] get_compat_msghdr+0x108/0x2b0 [ 1502.008836][T23221] do_recvmmsg+0xdaf/0x2300 [ 1502.013354][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1502.018044][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.024126][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.030299][T23221] __do_fast_syscall_32+0x102/0x160 [ 1502.035514][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1502.040413][T23221] do_SYSENTER_32+0x73/0x90 [ 1502.044935][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.051266][T23221] [ 1502.053612][T23221] Uninit was stored to memory at: [ 1502.058659][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1502.064430][T23221] __msan_chain_origin+0x57/0xa0 [ 1502.069404][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1502.074529][T23221] get_compat_msghdr+0x108/0x2b0 [ 1502.079481][T23221] do_recvmmsg+0xdaf/0x2300 [ 1502.084018][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1502.088713][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.094803][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.100997][T23221] __do_fast_syscall_32+0x102/0x160 [ 1502.106381][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1502.111260][T23221] do_SYSENTER_32+0x73/0x90 [ 1502.115798][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.122138][T23221] [ 1502.124465][T23221] Uninit was stored to memory at: [ 1502.129527][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1502.135263][T23221] __msan_chain_origin+0x57/0xa0 [ 1502.140210][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1502.145331][T23221] get_compat_msghdr+0x108/0x2b0 [ 1502.150299][T23221] do_recvmmsg+0xdaf/0x2300 [ 1502.154823][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1502.159508][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.165591][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.171764][T23221] __do_fast_syscall_32+0x102/0x160 [ 1502.176978][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1502.181839][T23221] do_SYSENTER_32+0x73/0x90 [ 1502.186380][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.192703][T23221] [ 1502.195057][T23221] Uninit was stored to memory at: [ 1502.200121][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1502.205873][T23221] __msan_chain_origin+0x57/0xa0 [ 1502.210825][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1502.215954][T23221] get_compat_msghdr+0x108/0x2b0 [ 1502.220913][T23221] do_recvmmsg+0xdaf/0x2300 [ 1502.225530][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1502.230236][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.236312][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.242478][T23221] __do_fast_syscall_32+0x102/0x160 [ 1502.247700][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1502.252571][T23221] do_SYSENTER_32+0x73/0x90 [ 1502.257175][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.263692][T23221] [ 1502.266015][T23221] Uninit was stored to memory at: [ 1502.271057][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1502.276786][T23221] __msan_chain_origin+0x57/0xa0 [ 1502.281758][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1502.286880][T23221] get_compat_msghdr+0x108/0x2b0 [ 1502.291834][T23221] do_recvmmsg+0xdaf/0x2300 [ 1502.296356][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1502.301058][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.307137][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.313312][T23221] __do_fast_syscall_32+0x102/0x160 [ 1502.318546][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1502.323425][T23221] do_SYSENTER_32+0x73/0x90 [ 1502.327946][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.334267][T23221] [ 1502.336711][T23221] Uninit was stored to memory at: [ 1502.341758][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1502.347496][T23221] __msan_chain_origin+0x57/0xa0 [ 1502.352488][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1502.357614][T23221] get_compat_msghdr+0x108/0x2b0 [ 1502.362645][T23221] do_recvmmsg+0xdaf/0x2300 [ 1502.367176][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1502.371898][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.377996][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.384265][T23221] __do_fast_syscall_32+0x102/0x160 [ 1502.389514][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1502.394416][T23221] do_SYSENTER_32+0x73/0x90 [ 1502.398936][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.406302][T23221] [ 1502.408655][T23221] Uninit was stored to memory at: [ 1502.413714][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1502.419452][T23221] __msan_chain_origin+0x57/0xa0 [ 1502.424418][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1502.429544][T23221] get_compat_msghdr+0x108/0x2b0 [ 1502.434500][T23221] do_recvmmsg+0xdaf/0x2300 [ 1502.439020][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1502.443715][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.449793][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.455965][T23221] __do_fast_syscall_32+0x102/0x160 [ 1502.461170][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1502.466079][T23221] do_SYSENTER_32+0x73/0x90 [ 1502.470594][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.476923][T23221] [ 1502.479324][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1502.486021][T23221] do_recvmmsg+0xbc/0x2300 [ 1502.490447][T23221] do_recvmmsg+0xbc/0x2300 [ 1502.781269][T23224] not chained 5390000 origins [ 1502.786002][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1502.794779][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.804869][T23224] Call Trace: [ 1502.808188][T23224] dump_stack+0x21c/0x280 [ 1502.812542][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1502.818300][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1502.824496][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1502.829719][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1502.835546][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1502.841744][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1502.847155][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1502.852388][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1502.858073][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1502.864174][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1502.869146][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1502.874371][T23224] __msan_chain_origin+0x57/0xa0 [ 1502.879340][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1502.884527][T23224] get_compat_msghdr+0x108/0x2b0 [ 1502.889512][T23224] do_recvmmsg+0xdaf/0x2300 [ 1502.894043][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1502.899269][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1502.905456][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1502.910680][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1502.916333][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1502.921667][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1502.926453][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1502.931155][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1502.936995][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1502.942241][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.948359][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.954555][T23224] __do_fast_syscall_32+0x102/0x160 [ 1502.959801][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1502.964696][T23224] do_SYSENTER_32+0x73/0x90 [ 1502.969524][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.975879][T23224] RIP: 0023:0xf7fd0549 [ 1502.979973][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1502.999603][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1503.008048][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1503.016051][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1503.024052][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1503.032055][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1503.040064][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1503.048062][T23224] Uninit was stored to memory at: [ 1503.053155][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1503.058906][T23224] __msan_chain_origin+0x57/0xa0 [ 1503.063879][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1503.069024][T23224] get_compat_msghdr+0x108/0x2b0 [ 1503.074072][T23224] do_recvmmsg+0xdaf/0x2300 [ 1503.078599][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1503.083296][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.089395][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.095581][T23224] __do_fast_syscall_32+0x102/0x160 [ 1503.100811][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1503.105792][T23224] do_SYSENTER_32+0x73/0x90 [ 1503.110329][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.116660][T23224] [ 1503.119008][T23224] Uninit was stored to memory at: [ 1503.124086][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1503.129835][T23224] __msan_chain_origin+0x57/0xa0 [ 1503.134799][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1503.139965][T23224] get_compat_msghdr+0x108/0x2b0 [ 1503.144931][T23224] do_recvmmsg+0xdaf/0x2300 [ 1503.149470][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1503.154173][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.160272][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.166458][T23224] __do_fast_syscall_32+0x102/0x160 [ 1503.171707][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1503.176600][T23224] do_SYSENTER_32+0x73/0x90 [ 1503.181126][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.187454][T23224] [ 1503.189790][T23224] Uninit was stored to memory at: [ 1503.194848][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1503.200606][T23224] __msan_chain_origin+0x57/0xa0 [ 1503.205660][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1503.210814][T23224] get_compat_msghdr+0x108/0x2b0 [ 1503.215777][T23224] do_recvmmsg+0xdaf/0x2300 [ 1503.220323][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1503.225023][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.231115][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.237396][T23224] __do_fast_syscall_32+0x102/0x160 [ 1503.242625][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1503.247509][T23224] do_SYSENTER_32+0x73/0x90 [ 1503.252048][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.258406][T23224] [ 1503.260744][T23224] Uninit was stored to memory at: [ 1503.265814][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1503.271561][T23224] __msan_chain_origin+0x57/0xa0 [ 1503.276531][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1503.282289][T23224] get_compat_msghdr+0x108/0x2b0 [ 1503.287260][T23224] do_recvmmsg+0xdaf/0x2300 [ 1503.291792][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1503.296508][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.302608][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.308802][T23224] __do_fast_syscall_32+0x102/0x160 [ 1503.314030][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1503.318908][T23224] do_SYSENTER_32+0x73/0x90 [ 1503.323447][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.329776][T23224] [ 1503.332117][T23224] Uninit was stored to memory at: [ 1503.337194][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1503.342949][T23224] __msan_chain_origin+0x57/0xa0 [ 1503.347936][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1503.353096][T23224] get_compat_msghdr+0x108/0x2b0 [ 1503.358065][T23224] do_recvmmsg+0xdaf/0x2300 [ 1503.362604][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1503.367326][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.373462][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.379670][T23224] __do_fast_syscall_32+0x102/0x160 [ 1503.384897][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1503.389783][T23224] do_SYSENTER_32+0x73/0x90 [ 1503.394341][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.400962][T23224] [ 1503.403305][T23224] Uninit was stored to memory at: [ 1503.408490][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1503.414256][T23224] __msan_chain_origin+0x57/0xa0 [ 1503.419224][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1503.424366][T23224] get_compat_msghdr+0x108/0x2b0 [ 1503.429340][T23224] do_recvmmsg+0xdaf/0x2300 [ 1503.433876][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1503.438585][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.444683][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.450887][T23224] __do_fast_syscall_32+0x102/0x160 [ 1503.456125][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1503.461013][T23224] do_SYSENTER_32+0x73/0x90 [ 1503.465549][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.471881][T23224] [ 1503.474224][T23224] Uninit was stored to memory at: [ 1503.479285][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1503.485031][T23224] __msan_chain_origin+0x57/0xa0 [ 1503.490002][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1503.495148][T23224] get_compat_msghdr+0x108/0x2b0 [ 1503.500200][T23224] do_recvmmsg+0xdaf/0x2300 [ 1503.504834][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1503.509544][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.515662][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.521844][T23224] __do_fast_syscall_32+0x102/0x160 [ 1503.527071][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1503.531949][T23224] do_SYSENTER_32+0x73/0x90 [ 1503.536506][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.542853][T23224] [ 1503.545192][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1503.551893][T23224] do_recvmmsg+0xbc/0x2300 [ 1503.556345][T23224] do_recvmmsg+0xbc/0x2300 [ 1503.853159][T23224] not chained 5400000 origins [ 1503.857883][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1503.866644][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.876714][T23224] Call Trace: [ 1503.880056][T23224] dump_stack+0x21c/0x280 [ 1503.884430][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1503.890170][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1503.896267][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1503.901492][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1503.907311][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1503.913422][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1503.918814][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1503.924061][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1503.929735][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1503.935843][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1503.940808][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1503.946029][T23224] __msan_chain_origin+0x57/0xa0 [ 1503.950991][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1503.956138][T23224] get_compat_msghdr+0x108/0x2b0 [ 1503.961105][T23224] do_recvmmsg+0xdaf/0x2300 [ 1503.965643][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1503.970885][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1503.976829][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1503.982059][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1503.987731][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1503.994616][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1503.999410][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1504.004120][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1504.009973][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1504.015199][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.021580][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.027764][T23224] __do_fast_syscall_32+0x102/0x160 [ 1504.033070][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1504.037958][T23224] do_SYSENTER_32+0x73/0x90 [ 1504.042512][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.049663][T23224] RIP: 0023:0xf7fd0549 [ 1504.053755][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1504.073390][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1504.081843][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1504.089846][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1504.097843][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1504.105842][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1504.113835][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1504.122609][T23224] Uninit was stored to memory at: [ 1504.127703][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1504.133439][T23224] __msan_chain_origin+0x57/0xa0 [ 1504.138394][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1504.143524][T23224] get_compat_msghdr+0x108/0x2b0 [ 1504.148476][T23224] do_recvmmsg+0xdaf/0x2300 [ 1504.152994][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1504.157691][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.163785][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.169975][T23224] __do_fast_syscall_32+0x102/0x160 [ 1504.175204][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1504.180090][T23224] do_SYSENTER_32+0x73/0x90 [ 1504.184719][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.191047][T23224] [ 1504.193404][T23224] Uninit was stored to memory at: [ 1504.198463][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1504.204220][T23224] __msan_chain_origin+0x57/0xa0 [ 1504.209285][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1504.214424][T23224] get_compat_msghdr+0x108/0x2b0 [ 1504.219378][T23224] do_recvmmsg+0xdaf/0x2300 [ 1504.223986][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1504.228686][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.234777][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.240961][T23224] __do_fast_syscall_32+0x102/0x160 [ 1504.246175][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1504.251037][T23224] do_SYSENTER_32+0x73/0x90 [ 1504.255581][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.261929][T23224] [ 1504.264283][T23224] Uninit was stored to memory at: [ 1504.269417][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1504.275144][T23224] __msan_chain_origin+0x57/0xa0 [ 1504.280095][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1504.285327][T23224] get_compat_msghdr+0x108/0x2b0 [ 1504.290292][T23224] do_recvmmsg+0xdaf/0x2300 [ 1504.294819][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1504.299510][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.305607][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.311782][T23224] __do_fast_syscall_32+0x102/0x160 [ 1504.317008][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1504.321874][T23224] do_SYSENTER_32+0x73/0x90 [ 1504.326398][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.332742][T23224] [ 1504.335069][T23224] Uninit was stored to memory at: [ 1504.340111][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1504.345857][T23224] __msan_chain_origin+0x57/0xa0 [ 1504.350831][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1504.355952][T23224] get_compat_msghdr+0x108/0x2b0 [ 1504.360899][T23224] do_recvmmsg+0xdaf/0x2300 [ 1504.365424][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1504.370111][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.376201][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.382377][T23224] __do_fast_syscall_32+0x102/0x160 [ 1504.387585][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1504.392440][T23224] do_SYSENTER_32+0x73/0x90 [ 1504.396964][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.403286][T23224] [ 1504.405619][T23224] Uninit was stored to memory at: [ 1504.410663][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1504.416387][T23224] __msan_chain_origin+0x57/0xa0 [ 1504.421332][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1504.426447][T23224] get_compat_msghdr+0x108/0x2b0 [ 1504.431393][T23224] do_recvmmsg+0xdaf/0x2300 [ 1504.435926][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1504.440615][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.446703][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.452892][T23224] __do_fast_syscall_32+0x102/0x160 [ 1504.458122][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1504.463003][T23224] do_SYSENTER_32+0x73/0x90 [ 1504.467519][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.473861][T23224] [ 1504.476185][T23224] Uninit was stored to memory at: [ 1504.481235][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1504.486967][T23224] __msan_chain_origin+0x57/0xa0 [ 1504.491931][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1504.497057][T23224] get_compat_msghdr+0x108/0x2b0 [ 1504.502018][T23224] do_recvmmsg+0xdaf/0x2300 [ 1504.506534][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1504.511319][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.517405][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.523589][T23224] __do_fast_syscall_32+0x102/0x160 [ 1504.528822][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1504.533696][T23224] do_SYSENTER_32+0x73/0x90 [ 1504.538209][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.544535][T23224] [ 1504.546887][T23224] Uninit was stored to memory at: [ 1504.551938][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1504.557760][T23224] __msan_chain_origin+0x57/0xa0 [ 1504.562711][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1504.567930][T23224] get_compat_msghdr+0x108/0x2b0 [ 1504.572886][T23224] do_recvmmsg+0xdaf/0x2300 [ 1504.577408][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1504.582113][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.588206][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.594377][T23224] __do_fast_syscall_32+0x102/0x160 [ 1504.599585][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1504.604447][T23224] do_SYSENTER_32+0x73/0x90 [ 1504.608996][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.615323][T23224] [ 1504.617685][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1504.624389][T23224] do_recvmmsg+0xbc/0x2300 [ 1504.628843][T23224] do_recvmmsg+0xbc/0x2300 [ 1504.900139][T23221] not chained 5410000 origins [ 1504.904885][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1504.913656][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.923931][T23221] Call Trace: [ 1504.927255][T23221] dump_stack+0x21c/0x280 [ 1504.931661][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1504.937557][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1504.943657][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1504.948886][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1504.954723][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1504.960851][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1504.966278][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1504.971502][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1504.977169][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1504.983272][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1504.988235][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1504.993483][T23221] __msan_chain_origin+0x57/0xa0 [ 1504.998454][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1505.003633][T23221] get_compat_msghdr+0x108/0x2b0 [ 1505.008609][T23221] do_recvmmsg+0xdaf/0x2300 [ 1505.013163][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1505.019276][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1505.024509][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1505.030535][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1505.035885][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1505.041547][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1505.046867][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1505.051664][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1505.056461][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1505.062378][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1505.067620][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.073724][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.079927][T23221] __do_fast_syscall_32+0x102/0x160 [ 1505.085176][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1505.090054][T23221] do_SYSENTER_32+0x73/0x90 [ 1505.094606][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.100954][T23221] RIP: 0023:0xf7fd0549 [ 1505.105053][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1505.124681][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1505.133154][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1505.141153][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1505.149151][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1505.157159][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1505.165154][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1505.173168][T23221] Uninit was stored to memory at: [ 1505.178229][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1505.183971][T23221] __msan_chain_origin+0x57/0xa0 [ 1505.188923][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1505.194055][T23221] get_compat_msghdr+0x108/0x2b0 [ 1505.199026][T23221] do_recvmmsg+0xdaf/0x2300 [ 1505.203555][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1505.208285][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.214462][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.220643][T23221] __do_fast_syscall_32+0x102/0x160 [ 1505.225866][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1505.230732][T23221] do_SYSENTER_32+0x73/0x90 [ 1505.235252][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.241580][T23221] [ 1505.243918][T23221] Uninit was stored to memory at: [ 1505.248971][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1505.254735][T23221] __msan_chain_origin+0x57/0xa0 [ 1505.259835][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1505.265079][T23221] get_compat_msghdr+0x108/0x2b0 [ 1505.270051][T23221] do_recvmmsg+0xdaf/0x2300 [ 1505.274572][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1505.279271][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.285366][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.291569][T23221] __do_fast_syscall_32+0x102/0x160 [ 1505.296801][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1505.301675][T23221] do_SYSENTER_32+0x73/0x90 [ 1505.306201][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.312802][T23221] [ 1505.315141][T23221] Uninit was stored to memory at: [ 1505.320192][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1505.325939][T23221] __msan_chain_origin+0x57/0xa0 [ 1505.331035][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1505.336169][T23221] get_compat_msghdr+0x108/0x2b0 [ 1505.341143][T23221] do_recvmmsg+0xdaf/0x2300 [ 1505.342554][T23224] not chained 5420000 origins [ 1505.345692][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1505.350374][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1505.355057][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.363806][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.369887][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.379930][T23224] Call Trace: [ 1505.388106][T23221] __do_fast_syscall_32+0x102/0x160 [ 1505.391382][T23224] dump_stack+0x21c/0x280 [ 1505.396604][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1505.400937][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1505.405807][T23221] do_SYSENTER_32+0x73/0x90 [ 1505.411543][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1505.416314][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.422386][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1505.428692][T23221] [ 1505.433951][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1505.436254][T23221] Uninit was stored to memory at: [ 1505.442075][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1505.447104][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1505.453169][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1505.458907][T23221] __msan_chain_origin+0x57/0xa0 [ 1505.464292][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1505.469312][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1505.474513][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1505.479621][T23221] get_compat_msghdr+0x108/0x2b0 [ 1505.485271][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1505.490195][T23221] do_recvmmsg+0xdaf/0x2300 [ 1505.496252][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1505.500760][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1505.505694][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1505.510364][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.515550][T23224] __msan_chain_origin+0x57/0xa0 [ 1505.521629][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.526562][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1505.532713][T23221] __do_fast_syscall_32+0x102/0x160 [ 1505.537990][T23224] get_compat_msghdr+0x108/0x2b0 [ 1505.543179][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1505.548126][T23224] do_recvmmsg+0xdaf/0x2300 [ 1505.552985][T23221] do_SYSENTER_32+0x73/0x90 [ 1505.557479][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1505.561975][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.567177][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1505.573479][T23221] [ 1505.579391][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1505.581711][T23221] Uninit was stored to memory at: [ 1505.586926][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1505.591950][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1505.597581][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1505.603989][T23221] __msan_chain_origin+0x57/0xa0 [ 1505.609291][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1505.614391][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1505.619159][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1505.624259][T23221] get_compat_msghdr+0x108/0x2b0 [ 1505.628932][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1505.633883][T23221] do_recvmmsg+0xdaf/0x2300 [ 1505.639688][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1505.644189][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1505.649577][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.654244][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.660321][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.666386][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.672544][T23224] __do_fast_syscall_32+0x102/0x160 [ 1505.678703][T23221] __do_fast_syscall_32+0x102/0x160 [ 1505.683897][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1505.689093][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1505.694067][T23224] do_SYSENTER_32+0x73/0x90 [ 1505.698941][T23221] do_SYSENTER_32+0x73/0x90 [ 1505.703444][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.707948][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.714276][T23224] RIP: 0023:0xf7fd0549 [ 1505.720584][T23221] [ 1505.724660][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1505.726962][T23221] Uninit was stored to memory at: [ 1505.746578][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1505.751625][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1505.751655][T23221] __msan_chain_origin+0x57/0xa0 [ 1505.760573][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1505.766316][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1505.771246][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1505.779235][T23221] get_compat_msghdr+0x108/0x2b0 [ 1505.784344][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1505.792337][T23221] do_recvmmsg+0xdaf/0x2300 [ 1505.797257][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1505.805253][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1505.809745][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1505.817764][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.822418][T23224] Uninit was stored to memory at: [ 1505.830412][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.836592][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1505.841657][T23221] __do_fast_syscall_32+0x102/0x160 [ 1505.847800][T23224] __msan_chain_origin+0x57/0xa0 [ 1505.853538][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1505.858726][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1505.863700][T23221] do_SYSENTER_32+0x73/0x90 [ 1505.868544][T23224] get_compat_msghdr+0x108/0x2b0 [ 1505.873654][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.878237][T23224] do_recvmmsg+0xdaf/0x2300 [ 1505.883142][T23221] [ 1505.889482][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1505.894852][T23221] Uninit was stored to memory at: [ 1505.897192][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.901966][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1505.906970][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.907010][T23224] __do_fast_syscall_32+0x102/0x160 [ 1505.913083][T23221] __msan_chain_origin+0x57/0xa0 [ 1505.918813][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1505.924975][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1505.930162][T23224] do_SYSENTER_32+0x73/0x90 [ 1505.935177][T23221] get_compat_msghdr+0x108/0x2b0 [ 1505.940019][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.945127][T23221] do_recvmmsg+0xdaf/0x2300 [ 1505.949597][T23224] [ 1505.954573][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1505.960875][T23224] Uninit was stored to memory at: [ 1505.965421][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.967736][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1505.972423][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.977448][T23224] __msan_chain_origin+0x57/0xa0 [ 1505.983514][T23221] __do_fast_syscall_32+0x102/0x160 [ 1505.989243][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1505.995399][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1506.000339][T23224] get_compat_msghdr+0x108/0x2b0 [ 1506.005533][T23221] do_SYSENTER_32+0x73/0x90 [ 1506.010644][T23224] do_recvmmsg+0xdaf/0x2300 [ 1506.015494][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.020448][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1506.024956][T23221] [ 1506.029471][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.035778][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1506.040461][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.042794][T23221] do_recvmmsg+0xbc/0x2300 [ 1506.048858][T23224] __do_fast_syscall_32+0x102/0x160 [ 1506.055526][T23221] do_recvmmsg+0xbc/0x2300 [ 1506.061678][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1506.080691][T23224] do_SYSENTER_32+0x73/0x90 [ 1506.085225][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.091792][T23224] [ 1506.094133][T23224] Uninit was stored to memory at: [ 1506.099190][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1506.105044][T23224] __msan_chain_origin+0x57/0xa0 [ 1506.110140][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1506.115278][T23224] get_compat_msghdr+0x108/0x2b0 [ 1506.120332][T23224] do_recvmmsg+0xdaf/0x2300 [ 1506.124867][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1506.129572][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.136621][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.142821][T23224] __do_fast_syscall_32+0x102/0x160 [ 1506.148084][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1506.152960][T23224] do_SYSENTER_32+0x73/0x90 [ 1506.157643][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.164196][T23224] [ 1506.166559][T23224] Uninit was stored to memory at: [ 1506.171643][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1506.177567][T23224] __msan_chain_origin+0x57/0xa0 [ 1506.182568][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1506.187808][T23224] get_compat_msghdr+0x108/0x2b0 [ 1506.192883][T23224] do_recvmmsg+0xdaf/0x2300 [ 1506.197636][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1506.203919][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.210018][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.216206][T23224] __do_fast_syscall_32+0x102/0x160 [ 1506.221435][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1506.226326][T23224] do_SYSENTER_32+0x73/0x90 [ 1506.230889][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.237219][T23224] [ 1506.239561][T23224] Uninit was stored to memory at: [ 1506.244874][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1506.250633][T23224] __msan_chain_origin+0x57/0xa0 [ 1506.255593][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1506.260731][T23224] get_compat_msghdr+0x108/0x2b0 [ 1506.265708][T23224] do_recvmmsg+0xdaf/0x2300 [ 1506.270231][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1506.274916][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.280997][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.287176][T23224] __do_fast_syscall_32+0x102/0x160 [ 1506.292394][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1506.297264][T23224] do_SYSENTER_32+0x73/0x90 [ 1506.301786][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.308112][T23224] [ 1506.310442][T23224] Uninit was stored to memory at: [ 1506.315493][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1506.321246][T23224] __msan_chain_origin+0x57/0xa0 [ 1506.326215][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1506.331338][T23224] get_compat_msghdr+0x108/0x2b0 [ 1506.336301][T23224] do_recvmmsg+0xdaf/0x2300 [ 1506.340822][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1506.345518][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.351612][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.357793][T23224] __do_fast_syscall_32+0x102/0x160 [ 1506.363005][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1506.367871][T23224] do_SYSENTER_32+0x73/0x90 [ 1506.372580][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.378903][T23224] [ 1506.381234][T23224] Uninit was stored to memory at: [ 1506.386309][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1506.392051][T23224] __msan_chain_origin+0x57/0xa0 [ 1506.397020][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1506.402256][T23224] get_compat_msghdr+0x108/0x2b0 [ 1506.407305][T23224] do_recvmmsg+0xdaf/0x2300 [ 1506.411826][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1506.416518][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.422626][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.428817][T23224] __do_fast_syscall_32+0x102/0x160 [ 1506.434053][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1506.438945][T23224] do_SYSENTER_32+0x73/0x90 [ 1506.443474][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.449799][T23224] [ 1506.452144][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1506.458840][T23224] do_recvmmsg+0xbc/0x2300 [ 1506.463358][T23224] do_recvmmsg+0xbc/0x2300 [ 1506.788224][T23221] not chained 5430000 origins [ 1506.792975][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1506.801762][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.812022][T23221] Call Trace: [ 1506.815335][T23221] dump_stack+0x21c/0x280 [ 1506.819696][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1506.825443][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1506.831531][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1506.836893][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1506.842725][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1506.848844][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1506.854415][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1506.859636][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1506.865445][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1506.871537][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1506.876499][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1506.881716][T23221] __msan_chain_origin+0x57/0xa0 [ 1506.886673][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1506.891868][T23221] get_compat_msghdr+0x108/0x2b0 [ 1506.896914][T23221] do_recvmmsg+0xdaf/0x2300 [ 1506.901457][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1506.907547][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1506.912768][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1506.918685][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1506.923935][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1506.929612][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1506.934917][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1506.939813][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1506.944510][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1506.950335][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1506.955553][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.961645][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.967823][T23221] __do_fast_syscall_32+0x102/0x160 [ 1506.973056][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1506.977931][T23221] do_SYSENTER_32+0x73/0x90 [ 1506.982460][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.988809][T23221] RIP: 0023:0xf7fd0549 [ 1506.992904][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1507.012558][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1507.020996][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1507.028993][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1507.037082][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1507.045086][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1507.053147][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1507.061136][T23221] Uninit was stored to memory at: [ 1507.066200][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1507.071959][T23221] __msan_chain_origin+0x57/0xa0 [ 1507.076916][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1507.082051][T23221] get_compat_msghdr+0x108/0x2b0 [ 1507.087011][T23221] do_recvmmsg+0xdaf/0x2300 [ 1507.091567][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1507.096301][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1507.102394][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1507.108580][T23221] __do_fast_syscall_32+0x102/0x160 [ 1507.113803][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1507.118677][T23221] do_SYSENTER_32+0x73/0x90 [ 1507.123204][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1507.129529][T23221] [ 1507.131863][T23221] Uninit was stored to memory at: [ 1507.136918][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1507.142657][T23221] __msan_chain_origin+0x57/0xa0 [ 1507.147615][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1507.152774][T23221] get_compat_msghdr+0x108/0x2b0 [ 1507.157763][T23221] do_recvmmsg+0xdaf/0x2300 [ 1507.162295][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1507.166998][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1507.173093][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1507.179280][T23221] __do_fast_syscall_32+0x102/0x160 [ 1507.184503][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1507.189373][T23221] do_SYSENTER_32+0x73/0x90 [ 1507.193900][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1507.200267][T23221] [ 1507.202603][T23221] Uninit was stored to memory at: [ 1507.207661][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1507.213404][T23221] __msan_chain_origin+0x57/0xa0 [ 1507.218359][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1507.223485][T23221] get_compat_msghdr+0x108/0x2b0 [ 1507.228527][T23221] do_recvmmsg+0xdaf/0x2300 [ 1507.233042][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1507.237730][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1507.243839][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1507.250021][T23221] __do_fast_syscall_32+0x102/0x160 [ 1507.255247][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1507.260127][T23221] do_SYSENTER_32+0x73/0x90 [ 1507.264657][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1507.270983][T23221] [ 1507.273316][T23221] Uninit was stored to memory at: [ 1507.278476][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1507.284213][T23221] __msan_chain_origin+0x57/0xa0 [ 1507.289188][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1507.294343][T23221] get_compat_msghdr+0x108/0x2b0 [ 1507.299304][T23221] do_recvmmsg+0xdaf/0x2300 [ 1507.303846][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1507.308657][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1507.314771][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1507.321035][T23221] __do_fast_syscall_32+0x102/0x160 [ 1507.326330][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1507.331201][T23221] do_SYSENTER_32+0x73/0x90 [ 1507.335724][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1507.342046][T23221] [ 1507.344380][T23221] Uninit was stored to memory at: [ 1507.349489][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1507.355224][T23221] __msan_chain_origin+0x57/0xa0 [ 1507.360183][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1507.365380][T23221] get_compat_msghdr+0x108/0x2b0 [ 1507.370337][T23221] do_recvmmsg+0xdaf/0x2300 [ 1507.374867][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1507.379561][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1507.385650][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1507.391830][T23221] __do_fast_syscall_32+0x102/0x160 [ 1507.397063][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1507.401945][T23221] do_SYSENTER_32+0x73/0x90 [ 1507.406478][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1507.412815][T23221] [ 1507.415151][T23221] Uninit was stored to memory at: [ 1507.420202][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1507.425945][T23221] __msan_chain_origin+0x57/0xa0 [ 1507.430989][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1507.436127][T23221] get_compat_msghdr+0x108/0x2b0 [ 1507.441099][T23221] do_recvmmsg+0xdaf/0x2300 [ 1507.445627][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1507.450322][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1507.456408][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1507.462590][T23221] __do_fast_syscall_32+0x102/0x160 [ 1507.467810][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1507.472679][T23221] do_SYSENTER_32+0x73/0x90 [ 1507.477223][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1507.483558][T23221] [ 1507.485894][T23221] Uninit was stored to memory at: [ 1507.490945][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1507.496685][T23221] __msan_chain_origin+0x57/0xa0 [ 1507.501646][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1507.506786][T23221] get_compat_msghdr+0x108/0x2b0 [ 1507.511906][T23221] do_recvmmsg+0xdaf/0x2300 [ 1507.516436][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1507.521139][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1507.527231][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1507.533636][T23221] __do_fast_syscall_32+0x102/0x160 [ 1507.538856][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1507.543728][T23221] do_SYSENTER_32+0x73/0x90 [ 1507.548256][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1507.554587][T23221] [ 1507.556936][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1507.563729][T23221] do_recvmmsg+0xbc/0x2300 [ 1507.568163][T23221] do_recvmmsg+0xbc/0x2300 [ 1507.757354][T23221] not chained 5440000 origins [ 1507.762217][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1507.771176][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.781746][T23221] Call Trace: [ 1507.785169][T23221] dump_stack+0x21c/0x280 [ 1507.789645][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1507.795587][T23221] ? do_user_addr_fault+0x1045/0x16d0 [ 1507.801000][T23221] ? __msan_get_context_state+0x9/0x20 [ 1507.806743][T23221] ? irqentry_exit+0x12/0x50 [ 1507.811478][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1507.816739][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1507.823047][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1507.829605][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1507.836041][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1507.841276][T23221] __msan_chain_origin+0x57/0xa0 [ 1507.846278][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1507.851462][T23221] get_compat_msghdr+0x108/0x2b0 [ 1507.856546][T23221] do_recvmmsg+0xdaf/0x2300 [ 1507.861794][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1507.868533][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1507.873886][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1507.879861][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1507.885111][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1507.890789][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1507.896108][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1507.901251][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1507.905964][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1507.911802][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1507.917991][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1507.924198][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1507.930388][T23221] __do_fast_syscall_32+0x102/0x160 [ 1507.935626][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1507.940514][T23221] do_SYSENTER_32+0x73/0x90 [ 1507.945067][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1507.951423][T23221] RIP: 0023:0xf7fd0549 [ 1507.955517][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1507.970543][T23224] not chained 5450000 origins [ 1507.975176][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1507.988303][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1507.996308][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1508.004313][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1508.012328][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1508.020333][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1508.028426][T23221] Uninit was stored to memory at: [ 1508.028453][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1508.028481][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1508.033525][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1508.042269][T23224] Call Trace: [ 1508.052355][T23221] __msan_chain_origin+0x57/0xa0 [ 1508.058079][T23224] dump_stack+0x21c/0x280 [ 1508.061354][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1508.066380][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1508.070703][T23221] get_compat_msghdr+0x108/0x2b0 [ 1508.075821][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1508.081535][T23221] do_recvmmsg+0xdaf/0x2300 [ 1508.086459][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1508.092522][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1508.097021][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1508.102207][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.106868][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1508.112671][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.120401][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1508.126578][T23221] __do_fast_syscall_32+0x102/0x160 [ 1508.132724][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1508.138090][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1508.143309][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1508.148528][T23221] do_SYSENTER_32+0x73/0x90 [ 1508.153381][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1508.159254][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.163742][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1508.169898][T23221] [ 1508.176240][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1508.181139][T23221] Uninit was stored to memory at: [ 1508.183474][T23224] __msan_chain_origin+0x57/0xa0 [ 1508.188674][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1508.193697][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1508.198628][T23221] __msan_chain_origin+0x57/0xa0 [ 1508.204875][T23224] get_compat_msghdr+0x108/0x2b0 [ 1508.209969][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1508.214901][T23224] do_recvmmsg+0xdaf/0x2300 [ 1508.219837][T23221] get_compat_msghdr+0x108/0x2b0 [ 1508.224936][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1508.229450][T23221] do_recvmmsg+0xdaf/0x2300 [ 1508.234389][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1508.239577][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1508.244073][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1508.249962][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.254628][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1508.259816][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.265873][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1508.271511][T23221] __do_fast_syscall_32+0x102/0x160 [ 1508.277668][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1508.282949][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1508.288142][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1508.292894][T23221] do_SYSENTER_32+0x73/0x90 [ 1508.297750][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1508.302424][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.306911][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1508.312690][T23221] [ 1508.319047][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.324244][T23221] Uninit was stored to memory at: [ 1508.326595][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.332790][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1508.337798][T23224] __do_fast_syscall_32+0x102/0x160 [ 1508.344127][T23221] __msan_chain_origin+0x57/0xa0 [ 1508.349860][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1508.355041][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1508.359978][T23224] do_SYSENTER_32+0x73/0x90 [ 1508.364822][T23221] get_compat_msghdr+0x108/0x2b0 [ 1508.369934][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.374424][T23221] do_recvmmsg+0xdaf/0x2300 [ 1508.379340][T23224] RIP: 0023:0xf7fd0549 [ 1508.385663][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1508.390176][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1508.394671][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.399324][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 [ 1508.419134][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.425169][T23224] ORIG_RAX: 0000000000000151 [ 1508.431262][T23221] __do_fast_syscall_32+0x102/0x160 [ 1508.437494][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1508.442177][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1508.447349][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1508.455330][T23221] do_SYSENTER_32+0x73/0x90 [ 1508.460158][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1508.468147][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.472627][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1508.480766][T23221] [ 1508.487189][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1508.495154][T23221] Uninit was stored to memory at: [ 1508.497469][T23224] Uninit was stored to memory at: [ 1508.505467][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1508.510508][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1508.515542][T23221] __msan_chain_origin+0x57/0xa0 [ 1508.521266][T23224] __msan_chain_origin+0x57/0xa0 [ 1508.526997][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1508.531970][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1508.536930][T23221] get_compat_msghdr+0x108/0x2b0 [ 1508.542039][T23224] get_compat_msghdr+0x108/0x2b0 [ 1508.547149][T23221] do_recvmmsg+0xdaf/0x2300 [ 1508.552212][T23224] do_recvmmsg+0xdaf/0x2300 [ 1508.557174][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1508.561675][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1508.566173][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.570850][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.575526][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.581601][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.587664][T23221] __do_fast_syscall_32+0x102/0x160 [ 1508.593834][T23224] __do_fast_syscall_32+0x102/0x160 [ 1508.599990][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1508.605173][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1508.610352][T23221] do_SYSENTER_32+0x73/0x90 [ 1508.615186][T23224] do_SYSENTER_32+0x73/0x90 [ 1508.620056][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.624547][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.629120][T23221] [ 1508.635567][T23224] [ 1508.641892][T23221] Uninit was stored to memory at: [ 1508.644234][T23224] Uninit was stored to memory at: [ 1508.646587][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1508.651595][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1508.656619][T23221] __msan_chain_origin+0x57/0xa0 [ 1508.662343][T23224] __msan_chain_origin+0x57/0xa0 [ 1508.669280][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1508.674215][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1508.679246][T23221] get_compat_msghdr+0x108/0x2b0 [ 1508.684335][T23224] get_compat_msghdr+0x108/0x2b0 [ 1508.689440][T23221] do_recvmmsg+0xdaf/0x2300 [ 1508.694369][T23224] do_recvmmsg+0xdaf/0x2300 [ 1508.699351][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1508.703840][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1508.708341][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.713027][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.717729][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.723789][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.729844][T23221] __do_fast_syscall_32+0x102/0x160 [ 1508.735981][T23224] __do_fast_syscall_32+0x102/0x160 [ 1508.742144][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1508.747348][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1508.752556][T23221] do_SYSENTER_32+0x73/0x90 [ 1508.757405][T23224] do_SYSENTER_32+0x73/0x90 [ 1508.762259][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.766751][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.771238][T23221] [ 1508.777585][T23224] [ 1508.783941][T23221] Uninit was stored to memory at: [ 1508.786265][T23224] Uninit was stored to memory at: [ 1508.786337][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1508.788883][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1508.793908][T23224] __msan_chain_origin+0x57/0xa0 [ 1508.798920][T23221] __msan_chain_origin+0x57/0xa0 [ 1508.804640][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1508.810364][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1508.815302][T23224] get_compat_msghdr+0x108/0x2b0 [ 1508.820263][T23221] get_compat_msghdr+0x108/0x2b0 [ 1508.825384][T23224] do_recvmmsg+0xdaf/0x2300 [ 1508.830481][T23221] do_recvmmsg+0xdaf/0x2300 [ 1508.835411][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1508.840345][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1508.844849][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.849352][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.854045][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.858742][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.864815][T23224] __do_fast_syscall_32+0x102/0x160 [ 1508.870881][T23221] __do_fast_syscall_32+0x102/0x160 [ 1508.877026][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1508.883191][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1508.888384][T23224] do_SYSENTER_32+0x73/0x90 [ 1508.893576][T23221] do_SYSENTER_32+0x73/0x90 [ 1508.898441][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.903291][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.907767][T23224] [ 1508.912270][T23221] [ 1508.918613][T23224] Uninit was stored to memory at: [ 1508.924931][T23221] Uninit was stored to memory at: [ 1508.927311][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1508.929627][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1508.934748][T23224] __msan_chain_origin+0x57/0xa0 [ 1508.939764][T23221] __msan_chain_origin+0x57/0xa0 [ 1508.945472][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1508.951175][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1508.956091][T23224] get_compat_msghdr+0x108/0x2b0 [ 1508.963734][T23221] get_compat_msghdr+0x108/0x2b0 [ 1508.968857][T23224] do_recvmmsg+0xdaf/0x2300 [ 1508.974006][T23221] do_recvmmsg+0xdaf/0x2300 [ 1508.978953][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1508.983906][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1508.988398][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.992897][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.997558][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.002227][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.008387][T23224] __do_fast_syscall_32+0x102/0x160 [ 1509.014451][T23221] __do_fast_syscall_32+0x102/0x160 [ 1509.020633][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1509.026772][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1509.031962][T23224] do_SYSENTER_32+0x73/0x90 [ 1509.037156][T23221] do_SYSENTER_32+0x73/0x90 [ 1509.042081][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.046920][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.051400][T23224] [ 1509.055891][T23221] [ 1509.062224][T23224] Uninit was stored to memory at: [ 1509.068550][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1509.070885][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1509.073188][T23221] do_recvmmsg+0xbc/0x2300 [ 1509.078194][T23224] __msan_chain_origin+0x57/0xa0 [ 1509.084872][T23221] do_recvmmsg+0xbc/0x2300 [ 1509.090578][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1509.109422][T23224] get_compat_msghdr+0x108/0x2b0 [ 1509.114652][T23224] do_recvmmsg+0xdaf/0x2300 [ 1509.119270][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1509.123977][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.130104][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.136428][T23224] __do_fast_syscall_32+0x102/0x160 [ 1509.142592][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1509.147672][T23224] do_SYSENTER_32+0x73/0x90 [ 1509.152204][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.158529][T23224] [ 1509.160882][T23224] Uninit was stored to memory at: [ 1509.165954][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1509.171701][T23224] __msan_chain_origin+0x57/0xa0 [ 1509.176775][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1509.181934][T23224] get_compat_msghdr+0x108/0x2b0 [ 1509.186901][T23224] do_recvmmsg+0xdaf/0x2300 [ 1509.191430][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1509.196235][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.202360][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.208640][T23224] __do_fast_syscall_32+0x102/0x160 [ 1509.213900][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1509.218787][T23224] do_SYSENTER_32+0x73/0x90 [ 1509.223351][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.230060][T23224] [ 1509.232405][T23224] Uninit was stored to memory at: [ 1509.237471][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1509.243220][T23224] __msan_chain_origin+0x57/0xa0 [ 1509.248212][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1509.253371][T23224] get_compat_msghdr+0x108/0x2b0 [ 1509.258337][T23224] do_recvmmsg+0xdaf/0x2300 [ 1509.262874][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1509.267579][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.273955][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.280154][T23224] __do_fast_syscall_32+0x102/0x160 [ 1509.285391][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1509.290395][T23224] do_SYSENTER_32+0x73/0x90 [ 1509.294933][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.301265][T23224] [ 1509.303634][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1509.310363][T23224] do_recvmmsg+0xbc/0x2300 [ 1509.314807][T23224] do_recvmmsg+0xbc/0x2300 [ 1509.562009][T23224] not chained 5460000 origins [ 1509.566741][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1509.576052][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.586123][T23224] Call Trace: [ 1509.589447][T23224] dump_stack+0x21c/0x280 [ 1509.593822][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1509.599571][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1509.606268][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1509.611535][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1509.617479][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1509.623595][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1509.629006][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1509.634257][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1509.639928][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1509.646022][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1509.651707][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1509.656932][T23224] __msan_chain_origin+0x57/0xa0 [ 1509.662015][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1509.667770][T23224] get_compat_msghdr+0x108/0x2b0 [ 1509.672742][T23224] do_recvmmsg+0xdaf/0x2300 [ 1509.680151][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1509.685491][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1509.691749][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1509.696976][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1509.702630][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1509.707940][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1509.712824][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1509.717571][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1509.723503][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1509.731596][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.737703][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.743900][T23224] __do_fast_syscall_32+0x102/0x160 [ 1509.749124][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1509.754287][T23224] do_SYSENTER_32+0x73/0x90 [ 1509.758845][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.765189][T23224] RIP: 0023:0xf7fd0549 [ 1509.769288][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1509.788938][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1509.797473][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1509.805465][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1509.813455][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1509.823094][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1509.831102][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1509.839281][T23224] Uninit was stored to memory at: [ 1509.844371][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1509.850111][T23224] __msan_chain_origin+0x57/0xa0 [ 1509.855074][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1509.860311][T23224] get_compat_msghdr+0x108/0x2b0 [ 1509.865272][T23224] do_recvmmsg+0xdaf/0x2300 [ 1509.870755][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1509.875469][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.881638][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.887851][T23224] __do_fast_syscall_32+0x102/0x160 [ 1509.893103][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1509.897971][T23224] do_SYSENTER_32+0x73/0x90 [ 1509.902524][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.909403][T23224] [ 1509.911753][T23224] Uninit was stored to memory at: [ 1509.916893][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1509.922742][T23224] __msan_chain_origin+0x57/0xa0 [ 1509.927781][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1509.933617][T23224] get_compat_msghdr+0x108/0x2b0 [ 1509.938578][T23224] do_recvmmsg+0xdaf/0x2300 [ 1509.943293][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1509.948028][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.954200][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.960400][T23224] __do_fast_syscall_32+0x102/0x160 [ 1509.965660][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1509.970536][T23224] do_SYSENTER_32+0x73/0x90 [ 1509.975104][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.981429][T23224] [ 1509.983762][T23224] Uninit was stored to memory at: [ 1509.988808][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1509.994547][T23224] __msan_chain_origin+0x57/0xa0 [ 1509.999523][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1510.004684][T23224] get_compat_msghdr+0x108/0x2b0 [ 1510.009643][T23224] do_recvmmsg+0xdaf/0x2300 [ 1510.014217][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1510.018938][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.025023][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.031280][T23224] __do_fast_syscall_32+0x102/0x160 [ 1510.036665][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1510.041625][T23224] do_SYSENTER_32+0x73/0x90 [ 1510.046178][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.052701][T23224] [ 1510.055050][T23224] Uninit was stored to memory at: [ 1510.060101][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1510.065969][T23224] __msan_chain_origin+0x57/0xa0 [ 1510.070927][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1510.076054][T23224] get_compat_msghdr+0x108/0x2b0 [ 1510.081004][T23224] do_recvmmsg+0xdaf/0x2300 [ 1510.085521][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1510.090222][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.096412][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.102677][T23224] __do_fast_syscall_32+0x102/0x160 [ 1510.107899][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1510.112778][T23224] do_SYSENTER_32+0x73/0x90 [ 1510.117330][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.123668][T23224] [ 1510.126223][T23224] Uninit was stored to memory at: [ 1510.131458][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1510.137199][T23224] __msan_chain_origin+0x57/0xa0 [ 1510.142155][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1510.147398][T23224] get_compat_msghdr+0x108/0x2b0 [ 1510.152359][T23224] do_recvmmsg+0xdaf/0x2300 [ 1510.157588][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1510.162290][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.168386][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.174594][T23224] __do_fast_syscall_32+0x102/0x160 [ 1510.179827][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1510.184718][T23224] do_SYSENTER_32+0x73/0x90 [ 1510.189268][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.195593][T23224] [ 1510.197926][T23224] Uninit was stored to memory at: [ 1510.203088][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1510.208835][T23224] __msan_chain_origin+0x57/0xa0 [ 1510.213802][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1510.218943][T23224] get_compat_msghdr+0x108/0x2b0 [ 1510.223932][T23224] do_recvmmsg+0xdaf/0x2300 [ 1510.228539][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1510.233237][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.239351][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.245547][T23224] __do_fast_syscall_32+0x102/0x160 [ 1510.250770][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1510.255843][T23224] do_SYSENTER_32+0x73/0x90 [ 1510.260374][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.266714][T23224] [ 1510.269050][T23224] Uninit was stored to memory at: [ 1510.274103][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1510.279840][T23224] __msan_chain_origin+0x57/0xa0 [ 1510.284823][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1510.289959][T23224] get_compat_msghdr+0x108/0x2b0 [ 1510.295156][T23224] do_recvmmsg+0xdaf/0x2300 [ 1510.299695][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1510.304392][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.310673][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.316846][T23224] __do_fast_syscall_32+0x102/0x160 [ 1510.322079][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1510.326955][T23224] do_SYSENTER_32+0x73/0x90 [ 1510.331557][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.337894][T23224] [ 1510.340233][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1510.346936][T23224] do_recvmmsg+0xbc/0x2300 [ 1510.351376][T23224] do_recvmmsg+0xbc/0x2300 [ 1510.528812][T23224] not chained 5470000 origins [ 1510.533562][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1510.542427][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1510.552527][T23224] Call Trace: [ 1510.555857][T23224] dump_stack+0x21c/0x280 [ 1510.560242][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1510.566011][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1510.572107][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1510.577332][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1510.583167][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1510.589256][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1510.594653][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1510.599893][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1510.605571][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1510.611672][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1510.616738][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1510.623558][T23224] __msan_chain_origin+0x57/0xa0 [ 1510.628536][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1510.633684][T23224] get_compat_msghdr+0x108/0x2b0 [ 1510.638651][T23224] do_recvmmsg+0xdaf/0x2300 [ 1510.643179][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1510.649404][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1510.655363][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1510.660694][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1510.666350][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1510.671743][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1510.676522][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1510.681222][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1510.687280][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1510.692511][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.698827][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.705026][T23224] __do_fast_syscall_32+0x102/0x160 [ 1510.710267][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1510.715238][T23224] do_SYSENTER_32+0x73/0x90 [ 1510.719956][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.726324][T23224] RIP: 0023:0xf7fd0549 [ 1510.730417][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1510.750396][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1510.758854][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1510.766976][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1510.775078][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1510.783180][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1510.791188][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1510.799215][T23224] Uninit was stored to memory at: [ 1510.804289][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1510.810064][T23224] __msan_chain_origin+0x57/0xa0 [ 1510.815039][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1510.820180][T23224] get_compat_msghdr+0x108/0x2b0 [ 1510.825152][T23224] do_recvmmsg+0xdaf/0x2300 [ 1510.830377][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1510.835082][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.841448][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.847639][T23224] __do_fast_syscall_32+0x102/0x160 [ 1510.852872][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1510.857761][T23224] do_SYSENTER_32+0x73/0x90 [ 1510.862348][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.868861][T23224] [ 1510.871200][T23224] Uninit was stored to memory at: [ 1510.876348][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1510.882086][T23224] __msan_chain_origin+0x57/0xa0 [ 1510.887062][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1510.892309][T23224] get_compat_msghdr+0x108/0x2b0 [ 1510.897275][T23224] do_recvmmsg+0xdaf/0x2300 [ 1510.902177][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1510.907060][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.913156][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.919361][T23224] __do_fast_syscall_32+0x102/0x160 [ 1510.924806][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1510.929699][T23224] do_SYSENTER_32+0x73/0x90 [ 1510.934226][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.940553][T23224] [ 1510.942897][T23224] Uninit was stored to memory at: [ 1510.947989][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1510.953737][T23224] __msan_chain_origin+0x57/0xa0 [ 1510.958713][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1510.963857][T23224] get_compat_msghdr+0x108/0x2b0 [ 1510.968836][T23224] do_recvmmsg+0xdaf/0x2300 [ 1510.973464][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1510.978198][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.984500][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.990685][T23224] __do_fast_syscall_32+0x102/0x160 [ 1510.995930][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1511.000827][T23224] do_SYSENTER_32+0x73/0x90 [ 1511.005471][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1511.011823][T23224] [ 1511.014186][T23224] Uninit was stored to memory at: [ 1511.019252][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1511.025002][T23224] __msan_chain_origin+0x57/0xa0 [ 1511.029979][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1511.035128][T23224] get_compat_msghdr+0x108/0x2b0 [ 1511.040097][T23224] do_recvmmsg+0xdaf/0x2300 [ 1511.044629][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1511.049342][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1511.055462][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1511.061658][T23224] __do_fast_syscall_32+0x102/0x160 [ 1511.066890][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1511.071766][T23224] do_SYSENTER_32+0x73/0x90 [ 1511.076305][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1511.082658][T23224] [ 1511.084992][T23224] Uninit was stored to memory at: [ 1511.090063][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1511.095809][T23224] __msan_chain_origin+0x57/0xa0 [ 1511.100794][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1511.105945][T23224] get_compat_msghdr+0x108/0x2b0 [ 1511.110922][T23224] do_recvmmsg+0xdaf/0x2300 [ 1511.115451][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1511.120157][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1511.126252][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1511.132435][T23224] __do_fast_syscall_32+0x102/0x160 [ 1511.137671][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1511.142661][T23224] do_SYSENTER_32+0x73/0x90 [ 1511.147221][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1511.153551][T23224] [ 1511.155889][T23224] Uninit was stored to memory at: [ 1511.160964][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1511.166811][T23224] __msan_chain_origin+0x57/0xa0 [ 1511.171813][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1511.177044][T23224] get_compat_msghdr+0x108/0x2b0 [ 1511.182016][T23224] do_recvmmsg+0xdaf/0x2300 [ 1511.186563][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1511.191296][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1511.197407][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1511.203616][T23224] __do_fast_syscall_32+0x102/0x160 [ 1511.208867][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1511.213758][T23224] do_SYSENTER_32+0x73/0x90 [ 1511.218302][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1511.224654][T23224] [ 1511.226993][T23224] Uninit was stored to memory at: [ 1511.232066][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1511.237812][T23224] __msan_chain_origin+0x57/0xa0 [ 1511.242794][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1511.247947][T23224] get_compat_msghdr+0x108/0x2b0 [ 1511.252914][T23224] do_recvmmsg+0xdaf/0x2300 [ 1511.257474][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1511.262203][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1511.268305][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1511.274496][T23224] __do_fast_syscall_32+0x102/0x160 [ 1511.279722][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1511.284950][T23224] do_SYSENTER_32+0x73/0x90 [ 1511.289482][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1511.295920][T23224] [ 1511.298263][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1511.304963][T23224] do_recvmmsg+0xbc/0x2300 [ 1511.309690][T23224] do_recvmmsg+0xbc/0x2300 [ 1511.661057][T23221] not chained 5480000 origins [ 1511.665818][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1511.674587][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1511.684664][T23221] Call Trace: [ 1511.687985][T23221] dump_stack+0x21c/0x280 [ 1511.692358][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1511.698209][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1511.704721][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1511.709967][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1511.716520][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1511.723837][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1511.729256][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1511.734872][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1511.740636][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1511.747020][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1511.752885][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1511.759330][T23221] __msan_chain_origin+0x57/0xa0 [ 1511.765371][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1511.770615][T23221] get_compat_msghdr+0x108/0x2b0 [ 1511.775597][T23221] do_recvmmsg+0xdaf/0x2300 [ 1511.780149][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1511.786252][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1511.791490][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1511.797521][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1511.802755][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1511.808702][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1511.814019][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1511.818812][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1511.823524][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1511.829499][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1511.834749][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1511.840882][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1511.847086][T23221] __do_fast_syscall_32+0x102/0x160 [ 1511.852335][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1511.857224][T23221] do_SYSENTER_32+0x73/0x90 [ 1511.861891][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1511.868247][T23221] RIP: 0023:0xf7fd0549 [ 1511.872458][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1511.893380][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1511.902003][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1511.910104][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1511.918102][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1511.926104][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1511.934367][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1511.941569][T23224] not chained 5490000 origins [ 1511.942360][T23221] Uninit was stored to memory at: [ 1511.947051][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1511.952097][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1511.960843][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1511.966571][T23221] __msan_chain_origin+0x57/0xa0 [ 1511.976613][T23224] Call Trace: [ 1511.981712][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1511.984998][T23224] dump_stack+0x21c/0x280 [ 1511.990107][T23221] get_compat_msghdr+0x108/0x2b0 [ 1511.994443][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1511.999368][T23221] do_recvmmsg+0xdaf/0x2300 [ 1512.005114][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1512.009614][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1512.015674][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1512.021042][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.026226][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1512.032281][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.038079][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1512.044251][T23221] __do_fast_syscall_32+0x102/0x160 [ 1512.050313][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1512.055504][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1512.060879][T23224] ? iovec_from_user+0x24a/0x960 [ 1512.065718][T23221] do_SYSENTER_32+0x73/0x90 [ 1512.070729][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1512.075231][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.080410][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1512.086731][T23221] [ 1512.092389][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1512.094680][T23221] Uninit was stored to memory at: [ 1512.100769][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1512.107096][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1512.112035][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1512.117911][T23221] __msan_chain_origin+0x57/0xa0 [ 1512.123108][T23224] __msan_chain_origin+0x57/0xa0 [ 1512.128028][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1512.132960][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1512.138099][T23221] get_compat_msghdr+0x108/0x2b0 [ 1512.143210][T23224] get_compat_msghdr+0x108/0x2b0 [ 1512.148139][T23221] do_recvmmsg+0xdaf/0x2300 [ 1512.153101][T23224] do_recvmmsg+0xdaf/0x2300 [ 1512.157771][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1512.162268][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1512.167052][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.172266][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1512.178362][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.184339][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1512.190503][T23221] __do_fast_syscall_32+0x102/0x160 [ 1512.195788][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1512.200996][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1512.206632][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1512.211472][T23221] do_SYSENTER_32+0x73/0x90 [ 1512.216748][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1512.221260][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.226012][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1512.232347][T23221] [ 1512.237038][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1512.239332][T23221] Uninit was stored to memory at: [ 1512.245227][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1512.250372][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1512.255502][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.261206][T23221] __msan_chain_origin+0x57/0xa0 [ 1512.267308][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.272670][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1512.278829][T23224] __do_fast_syscall_32+0x102/0x160 [ 1512.283928][T23221] get_compat_msghdr+0x108/0x2b0 [ 1512.289122][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1512.294055][T23221] do_recvmmsg+0xdaf/0x2300 [ 1512.299007][T23224] do_SYSENTER_32+0x73/0x90 [ 1512.303504][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1512.308003][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.312701][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.319047][T23224] RIP: 0023:0xf7fd0549 [ 1512.325121][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.329181][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1512.335337][T23221] __do_fast_syscall_32+0x102/0x160 [ 1512.355296][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 [ 1512.360577][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1512.360587][T23224] ORIG_RAX: 0000000000000151 [ 1512.360614][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1512.366686][T23221] do_SYSENTER_32+0x73/0x90 [ 1512.371541][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1512.376254][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.384393][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1512.388877][T23221] [ 1512.396874][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1512.403206][T23221] Uninit was stored to memory at: [ 1512.411284][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1512.413630][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1512.421591][T23224] Uninit was stored to memory at: [ 1512.426636][T23221] __msan_chain_origin+0x57/0xa0 [ 1512.434699][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1512.440424][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1512.445430][T23224] __msan_chain_origin+0x57/0xa0 [ 1512.450361][T23221] get_compat_msghdr+0x108/0x2b0 [ 1512.456076][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1512.461194][T23221] do_recvmmsg+0xdaf/0x2300 [ 1512.466119][T23224] get_compat_msghdr+0x108/0x2b0 [ 1512.471155][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1512.476275][T23224] do_recvmmsg+0xdaf/0x2300 [ 1512.480862][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.485798][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1512.490477][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.494976][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.501047][T23221] __do_fast_syscall_32+0x102/0x160 [ 1512.505706][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.511845][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1512.517990][T23224] __do_fast_syscall_32+0x102/0x160 [ 1512.523198][T23221] do_SYSENTER_32+0x73/0x90 [ 1512.529800][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1512.534648][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.539929][T23224] do_SYSENTER_32+0x73/0x90 [ 1512.544400][T23221] [ 1512.549290][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.555595][T23221] Uninit was stored to memory at: [ 1512.560434][T23224] [ 1512.562786][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1512.569178][T23224] Uninit was stored to memory at: [ 1512.574216][T23221] __msan_chain_origin+0x57/0xa0 [ 1512.576544][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1512.582261][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1512.587272][T23224] __msan_chain_origin+0x57/0xa0 [ 1512.592211][T23221] get_compat_msghdr+0x108/0x2b0 [ 1512.598108][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1512.603217][T23221] do_recvmmsg+0xdaf/0x2300 [ 1512.608187][T23224] get_compat_msghdr+0x108/0x2b0 [ 1512.613109][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1512.618209][T23224] do_recvmmsg+0xdaf/0x2300 [ 1512.622701][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.627646][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1512.632316][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.636806][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.642866][T23221] __do_fast_syscall_32+0x102/0x160 [ 1512.647539][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.653687][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1512.659747][T23224] __do_fast_syscall_32+0x102/0x160 [ 1512.664941][T23221] do_SYSENTER_32+0x73/0x90 [ 1512.671096][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1512.676060][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.681257][T23224] do_SYSENTER_32+0x73/0x90 [ 1512.685726][T23221] [ 1512.690584][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.696880][T23221] Uninit was stored to memory at: [ 1512.701367][T23224] [ 1512.703706][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1512.710000][T23224] Uninit was stored to memory at: [ 1512.710038][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1512.710071][T23224] __msan_chain_origin+0x57/0xa0 [ 1512.715103][T23221] __msan_chain_origin+0x57/0xa0 [ 1512.717418][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1512.723128][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1512.728152][T23224] get_compat_msghdr+0x108/0x2b0 [ 1512.733872][T23221] get_compat_msghdr+0x108/0x2b0 [ 1512.738886][T23224] do_recvmmsg+0xdaf/0x2300 [ 1512.743917][T23221] do_recvmmsg+0xdaf/0x2300 [ 1512.749035][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1512.754137][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1512.759353][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.764288][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.768785][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.773290][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.777973][T23224] __do_fast_syscall_32+0x102/0x160 [ 1512.782769][T23221] __do_fast_syscall_32+0x102/0x160 [ 1512.788853][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1512.794955][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1512.801123][T23224] do_SYSENTER_32+0x73/0x90 [ 1512.807352][T23221] do_SYSENTER_32+0x73/0x90 [ 1512.812541][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.817724][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.822543][T23224] [ 1512.827379][T23221] [ 1512.831870][T23224] Uninit was stored to memory at: [ 1512.836366][T23221] Uninit was stored to memory at: [ 1512.842742][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1512.849066][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1512.851379][T23224] __msan_chain_origin+0x57/0xa0 [ 1512.853693][T23221] __msan_chain_origin+0x57/0xa0 [ 1512.858710][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1512.863727][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1512.869441][T23224] get_compat_msghdr+0x108/0x2b0 [ 1512.875148][T23221] get_compat_msghdr+0x108/0x2b0 [ 1512.880094][T23224] do_recvmmsg+0xdaf/0x2300 [ 1512.885022][T23221] do_recvmmsg+0xdaf/0x2300 [ 1512.890132][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1512.895319][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1512.900271][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.905198][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.909702][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.914206][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.918905][T23224] __do_fast_syscall_32+0x102/0x160 [ 1512.923714][T23221] __do_fast_syscall_32+0x102/0x160 [ 1512.929768][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1512.935839][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1512.941978][T23224] do_SYSENTER_32+0x73/0x90 [ 1512.948123][T23221] do_SYSENTER_32+0x73/0x90 [ 1512.953316][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.958558][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.963389][T23224] [ 1512.968227][T23221] [ 1512.972720][T23224] Uninit was stored to memory at: [ 1512.977227][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1512.983564][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1512.989891][T23221] do_recvmmsg+0xbc/0x2300 [ 1512.992201][T23224] __msan_chain_origin+0x57/0xa0 [ 1512.994509][T23221] do_recvmmsg+0xbc/0x2300 [ 1512.999547][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1513.030917][T23224] get_compat_msghdr+0x108/0x2b0 [ 1513.035884][T23224] do_recvmmsg+0xdaf/0x2300 [ 1513.040415][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1513.045580][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.051811][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.057986][T23224] __do_fast_syscall_32+0x102/0x160 [ 1513.063197][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1513.069985][T23224] do_SYSENTER_32+0x73/0x90 [ 1513.074629][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.080960][T23224] [ 1513.083293][T23224] Uninit was stored to memory at: [ 1513.088456][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1513.094274][T23224] __msan_chain_origin+0x57/0xa0 [ 1513.099240][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1513.104367][T23224] get_compat_msghdr+0x108/0x2b0 [ 1513.109325][T23224] do_recvmmsg+0xdaf/0x2300 [ 1513.113968][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1513.118670][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.125725][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.131910][T23224] __do_fast_syscall_32+0x102/0x160 [ 1513.137141][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1513.142022][T23224] do_SYSENTER_32+0x73/0x90 [ 1513.146556][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.152925][T23224] [ 1513.155275][T23224] Uninit was stored to memory at: [ 1513.160322][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1513.166077][T23224] __msan_chain_origin+0x57/0xa0 [ 1513.171032][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1513.176167][T23224] get_compat_msghdr+0x108/0x2b0 [ 1513.181136][T23224] do_recvmmsg+0xdaf/0x2300 [ 1513.185664][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1513.190452][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.196564][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.202927][T23224] __do_fast_syscall_32+0x102/0x160 [ 1513.208161][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1513.213039][T23224] do_SYSENTER_32+0x73/0x90 [ 1513.217594][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.223934][T23224] [ 1513.226282][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1513.233008][T23224] do_recvmmsg+0xbc/0x2300 [ 1513.237624][T23224] do_recvmmsg+0xbc/0x2300 [ 1513.532771][T23221] not chained 5500000 origins [ 1513.537503][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1513.546364][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1513.556456][T23221] Call Trace: [ 1513.559775][T23221] dump_stack+0x21c/0x280 [ 1513.564150][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1513.569930][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1513.576020][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1513.581235][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1513.587089][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1513.593192][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1513.598588][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1513.603813][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1513.609467][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1513.615577][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1513.620528][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1513.625748][T23221] __msan_chain_origin+0x57/0xa0 [ 1513.630699][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1513.635844][T23221] get_compat_msghdr+0x108/0x2b0 [ 1513.640826][T23221] do_recvmmsg+0xdaf/0x2300 [ 1513.645405][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1513.651520][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1513.656752][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1513.662666][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1513.667891][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1513.673554][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1513.678860][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1513.683647][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1513.688362][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1513.694190][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1513.699413][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.705505][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.711683][T23221] __do_fast_syscall_32+0x102/0x160 [ 1513.716943][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1513.722019][T23221] do_SYSENTER_32+0x73/0x90 [ 1513.726542][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.732918][T23221] RIP: 0023:0xf7fd0549 [ 1513.737013][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1513.756639][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1513.765085][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1513.773166][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1513.781160][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1513.789155][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1513.797190][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1513.805182][T23221] Uninit was stored to memory at: [ 1513.810247][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1513.815988][T23221] __msan_chain_origin+0x57/0xa0 [ 1513.820991][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1513.826124][T23221] get_compat_msghdr+0x108/0x2b0 [ 1513.831117][T23221] do_recvmmsg+0xdaf/0x2300 [ 1513.835635][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1513.840330][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.846420][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.852628][T23221] __do_fast_syscall_32+0x102/0x160 [ 1513.857854][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1513.862819][T23221] do_SYSENTER_32+0x73/0x90 [ 1513.867349][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.873680][T23221] [ 1513.876025][T23221] Uninit was stored to memory at: [ 1513.881097][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1513.886836][T23221] __msan_chain_origin+0x57/0xa0 [ 1513.891815][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1513.896968][T23221] get_compat_msghdr+0x108/0x2b0 [ 1513.901950][T23221] do_recvmmsg+0xdaf/0x2300 [ 1513.906475][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1513.911175][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.917261][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.923454][T23221] __do_fast_syscall_32+0x102/0x160 [ 1513.928682][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1513.933567][T23221] do_SYSENTER_32+0x73/0x90 [ 1513.938095][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.944432][T23221] [ 1513.946768][T23221] Uninit was stored to memory at: [ 1513.951825][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1513.957560][T23221] __msan_chain_origin+0x57/0xa0 [ 1513.962520][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1513.967667][T23221] get_compat_msghdr+0x108/0x2b0 [ 1513.972632][T23221] do_recvmmsg+0xdaf/0x2300 [ 1513.977155][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1513.981856][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.988073][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.994894][T23221] __do_fast_syscall_32+0x102/0x160 [ 1514.000138][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1514.005009][T23221] do_SYSENTER_32+0x73/0x90 [ 1514.005575][T23224] not chained 5510000 origins [ 1514.009550][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.014228][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1514.020536][T23221] [ 1514.029312][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1514.031628][T23221] Uninit was stored to memory at: [ 1514.041689][T23224] Call Trace: [ 1514.047195][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1514.050482][T23224] dump_stack+0x21c/0x280 [ 1514.056198][T23221] __msan_chain_origin+0x57/0xa0 [ 1514.060523][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1514.065446][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1514.071174][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1514.076264][T23221] get_compat_msghdr+0x108/0x2b0 [ 1514.082327][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1514.087238][T23221] do_recvmmsg+0xdaf/0x2300 [ 1514.087275][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1514.092494][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1514.097094][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.101775][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1514.107582][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.113635][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1514.119787][T23221] __do_fast_syscall_32+0x102/0x160 [ 1514.125932][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1514.131289][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1514.136476][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1514.141657][T23221] do_SYSENTER_32+0x73/0x90 [ 1514.146499][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1514.152126][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.156621][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1514.162663][T23221] [ 1514.169087][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1514.173996][T23221] Uninit was stored to memory at: [ 1514.176325][T23224] __msan_chain_origin+0x57/0xa0 [ 1514.181694][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1514.186702][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1514.191638][T23221] __msan_chain_origin+0x57/0xa0 [ 1514.197348][T23224] get_compat_msghdr+0x108/0x2b0 [ 1514.202459][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1514.207387][T23224] do_recvmmsg+0xdaf/0x2300 [ 1514.212418][T23221] get_compat_msghdr+0x108/0x2b0 [ 1514.217516][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1514.223495][T23221] do_recvmmsg+0xdaf/0x2300 [ 1514.228419][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1514.233614][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1514.238111][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1514.243997][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.248657][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1514.253864][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.259926][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1514.265544][T23221] __do_fast_syscall_32+0x102/0x160 [ 1514.271686][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1514.276957][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1514.282155][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1514.286998][T23221] do_SYSENTER_32+0x73/0x90 [ 1514.291828][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1514.296485][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.300966][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1514.306740][T23221] [ 1514.313070][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.318317][T23221] Uninit was stored to memory at: [ 1514.320643][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.326698][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1514.332145][T23224] __do_fast_syscall_32+0x102/0x160 [ 1514.338291][T23221] __msan_chain_origin+0x57/0xa0 [ 1514.344001][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1514.349215][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1514.354268][T23224] do_SYSENTER_32+0x73/0x90 [ 1514.359214][T23221] get_compat_msghdr+0x108/0x2b0 [ 1514.364328][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.368825][T23221] do_recvmmsg+0xdaf/0x2300 [ 1514.373728][T23224] RIP: 0023:0xf7fd0549 [ 1514.373762][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1514.380091][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1514.384652][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 [ 1514.388908][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.408598][T23224] ORIG_RAX: 0000000000000151 [ 1514.413305][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.419341][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1514.425407][T23221] __do_fast_syscall_32+0x102/0x160 [ 1514.430254][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1514.436415][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1514.444373][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1514.449594][T23221] do_SYSENTER_32+0x73/0x90 [ 1514.457747][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1514.462621][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.470564][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1514.475164][T23221] [ 1514.483138][T23224] Uninit was stored to memory at: [ 1514.489450][T23221] Uninit was stored to memory at: [ 1514.497531][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1514.499842][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1514.504867][T23224] __msan_chain_origin+0x57/0xa0 [ 1514.509871][T23221] __msan_chain_origin+0x57/0xa0 [ 1514.515586][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1514.521300][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1514.526335][T23224] get_compat_msghdr+0x108/0x2b0 [ 1514.531364][T23221] get_compat_msghdr+0x108/0x2b0 [ 1514.536461][T23224] do_recvmmsg+0xdaf/0x2300 [ 1514.541572][T23221] do_recvmmsg+0xdaf/0x2300 [ 1514.546499][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1514.551739][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1514.556248][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.560745][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.565439][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.570206][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.576277][T23224] __do_fast_syscall_32+0x102/0x160 [ 1514.582323][T23221] __do_fast_syscall_32+0x102/0x160 [ 1514.588467][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1514.594714][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1514.599906][T23224] do_SYSENTER_32+0x73/0x90 [ 1514.605090][T23221] do_SYSENTER_32+0x73/0x90 [ 1514.609929][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.614770][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.619252][T23224] [ 1514.623751][T23221] [ 1514.630091][T23224] Uninit was stored to memory at: [ 1514.636429][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1514.638761][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1514.641058][T23221] do_recvmmsg+0xbc/0x2300 [ 1514.646069][T23224] __msan_chain_origin+0x57/0xa0 [ 1514.652738][T23221] do_recvmmsg+0xbc/0x2300 [ 1514.658474][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1514.677330][T23224] get_compat_msghdr+0x108/0x2b0 [ 1514.682286][T23224] do_recvmmsg+0xdaf/0x2300 [ 1514.686821][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1514.691729][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.698020][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.704246][T23224] __do_fast_syscall_32+0x102/0x160 [ 1514.709475][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1514.714963][T23224] do_SYSENTER_32+0x73/0x90 [ 1514.719481][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.725800][T23224] [ 1514.728147][T23224] Uninit was stored to memory at: [ 1514.733209][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1514.738935][T23224] __msan_chain_origin+0x57/0xa0 [ 1514.743899][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1514.749025][T23224] get_compat_msghdr+0x108/0x2b0 [ 1514.754067][T23224] do_recvmmsg+0xdaf/0x2300 [ 1514.758582][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1514.763275][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.769379][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.775555][T23224] __do_fast_syscall_32+0x102/0x160 [ 1514.780769][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1514.785642][T23224] do_SYSENTER_32+0x73/0x90 [ 1514.790164][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.796495][T23224] [ 1514.799010][T23224] Uninit was stored to memory at: [ 1514.804066][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1514.809822][T23224] __msan_chain_origin+0x57/0xa0 [ 1514.814790][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1514.819940][T23224] get_compat_msghdr+0x108/0x2b0 [ 1514.825005][T23224] do_recvmmsg+0xdaf/0x2300 [ 1514.829964][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1514.834685][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.840791][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.847580][T23224] __do_fast_syscall_32+0x102/0x160 [ 1514.852808][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1514.857675][T23224] do_SYSENTER_32+0x73/0x90 [ 1514.862197][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.868520][T23224] [ 1514.870847][T23224] Uninit was stored to memory at: [ 1514.875889][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1514.881632][T23224] __msan_chain_origin+0x57/0xa0 [ 1514.886574][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1514.891699][T23224] get_compat_msghdr+0x108/0x2b0 [ 1514.896640][T23224] do_recvmmsg+0xdaf/0x2300 [ 1514.901151][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1514.905858][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.911938][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.918105][T23224] __do_fast_syscall_32+0x102/0x160 [ 1514.923328][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1514.928187][T23224] do_SYSENTER_32+0x73/0x90 [ 1514.932704][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.939111][T23224] [ 1514.941437][T23224] Uninit was stored to memory at: [ 1514.946479][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1514.952239][T23224] __msan_chain_origin+0x57/0xa0 [ 1514.957227][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1514.962364][T23224] get_compat_msghdr+0x108/0x2b0 [ 1514.967383][T23224] do_recvmmsg+0xdaf/0x2300 [ 1514.971923][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1514.976620][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.982723][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.988903][T23224] __do_fast_syscall_32+0x102/0x160 [ 1514.995238][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1515.000131][T23224] do_SYSENTER_32+0x73/0x90 [ 1515.004652][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.010964][T23224] [ 1515.013287][T23224] Uninit was stored to memory at: [ 1515.018330][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1515.024062][T23224] __msan_chain_origin+0x57/0xa0 [ 1515.029100][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1515.034225][T23224] get_compat_msghdr+0x108/0x2b0 [ 1515.039184][T23224] do_recvmmsg+0xdaf/0x2300 [ 1515.043696][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1515.048383][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.054603][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.060762][T23224] __do_fast_syscall_32+0x102/0x160 [ 1515.065987][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1515.070842][T23224] do_SYSENTER_32+0x73/0x90 [ 1515.075354][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.081686][T23224] [ 1515.084012][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1515.090697][T23224] do_recvmmsg+0xbc/0x2300 [ 1515.095311][T23224] do_recvmmsg+0xbc/0x2300 [ 1515.445362][T23221] not chained 5520000 origins [ 1515.450108][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1515.458883][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.468950][T23221] Call Trace: [ 1515.472359][T23221] dump_stack+0x21c/0x280 [ 1515.476723][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1515.482864][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1515.488952][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1515.494170][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1515.500006][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1515.506147][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1515.511538][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1515.516753][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1515.522927][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1515.529018][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1515.534411][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1515.539655][T23221] __msan_chain_origin+0x57/0xa0 [ 1515.544811][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1515.549958][T23221] get_compat_msghdr+0x108/0x2b0 [ 1515.554948][T23221] do_recvmmsg+0xdaf/0x2300 [ 1515.559520][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1515.565634][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1515.570878][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1515.576790][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1515.582033][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1515.587698][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1515.593007][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1515.597794][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1515.602495][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1515.608340][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1515.613559][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.619646][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.625824][T23221] __do_fast_syscall_32+0x102/0x160 [ 1515.631039][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1515.635908][T23221] do_SYSENTER_32+0x73/0x90 [ 1515.640457][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.646883][T23221] RIP: 0023:0xf7fd0549 [ 1515.650966][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1515.670587][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1515.679052][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1515.687050][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1515.695043][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1515.703063][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1515.711161][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1515.719242][T23221] Uninit was stored to memory at: [ 1515.724321][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1515.730207][T23221] __msan_chain_origin+0x57/0xa0 [ 1515.735251][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1515.740474][T23221] get_compat_msghdr+0x108/0x2b0 [ 1515.745518][T23221] do_recvmmsg+0xdaf/0x2300 [ 1515.750057][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1515.754759][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.763723][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.769920][T23221] __do_fast_syscall_32+0x102/0x160 [ 1515.775171][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1515.780057][T23221] do_SYSENTER_32+0x73/0x90 [ 1515.784616][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.790937][T23221] [ 1515.793324][T23221] Uninit was stored to memory at: [ 1515.798379][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1515.804213][T23221] __msan_chain_origin+0x57/0xa0 [ 1515.809262][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1515.814665][T23221] get_compat_msghdr+0x108/0x2b0 [ 1515.819623][T23221] do_recvmmsg+0xdaf/0x2300 [ 1515.824153][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1515.828866][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.834953][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.841124][T23221] __do_fast_syscall_32+0x102/0x160 [ 1515.846357][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1515.851343][T23221] do_SYSENTER_32+0x73/0x90 [ 1515.855869][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.862211][T23221] [ 1515.864629][T23221] Uninit was stored to memory at: [ 1515.869724][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1515.875533][T23221] __msan_chain_origin+0x57/0xa0 [ 1515.880482][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1515.885601][T23221] get_compat_msghdr+0x108/0x2b0 [ 1515.890552][T23221] do_recvmmsg+0xdaf/0x2300 [ 1515.895147][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1515.899836][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.905949][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.912233][T23221] __do_fast_syscall_32+0x102/0x160 [ 1515.917468][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1515.922339][T23221] do_SYSENTER_32+0x73/0x90 [ 1515.926857][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.933185][T23221] [ 1515.935513][T23221] Uninit was stored to memory at: [ 1515.940566][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1515.946315][T23221] __msan_chain_origin+0x57/0xa0 [ 1515.951360][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1515.956482][T23221] get_compat_msghdr+0x108/0x2b0 [ 1515.961436][T23221] do_recvmmsg+0xdaf/0x2300 [ 1515.965953][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1515.970646][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.976752][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.983013][T23221] __do_fast_syscall_32+0x102/0x160 [ 1515.988231][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1515.993098][T23221] do_SYSENTER_32+0x73/0x90 [ 1515.997631][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1516.004044][T23221] [ 1516.006383][T23221] Uninit was stored to memory at: [ 1516.011539][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1516.017362][T23221] __msan_chain_origin+0x57/0xa0 [ 1516.022314][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1516.027457][T23221] get_compat_msghdr+0x108/0x2b0 [ 1516.032497][T23221] do_recvmmsg+0xdaf/0x2300 [ 1516.037071][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1516.041780][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1516.047870][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1516.054040][T23221] __do_fast_syscall_32+0x102/0x160 [ 1516.059274][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1516.064169][T23221] do_SYSENTER_32+0x73/0x90 [ 1516.068730][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1516.075489][T23221] [ 1516.077819][T23221] Uninit was stored to memory at: [ 1516.082870][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1516.088596][T23221] __msan_chain_origin+0x57/0xa0 [ 1516.093547][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1516.098669][T23221] get_compat_msghdr+0x108/0x2b0 [ 1516.103975][T23221] do_recvmmsg+0xdaf/0x2300 [ 1516.108504][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1516.113205][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1516.119342][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1516.125732][T23221] __do_fast_syscall_32+0x102/0x160 [ 1516.130958][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1516.135911][T23221] do_SYSENTER_32+0x73/0x90 [ 1516.140549][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1516.147037][T23221] [ 1516.149362][T23221] Uninit was stored to memory at: [ 1516.154415][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1516.160146][T23221] __msan_chain_origin+0x57/0xa0 [ 1516.165100][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1516.170224][T23221] get_compat_msghdr+0x108/0x2b0 [ 1516.175191][T23221] do_recvmmsg+0xdaf/0x2300 [ 1516.179799][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1516.186595][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1516.192689][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1516.198865][T23221] __do_fast_syscall_32+0x102/0x160 [ 1516.204185][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1516.209142][T23221] do_SYSENTER_32+0x73/0x90 [ 1516.213668][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1516.219990][T23221] [ 1516.222324][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1516.229278][T23221] do_recvmmsg+0xbc/0x2300 [ 1516.233799][T23221] do_recvmmsg+0xbc/0x2300 [ 1516.436435][T23221] not chained 5530000 origins [ 1516.441156][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1516.449935][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1516.460014][T23221] Call Trace: [ 1516.463696][T23221] dump_stack+0x21c/0x280 [ 1516.468406][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1516.474155][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1516.480239][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1516.485481][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1516.491326][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1516.497506][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1516.502899][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1516.508114][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1516.514036][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1516.520126][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1516.525163][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1516.530386][T23221] __msan_chain_origin+0x57/0xa0 [ 1516.535339][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1516.540493][T23221] get_compat_msghdr+0x108/0x2b0 [ 1516.545454][T23221] do_recvmmsg+0xdaf/0x2300 [ 1516.550066][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1516.556158][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1516.561383][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1516.567301][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1516.572515][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1516.578165][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1516.583656][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1516.588438][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1516.593129][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1516.598946][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1516.604159][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1516.610255][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1516.617309][T23221] __do_fast_syscall_32+0x102/0x160 [ 1516.622552][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1516.627422][T23221] do_SYSENTER_32+0x73/0x90 [ 1516.631948][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1516.638341][T23221] RIP: 0023:0xf7fd0549 [ 1516.642432][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1516.662095][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1516.671664][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1516.681552][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1516.690343][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1516.698620][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1516.706622][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1516.714611][T23221] Uninit was stored to memory at: [ 1516.719674][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1516.725460][T23221] __msan_chain_origin+0x57/0xa0 [ 1516.730413][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1516.735559][T23221] get_compat_msghdr+0x108/0x2b0 [ 1516.740519][T23221] do_recvmmsg+0xdaf/0x2300 [ 1516.745389][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1516.749310][T23224] not chained 5540000 origins [ 1516.750366][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1516.755044][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1516.761108][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1516.769855][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1516.776043][T23221] __do_fast_syscall_32+0x102/0x160 [ 1516.786085][T23224] Call Trace: [ 1516.791310][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1516.794588][T23224] dump_stack+0x21c/0x280 [ 1516.799433][T23221] do_SYSENTER_32+0x73/0x90 [ 1516.803759][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1516.808263][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1516.814019][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1516.820320][T23221] [ 1516.826566][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1516.828873][T23221] Uninit was stored to memory at: [ 1516.834130][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1516.839246][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1516.845070][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1516.850788][T23221] __msan_chain_origin+0x57/0xa0 [ 1516.856844][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1516.861859][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1516.867226][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1516.872422][T23221] get_compat_msghdr+0x108/0x2b0 [ 1516.877715][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1516.882663][T23221] do_recvmmsg+0xdaf/0x2300 [ 1516.888476][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1516.893931][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1516.899989][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1516.904659][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1516.909581][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1516.919572][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1516.924764][T23224] __msan_chain_origin+0x57/0xa0 [ 1516.930917][T23221] __do_fast_syscall_32+0x102/0x160 [ 1516.935848][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1516.941319][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1516.946425][T23224] get_compat_msghdr+0x108/0x2b0 [ 1516.951272][T23221] do_SYSENTER_32+0x73/0x90 [ 1516.956213][T23224] do_recvmmsg+0xdaf/0x2300 [ 1516.960886][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1516.965381][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1516.971772][T23221] [ 1516.977010][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1516.979301][T23221] Uninit was stored to memory at: [ 1516.985211][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1516.990245][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1516.995435][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1517.001416][T23221] __msan_chain_origin+0x57/0xa0 [ 1517.007050][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1517.011977][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1517.017269][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1517.022973][T23221] get_compat_msghdr+0x108/0x2b0 [ 1517.027722][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1517.032646][T23221] do_recvmmsg+0xdaf/0x2300 [ 1517.037494][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1517.042016][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1517.047825][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1517.052510][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.057696][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.063757][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.069813][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.075970][T23221] __do_fast_syscall_32+0x102/0x160 [ 1517.082120][T23224] __do_fast_syscall_32+0x102/0x160 [ 1517.087322][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1517.092703][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1517.097566][T23221] do_SYSENTER_32+0x73/0x90 [ 1517.102433][T23224] do_SYSENTER_32+0x73/0x90 [ 1517.107018][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.111514][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.117811][T23221] [ 1517.124141][T23224] RIP: 0023:0xf7fd0549 [ 1517.126467][T23221] Uninit was stored to memory at: [ 1517.130534][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1517.135554][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1517.155164][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 [ 1517.160866][T23221] __msan_chain_origin+0x57/0xa0 [ 1517.160894][T23224] ORIG_RAX: 0000000000000151 [ 1517.166969][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1517.171968][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1517.176661][T23221] get_compat_msghdr+0x108/0x2b0 [ 1517.181750][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1517.189743][T23221] do_recvmmsg+0xdaf/0x2300 [ 1517.194658][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1517.202734][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1517.207215][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1517.215223][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.219873][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1517.227869][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.233909][T23224] Uninit was stored to memory at: [ 1517.241909][T23221] __do_fast_syscall_32+0x102/0x160 [ 1517.248062][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1517.253081][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1517.258349][T23224] __msan_chain_origin+0x57/0xa0 [ 1517.264062][T23221] do_SYSENTER_32+0x73/0x90 [ 1517.268901][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1517.273829][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.278333][T23224] get_compat_msghdr+0x108/0x2b0 [ 1517.283411][T23221] [ 1517.289759][T23224] do_recvmmsg+0xdaf/0x2300 [ 1517.294687][T23221] Uninit was stored to memory at: [ 1517.297014][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1517.301509][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1517.306525][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.311213][T23221] __msan_chain_origin+0x57/0xa0 [ 1517.316933][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.322988][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1517.327931][T23224] __do_fast_syscall_32+0x102/0x160 [ 1517.334079][T23221] get_compat_msghdr+0x108/0x2b0 [ 1517.339187][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1517.344378][T23221] do_recvmmsg+0xdaf/0x2300 [ 1517.349473][T23224] do_SYSENTER_32+0x73/0x90 [ 1517.354307][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1517.358818][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.364176][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.368820][T23224] [ 1517.375183][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.381246][T23224] Uninit was stored to memory at: [ 1517.383591][T23221] __do_fast_syscall_32+0x102/0x160 [ 1517.389738][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1517.394752][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1517.399945][T23224] __msan_chain_origin+0x57/0xa0 [ 1517.405683][T23221] do_SYSENTER_32+0x73/0x90 [ 1517.410528][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1517.415485][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.419974][T23224] get_compat_msghdr+0x108/0x2b0 [ 1517.425061][T23221] [ 1517.431401][T23224] do_recvmmsg+0xdaf/0x2300 [ 1517.436310][T23221] Uninit was stored to memory at: [ 1517.438647][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1517.443146][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1517.448185][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.452865][T23221] __msan_chain_origin+0x57/0xa0 [ 1517.458596][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.464753][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1517.469680][T23224] __do_fast_syscall_32+0x102/0x160 [ 1517.476168][T23221] get_compat_msghdr+0x108/0x2b0 [ 1517.481264][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1517.486449][T23221] do_recvmmsg+0xdaf/0x2300 [ 1517.491371][T23224] do_SYSENTER_32+0x73/0x90 [ 1517.496231][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1517.500718][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.505202][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.509842][T23224] [ 1517.517658][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.523698][T23224] Uninit was stored to memory at: [ 1517.526034][T23221] __do_fast_syscall_32+0x102/0x160 [ 1517.532178][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1517.537191][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1517.542454][T23224] __msan_chain_origin+0x57/0xa0 [ 1517.548179][T23221] do_SYSENTER_32+0x73/0x90 [ 1517.553008][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1517.557956][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.562447][T23224] get_compat_msghdr+0x108/0x2b0 [ 1517.567545][T23221] [ 1517.573886][T23224] do_recvmmsg+0xdaf/0x2300 [ 1517.578792][T23221] Uninit was stored to memory at: [ 1517.581125][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1517.586045][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1517.591055][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.595719][T23221] __msan_chain_origin+0x57/0xa0 [ 1517.601430][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.607511][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1517.612459][T23224] __do_fast_syscall_32+0x102/0x160 [ 1517.618598][T23221] get_compat_msghdr+0x108/0x2b0 [ 1517.623701][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1517.628885][T23221] do_recvmmsg+0xdaf/0x2300 [ 1517.633810][T23224] do_SYSENTER_32+0x73/0x90 [ 1517.638646][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1517.643143][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.647623][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.647658][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.652328][T23224] [ 1517.658678][T23221] __do_fast_syscall_32+0x102/0x160 [ 1517.664776][T23224] Uninit was stored to memory at: [ 1517.670934][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1517.673246][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1517.679733][T23221] do_SYSENTER_32+0x73/0x90 [ 1517.684737][T23224] __msan_chain_origin+0x57/0xa0 [ 1517.689575][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.695287][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1517.699762][T23221] [ 1517.704704][T23224] get_compat_msghdr+0x108/0x2b0 [ 1517.710998][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1517.716112][T23224] do_recvmmsg+0xdaf/0x2300 [ 1517.718429][T23221] do_recvmmsg+0xbc/0x2300 [ 1517.723549][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1517.731071][T23221] do_recvmmsg+0xbc/0x2300 [ 1517.735725][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.755820][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.762026][T23224] __do_fast_syscall_32+0x102/0x160 [ 1517.767235][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1517.772096][T23224] do_SYSENTER_32+0x73/0x90 [ 1517.776745][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.783278][T23224] [ 1517.785789][T23224] Uninit was stored to memory at: [ 1517.790886][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1517.796618][T23224] __msan_chain_origin+0x57/0xa0 [ 1517.801565][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1517.806780][T23224] get_compat_msghdr+0x108/0x2b0 [ 1517.811740][T23224] do_recvmmsg+0xdaf/0x2300 [ 1517.816278][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1517.820960][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.827031][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.833211][T23224] __do_fast_syscall_32+0x102/0x160 [ 1517.838427][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1517.843307][T23224] do_SYSENTER_32+0x73/0x90 [ 1517.847830][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.854190][T23224] [ 1517.856530][T23224] Uninit was stored to memory at: [ 1517.861573][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1517.867326][T23224] __msan_chain_origin+0x57/0xa0 [ 1517.872294][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1517.877415][T23224] get_compat_msghdr+0x108/0x2b0 [ 1517.882371][T23224] do_recvmmsg+0xdaf/0x2300 [ 1517.886907][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1517.891690][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.897783][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.903968][T23224] __do_fast_syscall_32+0x102/0x160 [ 1517.909181][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1517.914067][T23224] do_SYSENTER_32+0x73/0x90 [ 1517.918580][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.924906][T23224] [ 1517.927234][T23224] Uninit was stored to memory at: [ 1517.932284][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1517.938048][T23224] __msan_chain_origin+0x57/0xa0 [ 1517.943013][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1517.948160][T23224] get_compat_msghdr+0x108/0x2b0 [ 1517.953134][T23224] do_recvmmsg+0xdaf/0x2300 [ 1517.957665][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1517.962358][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.968453][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.974641][T23224] __do_fast_syscall_32+0x102/0x160 [ 1517.979858][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1517.984743][T23224] do_SYSENTER_32+0x73/0x90 [ 1517.989538][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.995870][T23224] [ 1517.998205][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1518.004898][T23224] do_recvmmsg+0xbc/0x2300 [ 1518.009328][T23224] do_recvmmsg+0xbc/0x2300 [ 1518.357923][T23221] not chained 5550000 origins [ 1518.362668][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1518.371457][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1518.388130][T23221] Call Trace: [ 1518.391712][T23221] dump_stack+0x21c/0x280 [ 1518.396078][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1518.401817][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1518.407903][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1518.413131][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1518.418952][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1518.425058][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1518.430464][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1518.435686][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1518.441341][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1518.447431][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1518.452393][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1518.457610][T23221] __msan_chain_origin+0x57/0xa0 [ 1518.462566][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1518.467702][T23221] get_compat_msghdr+0x108/0x2b0 [ 1518.472675][T23221] do_recvmmsg+0xdaf/0x2300 [ 1518.477196][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1518.483291][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1518.488511][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1518.494420][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1518.499633][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1518.505276][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1518.510620][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1518.515423][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1518.520113][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1518.525938][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1518.531153][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.537247][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.543531][T23221] __do_fast_syscall_32+0x102/0x160 [ 1518.548766][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1518.553631][T23221] do_SYSENTER_32+0x73/0x90 [ 1518.558160][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.564508][T23221] RIP: 0023:0xf7fd0549 [ 1518.568593][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1518.588221][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1518.596671][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1518.604673][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1518.612665][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1518.620681][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1518.628688][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1518.636694][T23221] Uninit was stored to memory at: [ 1518.641746][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1518.647480][T23221] __msan_chain_origin+0x57/0xa0 [ 1518.652527][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1518.657659][T23221] get_compat_msghdr+0x108/0x2b0 [ 1518.662740][T23221] do_recvmmsg+0xdaf/0x2300 [ 1518.667266][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1518.671961][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.678073][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.684265][T23221] __do_fast_syscall_32+0x102/0x160 [ 1518.689574][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1518.694460][T23221] do_SYSENTER_32+0x73/0x90 [ 1518.698978][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.705301][T23221] [ 1518.707649][T23221] Uninit was stored to memory at: [ 1518.712709][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1518.718441][T23221] __msan_chain_origin+0x57/0xa0 [ 1518.723401][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1518.728514][T23221] get_compat_msghdr+0x108/0x2b0 [ 1518.733455][T23221] do_recvmmsg+0xdaf/0x2300 [ 1518.737963][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1518.742650][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.748741][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.754909][T23221] __do_fast_syscall_32+0x102/0x160 [ 1518.760114][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1518.764991][T23221] do_SYSENTER_32+0x73/0x90 [ 1518.769655][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.776063][T23221] [ 1518.778415][T23221] Uninit was stored to memory at: [ 1518.783483][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1518.789215][T23221] __msan_chain_origin+0x57/0xa0 [ 1518.794301][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1518.799425][T23221] get_compat_msghdr+0x108/0x2b0 [ 1518.804402][T23221] do_recvmmsg+0xdaf/0x2300 [ 1518.808916][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1518.813607][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.819716][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.825890][T23221] __do_fast_syscall_32+0x102/0x160 [ 1518.831091][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1518.835956][T23221] do_SYSENTER_32+0x73/0x90 [ 1518.840482][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.846802][T23221] [ 1518.849126][T23221] Uninit was stored to memory at: [ 1518.854166][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1518.859892][T23221] __msan_chain_origin+0x57/0xa0 [ 1518.864937][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1518.870056][T23221] get_compat_msghdr+0x108/0x2b0 [ 1518.875019][T23221] do_recvmmsg+0xdaf/0x2300 [ 1518.879617][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1518.884303][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.891072][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.897261][T23221] __do_fast_syscall_32+0x102/0x160 [ 1518.902491][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1518.907366][T23221] do_SYSENTER_32+0x73/0x90 [ 1518.911899][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.918258][T23221] [ 1518.920609][T23221] Uninit was stored to memory at: [ 1518.925665][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1518.931835][T23221] __msan_chain_origin+0x57/0xa0 [ 1518.936816][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1518.941945][T23221] get_compat_msghdr+0x108/0x2b0 [ 1518.947105][T23221] do_recvmmsg+0xdaf/0x2300 [ 1518.951626][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1518.956330][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.962434][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.968644][T23221] __do_fast_syscall_32+0x102/0x160 [ 1518.973870][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1518.978766][T23221] do_SYSENTER_32+0x73/0x90 [ 1518.983303][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.989811][T23221] [ 1518.992163][T23221] Uninit was stored to memory at: [ 1518.997223][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1519.003146][T23221] __msan_chain_origin+0x57/0xa0 [ 1519.008202][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1519.013461][T23221] get_compat_msghdr+0x108/0x2b0 [ 1519.018446][T23221] do_recvmmsg+0xdaf/0x2300 [ 1519.022971][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1519.027675][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1519.033782][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1519.039968][T23221] __do_fast_syscall_32+0x102/0x160 [ 1519.045197][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1519.050282][T23221] do_SYSENTER_32+0x73/0x90 [ 1519.054804][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1519.061316][T23221] [ 1519.063866][T23221] Uninit was stored to memory at: [ 1519.068927][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1519.074708][T23221] __msan_chain_origin+0x57/0xa0 [ 1519.079844][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1519.084974][T23221] get_compat_msghdr+0x108/0x2b0 [ 1519.089965][T23221] do_recvmmsg+0xdaf/0x2300 [ 1519.094576][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1519.099273][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1519.106427][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1519.112699][T23221] __do_fast_syscall_32+0x102/0x160 [ 1519.117915][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1519.122779][T23221] do_SYSENTER_32+0x73/0x90 [ 1519.127303][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1519.134025][T23221] [ 1519.136377][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1519.143078][T23221] do_recvmmsg+0xbc/0x2300 [ 1519.147656][T23221] do_recvmmsg+0xbc/0x2300 [ 1519.413712][T23224] not chained 5560000 origins [ 1519.419516][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1519.429314][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.440959][T23224] Call Trace: [ 1519.445729][T23224] dump_stack+0x21c/0x280 [ 1519.450658][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1519.457978][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1519.464885][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1519.470910][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1519.478440][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1519.485500][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1519.491396][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1519.497821][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1519.503544][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1519.510264][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1519.516826][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1519.522733][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1519.528203][T23224] __msan_chain_origin+0x57/0xa0 [ 1519.534012][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1519.539528][T23224] get_compat_msghdr+0x108/0x2b0 [ 1519.545420][T23224] do_recvmmsg+0xdaf/0x2300 [ 1519.550660][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1519.556530][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1519.563278][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1519.568804][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1519.575295][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1519.581216][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1519.588207][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1519.593488][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1519.599336][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1519.604957][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1519.612159][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1519.619259][T23224] __do_fast_syscall_32+0x102/0x160 [ 1519.625472][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1519.631145][T23224] do_SYSENTER_32+0x73/0x90 [ 1519.636459][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1519.642919][T23224] RIP: 0023:0xf7fd0549 [ 1519.647234][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1519.668468][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1519.677190][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1519.685408][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1519.693505][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1519.702366][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1519.711170][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1519.719707][T23224] Uninit was stored to memory at: [ 1519.724953][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1519.730917][T23224] __msan_chain_origin+0x57/0xa0 [ 1519.736253][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1519.742026][T23224] get_compat_msghdr+0x108/0x2b0 [ 1519.747143][T23224] do_recvmmsg+0xdaf/0x2300 [ 1519.751779][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1519.757693][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1519.764156][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1519.770540][T23224] __do_fast_syscall_32+0x102/0x160 [ 1519.776442][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1519.782386][T23224] do_SYSENTER_32+0x73/0x90 [ 1519.787362][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1519.793874][T23224] [ 1519.796659][T23224] Uninit was stored to memory at: [ 1519.801937][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1519.807859][T23224] __msan_chain_origin+0x57/0xa0 [ 1519.812957][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1519.818109][T23224] get_compat_msghdr+0x108/0x2b0 [ 1519.823418][T23224] do_recvmmsg+0xdaf/0x2300 [ 1519.828396][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1519.833584][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1519.839976][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1519.846253][T23224] __do_fast_syscall_32+0x102/0x160 [ 1519.851745][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1519.857237][T23224] do_SYSENTER_32+0x73/0x90 [ 1519.861871][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1519.868493][T23224] [ 1519.870842][T23224] Uninit was stored to memory at: [ 1519.876242][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1519.882280][T23224] __msan_chain_origin+0x57/0xa0 [ 1519.887563][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1519.893483][T23224] get_compat_msghdr+0x108/0x2b0 [ 1519.899634][T23224] do_recvmmsg+0xdaf/0x2300 [ 1519.905434][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1519.910840][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1519.918885][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1519.927144][T23224] __do_fast_syscall_32+0x102/0x160 [ 1519.934844][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1519.940464][T23224] do_SYSENTER_32+0x73/0x90 [ 1519.946163][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1519.955654][T23224] [ 1519.959380][T23224] Uninit was stored to memory at: [ 1519.967594][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1519.975046][T23224] __msan_chain_origin+0x57/0xa0 [ 1519.980888][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1519.986140][T23224] get_compat_msghdr+0x108/0x2b0 [ 1519.991754][T23224] do_recvmmsg+0xdaf/0x2300 [ 1519.996398][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1520.001660][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.008207][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.014709][T23224] __do_fast_syscall_32+0x102/0x160 [ 1520.020426][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1520.025500][T23224] do_SYSENTER_32+0x73/0x90 [ 1520.030140][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.036898][T23224] [ 1520.039604][T23224] Uninit was stored to memory at: [ 1520.044954][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1520.051510][T23224] __msan_chain_origin+0x57/0xa0 [ 1520.056488][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1520.061859][T23224] get_compat_msghdr+0x108/0x2b0 [ 1520.067009][T23224] do_recvmmsg+0xdaf/0x2300 [ 1520.071680][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1520.076492][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.083115][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.089599][T23224] __do_fast_syscall_32+0x102/0x160 [ 1520.094843][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1520.100176][T23224] do_SYSENTER_32+0x73/0x90 [ 1520.105388][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.112778][T23224] [ 1520.115496][T23224] Uninit was stored to memory at: [ 1520.120560][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1520.126742][T23224] __msan_chain_origin+0x57/0xa0 [ 1520.132072][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1520.137358][T23224] get_compat_msghdr+0x108/0x2b0 [ 1520.142474][T23224] do_recvmmsg+0xdaf/0x2300 [ 1520.147012][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1520.153281][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.159555][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.167235][T23224] __do_fast_syscall_32+0x102/0x160 [ 1520.172869][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1520.177916][T23224] do_SYSENTER_32+0x73/0x90 [ 1520.182834][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.189543][T23224] [ 1520.192025][T23224] Uninit was stored to memory at: [ 1520.197953][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1520.204318][T23224] __msan_chain_origin+0x57/0xa0 [ 1520.209974][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1520.215500][T23224] get_compat_msghdr+0x108/0x2b0 [ 1520.221204][T23224] do_recvmmsg+0xdaf/0x2300 [ 1520.226330][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1520.231496][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.239049][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.245860][T23224] __do_fast_syscall_32+0x102/0x160 [ 1520.252376][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1520.258229][T23224] do_SYSENTER_32+0x73/0x90 [ 1520.264139][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.271756][T23224] [ 1520.274358][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1520.282131][T23224] do_recvmmsg+0xbc/0x2300 [ 1520.286862][T23224] do_recvmmsg+0xbc/0x2300 [ 1520.496096][T23224] not chained 5570000 origins [ 1520.501079][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1520.513043][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.525867][T23224] Call Trace: [ 1520.529754][T23224] dump_stack+0x21c/0x280 [ 1520.535137][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1520.545097][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1520.553165][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1520.561769][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1520.572813][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1520.580769][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1520.587761][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1520.595932][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1520.605472][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1520.612847][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1520.620485][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1520.629175][T23224] __msan_chain_origin+0x57/0xa0 [ 1520.637308][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1520.642860][T23224] get_compat_msghdr+0x108/0x2b0 [ 1520.648056][T23224] do_recvmmsg+0xdaf/0x2300 [ 1520.654261][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1520.661165][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1520.668114][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1520.675389][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1520.681923][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1520.687992][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1520.693211][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1520.700708][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1520.707249][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1520.712833][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.719360][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.726357][T23224] __do_fast_syscall_32+0x102/0x160 [ 1520.732387][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1520.739197][T23224] do_SYSENTER_32+0x73/0x90 [ 1520.744003][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.750967][T23224] RIP: 0023:0xf7fd0549 [ 1520.755847][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1520.779288][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1520.789458][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1520.798989][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1520.807664][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1520.819209][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1520.828803][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1520.837548][T23224] Uninit was stored to memory at: [ 1520.844481][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1520.851578][T23224] __msan_chain_origin+0x57/0xa0 [ 1520.857520][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1520.863409][T23224] get_compat_msghdr+0x108/0x2b0 [ 1520.869543][T23224] do_recvmmsg+0xdaf/0x2300 [ 1520.876733][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1520.882718][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.889616][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.896970][T23224] __do_fast_syscall_32+0x102/0x160 [ 1520.902583][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1520.908155][T23224] do_SYSENTER_32+0x73/0x90 [ 1520.913109][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.919841][T23224] [ 1520.922231][T23224] Uninit was stored to memory at: [ 1520.927547][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1520.933793][T23224] __msan_chain_origin+0x57/0xa0 [ 1520.939506][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1520.945518][T23224] get_compat_msghdr+0x108/0x2b0 [ 1520.950925][T23224] do_recvmmsg+0xdaf/0x2300 [ 1520.955855][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1520.960943][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.967580][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.975770][T23224] __do_fast_syscall_32+0x102/0x160 [ 1520.982060][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1520.987959][T23224] do_SYSENTER_32+0x73/0x90 [ 1520.995024][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.002363][T23224] [ 1521.005273][T23224] Uninit was stored to memory at: [ 1521.011057][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1521.017247][T23224] __msan_chain_origin+0x57/0xa0 [ 1521.022502][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1521.028940][T23224] get_compat_msghdr+0x108/0x2b0 [ 1521.034812][T23224] do_recvmmsg+0xdaf/0x2300 [ 1521.039774][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1521.045883][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.052469][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.060793][T23224] __do_fast_syscall_32+0x102/0x160 [ 1521.066496][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1521.072083][T23224] do_SYSENTER_32+0x73/0x90 [ 1521.078884][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.087156][T23224] [ 1521.089883][T23224] Uninit was stored to memory at: [ 1521.095222][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1521.101903][T23224] __msan_chain_origin+0x57/0xa0 [ 1521.108084][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1521.113998][T23224] get_compat_msghdr+0x108/0x2b0 [ 1521.119773][T23224] do_recvmmsg+0xdaf/0x2300 [ 1521.126391][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1521.133418][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.142413][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.149611][T23224] __do_fast_syscall_32+0x102/0x160 [ 1521.156616][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1521.163021][T23224] do_SYSENTER_32+0x73/0x90 [ 1521.168491][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.175459][T23224] [ 1521.178129][T23224] Uninit was stored to memory at: [ 1521.183461][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1521.190289][T23224] __msan_chain_origin+0x57/0xa0 [ 1521.195734][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1521.201907][T23224] get_compat_msghdr+0x108/0x2b0 [ 1521.207954][T23224] do_recvmmsg+0xdaf/0x2300 [ 1521.214055][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1521.220135][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.226558][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.234123][T23224] __do_fast_syscall_32+0x102/0x160 [ 1521.239658][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1521.245641][T23224] do_SYSENTER_32+0x73/0x90 [ 1521.250814][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.257760][T23224] [ 1521.260336][T23224] Uninit was stored to memory at: [ 1521.265907][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1521.272810][T23224] __msan_chain_origin+0x57/0xa0 [ 1521.278470][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1521.284354][T23224] get_compat_msghdr+0x108/0x2b0 [ 1521.290361][T23224] do_recvmmsg+0xdaf/0x2300 [ 1521.295382][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1521.300634][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.309030][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.316525][T23224] __do_fast_syscall_32+0x102/0x160 [ 1521.322568][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1521.328154][T23224] do_SYSENTER_32+0x73/0x90 [ 1521.335405][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.343046][T23224] [ 1521.345644][T23224] Uninit was stored to memory at: [ 1521.351435][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1521.358704][T23224] __msan_chain_origin+0x57/0xa0 [ 1521.365948][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1521.374822][T23224] get_compat_msghdr+0x108/0x2b0 [ 1521.382177][T23224] do_recvmmsg+0xdaf/0x2300 [ 1521.391374][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1521.400395][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.408095][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.417935][T23224] __do_fast_syscall_32+0x102/0x160 [ 1521.425582][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1521.430950][T23224] do_SYSENTER_32+0x73/0x90 [ 1521.435499][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.441966][T23224] [ 1521.445512][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1521.453772][T23224] do_recvmmsg+0xbc/0x2300 [ 1521.460489][T23224] do_recvmmsg+0xbc/0x2300 [ 1521.590392][T23224] not chained 5580000 origins [ 1521.595479][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1521.608320][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.620017][T23224] Call Trace: [ 1521.624239][T23224] dump_stack+0x21c/0x280 [ 1521.629264][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1521.635625][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1521.642753][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1521.648563][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1521.655840][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1521.662513][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1521.669484][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1521.675857][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1521.683479][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1521.690160][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1521.696489][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1521.703336][T23224] __msan_chain_origin+0x57/0xa0 [ 1521.710179][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1521.715467][T23224] get_compat_msghdr+0x108/0x2b0 [ 1521.721630][T23224] do_recvmmsg+0xdaf/0x2300 [ 1521.726915][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1521.733701][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1521.741344][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1521.748858][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1521.756816][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1521.765089][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1521.770552][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1521.776285][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1521.784506][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1521.793938][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.802697][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.811583][T23224] __do_fast_syscall_32+0x102/0x160 [ 1521.817795][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1521.823538][T23224] do_SYSENTER_32+0x73/0x90 [ 1521.829625][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.837871][T23224] RIP: 0023:0xf7fd0549 [ 1521.842727][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1521.867446][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1521.877935][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1521.887438][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1521.896592][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1521.907433][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1521.916211][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1521.924917][T23224] Uninit was stored to memory at: [ 1521.931060][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1521.939461][T23224] __msan_chain_origin+0x57/0xa0 [ 1521.945833][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1521.954223][T23224] get_compat_msghdr+0x108/0x2b0 [ 1521.963308][T23224] do_recvmmsg+0xdaf/0x2300 [ 1521.970928][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1521.977273][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.985405][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.993259][T23224] __do_fast_syscall_32+0x102/0x160 [ 1521.999784][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1522.005268][T23224] do_SYSENTER_32+0x73/0x90 [ 1522.010634][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1522.022004][T23224] [ 1522.024365][T23224] Uninit was stored to memory at: [ 1522.030085][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1522.036580][T23224] __msan_chain_origin+0x57/0xa0 [ 1522.042505][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1522.049628][T23224] get_compat_msghdr+0x108/0x2b0 [ 1522.056097][T23224] do_recvmmsg+0xdaf/0x2300 [ 1522.061452][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1522.066743][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1522.074420][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1522.080827][T23224] __do_fast_syscall_32+0x102/0x160 [ 1522.086243][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1522.091549][T23224] do_SYSENTER_32+0x73/0x90 [ 1522.096447][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1522.104057][T23224] [ 1522.106591][T23224] Uninit was stored to memory at: [ 1522.112776][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1522.119279][T23224] __msan_chain_origin+0x57/0xa0 [ 1522.124687][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1522.130608][T23224] get_compat_msghdr+0x108/0x2b0 [ 1522.136439][T23224] do_recvmmsg+0xdaf/0x2300 [ 1522.143105][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1522.148348][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1522.156448][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1522.163113][T23224] __do_fast_syscall_32+0x102/0x160 [ 1522.170640][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1522.178921][T23224] do_SYSENTER_32+0x73/0x90 [ 1522.186427][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1522.193928][T23224] [ 1522.196370][T23224] Uninit was stored to memory at: [ 1522.201773][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1522.210756][T23224] __msan_chain_origin+0x57/0xa0 [ 1522.216492][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1522.222066][T23224] get_compat_msghdr+0x108/0x2b0 [ 1522.227348][T23224] do_recvmmsg+0xdaf/0x2300 [ 1522.232646][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1522.237721][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1522.244103][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1522.250776][T23224] __do_fast_syscall_32+0x102/0x160 [ 1522.256520][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1522.261634][T23224] do_SYSENTER_32+0x73/0x90 [ 1522.266579][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1522.273133][T23224] [ 1522.275518][T23224] Uninit was stored to memory at: [ 1522.280616][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1522.286665][T23224] __msan_chain_origin+0x57/0xa0 [ 1522.292023][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1522.297561][T23224] get_compat_msghdr+0x108/0x2b0 [ 1522.302810][T23224] do_recvmmsg+0xdaf/0x2300 [ 1522.307454][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1522.312743][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1522.318956][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1522.326163][T23224] __do_fast_syscall_32+0x102/0x160 [ 1522.331745][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1522.337096][T23224] do_SYSENTER_32+0x73/0x90 [ 1522.343852][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1522.352060][T23224] [ 1522.354975][T23224] Uninit was stored to memory at: [ 1522.360418][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1522.367044][T23224] __msan_chain_origin+0x57/0xa0 [ 1522.372596][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1522.379312][T23224] get_compat_msghdr+0x108/0x2b0 [ 1522.385416][T23224] do_recvmmsg+0xdaf/0x2300 [ 1522.390370][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1522.395521][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1522.402038][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1522.408463][T23224] __do_fast_syscall_32+0x102/0x160 [ 1522.415309][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1522.420288][T23224] do_SYSENTER_32+0x73/0x90 [ 1522.425121][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1522.431802][T23224] [ 1522.434302][T23224] Uninit was stored to memory at: [ 1522.439371][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1522.445275][T23224] __msan_chain_origin+0x57/0xa0 [ 1522.450428][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1522.455823][T23224] get_compat_msghdr+0x108/0x2b0 [ 1522.460812][T23224] do_recvmmsg+0xdaf/0x2300 [ 1522.465624][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1522.470451][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1522.476911][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1522.483459][T23224] __do_fast_syscall_32+0x102/0x160 [ 1522.489060][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1522.494460][T23224] do_SYSENTER_32+0x73/0x90 [ 1522.499438][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1522.505956][T23224] [ 1522.508312][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1522.515385][T23224] do_recvmmsg+0xbc/0x2300 [ 1522.519878][T23224] do_recvmmsg+0xbc/0x2300 [ 1522.826384][T23224] not chained 5590000 origins [ 1522.832444][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1522.842144][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.853756][T23224] Call Trace: [ 1522.857448][T23224] dump_stack+0x21c/0x280 [ 1522.862289][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1522.868889][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1522.876422][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1522.886903][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.902147][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1522.917239][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1522.934423][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1522.947787][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1522.962307][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1522.975626][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1522.982309][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1522.989689][T23224] __msan_chain_origin+0x57/0xa0 [ 1522.995495][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1523.001597][T23224] get_compat_msghdr+0x108/0x2b0 [ 1523.008439][T23224] do_recvmmsg+0xdaf/0x2300 [ 1523.014539][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1523.022473][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1523.031814][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1523.039330][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1523.046956][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1523.052923][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1523.058525][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1523.063627][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1523.070288][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1523.075891][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.082506][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.089152][T23224] __do_fast_syscall_32+0x102/0x160 [ 1523.095039][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1523.099945][T23224] do_SYSENTER_32+0x73/0x90 [ 1523.104602][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.111579][T23224] RIP: 0023:0xf7fd0549 [ 1523.116557][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1523.137430][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1523.146237][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1523.154702][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1523.163397][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1523.172132][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1523.181241][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1523.190402][T23224] Uninit was stored to memory at: [ 1523.196030][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1523.202095][T23224] __msan_chain_origin+0x57/0xa0 [ 1523.207979][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1523.213904][T23224] get_compat_msghdr+0x108/0x2b0 [ 1523.219123][T23224] do_recvmmsg+0xdaf/0x2300 [ 1523.223883][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1523.228737][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.235131][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.241679][T23224] __do_fast_syscall_32+0x102/0x160 [ 1523.248224][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1523.253544][T23224] do_SYSENTER_32+0x73/0x90 [ 1523.259030][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.266958][T23224] [ 1523.269311][T23224] Uninit was stored to memory at: [ 1523.274695][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1523.280818][T23224] __msan_chain_origin+0x57/0xa0 [ 1523.285800][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1523.290994][T23224] get_compat_msghdr+0x108/0x2b0 [ 1523.295988][T23224] do_recvmmsg+0xdaf/0x2300 [ 1523.300524][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1523.305411][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.311507][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.317833][T23224] __do_fast_syscall_32+0x102/0x160 [ 1523.323752][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1523.329117][T23224] do_SYSENTER_32+0x73/0x90 [ 1523.333936][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.341136][T23224] [ 1523.344207][T23224] Uninit was stored to memory at: [ 1523.349813][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1523.356117][T23224] __msan_chain_origin+0x57/0xa0 [ 1523.362509][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1523.368344][T23224] get_compat_msghdr+0x108/0x2b0 [ 1523.373497][T23224] do_recvmmsg+0xdaf/0x2300 [ 1523.378950][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1523.385231][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.392105][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.399082][T23224] __do_fast_syscall_32+0x102/0x160 [ 1523.404721][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1523.410507][T23224] do_SYSENTER_32+0x73/0x90 [ 1523.416720][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.423799][T23224] [ 1523.426240][T23224] Uninit was stored to memory at: [ 1523.431614][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1523.437717][T23224] __msan_chain_origin+0x57/0xa0 [ 1523.442751][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1523.447946][T23224] get_compat_msghdr+0x108/0x2b0 [ 1523.453562][T23224] do_recvmmsg+0xdaf/0x2300 [ 1523.458781][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1523.463753][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.470852][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.477673][T23224] __do_fast_syscall_32+0x102/0x160 [ 1523.483509][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1523.496047][T23224] do_SYSENTER_32+0x73/0x90 [ 1523.501156][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.508183][T23224] [ 1523.510890][T23224] Uninit was stored to memory at: [ 1523.516724][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1523.522975][T23224] __msan_chain_origin+0x57/0xa0 [ 1523.528512][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1523.535424][T23224] get_compat_msghdr+0x108/0x2b0 [ 1523.541530][T23224] do_recvmmsg+0xdaf/0x2300 [ 1523.547033][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1523.552229][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.558698][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.565330][T23224] __do_fast_syscall_32+0x102/0x160 [ 1523.571033][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1523.576324][T23224] do_SYSENTER_32+0x73/0x90 [ 1523.581670][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.588162][T23224] [ 1523.590663][T23224] Uninit was stored to memory at: [ 1523.595827][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1523.601676][T23224] __msan_chain_origin+0x57/0xa0 [ 1523.607506][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1523.613185][T23224] get_compat_msghdr+0x108/0x2b0 [ 1523.618569][T23224] do_recvmmsg+0xdaf/0x2300 [ 1523.623914][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1523.629152][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.635946][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.642735][T23224] __do_fast_syscall_32+0x102/0x160 [ 1523.648483][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1523.653980][T23224] do_SYSENTER_32+0x73/0x90 [ 1523.658781][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.665713][T23224] [ 1523.668947][T23224] Uninit was stored to memory at: [ 1523.674573][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1523.680512][T23224] __msan_chain_origin+0x57/0xa0 [ 1523.686092][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1523.691982][T23224] get_compat_msghdr+0x108/0x2b0 [ 1523.697008][T23224] do_recvmmsg+0xdaf/0x2300 [ 1523.701745][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1523.707270][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.713819][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.720467][T23224] __do_fast_syscall_32+0x102/0x160 [ 1523.725803][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1523.730933][T23224] do_SYSENTER_32+0x73/0x90 [ 1523.735896][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.743113][T23224] [ 1523.745564][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1523.753066][T23224] do_recvmmsg+0xbc/0x2300 [ 1523.757847][T23224] do_recvmmsg+0xbc/0x2300 [ 1524.007601][T23224] not chained 5600000 origins [ 1524.013062][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1524.022372][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1524.033431][T23224] Call Trace: [ 1524.037285][T23224] dump_stack+0x21c/0x280 [ 1524.042225][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1524.049787][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1524.056778][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1524.062627][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1524.069189][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1524.075981][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1524.082467][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1524.087700][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1524.093966][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1524.100089][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1524.105251][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1524.110718][T23224] __msan_chain_origin+0x57/0xa0 [ 1524.115955][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1524.121425][T23224] get_compat_msghdr+0x108/0x2b0 [ 1524.126891][T23224] do_recvmmsg+0xdaf/0x2300 [ 1524.131592][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1524.137406][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1524.144222][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1524.150207][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1524.156234][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1524.162055][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1524.167527][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1524.172822][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1524.179237][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1524.185095][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1524.191800][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1524.198529][T23224] __do_fast_syscall_32+0x102/0x160 [ 1524.204651][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1524.209874][T23224] do_SYSENTER_32+0x73/0x90 [ 1524.214537][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1524.222705][T23224] RIP: 0023:0xf7fd0549 [ 1524.228029][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1524.250325][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1524.260406][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1524.268892][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1524.277643][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1524.287431][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1524.297037][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1524.307055][T23224] Uninit was stored to memory at: [ 1524.314033][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1524.320546][T23224] __msan_chain_origin+0x57/0xa0 [ 1524.326047][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1524.331731][T23224] get_compat_msghdr+0x108/0x2b0 [ 1524.337661][T23224] do_recvmmsg+0xdaf/0x2300 [ 1524.342470][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1524.348516][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1524.355439][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1524.361996][T23224] __do_fast_syscall_32+0x102/0x160 [ 1524.367851][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1524.373207][T23224] do_SYSENTER_32+0x73/0x90 [ 1524.378331][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1524.386296][T23224] [ 1524.388762][T23224] Uninit was stored to memory at: [ 1524.394575][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1524.400782][T23224] __msan_chain_origin+0x57/0xa0 [ 1524.406332][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1524.412105][T23224] get_compat_msghdr+0x108/0x2b0 [ 1524.417485][T23224] do_recvmmsg+0xdaf/0x2300 [ 1524.422516][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1524.427926][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1524.434913][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1524.441713][T23224] __do_fast_syscall_32+0x102/0x160 [ 1524.447374][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1524.452668][T23224] do_SYSENTER_32+0x73/0x90 [ 1524.458095][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1524.464905][T23224] [ 1524.467579][T23224] Uninit was stored to memory at: [ 1524.474189][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1524.480686][T23224] __msan_chain_origin+0x57/0xa0 [ 1524.486364][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1524.492335][T23224] get_compat_msghdr+0x108/0x2b0 [ 1524.497561][T23224] do_recvmmsg+0xdaf/0x2300 [ 1524.502670][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1524.508530][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1524.515858][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1524.523174][T23224] __do_fast_syscall_32+0x102/0x160 [ 1524.528554][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1524.533637][T23224] do_SYSENTER_32+0x73/0x90 [ 1524.539048][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1524.546844][T23224] [ 1524.549307][T23224] Uninit was stored to memory at: [ 1524.555331][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1524.562672][T23224] __msan_chain_origin+0x57/0xa0 [ 1524.567816][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1524.573238][T23224] get_compat_msghdr+0x108/0x2b0 [ 1524.578507][T23224] do_recvmmsg+0xdaf/0x2300 [ 1524.583677][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1524.589691][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1524.596114][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1524.602706][T23224] __do_fast_syscall_32+0x102/0x160 [ 1524.608390][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1524.613825][T23224] do_SYSENTER_32+0x73/0x90 [ 1524.619384][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1524.627019][T23224] [ 1524.629669][T23224] Uninit was stored to memory at: [ 1524.636148][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1524.643151][T23224] __msan_chain_origin+0x57/0xa0 [ 1524.649599][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1524.655386][T23224] get_compat_msghdr+0x108/0x2b0 [ 1524.661782][T23224] do_recvmmsg+0xdaf/0x2300 [ 1524.667546][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1524.673344][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1524.680581][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1524.687433][T23224] __do_fast_syscall_32+0x102/0x160 [ 1524.693700][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1524.698825][T23224] do_SYSENTER_32+0x73/0x90 [ 1524.703970][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1524.711105][T23224] [ 1524.713466][T23224] Uninit was stored to memory at: [ 1524.718984][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1524.725143][T23224] __msan_chain_origin+0x57/0xa0 [ 1524.730342][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1524.735924][T23224] get_compat_msghdr+0x108/0x2b0 [ 1524.741239][T23224] do_recvmmsg+0xdaf/0x2300 [ 1524.746081][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1524.752032][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1524.759932][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1524.767473][T23224] __do_fast_syscall_32+0x102/0x160 [ 1524.773564][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1524.778521][T23224] do_SYSENTER_32+0x73/0x90 [ 1524.783725][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1524.790153][T23224] [ 1524.793199][T23224] Uninit was stored to memory at: [ 1524.799060][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1524.804847][T23224] __msan_chain_origin+0x57/0xa0 [ 1524.809908][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1524.815402][T23224] get_compat_msghdr+0x108/0x2b0 [ 1524.820559][T23224] do_recvmmsg+0xdaf/0x2300 [ 1524.825185][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1524.829937][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1524.836300][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1524.842944][T23224] __do_fast_syscall_32+0x102/0x160 [ 1524.848206][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1524.853180][T23224] do_SYSENTER_32+0x73/0x90 [ 1524.857749][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1524.864697][T23224] [ 1524.867052][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1524.873761][T23224] do_recvmmsg+0xbc/0x2300 [ 1524.878221][T23224] do_recvmmsg+0xbc/0x2300 [ 1525.152750][T23221] not chained 5610000 origins [ 1525.157930][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1525.166768][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.176847][T23221] Call Trace: [ 1525.180187][T23221] dump_stack+0x21c/0x280 [ 1525.184557][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1525.190299][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1525.196427][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1525.201642][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1525.207466][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1525.213554][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1525.218942][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1525.224162][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1525.229999][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1525.236086][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1525.241053][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1525.246268][T23221] __msan_chain_origin+0x57/0xa0 [ 1525.251245][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1525.256379][T23221] get_compat_msghdr+0x108/0x2b0 [ 1525.261424][T23221] do_recvmmsg+0xdaf/0x2300 [ 1525.266037][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1525.272132][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1525.277530][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1525.283546][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1525.288797][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1525.294452][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1525.299827][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1525.304625][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1525.309319][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1525.315139][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1525.320384][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.326481][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.332679][T23221] __do_fast_syscall_32+0x102/0x160 [ 1525.337907][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1525.342852][T23221] do_SYSENTER_32+0x73/0x90 [ 1525.347379][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.361448][T23221] RIP: 0023:0xf7fd0549 [ 1525.365664][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1525.385298][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1525.393918][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1525.401918][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1525.409922][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1525.417919][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1525.425923][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1525.433914][T23221] Uninit was stored to memory at: [ 1525.438974][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1525.444725][T23221] __msan_chain_origin+0x57/0xa0 [ 1525.449883][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1525.455134][T23221] get_compat_msghdr+0x108/0x2b0 [ 1525.460099][T23221] do_recvmmsg+0xdaf/0x2300 [ 1525.464625][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1525.469323][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.475684][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.481963][T23221] __do_fast_syscall_32+0x102/0x160 [ 1525.487296][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1525.492160][T23221] do_SYSENTER_32+0x73/0x90 [ 1525.496782][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.503115][T23221] [ 1525.505457][T23221] Uninit was stored to memory at: [ 1525.510535][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1525.516309][T23221] __msan_chain_origin+0x57/0xa0 [ 1525.521273][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1525.526425][T23221] get_compat_msghdr+0x108/0x2b0 [ 1525.531397][T23221] do_recvmmsg+0xdaf/0x2300 [ 1525.536102][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1525.540823][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.547356][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.553540][T23221] __do_fast_syscall_32+0x102/0x160 [ 1525.558800][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1525.563712][T23221] do_SYSENTER_32+0x73/0x90 [ 1525.568243][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.574566][T23221] [ 1525.576899][T23221] Uninit was stored to memory at: [ 1525.582031][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1525.587945][T23221] __msan_chain_origin+0x57/0xa0 [ 1525.593073][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1525.598254][T23221] get_compat_msghdr+0x108/0x2b0 [ 1525.603219][T23221] do_recvmmsg+0xdaf/0x2300 [ 1525.607727][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1525.612441][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.618551][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.624755][T23221] __do_fast_syscall_32+0x102/0x160 [ 1525.629968][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1525.634824][T23221] do_SYSENTER_32+0x73/0x90 [ 1525.639338][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.645662][T23221] [ 1525.648005][T23221] Uninit was stored to memory at: [ 1525.653063][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1525.658997][T23221] __msan_chain_origin+0x57/0xa0 [ 1525.663965][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1525.669123][T23221] get_compat_msghdr+0x108/0x2b0 [ 1525.674262][T23221] do_recvmmsg+0xdaf/0x2300 [ 1525.678785][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1525.684112][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.690223][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.696428][T23221] __do_fast_syscall_32+0x102/0x160 [ 1525.701758][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1525.706657][T23221] do_SYSENTER_32+0x73/0x90 [ 1525.711182][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.717518][T23221] [ 1525.719870][T23221] Uninit was stored to memory at: [ 1525.724933][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1525.730691][T23221] __msan_chain_origin+0x57/0xa0 [ 1525.736089][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1525.741325][T23221] get_compat_msghdr+0x108/0x2b0 [ 1525.746288][T23221] do_recvmmsg+0xdaf/0x2300 [ 1525.750819][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1525.755528][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.761714][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.767917][T23221] __do_fast_syscall_32+0x102/0x160 [ 1525.773150][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1525.778032][T23221] do_SYSENTER_32+0x73/0x90 [ 1525.782578][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.789101][T23221] [ 1525.791433][T23221] Uninit was stored to memory at: [ 1525.796490][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1525.802239][T23221] __msan_chain_origin+0x57/0xa0 [ 1525.807188][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1525.812314][T23221] get_compat_msghdr+0x108/0x2b0 [ 1525.817291][T23221] do_recvmmsg+0xdaf/0x2300 [ 1525.821803][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1525.826490][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.832751][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.838944][T23221] __do_fast_syscall_32+0x102/0x160 [ 1525.844153][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1525.849026][T23221] do_SYSENTER_32+0x73/0x90 [ 1525.853549][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.859883][T23221] [ 1525.862224][T23221] Uninit was stored to memory at: [ 1525.867273][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1525.873036][T23221] __msan_chain_origin+0x57/0xa0 [ 1525.879561][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1525.884702][T23221] get_compat_msghdr+0x108/0x2b0 [ 1525.889671][T23221] do_recvmmsg+0xdaf/0x2300 [ 1525.894203][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1525.898916][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.905019][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.911198][T23221] __do_fast_syscall_32+0x102/0x160 [ 1525.916522][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1525.921385][T23221] do_SYSENTER_32+0x73/0x90 [ 1525.925913][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.932248][T23221] [ 1525.934629][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1525.941414][T23221] do_recvmmsg+0xbc/0x2300 [ 1525.945843][T23221] do_recvmmsg+0xbc/0x2300 [ 1526.001516][T23224] not chained 5620000 origins [ 1526.006385][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1526.015157][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.025229][T23224] Call Trace: [ 1526.028546][T23224] dump_stack+0x21c/0x280 [ 1526.033084][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1526.038832][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1526.044921][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1526.050158][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1526.055983][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1526.062246][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1526.067648][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1526.072875][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1526.078531][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1526.084620][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1526.089616][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1526.094836][T23224] __msan_chain_origin+0x57/0xa0 [ 1526.099803][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1526.104950][T23224] get_compat_msghdr+0x108/0x2b0 [ 1526.109930][T23224] do_recvmmsg+0xdaf/0x2300 [ 1526.114472][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1526.119807][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1526.128532][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1526.133798][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1526.139485][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1526.144829][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1526.149627][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1526.154345][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1526.160199][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1526.165435][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.171544][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.177761][T23224] __do_fast_syscall_32+0x102/0x160 [ 1526.183014][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1526.187927][T23224] do_SYSENTER_32+0x73/0x90 [ 1526.192472][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.198829][T23224] RIP: 0023:0xf7fd0549 [ 1526.202926][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1526.222679][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1526.231129][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1526.239140][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1526.247141][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1526.255140][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1526.263143][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1526.271139][T23224] Uninit was stored to memory at: [ 1526.276225][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1526.281997][T23224] __msan_chain_origin+0x57/0xa0 [ 1526.287239][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1526.292408][T23224] get_compat_msghdr+0x108/0x2b0 [ 1526.297376][T23224] do_recvmmsg+0xdaf/0x2300 [ 1526.301934][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1526.306650][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.312746][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.318959][T23224] __do_fast_syscall_32+0x102/0x160 [ 1526.324183][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1526.329097][T23224] do_SYSENTER_32+0x73/0x90 [ 1526.333631][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.339962][T23224] [ 1526.342301][T23224] Uninit was stored to memory at: [ 1526.347357][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1526.353097][T23224] __msan_chain_origin+0x57/0xa0 [ 1526.358064][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1526.363199][T23224] get_compat_msghdr+0x108/0x2b0 [ 1526.368155][T23224] do_recvmmsg+0xdaf/0x2300 [ 1526.373280][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1526.377968][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.384058][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.390244][T23224] __do_fast_syscall_32+0x102/0x160 [ 1526.395478][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1526.400356][T23224] do_SYSENTER_32+0x73/0x90 [ 1526.404882][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.411208][T23224] [ 1526.413541][T23224] Uninit was stored to memory at: [ 1526.418704][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1526.424475][T23224] __msan_chain_origin+0x57/0xa0 [ 1526.429467][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1526.434611][T23224] get_compat_msghdr+0x108/0x2b0 [ 1526.439672][T23224] do_recvmmsg+0xdaf/0x2300 [ 1526.444418][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1526.449115][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.455210][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.461410][T23224] __do_fast_syscall_32+0x102/0x160 [ 1526.466634][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1526.471492][T23224] do_SYSENTER_32+0x73/0x90 [ 1526.476031][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.482354][T23224] [ 1526.484688][T23224] Uninit was stored to memory at: [ 1526.490092][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1526.495841][T23224] __msan_chain_origin+0x57/0xa0 [ 1526.501503][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1526.506656][T23224] get_compat_msghdr+0x108/0x2b0 [ 1526.511619][T23224] do_recvmmsg+0xdaf/0x2300 [ 1526.516152][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1526.520961][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.527048][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.533222][T23224] __do_fast_syscall_32+0x102/0x160 [ 1526.539232][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1526.544479][T23224] do_SYSENTER_32+0x73/0x90 [ 1526.550315][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.556738][T23224] [ 1526.559074][T23224] Uninit was stored to memory at: [ 1526.564124][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1526.569864][T23224] __msan_chain_origin+0x57/0xa0 [ 1526.574821][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1526.579942][T23224] get_compat_msghdr+0x108/0x2b0 [ 1526.584900][T23224] do_recvmmsg+0xdaf/0x2300 [ 1526.589590][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1526.594299][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.600406][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.606581][T23224] __do_fast_syscall_32+0x102/0x160 [ 1526.611802][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1526.616684][T23224] do_SYSENTER_32+0x73/0x90 [ 1526.621219][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.627980][T23224] [ 1526.630332][T23224] Uninit was stored to memory at: [ 1526.635377][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1526.641105][T23224] __msan_chain_origin+0x57/0xa0 [ 1526.646058][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1526.651202][T23224] get_compat_msghdr+0x108/0x2b0 [ 1526.656159][T23224] do_recvmmsg+0xdaf/0x2300 [ 1526.660833][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1526.665797][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.671974][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.678165][T23224] __do_fast_syscall_32+0x102/0x160 [ 1526.683376][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1526.688246][T23224] do_SYSENTER_32+0x73/0x90 [ 1526.692777][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.699111][T23224] [ 1526.701856][T23224] Uninit was stored to memory at: [ 1526.708135][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1526.713869][T23224] __msan_chain_origin+0x57/0xa0 [ 1526.718814][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1526.723946][T23224] get_compat_msghdr+0x108/0x2b0 [ 1526.728899][T23224] do_recvmmsg+0xdaf/0x2300 [ 1526.733408][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1526.738178][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.744266][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.750446][T23224] __do_fast_syscall_32+0x102/0x160 [ 1526.755871][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1526.761893][T23224] do_SYSENTER_32+0x73/0x90 [ 1526.766787][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.773156][T23224] [ 1526.775496][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1526.782209][T23224] do_recvmmsg+0xbc/0x2300 [ 1526.786643][T23224] do_recvmmsg+0xbc/0x2300 [ 1527.094650][T23224] not chained 5630000 origins [ 1527.099386][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1527.108189][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.118289][T23224] Call Trace: [ 1527.121603][T23224] dump_stack+0x21c/0x280 [ 1527.125959][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1527.131791][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1527.138225][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1527.144170][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1527.150022][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1527.156111][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1527.161721][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1527.166943][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1527.172686][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1527.178775][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1527.183734][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1527.188980][T23224] __msan_chain_origin+0x57/0xa0 [ 1527.194071][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1527.199394][T23224] get_compat_msghdr+0x108/0x2b0 [ 1527.204358][T23224] do_recvmmsg+0xdaf/0x2300 [ 1527.208976][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1527.214199][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1527.220201][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1527.225421][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1527.231069][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1527.236372][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1527.241151][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1527.245851][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1527.253497][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1527.258718][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.264859][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.273905][T23224] __do_fast_syscall_32+0x102/0x160 [ 1527.279157][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1527.284050][T23224] do_SYSENTER_32+0x73/0x90 [ 1527.288579][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.294986][T23224] RIP: 0023:0xf7fd0549 [ 1527.299148][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1527.318858][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1527.327386][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1527.335385][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1527.343370][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1527.351357][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1527.359347][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1527.367329][T23224] Uninit was stored to memory at: [ 1527.372376][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1527.378103][T23224] __msan_chain_origin+0x57/0xa0 [ 1527.383145][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1527.388288][T23224] get_compat_msghdr+0x108/0x2b0 [ 1527.393272][T23224] do_recvmmsg+0xdaf/0x2300 [ 1527.397812][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1527.402505][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.408592][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.414767][T23224] __do_fast_syscall_32+0x102/0x160 [ 1527.419984][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1527.424858][T23224] do_SYSENTER_32+0x73/0x90 [ 1527.429725][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.436047][T23224] [ 1527.438373][T23224] Uninit was stored to memory at: [ 1527.443529][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1527.449260][T23224] __msan_chain_origin+0x57/0xa0 [ 1527.454263][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1527.459386][T23224] get_compat_msghdr+0x108/0x2b0 [ 1527.464424][T23224] do_recvmmsg+0xdaf/0x2300 [ 1527.468936][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1527.473621][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.479698][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.485949][T23224] __do_fast_syscall_32+0x102/0x160 [ 1527.491156][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1527.496017][T23224] do_SYSENTER_32+0x73/0x90 [ 1527.500535][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.506856][T23224] [ 1527.509180][T23224] Uninit was stored to memory at: [ 1527.514235][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1527.519969][T23224] __msan_chain_origin+0x57/0xa0 [ 1527.524916][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1527.530053][T23224] get_compat_msghdr+0x108/0x2b0 [ 1527.535002][T23224] do_recvmmsg+0xdaf/0x2300 [ 1527.539515][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1527.544205][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.550284][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.556451][T23224] __do_fast_syscall_32+0x102/0x160 [ 1527.561659][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1527.566520][T23224] do_SYSENTER_32+0x73/0x90 [ 1527.571033][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.577451][T23224] [ 1527.579802][T23224] Uninit was stored to memory at: [ 1527.584861][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1527.590592][T23224] __msan_chain_origin+0x57/0xa0 [ 1527.595538][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1527.600658][T23224] get_compat_msghdr+0x108/0x2b0 [ 1527.605613][T23224] do_recvmmsg+0xdaf/0x2300 [ 1527.610126][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1527.614829][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.620935][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.627127][T23224] __do_fast_syscall_32+0x102/0x160 [ 1527.632360][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1527.637303][T23224] do_SYSENTER_32+0x73/0x90 [ 1527.641852][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.648230][T23224] [ 1527.650575][T23224] Uninit was stored to memory at: [ 1527.655646][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1527.661398][T23224] __msan_chain_origin+0x57/0xa0 [ 1527.666810][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1527.671960][T23224] get_compat_msghdr+0x108/0x2b0 [ 1527.676964][T23224] do_recvmmsg+0xdaf/0x2300 [ 1527.681499][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1527.686205][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.692295][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.698472][T23224] __do_fast_syscall_32+0x102/0x160 [ 1527.703704][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1527.708579][T23224] do_SYSENTER_32+0x73/0x90 [ 1527.713105][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.719429][T23224] [ 1527.721773][T23224] Uninit was stored to memory at: [ 1527.726836][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1527.732578][T23224] __msan_chain_origin+0x57/0xa0 [ 1527.737672][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1527.742936][T23224] get_compat_msghdr+0x108/0x2b0 [ 1527.747896][T23224] do_recvmmsg+0xdaf/0x2300 [ 1527.752416][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1527.757113][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.763213][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.769419][T23224] __do_fast_syscall_32+0x102/0x160 [ 1527.774672][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1527.779569][T23224] do_SYSENTER_32+0x73/0x90 [ 1527.784095][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.790437][T23224] [ 1527.792767][T23224] Uninit was stored to memory at: [ 1527.797905][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1527.803731][T23224] __msan_chain_origin+0x57/0xa0 [ 1527.808715][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1527.813853][T23224] get_compat_msghdr+0x108/0x2b0 [ 1527.818840][T23224] do_recvmmsg+0xdaf/0x2300 [ 1527.823387][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1527.828092][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.834188][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.840370][T23224] __do_fast_syscall_32+0x102/0x160 [ 1527.845617][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1527.850482][T23224] do_SYSENTER_32+0x73/0x90 [ 1527.855002][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.861342][T23224] [ 1527.863676][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1527.870386][T23224] do_recvmmsg+0xbc/0x2300 [ 1527.874852][T23224] do_recvmmsg+0xbc/0x2300 [ 1527.899128][T23224] not chained 5640000 origins [ 1527.903999][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1527.912843][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.922918][T23224] Call Trace: [ 1527.926236][T23224] dump_stack+0x21c/0x280 [ 1527.930589][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1527.936336][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1527.942423][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1527.947636][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1527.953494][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1527.959666][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1527.965099][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1527.970323][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1527.975977][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1527.982061][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1527.987013][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1527.992248][T23224] __msan_chain_origin+0x57/0xa0 [ 1527.997204][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1528.002338][T23224] get_compat_msghdr+0x108/0x2b0 [ 1528.007292][T23224] do_recvmmsg+0xdaf/0x2300 [ 1528.011814][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1528.017048][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1528.022959][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1528.028204][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1528.033874][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1528.039171][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1528.043950][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1528.048638][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1528.054469][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1528.059680][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1528.065793][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1528.073615][T23224] __do_fast_syscall_32+0x102/0x160 [ 1528.078827][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1528.083696][T23224] do_SYSENTER_32+0x73/0x90 [ 1528.088210][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1528.094543][T23224] RIP: 0023:0xf7fd0549 [ 1528.098629][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1528.118626][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1528.127068][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1528.135064][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1528.143057][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1528.151053][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1528.159226][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1528.167225][T23224] Uninit was stored to memory at: [ 1528.172272][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1528.178006][T23224] __msan_chain_origin+0x57/0xa0 [ 1528.183054][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1528.188169][T23224] get_compat_msghdr+0x108/0x2b0 [ 1528.193129][T23224] do_recvmmsg+0xdaf/0x2300 [ 1528.197640][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1528.202331][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1528.208421][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1528.214606][T23224] __do_fast_syscall_32+0x102/0x160 [ 1528.219823][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1528.224680][T23224] do_SYSENTER_32+0x73/0x90 [ 1528.229216][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1528.235532][T23224] [ 1528.237859][T23224] Uninit was stored to memory at: [ 1528.242914][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1528.248642][T23224] __msan_chain_origin+0x57/0xa0 [ 1528.253598][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1528.258752][T23224] get_compat_msghdr+0x108/0x2b0 [ 1528.263709][T23224] do_recvmmsg+0xdaf/0x2300 [ 1528.268235][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1528.272920][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1528.279259][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1528.285432][T23224] __do_fast_syscall_32+0x102/0x160 [ 1528.290642][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1528.295500][T23224] do_SYSENTER_32+0x73/0x90 [ 1528.300028][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1528.306346][T23224] [ 1528.308686][T23224] Uninit was stored to memory at: [ 1528.313726][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1528.319444][T23224] __msan_chain_origin+0x57/0xa0 [ 1528.324414][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1528.329539][T23224] get_compat_msghdr+0x108/0x2b0 [ 1528.334521][T23224] do_recvmmsg+0xdaf/0x2300 [ 1528.339033][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1528.343733][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1528.349833][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1528.356009][T23224] __do_fast_syscall_32+0x102/0x160 [ 1528.361236][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1528.366099][T23224] do_SYSENTER_32+0x73/0x90 [ 1528.370617][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1528.376944][T23224] [ 1528.379303][T23224] Uninit was stored to memory at: [ 1528.384375][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1528.390131][T23224] __msan_chain_origin+0x57/0xa0 [ 1528.395110][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1528.400237][T23224] get_compat_msghdr+0x108/0x2b0 [ 1528.405283][T23224] do_recvmmsg+0xdaf/0x2300 [ 1528.409850][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1528.414539][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1528.420620][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1528.426810][T23224] __do_fast_syscall_32+0x102/0x160 [ 1528.432016][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1528.436880][T23224] do_SYSENTER_32+0x73/0x90 [ 1528.441391][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1528.447719][T23224] [ 1528.450045][T23224] Uninit was stored to memory at: [ 1528.455437][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1528.461162][T23224] __msan_chain_origin+0x57/0xa0 [ 1528.466131][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1528.471251][T23224] get_compat_msghdr+0x108/0x2b0 [ 1528.476309][T23224] do_recvmmsg+0xdaf/0x2300 [ 1528.480924][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1528.485624][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1528.491707][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1528.497887][T23224] __do_fast_syscall_32+0x102/0x160 [ 1528.503123][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1528.508076][T23224] do_SYSENTER_32+0x73/0x90 [ 1528.512594][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1528.518936][T23224] [ 1528.521268][T23224] Uninit was stored to memory at: [ 1528.526325][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1528.532067][T23224] __msan_chain_origin+0x57/0xa0 [ 1528.537050][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1528.542203][T23224] get_compat_msghdr+0x108/0x2b0 [ 1528.547214][T23224] do_recvmmsg+0xdaf/0x2300 [ 1528.551740][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1528.556447][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1528.562546][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1528.568723][T23224] __do_fast_syscall_32+0x102/0x160 [ 1528.573958][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1528.579009][T23224] do_SYSENTER_32+0x73/0x90 [ 1528.583538][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1528.589864][T23224] [ 1528.592222][T23224] Uninit was stored to memory at: [ 1528.597291][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1528.603043][T23224] __msan_chain_origin+0x57/0xa0 [ 1528.607998][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1528.613137][T23224] get_compat_msghdr+0x108/0x2b0 [ 1528.618097][T23224] do_recvmmsg+0xdaf/0x2300 [ 1528.622626][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1528.627338][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1528.633422][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1528.639599][T23224] __do_fast_syscall_32+0x102/0x160 [ 1528.644833][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1528.649698][T23224] do_SYSENTER_32+0x73/0x90 [ 1528.654211][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1528.660538][T23224] [ 1528.662876][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1528.669581][T23224] do_recvmmsg+0xbc/0x2300 [ 1528.674038][T23224] do_recvmmsg+0xbc/0x2300 [ 1529.042548][T23221] not chained 5650000 origins [ 1529.047312][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1529.056110][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1529.066182][T23221] Call Trace: [ 1529.069501][T23221] dump_stack+0x21c/0x280 [ 1529.073863][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1529.079655][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1529.085749][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.090968][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1529.096990][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1529.103075][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1529.108472][T23221] ? __irq_exit_rcu+0x7a/0x270 [ 1529.113263][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.118533][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1529.125584][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1529.131701][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1529.136681][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.141898][T23221] __msan_chain_origin+0x57/0xa0 [ 1529.146860][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1529.152081][T23221] get_compat_msghdr+0x108/0x2b0 [ 1529.157081][T23221] do_recvmmsg+0xdaf/0x2300 [ 1529.161602][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1529.167688][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.172907][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1529.178817][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.184038][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1529.189689][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1529.195005][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1529.199789][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1529.204601][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1529.210436][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.215663][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.221760][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.227946][T23221] __do_fast_syscall_32+0x102/0x160 [ 1529.233247][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1529.238129][T23221] do_SYSENTER_32+0x73/0x90 [ 1529.242655][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.248996][T23221] RIP: 0023:0xf7fd0549 [ 1529.253080][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1529.272711][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1529.281149][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1529.289227][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.297222][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.305213][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1529.313214][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.321210][T23221] Uninit was stored to memory at: [ 1529.326286][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1529.332032][T23221] __msan_chain_origin+0x57/0xa0 [ 1529.337010][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1529.342168][T23221] get_compat_msghdr+0x108/0x2b0 [ 1529.347142][T23221] do_recvmmsg+0xdaf/0x2300 [ 1529.351686][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1529.356387][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.362483][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.368666][T23221] __do_fast_syscall_32+0x102/0x160 [ 1529.373887][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1529.378756][T23221] do_SYSENTER_32+0x73/0x90 [ 1529.383281][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.389608][T23221] [ 1529.391964][T23221] Uninit was stored to memory at: [ 1529.397019][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1529.402758][T23221] __msan_chain_origin+0x57/0xa0 [ 1529.407739][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1529.412873][T23221] get_compat_msghdr+0x108/0x2b0 [ 1529.417836][T23221] do_recvmmsg+0xdaf/0x2300 [ 1529.422353][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1529.427041][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.433156][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.439333][T23221] __do_fast_syscall_32+0x102/0x160 [ 1529.444556][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1529.449437][T23221] do_SYSENTER_32+0x73/0x90 [ 1529.453977][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.460314][T23221] [ 1529.462655][T23221] Uninit was stored to memory at: [ 1529.467708][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1529.473454][T23221] __msan_chain_origin+0x57/0xa0 [ 1529.478418][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1529.483582][T23221] get_compat_msghdr+0x108/0x2b0 [ 1529.488564][T23221] do_recvmmsg+0xdaf/0x2300 [ 1529.493101][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1529.497807][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.503910][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.510101][T23221] __do_fast_syscall_32+0x102/0x160 [ 1529.515359][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1529.520241][T23221] do_SYSENTER_32+0x73/0x90 [ 1529.524773][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.531119][T23221] [ 1529.533484][T23221] Uninit was stored to memory at: [ 1529.538536][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1529.544279][T23221] __msan_chain_origin+0x57/0xa0 [ 1529.549329][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1529.554468][T23221] get_compat_msghdr+0x108/0x2b0 [ 1529.559446][T23221] do_recvmmsg+0xdaf/0x2300 [ 1529.563973][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1529.568684][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.574787][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.580968][T23221] __do_fast_syscall_32+0x102/0x160 [ 1529.586216][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1529.591113][T23221] do_SYSENTER_32+0x73/0x90 [ 1529.595662][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.602008][T23221] [ 1529.604345][T23221] Uninit was stored to memory at: [ 1529.609404][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1529.615145][T23221] __msan_chain_origin+0x57/0xa0 [ 1529.620125][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1529.625254][T23221] get_compat_msghdr+0x108/0x2b0 [ 1529.630222][T23221] do_recvmmsg+0xdaf/0x2300 [ 1529.634747][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1529.639442][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.645534][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.651718][T23221] __do_fast_syscall_32+0x102/0x160 [ 1529.656959][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1529.661827][T23221] do_SYSENTER_32+0x73/0x90 [ 1529.666643][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.672971][T23221] [ 1529.675302][T23221] Uninit was stored to memory at: [ 1529.680357][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1529.686135][T23221] __msan_chain_origin+0x57/0xa0 [ 1529.691087][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1529.696220][T23221] get_compat_msghdr+0x108/0x2b0 [ 1529.701195][T23221] do_recvmmsg+0xdaf/0x2300 [ 1529.705706][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1529.710395][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.716475][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.723379][T23221] __do_fast_syscall_32+0x102/0x160 [ 1529.728720][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1529.733594][T23221] do_SYSENTER_32+0x73/0x90 [ 1529.738107][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.744542][T23221] [ 1529.746871][T23221] Uninit was stored to memory at: [ 1529.751932][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1529.757674][T23221] __msan_chain_origin+0x57/0xa0 [ 1529.762633][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1529.767764][T23221] get_compat_msghdr+0x108/0x2b0 [ 1529.772718][T23221] do_recvmmsg+0xdaf/0x2300 [ 1529.777234][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1529.781943][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.788031][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.794282][T23221] __do_fast_syscall_32+0x102/0x160 [ 1529.799491][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1529.804361][T23221] do_SYSENTER_32+0x73/0x90 [ 1529.808885][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.815212][T23221] [ 1529.817575][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1529.824283][T23221] do_recvmmsg+0xbc/0x2300 [ 1529.828721][T23221] do_recvmmsg+0xbc/0x2300 [ 1529.847948][T23221] not chained 5660000 origins [ 1529.852671][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1529.861443][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1529.871526][T23221] Call Trace: [ 1529.874854][T23221] dump_stack+0x21c/0x280 [ 1529.879216][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1529.884984][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1529.891079][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.896310][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1529.902161][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1529.908261][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1529.913660][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.918898][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1529.924564][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1529.930665][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1529.935629][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.940848][T23221] __msan_chain_origin+0x57/0xa0 [ 1529.945805][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1529.951036][T23221] get_compat_msghdr+0x108/0x2b0 [ 1529.956015][T23221] do_recvmmsg+0xdaf/0x2300 [ 1529.960567][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1529.966791][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.972029][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1529.977951][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1529.983199][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1529.988862][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1529.994173][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1529.998958][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1530.003653][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1530.009469][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1530.014688][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.020788][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.026976][T23221] __do_fast_syscall_32+0x102/0x160 [ 1530.032207][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1530.037087][T23221] do_SYSENTER_32+0x73/0x90 [ 1530.041618][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.047965][T23221] RIP: 0023:0xf7fd0549 [ 1530.052050][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1530.071769][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1530.080236][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1530.088236][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1530.096247][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1530.104249][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1530.112248][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1530.120593][T23221] Uninit was stored to memory at: [ 1530.125662][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1530.131420][T23221] __msan_chain_origin+0x57/0xa0 [ 1530.136388][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1530.141618][T23221] get_compat_msghdr+0x108/0x2b0 [ 1530.146716][T23221] do_recvmmsg+0xdaf/0x2300 [ 1530.151260][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1530.155969][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.162066][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.168254][T23221] __do_fast_syscall_32+0x102/0x160 [ 1530.173484][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1530.178359][T23221] do_SYSENTER_32+0x73/0x90 [ 1530.182916][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.190818][T23221] [ 1530.193159][T23221] Uninit was stored to memory at: [ 1530.198212][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1530.203953][T23221] __msan_chain_origin+0x57/0xa0 [ 1530.208917][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1530.214059][T23221] get_compat_msghdr+0x108/0x2b0 [ 1530.219151][T23221] do_recvmmsg+0xdaf/0x2300 [ 1530.223829][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1530.229160][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.235260][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.241811][T23221] __do_fast_syscall_32+0x102/0x160 [ 1530.247036][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1530.251908][T23221] do_SYSENTER_32+0x73/0x90 [ 1530.256431][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.262754][T23221] [ 1530.265084][T23221] Uninit was stored to memory at: [ 1530.270132][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1530.275879][T23221] __msan_chain_origin+0x57/0xa0 [ 1530.280843][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1530.286035][T23221] get_compat_msghdr+0x108/0x2b0 [ 1530.290987][T23221] do_recvmmsg+0xdaf/0x2300 [ 1530.295511][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1530.300203][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.306293][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.312487][T23221] __do_fast_syscall_32+0x102/0x160 [ 1530.317732][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1530.322618][T23221] do_SYSENTER_32+0x73/0x90 [ 1530.327148][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.333474][T23221] [ 1530.335813][T23221] Uninit was stored to memory at: [ 1530.340863][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1530.346602][T23221] __msan_chain_origin+0x57/0xa0 [ 1530.351553][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1530.356783][T23221] get_compat_msghdr+0x108/0x2b0 [ 1530.361741][T23221] do_recvmmsg+0xdaf/0x2300 [ 1530.366258][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1530.370949][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.377035][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.383214][T23221] __do_fast_syscall_32+0x102/0x160 [ 1530.388444][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1530.393333][T23221] do_SYSENTER_32+0x73/0x90 [ 1530.397852][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.404199][T23221] [ 1530.406533][T23221] Uninit was stored to memory at: [ 1530.411599][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1530.417344][T23221] __msan_chain_origin+0x57/0xa0 [ 1530.422295][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1530.427419][T23221] get_compat_msghdr+0x108/0x2b0 [ 1530.432388][T23221] do_recvmmsg+0xdaf/0x2300 [ 1530.437690][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1530.442380][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.448458][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.454628][T23221] __do_fast_syscall_32+0x102/0x160 [ 1530.459837][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1530.464697][T23221] do_SYSENTER_32+0x73/0x90 [ 1530.469229][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.475553][T23221] [ 1530.477882][T23221] Uninit was stored to memory at: [ 1530.482927][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1530.489124][T23221] __msan_chain_origin+0x57/0xa0 [ 1530.494190][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1530.499493][T23221] get_compat_msghdr+0x108/0x2b0 [ 1530.504450][T23221] do_recvmmsg+0xdaf/0x2300 [ 1530.508971][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1530.513659][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.519855][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.526724][T23221] __do_fast_syscall_32+0x102/0x160 [ 1530.531964][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1530.536851][T23221] do_SYSENTER_32+0x73/0x90 [ 1530.541373][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.547701][T23221] [ 1530.550039][T23221] Uninit was stored to memory at: [ 1530.555095][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1530.560836][T23221] __msan_chain_origin+0x57/0xa0 [ 1530.565811][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1530.570939][T23221] get_compat_msghdr+0x108/0x2b0 [ 1530.575894][T23221] do_recvmmsg+0xdaf/0x2300 [ 1530.580410][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1530.585107][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.591221][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.597419][T23221] __do_fast_syscall_32+0x102/0x160 [ 1530.602635][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1530.607493][T23221] do_SYSENTER_32+0x73/0x90 [ 1530.612007][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.618328][T23221] [ 1530.620662][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1530.627388][T23221] do_recvmmsg+0xbc/0x2300 [ 1530.631834][T23221] do_recvmmsg+0xbc/0x2300 [ 1531.020998][T23221] not chained 5670000 origins [ 1531.025862][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1531.034646][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1531.044709][T23221] Call Trace: [ 1531.048015][T23221] dump_stack+0x21c/0x280 [ 1531.052370][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1531.058106][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1531.064207][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1531.069417][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1531.075391][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1531.081635][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1531.087022][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1531.092235][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1531.097911][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1531.103988][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1531.108936][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1531.114144][T23221] __msan_chain_origin+0x57/0xa0 [ 1531.119183][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1531.124317][T23221] get_compat_msghdr+0x108/0x2b0 [ 1531.129273][T23221] do_recvmmsg+0xdaf/0x2300 [ 1531.134016][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1531.140110][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1531.145333][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1531.151330][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1531.156570][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1531.162220][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1531.167527][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1531.172302][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1531.176998][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1531.186471][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1531.191762][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.197851][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.204021][T23221] __do_fast_syscall_32+0x102/0x160 [ 1531.209237][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1531.214124][T23221] do_SYSENTER_32+0x73/0x90 [ 1531.218644][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.224980][T23221] RIP: 0023:0xf7fd0549 [ 1531.229062][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1531.248682][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1531.257137][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1531.265119][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1531.273208][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1531.281213][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1531.289195][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1531.297174][T23221] Uninit was stored to memory at: [ 1531.302217][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1531.307939][T23221] __msan_chain_origin+0x57/0xa0 [ 1531.312891][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1531.318016][T23221] get_compat_msghdr+0x108/0x2b0 [ 1531.322966][T23221] do_recvmmsg+0xdaf/0x2300 [ 1531.327481][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1531.332167][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.339641][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.345815][T23221] __do_fast_syscall_32+0x102/0x160 [ 1531.351023][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1531.355889][T23221] do_SYSENTER_32+0x73/0x90 [ 1531.360416][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.366740][T23221] [ 1531.369071][T23221] Uninit was stored to memory at: [ 1531.374114][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1531.379868][T23221] __msan_chain_origin+0x57/0xa0 [ 1531.384854][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1531.389980][T23221] get_compat_msghdr+0x108/0x2b0 [ 1531.395036][T23221] do_recvmmsg+0xdaf/0x2300 [ 1531.399552][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1531.404284][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.410360][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.416535][T23221] __do_fast_syscall_32+0x102/0x160 [ 1531.421743][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1531.426607][T23221] do_SYSENTER_32+0x73/0x90 [ 1531.431118][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.437456][T23221] [ 1531.439781][T23221] Uninit was stored to memory at: [ 1531.444838][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1531.450677][T23221] __msan_chain_origin+0x57/0xa0 [ 1531.455740][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1531.460861][T23221] get_compat_msghdr+0x108/0x2b0 [ 1531.465839][T23221] do_recvmmsg+0xdaf/0x2300 [ 1531.470360][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1531.475056][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.481157][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.487681][T23221] __do_fast_syscall_32+0x102/0x160 [ 1531.492894][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1531.497752][T23221] do_SYSENTER_32+0x73/0x90 [ 1531.502283][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.508604][T23221] [ 1531.510928][T23221] Uninit was stored to memory at: [ 1531.515986][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1531.521716][T23221] __msan_chain_origin+0x57/0xa0 [ 1531.526687][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1531.531815][T23221] get_compat_msghdr+0x108/0x2b0 [ 1531.536774][T23221] do_recvmmsg+0xdaf/0x2300 [ 1531.542082][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1531.546776][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.552882][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.559074][T23221] __do_fast_syscall_32+0x102/0x160 [ 1531.564286][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1531.569231][T23221] do_SYSENTER_32+0x73/0x90 [ 1531.573755][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.580090][T23221] [ 1531.582418][T23221] Uninit was stored to memory at: [ 1531.587500][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1531.593310][T23221] __msan_chain_origin+0x57/0xa0 [ 1531.598254][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1531.603372][T23221] get_compat_msghdr+0x108/0x2b0 [ 1531.608311][T23221] do_recvmmsg+0xdaf/0x2300 [ 1531.612816][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1531.617507][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.623595][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.629819][T23221] __do_fast_syscall_32+0x102/0x160 [ 1531.635057][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1531.639934][T23221] do_SYSENTER_32+0x73/0x90 [ 1531.644459][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.650780][T23221] [ 1531.653112][T23221] Uninit was stored to memory at: [ 1531.658153][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1531.663907][T23221] __msan_chain_origin+0x57/0xa0 [ 1531.668865][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1531.674014][T23221] get_compat_msghdr+0x108/0x2b0 [ 1531.678974][T23221] do_recvmmsg+0xdaf/0x2300 [ 1531.683492][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1531.688181][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.694263][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.700603][T23221] __do_fast_syscall_32+0x102/0x160 [ 1531.705835][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1531.710701][T23221] do_SYSENTER_32+0x73/0x90 [ 1531.715219][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.721900][T23221] [ 1531.724231][T23221] Uninit was stored to memory at: [ 1531.729284][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1531.735033][T23221] __msan_chain_origin+0x57/0xa0 [ 1531.740012][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1531.745142][T23221] get_compat_msghdr+0x108/0x2b0 [ 1531.750187][T23221] do_recvmmsg+0xdaf/0x2300 [ 1531.754708][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1531.759423][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.765566][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.771776][T23221] __do_fast_syscall_32+0x102/0x160 [ 1531.777441][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1531.782326][T23221] do_SYSENTER_32+0x73/0x90 [ 1531.786868][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.793313][T23221] [ 1531.795646][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1531.802439][T23221] do_recvmmsg+0xbc/0x2300 [ 1531.807073][T23221] do_recvmmsg+0xbc/0x2300 [ 1531.864609][T23224] not chained 5680000 origins [ 1531.869462][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1531.878335][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1531.888405][T23224] Call Trace: [ 1531.891721][T23224] dump_stack+0x21c/0x280 [ 1531.896084][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1531.902087][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1531.908191][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1531.913408][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1531.919248][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1531.925328][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1531.930807][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1531.936036][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1531.941797][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1531.947969][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1531.952922][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1531.958235][T23224] __msan_chain_origin+0x57/0xa0 [ 1531.963895][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1531.969035][T23224] get_compat_msghdr+0x108/0x2b0 [ 1531.974088][T23224] do_recvmmsg+0xdaf/0x2300 [ 1531.978710][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1531.983931][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1531.989843][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1531.995068][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1532.000717][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1532.006046][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1532.010876][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1532.015633][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1532.021475][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1532.026696][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.032878][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.039087][T23224] __do_fast_syscall_32+0x102/0x160 [ 1532.044422][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1532.049295][T23224] do_SYSENTER_32+0x73/0x90 [ 1532.053836][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.060202][T23224] RIP: 0023:0xf7fd0549 [ 1532.064295][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1532.084090][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1532.092615][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1532.100789][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1532.109506][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1532.117811][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1532.126850][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1532.135451][T23224] Uninit was stored to memory at: [ 1532.140528][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1532.146459][T23224] __msan_chain_origin+0x57/0xa0 [ 1532.152024][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1532.157149][T23224] get_compat_msghdr+0x108/0x2b0 [ 1532.162115][T23224] do_recvmmsg+0xdaf/0x2300 [ 1532.166631][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1532.171316][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.177403][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.183581][T23224] __do_fast_syscall_32+0x102/0x160 [ 1532.188797][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1532.193662][T23224] do_SYSENTER_32+0x73/0x90 [ 1532.198178][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.204504][T23224] [ 1532.206834][T23224] Uninit was stored to memory at: [ 1532.211894][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1532.221128][T23224] __msan_chain_origin+0x57/0xa0 [ 1532.226086][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1532.231300][T23224] get_compat_msghdr+0x108/0x2b0 [ 1532.236284][T23224] do_recvmmsg+0xdaf/0x2300 [ 1532.240796][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1532.245483][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.251570][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.257746][T23224] __do_fast_syscall_32+0x102/0x160 [ 1532.262970][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1532.267836][T23224] do_SYSENTER_32+0x73/0x90 [ 1532.272351][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.278756][T23224] [ 1532.281086][T23224] Uninit was stored to memory at: [ 1532.286140][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1532.291880][T23224] __msan_chain_origin+0x57/0xa0 [ 1532.296840][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1532.301954][T23224] get_compat_msghdr+0x108/0x2b0 [ 1532.307684][T23224] do_recvmmsg+0xdaf/0x2300 [ 1532.312214][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1532.316913][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.322997][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.329167][T23224] __do_fast_syscall_32+0x102/0x160 [ 1532.334644][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1532.340385][T23224] do_SYSENTER_32+0x73/0x90 [ 1532.344904][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.351497][T23224] [ 1532.353827][T23224] Uninit was stored to memory at: [ 1532.358867][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1532.364592][T23224] __msan_chain_origin+0x57/0xa0 [ 1532.369535][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1532.374659][T23224] get_compat_msghdr+0x108/0x2b0 [ 1532.379694][T23224] do_recvmmsg+0xdaf/0x2300 [ 1532.384207][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1532.388892][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.395498][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.401765][T23224] __do_fast_syscall_32+0x102/0x160 [ 1532.406986][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1532.411853][T23224] do_SYSENTER_32+0x73/0x90 [ 1532.416390][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.422707][T23224] [ 1532.425031][T23224] Uninit was stored to memory at: [ 1532.430082][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1532.435824][T23224] __msan_chain_origin+0x57/0xa0 [ 1532.440778][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1532.445902][T23224] get_compat_msghdr+0x108/0x2b0 [ 1532.450870][T23224] do_recvmmsg+0xdaf/0x2300 [ 1532.455564][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1532.460250][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.466340][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.473289][T23224] __do_fast_syscall_32+0x102/0x160 [ 1532.478497][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1532.483618][T23224] do_SYSENTER_32+0x73/0x90 [ 1532.488132][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.494451][T23224] [ 1532.496780][T23224] Uninit was stored to memory at: [ 1532.501824][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1532.507612][T23224] __msan_chain_origin+0x57/0xa0 [ 1532.512572][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1532.517952][T23224] get_compat_msghdr+0x108/0x2b0 [ 1532.522902][T23224] do_recvmmsg+0xdaf/0x2300 [ 1532.527420][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1532.532128][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.538233][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.544404][T23224] __do_fast_syscall_32+0x102/0x160 [ 1532.549620][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1532.554494][T23224] do_SYSENTER_32+0x73/0x90 [ 1532.559012][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.565358][T23224] [ 1532.567686][T23224] Uninit was stored to memory at: [ 1532.572726][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1532.578469][T23224] __msan_chain_origin+0x57/0xa0 [ 1532.583415][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1532.588555][T23224] get_compat_msghdr+0x108/0x2b0 [ 1532.593508][T23224] do_recvmmsg+0xdaf/0x2300 [ 1532.598018][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1532.602714][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.608799][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.615060][T23224] __do_fast_syscall_32+0x102/0x160 [ 1532.620312][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1532.625178][T23224] do_SYSENTER_32+0x73/0x90 [ 1532.629714][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.636056][T23224] [ 1532.638397][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1532.645096][T23224] do_recvmmsg+0xbc/0x2300 [ 1532.649535][T23224] do_recvmmsg+0xbc/0x2300 [ 1532.974494][T23221] not chained 5690000 origins [ 1532.979221][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1532.987987][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.998057][T23221] Call Trace: [ 1533.001507][T23221] dump_stack+0x21c/0x280 [ 1533.005860][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1533.011596][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1533.017685][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1533.022899][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1533.028731][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1533.034822][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1533.040245][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1533.045477][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1533.051254][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1533.057343][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1533.062294][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1533.067503][T23221] __msan_chain_origin+0x57/0xa0 [ 1533.072463][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1533.077597][T23221] get_compat_msghdr+0x108/0x2b0 [ 1533.082674][T23221] do_recvmmsg+0xdaf/0x2300 [ 1533.087218][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1533.093303][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1533.098521][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1533.104442][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1533.109658][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1533.115328][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1533.120631][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1533.125428][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1533.130125][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1533.136048][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1533.141332][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.147424][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.153598][T23221] __do_fast_syscall_32+0x102/0x160 [ 1533.158819][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1533.163683][T23221] do_SYSENTER_32+0x73/0x90 [ 1533.168481][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.174826][T23221] RIP: 0023:0xf7fd0549 [ 1533.178913][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1533.198582][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1533.207065][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1533.215082][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1533.223084][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1533.231094][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1533.239199][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1533.247197][T23221] Uninit was stored to memory at: [ 1533.252241][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1533.257996][T23221] __msan_chain_origin+0x57/0xa0 [ 1533.262946][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1533.268063][T23221] get_compat_msghdr+0x108/0x2b0 [ 1533.273031][T23221] do_recvmmsg+0xdaf/0x2300 [ 1533.277543][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1533.282232][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.288338][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.294559][T23221] __do_fast_syscall_32+0x102/0x160 [ 1533.299806][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1533.304678][T23221] do_SYSENTER_32+0x73/0x90 [ 1533.309212][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.315541][T23221] [ 1533.317879][T23221] Uninit was stored to memory at: [ 1533.322999][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1533.328742][T23221] __msan_chain_origin+0x57/0xa0 [ 1533.333705][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1533.339006][T23221] get_compat_msghdr+0x108/0x2b0 [ 1533.343961][T23221] do_recvmmsg+0xdaf/0x2300 [ 1533.348480][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1533.353177][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.359265][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.365463][T23221] __do_fast_syscall_32+0x102/0x160 [ 1533.370677][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1533.376152][T23221] do_SYSENTER_32+0x73/0x90 [ 1533.380692][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.387041][T23221] [ 1533.389372][T23221] Uninit was stored to memory at: [ 1533.394495][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1533.400254][T23221] __msan_chain_origin+0x57/0xa0 [ 1533.405208][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1533.410338][T23221] get_compat_msghdr+0x108/0x2b0 [ 1533.415296][T23221] do_recvmmsg+0xdaf/0x2300 [ 1533.419826][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1533.424537][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.430624][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.436906][T23221] __do_fast_syscall_32+0x102/0x160 [ 1533.442148][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1533.447020][T23221] do_SYSENTER_32+0x73/0x90 [ 1533.451538][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.457865][T23221] [ 1533.460201][T23221] Uninit was stored to memory at: [ 1533.465264][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1533.470996][T23221] __msan_chain_origin+0x57/0xa0 [ 1533.475956][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1533.481118][T23221] get_compat_msghdr+0x108/0x2b0 [ 1533.486077][T23221] do_recvmmsg+0xdaf/0x2300 [ 1533.490609][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1533.495299][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.501386][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.507566][T23221] __do_fast_syscall_32+0x102/0x160 [ 1533.512782][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1533.517639][T23221] do_SYSENTER_32+0x73/0x90 [ 1533.522417][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.528740][T23221] [ 1533.531112][T23221] Uninit was stored to memory at: [ 1533.536161][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1533.541906][T23221] __msan_chain_origin+0x57/0xa0 [ 1533.546894][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1533.552025][T23221] get_compat_msghdr+0x108/0x2b0 [ 1533.557019][T23221] do_recvmmsg+0xdaf/0x2300 [ 1533.562152][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1533.566863][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.572968][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.579243][T23221] __do_fast_syscall_32+0x102/0x160 [ 1533.584476][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1533.589354][T23221] do_SYSENTER_32+0x73/0x90 [ 1533.593886][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.600219][T23221] [ 1533.602551][T23221] Uninit was stored to memory at: [ 1533.607622][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1533.613364][T23221] __msan_chain_origin+0x57/0xa0 [ 1533.618328][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1533.623460][T23221] get_compat_msghdr+0x108/0x2b0 [ 1533.628412][T23221] do_recvmmsg+0xdaf/0x2300 [ 1533.632950][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1533.637644][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.643735][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.649919][T23221] __do_fast_syscall_32+0x102/0x160 [ 1533.655146][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1533.660288][T23221] do_SYSENTER_32+0x73/0x90 [ 1533.664831][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.671167][T23221] [ 1533.673506][T23221] Uninit was stored to memory at: [ 1533.678563][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1533.684316][T23221] __msan_chain_origin+0x57/0xa0 [ 1533.689284][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1533.694416][T23221] get_compat_msghdr+0x108/0x2b0 [ 1533.699371][T23221] do_recvmmsg+0xdaf/0x2300 [ 1533.703903][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1533.708609][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.714709][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.720907][T23221] __do_fast_syscall_32+0x102/0x160 [ 1533.726133][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1533.731000][T23221] do_SYSENTER_32+0x73/0x90 [ 1533.735529][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.741855][T23221] [ 1533.744190][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1533.750891][T23221] do_recvmmsg+0xbc/0x2300 [ 1533.755329][T23221] do_recvmmsg+0xbc/0x2300 [ 1533.796529][T23224] not chained 5700000 origins [ 1533.801297][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1533.810175][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1533.820395][T23224] Call Trace: [ 1533.823760][T23224] dump_stack+0x21c/0x280 [ 1533.828114][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1533.833879][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1533.840019][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1533.845291][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1533.851263][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1533.857351][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1533.862743][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1533.867967][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1533.873650][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1533.879741][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1533.884777][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1533.890040][T23224] __msan_chain_origin+0x57/0xa0 [ 1533.895102][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1533.900228][T23224] get_compat_msghdr+0x108/0x2b0 [ 1533.905209][T23224] do_recvmmsg+0xdaf/0x2300 [ 1533.909752][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1533.915061][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1533.921104][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1533.926325][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1533.931973][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1533.937277][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1533.942060][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1533.946778][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1533.952693][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1533.957922][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.964039][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.970252][T23224] __do_fast_syscall_32+0x102/0x160 [ 1533.975572][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1533.980442][T23224] do_SYSENTER_32+0x73/0x90 [ 1533.984967][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.991308][T23224] RIP: 0023:0xf7fd0549 [ 1533.995395][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1534.015032][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1534.023565][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1534.031558][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1534.039559][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1534.047606][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1534.055602][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1534.063587][T23224] Uninit was stored to memory at: [ 1534.068722][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1534.074550][T23224] __msan_chain_origin+0x57/0xa0 [ 1534.079519][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1534.084645][T23224] get_compat_msghdr+0x108/0x2b0 [ 1534.089708][T23224] do_recvmmsg+0xdaf/0x2300 [ 1534.094222][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1534.099085][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.105164][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.111340][T23224] __do_fast_syscall_32+0x102/0x160 [ 1534.116547][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1534.121404][T23224] do_SYSENTER_32+0x73/0x90 [ 1534.125953][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.132301][T23224] [ 1534.134628][T23224] Uninit was stored to memory at: [ 1534.139673][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1534.145398][T23224] __msan_chain_origin+0x57/0xa0 [ 1534.150356][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1534.155494][T23224] get_compat_msghdr+0x108/0x2b0 [ 1534.160451][T23224] do_recvmmsg+0xdaf/0x2300 [ 1534.164968][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1534.169691][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.175773][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.181944][T23224] __do_fast_syscall_32+0x102/0x160 [ 1534.187191][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1534.192058][T23224] do_SYSENTER_32+0x73/0x90 [ 1534.196670][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.203515][T23224] [ 1534.205880][T23224] Uninit was stored to memory at: [ 1534.211039][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1534.216802][T23224] __msan_chain_origin+0x57/0xa0 [ 1534.221760][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1534.226900][T23224] get_compat_msghdr+0x108/0x2b0 [ 1534.232812][T23224] do_recvmmsg+0xdaf/0x2300 [ 1534.237326][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1534.242013][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.248092][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.254289][T23224] __do_fast_syscall_32+0x102/0x160 [ 1534.259527][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1534.264474][T23224] do_SYSENTER_32+0x73/0x90 [ 1534.268997][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.275322][T23224] [ 1534.277658][T23224] Uninit was stored to memory at: [ 1534.284735][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1534.290467][T23224] __msan_chain_origin+0x57/0xa0 [ 1534.295439][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1534.300556][T23224] get_compat_msghdr+0x108/0x2b0 [ 1534.305511][T23224] do_recvmmsg+0xdaf/0x2300 [ 1534.310545][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1534.315239][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.321322][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.327490][T23224] __do_fast_syscall_32+0x102/0x160 [ 1534.332797][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1534.337839][T23224] do_SYSENTER_32+0x73/0x90 [ 1534.342361][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.348717][T23224] [ 1534.351049][T23224] Uninit was stored to memory at: [ 1534.356101][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1534.361836][T23224] __msan_chain_origin+0x57/0xa0 [ 1534.366791][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1534.371955][T23224] get_compat_msghdr+0x108/0x2b0 [ 1534.376898][T23224] do_recvmmsg+0xdaf/0x2300 [ 1534.381424][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1534.386109][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.392455][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.398638][T23224] __do_fast_syscall_32+0x102/0x160 [ 1534.403868][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1534.408733][T23224] do_SYSENTER_32+0x73/0x90 [ 1534.413340][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.419660][T23224] [ 1534.422008][T23224] Uninit was stored to memory at: [ 1534.427065][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1534.432798][T23224] __msan_chain_origin+0x57/0xa0 [ 1534.437757][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1534.442887][T23224] get_compat_msghdr+0x108/0x2b0 [ 1534.447841][T23224] do_recvmmsg+0xdaf/0x2300 [ 1534.452360][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1534.457060][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.463157][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.469340][T23224] __do_fast_syscall_32+0x102/0x160 [ 1534.474579][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1534.482333][T23224] do_SYSENTER_32+0x73/0x90 [ 1534.486863][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.493265][T23224] [ 1534.495607][T23224] Uninit was stored to memory at: [ 1534.500667][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1534.506418][T23224] __msan_chain_origin+0x57/0xa0 [ 1534.511383][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1534.516530][T23224] get_compat_msghdr+0x108/0x2b0 [ 1534.521486][T23224] do_recvmmsg+0xdaf/0x2300 [ 1534.526001][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1534.530692][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.536796][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.542975][T23224] __do_fast_syscall_32+0x102/0x160 [ 1534.548200][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1534.553077][T23224] do_SYSENTER_32+0x73/0x90 [ 1534.557601][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.564009][T23224] [ 1534.566364][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1534.573055][T23224] do_recvmmsg+0xbc/0x2300 [ 1534.577946][T23224] do_recvmmsg+0xbc/0x2300 [ 1534.809127][T23224] not chained 5710000 origins [ 1534.813937][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1534.822730][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1534.832826][T23224] Call Trace: [ 1534.836148][T23224] dump_stack+0x21c/0x280 [ 1534.840506][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1534.846262][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1534.852357][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1534.857588][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1534.863430][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1534.869610][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1534.875030][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1534.880258][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1534.886093][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1534.892218][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1534.897183][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1534.902433][T23224] __msan_chain_origin+0x57/0xa0 [ 1534.907389][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1534.912521][T23224] get_compat_msghdr+0x108/0x2b0 [ 1534.917474][T23224] do_recvmmsg+0xdaf/0x2300 [ 1534.921994][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1534.927238][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1534.933158][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1534.938400][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1534.944056][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1534.949366][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1534.954144][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1534.958838][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1534.964664][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1534.969911][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.976075][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.982287][T23224] __do_fast_syscall_32+0x102/0x160 [ 1534.987612][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1534.992500][T23224] do_SYSENTER_32+0x73/0x90 [ 1534.997037][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.003387][T23224] RIP: 0023:0xf7fd0549 [ 1535.007497][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1535.027229][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1535.035678][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1535.043679][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1535.051681][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1535.059700][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1535.067706][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1535.075787][T23224] Uninit was stored to memory at: [ 1535.080855][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1535.086600][T23224] __msan_chain_origin+0x57/0xa0 [ 1535.091569][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1535.096717][T23224] get_compat_msghdr+0x108/0x2b0 [ 1535.101688][T23224] do_recvmmsg+0xdaf/0x2300 [ 1535.106219][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1535.110927][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.117022][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.123219][T23224] __do_fast_syscall_32+0x102/0x160 [ 1535.128449][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1535.133326][T23224] do_SYSENTER_32+0x73/0x90 [ 1535.137863][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.144298][T23224] [ 1535.146636][T23224] Uninit was stored to memory at: [ 1535.151697][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1535.157447][T23224] __msan_chain_origin+0x57/0xa0 [ 1535.162432][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1535.167593][T23224] get_compat_msghdr+0x108/0x2b0 [ 1535.172561][T23224] do_recvmmsg+0xdaf/0x2300 [ 1535.177123][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1535.181860][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.187965][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.194159][T23224] __do_fast_syscall_32+0x102/0x160 [ 1535.199433][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1535.204355][T23224] do_SYSENTER_32+0x73/0x90 [ 1535.208902][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.215238][T23224] [ 1535.217580][T23224] Uninit was stored to memory at: [ 1535.222645][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1535.228393][T23224] __msan_chain_origin+0x57/0xa0 [ 1535.233364][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1535.238517][T23224] get_compat_msghdr+0x108/0x2b0 [ 1535.243488][T23224] do_recvmmsg+0xdaf/0x2300 [ 1535.248031][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1535.252765][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.258867][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.265055][T23224] __do_fast_syscall_32+0x102/0x160 [ 1535.270284][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1535.275175][T23224] do_SYSENTER_32+0x73/0x90 [ 1535.279738][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.286076][T23224] [ 1535.288418][T23224] Uninit was stored to memory at: [ 1535.293508][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1535.299255][T23224] __msan_chain_origin+0x57/0xa0 [ 1535.304223][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1535.309365][T23224] get_compat_msghdr+0x108/0x2b0 [ 1535.314333][T23224] do_recvmmsg+0xdaf/0x2300 [ 1535.318861][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1535.323567][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.329694][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.335892][T23224] __do_fast_syscall_32+0x102/0x160 [ 1535.341136][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1535.346040][T23224] do_SYSENTER_32+0x73/0x90 [ 1535.350574][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.356908][T23224] [ 1535.359262][T23224] Uninit was stored to memory at: [ 1535.364354][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1535.370165][T23224] __msan_chain_origin+0x57/0xa0 [ 1535.376094][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1535.381609][T23224] get_compat_msghdr+0x108/0x2b0 [ 1535.386601][T23224] do_recvmmsg+0xdaf/0x2300 [ 1535.391158][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1535.395871][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.401991][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.408351][T23224] __do_fast_syscall_32+0x102/0x160 [ 1535.413574][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1535.418634][T23224] do_SYSENTER_32+0x73/0x90 [ 1535.423191][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.429519][T23224] [ 1535.431857][T23224] Uninit was stored to memory at: [ 1535.436933][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1535.442703][T23224] __msan_chain_origin+0x57/0xa0 [ 1535.447665][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1535.452803][T23224] get_compat_msghdr+0x108/0x2b0 [ 1535.457773][T23224] do_recvmmsg+0xdaf/0x2300 [ 1535.462302][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1535.467008][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.473105][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.479404][T23224] __do_fast_syscall_32+0x102/0x160 [ 1535.484643][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1535.489532][T23224] do_SYSENTER_32+0x73/0x90 [ 1535.494076][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.500431][T23224] [ 1535.502774][T23224] Uninit was stored to memory at: [ 1535.507835][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1535.513588][T23224] __msan_chain_origin+0x57/0xa0 [ 1535.518576][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1535.523724][T23224] get_compat_msghdr+0x108/0x2b0 [ 1535.528708][T23224] do_recvmmsg+0xdaf/0x2300 [ 1535.533232][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1535.537927][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.544021][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.550214][T23224] __do_fast_syscall_32+0x102/0x160 [ 1535.555452][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1535.560425][T23224] do_SYSENTER_32+0x73/0x90 [ 1535.564979][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.571307][T23224] [ 1535.573652][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1535.580356][T23224] do_recvmmsg+0xbc/0x2300 [ 1535.585020][T23224] do_recvmmsg+0xbc/0x2300 [ 1535.888273][T23221] not chained 5720000 origins [ 1535.893008][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1535.901976][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1535.912657][T23221] Call Trace: [ 1535.915975][T23221] dump_stack+0x21c/0x280 [ 1535.920361][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1535.926185][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1535.932275][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1535.937499][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1535.943328][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1535.949495][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1535.954913][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1535.960142][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1535.965825][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1535.971920][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1535.976932][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1535.982190][T23221] __msan_chain_origin+0x57/0xa0 [ 1535.987232][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1535.992423][T23221] get_compat_msghdr+0x108/0x2b0 [ 1535.997559][T23221] do_recvmmsg+0xdaf/0x2300 [ 1536.002090][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1536.008184][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1536.013408][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1536.019338][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1536.024558][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1536.030214][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1536.035518][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1536.040314][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1536.045089][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1536.050908][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1536.056120][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.062209][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.068478][T23221] __do_fast_syscall_32+0x102/0x160 [ 1536.073723][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1536.078600][T23221] do_SYSENTER_32+0x73/0x90 [ 1536.083476][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.089834][T23221] RIP: 0023:0xf7fd0549 [ 1536.093920][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1536.113546][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1536.122003][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1536.130004][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1536.138005][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1536.146180][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1536.154962][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1536.162954][T23221] Uninit was stored to memory at: [ 1536.168117][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1536.174410][T23221] __msan_chain_origin+0x57/0xa0 [ 1536.182774][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1536.188017][T23221] get_compat_msghdr+0x108/0x2b0 [ 1536.193528][T23221] do_recvmmsg+0xdaf/0x2300 [ 1536.198066][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1536.203748][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.209879][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.216536][T23221] __do_fast_syscall_32+0x102/0x160 [ 1536.222074][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1536.227481][T23221] do_SYSENTER_32+0x73/0x90 [ 1536.232019][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.238555][T23221] [ 1536.241806][T23221] Uninit was stored to memory at: [ 1536.247328][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1536.253098][T23221] __msan_chain_origin+0x57/0xa0 [ 1536.258144][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1536.263458][T23221] get_compat_msghdr+0x108/0x2b0 [ 1536.268447][T23221] do_recvmmsg+0xdaf/0x2300 [ 1536.272981][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1536.277696][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.283818][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.290004][T23221] __do_fast_syscall_32+0x102/0x160 [ 1536.295321][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1536.300196][T23221] do_SYSENTER_32+0x73/0x90 [ 1536.304808][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.311143][T23221] [ 1536.313484][T23221] Uninit was stored to memory at: [ 1536.318532][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1536.324258][T23221] __msan_chain_origin+0x57/0xa0 [ 1536.329214][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1536.334533][T23221] get_compat_msghdr+0x108/0x2b0 [ 1536.339483][T23221] do_recvmmsg+0xdaf/0x2300 [ 1536.344003][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1536.348894][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.355069][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.361333][T23221] __do_fast_syscall_32+0x102/0x160 [ 1536.366652][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1536.371792][T23221] do_SYSENTER_32+0x73/0x90 [ 1536.376335][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.382678][T23221] [ 1536.385013][T23221] Uninit was stored to memory at: [ 1536.390070][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1536.395812][T23221] __msan_chain_origin+0x57/0xa0 [ 1536.400862][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1536.406008][T23221] get_compat_msghdr+0x108/0x2b0 [ 1536.410953][T23221] do_recvmmsg+0xdaf/0x2300 [ 1536.415642][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1536.420326][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.426409][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.432755][T23221] __do_fast_syscall_32+0x102/0x160 [ 1536.437994][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1536.442864][T23221] do_SYSENTER_32+0x73/0x90 [ 1536.447406][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.454072][T23221] [ 1536.456409][T23221] Uninit was stored to memory at: [ 1536.461461][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1536.467289][T23221] __msan_chain_origin+0x57/0xa0 [ 1536.472245][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1536.477394][T23221] get_compat_msghdr+0x108/0x2b0 [ 1536.482353][T23221] do_recvmmsg+0xdaf/0x2300 [ 1536.486879][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1536.491919][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.498011][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.504203][T23221] __do_fast_syscall_32+0x102/0x160 [ 1536.509423][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1536.514298][T23221] do_SYSENTER_32+0x73/0x90 [ 1536.518809][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.525127][T23221] [ 1536.527463][T23221] Uninit was stored to memory at: [ 1536.532505][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1536.538234][T23221] __msan_chain_origin+0x57/0xa0 [ 1536.543219][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1536.548344][T23221] get_compat_msghdr+0x108/0x2b0 [ 1536.553319][T23221] do_recvmmsg+0xdaf/0x2300 [ 1536.557864][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1536.562564][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.568649][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.574925][T23221] __do_fast_syscall_32+0x102/0x160 [ 1536.580135][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1536.585006][T23221] do_SYSENTER_32+0x73/0x90 [ 1536.589539][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.596395][T23221] [ 1536.598736][T23221] Uninit was stored to memory at: [ 1536.603781][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1536.609516][T23221] __msan_chain_origin+0x57/0xa0 [ 1536.614473][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1536.619595][T23221] get_compat_msghdr+0x108/0x2b0 [ 1536.624545][T23221] do_recvmmsg+0xdaf/0x2300 [ 1536.629076][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1536.633769][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.639863][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.646055][T23221] __do_fast_syscall_32+0x102/0x160 [ 1536.651281][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1536.656169][T23221] do_SYSENTER_32+0x73/0x90 [ 1536.660689][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.667016][T23221] [ 1536.669354][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1536.676048][T23221] do_recvmmsg+0xbc/0x2300 [ 1536.680491][T23221] do_recvmmsg+0xbc/0x2300 [ 1536.771646][T23221] not chained 5730000 origins [ 1536.776381][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1536.785245][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1536.795324][T23221] Call Trace: [ 1536.798646][T23221] dump_stack+0x21c/0x280 [ 1536.803004][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1536.808829][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1536.814918][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1536.820138][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1536.825962][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1536.832049][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1536.837540][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1536.843025][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1536.848681][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1536.854798][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1536.859762][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1536.864989][T23221] __msan_chain_origin+0x57/0xa0 [ 1536.869948][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1536.875086][T23221] get_compat_msghdr+0x108/0x2b0 [ 1536.880194][T23221] do_recvmmsg+0xdaf/0x2300 [ 1536.884713][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1536.890918][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1536.896258][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1536.902219][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1536.907443][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1536.913094][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1536.918440][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1536.923231][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1536.927957][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1536.933788][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1536.939011][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.945197][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.951377][T23221] __do_fast_syscall_32+0x102/0x160 [ 1536.956601][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1536.961480][T23221] do_SYSENTER_32+0x73/0x90 [ 1536.966014][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.972355][T23221] RIP: 0023:0xf7fd0549 [ 1536.976443][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1536.996094][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1537.004551][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1537.012546][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1537.020717][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1537.028719][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1537.036745][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1537.044734][T23221] Uninit was stored to memory at: [ 1537.049869][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1537.055614][T23221] __msan_chain_origin+0x57/0xa0 [ 1537.060565][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1537.065687][T23221] get_compat_msghdr+0x108/0x2b0 [ 1537.070637][T23221] do_recvmmsg+0xdaf/0x2300 [ 1537.075182][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1537.079874][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1537.085974][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1537.092165][T23221] __do_fast_syscall_32+0x102/0x160 [ 1537.097384][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1537.102271][T23221] do_SYSENTER_32+0x73/0x90 [ 1537.107488][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1537.113806][T23221] [ 1537.116133][T23221] Uninit was stored to memory at: [ 1537.121176][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1537.126945][T23221] __msan_chain_origin+0x57/0xa0 [ 1537.131890][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1537.137075][T23221] get_compat_msghdr+0x108/0x2b0 [ 1537.142038][T23221] do_recvmmsg+0xdaf/0x2300 [ 1537.146550][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1537.151248][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1537.157339][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1537.163527][T23221] __do_fast_syscall_32+0x102/0x160 [ 1537.168736][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1537.173595][T23221] do_SYSENTER_32+0x73/0x90 [ 1537.178108][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1537.184428][T23221] [ 1537.186760][T23221] Uninit was stored to memory at: [ 1537.191891][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1537.197631][T23221] __msan_chain_origin+0x57/0xa0 [ 1537.202583][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1537.207730][T23221] get_compat_msghdr+0x108/0x2b0 [ 1537.212789][T23221] do_recvmmsg+0xdaf/0x2300 [ 1537.217316][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1537.222033][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1537.228114][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1537.234280][T23221] __do_fast_syscall_32+0x102/0x160 [ 1537.239485][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1537.244343][T23221] do_SYSENTER_32+0x73/0x90 [ 1537.248856][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1537.257268][T23221] [ 1537.259602][T23221] Uninit was stored to memory at: [ 1537.264648][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1537.270409][T23221] __msan_chain_origin+0x57/0xa0 [ 1537.275375][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1537.280843][T23221] get_compat_msghdr+0x108/0x2b0 [ 1537.285794][T23221] do_recvmmsg+0xdaf/0x2300 [ 1537.290304][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1537.294999][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1537.301094][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1537.307286][T23221] __do_fast_syscall_32+0x102/0x160 [ 1537.312517][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1537.317404][T23221] do_SYSENTER_32+0x73/0x90 [ 1537.321962][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1537.328374][T23221] [ 1537.330728][T23221] Uninit was stored to memory at: [ 1537.335895][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1537.342095][T23221] __msan_chain_origin+0x57/0xa0 [ 1537.347091][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1537.352227][T23221] get_compat_msghdr+0x108/0x2b0 [ 1537.357213][T23221] do_recvmmsg+0xdaf/0x2300 [ 1537.361731][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1537.366612][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1537.372704][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1537.378886][T23221] __do_fast_syscall_32+0x102/0x160 [ 1537.384146][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1537.389119][T23221] do_SYSENTER_32+0x73/0x90 [ 1537.393732][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1537.400056][T23221] [ 1537.402387][T23221] Uninit was stored to memory at: [ 1537.407431][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1537.413167][T23221] __msan_chain_origin+0x57/0xa0 [ 1537.418137][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1537.423359][T23221] get_compat_msghdr+0x108/0x2b0 [ 1537.428318][T23221] do_recvmmsg+0xdaf/0x2300 [ 1537.432838][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1537.437532][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1537.443624][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1537.449830][T23221] __do_fast_syscall_32+0x102/0x160 [ 1537.455070][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1537.459938][T23221] do_SYSENTER_32+0x73/0x90 [ 1537.464456][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1537.470780][T23221] [ 1537.473115][T23221] Uninit was stored to memory at: [ 1537.478165][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1537.483902][T23221] __msan_chain_origin+0x57/0xa0 [ 1537.489053][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1537.494376][T23221] get_compat_msghdr+0x108/0x2b0 [ 1537.499354][T23221] do_recvmmsg+0xdaf/0x2300 [ 1537.504139][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1537.508831][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1537.514908][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1537.521111][T23221] __do_fast_syscall_32+0x102/0x160 [ 1537.526343][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1537.531218][T23221] do_SYSENTER_32+0x73/0x90 [ 1537.535750][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1537.542077][T23221] [ 1537.544436][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1537.551306][T23221] do_recvmmsg+0xbc/0x2300 [ 1537.555834][T23221] do_recvmmsg+0xbc/0x2300 [ 1537.822849][T23224] not chained 5740000 origins [ 1537.827581][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1537.836369][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1537.846497][T23224] Call Trace: [ 1537.849818][T23224] dump_stack+0x21c/0x280 [ 1537.854793][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1537.860739][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1537.866832][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1537.872176][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1537.878009][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1537.884100][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1537.889500][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1537.894724][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1537.900402][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1537.907368][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1537.912331][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1537.917552][T23224] __msan_chain_origin+0x57/0xa0 [ 1537.922600][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1537.927746][T23224] get_compat_msghdr+0x108/0x2b0 [ 1537.932714][T23224] do_recvmmsg+0xdaf/0x2300 [ 1537.937313][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1537.942538][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1537.948539][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1537.953885][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1537.959539][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1537.964863][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1537.969658][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1537.974371][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1537.980198][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1537.985447][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1537.991541][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1537.997718][T23224] __do_fast_syscall_32+0x102/0x160 [ 1538.002952][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1538.007817][T23224] do_SYSENTER_32+0x73/0x90 [ 1538.012599][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.018931][T23224] RIP: 0023:0xf7fd0549 [ 1538.023011][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1538.042666][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1538.051123][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1538.059109][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1538.067099][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1538.075086][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1538.083075][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1538.092623][T23224] Uninit was stored to memory at: [ 1538.097668][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1538.103400][T23224] __msan_chain_origin+0x57/0xa0 [ 1538.108348][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1538.113489][T23224] get_compat_msghdr+0x108/0x2b0 [ 1538.118436][T23224] do_recvmmsg+0xdaf/0x2300 [ 1538.123042][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1538.127730][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.133815][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.140056][T23224] __do_fast_syscall_32+0x102/0x160 [ 1538.145279][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1538.150147][T23224] do_SYSENTER_32+0x73/0x90 [ 1538.154749][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.161072][T23224] [ 1538.163404][T23224] Uninit was stored to memory at: [ 1538.168459][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1538.174202][T23224] __msan_chain_origin+0x57/0xa0 [ 1538.179169][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1538.184333][T23224] get_compat_msghdr+0x108/0x2b0 [ 1538.189291][T23224] do_recvmmsg+0xdaf/0x2300 [ 1538.193817][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1538.198513][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.204596][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.210762][T23224] __do_fast_syscall_32+0x102/0x160 [ 1538.215972][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1538.220838][T23224] do_SYSENTER_32+0x73/0x90 [ 1538.225359][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.231681][T23224] [ 1538.234012][T23224] Uninit was stored to memory at: [ 1538.239055][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1538.244784][T23224] __msan_chain_origin+0x57/0xa0 [ 1538.249746][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1538.254873][T23224] get_compat_msghdr+0x108/0x2b0 [ 1538.259827][T23224] do_recvmmsg+0xdaf/0x2300 [ 1538.264365][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1538.269052][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.275133][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.281303][T23224] __do_fast_syscall_32+0x102/0x160 [ 1538.286538][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1538.291486][T23224] do_SYSENTER_32+0x73/0x90 [ 1538.296025][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.302348][T23224] [ 1538.304677][T23224] Uninit was stored to memory at: [ 1538.309721][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1538.315448][T23224] __msan_chain_origin+0x57/0xa0 [ 1538.320402][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1538.325528][T23224] get_compat_msghdr+0x108/0x2b0 [ 1538.330504][T23224] do_recvmmsg+0xdaf/0x2300 [ 1538.335021][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1538.339725][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.345896][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.352685][T23224] __do_fast_syscall_32+0x102/0x160 [ 1538.357952][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1538.362818][T23224] do_SYSENTER_32+0x73/0x90 [ 1538.367336][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.373662][T23224] [ 1538.376005][T23224] Uninit was stored to memory at: [ 1538.381046][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1538.386783][T23224] __msan_chain_origin+0x57/0xa0 [ 1538.391744][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1538.396875][T23224] get_compat_msghdr+0x108/0x2b0 [ 1538.401834][T23224] do_recvmmsg+0xdaf/0x2300 [ 1538.406362][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1538.411169][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.417258][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.423528][T23224] __do_fast_syscall_32+0x102/0x160 [ 1538.428745][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1538.433610][T23224] do_SYSENTER_32+0x73/0x90 [ 1538.438124][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.444476][T23224] [ 1538.446811][T23224] Uninit was stored to memory at: [ 1538.451859][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1538.457593][T23224] __msan_chain_origin+0x57/0xa0 [ 1538.462631][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1538.467842][T23224] get_compat_msghdr+0x108/0x2b0 [ 1538.472793][T23224] do_recvmmsg+0xdaf/0x2300 [ 1538.477308][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1538.481996][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.488092][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.494296][T23224] __do_fast_syscall_32+0x102/0x160 [ 1538.499509][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1538.504383][T23224] do_SYSENTER_32+0x73/0x90 [ 1538.508896][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.515213][T23224] [ 1538.517543][T23224] Uninit was stored to memory at: [ 1538.522580][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1538.528308][T23224] __msan_chain_origin+0x57/0xa0 [ 1538.533260][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1538.538378][T23224] get_compat_msghdr+0x108/0x2b0 [ 1538.543328][T23224] do_recvmmsg+0xdaf/0x2300 [ 1538.547859][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1538.552546][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.558626][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.564793][T23224] __do_fast_syscall_32+0x102/0x160 [ 1538.570018][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1538.574877][T23224] do_SYSENTER_32+0x73/0x90 [ 1538.579391][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.585718][T23224] [ 1538.588052][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1538.594745][T23224] do_recvmmsg+0xbc/0x2300 [ 1538.599168][T23224] do_recvmmsg+0xbc/0x2300 [ 1538.617321][T23221] not chained 5750000 origins [ 1538.622045][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1538.630826][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1538.640904][T23221] Call Trace: [ 1538.644237][T23221] dump_stack+0x21c/0x280 [ 1538.648597][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1538.654345][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1538.660546][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1538.665767][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1538.671608][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1538.677727][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1538.683217][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1538.688465][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1538.694124][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1538.700214][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1538.705191][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1538.710409][T23221] __msan_chain_origin+0x57/0xa0 [ 1538.715368][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1538.720509][T23221] get_compat_msghdr+0x108/0x2b0 [ 1538.725472][T23221] do_recvmmsg+0xdaf/0x2300 [ 1538.730037][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1538.736136][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1538.741427][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1538.747566][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1538.752789][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1538.758466][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1538.763902][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1538.768697][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1538.773405][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1538.779230][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1538.784449][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.790547][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.796737][T23221] __do_fast_syscall_32+0x102/0x160 [ 1538.801962][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1538.806842][T23221] do_SYSENTER_32+0x73/0x90 [ 1538.811376][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.817727][T23221] RIP: 0023:0xf7fd0549 [ 1538.821844][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1538.841480][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1538.849946][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1538.857974][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1538.865992][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1538.873989][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1538.881988][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1538.889985][T23221] Uninit was stored to memory at: [ 1538.895056][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1538.900805][T23221] __msan_chain_origin+0x57/0xa0 [ 1538.905765][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1538.910893][T23221] get_compat_msghdr+0x108/0x2b0 [ 1538.915846][T23221] do_recvmmsg+0xdaf/0x2300 [ 1538.920378][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1538.925096][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.931200][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.937392][T23221] __do_fast_syscall_32+0x102/0x160 [ 1538.942716][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1538.947597][T23221] do_SYSENTER_32+0x73/0x90 [ 1538.952142][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.959107][T23221] [ 1538.961464][T23221] Uninit was stored to memory at: [ 1538.966602][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1538.972361][T23221] __msan_chain_origin+0x57/0xa0 [ 1538.977673][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1538.982808][T23221] get_compat_msghdr+0x108/0x2b0 [ 1538.988376][T23221] do_recvmmsg+0xdaf/0x2300 [ 1538.992925][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1538.997630][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.003728][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.009916][T23221] __do_fast_syscall_32+0x102/0x160 [ 1539.015159][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1539.020030][T23221] do_SYSENTER_32+0x73/0x90 [ 1539.024563][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.030898][T23221] [ 1539.033258][T23221] Uninit was stored to memory at: [ 1539.038315][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1539.044090][T23221] __msan_chain_origin+0x57/0xa0 [ 1539.049064][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1539.054205][T23221] get_compat_msghdr+0x108/0x2b0 [ 1539.059189][T23221] do_recvmmsg+0xdaf/0x2300 [ 1539.063722][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1539.068450][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.074544][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.080727][T23221] __do_fast_syscall_32+0x102/0x160 [ 1539.085969][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1539.090857][T23221] do_SYSENTER_32+0x73/0x90 [ 1539.095409][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.101737][T23221] [ 1539.104075][T23221] Uninit was stored to memory at: [ 1539.109117][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1539.114852][T23221] __msan_chain_origin+0x57/0xa0 [ 1539.119819][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1539.124948][T23221] get_compat_msghdr+0x108/0x2b0 [ 1539.129908][T23221] do_recvmmsg+0xdaf/0x2300 [ 1539.134438][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1539.139138][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.145229][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.151410][T23221] __do_fast_syscall_32+0x102/0x160 [ 1539.156637][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1539.161522][T23221] do_SYSENTER_32+0x73/0x90 [ 1539.166073][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.172403][T23221] [ 1539.174742][T23221] Uninit was stored to memory at: [ 1539.179805][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1539.185548][T23221] __msan_chain_origin+0x57/0xa0 [ 1539.190509][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1539.195654][T23221] get_compat_msghdr+0x108/0x2b0 [ 1539.200621][T23221] do_recvmmsg+0xdaf/0x2300 [ 1539.205165][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1539.209877][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.215982][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.222276][T23221] __do_fast_syscall_32+0x102/0x160 [ 1539.227508][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1539.232382][T23221] do_SYSENTER_32+0x73/0x90 [ 1539.236915][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.243272][T23221] [ 1539.245606][T23221] Uninit was stored to memory at: [ 1539.250678][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1539.256424][T23221] __msan_chain_origin+0x57/0xa0 [ 1539.261416][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1539.266560][T23221] get_compat_msghdr+0x108/0x2b0 [ 1539.271542][T23221] do_recvmmsg+0xdaf/0x2300 [ 1539.276067][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1539.280765][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.286857][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.293038][T23221] __do_fast_syscall_32+0x102/0x160 [ 1539.298266][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1539.303138][T23221] do_SYSENTER_32+0x73/0x90 [ 1539.307671][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.314026][T23221] [ 1539.316366][T23221] Uninit was stored to memory at: [ 1539.321428][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1539.327180][T23221] __msan_chain_origin+0x57/0xa0 [ 1539.332164][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1539.337307][T23221] get_compat_msghdr+0x108/0x2b0 [ 1539.342362][T23221] do_recvmmsg+0xdaf/0x2300 [ 1539.346892][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1539.351597][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.357728][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.365162][T23221] __do_fast_syscall_32+0x102/0x160 [ 1539.370395][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1539.375302][T23221] do_SYSENTER_32+0x73/0x90 [ 1539.379859][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.386214][T23221] [ 1539.388556][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1539.395259][T23221] do_recvmmsg+0xbc/0x2300 [ 1539.399788][T23221] do_recvmmsg+0xbc/0x2300 [ 1539.634462][T23224] not chained 5760000 origins [ 1539.639459][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1539.648229][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.658311][T23224] Call Trace: [ 1539.661743][T23224] dump_stack+0x21c/0x280 [ 1539.666126][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1539.671987][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1539.678113][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1539.683342][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1539.689174][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1539.695275][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1539.700677][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1539.706098][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1539.711939][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1539.718036][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1539.723011][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1539.728328][T23224] __msan_chain_origin+0x57/0xa0 [ 1539.733310][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1539.738455][T23224] get_compat_msghdr+0x108/0x2b0 [ 1539.743420][T23224] do_recvmmsg+0xdaf/0x2300 [ 1539.747957][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1539.753224][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1539.759175][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1539.764428][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1539.770080][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1539.775383][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1539.780179][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1539.784886][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1539.790737][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1539.795956][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.802053][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.808240][T23224] __do_fast_syscall_32+0x102/0x160 [ 1539.813722][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1539.818604][T23224] do_SYSENTER_32+0x73/0x90 [ 1539.823147][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.829509][T23224] RIP: 0023:0xf7fd0549 [ 1539.833620][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1539.853270][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1539.861742][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1539.869765][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1539.877785][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1539.885784][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1539.893897][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1539.901900][T23224] Uninit was stored to memory at: [ 1539.906986][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1539.912732][T23224] __msan_chain_origin+0x57/0xa0 [ 1539.917694][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1539.922824][T23224] get_compat_msghdr+0x108/0x2b0 [ 1539.927787][T23224] do_recvmmsg+0xdaf/0x2300 [ 1539.932316][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1539.937008][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.943105][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.949297][T23224] __do_fast_syscall_32+0x102/0x160 [ 1539.954542][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1539.959422][T23224] do_SYSENTER_32+0x73/0x90 [ 1539.963976][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.970744][T23224] [ 1539.973089][T23224] Uninit was stored to memory at: [ 1539.978151][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1539.983900][T23224] __msan_chain_origin+0x57/0xa0 [ 1539.988860][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1539.993985][T23224] get_compat_msghdr+0x108/0x2b0 [ 1539.998936][T23224] do_recvmmsg+0xdaf/0x2300 [ 1540.003482][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1540.008179][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.014261][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.020425][T23224] __do_fast_syscall_32+0x102/0x160 [ 1540.025655][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1540.030522][T23224] do_SYSENTER_32+0x73/0x90 [ 1540.035046][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.041366][T23224] [ 1540.043693][T23224] Uninit was stored to memory at: [ 1540.048732][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1540.054477][T23224] __msan_chain_origin+0x57/0xa0 [ 1540.059424][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1540.064543][T23224] get_compat_msghdr+0x108/0x2b0 [ 1540.069494][T23224] do_recvmmsg+0xdaf/0x2300 [ 1540.074043][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1540.078727][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.084886][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.091134][T23224] __do_fast_syscall_32+0x102/0x160 [ 1540.096337][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1540.101198][T23224] do_SYSENTER_32+0x73/0x90 [ 1540.105731][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.112053][T23224] [ 1540.114376][T23224] Uninit was stored to memory at: [ 1540.119415][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1540.125140][T23224] __msan_chain_origin+0x57/0xa0 [ 1540.130120][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1540.135252][T23224] get_compat_msghdr+0x108/0x2b0 [ 1540.140213][T23224] do_recvmmsg+0xdaf/0x2300 [ 1540.144730][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1540.149424][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.155505][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.161679][T23224] __do_fast_syscall_32+0x102/0x160 [ 1540.166910][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1540.171767][T23224] do_SYSENTER_32+0x73/0x90 [ 1540.176286][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.182610][T23224] [ 1540.184936][T23224] Uninit was stored to memory at: [ 1540.189975][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1540.195698][T23224] __msan_chain_origin+0x57/0xa0 [ 1540.200691][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1540.205814][T23224] get_compat_msghdr+0x108/0x2b0 [ 1540.210762][T23224] do_recvmmsg+0xdaf/0x2300 [ 1540.215287][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1540.219980][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.226068][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.232236][T23224] __do_fast_syscall_32+0x102/0x160 [ 1540.237450][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1540.242307][T23224] do_SYSENTER_32+0x73/0x90 [ 1540.246819][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.253136][T23224] [ 1540.255468][T23224] Uninit was stored to memory at: [ 1540.260513][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1540.266250][T23224] __msan_chain_origin+0x57/0xa0 [ 1540.271205][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1540.276327][T23224] get_compat_msghdr+0x108/0x2b0 [ 1540.283128][T23224] do_recvmmsg+0xdaf/0x2300 [ 1540.287664][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1540.292357][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.298541][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.304891][T23224] __do_fast_syscall_32+0x102/0x160 [ 1540.310113][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1540.315058][T23224] do_SYSENTER_32+0x73/0x90 [ 1540.319571][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.325898][T23224] [ 1540.328245][T23224] Uninit was stored to memory at: [ 1540.333299][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1540.339038][T23224] __msan_chain_origin+0x57/0xa0 [ 1540.344247][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1540.349375][T23224] get_compat_msghdr+0x108/0x2b0 [ 1540.354327][T23224] do_recvmmsg+0xdaf/0x2300 [ 1540.358847][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1540.363543][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.369649][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.375822][T23224] __do_fast_syscall_32+0x102/0x160 [ 1540.381047][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1540.385918][T23224] do_SYSENTER_32+0x73/0x90 [ 1540.391238][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.397560][T23224] [ 1540.399903][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1540.406645][T23224] do_recvmmsg+0xbc/0x2300 [ 1540.411070][T23224] do_recvmmsg+0xbc/0x2300 [ 1540.758906][T23224] not chained 5770000 origins [ 1540.763647][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1540.772419][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.782482][T23224] Call Trace: [ 1540.785797][T23224] dump_stack+0x21c/0x280 [ 1540.790358][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1540.796091][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1540.802554][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1540.807794][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1540.813626][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1540.819717][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1540.825118][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1540.830338][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1540.836031][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1540.842139][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1540.847095][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1540.852315][T23224] __msan_chain_origin+0x57/0xa0 [ 1540.857275][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1540.862419][T23224] get_compat_msghdr+0x108/0x2b0 [ 1540.867386][T23224] do_recvmmsg+0xdaf/0x2300 [ 1540.871924][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1540.877237][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1540.883230][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1540.888542][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1540.894216][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1540.899694][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1540.904473][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1540.909167][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1540.914981][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1540.920192][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.926276][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.932448][T23224] __do_fast_syscall_32+0x102/0x160 [ 1540.937752][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1540.942709][T23224] do_SYSENTER_32+0x73/0x90 [ 1540.947316][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.953648][T23224] RIP: 0023:0xf7fd0549 [ 1540.957731][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1540.977793][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1540.986228][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1540.994213][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1541.002203][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1541.010187][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1541.018174][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1541.026156][T23224] Uninit was stored to memory at: [ 1541.031208][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1541.036977][T23224] __msan_chain_origin+0x57/0xa0 [ 1541.041931][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1541.047057][T23224] get_compat_msghdr+0x108/0x2b0 [ 1541.052012][T23224] do_recvmmsg+0xdaf/0x2300 [ 1541.056533][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1541.061314][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.067499][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.073671][T23224] __do_fast_syscall_32+0x102/0x160 [ 1541.078885][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1541.083752][T23224] do_SYSENTER_32+0x73/0x90 [ 1541.088271][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.094793][T23224] [ 1541.097139][T23224] Uninit was stored to memory at: [ 1541.102186][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1541.108443][T23224] __msan_chain_origin+0x57/0xa0 [ 1541.113395][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1541.118519][T23224] get_compat_msghdr+0x108/0x2b0 [ 1541.123472][T23224] do_recvmmsg+0xdaf/0x2300 [ 1541.128093][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1541.132790][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.138882][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.145065][T23224] __do_fast_syscall_32+0x102/0x160 [ 1541.150307][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1541.155184][T23224] do_SYSENTER_32+0x73/0x90 [ 1541.159716][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.166238][T23224] [ 1541.168575][T23224] Uninit was stored to memory at: [ 1541.173626][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1541.179463][T23224] __msan_chain_origin+0x57/0xa0 [ 1541.184426][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1541.189585][T23224] get_compat_msghdr+0x108/0x2b0 [ 1541.194549][T23224] do_recvmmsg+0xdaf/0x2300 [ 1541.199071][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1541.203784][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.209895][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.216081][T23224] __do_fast_syscall_32+0x102/0x160 [ 1541.221302][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1541.226171][T23224] do_SYSENTER_32+0x73/0x90 [ 1541.230710][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.237034][T23224] [ 1541.239375][T23224] Uninit was stored to memory at: [ 1541.244419][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1541.250167][T23224] __msan_chain_origin+0x57/0xa0 [ 1541.255120][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1541.260250][T23224] get_compat_msghdr+0x108/0x2b0 [ 1541.265219][T23224] do_recvmmsg+0xdaf/0x2300 [ 1541.269752][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1541.274452][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.280534][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.286711][T23224] __do_fast_syscall_32+0x102/0x160 [ 1541.291937][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1541.296817][T23224] do_SYSENTER_32+0x73/0x90 [ 1541.301334][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.307657][T23224] [ 1541.309995][T23224] Uninit was stored to memory at: [ 1541.315039][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1541.320759][T23224] __msan_chain_origin+0x57/0xa0 [ 1541.325721][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1541.330838][T23224] get_compat_msghdr+0x108/0x2b0 [ 1541.335795][T23224] do_recvmmsg+0xdaf/0x2300 [ 1541.340317][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1541.345004][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.351108][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.357279][T23224] __do_fast_syscall_32+0x102/0x160 [ 1541.362486][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1541.367350][T23224] do_SYSENTER_32+0x73/0x90 [ 1541.371901][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.378223][T23224] [ 1541.380552][T23224] Uninit was stored to memory at: [ 1541.385613][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1541.391338][T23224] __msan_chain_origin+0x57/0xa0 [ 1541.396543][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1541.401666][T23224] get_compat_msghdr+0x108/0x2b0 [ 1541.406627][T23224] do_recvmmsg+0xdaf/0x2300 [ 1541.411174][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1541.415871][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.421970][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.428154][T23224] __do_fast_syscall_32+0x102/0x160 [ 1541.433378][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1541.438261][T23224] do_SYSENTER_32+0x73/0x90 [ 1541.443083][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.449405][T23224] [ 1541.451746][T23224] Uninit was stored to memory at: [ 1541.456804][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1541.462546][T23224] __msan_chain_origin+0x57/0xa0 [ 1541.467533][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1541.472667][T23224] get_compat_msghdr+0x108/0x2b0 [ 1541.477633][T23224] do_recvmmsg+0xdaf/0x2300 [ 1541.482166][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1541.486862][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.492949][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.499122][T23224] __do_fast_syscall_32+0x102/0x160 [ 1541.504339][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1541.509210][T23224] do_SYSENTER_32+0x73/0x90 [ 1541.513729][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.520048][T23224] [ 1541.522378][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1541.529067][T23224] do_recvmmsg+0xbc/0x2300 [ 1541.533492][T23224] do_recvmmsg+0xbc/0x2300 [ 1541.557973][T23221] not chained 5780000 origins [ 1541.562756][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1541.571962][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1541.582052][T23221] Call Trace: [ 1541.585381][T23221] dump_stack+0x21c/0x280 [ 1541.589844][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1541.595651][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1541.601733][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1541.606947][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1541.612766][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1541.618854][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1541.624249][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1541.629471][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1541.635129][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1541.641254][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1541.646209][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1541.651540][T23221] __msan_chain_origin+0x57/0xa0 [ 1541.656583][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1541.661715][T23221] get_compat_msghdr+0x108/0x2b0 [ 1541.666826][T23221] do_recvmmsg+0xdaf/0x2300 [ 1541.671344][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1541.677438][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1541.682656][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1541.688568][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1541.693810][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1541.699543][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1541.704861][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1541.709638][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1541.714335][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1541.720158][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1541.725374][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.731469][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.737655][T23221] __do_fast_syscall_32+0x102/0x160 [ 1541.742901][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1541.747767][T23221] do_SYSENTER_32+0x73/0x90 [ 1541.752293][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.758633][T23221] RIP: 0023:0xf7fd0549 [ 1541.762717][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1541.782339][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1541.790777][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1541.798884][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1541.806868][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1541.814881][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1541.822868][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1541.830851][T23221] Uninit was stored to memory at: [ 1541.835900][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1541.841635][T23221] __msan_chain_origin+0x57/0xa0 [ 1541.846592][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1541.851728][T23221] get_compat_msghdr+0x108/0x2b0 [ 1541.856684][T23221] do_recvmmsg+0xdaf/0x2300 [ 1541.861200][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1541.865943][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.872033][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.878301][T23221] __do_fast_syscall_32+0x102/0x160 [ 1541.883545][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1541.888415][T23221] do_SYSENTER_32+0x73/0x90 [ 1541.892969][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.899290][T23221] [ 1541.901622][T23221] Uninit was stored to memory at: [ 1541.906671][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1541.912442][T23221] __msan_chain_origin+0x57/0xa0 [ 1541.917391][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1541.922510][T23221] get_compat_msghdr+0x108/0x2b0 [ 1541.927478][T23221] do_recvmmsg+0xdaf/0x2300 [ 1541.931991][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1541.936674][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.942762][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.948928][T23221] __do_fast_syscall_32+0x102/0x160 [ 1541.954222][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1541.959085][T23221] do_SYSENTER_32+0x73/0x90 [ 1541.963619][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.969958][T23221] [ 1541.972299][T23221] Uninit was stored to memory at: [ 1541.977338][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1541.983075][T23221] __msan_chain_origin+0x57/0xa0 [ 1541.988021][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1541.993145][T23221] get_compat_msghdr+0x108/0x2b0 [ 1541.998100][T23221] do_recvmmsg+0xdaf/0x2300 [ 1542.002614][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1542.007389][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.013465][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.019625][T23221] __do_fast_syscall_32+0x102/0x160 [ 1542.024835][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1542.029707][T23221] do_SYSENTER_32+0x73/0x90 [ 1542.034230][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.040547][T23221] [ 1542.042885][T23221] Uninit was stored to memory at: [ 1542.047936][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1542.053675][T23221] __msan_chain_origin+0x57/0xa0 [ 1542.058622][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1542.063743][T23221] get_compat_msghdr+0x108/0x2b0 [ 1542.068704][T23221] do_recvmmsg+0xdaf/0x2300 [ 1542.073215][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1542.077903][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.083979][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.090157][T23221] __do_fast_syscall_32+0x102/0x160 [ 1542.095361][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1542.100218][T23221] do_SYSENTER_32+0x73/0x90 [ 1542.104729][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.111051][T23221] [ 1542.113398][T23221] Uninit was stored to memory at: [ 1542.118536][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1542.124279][T23221] __msan_chain_origin+0x57/0xa0 [ 1542.129243][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1542.134365][T23221] get_compat_msghdr+0x108/0x2b0 [ 1542.139339][T23221] do_recvmmsg+0xdaf/0x2300 [ 1542.143856][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1542.148545][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.154626][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.160790][T23221] __do_fast_syscall_32+0x102/0x160 [ 1542.166003][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1542.170870][T23221] do_SYSENTER_32+0x73/0x90 [ 1542.175386][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.181729][T23221] [ 1542.184070][T23221] Uninit was stored to memory at: [ 1542.189159][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1542.194896][T23221] __msan_chain_origin+0x57/0xa0 [ 1542.204398][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1542.209527][T23221] get_compat_msghdr+0x108/0x2b0 [ 1542.214480][T23221] do_recvmmsg+0xdaf/0x2300 [ 1542.219007][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1542.223716][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.229812][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.235982][T23221] __do_fast_syscall_32+0x102/0x160 [ 1542.241197][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1542.246060][T23221] do_SYSENTER_32+0x73/0x90 [ 1542.250571][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.256982][T23221] [ 1542.259311][T23221] Uninit was stored to memory at: [ 1542.264353][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1542.270077][T23221] __msan_chain_origin+0x57/0xa0 [ 1542.275040][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1542.280166][T23221] get_compat_msghdr+0x108/0x2b0 [ 1542.285193][T23221] do_recvmmsg+0xdaf/0x2300 [ 1542.289708][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1542.294571][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.300668][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.306848][T23221] __do_fast_syscall_32+0x102/0x160 [ 1542.312077][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1542.316942][T23221] do_SYSENTER_32+0x73/0x90 [ 1542.321477][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.327813][T23221] [ 1542.330503][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1542.337203][T23221] do_recvmmsg+0xbc/0x2300 [ 1542.341635][T23221] do_recvmmsg+0xbc/0x2300 [ 1542.647841][T23224] not chained 5790000 origins [ 1542.652585][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1542.661481][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1542.671550][T23224] Call Trace: [ 1542.674954][T23224] dump_stack+0x21c/0x280 [ 1542.679844][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1542.685871][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1542.691965][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1542.697189][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1542.703018][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1542.709099][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1542.714502][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1542.719730][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1542.725401][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1542.731488][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1542.736439][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1542.741674][T23224] __msan_chain_origin+0x57/0xa0 [ 1542.746649][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1542.751808][T23224] get_compat_msghdr+0x108/0x2b0 [ 1542.756784][T23224] do_recvmmsg+0xdaf/0x2300 [ 1542.761325][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1542.766557][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1542.772481][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1542.777728][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1542.783393][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1542.789057][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1542.793845][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1542.798547][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1542.804387][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1542.809609][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.815742][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.821949][T23224] __do_fast_syscall_32+0x102/0x160 [ 1542.827190][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1542.832095][T23224] do_SYSENTER_32+0x73/0x90 [ 1542.836655][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.843003][T23224] RIP: 0023:0xf7fd0549 [ 1542.847089][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1542.866723][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1542.875171][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1542.883182][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1542.891182][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1542.899188][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1542.907183][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1542.915290][T23224] Uninit was stored to memory at: [ 1542.920357][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1542.926109][T23224] __msan_chain_origin+0x57/0xa0 [ 1542.931082][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1542.936239][T23224] get_compat_msghdr+0x108/0x2b0 [ 1542.941194][T23224] do_recvmmsg+0xdaf/0x2300 [ 1542.945718][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1542.950410][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.956498][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.962691][T23224] __do_fast_syscall_32+0x102/0x160 [ 1542.967917][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1542.972810][T23224] do_SYSENTER_32+0x73/0x90 [ 1542.977440][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.983768][T23224] [ 1542.986107][T23224] Uninit was stored to memory at: [ 1542.991163][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1542.996926][T23224] __msan_chain_origin+0x57/0xa0 [ 1543.001896][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1543.007026][T23224] get_compat_msghdr+0x108/0x2b0 [ 1543.011989][T23224] do_recvmmsg+0xdaf/0x2300 [ 1543.016517][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1543.021222][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.027321][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.033516][T23224] __do_fast_syscall_32+0x102/0x160 [ 1543.038739][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1543.043709][T23224] do_SYSENTER_32+0x73/0x90 [ 1543.048233][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.054662][T23224] [ 1543.056997][T23224] Uninit was stored to memory at: [ 1543.062316][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1543.068051][T23224] __msan_chain_origin+0x57/0xa0 [ 1543.073014][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1543.078144][T23224] get_compat_msghdr+0x108/0x2b0 [ 1543.083107][T23224] do_recvmmsg+0xdaf/0x2300 [ 1543.087626][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1543.092320][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.098412][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.104584][T23224] __do_fast_syscall_32+0x102/0x160 [ 1543.109799][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1543.114746][T23224] do_SYSENTER_32+0x73/0x90 [ 1543.119268][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.126551][T23224] [ 1543.128884][T23224] Uninit was stored to memory at: [ 1543.133959][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1543.139716][T23224] __msan_chain_origin+0x57/0xa0 [ 1543.144687][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1543.149805][T23224] get_compat_msghdr+0x108/0x2b0 [ 1543.154781][T23224] do_recvmmsg+0xdaf/0x2300 [ 1543.159291][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1543.163977][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.170052][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.176232][T23224] __do_fast_syscall_32+0x102/0x160 [ 1543.182082][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1543.186971][T23224] do_SYSENTER_32+0x73/0x90 [ 1543.191490][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.197829][T23224] [ 1543.200155][T23224] Uninit was stored to memory at: [ 1543.205207][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1543.211210][T23224] __msan_chain_origin+0x57/0xa0 [ 1543.216161][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1543.221278][T23224] get_compat_msghdr+0x108/0x2b0 [ 1543.226225][T23224] do_recvmmsg+0xdaf/0x2300 [ 1543.230735][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1543.235421][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.241498][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.247670][T23224] __do_fast_syscall_32+0x102/0x160 [ 1543.252880][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1543.257839][T23224] do_SYSENTER_32+0x73/0x90 [ 1543.262637][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.268961][T23224] [ 1543.271287][T23224] Uninit was stored to memory at: [ 1543.276330][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1543.282054][T23224] __msan_chain_origin+0x57/0xa0 [ 1543.287005][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1543.292134][T23224] get_compat_msghdr+0x108/0x2b0 [ 1543.297100][T23224] do_recvmmsg+0xdaf/0x2300 [ 1543.301607][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1543.306334][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.312416][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.318591][T23224] __do_fast_syscall_32+0x102/0x160 [ 1543.323813][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1543.328681][T23224] do_SYSENTER_32+0x73/0x90 [ 1543.333227][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.339549][T23224] [ 1543.341913][T23224] Uninit was stored to memory at: [ 1543.346958][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1543.352682][T23224] __msan_chain_origin+0x57/0xa0 [ 1543.357640][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1543.362985][T23224] get_compat_msghdr+0x108/0x2b0 [ 1543.367931][T23224] do_recvmmsg+0xdaf/0x2300 [ 1543.372439][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1543.377125][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.383210][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.389374][T23224] __do_fast_syscall_32+0x102/0x160 [ 1543.394591][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1543.399451][T23224] do_SYSENTER_32+0x73/0x90 [ 1543.403966][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.410631][T23224] [ 1543.412963][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1543.419669][T23224] do_recvmmsg+0xbc/0x2300 [ 1543.424086][T23224] do_recvmmsg+0xbc/0x2300 [ 1543.459198][T23221] not chained 5800000 origins [ 1543.463972][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1543.473734][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.483823][T23221] Call Trace: [ 1543.487138][T23221] dump_stack+0x21c/0x280 [ 1543.491499][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1543.497249][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1543.503427][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1543.508636][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1543.514457][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1543.521016][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1543.526417][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1543.532062][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1543.537809][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1543.543896][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1543.549454][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1543.554760][T23221] __msan_chain_origin+0x57/0xa0 [ 1543.560175][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1543.565833][T23221] get_compat_msghdr+0x108/0x2b0 [ 1543.570903][T23221] do_recvmmsg+0xdaf/0x2300 [ 1543.576183][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1543.582806][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1543.588899][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1543.594806][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1543.600918][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1543.606771][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1543.612074][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1543.617119][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1543.621818][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1543.627643][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1543.632863][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.639403][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.645682][T23221] __do_fast_syscall_32+0x102/0x160 [ 1543.650902][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1543.655971][T23221] do_SYSENTER_32+0x73/0x90 [ 1543.660493][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.666849][T23221] RIP: 0023:0xf7fd0549 [ 1543.670989][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1543.690716][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1543.699242][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1543.707321][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1543.715596][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1543.723582][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1543.731596][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1543.739618][T23221] Uninit was stored to memory at: [ 1543.744877][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1543.750609][T23221] __msan_chain_origin+0x57/0xa0 [ 1543.755613][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1543.761160][T23221] get_compat_msghdr+0x108/0x2b0 [ 1543.766126][T23221] do_recvmmsg+0xdaf/0x2300 [ 1543.771307][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1543.776026][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.782208][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.788380][T23221] __do_fast_syscall_32+0x102/0x160 [ 1543.794131][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1543.800421][T23221] do_SYSENTER_32+0x73/0x90 [ 1543.804944][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.811262][T23221] [ 1543.814276][T23221] Uninit was stored to memory at: [ 1543.819639][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1543.825552][T23221] __msan_chain_origin+0x57/0xa0 [ 1543.830513][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1543.835648][T23221] get_compat_msghdr+0x108/0x2b0 [ 1543.840596][T23221] do_recvmmsg+0xdaf/0x2300 [ 1543.845113][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1543.849821][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.855939][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.862115][T23221] __do_fast_syscall_32+0x102/0x160 [ 1543.867334][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1543.872291][T23221] do_SYSENTER_32+0x73/0x90 [ 1543.877070][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.883411][T23221] [ 1543.885743][T23221] Uninit was stored to memory at: [ 1543.890782][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1543.897144][T23221] __msan_chain_origin+0x57/0xa0 [ 1543.902224][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1543.907609][T23221] get_compat_msghdr+0x108/0x2b0 [ 1543.912561][T23221] do_recvmmsg+0xdaf/0x2300 [ 1543.917063][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1543.921750][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.927842][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.934100][T23221] __do_fast_syscall_32+0x102/0x160 [ 1543.939306][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1543.944164][T23221] do_SYSENTER_32+0x73/0x90 [ 1543.948677][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.955006][T23221] [ 1543.957334][T23221] Uninit was stored to memory at: [ 1543.962644][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1543.968382][T23221] __msan_chain_origin+0x57/0xa0 [ 1543.973340][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1543.978469][T23221] get_compat_msghdr+0x108/0x2b0 [ 1543.983420][T23221] do_recvmmsg+0xdaf/0x2300 [ 1543.988020][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1543.992705][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.998797][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1544.005064][T23221] __do_fast_syscall_32+0x102/0x160 [ 1544.010374][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1544.015862][T23221] do_SYSENTER_32+0x73/0x90 [ 1544.020474][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1544.026799][T23221] [ 1544.029214][T23221] Uninit was stored to memory at: [ 1544.034271][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1544.040015][T23221] __msan_chain_origin+0x57/0xa0 [ 1544.044978][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1544.050290][T23221] get_compat_msghdr+0x108/0x2b0 [ 1544.055268][T23221] do_recvmmsg+0xdaf/0x2300 [ 1544.059797][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1544.064595][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1544.070869][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1544.077161][T23221] __do_fast_syscall_32+0x102/0x160 [ 1544.082738][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1544.087600][T23221] do_SYSENTER_32+0x73/0x90 [ 1544.092117][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1544.098529][T23221] [ 1544.100854][T23221] Uninit was stored to memory at: [ 1544.105900][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1544.111637][T23221] __msan_chain_origin+0x57/0xa0 [ 1544.116588][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1544.121714][T23221] get_compat_msghdr+0x108/0x2b0 [ 1544.126674][T23221] do_recvmmsg+0xdaf/0x2300 [ 1544.131189][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1544.135878][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1544.141978][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1544.148156][T23221] __do_fast_syscall_32+0x102/0x160 [ 1544.153372][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1544.158251][T23221] do_SYSENTER_32+0x73/0x90 [ 1544.162786][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1544.169110][T23221] [ 1544.171439][T23221] Uninit was stored to memory at: [ 1544.176484][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1544.182214][T23221] __msan_chain_origin+0x57/0xa0 [ 1544.187205][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1544.192348][T23221] get_compat_msghdr+0x108/0x2b0 [ 1544.197300][T23221] do_recvmmsg+0xdaf/0x2300 [ 1544.201819][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1544.206521][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1544.212601][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1544.218784][T23221] __do_fast_syscall_32+0x102/0x160 [ 1544.224696][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1544.230003][T23221] do_SYSENTER_32+0x73/0x90 [ 1544.234537][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1544.240858][T23221] [ 1544.243200][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1544.249896][T23221] do_recvmmsg+0xbc/0x2300 [ 1544.254328][T23221] do_recvmmsg+0xbc/0x2300 [ 1544.537745][T23224] not chained 5810000 origins [ 1544.542469][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1544.552104][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1544.562173][T23224] Call Trace: [ 1544.565511][T23224] dump_stack+0x21c/0x280 [ 1544.569900][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1544.575995][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1544.582088][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1544.587307][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1544.593493][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1544.599577][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1544.605010][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1544.610230][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1544.615883][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1544.622325][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1544.627298][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1544.632512][T23224] __msan_chain_origin+0x57/0xa0 [ 1544.637473][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1544.642613][T23224] get_compat_msghdr+0x108/0x2b0 [ 1544.647574][T23224] do_recvmmsg+0xdaf/0x2300 [ 1544.652121][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1544.657339][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1544.663274][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1544.668496][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1544.674152][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1544.679455][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1544.684362][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1544.689078][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1544.694899][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1544.700217][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1544.706316][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1544.712494][T23224] __do_fast_syscall_32+0x102/0x160 [ 1544.717808][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1544.722741][T23224] do_SYSENTER_32+0x73/0x90 [ 1544.727554][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1544.733891][T23224] RIP: 0023:0xf7fd0549 [ 1544.737974][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1544.757604][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1544.766166][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1544.774163][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1544.782285][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1544.790423][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1544.798441][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1544.806735][T23224] Uninit was stored to memory at: [ 1544.811832][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1544.817701][T23224] __msan_chain_origin+0x57/0xa0 [ 1544.822672][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1544.827919][T23224] get_compat_msghdr+0x108/0x2b0 [ 1544.833126][T23224] do_recvmmsg+0xdaf/0x2300 [ 1544.837797][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1544.842511][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1544.848600][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1544.854781][T23224] __do_fast_syscall_32+0x102/0x160 [ 1544.860025][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1544.864901][T23224] do_SYSENTER_32+0x73/0x90 [ 1544.869432][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1544.876063][T23224] [ 1544.878399][T23224] Uninit was stored to memory at: [ 1544.883477][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1544.889443][T23224] __msan_chain_origin+0x57/0xa0 [ 1544.894401][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1544.899533][T23224] get_compat_msghdr+0x108/0x2b0 [ 1544.904504][T23224] do_recvmmsg+0xdaf/0x2300 [ 1544.909060][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1544.913758][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1544.919852][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1544.926056][T23224] __do_fast_syscall_32+0x102/0x160 [ 1544.931278][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1544.936275][T23224] do_SYSENTER_32+0x73/0x90 [ 1544.940807][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1544.947133][T23224] [ 1544.949673][T23224] Uninit was stored to memory at: [ 1544.954726][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1544.960462][T23224] __msan_chain_origin+0x57/0xa0 [ 1544.965435][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1544.970571][T23224] get_compat_msghdr+0x108/0x2b0 [ 1544.975546][T23224] do_recvmmsg+0xdaf/0x2300 [ 1544.980095][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1544.984818][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1544.990949][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1544.997212][T23224] __do_fast_syscall_32+0x102/0x160 [ 1545.002433][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1545.007301][T23224] do_SYSENTER_32+0x73/0x90 [ 1545.011854][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1545.018338][T23224] [ 1545.020668][T23224] Uninit was stored to memory at: [ 1545.025735][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1545.031485][T23224] __msan_chain_origin+0x57/0xa0 [ 1545.036448][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1545.041660][T23224] get_compat_msghdr+0x108/0x2b0 [ 1545.046613][T23224] do_recvmmsg+0xdaf/0x2300 [ 1545.051141][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1545.055834][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1545.061917][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1545.068086][T23224] __do_fast_syscall_32+0x102/0x160 [ 1545.073297][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1545.078159][T23224] do_SYSENTER_32+0x73/0x90 [ 1545.082707][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1545.089032][T23224] [ 1545.091358][T23224] Uninit was stored to memory at: [ 1545.096406][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1545.102139][T23224] __msan_chain_origin+0x57/0xa0 [ 1545.107098][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1545.112224][T23224] get_compat_msghdr+0x108/0x2b0 [ 1545.117175][T23224] do_recvmmsg+0xdaf/0x2300 [ 1545.121691][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1545.126424][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1545.132615][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1545.138791][T23224] __do_fast_syscall_32+0x102/0x160 [ 1545.144007][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1545.148870][T23224] do_SYSENTER_32+0x73/0x90 [ 1545.153390][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1545.159710][T23224] [ 1545.162039][T23224] Uninit was stored to memory at: [ 1545.167106][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1545.172889][T23224] __msan_chain_origin+0x57/0xa0 [ 1545.177842][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1545.182971][T23224] get_compat_msghdr+0x108/0x2b0 [ 1545.188886][T23224] do_recvmmsg+0xdaf/0x2300 [ 1545.193407][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1545.198104][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1545.204216][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1545.210396][T23224] __do_fast_syscall_32+0x102/0x160 [ 1545.216661][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1545.221552][T23224] do_SYSENTER_32+0x73/0x90 [ 1545.226074][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1545.232398][T23224] [ 1545.234732][T23224] Uninit was stored to memory at: [ 1545.239779][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1545.246034][T23224] __msan_chain_origin+0x57/0xa0 [ 1545.251000][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1545.256129][T23224] get_compat_msghdr+0x108/0x2b0 [ 1545.261088][T23224] do_recvmmsg+0xdaf/0x2300 [ 1545.265615][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1545.270311][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1545.276393][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1545.282566][T23224] __do_fast_syscall_32+0x102/0x160 [ 1545.287785][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1545.292691][T23224] do_SYSENTER_32+0x73/0x90 [ 1545.297212][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1545.303539][T23224] [ 1545.305877][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1545.317461][T23224] do_recvmmsg+0xbc/0x2300 [ 1545.321898][T23224] do_recvmmsg+0xbc/0x2300 [ 1545.469167][T23224] not chained 5820000 origins [ 1545.473991][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1545.482764][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1545.492924][T23224] Call Trace: [ 1545.496268][T23224] dump_stack+0x21c/0x280 [ 1545.500654][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1545.506411][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1545.512516][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1545.517744][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1545.523584][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1545.530230][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1545.535747][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1545.540978][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1545.546733][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1545.552830][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1545.557890][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1545.563117][T23224] __msan_chain_origin+0x57/0xa0 [ 1545.568084][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1545.573250][T23224] get_compat_msghdr+0x108/0x2b0 [ 1545.578229][T23224] do_recvmmsg+0xdaf/0x2300 [ 1545.582781][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1545.588097][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1545.594025][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1545.599278][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1545.606685][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1545.612097][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1545.616909][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1545.621617][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1545.627540][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1545.633048][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1545.639167][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1545.645377][T23224] __do_fast_syscall_32+0x102/0x160 [ 1545.650791][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1545.655700][T23224] do_SYSENTER_32+0x73/0x90 [ 1545.660328][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1545.666692][T23224] RIP: 0023:0xf7fd0549 [ 1545.670788][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1545.690429][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1545.699656][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1545.707673][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1545.715670][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1545.723664][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1545.733412][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1545.741400][T23224] Uninit was stored to memory at: [ 1545.746469][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1545.752360][T23224] __msan_chain_origin+0x57/0xa0 [ 1545.757409][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1545.762556][T23224] get_compat_msghdr+0x108/0x2b0 [ 1545.767518][T23224] do_recvmmsg+0xdaf/0x2300 [ 1545.772040][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1545.776842][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1545.782927][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1545.789115][T23224] __do_fast_syscall_32+0x102/0x160 [ 1545.794539][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1545.799410][T23224] do_SYSENTER_32+0x73/0x90 [ 1545.803935][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1545.810257][T23224] [ 1545.812599][T23224] Uninit was stored to memory at: [ 1545.817650][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1545.823382][T23224] __msan_chain_origin+0x57/0xa0 [ 1545.828340][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1545.833559][T23224] get_compat_msghdr+0x108/0x2b0 [ 1545.838529][T23224] do_recvmmsg+0xdaf/0x2300 [ 1545.843039][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1545.847724][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1545.853823][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1545.860013][T23224] __do_fast_syscall_32+0x102/0x160 [ 1545.865229][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1545.870113][T23224] do_SYSENTER_32+0x73/0x90 [ 1545.874645][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1545.881072][T23224] [ 1545.883405][T23224] Uninit was stored to memory at: [ 1545.888469][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1545.894203][T23224] __msan_chain_origin+0x57/0xa0 [ 1545.899164][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1545.904297][T23224] get_compat_msghdr+0x108/0x2b0 [ 1545.909258][T23224] do_recvmmsg+0xdaf/0x2300 [ 1545.913780][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1545.918474][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1545.924680][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1545.930858][T23224] __do_fast_syscall_32+0x102/0x160 [ 1545.936079][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1545.941050][T23224] do_SYSENTER_32+0x73/0x90 [ 1545.945598][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1545.951925][T23224] [ 1545.954349][T23224] Uninit was stored to memory at: [ 1545.959402][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1545.965502][T23224] __msan_chain_origin+0x57/0xa0 [ 1545.970500][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1545.975733][T23224] get_compat_msghdr+0x108/0x2b0 [ 1545.980705][T23224] do_recvmmsg+0xdaf/0x2300 [ 1545.985339][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1545.990311][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1545.996412][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1546.002779][T23224] __do_fast_syscall_32+0x102/0x160 [ 1546.008026][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1546.013611][T23224] do_SYSENTER_32+0x73/0x90 [ 1546.018141][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1546.024468][T23224] [ 1546.026805][T23224] Uninit was stored to memory at: [ 1546.031863][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1546.037612][T23224] __msan_chain_origin+0x57/0xa0 [ 1546.042677][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1546.047817][T23224] get_compat_msghdr+0x108/0x2b0 [ 1546.052783][T23224] do_recvmmsg+0xdaf/0x2300 [ 1546.057306][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1546.062088][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1546.068185][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1546.074374][T23224] __do_fast_syscall_32+0x102/0x160 [ 1546.079595][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1546.084476][T23224] do_SYSENTER_32+0x73/0x90 [ 1546.089011][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1546.095335][T23224] [ 1546.097689][T23224] Uninit was stored to memory at: [ 1546.102739][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1546.108569][T23224] __msan_chain_origin+0x57/0xa0 [ 1546.113526][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1546.118650][T23224] get_compat_msghdr+0x108/0x2b0 [ 1546.123782][T23224] do_recvmmsg+0xdaf/0x2300 [ 1546.128298][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1546.133010][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1546.139113][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1546.145286][T23224] __do_fast_syscall_32+0x102/0x160 [ 1546.150504][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1546.156687][T23224] do_SYSENTER_32+0x73/0x90 [ 1546.161209][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1546.167543][T23224] [ 1546.169978][T23224] Uninit was stored to memory at: [ 1546.175043][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1546.180776][T23224] __msan_chain_origin+0x57/0xa0 [ 1546.185771][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1546.190898][T23224] get_compat_msghdr+0x108/0x2b0 [ 1546.195850][T23224] do_recvmmsg+0xdaf/0x2300 [ 1546.200391][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1546.205082][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1546.211180][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1546.217365][T23224] __do_fast_syscall_32+0x102/0x160 [ 1546.222573][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1546.227453][T23224] do_SYSENTER_32+0x73/0x90 [ 1546.231970][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1546.238296][T23224] [ 1546.240644][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1546.247330][T23224] do_recvmmsg+0xbc/0x2300 [ 1546.251753][T23224] do_recvmmsg+0xbc/0x2300 [ 1546.508211][T23224] not chained 5830000 origins [ 1546.512930][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1546.522218][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1546.532321][T23224] Call Trace: [ 1546.535742][T23224] dump_stack+0x21c/0x280 [ 1546.540117][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1546.545864][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1546.551966][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1546.557210][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1546.563139][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1546.569569][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1546.575137][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1546.580356][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1546.586015][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1546.592286][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1546.597239][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1546.602538][T23224] __msan_chain_origin+0x57/0xa0 [ 1546.607577][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1546.612718][T23224] get_compat_msghdr+0x108/0x2b0 [ 1546.617796][T23224] do_recvmmsg+0xdaf/0x2300 [ 1546.622666][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1546.627891][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1546.633812][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1546.639033][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1546.644714][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1546.650018][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1546.655070][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1546.660203][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1546.666371][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1546.673770][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1546.679922][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1546.686106][T23224] __do_fast_syscall_32+0x102/0x160 [ 1546.691341][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1546.696214][T23224] do_SYSENTER_32+0x73/0x90 [ 1546.700755][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1546.707100][T23224] RIP: 0023:0xf7fd0549 [ 1546.711191][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1546.730822][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1546.739259][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1546.747401][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1546.755399][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1546.763421][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1546.771681][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1546.779674][T23224] Uninit was stored to memory at: [ 1546.784763][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1546.790964][T23224] __msan_chain_origin+0x57/0xa0 [ 1546.795929][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1546.801082][T23224] get_compat_msghdr+0x108/0x2b0 [ 1546.806032][T23224] do_recvmmsg+0xdaf/0x2300 [ 1546.810545][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1546.815237][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1546.821324][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1546.827495][T23224] __do_fast_syscall_32+0x102/0x160 [ 1546.832720][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1546.837594][T23224] do_SYSENTER_32+0x73/0x90 [ 1546.842107][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1546.848428][T23224] [ 1546.850773][T23224] Uninit was stored to memory at: [ 1546.855836][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1546.861571][T23224] __msan_chain_origin+0x57/0xa0 [ 1546.866524][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1546.871652][T23224] get_compat_msghdr+0x108/0x2b0 [ 1546.876601][T23224] do_recvmmsg+0xdaf/0x2300 [ 1546.881108][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1546.885821][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1546.891914][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1546.898278][T23224] __do_fast_syscall_32+0x102/0x160 [ 1546.903517][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1546.908818][T23224] do_SYSENTER_32+0x73/0x90 [ 1546.913340][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1546.919689][T23224] [ 1546.922033][T23224] Uninit was stored to memory at: [ 1546.927077][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1546.932840][T23224] __msan_chain_origin+0x57/0xa0 [ 1546.937990][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1546.943345][T23224] get_compat_msghdr+0x108/0x2b0 [ 1546.948308][T23224] do_recvmmsg+0xdaf/0x2300 [ 1546.952833][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1546.957603][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1546.963696][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1546.969880][T23224] __do_fast_syscall_32+0x102/0x160 [ 1546.975119][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1546.980094][T23224] do_SYSENTER_32+0x73/0x90 [ 1546.984611][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1546.991024][T23224] [ 1546.993378][T23224] Uninit was stored to memory at: [ 1546.998429][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1547.004155][T23224] __msan_chain_origin+0x57/0xa0 [ 1547.009118][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1547.014240][T23224] get_compat_msghdr+0x108/0x2b0 [ 1547.019276][T23224] do_recvmmsg+0xdaf/0x2300 [ 1547.023810][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1547.028500][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.034596][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.040764][T23224] __do_fast_syscall_32+0x102/0x160 [ 1547.045980][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1547.050838][T23224] do_SYSENTER_32+0x73/0x90 [ 1547.055349][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.061686][T23224] [ 1547.064025][T23224] Uninit was stored to memory at: [ 1547.069078][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1547.074824][T23224] __msan_chain_origin+0x57/0xa0 [ 1547.079786][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1547.084940][T23224] get_compat_msghdr+0x108/0x2b0 [ 1547.089904][T23224] do_recvmmsg+0xdaf/0x2300 [ 1547.094418][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1547.099098][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.106418][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.112589][T23224] __do_fast_syscall_32+0x102/0x160 [ 1547.117794][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1547.122835][T23224] do_SYSENTER_32+0x73/0x90 [ 1547.127366][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.133706][T23224] [ 1547.136032][T23224] Uninit was stored to memory at: [ 1547.141089][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1547.146817][T23224] __msan_chain_origin+0x57/0xa0 [ 1547.151786][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1547.156915][T23224] get_compat_msghdr+0x108/0x2b0 [ 1547.161966][T23224] do_recvmmsg+0xdaf/0x2300 [ 1547.166485][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1547.171202][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.177296][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.183477][T23224] __do_fast_syscall_32+0x102/0x160 [ 1547.189151][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1547.194089][T23224] do_SYSENTER_32+0x73/0x90 [ 1547.198749][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.205078][T23224] [ 1547.207428][T23224] Uninit was stored to memory at: [ 1547.213094][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1547.218933][T23224] __msan_chain_origin+0x57/0xa0 [ 1547.224076][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1547.230084][T23224] get_compat_msghdr+0x108/0x2b0 [ 1547.235050][T23224] do_recvmmsg+0xdaf/0x2300 [ 1547.239594][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1547.244298][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.250390][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.256671][T23224] __do_fast_syscall_32+0x102/0x160 [ 1547.261908][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1547.266788][T23224] do_SYSENTER_32+0x73/0x90 [ 1547.271315][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.277932][T23224] [ 1547.280300][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1547.287072][T23224] do_recvmmsg+0xbc/0x2300 [ 1547.291525][T23224] do_recvmmsg+0xbc/0x2300 [ 1547.447925][T23224] not chained 5840000 origins [ 1547.452651][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1547.461422][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1547.472023][T23224] Call Trace: [ 1547.475362][T23224] dump_stack+0x21c/0x280 [ 1547.479739][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1547.485486][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1547.491596][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1547.496828][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1547.502680][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1547.508783][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1547.514547][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1547.519790][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1547.525545][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1547.531997][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1547.536980][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1547.542204][T23224] __msan_chain_origin+0x57/0xa0 [ 1547.547177][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1547.552410][T23224] get_compat_msghdr+0x108/0x2b0 [ 1547.557386][T23224] do_recvmmsg+0xdaf/0x2300 [ 1547.561946][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1547.567174][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1547.573178][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1547.578411][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1547.584074][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1547.589394][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1547.594189][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1547.599001][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1547.604921][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1547.610150][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.616254][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.622446][T23224] __do_fast_syscall_32+0x102/0x160 [ 1547.627778][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1547.632669][T23224] do_SYSENTER_32+0x73/0x90 [ 1547.637215][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.643563][T23224] RIP: 0023:0xf7fd0549 [ 1547.647736][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1547.667376][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1547.675818][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1547.683838][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1547.691854][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1547.699956][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1547.707954][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1547.715964][T23224] Uninit was stored to memory at: [ 1547.721026][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1547.726766][T23224] __msan_chain_origin+0x57/0xa0 [ 1547.731749][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1547.736885][T23224] get_compat_msghdr+0x108/0x2b0 [ 1547.741852][T23224] do_recvmmsg+0xdaf/0x2300 [ 1547.746470][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1547.751183][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.757279][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.763460][T23224] __do_fast_syscall_32+0x102/0x160 [ 1547.768710][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1547.773586][T23224] do_SYSENTER_32+0x73/0x90 [ 1547.778120][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.784468][T23224] [ 1547.786804][T23224] Uninit was stored to memory at: [ 1547.791864][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1547.797624][T23224] __msan_chain_origin+0x57/0xa0 [ 1547.802577][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1547.807700][T23224] get_compat_msghdr+0x108/0x2b0 [ 1547.812676][T23224] do_recvmmsg+0xdaf/0x2300 [ 1547.817197][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1547.821912][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.828013][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.834199][T23224] __do_fast_syscall_32+0x102/0x160 [ 1547.839430][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1547.844325][T23224] do_SYSENTER_32+0x73/0x90 [ 1547.848861][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.855223][T23224] [ 1547.857561][T23224] Uninit was stored to memory at: [ 1547.862614][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1547.868356][T23224] __msan_chain_origin+0x57/0xa0 [ 1547.873329][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1547.878495][T23224] get_compat_msghdr+0x108/0x2b0 [ 1547.883457][T23224] do_recvmmsg+0xdaf/0x2300 [ 1547.888009][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1547.892710][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.898806][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.904998][T23224] __do_fast_syscall_32+0x102/0x160 [ 1547.910225][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1547.915101][T23224] do_SYSENTER_32+0x73/0x90 [ 1547.919632][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.926309][T23224] [ 1547.928649][T23224] Uninit was stored to memory at: [ 1547.933719][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1547.939461][T23224] __msan_chain_origin+0x57/0xa0 [ 1547.944423][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1547.949583][T23224] get_compat_msghdr+0x108/0x2b0 [ 1547.954549][T23224] do_recvmmsg+0xdaf/0x2300 [ 1547.959093][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1547.963790][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.969894][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.976071][T23224] __do_fast_syscall_32+0x102/0x160 [ 1547.981314][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1547.986196][T23224] do_SYSENTER_32+0x73/0x90 [ 1547.990728][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.997059][T23224] [ 1547.999402][T23224] Uninit was stored to memory at: [ 1548.004465][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1548.010215][T23224] __msan_chain_origin+0x57/0xa0 [ 1548.015196][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1548.020344][T23224] get_compat_msghdr+0x108/0x2b0 [ 1548.025327][T23224] do_recvmmsg+0xdaf/0x2300 [ 1548.029867][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1548.034610][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.040716][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.046911][T23224] __do_fast_syscall_32+0x102/0x160 [ 1548.052150][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1548.057036][T23224] do_SYSENTER_32+0x73/0x90 [ 1548.061574][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.067906][T23224] [ 1548.070266][T23224] Uninit was stored to memory at: [ 1548.075322][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1548.081061][T23224] __msan_chain_origin+0x57/0xa0 [ 1548.086130][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1548.091299][T23224] get_compat_msghdr+0x108/0x2b0 [ 1548.096263][T23224] do_recvmmsg+0xdaf/0x2300 [ 1548.100787][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1548.105485][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.111577][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.117756][T23224] __do_fast_syscall_32+0x102/0x160 [ 1548.122979][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1548.127853][T23224] do_SYSENTER_32+0x73/0x90 [ 1548.132378][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.138703][T23224] [ 1548.141039][T23224] Uninit was stored to memory at: [ 1548.146112][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1548.151847][T23224] __msan_chain_origin+0x57/0xa0 [ 1548.156805][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1548.161963][T23224] get_compat_msghdr+0x108/0x2b0 [ 1548.166926][T23224] do_recvmmsg+0xdaf/0x2300 [ 1548.171448][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1548.176178][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.182365][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.188552][T23224] __do_fast_syscall_32+0x102/0x160 [ 1548.193779][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1548.198660][T23224] do_SYSENTER_32+0x73/0x90 [ 1548.203198][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.209552][T23224] [ 1548.211914][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1548.218634][T23224] do_recvmmsg+0xbc/0x2300 [ 1548.223081][T23224] do_recvmmsg+0xbc/0x2300 [ 1548.552280][T23224] not chained 5850000 origins [ 1548.557046][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1548.565842][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.575932][T23224] Call Trace: [ 1548.579244][T23224] dump_stack+0x21c/0x280 [ 1548.583609][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1548.589467][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1548.594776][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1548.599992][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1548.605822][T23224] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1548.612975][T23224] ? idle_cpu+0x9a/0x1d0 [ 1548.617231][T23224] ? __irq_exit_rcu+0x7a/0x270 [ 1548.622008][T23224] ? __msan_get_context_state+0x9/0x20 [ 1548.627509][T23224] ? irqentry_exit+0x12/0x50 [ 1548.632118][T23224] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 1548.639096][T23224] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1548.645295][T23224] ? virt_to_page_or_null+0x56/0xf0 [ 1548.650796][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1548.656015][T23224] __msan_chain_origin+0x57/0xa0 [ 1548.660984][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1548.666139][T23224] get_compat_msghdr+0x108/0x2b0 [ 1548.671108][T23224] do_recvmmsg+0xdaf/0x2300 [ 1548.675675][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1548.680907][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1548.686822][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1548.692044][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1548.697705][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1548.703011][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1548.707817][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1548.712513][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1548.718337][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1548.723669][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.729774][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.736135][T23224] __do_fast_syscall_32+0x102/0x160 [ 1548.741354][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1548.746281][T23224] do_SYSENTER_32+0x73/0x90 [ 1548.750818][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.757167][T23224] RIP: 0023:0xf7fd0549 [ 1548.761302][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1548.780951][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1548.789483][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1548.797479][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1548.805480][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1548.813489][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1548.821511][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1548.829505][T23224] Uninit was stored to memory at: [ 1548.834581][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1548.840329][T23224] __msan_chain_origin+0x57/0xa0 [ 1548.845306][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1548.850469][T23224] get_compat_msghdr+0x108/0x2b0 [ 1548.855436][T23224] do_recvmmsg+0xdaf/0x2300 [ 1548.859974][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1548.864681][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.870803][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.877030][T23224] __do_fast_syscall_32+0x102/0x160 [ 1548.882269][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1548.887152][T23224] do_SYSENTER_32+0x73/0x90 [ 1548.891800][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.898761][T23224] [ 1548.901123][T23224] Uninit was stored to memory at: [ 1548.906296][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1548.912059][T23224] __msan_chain_origin+0x57/0xa0 [ 1548.917013][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1548.922142][T23224] get_compat_msghdr+0x108/0x2b0 [ 1548.927111][T23224] do_recvmmsg+0xdaf/0x2300 [ 1548.931642][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1548.936348][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.942457][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.948761][T23224] __do_fast_syscall_32+0x102/0x160 [ 1548.953990][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1548.958866][T23224] do_SYSENTER_32+0x73/0x90 [ 1548.963388][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.969739][T23224] [ 1548.972082][T23224] Uninit was stored to memory at: [ 1548.977169][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1548.982924][T23224] __msan_chain_origin+0x57/0xa0 [ 1548.987911][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1548.993134][T23224] get_compat_msghdr+0x108/0x2b0 [ 1548.998107][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.002775][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.007495][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.013679][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.020005][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.025231][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.030199][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.034754][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.041098][T23224] [ 1549.043458][T23224] Uninit was stored to memory at: [ 1549.048705][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1549.054626][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.059692][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.064832][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.069886][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.074420][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.079191][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.085519][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.091795][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.097004][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.101867][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.106392][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.112719][T23224] [ 1549.116704][T23224] Uninit was stored to memory at: [ 1549.121758][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1549.127687][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.132655][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.137788][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.142751][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.147276][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.151959][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.158142][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.164330][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.169550][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.174407][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.178918][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.185234][T23224] [ 1549.187557][T23224] Uninit was stored to memory at: [ 1549.192609][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1549.198355][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.203676][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.208816][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.213774][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.218303][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.223080][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.229179][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.235349][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.240573][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.245441][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.249955][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.256278][T23224] [ 1549.258606][T23224] Uninit was stored to memory at: [ 1549.263651][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1549.269383][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.274348][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.279572][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.284623][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.289286][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.293974][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.300060][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.306334][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.311543][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.316402][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.320926][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.327262][T23224] [ 1549.329593][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1549.336282][T23224] do_recvmmsg+0xbc/0x2300 [ 1549.340707][T23224] do_recvmmsg+0xbc/0x2300 [ 1549.408252][T23224] not chained 5860000 origins [ 1549.413019][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1549.421798][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.431895][T23224] Call Trace: [ 1549.435219][T23224] dump_stack+0x21c/0x280 [ 1549.439697][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1549.445456][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1549.451553][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1549.456785][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1549.462790][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1549.468902][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1549.474307][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1549.479558][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1549.485213][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1549.491303][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1549.496350][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1549.501672][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.506639][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.511773][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.517181][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.521823][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1549.527040][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1549.532951][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1549.538183][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1549.543836][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1549.549161][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1549.554208][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.559040][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1549.564871][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1549.570119][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.576249][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.582431][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.587744][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.592621][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.597671][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.604108][T23224] RIP: 0023:0xf7fd0549 [ 1549.608201][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1549.627831][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1549.636301][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1549.644317][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1549.652312][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1549.660307][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1549.668317][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1549.676319][T23224] Uninit was stored to memory at: [ 1549.681390][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1549.687162][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.692131][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.697270][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.702230][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.706766][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.711472][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.717575][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.723915][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.729162][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.734041][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.738576][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.745017][T23224] [ 1549.747358][T23224] Uninit was stored to memory at: [ 1549.752448][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1549.758218][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.763214][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.768505][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.773480][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.778038][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.782759][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.788874][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.795065][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.800307][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.805196][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.809759][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.816124][T23224] [ 1549.818469][T23224] Uninit was stored to memory at: [ 1549.823659][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1549.829417][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.834413][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.839540][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.844494][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.849022][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.853728][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.860101][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.866287][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.871536][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.876504][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.881032][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.887371][T23224] [ 1549.889702][T23224] Uninit was stored to memory at: [ 1549.894783][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1549.900531][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.905493][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.910621][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.915579][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.920106][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.924808][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1549.930895][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1549.937075][T23224] __do_fast_syscall_32+0x102/0x160 [ 1549.942328][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1549.947203][T23224] do_SYSENTER_32+0x73/0x90 [ 1549.951859][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1549.958186][T23224] [ 1549.960520][T23224] Uninit was stored to memory at: [ 1549.965606][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1549.971342][T23224] __msan_chain_origin+0x57/0xa0 [ 1549.976320][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1549.981555][T23224] get_compat_msghdr+0x108/0x2b0 [ 1549.987212][T23224] do_recvmmsg+0xdaf/0x2300 [ 1549.991753][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1549.996452][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.002533][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.008802][T23224] __do_fast_syscall_32+0x102/0x160 [ 1550.014101][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1550.018967][T23224] do_SYSENTER_32+0x73/0x90 [ 1550.023502][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.029835][T23224] [ 1550.032202][T23224] Uninit was stored to memory at: [ 1550.037385][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1550.043243][T23224] __msan_chain_origin+0x57/0xa0 [ 1550.048206][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1550.053337][T23224] get_compat_msghdr+0x108/0x2b0 [ 1550.058311][T23224] do_recvmmsg+0xdaf/0x2300 [ 1550.062826][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1550.067622][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.073726][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.079925][T23224] __do_fast_syscall_32+0x102/0x160 [ 1550.085138][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1550.089995][T23224] do_SYSENTER_32+0x73/0x90 [ 1550.094656][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.100991][T23224] [ 1550.103324][T23224] Uninit was stored to memory at: [ 1550.108371][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1550.114096][T23224] __msan_chain_origin+0x57/0xa0 [ 1550.119042][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1550.124340][T23224] get_compat_msghdr+0x108/0x2b0 [ 1550.129317][T23224] do_recvmmsg+0xdaf/0x2300 [ 1550.134027][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1550.138722][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.144919][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.151099][T23224] __do_fast_syscall_32+0x102/0x160 [ 1550.156423][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1550.161285][T23224] do_SYSENTER_32+0x73/0x90 [ 1550.166242][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.172934][T23224] [ 1550.175267][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1550.181966][T23224] do_recvmmsg+0xbc/0x2300 [ 1550.186403][T23224] do_recvmmsg+0xbc/0x2300 [ 1550.490755][T23224] not chained 5870000 origins [ 1550.495682][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1550.504735][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1550.514803][T23224] Call Trace: [ 1550.518137][T23224] dump_stack+0x21c/0x280 [ 1550.522498][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1550.528447][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1550.534622][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1550.539858][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1550.546412][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1550.552503][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1550.557898][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1550.563294][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1550.568943][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1550.575040][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1550.580026][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1550.585260][T23224] __msan_chain_origin+0x57/0xa0 [ 1550.590214][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1550.595609][T23224] get_compat_msghdr+0x108/0x2b0 [ 1550.600570][T23224] do_recvmmsg+0xdaf/0x2300 [ 1550.605100][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1550.610325][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1550.616249][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1550.621487][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1550.627144][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1550.632540][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1550.637343][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1550.642032][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1550.647849][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1550.653758][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.659844][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.666046][T23224] __do_fast_syscall_32+0x102/0x160 [ 1550.671267][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1550.676148][T23224] do_SYSENTER_32+0x73/0x90 [ 1550.680709][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.687066][T23224] RIP: 0023:0xf7fd0549 [ 1550.691149][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1550.711033][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1550.719560][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1550.727550][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1550.735537][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1550.743548][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1550.751539][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1550.759873][T23224] Uninit was stored to memory at: [ 1550.764950][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1550.770720][T23224] __msan_chain_origin+0x57/0xa0 [ 1550.775807][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1550.781142][T23224] get_compat_msghdr+0x108/0x2b0 [ 1550.786109][T23224] do_recvmmsg+0xdaf/0x2300 [ 1550.790805][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1550.795616][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.801716][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.807910][T23224] __do_fast_syscall_32+0x102/0x160 [ 1550.813204][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1550.818075][T23224] do_SYSENTER_32+0x73/0x90 [ 1550.822694][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.829236][T23224] [ 1550.831599][T23224] Uninit was stored to memory at: [ 1550.836729][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1550.842492][T23224] __msan_chain_origin+0x57/0xa0 [ 1550.847445][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1550.852690][T23224] get_compat_msghdr+0x108/0x2b0 [ 1550.857643][T23224] do_recvmmsg+0xdaf/0x2300 [ 1550.862417][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1550.867114][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.873238][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.879506][T23224] __do_fast_syscall_32+0x102/0x160 [ 1550.884889][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1550.889750][T23224] do_SYSENTER_32+0x73/0x90 [ 1550.894266][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.900584][T23224] [ 1550.902935][T23224] Uninit was stored to memory at: [ 1550.907976][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1550.913707][T23224] __msan_chain_origin+0x57/0xa0 [ 1550.918671][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1550.923801][T23224] get_compat_msghdr+0x108/0x2b0 [ 1550.928763][T23224] do_recvmmsg+0xdaf/0x2300 [ 1550.933283][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1550.938079][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.944256][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.950429][T23224] __do_fast_syscall_32+0x102/0x160 [ 1550.955642][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1550.960510][T23224] do_SYSENTER_32+0x73/0x90 [ 1550.965026][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.971471][T23224] [ 1550.973805][T23224] Uninit was stored to memory at: [ 1550.979481][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1550.985208][T23224] __msan_chain_origin+0x57/0xa0 [ 1550.990173][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1550.995303][T23224] get_compat_msghdr+0x108/0x2b0 [ 1551.000258][T23224] do_recvmmsg+0xdaf/0x2300 [ 1551.004867][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1551.009588][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.015688][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.021895][T23224] __do_fast_syscall_32+0x102/0x160 [ 1551.027132][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1551.032043][T23224] do_SYSENTER_32+0x73/0x90 [ 1551.036571][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.043106][T23224] [ 1551.045534][T23224] Uninit was stored to memory at: [ 1551.050582][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1551.056324][T23224] __msan_chain_origin+0x57/0xa0 [ 1551.061283][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1551.066484][T23224] get_compat_msghdr+0x108/0x2b0 [ 1551.071472][T23224] do_recvmmsg+0xdaf/0x2300 [ 1551.075999][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1551.080693][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.086785][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.092990][T23224] __do_fast_syscall_32+0x102/0x160 [ 1551.098230][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1551.103105][T23224] do_SYSENTER_32+0x73/0x90 [ 1551.107639][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.113971][T23224] [ 1551.116315][T23224] Uninit was stored to memory at: [ 1551.121373][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1551.127116][T23224] __msan_chain_origin+0x57/0xa0 [ 1551.132155][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1551.137284][T23224] get_compat_msghdr+0x108/0x2b0 [ 1551.142243][T23224] do_recvmmsg+0xdaf/0x2300 [ 1551.146768][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1551.151490][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.158122][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.164308][T23224] __do_fast_syscall_32+0x102/0x160 [ 1551.169531][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1551.174492][T23224] do_SYSENTER_32+0x73/0x90 [ 1551.179014][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.185340][T23224] [ 1551.187672][T23224] Uninit was stored to memory at: [ 1551.192738][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1551.198498][T23224] __msan_chain_origin+0x57/0xa0 [ 1551.203453][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1551.208578][T23224] get_compat_msghdr+0x108/0x2b0 [ 1551.213546][T23224] do_recvmmsg+0xdaf/0x2300 [ 1551.218065][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1551.222756][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.228833][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.235549][T23224] __do_fast_syscall_32+0x102/0x160 [ 1551.240786][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1551.245664][T23224] do_SYSENTER_32+0x73/0x90 [ 1551.250180][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.256507][T23224] [ 1551.258840][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1551.265535][T23224] do_recvmmsg+0xbc/0x2300 [ 1551.269963][T23224] do_recvmmsg+0xbc/0x2300 [ 1551.320300][T23221] not chained 5880000 origins [ 1551.325152][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1551.333931][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.344005][T23221] Call Trace: [ 1551.347341][T23221] dump_stack+0x21c/0x280 [ 1551.351730][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1551.357488][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1551.363587][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1551.368814][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1551.374650][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1551.380758][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1551.386187][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1551.392307][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1551.397537][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1551.403217][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1551.410459][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1551.415509][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1551.420741][T23221] __msan_chain_origin+0x57/0xa0 [ 1551.425698][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1551.430932][T23221] get_compat_msghdr+0x108/0x2b0 [ 1551.435894][T23221] do_recvmmsg+0xdaf/0x2300 [ 1551.440427][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1551.446604][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1551.451851][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1551.457777][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1551.463034][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1551.468681][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1551.473989][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1551.478772][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1551.483492][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1551.489320][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1551.494557][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.500672][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.506894][T23221] __do_fast_syscall_32+0x102/0x160 [ 1551.512127][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1551.517008][T23221] do_SYSENTER_32+0x73/0x90 [ 1551.521527][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.527862][T23221] RIP: 0023:0xf7fd0549 [ 1551.531941][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1551.551581][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1551.560031][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1551.568031][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1551.576021][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1551.584004][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1551.591994][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1551.599982][T23221] Uninit was stored to memory at: [ 1551.605030][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1551.610762][T23221] __msan_chain_origin+0x57/0xa0 [ 1551.615725][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1551.620849][T23221] get_compat_msghdr+0x108/0x2b0 [ 1551.625888][T23221] do_recvmmsg+0xdaf/0x2300 [ 1551.630412][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1551.635097][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.641191][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.647903][T23221] __do_fast_syscall_32+0x102/0x160 [ 1551.653382][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1551.658252][T23221] do_SYSENTER_32+0x73/0x90 [ 1551.662765][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.669083][T23221] [ 1551.671410][T23221] Uninit was stored to memory at: [ 1551.676451][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1551.682200][T23221] __msan_chain_origin+0x57/0xa0 [ 1551.687164][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1551.692303][T23221] get_compat_msghdr+0x108/0x2b0 [ 1551.697702][T23221] do_recvmmsg+0xdaf/0x2300 [ 1551.702227][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1551.706910][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.712982][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.719154][T23221] __do_fast_syscall_32+0x102/0x160 [ 1551.724360][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1551.729226][T23221] do_SYSENTER_32+0x73/0x90 [ 1551.733743][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.740061][T23221] [ 1551.742394][T23221] Uninit was stored to memory at: [ 1551.747444][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1551.753225][T23221] __msan_chain_origin+0x57/0xa0 [ 1551.758173][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1551.763295][T23221] get_compat_msghdr+0x108/0x2b0 [ 1551.768244][T23221] do_recvmmsg+0xdaf/0x2300 [ 1551.772762][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1551.777446][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.783557][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.790006][T23221] __do_fast_syscall_32+0x102/0x160 [ 1551.795225][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1551.800102][T23221] do_SYSENTER_32+0x73/0x90 [ 1551.804631][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.810968][T23221] [ 1551.813312][T23221] Uninit was stored to memory at: [ 1551.818463][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1551.824229][T23221] __msan_chain_origin+0x57/0xa0 [ 1551.829189][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1551.834319][T23221] get_compat_msghdr+0x108/0x2b0 [ 1551.839459][T23221] do_recvmmsg+0xdaf/0x2300 [ 1551.843982][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1551.848676][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.854769][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.860947][T23221] __do_fast_syscall_32+0x102/0x160 [ 1551.866356][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1551.871236][T23221] do_SYSENTER_32+0x73/0x90 [ 1551.876037][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.882362][T23221] [ 1551.884714][T23221] Uninit was stored to memory at: [ 1551.889771][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1551.895513][T23221] __msan_chain_origin+0x57/0xa0 [ 1551.900484][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1551.905609][T23221] get_compat_msghdr+0x108/0x2b0 [ 1551.910561][T23221] do_recvmmsg+0xdaf/0x2300 [ 1551.915363][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1551.920067][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.926187][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.932371][T23221] __do_fast_syscall_32+0x102/0x160 [ 1551.937600][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1551.942471][T23221] do_SYSENTER_32+0x73/0x90 [ 1551.947112][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.953433][T23221] [ 1551.955776][T23221] Uninit was stored to memory at: [ 1551.961099][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1551.966842][T23221] __msan_chain_origin+0x57/0xa0 [ 1551.971891][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1551.977104][T23221] get_compat_msghdr+0x108/0x2b0 [ 1551.982051][T23221] do_recvmmsg+0xdaf/0x2300 [ 1551.986579][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1551.991264][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.997341][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.003527][T23221] __do_fast_syscall_32+0x102/0x160 [ 1552.008736][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1552.013595][T23221] do_SYSENTER_32+0x73/0x90 [ 1552.018109][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.024513][T23221] [ 1552.026845][T23221] Uninit was stored to memory at: [ 1552.033129][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1552.038867][T23221] __msan_chain_origin+0x57/0xa0 [ 1552.043832][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1552.048960][T23221] get_compat_msghdr+0x108/0x2b0 [ 1552.053925][T23221] do_recvmmsg+0xdaf/0x2300 [ 1552.058433][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1552.063223][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.069505][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.075692][T23221] __do_fast_syscall_32+0x102/0x160 [ 1552.080911][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1552.085794][T23221] do_SYSENTER_32+0x73/0x90 [ 1552.090498][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.096912][T23221] [ 1552.099247][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1552.105945][T23221] do_recvmmsg+0xbc/0x2300 [ 1552.110752][T23221] do_recvmmsg+0xbc/0x2300 [ 1552.361680][T23224] not chained 5890000 origins [ 1552.366433][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1552.375300][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1552.385715][T23224] Call Trace: [ 1552.389041][T23224] dump_stack+0x21c/0x280 [ 1552.393403][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1552.399149][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1552.405325][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1552.410636][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1552.416574][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1552.422692][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1552.428103][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1552.433331][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1552.438992][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1552.445083][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1552.450038][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1552.455265][T23224] __msan_chain_origin+0x57/0xa0 [ 1552.460253][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1552.465392][T23224] get_compat_msghdr+0x108/0x2b0 [ 1552.470354][T23224] do_recvmmsg+0xdaf/0x2300 [ 1552.474897][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1552.480130][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1552.486054][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1552.491280][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1552.496958][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1552.502271][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1552.507063][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1552.511774][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1552.517613][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1552.522846][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.528974][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.535175][T23224] __do_fast_syscall_32+0x102/0x160 [ 1552.540426][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1552.545863][T23224] do_SYSENTER_32+0x73/0x90 [ 1552.550399][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.556745][T23224] RIP: 0023:0xf7fd0549 [ 1552.560890][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1552.580542][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1552.589023][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1552.597023][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1552.605210][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1552.613216][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1552.621221][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1552.629254][T23224] Uninit was stored to memory at: [ 1552.634336][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1552.640078][T23224] __msan_chain_origin+0x57/0xa0 [ 1552.645039][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1552.650178][T23224] get_compat_msghdr+0x108/0x2b0 [ 1552.655138][T23224] do_recvmmsg+0xdaf/0x2300 [ 1552.659684][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1552.664388][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.670483][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.676663][T23224] __do_fast_syscall_32+0x102/0x160 [ 1552.681918][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1552.686788][T23224] do_SYSENTER_32+0x73/0x90 [ 1552.691306][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.697630][T23224] [ 1552.699958][T23224] Uninit was stored to memory at: [ 1552.705018][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1552.710773][T23224] __msan_chain_origin+0x57/0xa0 [ 1552.715762][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1552.720892][T23224] get_compat_msghdr+0x108/0x2b0 [ 1552.725852][T23224] do_recvmmsg+0xdaf/0x2300 [ 1552.730396][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1552.735117][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.741198][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.747372][T23224] __do_fast_syscall_32+0x102/0x160 [ 1552.752596][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1552.757474][T23224] do_SYSENTER_32+0x73/0x90 [ 1552.762021][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.768347][T23224] [ 1552.770679][T23224] Uninit was stored to memory at: [ 1552.775727][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1552.781464][T23224] __msan_chain_origin+0x57/0xa0 [ 1552.786435][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1552.791614][T23224] get_compat_msghdr+0x108/0x2b0 [ 1552.796602][T23224] do_recvmmsg+0xdaf/0x2300 [ 1552.801133][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1552.805841][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.812007][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.818172][T23224] __do_fast_syscall_32+0x102/0x160 [ 1552.823384][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1552.828245][T23224] do_SYSENTER_32+0x73/0x90 [ 1552.832758][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.839081][T23224] [ 1552.841426][T23224] Uninit was stored to memory at: [ 1552.846491][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1552.852408][T23224] __msan_chain_origin+0x57/0xa0 [ 1552.857466][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1552.863202][T23224] get_compat_msghdr+0x108/0x2b0 [ 1552.868160][T23224] do_recvmmsg+0xdaf/0x2300 [ 1552.872675][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1552.877375][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.883449][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.889632][T23224] __do_fast_syscall_32+0x102/0x160 [ 1552.895108][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1552.899971][T23224] do_SYSENTER_32+0x73/0x90 [ 1552.904486][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.910806][T23224] [ 1552.913136][T23224] Uninit was stored to memory at: [ 1552.918179][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1552.923944][T23224] __msan_chain_origin+0x57/0xa0 [ 1552.929145][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1552.934265][T23224] get_compat_msghdr+0x108/0x2b0 [ 1552.939226][T23224] do_recvmmsg+0xdaf/0x2300 [ 1552.943747][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1552.948528][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.962177][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.968358][T23224] __do_fast_syscall_32+0x102/0x160 [ 1552.973566][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1552.978422][T23224] do_SYSENTER_32+0x73/0x90 [ 1552.982937][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.989515][T23224] [ 1552.991861][T23224] Uninit was stored to memory at: [ 1552.996905][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1553.002627][T23224] __msan_chain_origin+0x57/0xa0 [ 1553.007567][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1553.012705][T23224] get_compat_msghdr+0x108/0x2b0 [ 1553.017651][T23224] do_recvmmsg+0xdaf/0x2300 [ 1553.022155][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1553.026862][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.032951][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.039110][T23224] __do_fast_syscall_32+0x102/0x160 [ 1553.044517][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1553.049385][T23224] do_SYSENTER_32+0x73/0x90 [ 1553.053901][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.060225][T23224] [ 1553.062573][T23224] Uninit was stored to memory at: [ 1553.067616][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1553.073350][T23224] __msan_chain_origin+0x57/0xa0 [ 1553.078298][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1553.083434][T23224] get_compat_msghdr+0x108/0x2b0 [ 1553.088399][T23224] do_recvmmsg+0xdaf/0x2300 [ 1553.092922][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1553.097608][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.103714][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.109891][T23224] __do_fast_syscall_32+0x102/0x160 [ 1553.116495][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1553.121542][T23224] do_SYSENTER_32+0x73/0x90 [ 1553.126157][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.132472][T23224] [ 1553.134885][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1553.141574][T23224] do_recvmmsg+0xbc/0x2300 [ 1553.145997][T23224] do_recvmmsg+0xbc/0x2300 [ 1553.441282][T23224] not chained 5900000 origins [ 1553.446003][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1553.454768][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1553.464921][T23224] Call Trace: [ 1553.468236][T23224] dump_stack+0x21c/0x280 [ 1553.472589][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1553.478323][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1553.484412][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1553.489625][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1553.495453][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1553.501534][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1553.506955][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1553.512187][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1553.517840][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1553.523924][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1553.528878][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1553.534110][T23224] __msan_chain_origin+0x57/0xa0 [ 1553.539061][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1553.544214][T23224] get_compat_msghdr+0x108/0x2b0 [ 1553.549170][T23224] do_recvmmsg+0xdaf/0x2300 [ 1553.553699][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1553.558926][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1553.564851][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1553.570068][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1553.575709][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1553.581009][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1553.585833][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1553.590547][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1553.596363][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1553.601574][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.607666][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.613925][T23224] __do_fast_syscall_32+0x102/0x160 [ 1553.619146][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1553.624016][T23224] do_SYSENTER_32+0x73/0x90 [ 1553.628535][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.634880][T23224] RIP: 0023:0xf7fd0549 [ 1553.638960][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1553.658618][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1553.667065][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1553.675050][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1553.683045][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1553.691063][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1553.699054][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1553.707048][T23224] Uninit was stored to memory at: [ 1553.712186][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1553.717934][T23224] __msan_chain_origin+0x57/0xa0 [ 1553.722886][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1553.728015][T23224] get_compat_msghdr+0x108/0x2b0 [ 1553.733042][T23224] do_recvmmsg+0xdaf/0x2300 [ 1553.737572][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1553.742269][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.748356][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.754530][T23224] __do_fast_syscall_32+0x102/0x160 [ 1553.759750][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1553.764617][T23224] do_SYSENTER_32+0x73/0x90 [ 1553.769141][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.775461][T23224] [ 1553.777787][T23224] Uninit was stored to memory at: [ 1553.782892][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1553.788627][T23224] __msan_chain_origin+0x57/0xa0 [ 1553.793584][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1553.798804][T23224] get_compat_msghdr+0x108/0x2b0 [ 1553.803765][T23224] do_recvmmsg+0xdaf/0x2300 [ 1553.808282][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1553.812984][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.819071][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.825267][T23224] __do_fast_syscall_32+0x102/0x160 [ 1553.830483][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1553.835399][T23224] do_SYSENTER_32+0x73/0x90 [ 1553.839935][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.846257][T23224] [ 1553.848709][T23224] Uninit was stored to memory at: [ 1553.853756][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1553.859484][T23224] __msan_chain_origin+0x57/0xa0 [ 1553.864438][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1553.869557][T23224] get_compat_msghdr+0x108/0x2b0 [ 1553.874516][T23224] do_recvmmsg+0xdaf/0x2300 [ 1553.879028][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1553.883726][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.889809][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.895982][T23224] __do_fast_syscall_32+0x102/0x160 [ 1553.901197][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1553.906064][T23224] do_SYSENTER_32+0x73/0x90 [ 1553.910583][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.916901][T23224] [ 1553.919225][T23224] Uninit was stored to memory at: [ 1553.924264][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1553.929989][T23224] __msan_chain_origin+0x57/0xa0 [ 1553.934934][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1553.940052][T23224] get_compat_msghdr+0x108/0x2b0 [ 1553.945003][T23224] do_recvmmsg+0xdaf/0x2300 [ 1553.949513][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1553.954232][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.960314][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.966495][T23224] __do_fast_syscall_32+0x102/0x160 [ 1553.971714][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1553.976572][T23224] do_SYSENTER_32+0x73/0x90 [ 1553.981091][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.987411][T23224] [ 1553.989760][T23224] Uninit was stored to memory at: [ 1553.994813][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1554.000541][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.005516][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.010650][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.016641][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.021152][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.025881][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.031967][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.038322][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.043532][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.048390][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.052931][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.059258][T23224] [ 1554.061611][T23224] Uninit was stored to memory at: [ 1554.066654][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1554.072382][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.077331][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.082451][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.087397][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.092013][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.096703][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.102778][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.108943][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.114149][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.119012][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.123698][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.130115][T23224] [ 1554.132450][T23224] Uninit was stored to memory at: [ 1554.137487][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1554.143217][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.148162][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.153288][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.158232][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.162744][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.167435][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.173538][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.179707][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.184919][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.189781][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.194302][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.200622][T23224] [ 1554.202950][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1554.209642][T23224] do_recvmmsg+0xbc/0x2300 [ 1554.214066][T23224] do_recvmmsg+0xbc/0x2300 [ 1554.308564][T23224] not chained 5910000 origins [ 1554.313289][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1554.322053][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.332216][T23224] Call Trace: [ 1554.335531][T23224] dump_stack+0x21c/0x280 [ 1554.339882][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1554.345620][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1554.351695][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1554.356898][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1554.362725][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1554.368801][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1554.374190][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1554.379421][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1554.385069][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1554.391161][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1554.396287][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1554.401489][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.406456][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.411584][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.416533][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.421048][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1554.426258][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1554.432159][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1554.437550][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1554.443198][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1554.448514][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1554.453289][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.457983][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1554.463792][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1554.469009][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.475099][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.481309][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.486566][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.491442][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.495971][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.502313][T23224] RIP: 0023:0xf7fd0549 [ 1554.506399][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1554.526053][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1554.534605][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1554.542852][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1554.550854][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1554.558982][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1554.566988][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1554.574996][T23224] Uninit was stored to memory at: [ 1554.580157][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1554.585898][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.590850][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.595973][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.600932][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.605464][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.610154][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.616232][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.622399][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.627613][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.632470][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.636992][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.643333][T23224] [ 1554.645662][T23224] Uninit was stored to memory at: [ 1554.650725][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1554.656473][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.661428][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.666648][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.671613][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.676132][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.680826][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.686913][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.693079][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.698668][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.703538][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.708058][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.714392][T23224] [ 1554.716758][T23224] Uninit was stored to memory at: [ 1554.721818][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1554.727557][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.732530][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.737657][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.742613][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.747136][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.751839][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.757935][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.764145][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.769510][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.774393][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.778911][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.785260][T23224] [ 1554.787595][T23224] Uninit was stored to memory at: [ 1554.792638][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1554.798528][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.803494][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.808632][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.813579][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.818096][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.822817][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.828911][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.835094][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.840304][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.845160][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.849668][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.855995][T23224] [ 1554.858324][T23224] Uninit was stored to memory at: [ 1554.863363][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1554.869180][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.874138][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.879265][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.884215][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.888721][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.893417][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.899532][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.905698][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.910914][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.915769][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.920280][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.926652][T23224] [ 1554.928994][T23224] Uninit was stored to memory at: [ 1554.934032][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1554.939763][T23224] __msan_chain_origin+0x57/0xa0 [ 1554.944713][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1554.949923][T23224] get_compat_msghdr+0x108/0x2b0 [ 1554.954874][T23224] do_recvmmsg+0xdaf/0x2300 [ 1554.959410][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1554.964090][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.970195][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.976471][T23224] __do_fast_syscall_32+0x102/0x160 [ 1554.981692][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1554.986568][T23224] do_SYSENTER_32+0x73/0x90 [ 1554.991104][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.997531][T23224] [ 1554.999867][T23224] Uninit was stored to memory at: [ 1555.004922][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1555.010655][T23224] __msan_chain_origin+0x57/0xa0 [ 1555.015609][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1555.020730][T23224] get_compat_msghdr+0x108/0x2b0 [ 1555.025689][T23224] do_recvmmsg+0xdaf/0x2300 [ 1555.030200][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1555.034884][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1555.041051][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1555.047568][T23224] __do_fast_syscall_32+0x102/0x160 [ 1555.052781][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1555.057660][T23224] do_SYSENTER_32+0x73/0x90 [ 1555.062177][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1555.068499][T23224] [ 1555.070832][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1555.077617][T23224] do_recvmmsg+0xbc/0x2300 [ 1555.082053][T23224] do_recvmmsg+0xbc/0x2300 [ 1555.299223][T23224] not chained 5920000 origins [ 1555.304035][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1555.312974][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1555.323041][T23224] Call Trace: [ 1555.326812][T23224] dump_stack+0x21c/0x280 [ 1555.331444][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1555.337223][T23224] ? do_user_addr_fault+0x1045/0x16d0 [ 1555.342907][T23224] ? __msan_get_context_state+0x9/0x20 [ 1555.348382][T23224] ? irqentry_exit+0x12/0x50 [ 1555.353039][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1555.358274][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1555.363927][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1555.370008][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1555.375075][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1555.380288][T23224] __msan_chain_origin+0x57/0xa0 [ 1555.385326][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1555.390457][T23224] get_compat_msghdr+0x108/0x2b0 [ 1555.395422][T23224] do_recvmmsg+0xdaf/0x2300 [ 1555.399948][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1555.405168][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1555.411080][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1555.416298][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1555.421944][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1555.427261][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1555.432044][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1555.436763][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1555.442581][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1555.447797][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1555.453894][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1555.460243][T23224] __do_fast_syscall_32+0x102/0x160 [ 1555.465465][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1555.470343][T23224] do_SYSENTER_32+0x73/0x90 [ 1555.474963][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1555.481318][T23224] RIP: 0023:0xf7fd0549 [ 1555.485407][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1555.505034][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1555.513478][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1555.521497][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1555.529503][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1555.537500][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1555.545509][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1555.553612][T23224] Uninit was stored to memory at: [ 1555.558678][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1555.564423][T23224] __msan_chain_origin+0x57/0xa0 [ 1555.569372][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1555.574491][T23224] get_compat_msghdr+0x108/0x2b0 [ 1555.579443][T23224] do_recvmmsg+0xdaf/0x2300 [ 1555.583961][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1555.588642][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1555.594916][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1555.601085][T23224] __do_fast_syscall_32+0x102/0x160 [ 1555.606310][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1555.611172][T23224] do_SYSENTER_32+0x73/0x90 [ 1555.615692][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1555.622095][T23224] [ 1555.624419][T23224] Uninit was stored to memory at: [ 1555.629458][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1555.635201][T23224] __msan_chain_origin+0x57/0xa0 [ 1555.640151][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1555.645288][T23224] get_compat_msghdr+0x108/0x2b0 [ 1555.650241][T23224] do_recvmmsg+0xdaf/0x2300 [ 1555.654767][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1555.659451][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1555.665548][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1555.671718][T23224] __do_fast_syscall_32+0x102/0x160 [ 1555.676935][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1555.681795][T23224] do_SYSENTER_32+0x73/0x90 [ 1555.686310][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1555.692896][T23224] [ 1555.695228][T23224] Uninit was stored to memory at: [ 1555.700272][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1555.706088][T23224] __msan_chain_origin+0x57/0xa0 [ 1555.711123][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1555.716266][T23224] get_compat_msghdr+0x108/0x2b0 [ 1555.721224][T23224] do_recvmmsg+0xdaf/0x2300 [ 1555.725737][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1555.730427][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1555.736514][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1555.742697][T23224] __do_fast_syscall_32+0x102/0x160 [ 1555.748190][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1555.753172][T23224] do_SYSENTER_32+0x73/0x90 [ 1555.757694][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1555.764039][T23224] [ 1555.766377][T23224] Uninit was stored to memory at: [ 1555.771417][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1555.777157][T23224] __msan_chain_origin+0x57/0xa0 [ 1555.782116][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1555.787246][T23224] get_compat_msghdr+0x108/0x2b0 [ 1555.792209][T23224] do_recvmmsg+0xdaf/0x2300 [ 1555.796829][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1555.801619][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1555.807722][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1555.813898][T23224] __do_fast_syscall_32+0x102/0x160 [ 1555.819143][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1555.824026][T23224] do_SYSENTER_32+0x73/0x90 [ 1555.828557][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1555.835130][T23224] [ 1555.837468][T23224] Uninit was stored to memory at: [ 1555.842520][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1555.848263][T23224] __msan_chain_origin+0x57/0xa0 [ 1555.853308][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1555.858440][T23224] get_compat_msghdr+0x108/0x2b0 [ 1555.863389][T23224] do_recvmmsg+0xdaf/0x2300 [ 1555.867909][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1555.872605][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1555.878783][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1555.884961][T23224] __do_fast_syscall_32+0x102/0x160 [ 1555.890275][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1555.895151][T23224] do_SYSENTER_32+0x73/0x90 [ 1555.899680][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1555.906013][T23224] [ 1555.908352][T23224] Uninit was stored to memory at: [ 1555.913413][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1555.919154][T23224] __msan_chain_origin+0x57/0xa0 [ 1555.924107][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1555.929240][T23224] get_compat_msghdr+0x108/0x2b0 [ 1555.934215][T23224] do_recvmmsg+0xdaf/0x2300 [ 1555.938740][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1555.943441][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1555.949516][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1555.955679][T23224] __do_fast_syscall_32+0x102/0x160 [ 1555.960988][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1555.965852][T23224] do_SYSENTER_32+0x73/0x90 [ 1555.970367][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1555.976691][T23224] [ 1555.979037][T23224] Uninit was stored to memory at: [ 1555.984086][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1555.990784][T23224] __msan_chain_origin+0x57/0xa0 [ 1555.995746][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1556.001050][T23224] get_compat_msghdr+0x108/0x2b0 [ 1556.006007][T23224] do_recvmmsg+0xdaf/0x2300 [ 1556.010528][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1556.015250][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.021338][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.027516][T23224] __do_fast_syscall_32+0x102/0x160 [ 1556.032751][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1556.037649][T23224] do_SYSENTER_32+0x73/0x90 [ 1556.042179][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.048592][T23224] [ 1556.050930][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1556.057627][T23224] do_recvmmsg+0xbc/0x2300 [ 1556.062063][T23224] do_recvmmsg+0xbc/0x2300 [ 1556.395498][T23224] not chained 5930000 origins [ 1556.400224][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1556.409101][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.419174][T23224] Call Trace: [ 1556.422489][T23224] dump_stack+0x21c/0x280 [ 1556.426935][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1556.432679][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1556.437926][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1556.443166][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1556.449164][T23224] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1556.455246][T23224] ? sched_clock_cpu+0x5e/0x950 [ 1556.460134][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1556.465346][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1556.471168][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1556.476389][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1556.482046][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1556.488133][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1556.493088][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1556.498315][T23224] __msan_chain_origin+0x57/0xa0 [ 1556.503359][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1556.508495][T23224] get_compat_msghdr+0x108/0x2b0 [ 1556.513452][T23224] do_recvmmsg+0xdaf/0x2300 [ 1556.518344][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1556.523587][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1556.530212][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1556.535430][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1556.541085][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1556.546391][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1556.551178][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1556.555898][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1556.561762][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1556.566982][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.573073][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.579254][T23224] __do_fast_syscall_32+0x102/0x160 [ 1556.585340][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1556.590244][T23224] do_SYSENTER_32+0x73/0x90 [ 1556.594766][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.601173][T23224] RIP: 0023:0xf7fd0549 [ 1556.605258][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1556.625168][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1556.633618][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1556.641606][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1556.649781][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1556.657763][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1556.665774][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1556.673758][T23224] Uninit was stored to memory at: [ 1556.679017][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1556.684760][T23224] __msan_chain_origin+0x57/0xa0 [ 1556.689729][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1556.694872][T23224] get_compat_msghdr+0x108/0x2b0 [ 1556.699826][T23224] do_recvmmsg+0xdaf/0x2300 [ 1556.704372][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1556.709084][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.715166][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.721340][T23224] __do_fast_syscall_32+0x102/0x160 [ 1556.726561][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1556.731440][T23224] do_SYSENTER_32+0x73/0x90 [ 1556.735968][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.742296][T23224] [ 1556.744634][T23224] Uninit was stored to memory at: [ 1556.749877][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1556.755706][T23224] __msan_chain_origin+0x57/0xa0 [ 1556.760787][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1556.765936][T23224] get_compat_msghdr+0x108/0x2b0 [ 1556.770909][T23224] do_recvmmsg+0xdaf/0x2300 [ 1556.775521][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1556.780387][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.786503][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.792697][T23224] __do_fast_syscall_32+0x102/0x160 [ 1556.797929][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1556.802803][T23224] do_SYSENTER_32+0x73/0x90 [ 1556.807323][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.813659][T23224] [ 1556.816079][T23224] Uninit was stored to memory at: [ 1556.821389][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1556.827123][T23224] __msan_chain_origin+0x57/0xa0 [ 1556.832086][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1556.837242][T23224] get_compat_msghdr+0x108/0x2b0 [ 1556.842196][T23224] do_recvmmsg+0xdaf/0x2300 [ 1556.846803][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1556.851495][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.857795][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.863966][T23224] __do_fast_syscall_32+0x102/0x160 [ 1556.869194][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1556.874061][T23224] do_SYSENTER_32+0x73/0x90 [ 1556.878575][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.884893][T23224] [ 1556.887219][T23224] Uninit was stored to memory at: [ 1556.892280][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1556.898009][T23224] __msan_chain_origin+0x57/0xa0 [ 1556.902974][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1556.908091][T23224] get_compat_msghdr+0x108/0x2b0 [ 1556.913035][T23224] do_recvmmsg+0xdaf/0x2300 [ 1556.917543][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1556.922232][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.928308][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.934500][T23224] __do_fast_syscall_32+0x102/0x160 [ 1556.939709][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1556.944570][T23224] do_SYSENTER_32+0x73/0x90 [ 1556.949087][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.955495][T23224] [ 1556.957819][T23224] Uninit was stored to memory at: [ 1556.962865][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1556.968600][T23224] __msan_chain_origin+0x57/0xa0 [ 1556.973583][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1556.978702][T23224] get_compat_msghdr+0x108/0x2b0 [ 1556.983696][T23224] do_recvmmsg+0xdaf/0x2300 [ 1556.988218][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1556.992909][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.998997][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.005177][T23224] __do_fast_syscall_32+0x102/0x160 [ 1557.010400][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1557.015284][T23224] do_SYSENTER_32+0x73/0x90 [ 1557.019798][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.026181][T23224] [ 1557.028533][T23224] Uninit was stored to memory at: [ 1557.033573][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1557.039484][T23224] __msan_chain_origin+0x57/0xa0 [ 1557.044438][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1557.049561][T23224] get_compat_msghdr+0x108/0x2b0 [ 1557.054509][T23224] do_recvmmsg+0xdaf/0x2300 [ 1557.059015][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1557.063699][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.069777][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.075939][T23224] __do_fast_syscall_32+0x102/0x160 [ 1557.081143][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1557.086002][T23224] do_SYSENTER_32+0x73/0x90 [ 1557.090539][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.096862][T23224] [ 1557.099197][T23224] Uninit was stored to memory at: [ 1557.104239][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1557.109964][T23224] __msan_chain_origin+0x57/0xa0 [ 1557.114912][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1557.120030][T23224] get_compat_msghdr+0x108/0x2b0 [ 1557.124983][T23224] do_recvmmsg+0xdaf/0x2300 [ 1557.129494][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1557.134214][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.140297][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.146476][T23224] __do_fast_syscall_32+0x102/0x160 [ 1557.151691][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1557.156558][T23224] do_SYSENTER_32+0x73/0x90 [ 1557.161074][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.168347][T23224] [ 1557.170675][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1557.177355][T23224] do_recvmmsg+0xbc/0x2300 [ 1557.181773][T23224] do_recvmmsg+0xbc/0x2300 [ 1557.224926][T23221] not chained 5940000 origins [ 1557.229653][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1557.238433][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1557.248605][T23221] Call Trace: [ 1557.251945][T23221] dump_stack+0x21c/0x280 [ 1557.256310][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1557.262068][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1557.268418][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1557.273640][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1557.279466][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1557.285560][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1557.290954][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1557.296176][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1557.301842][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1557.307927][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1557.312877][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1557.318097][T23221] __msan_chain_origin+0x57/0xa0 [ 1557.323056][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1557.328190][T23221] get_compat_msghdr+0x108/0x2b0 [ 1557.333154][T23221] do_recvmmsg+0xdaf/0x2300 [ 1557.337690][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1557.343795][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1557.349017][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1557.354941][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1557.360170][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1557.365819][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1557.371144][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1557.376022][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1557.380757][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1557.386600][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1557.391828][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.397928][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.404109][T23221] __do_fast_syscall_32+0x102/0x160 [ 1557.409335][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1557.414206][T23221] do_SYSENTER_32+0x73/0x90 [ 1557.418766][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.425111][T23221] RIP: 0023:0xf7fd0549 [ 1557.429218][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1557.448856][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1557.457306][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1557.465499][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1557.473591][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1557.481689][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1557.489703][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1557.497698][T23221] Uninit was stored to memory at: [ 1557.502764][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1557.508505][T23221] __msan_chain_origin+0x57/0xa0 [ 1557.513467][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1557.518607][T23221] get_compat_msghdr+0x108/0x2b0 [ 1557.523575][T23221] do_recvmmsg+0xdaf/0x2300 [ 1557.528114][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1557.532812][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.538906][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.545784][T23221] __do_fast_syscall_32+0x102/0x160 [ 1557.551010][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1557.555886][T23221] do_SYSENTER_32+0x73/0x90 [ 1557.560412][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.566752][T23221] [ 1557.569091][T23221] Uninit was stored to memory at: [ 1557.574156][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1557.579904][T23221] __msan_chain_origin+0x57/0xa0 [ 1557.584871][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1557.590114][T23221] get_compat_msghdr+0x108/0x2b0 [ 1557.595085][T23221] do_recvmmsg+0xdaf/0x2300 [ 1557.599617][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1557.604315][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.610407][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.616580][T23221] __do_fast_syscall_32+0x102/0x160 [ 1557.621787][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1557.626676][T23221] do_SYSENTER_32+0x73/0x90 [ 1557.631205][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.637532][T23221] [ 1557.639867][T23221] Uninit was stored to memory at: [ 1557.644967][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1557.650701][T23221] __msan_chain_origin+0x57/0xa0 [ 1557.655658][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1557.660926][T23221] get_compat_msghdr+0x108/0x2b0 [ 1557.665880][T23221] do_recvmmsg+0xdaf/0x2300 [ 1557.670398][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1557.675181][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.681291][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.687482][T23221] __do_fast_syscall_32+0x102/0x160 [ 1557.692706][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1557.697572][T23221] do_SYSENTER_32+0x73/0x90 [ 1557.702289][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.708617][T23221] [ 1557.711119][T23221] Uninit was stored to memory at: [ 1557.716163][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1557.721913][T23221] __msan_chain_origin+0x57/0xa0 [ 1557.726859][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1557.731977][T23221] get_compat_msghdr+0x108/0x2b0 [ 1557.736933][T23221] do_recvmmsg+0xdaf/0x2300 [ 1557.741459][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1557.746154][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.752260][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.758441][T23221] __do_fast_syscall_32+0x102/0x160 [ 1557.763659][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1557.768525][T23221] do_SYSENTER_32+0x73/0x90 [ 1557.773048][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.779377][T23221] [ 1557.781739][T23221] Uninit was stored to memory at: [ 1557.786799][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1557.792541][T23221] __msan_chain_origin+0x57/0xa0 [ 1557.797522][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1557.802715][T23221] get_compat_msghdr+0x108/0x2b0 [ 1557.807694][T23221] do_recvmmsg+0xdaf/0x2300 [ 1557.812219][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1557.816937][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.823050][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.829233][T23221] __do_fast_syscall_32+0x102/0x160 [ 1557.834461][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1557.839342][T23221] do_SYSENTER_32+0x73/0x90 [ 1557.843862][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.850312][T23221] [ 1557.852644][T23221] Uninit was stored to memory at: [ 1557.857801][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1557.863532][T23221] __msan_chain_origin+0x57/0xa0 [ 1557.868483][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1557.873636][T23221] get_compat_msghdr+0x108/0x2b0 [ 1557.878586][T23221] do_recvmmsg+0xdaf/0x2300 [ 1557.883094][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1557.887781][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.893871][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.900137][T23221] __do_fast_syscall_32+0x102/0x160 [ 1557.905390][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1557.910281][T23221] do_SYSENTER_32+0x73/0x90 [ 1557.914803][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.921141][T23221] [ 1557.923474][T23221] Uninit was stored to memory at: [ 1557.928517][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1557.934255][T23221] __msan_chain_origin+0x57/0xa0 [ 1557.939213][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1557.944339][T23221] get_compat_msghdr+0x108/0x2b0 [ 1557.949294][T23221] do_recvmmsg+0xdaf/0x2300 [ 1557.953812][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1557.958500][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.964581][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.970871][T23221] __do_fast_syscall_32+0x102/0x160 [ 1557.976090][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1557.980952][T23221] do_SYSENTER_32+0x73/0x90 [ 1557.985469][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.991797][T23221] [ 1557.994137][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1558.000866][T23221] do_recvmmsg+0xbc/0x2300 [ 1558.005305][T23221] do_recvmmsg+0xbc/0x2300 [ 1558.323628][T23221] not chained 5950000 origins [ 1558.328381][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1558.337328][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.347392][T23221] Call Trace: [ 1558.350709][T23221] dump_stack+0x21c/0x280 [ 1558.355059][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1558.360805][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1558.366887][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1558.372535][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1558.378488][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1558.385273][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1558.390668][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1558.395886][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1558.401797][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1558.409402][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1558.414355][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1558.419562][T23221] __msan_chain_origin+0x57/0xa0 [ 1558.424514][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1558.429648][T23221] get_compat_msghdr+0x108/0x2b0 [ 1558.434604][T23221] do_recvmmsg+0xdaf/0x2300 [ 1558.439135][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1558.445659][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1558.450885][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1558.456797][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1558.462009][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1558.467652][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1558.472957][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1558.477740][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1558.482518][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1558.488332][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1558.493543][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.499689][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.505863][T23221] __do_fast_syscall_32+0x102/0x160 [ 1558.511074][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1558.515955][T23221] do_SYSENTER_32+0x73/0x90 [ 1558.520494][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.526916][T23221] RIP: 0023:0xf7fd0549 [ 1558.530996][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1558.550615][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1558.559057][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1558.567044][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1558.575038][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1558.583023][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1558.591229][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1558.599229][T23221] Uninit was stored to memory at: [ 1558.604272][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1558.610003][T23221] __msan_chain_origin+0x57/0xa0 [ 1558.615132][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1558.620257][T23221] get_compat_msghdr+0x108/0x2b0 [ 1558.625474][T23221] do_recvmmsg+0xdaf/0x2300 [ 1558.629987][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1558.634742][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.640825][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.647020][T23221] __do_fast_syscall_32+0x102/0x160 [ 1558.652235][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1558.657106][T23221] do_SYSENTER_32+0x73/0x90 [ 1558.661711][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.668093][T23221] [ 1558.670430][T23221] Uninit was stored to memory at: [ 1558.675476][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1558.681240][T23221] __msan_chain_origin+0x57/0xa0 [ 1558.686186][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1558.691302][T23221] get_compat_msghdr+0x108/0x2b0 [ 1558.696267][T23221] do_recvmmsg+0xdaf/0x2300 [ 1558.700783][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1558.705826][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.711999][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.718183][T23221] __do_fast_syscall_32+0x102/0x160 [ 1558.723480][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1558.728336][T23221] do_SYSENTER_32+0x73/0x90 [ 1558.732850][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.739172][T23221] [ 1558.741520][T23221] Uninit was stored to memory at: [ 1558.746856][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1558.752595][T23221] __msan_chain_origin+0x57/0xa0 [ 1558.757555][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1558.762701][T23221] get_compat_msghdr+0x108/0x2b0 [ 1558.767674][T23221] do_recvmmsg+0xdaf/0x2300 [ 1558.772184][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1558.777003][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.783093][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.789313][T23221] __do_fast_syscall_32+0x102/0x160 [ 1558.794669][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1558.799542][T23221] do_SYSENTER_32+0x73/0x90 [ 1558.804090][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.810418][T23221] [ 1558.812748][T23221] Uninit was stored to memory at: [ 1558.817816][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1558.823560][T23221] __msan_chain_origin+0x57/0xa0 [ 1558.828517][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1558.833644][T23221] get_compat_msghdr+0x108/0x2b0 [ 1558.838602][T23221] do_recvmmsg+0xdaf/0x2300 [ 1558.843248][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1558.847960][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.854046][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.860222][T23221] __do_fast_syscall_32+0x102/0x160 [ 1558.865441][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1558.870310][T23221] do_SYSENTER_32+0x73/0x90 [ 1558.876494][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.882937][T23221] [ 1558.885273][T23221] Uninit was stored to memory at: [ 1558.890323][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1558.896049][T23221] __msan_chain_origin+0x57/0xa0 [ 1558.901080][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1558.906206][T23221] get_compat_msghdr+0x108/0x2b0 [ 1558.911152][T23221] do_recvmmsg+0xdaf/0x2300 [ 1558.915753][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1558.920448][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.926534][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.932801][T23221] __do_fast_syscall_32+0x102/0x160 [ 1558.938025][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1558.942899][T23221] do_SYSENTER_32+0x73/0x90 [ 1558.947429][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.953766][T23221] [ 1558.956114][T23221] Uninit was stored to memory at: [ 1558.961159][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1558.967007][T23221] __msan_chain_origin+0x57/0xa0 [ 1558.972062][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1558.977210][T23221] get_compat_msghdr+0x108/0x2b0 [ 1558.982184][T23221] do_recvmmsg+0xdaf/0x2300 [ 1558.986711][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1558.991589][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.997687][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.003877][T23221] __do_fast_syscall_32+0x102/0x160 [ 1559.009102][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1559.013979][T23221] do_SYSENTER_32+0x73/0x90 [ 1559.018509][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.024838][T23221] [ 1559.027172][T23221] Uninit was stored to memory at: [ 1559.032225][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1559.037975][T23221] __msan_chain_origin+0x57/0xa0 [ 1559.043018][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1559.048149][T23221] get_compat_msghdr+0x108/0x2b0 [ 1559.053102][T23221] do_recvmmsg+0xdaf/0x2300 [ 1559.057614][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1559.062330][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.068423][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.074611][T23221] __do_fast_syscall_32+0x102/0x160 [ 1559.079841][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1559.084742][T23221] do_SYSENTER_32+0x73/0x90 [ 1559.089336][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.095727][T23221] [ 1559.098057][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1559.104742][T23221] do_recvmmsg+0xbc/0x2300 [ 1559.109171][T23221] do_recvmmsg+0xbc/0x2300 [ 1559.175313][T23224] not chained 5960000 origins [ 1559.180054][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1559.188852][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1559.198959][T23224] Call Trace: [ 1559.202277][T23224] dump_stack+0x21c/0x280 [ 1559.206649][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1559.212419][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1559.218601][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1559.223820][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1559.229645][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1559.235746][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1559.241182][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1559.247073][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1559.252723][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1559.258894][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1559.263840][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1559.269106][T23224] __msan_chain_origin+0x57/0xa0 [ 1559.274073][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1559.279207][T23224] get_compat_msghdr+0x108/0x2b0 [ 1559.284249][T23224] do_recvmmsg+0xdaf/0x2300 [ 1559.292594][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1559.297814][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1559.303720][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1559.308946][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1559.314588][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1559.319898][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1559.324676][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1559.329384][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1559.335242][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1559.340988][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.347109][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.353286][T23224] __do_fast_syscall_32+0x102/0x160 [ 1559.358505][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1559.363392][T23224] do_SYSENTER_32+0x73/0x90 [ 1559.367927][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.374785][T23224] RIP: 0023:0xf7fd0549 [ 1559.378867][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1559.399272][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1559.408513][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1559.416528][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1559.424529][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1559.432515][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1559.440496][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1559.448477][T23224] Uninit was stored to memory at: [ 1559.453521][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1559.459321][T23224] __msan_chain_origin+0x57/0xa0 [ 1559.464272][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1559.469393][T23224] get_compat_msghdr+0x108/0x2b0 [ 1559.474869][T23224] do_recvmmsg+0xdaf/0x2300 [ 1559.479467][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1559.484343][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.490427][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.496599][T23224] __do_fast_syscall_32+0x102/0x160 [ 1559.501837][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1559.506712][T23224] do_SYSENTER_32+0x73/0x90 [ 1559.511241][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.517642][T23224] [ 1559.520523][T23224] Uninit was stored to memory at: [ 1559.525578][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1559.531313][T23224] __msan_chain_origin+0x57/0xa0 [ 1559.536379][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1559.541542][T23224] get_compat_msghdr+0x108/0x2b0 [ 1559.546490][T23224] do_recvmmsg+0xdaf/0x2300 [ 1559.551020][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1559.555823][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.561932][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.568122][T23224] __do_fast_syscall_32+0x102/0x160 [ 1559.573333][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1559.578193][T23224] do_SYSENTER_32+0x73/0x90 [ 1559.582912][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.589239][T23224] [ 1559.591567][T23224] Uninit was stored to memory at: [ 1559.597263][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1559.603009][T23224] __msan_chain_origin+0x57/0xa0 [ 1559.607964][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1559.613379][T23224] get_compat_msghdr+0x108/0x2b0 [ 1559.618526][T23224] do_recvmmsg+0xdaf/0x2300 [ 1559.623067][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1559.627766][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.634042][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.640352][T23224] __do_fast_syscall_32+0x102/0x160 [ 1559.645661][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1559.650537][T23224] do_SYSENTER_32+0x73/0x90 [ 1559.655079][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.661412][T23224] [ 1559.663781][T23224] Uninit was stored to memory at: [ 1559.668841][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1559.674602][T23224] __msan_chain_origin+0x57/0xa0 [ 1559.679922][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1559.685082][T23224] get_compat_msghdr+0x108/0x2b0 [ 1559.690056][T23224] do_recvmmsg+0xdaf/0x2300 [ 1559.694577][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1559.699361][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.706009][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.712804][T23224] __do_fast_syscall_32+0x102/0x160 [ 1559.718337][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1559.723207][T23224] do_SYSENTER_32+0x73/0x90 [ 1559.727736][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.734665][T23224] [ 1559.736996][T23224] Uninit was stored to memory at: [ 1559.742048][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1559.747902][T23224] __msan_chain_origin+0x57/0xa0 [ 1559.752866][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1559.758525][T23224] get_compat_msghdr+0x108/0x2b0 [ 1559.763532][T23224] do_recvmmsg+0xdaf/0x2300 [ 1559.768701][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1559.773604][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.779699][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.785894][T23224] __do_fast_syscall_32+0x102/0x160 [ 1559.791304][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1559.796197][T23224] do_SYSENTER_32+0x73/0x90 [ 1559.800920][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.807259][T23224] [ 1559.809605][T23224] Uninit was stored to memory at: [ 1559.814677][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1559.820429][T23224] __msan_chain_origin+0x57/0xa0 [ 1559.825397][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1559.830543][T23224] get_compat_msghdr+0x108/0x2b0 [ 1559.836126][T23224] do_recvmmsg+0xdaf/0x2300 [ 1559.840659][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1559.845369][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.851580][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.857766][T23224] __do_fast_syscall_32+0x102/0x160 [ 1559.863006][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1559.867902][T23224] do_SYSENTER_32+0x73/0x90 [ 1559.872430][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.878758][T23224] [ 1559.881098][T23224] Uninit was stored to memory at: [ 1559.886166][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1559.892024][T23224] __msan_chain_origin+0x57/0xa0 [ 1559.897193][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1559.902419][T23224] get_compat_msghdr+0x108/0x2b0 [ 1559.907399][T23224] do_recvmmsg+0xdaf/0x2300 [ 1559.911928][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1559.916628][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.922730][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.929530][T23224] __do_fast_syscall_32+0x102/0x160 [ 1559.934764][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1559.939740][T23224] do_SYSENTER_32+0x73/0x90 [ 1559.944277][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.950608][T23224] [ 1559.953046][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1559.959752][T23224] do_recvmmsg+0xbc/0x2300 [ 1559.964198][T23224] do_recvmmsg+0xbc/0x2300 [ 1560.255114][T23221] not chained 5970000 origins [ 1560.259941][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1560.268734][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.278810][T23221] Call Trace: [ 1560.282134][T23221] dump_stack+0x21c/0x280 [ 1560.286492][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1560.292250][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1560.298347][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1560.303568][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1560.309584][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1560.315765][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1560.321172][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1560.326418][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1560.332165][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1560.338260][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1560.343226][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1560.348445][T23221] __msan_chain_origin+0x57/0xa0 [ 1560.353430][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1560.358570][T23221] get_compat_msghdr+0x108/0x2b0 [ 1560.363531][T23221] do_recvmmsg+0xdaf/0x2300 [ 1560.368052][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1560.374140][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1560.379381][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1560.385319][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1560.390635][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1560.396294][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1560.401611][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1560.406401][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1560.411102][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1560.416937][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1560.422158][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.428248][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.434429][T23221] __do_fast_syscall_32+0x102/0x160 [ 1560.439654][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1560.444537][T23221] do_SYSENTER_32+0x73/0x90 [ 1560.449063][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.455400][T23221] RIP: 0023:0xf7fd0549 [ 1560.459481][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1560.479195][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1560.487656][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1560.495652][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1560.503660][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1560.511657][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1560.519661][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1560.527657][T23221] Uninit was stored to memory at: [ 1560.532763][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1560.538609][T23221] __msan_chain_origin+0x57/0xa0 [ 1560.543603][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1560.548757][T23221] get_compat_msghdr+0x108/0x2b0 [ 1560.553715][T23221] do_recvmmsg+0xdaf/0x2300 [ 1560.558757][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1560.563558][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.570441][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.576889][T23221] __do_fast_syscall_32+0x102/0x160 [ 1560.582121][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1560.586996][T23221] do_SYSENTER_32+0x73/0x90 [ 1560.591516][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.597840][T23221] [ 1560.600169][T23221] Uninit was stored to memory at: [ 1560.605214][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1560.610958][T23221] __msan_chain_origin+0x57/0xa0 [ 1560.615922][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1560.621061][T23221] get_compat_msghdr+0x108/0x2b0 [ 1560.626033][T23221] do_recvmmsg+0xdaf/0x2300 [ 1560.630568][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1560.635261][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.641346][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.647530][T23221] __do_fast_syscall_32+0x102/0x160 [ 1560.652766][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1560.657627][T23221] do_SYSENTER_32+0x73/0x90 [ 1560.662165][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.668574][T23221] [ 1560.670904][T23221] Uninit was stored to memory at: [ 1560.676044][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1560.681770][T23221] __msan_chain_origin+0x57/0xa0 [ 1560.686735][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1560.691853][T23221] get_compat_msghdr+0x108/0x2b0 [ 1560.696993][T23221] do_recvmmsg+0xdaf/0x2300 [ 1560.701503][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1560.706204][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.712554][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.718720][T23221] __do_fast_syscall_32+0x102/0x160 [ 1560.723927][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1560.728784][T23221] do_SYSENTER_32+0x73/0x90 [ 1560.733305][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.739626][T23221] [ 1560.741960][T23221] Uninit was stored to memory at: [ 1560.747024][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1560.752759][T23221] __msan_chain_origin+0x57/0xa0 [ 1560.757715][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1560.762933][T23221] get_compat_msghdr+0x108/0x2b0 [ 1560.767900][T23221] do_recvmmsg+0xdaf/0x2300 [ 1560.772425][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1560.777121][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.783231][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.789422][T23221] __do_fast_syscall_32+0x102/0x160 [ 1560.794643][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1560.799517][T23221] do_SYSENTER_32+0x73/0x90 [ 1560.804128][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.810452][T23221] [ 1560.812788][T23221] Uninit was stored to memory at: [ 1560.817847][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1560.823580][T23221] __msan_chain_origin+0x57/0xa0 [ 1560.828539][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1560.833674][T23221] get_compat_msghdr+0x108/0x2b0 [ 1560.838649][T23221] do_recvmmsg+0xdaf/0x2300 [ 1560.843169][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1560.847874][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.854053][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.860243][T23221] __do_fast_syscall_32+0x102/0x160 [ 1560.865457][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1560.870324][T23221] do_SYSENTER_32+0x73/0x90 [ 1560.874846][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.881168][T23221] [ 1560.883502][T23221] Uninit was stored to memory at: [ 1560.888544][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1560.894277][T23221] __msan_chain_origin+0x57/0xa0 [ 1560.899241][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1560.904383][T23221] get_compat_msghdr+0x108/0x2b0 [ 1560.909361][T23221] do_recvmmsg+0xdaf/0x2300 [ 1560.913975][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1560.918664][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.924748][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.930929][T23221] __do_fast_syscall_32+0x102/0x160 [ 1560.936147][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1560.941017][T23221] do_SYSENTER_32+0x73/0x90 [ 1560.945566][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.952021][T23221] [ 1560.954374][T23221] Uninit was stored to memory at: [ 1560.959415][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1560.965152][T23221] __msan_chain_origin+0x57/0xa0 [ 1560.970817][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1560.975967][T23221] get_compat_msghdr+0x108/0x2b0 [ 1560.980942][T23221] do_recvmmsg+0xdaf/0x2300 [ 1560.986169][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1560.990871][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.996960][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.003142][T23221] __do_fast_syscall_32+0x102/0x160 [ 1561.008369][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1561.013230][T23221] do_SYSENTER_32+0x73/0x90 [ 1561.017739][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.024062][T23221] [ 1561.026401][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1561.033092][T23221] do_recvmmsg+0xbc/0x2300 [ 1561.037612][T23221] do_recvmmsg+0xbc/0x2300 [ 1561.189578][T23221] not chained 5980000 origins [ 1561.194371][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1561.203162][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.213251][T23221] Call Trace: [ 1561.216605][T23221] dump_stack+0x21c/0x280 [ 1561.220979][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1561.226740][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1561.232829][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1561.238049][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1561.243878][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1561.249973][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1561.255371][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1561.260624][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1561.266285][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1561.272378][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1561.277330][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1561.282636][T23221] __msan_chain_origin+0x57/0xa0 [ 1561.287688][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1561.292846][T23221] get_compat_msghdr+0x108/0x2b0 [ 1561.297828][T23221] do_recvmmsg+0xdaf/0x2300 [ 1561.302414][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1561.308499][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1561.313905][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1561.319817][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1561.325040][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1561.330824][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1561.336241][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1561.341137][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1561.345922][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1561.351745][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1561.357005][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.363214][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.369404][T23221] __do_fast_syscall_32+0x102/0x160 [ 1561.374732][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1561.379618][T23221] do_SYSENTER_32+0x73/0x90 [ 1561.384163][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.390505][T23221] RIP: 0023:0xf7fd0549 [ 1561.394591][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1561.414482][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1561.423031][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1561.431040][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1561.439111][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1561.447106][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1561.455480][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1561.463999][T23221] Uninit was stored to memory at: [ 1561.469957][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1561.476253][T23221] __msan_chain_origin+0x57/0xa0 [ 1561.481419][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1561.486639][T23221] get_compat_msghdr+0x108/0x2b0 [ 1561.491596][T23221] do_recvmmsg+0xdaf/0x2300 [ 1561.496132][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1561.501259][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.508068][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.514425][T23221] __do_fast_syscall_32+0x102/0x160 [ 1561.519644][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1561.524512][T23221] do_SYSENTER_32+0x73/0x90 [ 1561.529987][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.536328][T23221] [ 1561.538664][T23221] Uninit was stored to memory at: [ 1561.543711][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1561.549539][T23221] __msan_chain_origin+0x57/0xa0 [ 1561.555021][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1561.560181][T23221] get_compat_msghdr+0x108/0x2b0 [ 1561.565147][T23221] do_recvmmsg+0xdaf/0x2300 [ 1561.569704][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1561.574438][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.580549][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.586868][T23221] __do_fast_syscall_32+0x102/0x160 [ 1561.592108][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1561.596987][T23221] do_SYSENTER_32+0x73/0x90 [ 1561.601534][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.607882][T23221] [ 1561.610220][T23221] Uninit was stored to memory at: [ 1561.615267][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1561.621269][T23221] __msan_chain_origin+0x57/0xa0 [ 1561.626226][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1561.631360][T23221] get_compat_msghdr+0x108/0x2b0 [ 1561.636323][T23221] do_recvmmsg+0xdaf/0x2300 [ 1561.641025][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1561.645726][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.651818][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.658030][T23221] __do_fast_syscall_32+0x102/0x160 [ 1561.663250][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1561.668133][T23221] do_SYSENTER_32+0x73/0x90 [ 1561.672668][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.679259][T23221] [ 1561.681594][T23221] Uninit was stored to memory at: [ 1561.686663][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1561.692390][T23221] __msan_chain_origin+0x57/0xa0 [ 1561.697434][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1561.702557][T23221] get_compat_msghdr+0x108/0x2b0 [ 1561.707503][T23221] do_recvmmsg+0xdaf/0x2300 [ 1561.712039][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1561.716745][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.723258][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.731477][T23221] __do_fast_syscall_32+0x102/0x160 [ 1561.736881][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1561.741852][T23221] do_SYSENTER_32+0x73/0x90 [ 1561.746379][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.753625][T23221] [ 1561.756077][T23221] Uninit was stored to memory at: [ 1561.761578][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1561.767327][T23221] __msan_chain_origin+0x57/0xa0 [ 1561.772293][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1561.777428][T23221] get_compat_msghdr+0x108/0x2b0 [ 1561.782387][T23221] do_recvmmsg+0xdaf/0x2300 [ 1561.786911][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1561.791897][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.798280][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.804645][T23221] __do_fast_syscall_32+0x102/0x160 [ 1561.810123][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1561.814987][T23221] do_SYSENTER_32+0x73/0x90 [ 1561.820395][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.826824][T23221] [ 1561.829161][T23221] Uninit was stored to memory at: [ 1561.834245][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1561.840085][T23221] __msan_chain_origin+0x57/0xa0 [ 1561.845056][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1561.850193][T23221] get_compat_msghdr+0x108/0x2b0 [ 1561.855155][T23221] do_recvmmsg+0xdaf/0x2300 [ 1561.859681][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1561.864387][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.870474][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.876662][T23221] __do_fast_syscall_32+0x102/0x160 [ 1561.881920][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1561.886802][T23221] do_SYSENTER_32+0x73/0x90 [ 1561.891533][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.897972][T23221] [ 1561.900748][T23221] Uninit was stored to memory at: [ 1561.908102][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1561.914370][T23221] __msan_chain_origin+0x57/0xa0 [ 1561.919357][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1561.924502][T23221] get_compat_msghdr+0x108/0x2b0 [ 1561.929467][T23221] do_recvmmsg+0xdaf/0x2300 [ 1561.935065][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1561.939790][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.945901][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.952114][T23221] __do_fast_syscall_32+0x102/0x160 [ 1561.957909][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1561.962786][T23221] do_SYSENTER_32+0x73/0x90 [ 1561.967405][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.975154][T23221] [ 1561.977498][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1561.984198][T23221] do_recvmmsg+0xbc/0x2300 [ 1561.988982][T23221] do_recvmmsg+0xbc/0x2300 [ 1562.158924][T23221] not chained 5990000 origins [ 1562.163655][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1562.172426][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.182624][T23221] Call Trace: [ 1562.185964][T23221] dump_stack+0x21c/0x280 [ 1562.190414][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1562.196170][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1562.202444][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1562.207688][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1562.213612][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1562.219749][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1562.225150][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1562.230371][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1562.236206][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1562.242323][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1562.247659][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1562.252876][T23221] __msan_chain_origin+0x57/0xa0 [ 1562.258194][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1562.263388][T23221] get_compat_msghdr+0x108/0x2b0 [ 1562.268440][T23221] do_recvmmsg+0xdaf/0x2300 [ 1562.272957][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1562.279047][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1562.284360][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1562.290277][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1562.295494][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1562.301148][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1562.306453][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1562.311238][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1562.316144][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1562.322073][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1562.327553][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.333736][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.339921][T23221] __do_fast_syscall_32+0x102/0x160 [ 1562.345147][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1562.350023][T23221] do_SYSENTER_32+0x73/0x90 [ 1562.354549][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.360912][T23221] RIP: 0023:0xf7fd0549 [ 1562.364999][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1562.384822][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1562.393279][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1562.401276][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1562.409328][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1562.417846][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1562.425844][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1562.433935][T23221] Uninit was stored to memory at: [ 1562.438995][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1562.444734][T23221] __msan_chain_origin+0x57/0xa0 [ 1562.449694][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1562.454827][T23221] get_compat_msghdr+0x108/0x2b0 [ 1562.459797][T23221] do_recvmmsg+0xdaf/0x2300 [ 1562.464339][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1562.469127][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.475244][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.481431][T23221] __do_fast_syscall_32+0x102/0x160 [ 1562.486824][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1562.491879][T23221] do_SYSENTER_32+0x73/0x90 [ 1562.496428][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.503132][T23221] [ 1562.505659][T23221] Uninit was stored to memory at: [ 1562.510805][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1562.516664][T23221] __msan_chain_origin+0x57/0xa0 [ 1562.521832][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1562.526982][T23221] get_compat_msghdr+0x108/0x2b0 [ 1562.531960][T23221] do_recvmmsg+0xdaf/0x2300 [ 1562.537016][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1562.541813][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.547918][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.554273][T23221] __do_fast_syscall_32+0x102/0x160 [ 1562.559495][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1562.564384][T23221] do_SYSENTER_32+0x73/0x90 [ 1562.568909][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.575338][T23221] [ 1562.577756][T23221] Uninit was stored to memory at: [ 1562.582805][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1562.588566][T23221] __msan_chain_origin+0x57/0xa0 [ 1562.593531][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1562.598840][T23221] get_compat_msghdr+0x108/0x2b0 [ 1562.604770][T23221] do_recvmmsg+0xdaf/0x2300 [ 1562.609420][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1562.614500][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.620719][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.627004][T23221] __do_fast_syscall_32+0x102/0x160 [ 1562.632349][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1562.637237][T23221] do_SYSENTER_32+0x73/0x90 [ 1562.641875][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.648317][T23221] [ 1562.650672][T23221] Uninit was stored to memory at: [ 1562.655925][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1562.661670][T23221] __msan_chain_origin+0x57/0xa0 [ 1562.666844][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1562.672085][T23221] get_compat_msghdr+0x108/0x2b0 [ 1562.677063][T23221] do_recvmmsg+0xdaf/0x2300 [ 1562.681601][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1562.686658][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.692760][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.699154][T23221] __do_fast_syscall_32+0x102/0x160 [ 1562.704402][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1562.709282][T23221] do_SYSENTER_32+0x73/0x90 [ 1562.713818][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.720150][T23221] [ 1562.722508][T23221] Uninit was stored to memory at: [ 1562.727573][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1562.733332][T23221] __msan_chain_origin+0x57/0xa0 [ 1562.738379][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1562.743514][T23221] get_compat_msghdr+0x108/0x2b0 [ 1562.748500][T23221] do_recvmmsg+0xdaf/0x2300 [ 1562.753222][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1562.757918][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.764181][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.770371][T23221] __do_fast_syscall_32+0x102/0x160 [ 1562.775611][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1562.780482][T23221] do_SYSENTER_32+0x73/0x90 [ 1562.785278][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.791598][T23221] [ 1562.793929][T23221] Uninit was stored to memory at: [ 1562.798970][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1562.804714][T23221] __msan_chain_origin+0x57/0xa0 [ 1562.809663][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1562.814919][T23221] get_compat_msghdr+0x108/0x2b0 [ 1562.819882][T23221] do_recvmmsg+0xdaf/0x2300 [ 1562.824409][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1562.829111][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.835215][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.841750][T23221] __do_fast_syscall_32+0x102/0x160 [ 1562.846978][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1562.851877][T23221] do_SYSENTER_32+0x73/0x90 [ 1562.856412][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.862740][T23221] [ 1562.865100][T23221] Uninit was stored to memory at: [ 1562.870171][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1562.876191][T23221] __msan_chain_origin+0x57/0xa0 [ 1562.881161][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1562.886322][T23221] get_compat_msghdr+0x108/0x2b0 [ 1562.891300][T23221] do_recvmmsg+0xdaf/0x2300 [ 1562.896746][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1562.901457][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.907599][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.913783][T23221] __do_fast_syscall_32+0x102/0x160 [ 1562.919019][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1562.924117][T23221] do_SYSENTER_32+0x73/0x90 [ 1562.929008][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.935426][T23221] [ 1562.937766][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1562.944481][T23221] do_recvmmsg+0xbc/0x2300 [ 1562.948925][T23221] do_recvmmsg+0xbc/0x2300 [ 1563.149401][T23221] not chained 6000000 origins [ 1563.154140][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1563.162942][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.174078][T23221] Call Trace: [ 1563.177394][T23221] dump_stack+0x21c/0x280 [ 1563.181764][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1563.187549][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1563.193645][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1563.198874][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1563.204763][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1563.210877][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1563.216725][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1563.222049][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1563.227727][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1563.233924][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1563.238999][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1563.244407][T23221] __msan_chain_origin+0x57/0xa0 [ 1563.250003][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1563.255341][T23221] get_compat_msghdr+0x108/0x2b0 [ 1563.260315][T23221] do_recvmmsg+0xdaf/0x2300 [ 1563.264853][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1563.271829][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1563.277061][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1563.283331][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1563.288691][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1563.294538][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1563.300388][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1563.305302][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1563.310011][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1563.315850][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1563.321087][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.327495][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.333751][T23221] __do_fast_syscall_32+0x102/0x160 [ 1563.339169][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1563.344241][T23221] do_SYSENTER_32+0x73/0x90 [ 1563.348795][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.356548][T23221] RIP: 0023:0xf7fd0549 [ 1563.362522][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1563.383487][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1563.391937][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1563.400598][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1563.409477][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1563.417798][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1563.426188][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1563.434624][T23221] Uninit was stored to memory at: [ 1563.440455][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1563.446414][T23221] __msan_chain_origin+0x57/0xa0 [ 1563.451385][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1563.456551][T23221] get_compat_msghdr+0x108/0x2b0 [ 1563.461530][T23221] do_recvmmsg+0xdaf/0x2300 [ 1563.466934][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1563.471900][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.478000][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.484291][T23221] __do_fast_syscall_32+0x102/0x160 [ 1563.489519][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1563.495104][T23221] do_SYSENTER_32+0x73/0x90 [ 1563.500076][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.506407][T23221] [ 1563.508750][T23221] Uninit was stored to memory at: [ 1563.514008][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1563.519749][T23221] __msan_chain_origin+0x57/0xa0 [ 1563.524712][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1563.530712][T23221] get_compat_msghdr+0x108/0x2b0 [ 1563.538475][T23221] do_recvmmsg+0xdaf/0x2300 [ 1563.543125][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1563.548252][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.555236][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.561607][T23221] __do_fast_syscall_32+0x102/0x160 [ 1563.566869][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1563.571843][T23221] do_SYSENTER_32+0x73/0x90 [ 1563.576476][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.582978][T23221] [ 1563.585345][T23221] Uninit was stored to memory at: [ 1563.590411][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1563.596179][T23221] __msan_chain_origin+0x57/0xa0 [ 1563.601324][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1563.606735][T23221] get_compat_msghdr+0x108/0x2b0 [ 1563.611715][T23221] do_recvmmsg+0xdaf/0x2300 [ 1563.616339][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1563.621332][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.627436][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.633641][T23221] __do_fast_syscall_32+0x102/0x160 [ 1563.639430][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1563.646859][T23221] do_SYSENTER_32+0x73/0x90 [ 1563.651393][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.657916][T23221] [ 1563.660258][T23221] Uninit was stored to memory at: [ 1563.665336][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1563.671094][T23221] __msan_chain_origin+0x57/0xa0 [ 1563.676056][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1563.681307][T23221] get_compat_msghdr+0x108/0x2b0 [ 1563.687407][T23221] do_recvmmsg+0xdaf/0x2300 [ 1563.691934][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1563.696646][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.702764][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.709167][T23221] __do_fast_syscall_32+0x102/0x160 [ 1563.714400][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1563.719735][T23221] do_SYSENTER_32+0x73/0x90 [ 1563.724268][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.730599][T23221] [ 1563.732953][T23221] Uninit was stored to memory at: [ 1563.738031][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1563.743781][T23221] __msan_chain_origin+0x57/0xa0 [ 1563.749129][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1563.755143][T23221] get_compat_msghdr+0x108/0x2b0 [ 1563.760110][T23221] do_recvmmsg+0xdaf/0x2300 [ 1563.764644][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1563.769345][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.775441][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.781712][T23221] __do_fast_syscall_32+0x102/0x160 [ 1563.787224][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1563.792098][T23221] do_SYSENTER_32+0x73/0x90 [ 1563.797330][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.803690][T23221] [ 1563.807000][T23221] Uninit was stored to memory at: [ 1563.812359][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1563.818085][T23221] __msan_chain_origin+0x57/0xa0 [ 1563.823048][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1563.828345][T23221] get_compat_msghdr+0x108/0x2b0 [ 1563.833404][T23221] do_recvmmsg+0xdaf/0x2300 [ 1563.838018][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1563.842735][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.849633][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.855819][T23221] __do_fast_syscall_32+0x102/0x160 [ 1563.861132][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1563.866011][T23221] do_SYSENTER_32+0x73/0x90 [ 1563.870542][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.877163][T23221] [ 1563.879507][T23221] Uninit was stored to memory at: [ 1563.884566][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1563.890316][T23221] __msan_chain_origin+0x57/0xa0 [ 1563.895543][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1563.900852][T23221] get_compat_msghdr+0x108/0x2b0 [ 1563.906075][T23221] do_recvmmsg+0xdaf/0x2300 [ 1563.910787][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1563.915494][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.921602][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.927788][T23221] __do_fast_syscall_32+0x102/0x160 [ 1563.933036][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1563.937909][T23221] do_SYSENTER_32+0x73/0x90 [ 1563.942448][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.948775][T23221] [ 1563.951108][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1563.957807][T23221] do_recvmmsg+0xbc/0x2300 [ 1563.962266][T23221] do_recvmmsg+0xbc/0x2300 [ 1564.097822][T23224] not chained 6010000 origins [ 1564.102573][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1564.111448][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1564.121523][T23224] Call Trace: [ 1564.124863][T23224] dump_stack+0x21c/0x280 [ 1564.129219][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1564.134981][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1564.141082][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1564.146306][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1564.152255][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1564.158345][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1564.163738][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1564.168985][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1564.174649][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1564.180771][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1564.185742][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1564.191052][T23224] __msan_chain_origin+0x57/0xa0 [ 1564.196019][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1564.201176][T23224] get_compat_msghdr+0x108/0x2b0 [ 1564.206200][T23224] do_recvmmsg+0xdaf/0x2300 [ 1564.210752][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1564.215980][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1564.221897][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1564.227115][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1564.232790][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1564.238099][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1564.242893][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1564.247590][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1564.253944][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1564.259160][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.265264][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.271439][T23224] __do_fast_syscall_32+0x102/0x160 [ 1564.276655][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1564.281536][T23224] do_SYSENTER_32+0x73/0x90 [ 1564.286053][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.292395][T23224] RIP: 0023:0xf7fd0549 [ 1564.296584][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1564.316216][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1564.324927][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1564.333189][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1564.341192][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1564.349720][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1564.357729][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1564.365727][T23224] Uninit was stored to memory at: [ 1564.370886][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1564.376834][T23224] __msan_chain_origin+0x57/0xa0 [ 1564.381806][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1564.387036][T23224] get_compat_msghdr+0x108/0x2b0 [ 1564.392097][T23224] do_recvmmsg+0xdaf/0x2300 [ 1564.396625][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1564.401334][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.407463][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.413645][T23224] __do_fast_syscall_32+0x102/0x160 [ 1564.418872][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1564.423776][T23224] do_SYSENTER_32+0x73/0x90 [ 1564.428317][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.434652][T23224] [ 1564.436991][T23224] Uninit was stored to memory at: [ 1564.442069][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1564.448249][T23224] __msan_chain_origin+0x57/0xa0 [ 1564.453210][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1564.458360][T23224] get_compat_msghdr+0x108/0x2b0 [ 1564.463324][T23224] do_recvmmsg+0xdaf/0x2300 [ 1564.467875][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1564.472673][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.478787][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.484994][T23224] __do_fast_syscall_32+0x102/0x160 [ 1564.490348][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1564.495319][T23224] do_SYSENTER_32+0x73/0x90 [ 1564.499852][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.506286][T23224] [ 1564.508617][T23224] Uninit was stored to memory at: [ 1564.513661][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1564.520010][T23224] __msan_chain_origin+0x57/0xa0 [ 1564.524964][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1564.530268][T23224] get_compat_msghdr+0x108/0x2b0 [ 1564.535233][T23224] do_recvmmsg+0xdaf/0x2300 [ 1564.539756][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1564.544633][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.551685][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.557862][T23224] __do_fast_syscall_32+0x102/0x160 [ 1564.563369][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1564.568603][T23224] do_SYSENTER_32+0x73/0x90 [ 1564.573154][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.580082][T23224] [ 1564.582431][T23224] Uninit was stored to memory at: [ 1564.587503][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1564.593447][T23224] __msan_chain_origin+0x57/0xa0 [ 1564.598598][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1564.603935][T23224] get_compat_msghdr+0x108/0x2b0 [ 1564.609021][T23224] do_recvmmsg+0xdaf/0x2300 [ 1564.613642][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1564.618365][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.624466][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.630852][T23224] __do_fast_syscall_32+0x102/0x160 [ 1564.636780][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1564.641681][T23224] do_SYSENTER_32+0x73/0x90 [ 1564.646820][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.653260][T23224] [ 1564.655599][T23224] Uninit was stored to memory at: [ 1564.661220][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1564.666966][T23224] __msan_chain_origin+0x57/0xa0 [ 1564.672013][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1564.677162][T23224] get_compat_msghdr+0x108/0x2b0 [ 1564.682915][T23224] do_recvmmsg+0xdaf/0x2300 [ 1564.687433][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1564.692473][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.698949][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.705241][T23224] __do_fast_syscall_32+0x102/0x160 [ 1564.710733][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1564.715972][T23224] do_SYSENTER_32+0x73/0x90 [ 1564.720613][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.727409][T23224] [ 1564.729747][T23224] Uninit was stored to memory at: [ 1564.734898][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1564.740671][T23224] __msan_chain_origin+0x57/0xa0 [ 1564.745917][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1564.751056][T23224] get_compat_msghdr+0x108/0x2b0 [ 1564.756221][T23224] do_recvmmsg+0xdaf/0x2300 [ 1564.760829][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1564.765551][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.771939][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.778588][T23224] __do_fast_syscall_32+0x102/0x160 [ 1564.783815][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1564.788879][T23224] do_SYSENTER_32+0x73/0x90 [ 1564.793759][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.800190][T23224] [ 1564.802535][T23224] Uninit was stored to memory at: [ 1564.807590][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1564.813405][T23224] __msan_chain_origin+0x57/0xa0 [ 1564.818350][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1564.823489][T23224] get_compat_msghdr+0x108/0x2b0 [ 1564.828446][T23224] do_recvmmsg+0xdaf/0x2300 [ 1564.832980][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1564.837948][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.844148][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.850427][T23224] __do_fast_syscall_32+0x102/0x160 [ 1564.855656][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1564.860523][T23224] do_SYSENTER_32+0x73/0x90 [ 1564.865057][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.871387][T23224] [ 1564.873728][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1564.880443][T23224] do_recvmmsg+0xbc/0x2300 [ 1564.884901][T23224] do_recvmmsg+0xbc/0x2300 [ 1565.103597][T23224] not chained 6020000 origins [ 1565.108330][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1565.117098][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.127545][T23224] Call Trace: [ 1565.130897][T23224] dump_stack+0x21c/0x280 [ 1565.135283][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1565.141044][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1565.147236][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1565.152469][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1565.158311][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1565.164411][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1565.169833][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1565.175068][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1565.180743][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1565.186846][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1565.192628][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1565.197854][T23224] __msan_chain_origin+0x57/0xa0 [ 1565.202825][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1565.208433][T23224] get_compat_msghdr+0x108/0x2b0 [ 1565.213424][T23224] do_recvmmsg+0xdaf/0x2300 [ 1565.218037][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1565.223256][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1565.229190][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1565.234416][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1565.240121][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1565.245945][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1565.250727][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1565.255425][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1565.261531][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1565.266759][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1565.272873][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1565.279047][T23224] __do_fast_syscall_32+0x102/0x160 [ 1565.284302][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1565.289178][T23224] do_SYSENTER_32+0x73/0x90 [ 1565.293714][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1565.300051][T23224] RIP: 0023:0xf7fd0549 [ 1565.304846][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1565.324576][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1565.333136][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1565.341136][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1565.349143][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1565.357258][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1565.365719][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1565.373710][T23224] Uninit was stored to memory at: [ 1565.378789][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1565.384524][T23224] __msan_chain_origin+0x57/0xa0 [ 1565.389483][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1565.394601][T23224] get_compat_msghdr+0x108/0x2b0 [ 1565.399567][T23224] do_recvmmsg+0xdaf/0x2300 [ 1565.404086][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1565.408779][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1565.414860][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1565.421033][T23224] __do_fast_syscall_32+0x102/0x160 [ 1565.426248][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1565.431120][T23224] do_SYSENTER_32+0x73/0x90 [ 1565.435648][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1565.441973][T23224] [ 1565.444305][T23224] Uninit was stored to memory at: [ 1565.449378][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1565.455116][T23224] __msan_chain_origin+0x57/0xa0 [ 1565.460086][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1565.465220][T23224] get_compat_msghdr+0x108/0x2b0 [ 1565.470196][T23224] do_recvmmsg+0xdaf/0x2300 [ 1565.474722][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1565.479406][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1565.485487][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1565.491649][T23224] __do_fast_syscall_32+0x102/0x160 [ 1565.496858][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1565.501713][T23224] do_SYSENTER_32+0x73/0x90 [ 1565.506226][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1565.512547][T23224] [ 1565.514905][T23224] Uninit was stored to memory at: [ 1565.519971][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1565.525739][T23224] __msan_chain_origin+0x57/0xa0 [ 1565.530697][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1565.536182][T23224] get_compat_msghdr+0x108/0x2b0 [ 1565.541153][T23224] do_recvmmsg+0xdaf/0x2300 [ 1565.545680][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1565.550376][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1565.556465][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1565.562644][T23224] __do_fast_syscall_32+0x102/0x160 [ 1565.567880][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1565.572761][T23224] do_SYSENTER_32+0x73/0x90 [ 1565.577394][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1565.583741][T23224] [ 1565.586074][T23224] Uninit was stored to memory at: [ 1565.591123][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1565.596862][T23224] __msan_chain_origin+0x57/0xa0 [ 1565.601822][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1565.606952][T23224] get_compat_msghdr+0x108/0x2b0 [ 1565.611919][T23224] do_recvmmsg+0xdaf/0x2300 [ 1565.616447][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1565.621158][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1565.627262][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1565.633438][T23224] __do_fast_syscall_32+0x102/0x160 [ 1565.638660][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1565.643529][T23224] do_SYSENTER_32+0x73/0x90 [ 1565.648079][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1565.654511][T23224] [ 1565.656889][T23224] Uninit was stored to memory at: [ 1565.661953][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1565.667706][T23224] __msan_chain_origin+0x57/0xa0 [ 1565.672772][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1565.677916][T23224] get_compat_msghdr+0x108/0x2b0 [ 1565.682884][T23224] do_recvmmsg+0xdaf/0x2300 [ 1565.687508][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1565.692220][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1565.698325][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1565.704514][T23224] __do_fast_syscall_32+0x102/0x160 [ 1565.709750][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1565.714665][T23224] do_SYSENTER_32+0x73/0x90 [ 1565.719598][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1565.725948][T23224] [ 1565.728286][T23224] Uninit was stored to memory at: [ 1565.733359][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1565.739123][T23224] __msan_chain_origin+0x57/0xa0 [ 1565.744086][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1565.749216][T23224] get_compat_msghdr+0x108/0x2b0 [ 1565.754185][T23224] do_recvmmsg+0xdaf/0x2300 [ 1565.758724][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1565.763539][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1565.769634][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1565.775813][T23224] __do_fast_syscall_32+0x102/0x160 [ 1565.781039][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1565.785915][T23224] do_SYSENTER_32+0x73/0x90 [ 1565.790460][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1565.796779][T23224] [ 1565.799112][T23224] Uninit was stored to memory at: [ 1565.804153][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1565.809892][T23224] __msan_chain_origin+0x57/0xa0 [ 1565.814841][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1565.819989][T23224] get_compat_msghdr+0x108/0x2b0 [ 1565.824941][T23224] do_recvmmsg+0xdaf/0x2300 [ 1565.829457][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1565.834155][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1565.840246][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1565.846418][T23224] __do_fast_syscall_32+0x102/0x160 [ 1565.851635][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1565.856502][T23224] do_SYSENTER_32+0x73/0x90 [ 1565.861186][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1565.867510][T23224] [ 1565.869954][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1565.876746][T23224] do_recvmmsg+0xbc/0x2300 [ 1565.881182][T23224] do_recvmmsg+0xbc/0x2300 [ 1566.226214][T23224] not chained 6030000 origins [ 1566.230950][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1566.240498][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.250569][T23224] Call Trace: [ 1566.253894][T23224] dump_stack+0x21c/0x280 [ 1566.258245][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1566.263989][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1566.270081][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1566.275298][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1566.281144][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1566.287230][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1566.292618][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1566.297839][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1566.303498][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1566.309579][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1566.314543][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1566.320101][T23224] __msan_chain_origin+0x57/0xa0 [ 1566.325064][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1566.330207][T23224] get_compat_msghdr+0x108/0x2b0 [ 1566.335353][T23224] do_recvmmsg+0xdaf/0x2300 [ 1566.339889][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1566.345116][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1566.351137][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1566.356360][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1566.362010][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1566.367344][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1566.372389][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1566.377127][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1566.382971][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1566.388189][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1566.394369][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1566.400542][T23224] __do_fast_syscall_32+0x102/0x160 [ 1566.405764][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1566.410650][T23224] do_SYSENTER_32+0x73/0x90 [ 1566.415188][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1566.421558][T23224] RIP: 0023:0xf7fd0549 [ 1566.425653][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1566.445369][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1566.453812][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1566.461890][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1566.469920][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1566.477907][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1566.485916][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1566.494953][T23224] Uninit was stored to memory at: [ 1566.500001][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1566.505733][T23224] __msan_chain_origin+0x57/0xa0 [ 1566.510680][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1566.515802][T23224] get_compat_msghdr+0x108/0x2b0 [ 1566.520756][T23224] do_recvmmsg+0xdaf/0x2300 [ 1566.525351][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1566.530071][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1566.536150][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1566.542445][T23224] __do_fast_syscall_32+0x102/0x160 [ 1566.547662][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1566.552527][T23224] do_SYSENTER_32+0x73/0x90 [ 1566.557060][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1566.563384][T23224] [ 1566.565710][T23224] Uninit was stored to memory at: [ 1566.570761][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1566.576857][T23224] __msan_chain_origin+0x57/0xa0 [ 1566.581894][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1566.587022][T23224] get_compat_msghdr+0x108/0x2b0 [ 1566.591972][T23224] do_recvmmsg+0xdaf/0x2300 [ 1566.596493][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1566.601182][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1566.607270][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1566.613448][T23224] __do_fast_syscall_32+0x102/0x160 [ 1566.618933][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1566.623914][T23224] do_SYSENTER_32+0x73/0x90 [ 1566.628438][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1566.635399][T23224] [ 1566.637731][T23224] Uninit was stored to memory at: [ 1566.642779][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1566.648512][T23224] __msan_chain_origin+0x57/0xa0 [ 1566.653477][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1566.658613][T23224] get_compat_msghdr+0x108/0x2b0 [ 1566.663645][T23224] do_recvmmsg+0xdaf/0x2300 [ 1566.668161][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1566.672851][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1566.678935][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1566.685112][T23224] __do_fast_syscall_32+0x102/0x160 [ 1566.690327][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1566.695198][T23224] do_SYSENTER_32+0x73/0x90 [ 1566.699722][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1566.706055][T23224] [ 1566.708415][T23224] Uninit was stored to memory at: [ 1566.713462][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1566.719323][T23224] __msan_chain_origin+0x57/0xa0 [ 1566.724369][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1566.729587][T23224] get_compat_msghdr+0x108/0x2b0 [ 1566.734546][T23224] do_recvmmsg+0xdaf/0x2300 [ 1566.739081][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1566.744589][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1566.750695][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1566.756888][T23224] __do_fast_syscall_32+0x102/0x160 [ 1566.762108][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1566.767153][T23224] do_SYSENTER_32+0x73/0x90 [ 1566.771830][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1566.778156][T23224] [ 1566.780497][T23224] Uninit was stored to memory at: [ 1566.785684][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1566.791445][T23224] __msan_chain_origin+0x57/0xa0 [ 1566.796398][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1566.801545][T23224] get_compat_msghdr+0x108/0x2b0 [ 1566.806499][T23224] do_recvmmsg+0xdaf/0x2300 [ 1566.811040][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1566.815733][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1566.821865][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1566.828146][T23224] __do_fast_syscall_32+0x102/0x160 [ 1566.833364][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1566.838359][T23224] do_SYSENTER_32+0x73/0x90 [ 1566.842887][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1566.850181][T23224] [ 1566.852512][T23224] Uninit was stored to memory at: [ 1566.857676][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1566.863418][T23224] __msan_chain_origin+0x57/0xa0 [ 1566.868372][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1566.873513][T23224] get_compat_msghdr+0x108/0x2b0 [ 1566.878484][T23224] do_recvmmsg+0xdaf/0x2300 [ 1566.883026][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1566.887750][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1566.893837][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1566.900005][T23224] __do_fast_syscall_32+0x102/0x160 [ 1566.905223][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1566.910089][T23224] do_SYSENTER_32+0x73/0x90 [ 1566.914614][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1566.920943][T23224] [ 1566.923273][T23224] Uninit was stored to memory at: [ 1566.928417][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1566.934242][T23224] __msan_chain_origin+0x57/0xa0 [ 1566.939363][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1566.944859][T23224] get_compat_msghdr+0x108/0x2b0 [ 1566.949821][T23224] do_recvmmsg+0xdaf/0x2300 [ 1566.954363][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1566.959069][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1566.965200][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1566.971401][T23224] __do_fast_syscall_32+0x102/0x160 [ 1566.976664][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1566.981628][T23224] do_SYSENTER_32+0x73/0x90 [ 1566.986181][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1566.992510][T23224] [ 1566.994852][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1567.001561][T23224] do_recvmmsg+0xbc/0x2300 [ 1567.006011][T23224] do_recvmmsg+0xbc/0x2300 [ 1567.185728][T23224] not chained 6040000 origins [ 1567.190572][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1567.199343][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1567.209442][T23224] Call Trace: [ 1567.212886][T23224] dump_stack+0x21c/0x280 [ 1567.217341][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1567.223962][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1567.230053][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1567.235304][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1567.241151][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1567.247252][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1567.252752][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1567.258153][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1567.264632][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1567.270737][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1567.275786][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1567.281191][T23224] __msan_chain_origin+0x57/0xa0 [ 1567.286173][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1567.291497][T23224] get_compat_msghdr+0x108/0x2b0 [ 1567.296489][T23224] do_recvmmsg+0xdaf/0x2300 [ 1567.301033][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1567.306267][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1567.312179][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1567.317403][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1567.323056][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1567.328367][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1567.333904][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1567.338624][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1567.344470][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1567.349742][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1567.356244][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1567.362785][T23224] __do_fast_syscall_32+0x102/0x160 [ 1567.368389][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1567.373398][T23224] do_SYSENTER_32+0x73/0x90 [ 1567.378051][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1567.384415][T23224] RIP: 0023:0xf7fd0549 [ 1567.388524][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1567.408776][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1567.417327][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1567.425327][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1567.433343][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1567.441337][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1567.449507][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1567.457494][T23224] Uninit was stored to memory at: [ 1567.462546][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1567.468289][T23224] __msan_chain_origin+0x57/0xa0 [ 1567.473437][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1567.478572][T23224] get_compat_msghdr+0x108/0x2b0 [ 1567.483561][T23224] do_recvmmsg+0xdaf/0x2300 [ 1567.488104][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1567.492812][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1567.498934][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1567.505127][T23224] __do_fast_syscall_32+0x102/0x160 [ 1567.510374][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1567.515246][T23224] do_SYSENTER_32+0x73/0x90 [ 1567.520029][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1567.526355][T23224] [ 1567.528688][T23224] Uninit was stored to memory at: [ 1567.533754][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1567.539498][T23224] __msan_chain_origin+0x57/0xa0 [ 1567.544476][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1567.549711][T23224] get_compat_msghdr+0x108/0x2b0 [ 1567.554669][T23224] do_recvmmsg+0xdaf/0x2300 [ 1567.559204][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1567.564434][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1567.570525][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1567.576699][T23224] __do_fast_syscall_32+0x102/0x160 [ 1567.581928][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1567.586889][T23224] do_SYSENTER_32+0x73/0x90 [ 1567.591415][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1567.597747][T23224] [ 1567.600089][T23224] Uninit was stored to memory at: [ 1567.605865][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1567.611607][T23224] __msan_chain_origin+0x57/0xa0 [ 1567.616659][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1567.621885][T23224] get_compat_msghdr+0x108/0x2b0 [ 1567.627119][T23224] do_recvmmsg+0xdaf/0x2300 [ 1567.631731][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1567.636427][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1567.642515][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1567.648689][T23224] __do_fast_syscall_32+0x102/0x160 [ 1567.653928][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1567.658852][T23224] do_SYSENTER_32+0x73/0x90 [ 1567.663379][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1567.669713][T23224] [ 1567.672058][T23224] Uninit was stored to memory at: [ 1567.677251][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1567.682984][T23224] __msan_chain_origin+0x57/0xa0 [ 1567.687931][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1567.693076][T23224] get_compat_msghdr+0x108/0x2b0 [ 1567.698040][T23224] do_recvmmsg+0xdaf/0x2300 [ 1567.702552][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1567.707333][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1567.713422][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1567.719595][T23224] __do_fast_syscall_32+0x102/0x160 [ 1567.724821][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1567.729683][T23224] do_SYSENTER_32+0x73/0x90 [ 1567.734213][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1567.740560][T23224] [ 1567.742888][T23224] Uninit was stored to memory at: [ 1567.747947][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1567.753679][T23224] __msan_chain_origin+0x57/0xa0 [ 1567.758652][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1567.763804][T23224] get_compat_msghdr+0x108/0x2b0 [ 1567.768775][T23224] do_recvmmsg+0xdaf/0x2300 [ 1567.773309][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1567.777996][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1567.784080][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1567.790267][T23224] __do_fast_syscall_32+0x102/0x160 [ 1567.795474][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1567.800438][T23224] do_SYSENTER_32+0x73/0x90 [ 1567.804978][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1567.811308][T23224] [ 1567.813660][T23224] Uninit was stored to memory at: [ 1567.818712][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1567.824899][T23224] __msan_chain_origin+0x57/0xa0 [ 1567.829871][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1567.835021][T23224] get_compat_msghdr+0x108/0x2b0 [ 1567.839992][T23224] do_recvmmsg+0xdaf/0x2300 [ 1567.844543][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1567.849295][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1567.855409][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1567.861793][T23224] __do_fast_syscall_32+0x102/0x160 [ 1567.867027][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1567.871912][T23224] do_SYSENTER_32+0x73/0x90 [ 1567.876446][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1567.882781][T23224] [ 1567.885123][T23224] Uninit was stored to memory at: [ 1567.890186][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1567.895933][T23224] __msan_chain_origin+0x57/0xa0 [ 1567.900900][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1567.906041][T23224] get_compat_msghdr+0x108/0x2b0 [ 1567.911030][T23224] do_recvmmsg+0xdaf/0x2300 [ 1567.915565][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1567.920284][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1567.926383][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1567.932570][T23224] __do_fast_syscall_32+0x102/0x160 [ 1567.937801][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1567.942686][T23224] do_SYSENTER_32+0x73/0x90 [ 1567.947252][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1567.953583][T23224] [ 1567.955953][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1567.962663][T23224] do_recvmmsg+0xbc/0x2300 [ 1567.967112][T23224] do_recvmmsg+0xbc/0x2300 [ 1568.054911][T23224] not chained 6050000 origins [ 1568.059665][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1568.068434][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1568.078506][T23224] Call Trace: [ 1568.081829][T23224] dump_stack+0x21c/0x280 [ 1568.086191][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1568.091937][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1568.098021][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1568.103269][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1568.109096][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1568.115218][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1568.120632][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1568.125870][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1568.131528][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1568.137618][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1568.142573][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1568.147787][T23224] __msan_chain_origin+0x57/0xa0 [ 1568.152751][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1568.157934][T23224] get_compat_msghdr+0x108/0x2b0 [ 1568.162897][T23224] do_recvmmsg+0xdaf/0x2300 [ 1568.167447][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1568.172667][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1568.178603][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1568.183829][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1568.191138][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1568.196446][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1568.201258][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1568.205980][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1568.211801][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1568.217055][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1568.223261][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1568.229449][T23224] __do_fast_syscall_32+0x102/0x160 [ 1568.234678][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1568.239558][T23224] do_SYSENTER_32+0x73/0x90 [ 1568.244092][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1568.250438][T23224] RIP: 0023:0xf7fd0549 [ 1568.254550][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1568.274269][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1568.282710][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1568.290771][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1568.298768][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1568.306763][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1568.314787][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1568.322795][T23224] Uninit was stored to memory at: [ 1568.327882][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1568.333627][T23224] __msan_chain_origin+0x57/0xa0 [ 1568.338590][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1568.343722][T23224] get_compat_msghdr+0x108/0x2b0 [ 1568.348680][T23224] do_recvmmsg+0xdaf/0x2300 [ 1568.353196][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1568.357887][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1568.363974][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1568.370139][T23224] __do_fast_syscall_32+0x102/0x160 [ 1568.375348][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1568.380217][T23224] do_SYSENTER_32+0x73/0x90 [ 1568.384738][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1568.391062][T23224] [ 1568.393913][T23224] Uninit was stored to memory at: [ 1568.398959][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1568.404714][T23224] __msan_chain_origin+0x57/0xa0 [ 1568.409683][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1568.414822][T23224] get_compat_msghdr+0x108/0x2b0 [ 1568.421086][T23224] do_recvmmsg+0xdaf/0x2300 [ 1568.425596][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1568.430287][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1568.436374][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1568.442654][T23224] __do_fast_syscall_32+0x102/0x160 [ 1568.447860][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1568.452715][T23224] do_SYSENTER_32+0x73/0x90 [ 1568.457228][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1568.463567][T23224] [ 1568.465902][T23224] Uninit was stored to memory at: [ 1568.470950][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1568.476679][T23224] __msan_chain_origin+0x57/0xa0 [ 1568.481623][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1568.486743][T23224] get_compat_msghdr+0x108/0x2b0 [ 1568.491698][T23224] do_recvmmsg+0xdaf/0x2300 [ 1568.496214][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1568.500917][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1568.507022][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1568.513193][T23224] __do_fast_syscall_32+0x102/0x160 [ 1568.518400][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1568.523262][T23224] do_SYSENTER_32+0x73/0x90 [ 1568.527779][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1568.534121][T23224] [ 1568.536443][T23224] Uninit was stored to memory at: [ 1568.541522][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1568.547270][T23224] __msan_chain_origin+0x57/0xa0 [ 1568.552215][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1568.557344][T23224] get_compat_msghdr+0x108/0x2b0 [ 1568.562307][T23224] do_recvmmsg+0xdaf/0x2300 [ 1568.566834][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1568.571518][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1568.577602][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1568.583869][T23224] __do_fast_syscall_32+0x102/0x160 [ 1568.589078][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1568.593959][T23224] do_SYSENTER_32+0x73/0x90 [ 1568.598469][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1568.604784][T23224] [ 1568.607121][T23224] Uninit was stored to memory at: [ 1568.612183][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1568.617914][T23224] __msan_chain_origin+0x57/0xa0 [ 1568.622864][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1568.628106][T23224] get_compat_msghdr+0x108/0x2b0 [ 1568.633062][T23224] do_recvmmsg+0xdaf/0x2300 [ 1568.637582][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1568.642278][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1568.648353][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1568.655148][T23224] __do_fast_syscall_32+0x102/0x160 [ 1568.660374][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1568.665238][T23224] do_SYSENTER_32+0x73/0x90 [ 1568.669761][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1568.676115][T23224] [ 1568.678449][T23224] Uninit was stored to memory at: [ 1568.683499][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1568.689233][T23224] __msan_chain_origin+0x57/0xa0 [ 1568.694185][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1568.699319][T23224] get_compat_msghdr+0x108/0x2b0 [ 1568.704305][T23224] do_recvmmsg+0xdaf/0x2300 [ 1568.708837][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1568.713533][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1568.719679][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1568.725871][T23224] __do_fast_syscall_32+0x102/0x160 [ 1568.731092][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1568.735986][T23224] do_SYSENTER_32+0x73/0x90 [ 1568.740504][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1568.746829][T23224] [ 1568.749158][T23224] Uninit was stored to memory at: [ 1568.754211][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1568.759953][T23224] __msan_chain_origin+0x57/0xa0 [ 1568.764919][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1568.770089][T23224] get_compat_msghdr+0x108/0x2b0 [ 1568.775227][T23224] do_recvmmsg+0xdaf/0x2300 [ 1568.779744][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1568.784544][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1568.790638][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1568.796825][T23224] __do_fast_syscall_32+0x102/0x160 [ 1568.802044][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1568.807078][T23224] do_SYSENTER_32+0x73/0x90 [ 1568.811593][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1568.817913][T23224] [ 1568.820248][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1568.826950][T23224] do_recvmmsg+0xbc/0x2300 [ 1568.831409][T23224] do_recvmmsg+0xbc/0x2300 [ 1569.055547][T23224] not chained 6060000 origins [ 1569.060280][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1569.069154][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1569.079225][T23224] Call Trace: [ 1569.082548][T23224] dump_stack+0x21c/0x280 [ 1569.086902][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1569.092647][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1569.098750][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1569.103968][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1569.109822][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1569.115925][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1569.121336][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1569.126559][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1569.132231][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1569.138326][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1569.143369][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1569.148676][T23224] __msan_chain_origin+0x57/0xa0 [ 1569.153645][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1569.158814][T23224] get_compat_msghdr+0x108/0x2b0 [ 1569.163789][T23224] do_recvmmsg+0xdaf/0x2300 [ 1569.168325][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1569.173547][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1569.179596][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1569.184844][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1569.190506][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1569.195833][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1569.200648][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1569.205378][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1569.211241][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1569.216478][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1569.222679][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1569.228879][T23224] __do_fast_syscall_32+0x102/0x160 [ 1569.234143][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1569.239038][T23224] do_SYSENTER_32+0x73/0x90 [ 1569.243591][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1569.249956][T23224] RIP: 0023:0xf7fd0549 [ 1569.254071][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1569.273713][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1569.282158][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1569.290189][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1569.298194][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1569.306201][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1569.314200][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1569.322219][T23224] Uninit was stored to memory at: [ 1569.327317][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1569.333095][T23224] __msan_chain_origin+0x57/0xa0 [ 1569.338069][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1569.343228][T23224] get_compat_msghdr+0x108/0x2b0 [ 1569.348662][T23224] do_recvmmsg+0xdaf/0x2300 [ 1569.353202][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1569.357910][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1569.364446][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1569.370646][T23224] __do_fast_syscall_32+0x102/0x160 [ 1569.375889][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1569.380764][T23224] do_SYSENTER_32+0x73/0x90 [ 1569.385313][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1569.391648][T23224] [ 1569.394015][T23224] Uninit was stored to memory at: [ 1569.399096][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1569.404852][T23224] __msan_chain_origin+0x57/0xa0 [ 1569.409813][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1569.414948][T23224] get_compat_msghdr+0x108/0x2b0 [ 1569.419934][T23224] do_recvmmsg+0xdaf/0x2300 [ 1569.424462][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1569.429160][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1569.435250][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1569.441427][T23224] __do_fast_syscall_32+0x102/0x160 [ 1569.446656][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1569.451591][T23224] do_SYSENTER_32+0x73/0x90 [ 1569.456128][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1569.462461][T23224] [ 1569.464798][T23224] Uninit was stored to memory at: [ 1569.469871][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1569.475614][T23224] __msan_chain_origin+0x57/0xa0 [ 1569.480578][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1569.485707][T23224] get_compat_msghdr+0x108/0x2b0 [ 1569.490670][T23224] do_recvmmsg+0xdaf/0x2300 [ 1569.495198][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1569.499904][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1569.506525][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1569.512710][T23224] __do_fast_syscall_32+0x102/0x160 [ 1569.517942][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1569.522821][T23224] do_SYSENTER_32+0x73/0x90 [ 1569.527345][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1569.533673][T23224] [ 1569.536034][T23224] Uninit was stored to memory at: [ 1569.541101][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1569.546863][T23224] __msan_chain_origin+0x57/0xa0 [ 1569.551825][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1569.557052][T23224] get_compat_msghdr+0x108/0x2b0 [ 1569.562011][T23224] do_recvmmsg+0xdaf/0x2300 [ 1569.566518][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1569.571203][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1569.577293][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1569.583470][T23224] __do_fast_syscall_32+0x102/0x160 [ 1569.588684][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1569.593546][T23224] do_SYSENTER_32+0x73/0x90 [ 1569.598059][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1569.604377][T23224] [ 1569.606708][T23224] Uninit was stored to memory at: [ 1569.611750][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1569.617484][T23224] __msan_chain_origin+0x57/0xa0 [ 1569.622459][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1569.627595][T23224] get_compat_msghdr+0x108/0x2b0 [ 1569.632566][T23224] do_recvmmsg+0xdaf/0x2300 [ 1569.637100][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1569.641794][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1569.647979][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1569.654154][T23224] __do_fast_syscall_32+0x102/0x160 [ 1569.659366][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1569.664231][T23224] do_SYSENTER_32+0x73/0x90 [ 1569.668741][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1569.675077][T23224] [ 1569.677426][T23224] Uninit was stored to memory at: [ 1569.682469][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1569.688198][T23224] __msan_chain_origin+0x57/0xa0 [ 1569.693140][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1569.698257][T23224] get_compat_msghdr+0x108/0x2b0 [ 1569.703207][T23224] do_recvmmsg+0xdaf/0x2300 [ 1569.707717][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1569.712409][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1569.718486][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1569.724662][T23224] __do_fast_syscall_32+0x102/0x160 [ 1569.729882][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1569.734769][T23224] do_SYSENTER_32+0x73/0x90 [ 1569.739305][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1569.745643][T23224] [ 1569.747977][T23224] Uninit was stored to memory at: [ 1569.753058][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1569.758825][T23224] __msan_chain_origin+0x57/0xa0 [ 1569.763787][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1569.768909][T23224] get_compat_msghdr+0x108/0x2b0 [ 1569.773980][T23224] do_recvmmsg+0xdaf/0x2300 [ 1569.778488][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1569.783198][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1569.789302][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1569.795483][T23224] __do_fast_syscall_32+0x102/0x160 [ 1569.800699][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1569.805562][T23224] do_SYSENTER_32+0x73/0x90 [ 1569.810080][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1569.816409][T23224] [ 1569.818741][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1569.825437][T23224] do_recvmmsg+0xbc/0x2300 [ 1569.829880][T23224] do_recvmmsg+0xbc/0x2300 [ 1570.178118][T23224] not chained 6070000 origins [ 1570.182857][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1570.191626][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1570.201699][T23224] Call Trace: [ 1570.205019][T23224] dump_stack+0x21c/0x280 [ 1570.209383][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1570.215137][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1570.221589][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1570.226824][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1570.232661][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1570.238755][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1570.244151][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1570.249379][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1570.255068][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1570.261176][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1570.266134][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1570.271347][T23224] __msan_chain_origin+0x57/0xa0 [ 1570.276306][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1570.281445][T23224] get_compat_msghdr+0x108/0x2b0 [ 1570.286405][T23224] do_recvmmsg+0xdaf/0x2300 [ 1570.290934][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1570.296415][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1570.302350][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1570.307601][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1570.313249][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1570.318555][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1570.323337][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1570.328030][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1570.333857][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1570.339110][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1570.345228][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1570.351426][T23224] __do_fast_syscall_32+0x102/0x160 [ 1570.356706][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1570.361576][T23224] do_SYSENTER_32+0x73/0x90 [ 1570.366102][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1570.372439][T23224] RIP: 0023:0xf7fd0549 [ 1570.376538][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1570.396163][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1570.404687][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1570.412681][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1570.420680][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1570.428699][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1570.436691][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1570.444683][T23224] Uninit was stored to memory at: [ 1570.449734][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1570.455472][T23224] __msan_chain_origin+0x57/0xa0 [ 1570.460429][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1570.465560][T23224] get_compat_msghdr+0x108/0x2b0 [ 1570.470514][T23224] do_recvmmsg+0xdaf/0x2300 [ 1570.475038][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1570.479737][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1570.485849][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1570.492024][T23224] __do_fast_syscall_32+0x102/0x160 [ 1570.497240][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1570.502131][T23224] do_SYSENTER_32+0x73/0x90 [ 1570.506659][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1570.512986][T23224] [ 1570.515319][T23224] Uninit was stored to memory at: [ 1570.520394][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1570.526148][T23224] __msan_chain_origin+0x57/0xa0 [ 1570.531101][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1570.536232][T23224] get_compat_msghdr+0x108/0x2b0 [ 1570.541213][T23224] do_recvmmsg+0xdaf/0x2300 [ 1570.545737][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1570.550433][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1570.556782][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1570.563029][T23224] __do_fast_syscall_32+0x102/0x160 [ 1570.568251][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1570.573191][T23224] do_SYSENTER_32+0x73/0x90 [ 1570.577720][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1570.584043][T23224] [ 1570.586372][T23224] Uninit was stored to memory at: [ 1570.591416][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1570.597214][T23224] __msan_chain_origin+0x57/0xa0 [ 1570.602210][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1570.607366][T23224] get_compat_msghdr+0x108/0x2b0 [ 1570.612320][T23224] do_recvmmsg+0xdaf/0x2300 [ 1570.616961][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1570.621665][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1570.627752][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1570.633921][T23224] __do_fast_syscall_32+0x102/0x160 [ 1570.639137][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1570.644001][T23224] do_SYSENTER_32+0x73/0x90 [ 1570.648635][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1570.654997][T23224] [ 1570.657337][T23224] Uninit was stored to memory at: [ 1570.662387][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1570.668125][T23224] __msan_chain_origin+0x57/0xa0 [ 1570.673077][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1570.678196][T23224] get_compat_msghdr+0x108/0x2b0 [ 1570.683145][T23224] do_recvmmsg+0xdaf/0x2300 [ 1570.687659][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1570.692357][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1570.698538][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1570.704711][T23224] __do_fast_syscall_32+0x102/0x160 [ 1570.709937][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1570.714799][T23224] do_SYSENTER_32+0x73/0x90 [ 1570.719318][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1570.725645][T23224] [ 1570.727988][T23224] Uninit was stored to memory at: [ 1570.733030][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1570.738932][T23224] __msan_chain_origin+0x57/0xa0 [ 1570.743901][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1570.749019][T23224] get_compat_msghdr+0x108/0x2b0 [ 1570.753972][T23224] do_recvmmsg+0xdaf/0x2300 [ 1570.758492][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1570.763186][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1570.769365][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1570.775539][T23224] __do_fast_syscall_32+0x102/0x160 [ 1570.780750][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1570.785645][T23224] do_SYSENTER_32+0x73/0x90 [ 1570.790377][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1570.796713][T23224] [ 1570.799049][T23224] Uninit was stored to memory at: [ 1570.804212][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1570.809966][T23224] __msan_chain_origin+0x57/0xa0 [ 1570.814922][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1570.820051][T23224] get_compat_msghdr+0x108/0x2b0 [ 1570.825008][T23224] do_recvmmsg+0xdaf/0x2300 [ 1570.829612][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1570.834309][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1570.840398][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1570.846587][T23224] __do_fast_syscall_32+0x102/0x160 [ 1570.851839][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1570.856735][T23224] do_SYSENTER_32+0x73/0x90 [ 1570.861265][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1570.867587][T23224] [ 1570.869945][T23224] Uninit was stored to memory at: [ 1570.874994][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1570.880727][T23224] __msan_chain_origin+0x57/0xa0 [ 1570.885693][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1570.890820][T23224] get_compat_msghdr+0x108/0x2b0 [ 1570.895779][T23224] do_recvmmsg+0xdaf/0x2300 [ 1570.900296][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1570.904987][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1570.911064][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1570.917234][T23224] __do_fast_syscall_32+0x102/0x160 [ 1570.922443][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1570.927305][T23224] do_SYSENTER_32+0x73/0x90 [ 1570.931821][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1570.938145][T23224] [ 1570.940478][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1570.947168][T23224] do_recvmmsg+0xbc/0x2300 [ 1570.951602][T23224] do_recvmmsg+0xbc/0x2300 [ 1571.121108][T23224] not chained 6080000 origins [ 1571.125844][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1571.134613][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1571.144687][T23224] Call Trace: [ 1571.148007][T23224] dump_stack+0x21c/0x280 [ 1571.152394][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1571.158163][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1571.164255][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1571.169497][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1571.175351][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1571.181436][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1571.186838][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1571.192067][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1571.197727][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1571.203913][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1571.208883][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1571.214238][T23224] __msan_chain_origin+0x57/0xa0 [ 1571.219210][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1571.224348][T23224] get_compat_msghdr+0x108/0x2b0 [ 1571.229317][T23224] do_recvmmsg+0xdaf/0x2300 [ 1571.233929][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1571.239329][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1571.245246][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1571.250496][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1571.256152][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1571.261461][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1571.266255][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1571.271063][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1571.276894][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1571.282116][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1571.288215][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1571.294394][T23224] __do_fast_syscall_32+0x102/0x160 [ 1571.299615][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1571.304488][T23224] do_SYSENTER_32+0x73/0x90 [ 1571.309010][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1571.315348][T23224] RIP: 0023:0xf7fd0549 [ 1571.319451][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1571.339625][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1571.348068][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1571.356151][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1571.364163][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1571.372501][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1571.380494][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1571.388478][T23224] Uninit was stored to memory at: [ 1571.393530][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1571.399887][T23224] __msan_chain_origin+0x57/0xa0 [ 1571.404850][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1571.409979][T23224] get_compat_msghdr+0x108/0x2b0 [ 1571.414936][T23224] do_recvmmsg+0xdaf/0x2300 [ 1571.419470][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1571.424159][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1571.430242][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1571.436417][T23224] __do_fast_syscall_32+0x102/0x160 [ 1571.441630][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1571.446501][T23224] do_SYSENTER_32+0x73/0x90 [ 1571.451029][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1571.457352][T23224] [ 1571.459679][T23224] Uninit was stored to memory at: [ 1571.464749][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1571.470478][T23224] __msan_chain_origin+0x57/0xa0 [ 1571.475455][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1571.480591][T23224] get_compat_msghdr+0x108/0x2b0 [ 1571.485570][T23224] do_recvmmsg+0xdaf/0x2300 [ 1571.490083][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1571.494777][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1571.500859][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1571.507028][T23224] __do_fast_syscall_32+0x102/0x160 [ 1571.512248][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1571.517117][T23224] do_SYSENTER_32+0x73/0x90 [ 1571.521637][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1571.528566][T23224] [ 1571.530915][T23224] Uninit was stored to memory at: [ 1571.535962][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1571.541792][T23224] __msan_chain_origin+0x57/0xa0 [ 1571.546756][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1571.551885][T23224] get_compat_msghdr+0x108/0x2b0 [ 1571.556857][T23224] do_recvmmsg+0xdaf/0x2300 [ 1571.561376][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1571.566088][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1571.572171][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1571.578345][T23224] __do_fast_syscall_32+0x102/0x160 [ 1571.583564][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1571.588448][T23224] do_SYSENTER_32+0x73/0x90 [ 1571.592989][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1571.599310][T23224] [ 1571.601639][T23224] Uninit was stored to memory at: [ 1571.606678][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1571.612413][T23224] __msan_chain_origin+0x57/0xa0 [ 1571.617360][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1571.622494][T23224] get_compat_msghdr+0x108/0x2b0 [ 1571.627463][T23224] do_recvmmsg+0xdaf/0x2300 [ 1571.631998][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1571.636696][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1571.642780][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1571.648949][T23224] __do_fast_syscall_32+0x102/0x160 [ 1571.654169][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1571.659051][T23224] do_SYSENTER_32+0x73/0x90 [ 1571.663605][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1571.669929][T23224] [ 1571.672258][T23224] Uninit was stored to memory at: [ 1571.677321][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1571.683056][T23224] __msan_chain_origin+0x57/0xa0 [ 1571.688034][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1571.693161][T23224] get_compat_msghdr+0x108/0x2b0 [ 1571.698114][T23224] do_recvmmsg+0xdaf/0x2300 [ 1571.702640][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1571.707332][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1571.713410][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1571.719932][T23224] __do_fast_syscall_32+0x102/0x160 [ 1571.725154][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1571.730027][T23224] do_SYSENTER_32+0x73/0x90 [ 1571.734557][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1571.740885][T23224] [ 1571.743221][T23224] Uninit was stored to memory at: [ 1571.748265][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1571.753998][T23224] __msan_chain_origin+0x57/0xa0 [ 1571.758954][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1571.764080][T23224] get_compat_msghdr+0x108/0x2b0 [ 1571.769041][T23224] do_recvmmsg+0xdaf/0x2300 [ 1571.773559][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1571.778266][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1571.784365][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1571.790544][T23224] __do_fast_syscall_32+0x102/0x160 [ 1571.795792][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1571.800655][T23224] do_SYSENTER_32+0x73/0x90 [ 1571.805165][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1571.811500][T23224] [ 1571.813827][T23224] Uninit was stored to memory at: [ 1571.818869][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1571.824602][T23224] __msan_chain_origin+0x57/0xa0 [ 1571.829583][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1571.834725][T23224] get_compat_msghdr+0x108/0x2b0 [ 1571.839697][T23224] do_recvmmsg+0xdaf/0x2300 [ 1571.844225][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1571.848926][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1571.855022][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1571.861195][T23224] __do_fast_syscall_32+0x102/0x160 [ 1571.866416][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1571.871285][T23224] do_SYSENTER_32+0x73/0x90 [ 1571.875800][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1571.882122][T23224] [ 1571.884832][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1571.891531][T23224] do_recvmmsg+0xbc/0x2300 [ 1571.895969][T23224] do_recvmmsg+0xbc/0x2300 [ 1572.090890][T23221] not chained 6090000 origins [ 1572.095642][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1572.104410][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.114479][T23221] Call Trace: [ 1572.117794][T23221] dump_stack+0x21c/0x280 [ 1572.122143][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1572.127975][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1572.134057][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1572.139273][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1572.145096][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1572.151186][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1572.156589][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1572.161810][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1572.167486][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1572.173571][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1572.178530][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1572.183745][T23221] __msan_chain_origin+0x57/0xa0 [ 1572.188711][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1572.193846][T23221] get_compat_msghdr+0x108/0x2b0 [ 1572.198809][T23221] do_recvmmsg+0xdaf/0x2300 [ 1572.203415][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1572.209501][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1572.214719][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1572.220633][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1572.225851][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1572.231496][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1572.236803][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1572.242698][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1572.247397][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1572.253222][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1572.258441][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1572.264532][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1572.270705][T23221] __do_fast_syscall_32+0x102/0x160 [ 1572.275924][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1572.280794][T23221] do_SYSENTER_32+0x73/0x90 [ 1572.285345][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1572.291681][T23221] RIP: 0023:0xf7fd0549 [ 1572.295765][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1572.315391][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1572.323837][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1572.332031][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1572.340031][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1572.348118][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1572.356110][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1572.364188][T23221] Uninit was stored to memory at: [ 1572.369258][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1572.375183][T23221] __msan_chain_origin+0x57/0xa0 [ 1572.380153][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1572.385905][T23221] get_compat_msghdr+0x108/0x2b0 [ 1572.390886][T23221] do_recvmmsg+0xdaf/0x2300 [ 1572.396010][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1572.400698][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1572.407579][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1572.413764][T23221] __do_fast_syscall_32+0x102/0x160 [ 1572.418998][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1572.423884][T23221] do_SYSENTER_32+0x73/0x90 [ 1572.428411][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1572.434729][T23221] [ 1572.437055][T23221] Uninit was stored to memory at: [ 1572.442101][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1572.447838][T23221] __msan_chain_origin+0x57/0xa0 [ 1572.452805][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1572.457936][T23221] get_compat_msghdr+0x108/0x2b0 [ 1572.462891][T23221] do_recvmmsg+0xdaf/0x2300 [ 1572.467401][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1572.472091][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1572.478189][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1572.484373][T23221] __do_fast_syscall_32+0x102/0x160 [ 1572.489593][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1572.494553][T23221] do_SYSENTER_32+0x73/0x90 [ 1572.499099][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1572.505442][T23221] [ 1572.507789][T23221] Uninit was stored to memory at: [ 1572.512835][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1572.518570][T23221] __msan_chain_origin+0x57/0xa0 [ 1572.523525][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1572.528653][T23221] get_compat_msghdr+0x108/0x2b0 [ 1572.533618][T23221] do_recvmmsg+0xdaf/0x2300 [ 1572.538131][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1572.542845][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1572.548933][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1572.555192][T23221] __do_fast_syscall_32+0x102/0x160 [ 1572.560428][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1572.565300][T23221] do_SYSENTER_32+0x73/0x90 [ 1572.569912][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1572.576235][T23221] [ 1572.578585][T23221] Uninit was stored to memory at: [ 1572.583658][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1572.589395][T23221] __msan_chain_origin+0x57/0xa0 [ 1572.594353][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1572.599506][T23221] get_compat_msghdr+0x108/0x2b0 [ 1572.604563][T23221] do_recvmmsg+0xdaf/0x2300 [ 1572.609099][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1572.613796][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1572.619889][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1572.626069][T23221] __do_fast_syscall_32+0x102/0x160 [ 1572.631296][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1572.636265][T23221] do_SYSENTER_32+0x73/0x90 [ 1572.640880][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1572.647744][T23221] [ 1572.650257][T23221] Uninit was stored to memory at: [ 1572.655414][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1572.661509][T23221] __msan_chain_origin+0x57/0xa0 [ 1572.666658][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1572.671980][T23221] get_compat_msghdr+0x108/0x2b0 [ 1572.677141][T23221] do_recvmmsg+0xdaf/0x2300 [ 1572.681677][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1572.686393][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1572.692496][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1572.698949][T23221] __do_fast_syscall_32+0x102/0x160 [ 1572.704174][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1572.709057][T23221] do_SYSENTER_32+0x73/0x90 [ 1572.713590][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1572.719918][T23221] [ 1572.722249][T23221] Uninit was stored to memory at: [ 1572.727298][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1572.733047][T23221] __msan_chain_origin+0x57/0xa0 [ 1572.738052][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1572.743199][T23221] get_compat_msghdr+0x108/0x2b0 [ 1572.748435][T23221] do_recvmmsg+0xdaf/0x2300 [ 1572.753421][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1572.758133][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1572.764271][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1572.770633][T23221] __do_fast_syscall_32+0x102/0x160 [ 1572.775979][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1572.780965][T23221] do_SYSENTER_32+0x73/0x90 [ 1572.785517][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1572.791853][T23221] [ 1572.794321][T23221] Uninit was stored to memory at: [ 1572.799389][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1572.805582][T23221] __msan_chain_origin+0x57/0xa0 [ 1572.811060][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1572.816189][T23221] get_compat_msghdr+0x108/0x2b0 [ 1572.821146][T23221] do_recvmmsg+0xdaf/0x2300 [ 1572.825683][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1572.830391][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1572.836668][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1572.843109][T23221] __do_fast_syscall_32+0x102/0x160 [ 1572.848369][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1572.853502][T23221] do_SYSENTER_32+0x73/0x90 [ 1572.858045][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1572.864378][T23221] [ 1572.867334][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1572.874040][T23221] do_recvmmsg+0xbc/0x2300 [ 1572.880643][T23221] do_recvmmsg+0xbc/0x2300 [ 1573.128124][T23224] not chained 6100000 origins [ 1573.132863][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1573.141631][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1573.151718][T23224] Call Trace: [ 1573.155061][T23224] dump_stack+0x21c/0x280 [ 1573.159425][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1573.165174][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1573.171260][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1573.176480][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1573.182330][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1573.188417][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1573.193816][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1573.199060][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1573.204905][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1573.211013][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1573.216000][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1573.221220][T23224] __msan_chain_origin+0x57/0xa0 [ 1573.226208][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1573.231353][T23224] get_compat_msghdr+0x108/0x2b0 [ 1573.236351][T23224] do_recvmmsg+0xdaf/0x2300 [ 1573.240978][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1573.246210][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1573.252408][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1573.257646][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1573.263326][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1573.268663][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1573.273490][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1573.278228][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1573.285284][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1573.290536][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1573.296639][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1573.302837][T23224] __do_fast_syscall_32+0x102/0x160 [ 1573.308067][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1573.312944][T23224] do_SYSENTER_32+0x73/0x90 [ 1573.317493][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1573.323835][T23224] RIP: 0023:0xf7fd0549 [ 1573.327920][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1573.348449][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1573.357154][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1573.365172][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1573.373705][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1573.381705][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1573.389789][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1573.397886][T23224] Uninit was stored to memory at: [ 1573.402955][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1573.408712][T23224] __msan_chain_origin+0x57/0xa0 [ 1573.413673][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1573.418803][T23224] get_compat_msghdr+0x108/0x2b0 [ 1573.423778][T23224] do_recvmmsg+0xdaf/0x2300 [ 1573.428306][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1573.433007][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1573.439104][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1573.445289][T23224] __do_fast_syscall_32+0x102/0x160 [ 1573.450603][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1573.455480][T23224] do_SYSENTER_32+0x73/0x90 [ 1573.460033][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1573.466546][T23224] [ 1573.468881][T23224] Uninit was stored to memory at: [ 1573.474034][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1573.479771][T23224] __msan_chain_origin+0x57/0xa0 [ 1573.484749][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1573.489906][T23224] get_compat_msghdr+0x108/0x2b0 [ 1573.494893][T23224] do_recvmmsg+0xdaf/0x2300 [ 1573.499420][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1573.504149][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1573.510237][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1573.516407][T23224] __do_fast_syscall_32+0x102/0x160 [ 1573.521629][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1573.526492][T23224] do_SYSENTER_32+0x73/0x90 [ 1573.531992][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1573.538332][T23224] [ 1573.540668][T23224] Uninit was stored to memory at: [ 1573.545719][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1573.551454][T23224] __msan_chain_origin+0x57/0xa0 [ 1573.556408][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1573.561543][T23224] get_compat_msghdr+0x108/0x2b0 [ 1573.566496][T23224] do_recvmmsg+0xdaf/0x2300 [ 1573.571014][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1573.575714][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1573.581806][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1573.587984][T23224] __do_fast_syscall_32+0x102/0x160 [ 1573.593289][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1573.598255][T23224] do_SYSENTER_32+0x73/0x90 [ 1573.602782][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1573.609105][T23224] [ 1573.611438][T23224] Uninit was stored to memory at: [ 1573.616491][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1573.622228][T23224] __msan_chain_origin+0x57/0xa0 [ 1573.627192][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1573.632348][T23224] get_compat_msghdr+0x108/0x2b0 [ 1573.637312][T23224] do_recvmmsg+0xdaf/0x2300 [ 1573.641839][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1573.646539][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1573.652636][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1573.658809][T23224] __do_fast_syscall_32+0x102/0x160 [ 1573.664039][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1573.668948][T23224] do_SYSENTER_32+0x73/0x90 [ 1573.673619][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1573.681423][T23224] [ 1573.683761][T23224] Uninit was stored to memory at: [ 1573.688812][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1573.694547][T23224] __msan_chain_origin+0x57/0xa0 [ 1573.699506][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1573.704639][T23224] get_compat_msghdr+0x108/0x2b0 [ 1573.709607][T23224] do_recvmmsg+0xdaf/0x2300 [ 1573.714156][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1573.718869][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1573.724974][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1573.731151][T23224] __do_fast_syscall_32+0x102/0x160 [ 1573.736377][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1573.741254][T23224] do_SYSENTER_32+0x73/0x90 [ 1573.745775][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1573.752094][T23224] [ 1573.754424][T23224] Uninit was stored to memory at: [ 1573.759478][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1573.765328][T23224] __msan_chain_origin+0x57/0xa0 [ 1573.770291][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1573.775417][T23224] get_compat_msghdr+0x108/0x2b0 [ 1573.780370][T23224] do_recvmmsg+0xdaf/0x2300 [ 1573.784902][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1573.789605][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1573.795686][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1573.801863][T23224] __do_fast_syscall_32+0x102/0x160 [ 1573.807088][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1573.811954][T23224] do_SYSENTER_32+0x73/0x90 [ 1573.816476][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1573.822796][T23224] [ 1573.825133][T23224] Uninit was stored to memory at: [ 1573.830302][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1573.836128][T23224] __msan_chain_origin+0x57/0xa0 [ 1573.841087][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1573.846427][T23224] get_compat_msghdr+0x108/0x2b0 [ 1573.851384][T23224] do_recvmmsg+0xdaf/0x2300 [ 1573.855921][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1573.860622][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1573.866707][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1573.872884][T23224] __do_fast_syscall_32+0x102/0x160 [ 1573.878107][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1573.882985][T23224] do_SYSENTER_32+0x73/0x90 [ 1573.887509][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1573.893854][T23224] [ 1573.896190][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1573.902878][T23224] do_recvmmsg+0xbc/0x2300 [ 1573.907309][T23224] do_recvmmsg+0xbc/0x2300 [ 1574.026261][T23221] not chained 6110000 origins [ 1574.031013][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1574.039894][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.049982][T23221] Call Trace: [ 1574.053308][T23221] dump_stack+0x21c/0x280 [ 1574.057686][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1574.063438][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1574.069532][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1574.074760][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1574.080604][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1574.086711][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1574.092111][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1574.097329][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1574.102984][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1574.109068][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1574.114023][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1574.119233][T23221] __msan_chain_origin+0x57/0xa0 [ 1574.124214][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1574.129524][T23221] get_compat_msghdr+0x108/0x2b0 [ 1574.134497][T23221] do_recvmmsg+0xdaf/0x2300 [ 1574.139017][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1574.145099][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1574.150391][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1574.156402][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1574.161724][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1574.167385][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1574.172692][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1574.177474][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1574.182193][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1574.188043][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1574.193353][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1574.199450][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1574.205656][T23221] __do_fast_syscall_32+0x102/0x160 [ 1574.210881][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1574.215765][T23221] do_SYSENTER_32+0x73/0x90 [ 1574.220293][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1574.226658][T23221] RIP: 0023:0xf7fd0549 [ 1574.230738][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1574.250387][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1574.258859][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1574.266856][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1574.274859][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1574.282849][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1574.290829][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1574.298840][T23221] Uninit was stored to memory at: [ 1574.303887][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1574.309616][T23221] __msan_chain_origin+0x57/0xa0 [ 1574.314569][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1574.319694][T23221] get_compat_msghdr+0x108/0x2b0 [ 1574.324750][T23221] do_recvmmsg+0xdaf/0x2300 [ 1574.329270][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1574.333993][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1574.340076][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1574.346247][T23221] __do_fast_syscall_32+0x102/0x160 [ 1574.351662][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1574.356529][T23221] do_SYSENTER_32+0x73/0x90 [ 1574.361044][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1574.367453][T23221] [ 1574.369882][T23221] Uninit was stored to memory at: [ 1574.374957][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1574.381300][T23221] __msan_chain_origin+0x57/0xa0 [ 1574.386255][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1574.391398][T23221] get_compat_msghdr+0x108/0x2b0 [ 1574.396441][T23221] do_recvmmsg+0xdaf/0x2300 [ 1574.400959][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1574.405647][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1574.411727][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1574.417907][T23221] __do_fast_syscall_32+0x102/0x160 [ 1574.423121][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1574.427982][T23221] do_SYSENTER_32+0x73/0x90 [ 1574.432501][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1574.438820][T23221] [ 1574.441166][T23221] Uninit was stored to memory at: [ 1574.446235][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1574.451994][T23221] __msan_chain_origin+0x57/0xa0 [ 1574.456947][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1574.462069][T23221] get_compat_msghdr+0x108/0x2b0 [ 1574.467015][T23221] do_recvmmsg+0xdaf/0x2300 [ 1574.471529][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1574.476239][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1574.482336][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1574.488512][T23221] __do_fast_syscall_32+0x102/0x160 [ 1574.493777][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1574.498750][T23221] do_SYSENTER_32+0x73/0x90 [ 1574.503276][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1574.509598][T23221] [ 1574.512982][T23221] Uninit was stored to memory at: [ 1574.518221][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1574.523956][T23221] __msan_chain_origin+0x57/0xa0 [ 1574.528912][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1574.534041][T23221] get_compat_msghdr+0x108/0x2b0 [ 1574.539015][T23221] do_recvmmsg+0xdaf/0x2300 [ 1574.543536][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1574.548357][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1574.554462][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1574.560638][T23221] __do_fast_syscall_32+0x102/0x160 [ 1574.565861][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1574.570735][T23221] do_SYSENTER_32+0x73/0x90 [ 1574.575288][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1574.581673][T23221] [ 1574.584017][T23221] Uninit was stored to memory at: [ 1574.589079][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1574.594819][T23221] __msan_chain_origin+0x57/0xa0 [ 1574.599800][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1574.604959][T23221] get_compat_msghdr+0x108/0x2b0 [ 1574.609922][T23221] do_recvmmsg+0xdaf/0x2300 [ 1574.614471][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1574.619174][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1574.625279][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1574.631542][T23221] __do_fast_syscall_32+0x102/0x160 [ 1574.636772][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1574.641635][T23221] do_SYSENTER_32+0x73/0x90 [ 1574.646158][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1574.652483][T23221] [ 1574.654820][T23221] Uninit was stored to memory at: [ 1574.660743][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1574.666614][T23221] __msan_chain_origin+0x57/0xa0 [ 1574.672043][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1574.677177][T23221] get_compat_msghdr+0x108/0x2b0 [ 1574.682137][T23221] do_recvmmsg+0xdaf/0x2300 [ 1574.686658][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1574.691352][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1574.697473][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1574.703672][T23221] __do_fast_syscall_32+0x102/0x160 [ 1574.708916][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1574.713788][T23221] do_SYSENTER_32+0x73/0x90 [ 1574.718296][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1574.724617][T23221] [ 1574.726945][T23221] Uninit was stored to memory at: [ 1574.731986][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1574.737796][T23221] __msan_chain_origin+0x57/0xa0 [ 1574.742738][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1574.747868][T23221] get_compat_msghdr+0x108/0x2b0 [ 1574.752821][T23221] do_recvmmsg+0xdaf/0x2300 [ 1574.757354][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1574.762045][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1574.768129][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1574.774407][T23221] __do_fast_syscall_32+0x102/0x160 [ 1574.779625][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1574.784497][T23221] do_SYSENTER_32+0x73/0x90 [ 1574.789022][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1574.795349][T23221] [ 1574.797685][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1574.804411][T23221] do_recvmmsg+0xbc/0x2300 [ 1574.808846][T23221] do_recvmmsg+0xbc/0x2300 [ 1575.016261][T23221] not chained 6120000 origins [ 1575.021001][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1575.030130][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1575.040305][T23221] Call Trace: [ 1575.043633][T23221] dump_stack+0x21c/0x280 [ 1575.048014][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1575.054031][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1575.060178][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1575.065413][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1575.071506][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1575.077588][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1575.082988][T23221] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1575.089068][T23221] ? idle_cpu+0x9a/0x1d0 [ 1575.093333][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1575.098558][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1575.104830][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1575.110919][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1575.115885][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1575.121102][T23221] __msan_chain_origin+0x57/0xa0 [ 1575.126074][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1575.131386][T23221] get_compat_msghdr+0x108/0x2b0 [ 1575.136369][T23221] do_recvmmsg+0xdaf/0x2300 [ 1575.140905][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1575.146989][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1575.152387][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1575.158297][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1575.163516][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1575.169163][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1575.174468][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1575.179263][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1575.183965][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1575.189793][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1575.195024][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1575.201216][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1575.207488][T23221] __do_fast_syscall_32+0x102/0x160 [ 1575.212983][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1575.217855][T23221] do_SYSENTER_32+0x73/0x90 [ 1575.222403][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1575.228761][T23221] RIP: 0023:0xf7fd0549 [ 1575.233022][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1575.253514][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1575.262049][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1575.270345][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1575.278631][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1575.286725][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1575.294891][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1575.302879][T23221] Uninit was stored to memory at: [ 1575.308218][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1575.313963][T23221] __msan_chain_origin+0x57/0xa0 [ 1575.318932][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1575.324078][T23221] get_compat_msghdr+0x108/0x2b0 [ 1575.329494][T23221] do_recvmmsg+0xdaf/0x2300 [ 1575.334400][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1575.339131][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1575.345235][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1575.351450][T23221] __do_fast_syscall_32+0x102/0x160 [ 1575.356695][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1575.361683][T23221] do_SYSENTER_32+0x73/0x90 [ 1575.366226][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1575.372553][T23221] [ 1575.374912][T23221] Uninit was stored to memory at: [ 1575.380232][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1575.385977][T23221] __msan_chain_origin+0x57/0xa0 [ 1575.390978][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1575.396124][T23221] get_compat_msghdr+0x108/0x2b0 [ 1575.401089][T23221] do_recvmmsg+0xdaf/0x2300 [ 1575.405882][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1575.410609][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1575.416709][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1575.422897][T23221] __do_fast_syscall_32+0x102/0x160 [ 1575.428139][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1575.433030][T23221] do_SYSENTER_32+0x73/0x90 [ 1575.437556][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1575.443885][T23221] [ 1575.446230][T23221] Uninit was stored to memory at: [ 1575.451300][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1575.457051][T23221] __msan_chain_origin+0x57/0xa0 [ 1575.462043][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1575.467178][T23221] get_compat_msghdr+0x108/0x2b0 [ 1575.472394][T23221] do_recvmmsg+0xdaf/0x2300 [ 1575.476944][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1575.481650][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1575.487765][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1575.493966][T23221] __do_fast_syscall_32+0x102/0x160 [ 1575.499197][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1575.504077][T23221] do_SYSENTER_32+0x73/0x90 [ 1575.508623][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1575.514954][T23221] [ 1575.517289][T23221] Uninit was stored to memory at: [ 1575.522356][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1575.528116][T23221] __msan_chain_origin+0x57/0xa0 [ 1575.533082][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1575.538223][T23221] get_compat_msghdr+0x108/0x2b0 [ 1575.543193][T23221] do_recvmmsg+0xdaf/0x2300 [ 1575.547729][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1575.552465][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1575.558593][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1575.564817][T23221] __do_fast_syscall_32+0x102/0x160 [ 1575.570053][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1575.574939][T23221] do_SYSENTER_32+0x73/0x90 [ 1575.579486][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1575.585827][T23221] [ 1575.588165][T23221] Uninit was stored to memory at: [ 1575.593221][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1575.598969][T23221] __msan_chain_origin+0x57/0xa0 [ 1575.603945][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1575.609098][T23221] get_compat_msghdr+0x108/0x2b0 [ 1575.614064][T23221] do_recvmmsg+0xdaf/0x2300 [ 1575.618612][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1575.623337][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1575.629454][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1575.635739][T23221] __do_fast_syscall_32+0x102/0x160 [ 1575.640962][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1575.646099][T23221] do_SYSENTER_32+0x73/0x90 [ 1575.650648][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1575.656974][T23221] [ 1575.659308][T23221] Uninit was stored to memory at: [ 1575.664364][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1575.670106][T23221] __msan_chain_origin+0x57/0xa0 [ 1575.675072][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1575.680203][T23221] get_compat_msghdr+0x108/0x2b0 [ 1575.685164][T23221] do_recvmmsg+0xdaf/0x2300 [ 1575.689684][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1575.694385][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1575.700470][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1575.706649][T23221] __do_fast_syscall_32+0x102/0x160 [ 1575.711887][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1575.716762][T23221] do_SYSENTER_32+0x73/0x90 [ 1575.721300][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1575.727637][T23221] [ 1575.729970][T23221] Uninit was stored to memory at: [ 1575.735021][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1575.740779][T23221] __msan_chain_origin+0x57/0xa0 [ 1575.745751][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1575.750884][T23221] get_compat_msghdr+0x108/0x2b0 [ 1575.755873][T23221] do_recvmmsg+0xdaf/0x2300 [ 1575.760402][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1575.765124][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1575.771235][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1575.777434][T23221] __do_fast_syscall_32+0x102/0x160 [ 1575.782665][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1575.787549][T23221] do_SYSENTER_32+0x73/0x90 [ 1575.792091][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1575.798425][T23221] [ 1575.800785][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1575.807503][T23221] do_recvmmsg+0xbc/0x2300 [ 1575.811954][T23221] do_recvmmsg+0xbc/0x2300 [ 1576.089509][T23221] not chained 6130000 origins [ 1576.094238][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1576.103008][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1576.113079][T23221] Call Trace: [ 1576.116396][T23221] dump_stack+0x21c/0x280 [ 1576.120780][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1576.126529][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1576.132622][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1576.137911][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1576.143741][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1576.149827][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1576.155234][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1576.160475][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1576.166137][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1576.172231][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1576.177200][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1576.182434][T23221] __msan_chain_origin+0x57/0xa0 [ 1576.187398][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1576.192535][T23221] get_compat_msghdr+0x108/0x2b0 [ 1576.197585][T23221] do_recvmmsg+0xdaf/0x2300 [ 1576.202110][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1576.208206][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1576.213433][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1576.219379][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1576.224623][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1576.230276][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1576.235635][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1576.240457][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1576.245211][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1576.251039][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1576.256262][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1576.262355][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1576.268532][T23221] __do_fast_syscall_32+0x102/0x160 [ 1576.273764][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1576.278670][T23221] do_SYSENTER_32+0x73/0x90 [ 1576.283203][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1576.289548][T23221] RIP: 0023:0xf7fd0549 [ 1576.293804][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1576.313459][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1576.321901][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1576.329922][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1576.338004][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1576.346002][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1576.353994][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1576.362071][T23221] Uninit was stored to memory at: [ 1576.367126][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1576.372861][T23221] __msan_chain_origin+0x57/0xa0 [ 1576.377818][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1576.382953][T23221] get_compat_msghdr+0x108/0x2b0 [ 1576.387911][T23221] do_recvmmsg+0xdaf/0x2300 [ 1576.392424][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1576.397120][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1576.403215][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1576.409422][T23221] __do_fast_syscall_32+0x102/0x160 [ 1576.414651][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1576.419524][T23221] do_SYSENTER_32+0x73/0x90 [ 1576.424042][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1576.430363][T23221] [ 1576.432696][T23221] Uninit was stored to memory at: [ 1576.437742][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1576.443483][T23221] __msan_chain_origin+0x57/0xa0 [ 1576.448448][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1576.455667][T23221] get_compat_msghdr+0x108/0x2b0 [ 1576.460616][T23221] do_recvmmsg+0xdaf/0x2300 [ 1576.465227][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1576.469931][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1576.476025][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1576.482212][T23221] __do_fast_syscall_32+0x102/0x160 [ 1576.487431][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1576.492295][T23221] do_SYSENTER_32+0x73/0x90 [ 1576.496819][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1576.503145][T23221] [ 1576.505492][T23221] Uninit was stored to memory at: [ 1576.510535][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1576.516269][T23221] __msan_chain_origin+0x57/0xa0 [ 1576.521229][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1576.526355][T23221] get_compat_msghdr+0x108/0x2b0 [ 1576.531307][T23221] do_recvmmsg+0xdaf/0x2300 [ 1576.535825][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1576.540531][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1576.546613][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1576.552788][T23221] __do_fast_syscall_32+0x102/0x160 [ 1576.558008][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1576.562974][T23221] do_SYSENTER_32+0x73/0x90 [ 1576.567512][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1576.573834][T23221] [ 1576.576158][T23221] Uninit was stored to memory at: [ 1576.581214][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1576.586943][T23221] __msan_chain_origin+0x57/0xa0 [ 1576.591900][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1576.597028][T23221] get_compat_msghdr+0x108/0x2b0 [ 1576.602083][T23221] do_recvmmsg+0xdaf/0x2300 [ 1576.606772][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1576.611474][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1576.617565][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1576.623750][T23221] __do_fast_syscall_32+0x102/0x160 [ 1576.628978][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1576.633860][T23221] do_SYSENTER_32+0x73/0x90 [ 1576.638393][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1576.644724][T23221] [ 1576.647090][T23221] Uninit was stored to memory at: [ 1576.652136][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1576.657873][T23221] __msan_chain_origin+0x57/0xa0 [ 1576.662841][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1576.667983][T23221] get_compat_msghdr+0x108/0x2b0 [ 1576.673051][T23221] do_recvmmsg+0xdaf/0x2300 [ 1576.677578][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1576.682294][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1576.688389][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1576.694589][T23221] __do_fast_syscall_32+0x102/0x160 [ 1576.699812][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1576.704745][T23221] do_SYSENTER_32+0x73/0x90 [ 1576.709884][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1576.716217][T23221] [ 1576.718567][T23221] Uninit was stored to memory at: [ 1576.723879][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1576.729623][T23221] __msan_chain_origin+0x57/0xa0 [ 1576.734618][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1576.739749][T23221] get_compat_msghdr+0x108/0x2b0 [ 1576.744725][T23221] do_recvmmsg+0xdaf/0x2300 [ 1576.749316][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1576.754022][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1576.760105][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1576.766392][T23221] __do_fast_syscall_32+0x102/0x160 [ 1576.771671][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1576.776547][T23221] do_SYSENTER_32+0x73/0x90 [ 1576.781258][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1576.788205][T23221] [ 1576.790550][T23221] Uninit was stored to memory at: [ 1576.795616][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1576.801364][T23221] __msan_chain_origin+0x57/0xa0 [ 1576.806335][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1576.811479][T23221] get_compat_msghdr+0x108/0x2b0 [ 1576.816450][T23221] do_recvmmsg+0xdaf/0x2300 [ 1576.820983][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1576.825692][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1576.831800][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1576.838016][T23221] __do_fast_syscall_32+0x102/0x160 [ 1576.843247][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1576.848146][T23221] do_SYSENTER_32+0x73/0x90 [ 1576.852681][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1576.859018][T23221] [ 1576.861365][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1576.868074][T23221] do_recvmmsg+0xbc/0x2300 [ 1576.872520][T23221] do_recvmmsg+0xbc/0x2300 [ 1577.001170][T23224] not chained 6140000 origins [ 1577.005905][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1577.014677][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1577.024761][T23224] Call Trace: [ 1577.028089][T23224] dump_stack+0x21c/0x280 [ 1577.032449][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1577.038208][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1577.044301][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1577.049522][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1577.055360][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1577.061460][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1577.066889][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1577.072124][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1577.077787][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1577.083877][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1577.088837][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1577.094081][T23224] __msan_chain_origin+0x57/0xa0 [ 1577.099059][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1577.104203][T23224] get_compat_msghdr+0x108/0x2b0 [ 1577.109181][T23224] do_recvmmsg+0xdaf/0x2300 [ 1577.113821][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1577.119128][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1577.125057][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1577.130281][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1577.135934][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1577.141241][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1577.146031][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1577.150742][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1577.156678][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1577.161903][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1577.168002][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1577.174183][T23224] __do_fast_syscall_32+0x102/0x160 [ 1577.179404][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1577.184302][T23224] do_SYSENTER_32+0x73/0x90 [ 1577.188824][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1577.195167][T23224] RIP: 0023:0xf7fd0549 [ 1577.199256][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1577.218880][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1577.227339][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1577.235331][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1577.243321][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1577.251320][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1577.259344][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1577.267391][T23224] Uninit was stored to memory at: [ 1577.272447][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1577.278196][T23224] __msan_chain_origin+0x57/0xa0 [ 1577.283154][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1577.288522][T23224] get_compat_msghdr+0x108/0x2b0 [ 1577.293574][T23224] do_recvmmsg+0xdaf/0x2300 [ 1577.298253][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1577.302989][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1577.309087][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1577.315268][T23224] __do_fast_syscall_32+0x102/0x160 [ 1577.320488][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1577.325365][T23224] do_SYSENTER_32+0x73/0x90 [ 1577.329902][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1577.336233][T23224] [ 1577.338586][T23224] Uninit was stored to memory at: [ 1577.343648][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1577.349401][T23224] __msan_chain_origin+0x57/0xa0 [ 1577.354369][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1577.359511][T23224] get_compat_msghdr+0x108/0x2b0 [ 1577.364563][T23224] do_recvmmsg+0xdaf/0x2300 [ 1577.369089][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1577.373791][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1577.379909][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1577.386108][T23224] __do_fast_syscall_32+0x102/0x160 [ 1577.391350][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1577.396229][T23224] do_SYSENTER_32+0x73/0x90 [ 1577.400757][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1577.407098][T23224] [ 1577.409434][T23224] Uninit was stored to memory at: [ 1577.414728][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1577.420471][T23224] __msan_chain_origin+0x57/0xa0 [ 1577.425427][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1577.430571][T23224] get_compat_msghdr+0x108/0x2b0 [ 1577.435993][T23224] do_recvmmsg+0xdaf/0x2300 [ 1577.440516][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1577.445224][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1577.451312][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1577.457490][T23224] __do_fast_syscall_32+0x102/0x160 [ 1577.462718][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1577.467612][T23224] do_SYSENTER_32+0x73/0x90 [ 1577.472149][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1577.478480][T23224] [ 1577.480816][T23224] Uninit was stored to memory at: [ 1577.485964][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1577.491731][T23224] __msan_chain_origin+0x57/0xa0 [ 1577.496696][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1577.501832][T23224] get_compat_msghdr+0x108/0x2b0 [ 1577.506823][T23224] do_recvmmsg+0xdaf/0x2300 [ 1577.511353][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1577.516074][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1577.522182][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1577.528376][T23224] __do_fast_syscall_32+0x102/0x160 [ 1577.533607][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1577.538578][T23224] do_SYSENTER_32+0x73/0x90 [ 1577.543120][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1577.549456][T23224] [ 1577.551799][T23224] Uninit was stored to memory at: [ 1577.556886][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1577.563603][T23224] __msan_chain_origin+0x57/0xa0 [ 1577.568597][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1577.573743][T23224] get_compat_msghdr+0x108/0x2b0 [ 1577.578719][T23224] do_recvmmsg+0xdaf/0x2300 [ 1577.583278][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1577.588036][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1577.594130][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1577.600307][T23224] __do_fast_syscall_32+0x102/0x160 [ 1577.605524][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1577.610397][T23224] do_SYSENTER_32+0x73/0x90 [ 1577.614918][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1577.621354][T23224] [ 1577.623691][T23224] Uninit was stored to memory at: [ 1577.628746][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1577.634493][T23224] __msan_chain_origin+0x57/0xa0 [ 1577.639445][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1577.644574][T23224] get_compat_msghdr+0x108/0x2b0 [ 1577.649532][T23224] do_recvmmsg+0xdaf/0x2300 [ 1577.654052][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1577.658838][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1577.664932][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1577.671202][T23224] __do_fast_syscall_32+0x102/0x160 [ 1577.676421][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1577.681312][T23224] do_SYSENTER_32+0x73/0x90 [ 1577.686020][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1577.692345][T23224] [ 1577.694679][T23224] Uninit was stored to memory at: [ 1577.699740][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1577.705485][T23224] __msan_chain_origin+0x57/0xa0 [ 1577.710449][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1577.715587][T23224] get_compat_msghdr+0x108/0x2b0 [ 1577.720552][T23224] do_recvmmsg+0xdaf/0x2300 [ 1577.725084][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1577.729791][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1577.735980][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1577.742175][T23224] __do_fast_syscall_32+0x102/0x160 [ 1577.750793][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1577.755674][T23224] do_SYSENTER_32+0x73/0x90 [ 1577.760207][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1577.766649][T23224] [ 1577.768989][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1577.775711][T23224] do_recvmmsg+0xbc/0x2300 [ 1577.780185][T23224] do_recvmmsg+0xbc/0x2300 [ 1577.967344][T23224] not chained 6150000 origins [ 1577.972118][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1577.980913][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1577.990992][T23224] Call Trace: [ 1577.994312][T23224] dump_stack+0x21c/0x280 [ 1577.998736][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1578.004493][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1578.010582][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1578.015812][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1578.021725][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1578.027838][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1578.033244][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1578.038493][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1578.044154][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1578.050337][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1578.055296][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1578.060514][T23224] __msan_chain_origin+0x57/0xa0 [ 1578.065584][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1578.070727][T23224] get_compat_msghdr+0x108/0x2b0 [ 1578.075690][T23224] do_recvmmsg+0xdaf/0x2300 [ 1578.080236][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1578.085478][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1578.091389][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1578.096610][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1578.102350][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1578.107661][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1578.112446][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1578.117142][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1578.122971][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1578.128238][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1578.134334][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1578.140510][T23224] __do_fast_syscall_32+0x102/0x160 [ 1578.145741][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1578.150619][T23224] do_SYSENTER_32+0x73/0x90 [ 1578.155154][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1578.161506][T23224] RIP: 0023:0xf7fd0549 [ 1578.165592][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1578.187505][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1578.195952][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1578.203957][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1578.213433][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1578.221694][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1578.229824][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1578.237852][T23224] Uninit was stored to memory at: [ 1578.242940][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1578.248680][T23224] __msan_chain_origin+0x57/0xa0 [ 1578.253644][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1578.258805][T23224] get_compat_msghdr+0x108/0x2b0 [ 1578.263786][T23224] do_recvmmsg+0xdaf/0x2300 [ 1578.268332][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1578.273028][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1578.279113][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1578.286430][T23224] __do_fast_syscall_32+0x102/0x160 [ 1578.291658][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1578.296533][T23224] do_SYSENTER_32+0x73/0x90 [ 1578.301053][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1578.307392][T23224] [ 1578.309730][T23224] Uninit was stored to memory at: [ 1578.314784][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1578.320522][T23224] __msan_chain_origin+0x57/0xa0 [ 1578.325485][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1578.330621][T23224] get_compat_msghdr+0x108/0x2b0 [ 1578.335588][T23224] do_recvmmsg+0xdaf/0x2300 [ 1578.340124][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1578.344841][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1578.350948][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1578.357132][T23224] __do_fast_syscall_32+0x102/0x160 [ 1578.362350][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1578.367218][T23224] do_SYSENTER_32+0x73/0x90 [ 1578.371745][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1578.378070][T23224] [ 1578.380401][T23224] Uninit was stored to memory at: [ 1578.385516][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1578.391287][T23224] __msan_chain_origin+0x57/0xa0 [ 1578.396269][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1578.401412][T23224] get_compat_msghdr+0x108/0x2b0 [ 1578.406404][T23224] do_recvmmsg+0xdaf/0x2300 [ 1578.410935][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1578.415630][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1578.421718][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1578.427895][T23224] __do_fast_syscall_32+0x102/0x160 [ 1578.433105][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1578.437964][T23224] do_SYSENTER_32+0x73/0x90 [ 1578.442489][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1578.448807][T23224] [ 1578.451128][T23224] Uninit was stored to memory at: [ 1578.456174][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1578.461917][T23224] __msan_chain_origin+0x57/0xa0 [ 1578.466872][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1578.471995][T23224] get_compat_msghdr+0x108/0x2b0 [ 1578.476944][T23224] do_recvmmsg+0xdaf/0x2300 [ 1578.481454][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1578.486143][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1578.492232][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1578.501299][T23224] __do_fast_syscall_32+0x102/0x160 [ 1578.506520][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1578.511385][T23224] do_SYSENTER_32+0x73/0x90 [ 1578.515912][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1578.522238][T23224] [ 1578.524574][T23224] Uninit was stored to memory at: [ 1578.529614][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1578.535355][T23224] __msan_chain_origin+0x57/0xa0 [ 1578.540308][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1578.545432][T23224] get_compat_msghdr+0x108/0x2b0 [ 1578.550378][T23224] do_recvmmsg+0xdaf/0x2300 [ 1578.554895][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1578.559590][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1578.565681][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1578.571868][T23224] __do_fast_syscall_32+0x102/0x160 [ 1578.577089][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1578.581977][T23224] do_SYSENTER_32+0x73/0x90 [ 1578.586638][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1578.592980][T23224] [ 1578.595405][T23224] Uninit was stored to memory at: [ 1578.600462][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1578.606204][T23224] __msan_chain_origin+0x57/0xa0 [ 1578.611370][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1578.616511][T23224] get_compat_msghdr+0x108/0x2b0 [ 1578.621511][T23224] do_recvmmsg+0xdaf/0x2300 [ 1578.626054][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1578.630761][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1578.636872][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1578.643086][T23224] __do_fast_syscall_32+0x102/0x160 [ 1578.648319][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1578.653461][T23224] do_SYSENTER_32+0x73/0x90 [ 1578.657979][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1578.664300][T23224] [ 1578.666634][T23224] Uninit was stored to memory at: [ 1578.671690][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1578.677435][T23224] __msan_chain_origin+0x57/0xa0 [ 1578.682391][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1578.687512][T23224] get_compat_msghdr+0x108/0x2b0 [ 1578.692459][T23224] do_recvmmsg+0xdaf/0x2300 [ 1578.697185][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1578.701881][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1578.707968][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1578.714133][T23224] __do_fast_syscall_32+0x102/0x160 [ 1578.719339][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1578.724215][T23224] do_SYSENTER_32+0x73/0x90 [ 1578.728727][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1578.735071][T23224] [ 1578.737398][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1578.744092][T23224] do_recvmmsg+0xbc/0x2300 [ 1578.748538][T23224] do_recvmmsg+0xbc/0x2300 [ 1578.910812][T23221] not chained 6160000 origins [ 1578.915561][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1578.924334][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.934430][T23221] Call Trace: [ 1578.937783][T23221] dump_stack+0x21c/0x280 [ 1578.942148][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1578.947894][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1578.954010][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1578.959235][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1578.965063][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1578.971168][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1578.976774][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1578.982004][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1578.987668][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1578.993789][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1578.998759][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1579.004009][T23221] __msan_chain_origin+0x57/0xa0 [ 1579.008976][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1579.014376][T23221] get_compat_msghdr+0x108/0x2b0 [ 1579.019336][T23221] do_recvmmsg+0xdaf/0x2300 [ 1579.023862][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1579.029960][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1579.035216][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1579.041149][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1579.046379][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1579.052036][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1579.057443][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1579.062364][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1579.067083][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1579.072903][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1579.078646][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1579.084736][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1579.090913][T23221] __do_fast_syscall_32+0x102/0x160 [ 1579.096148][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1579.101016][T23221] do_SYSENTER_32+0x73/0x90 [ 1579.105557][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.111924][T23221] RIP: 0023:0xf7fd0549 [ 1579.116019][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1579.141305][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1579.149846][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1579.157867][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1579.165947][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1579.173942][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1579.181954][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1579.189947][T23221] Uninit was stored to memory at: [ 1579.195017][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1579.200753][T23221] __msan_chain_origin+0x57/0xa0 [ 1579.208002][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1579.213336][T23221] get_compat_msghdr+0x108/0x2b0 [ 1579.218403][T23221] do_recvmmsg+0xdaf/0x2300 [ 1579.222924][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1579.227715][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1579.233804][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1579.239993][T23221] __do_fast_syscall_32+0x102/0x160 [ 1579.245225][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1579.250118][T23221] do_SYSENTER_32+0x73/0x90 [ 1579.254646][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.260977][T23221] [ 1579.263307][T23221] Uninit was stored to memory at: [ 1579.268351][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1579.274087][T23221] __msan_chain_origin+0x57/0xa0 [ 1579.279226][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1579.284357][T23221] get_compat_msghdr+0x108/0x2b0 [ 1579.289312][T23221] do_recvmmsg+0xdaf/0x2300 [ 1579.294021][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1579.298847][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1579.304945][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1579.311220][T23221] __do_fast_syscall_32+0x102/0x160 [ 1579.316454][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1579.321517][T23221] do_SYSENTER_32+0x73/0x90 [ 1579.326063][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.332413][T23221] [ 1579.335067][T23221] Uninit was stored to memory at: [ 1579.340243][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1579.346180][T23221] __msan_chain_origin+0x57/0xa0 [ 1579.351149][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1579.356307][T23221] get_compat_msghdr+0x108/0x2b0 [ 1579.361347][T23221] do_recvmmsg+0xdaf/0x2300 [ 1579.365900][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1579.370613][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1579.376719][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1579.382925][T23221] __do_fast_syscall_32+0x102/0x160 [ 1579.388764][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1579.393659][T23221] do_SYSENTER_32+0x73/0x90 [ 1579.398191][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.404517][T23221] [ 1579.406866][T23221] Uninit was stored to memory at: [ 1579.411954][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1579.417866][T23221] __msan_chain_origin+0x57/0xa0 [ 1579.422841][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1579.428075][T23221] get_compat_msghdr+0x108/0x2b0 [ 1579.433034][T23221] do_recvmmsg+0xdaf/0x2300 [ 1579.437921][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1579.442635][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1579.448735][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1579.454916][T23221] __do_fast_syscall_32+0x102/0x160 [ 1579.460147][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1579.465119][T23221] do_SYSENTER_32+0x73/0x90 [ 1579.469731][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.476850][T23221] [ 1579.479184][T23221] Uninit was stored to memory at: [ 1579.484239][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1579.490067][T23221] __msan_chain_origin+0x57/0xa0 [ 1579.495017][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1579.500139][T23221] get_compat_msghdr+0x108/0x2b0 [ 1579.505101][T23221] do_recvmmsg+0xdaf/0x2300 [ 1579.509626][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1579.514385][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1579.520562][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1579.526736][T23221] __do_fast_syscall_32+0x102/0x160 [ 1579.531966][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1579.536913][T23221] do_SYSENTER_32+0x73/0x90 [ 1579.541441][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.548296][T23221] [ 1579.550628][T23221] Uninit was stored to memory at: [ 1579.555680][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1579.561432][T23221] __msan_chain_origin+0x57/0xa0 [ 1579.566394][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1579.571527][T23221] get_compat_msghdr+0x108/0x2b0 [ 1579.576485][T23221] do_recvmmsg+0xdaf/0x2300 [ 1579.581263][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1579.585961][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1579.592066][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1579.598262][T23221] __do_fast_syscall_32+0x102/0x160 [ 1579.603473][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1579.608339][T23221] do_SYSENTER_32+0x73/0x90 [ 1579.612869][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.619189][T23221] [ 1579.621535][T23221] Uninit was stored to memory at: [ 1579.627106][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1579.632940][T23221] __msan_chain_origin+0x57/0xa0 [ 1579.637897][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1579.643032][T23221] get_compat_msghdr+0x108/0x2b0 [ 1579.648005][T23221] do_recvmmsg+0xdaf/0x2300 [ 1579.652526][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1579.659867][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1579.666083][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1579.672263][T23221] __do_fast_syscall_32+0x102/0x160 [ 1579.677512][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1579.682392][T23221] do_SYSENTER_32+0x73/0x90 [ 1579.686924][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1579.693449][T23221] [ 1579.695796][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1579.702691][T23221] do_recvmmsg+0xbc/0x2300 [ 1579.707142][T23221] do_recvmmsg+0xbc/0x2300 [ 1579.932896][T23224] not chained 6170000 origins [ 1579.937626][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1579.946393][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.956459][T23224] Call Trace: [ 1579.959803][T23224] dump_stack+0x21c/0x280 [ 1579.964163][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1579.970026][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1579.976116][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1579.981353][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1579.987188][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1579.993340][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1579.998753][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1580.003978][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1580.009645][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1580.015736][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1580.020921][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1580.026141][T23224] __msan_chain_origin+0x57/0xa0 [ 1580.031102][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1580.037026][T23224] get_compat_msghdr+0x108/0x2b0 [ 1580.041980][T23224] do_recvmmsg+0xdaf/0x2300 [ 1580.046500][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1580.051729][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1580.058263][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1580.063542][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1580.069276][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1580.074570][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1580.079347][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1580.084046][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1580.090309][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1580.095527][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1580.101710][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1580.107903][T23224] __do_fast_syscall_32+0x102/0x160 [ 1580.113120][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1580.117983][T23224] do_SYSENTER_32+0x73/0x90 [ 1580.122499][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1580.128838][T23224] RIP: 0023:0xf7fd0549 [ 1580.132944][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1580.152825][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1580.161289][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1580.169287][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1580.177324][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1580.185409][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1580.193925][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1580.201920][T23224] Uninit was stored to memory at: [ 1580.207182][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1580.212946][T23224] __msan_chain_origin+0x57/0xa0 [ 1580.217933][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1580.223068][T23224] get_compat_msghdr+0x108/0x2b0 [ 1580.228021][T23224] do_recvmmsg+0xdaf/0x2300 [ 1580.232544][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1580.237235][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1580.243324][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1580.249502][T23224] __do_fast_syscall_32+0x102/0x160 [ 1580.254735][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1580.259603][T23224] do_SYSENTER_32+0x73/0x90 [ 1580.264145][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1580.270476][T23224] [ 1580.272804][T23224] Uninit was stored to memory at: [ 1580.277866][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1580.283591][T23224] __msan_chain_origin+0x57/0xa0 [ 1580.288540][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1580.293664][T23224] get_compat_msghdr+0x108/0x2b0 [ 1580.298639][T23224] do_recvmmsg+0xdaf/0x2300 [ 1580.303154][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1580.307837][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1580.313927][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1580.320122][T23224] __do_fast_syscall_32+0x102/0x160 [ 1580.325477][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1580.330349][T23224] do_SYSENTER_32+0x73/0x90 [ 1580.334896][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1580.341348][T23224] [ 1580.343698][T23224] Uninit was stored to memory at: [ 1580.348835][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1580.354572][T23224] __msan_chain_origin+0x57/0xa0 [ 1580.359523][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1580.364649][T23224] get_compat_msghdr+0x108/0x2b0 [ 1580.369615][T23224] do_recvmmsg+0xdaf/0x2300 [ 1580.374128][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1580.379463][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1580.385741][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1580.391924][T23224] __do_fast_syscall_32+0x102/0x160 [ 1580.397164][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1580.402039][T23224] do_SYSENTER_32+0x73/0x90 [ 1580.406733][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1580.413141][T23224] [ 1580.415477][T23224] Uninit was stored to memory at: [ 1580.420534][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1580.426262][T23224] __msan_chain_origin+0x57/0xa0 [ 1580.431471][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1580.436686][T23224] get_compat_msghdr+0x108/0x2b0 [ 1580.441661][T23224] do_recvmmsg+0xdaf/0x2300 [ 1580.446204][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1580.450897][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1580.456992][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1580.463255][T23224] __do_fast_syscall_32+0x102/0x160 [ 1580.468465][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1580.473345][T23224] do_SYSENTER_32+0x73/0x90 [ 1580.477877][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1580.484205][T23224] [ 1580.486799][T23224] Uninit was stored to memory at: [ 1580.491850][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1580.497586][T23224] __msan_chain_origin+0x57/0xa0 [ 1580.502556][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1580.507794][T23224] get_compat_msghdr+0x108/0x2b0 [ 1580.512754][T23224] do_recvmmsg+0xdaf/0x2300 [ 1580.517270][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1580.521972][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1580.528071][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1580.534276][T23224] __do_fast_syscall_32+0x102/0x160 [ 1580.539501][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1580.544403][T23224] do_SYSENTER_32+0x73/0x90 [ 1580.548928][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1580.555255][T23224] [ 1580.557586][T23224] Uninit was stored to memory at: [ 1580.562645][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1580.568381][T23224] __msan_chain_origin+0x57/0xa0 [ 1580.573343][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1580.578485][T23224] get_compat_msghdr+0x108/0x2b0 [ 1580.583440][T23224] do_recvmmsg+0xdaf/0x2300 [ 1580.587955][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1580.592648][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1580.598726][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1580.605117][T23224] __do_fast_syscall_32+0x102/0x160 [ 1580.610340][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1580.619816][T23224] do_SYSENTER_32+0x73/0x90 [ 1580.624520][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1580.630866][T23224] [ 1580.633462][T23224] Uninit was stored to memory at: [ 1580.638519][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1580.644270][T23224] __msan_chain_origin+0x57/0xa0 [ 1580.649250][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1580.654735][T23224] get_compat_msghdr+0x108/0x2b0 [ 1580.659685][T23224] do_recvmmsg+0xdaf/0x2300 [ 1580.664196][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1580.668895][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1580.674986][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1580.681169][T23224] __do_fast_syscall_32+0x102/0x160 [ 1580.686386][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1580.691244][T23224] do_SYSENTER_32+0x73/0x90 [ 1580.695764][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1580.702083][T23224] [ 1580.704413][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1580.711105][T23224] do_recvmmsg+0xbc/0x2300 [ 1580.715535][T23224] do_recvmmsg+0xbc/0x2300 [ 1580.877964][T23224] not chained 6180000 origins [ 1580.882695][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1580.891497][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.901571][T23224] Call Trace: [ 1580.904884][T23224] dump_stack+0x21c/0x280 [ 1580.909238][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1580.915002][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1580.921087][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1580.926307][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1580.932134][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1580.938242][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1580.943643][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1580.948908][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1580.954580][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1580.960663][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1580.965614][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1580.970857][T23224] __msan_chain_origin+0x57/0xa0 [ 1580.975834][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1580.980968][T23224] get_compat_msghdr+0x108/0x2b0 [ 1580.985924][T23224] do_recvmmsg+0xdaf/0x2300 [ 1580.990455][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1580.995680][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1581.001710][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1581.006938][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1581.012624][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1581.017937][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1581.023596][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1581.028305][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1581.034226][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1581.039481][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1581.045570][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1581.051817][T23224] __do_fast_syscall_32+0x102/0x160 [ 1581.057035][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1581.061906][T23224] do_SYSENTER_32+0x73/0x90 [ 1581.066426][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1581.072763][T23224] RIP: 0023:0xf7fd0549 [ 1581.076848][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1581.096500][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1581.104939][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1581.112931][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1581.120952][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1581.128943][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1581.136929][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1581.144912][T23224] Uninit was stored to memory at: [ 1581.149958][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1581.155725][T23224] __msan_chain_origin+0x57/0xa0 [ 1581.160675][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1581.165794][T23224] get_compat_msghdr+0x108/0x2b0 [ 1581.170748][T23224] do_recvmmsg+0xdaf/0x2300 [ 1581.175295][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1581.179984][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1581.186066][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1581.192241][T23224] __do_fast_syscall_32+0x102/0x160 [ 1581.197477][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1581.202370][T23224] do_SYSENTER_32+0x73/0x90 [ 1581.206886][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1581.213213][T23224] [ 1581.215545][T23224] Uninit was stored to memory at: [ 1581.220590][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1581.226322][T23224] __msan_chain_origin+0x57/0xa0 [ 1581.231273][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1581.236399][T23224] get_compat_msghdr+0x108/0x2b0 [ 1581.241431][T23224] do_recvmmsg+0xdaf/0x2300 [ 1581.246046][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1581.250737][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1581.256910][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1581.263085][T23224] __do_fast_syscall_32+0x102/0x160 [ 1581.268320][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1581.273236][T23224] do_SYSENTER_32+0x73/0x90 [ 1581.277758][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1581.284360][T23224] [ 1581.286696][T23224] Uninit was stored to memory at: [ 1581.291740][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1581.297476][T23224] __msan_chain_origin+0x57/0xa0 [ 1581.302428][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1581.307554][T23224] get_compat_msghdr+0x108/0x2b0 [ 1581.312644][T23224] do_recvmmsg+0xdaf/0x2300 [ 1581.317160][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1581.321943][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1581.328026][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1581.334228][T23224] __do_fast_syscall_32+0x102/0x160 [ 1581.339447][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1581.344313][T23224] do_SYSENTER_32+0x73/0x90 [ 1581.348843][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1581.355166][T23224] [ 1581.357496][T23224] Uninit was stored to memory at: [ 1581.362543][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1581.368302][T23224] __msan_chain_origin+0x57/0xa0 [ 1581.373278][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1581.378414][T23224] get_compat_msghdr+0x108/0x2b0 [ 1581.383456][T23224] do_recvmmsg+0xdaf/0x2300 [ 1581.388039][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1581.392870][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1581.398961][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1581.405137][T23224] __do_fast_syscall_32+0x102/0x160 [ 1581.410392][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1581.415791][T23224] do_SYSENTER_32+0x73/0x90 [ 1581.420343][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1581.426769][T23224] [ 1581.429364][T23224] Uninit was stored to memory at: [ 1581.434413][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1581.440151][T23224] __msan_chain_origin+0x57/0xa0 [ 1581.445104][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1581.450256][T23224] get_compat_msghdr+0x108/0x2b0 [ 1581.455305][T23224] do_recvmmsg+0xdaf/0x2300 [ 1581.459946][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1581.464639][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1581.470740][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1581.477104][T23224] __do_fast_syscall_32+0x102/0x160 [ 1581.482326][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1581.487187][T23224] do_SYSENTER_32+0x73/0x90 [ 1581.491736][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1581.498066][T23224] [ 1581.500451][T23224] Uninit was stored to memory at: [ 1581.505518][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1581.511267][T23224] __msan_chain_origin+0x57/0xa0 [ 1581.516224][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1581.521393][T23224] get_compat_msghdr+0x108/0x2b0 [ 1581.526348][T23224] do_recvmmsg+0xdaf/0x2300 [ 1581.530867][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1581.535559][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1581.541645][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1581.548260][T23224] __do_fast_syscall_32+0x102/0x160 [ 1581.553571][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1581.558447][T23224] do_SYSENTER_32+0x73/0x90 [ 1581.562972][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1581.569295][T23224] [ 1581.571711][T23224] Uninit was stored to memory at: [ 1581.576755][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1581.582487][T23224] __msan_chain_origin+0x57/0xa0 [ 1581.587442][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1581.592642][T23224] get_compat_msghdr+0x108/0x2b0 [ 1581.597711][T23224] do_recvmmsg+0xdaf/0x2300 [ 1581.602253][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1581.606939][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1581.613165][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1581.619461][T23224] __do_fast_syscall_32+0x102/0x160 [ 1581.624668][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1581.629530][T23224] do_SYSENTER_32+0x73/0x90 [ 1581.634046][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1581.640366][T23224] [ 1581.642698][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1581.649479][T23224] do_recvmmsg+0xbc/0x2300 [ 1581.653911][T23224] do_recvmmsg+0xbc/0x2300 [ 1581.822612][T23221] not chained 6190000 origins [ 1581.827376][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1581.836157][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1581.846227][T23221] Call Trace: [ 1581.849541][T23221] dump_stack+0x21c/0x280 [ 1581.853897][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1581.859669][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1581.865770][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1581.871119][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1581.876977][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1581.883080][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1581.888485][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1581.893718][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1581.899390][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1581.905505][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1581.910492][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1581.916237][T23221] __msan_chain_origin+0x57/0xa0 [ 1581.921197][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1581.926341][T23221] get_compat_msghdr+0x108/0x2b0 [ 1581.931296][T23221] do_recvmmsg+0xdaf/0x2300 [ 1581.935836][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1581.942023][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1581.947249][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1581.953178][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1581.958399][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1581.964069][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1581.969421][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1581.974201][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1581.979027][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1581.984864][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1581.990119][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1581.996238][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1582.002425][T23221] __do_fast_syscall_32+0x102/0x160 [ 1582.007665][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1582.012538][T23221] do_SYSENTER_32+0x73/0x90 [ 1582.017072][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1582.023426][T23221] RIP: 0023:0xf7fd0549 [ 1582.027522][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1582.047156][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1582.055606][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1582.063610][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1582.071638][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1582.079640][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1582.087635][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1582.095626][T23221] Uninit was stored to memory at: [ 1582.100695][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1582.106445][T23221] __msan_chain_origin+0x57/0xa0 [ 1582.111411][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1582.116895][T23221] get_compat_msghdr+0x108/0x2b0 [ 1582.122113][T23221] do_recvmmsg+0xdaf/0x2300 [ 1582.126650][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1582.131369][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1582.137467][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1582.143671][T23221] __do_fast_syscall_32+0x102/0x160 [ 1582.149349][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1582.154712][T23221] do_SYSENTER_32+0x73/0x90 [ 1582.159234][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1582.165565][T23221] [ 1582.167902][T23221] Uninit was stored to memory at: [ 1582.172953][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1582.178707][T23221] __msan_chain_origin+0x57/0xa0 [ 1582.183664][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1582.188790][T23221] get_compat_msghdr+0x108/0x2b0 [ 1582.193751][T23221] do_recvmmsg+0xdaf/0x2300 [ 1582.198285][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1582.203099][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1582.209185][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1582.215364][T23221] __do_fast_syscall_32+0x102/0x160 [ 1582.220595][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1582.225470][T23221] do_SYSENTER_32+0x73/0x90 [ 1582.230011][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1582.236338][T23221] [ 1582.238672][T23221] Uninit was stored to memory at: [ 1582.243716][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1582.249461][T23221] __msan_chain_origin+0x57/0xa0 [ 1582.254420][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1582.259545][T23221] get_compat_msghdr+0x108/0x2b0 [ 1582.264501][T23221] do_recvmmsg+0xdaf/0x2300 [ 1582.269050][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1582.273749][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1582.279846][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1582.286031][T23221] __do_fast_syscall_32+0x102/0x160 [ 1582.291258][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1582.296136][T23221] do_SYSENTER_32+0x73/0x90 [ 1582.300658][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1582.306984][T23221] [ 1582.309331][T23221] Uninit was stored to memory at: [ 1582.314403][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1582.320144][T23221] __msan_chain_origin+0x57/0xa0 [ 1582.325102][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1582.330223][T23221] get_compat_msghdr+0x108/0x2b0 [ 1582.335363][T23221] do_recvmmsg+0xdaf/0x2300 [ 1582.339904][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1582.344622][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1582.350741][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1582.356939][T23221] __do_fast_syscall_32+0x102/0x160 [ 1582.362371][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1582.367262][T23221] do_SYSENTER_32+0x73/0x90 [ 1582.371781][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1582.378105][T23221] [ 1582.380456][T23221] Uninit was stored to memory at: [ 1582.385517][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1582.391361][T23221] __msan_chain_origin+0x57/0xa0 [ 1582.396316][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1582.401459][T23221] get_compat_msghdr+0x108/0x2b0 [ 1582.406416][T23221] do_recvmmsg+0xdaf/0x2300 [ 1582.410928][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1582.415619][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1582.421797][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1582.427982][T23221] __do_fast_syscall_32+0x102/0x160 [ 1582.433217][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1582.438097][T23221] do_SYSENTER_32+0x73/0x90 [ 1582.442714][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1582.449041][T23221] [ 1582.451376][T23221] Uninit was stored to memory at: [ 1582.456423][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1582.462156][T23221] __msan_chain_origin+0x57/0xa0 [ 1582.467123][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1582.472280][T23221] get_compat_msghdr+0x108/0x2b0 [ 1582.477232][T23221] do_recvmmsg+0xdaf/0x2300 [ 1582.481749][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1582.486450][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1582.492547][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1582.498749][T23221] __do_fast_syscall_32+0x102/0x160 [ 1582.503976][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1582.508954][T23221] do_SYSENTER_32+0x73/0x90 [ 1582.513564][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1582.519892][T23221] [ 1582.522258][T23221] Uninit was stored to memory at: [ 1582.527304][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1582.533040][T23221] __msan_chain_origin+0x57/0xa0 [ 1582.539083][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1582.544248][T23221] get_compat_msghdr+0x108/0x2b0 [ 1582.549213][T23221] do_recvmmsg+0xdaf/0x2300 [ 1582.553752][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1582.558479][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1582.564596][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1582.570785][T23221] __do_fast_syscall_32+0x102/0x160 [ 1582.576012][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1582.581067][T23221] do_SYSENTER_32+0x73/0x90 [ 1582.585596][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1582.592167][T23221] [ 1582.594636][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1582.601513][T23221] do_recvmmsg+0xbc/0x2300 [ 1582.605954][T23221] do_recvmmsg+0xbc/0x2300 [ 1582.961581][T23224] not chained 6200000 origins [ 1582.966350][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1582.975122][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.985314][T23224] Call Trace: [ 1582.988631][T23224] dump_stack+0x21c/0x280 [ 1582.993001][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1582.998770][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1583.005061][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1583.010305][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1583.016139][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1583.022236][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1583.029157][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1583.034397][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1583.040083][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1583.046237][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1583.051240][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1583.056466][T23224] __msan_chain_origin+0x57/0xa0 [ 1583.061436][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1583.066582][T23224] get_compat_msghdr+0x108/0x2b0 [ 1583.071587][T23224] do_recvmmsg+0xdaf/0x2300 [ 1583.076129][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1583.081447][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1583.087363][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1583.092606][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1583.098256][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1583.103568][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1583.108378][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1583.113088][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1583.119013][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1583.124249][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1583.130346][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1583.136532][T23224] __do_fast_syscall_32+0x102/0x160 [ 1583.141754][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1583.146646][T23224] do_SYSENTER_32+0x73/0x90 [ 1583.151176][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1583.157520][T23224] RIP: 0023:0xf7fd0549 [ 1583.161603][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1583.181317][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1583.189780][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1583.197783][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1583.206203][T23221] not chained 6210000 origins [ 1583.206398][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1583.219071][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1583.227086][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1583.235106][T23224] Uninit was stored to memory at: [ 1583.235135][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1583.235163][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.240217][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1583.248956][T23221] Call Trace: [ 1583.259149][T23224] __msan_chain_origin+0x57/0xa0 [ 1583.264876][T23221] dump_stack+0x21c/0x280 [ 1583.268181][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1583.273160][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1583.277483][T23224] get_compat_msghdr+0x108/0x2b0 [ 1583.282601][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1583.288312][T23224] do_recvmmsg+0xdaf/0x2300 [ 1583.293233][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1583.299307][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1583.303926][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1583.309140][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1583.313808][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1583.319617][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1583.325699][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1583.331788][T23224] __do_fast_syscall_32+0x102/0x160 [ 1583.337956][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1583.343593][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1583.348789][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1583.353984][T23224] do_SYSENTER_32+0x73/0x90 [ 1583.358842][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1583.364465][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1583.368972][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1583.375019][T23224] [ 1583.381471][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1583.386395][T23224] Uninit was stored to memory at: [ 1583.388753][T23221] __msan_chain_origin+0x57/0xa0 [ 1583.394218][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1583.399323][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1583.404252][T23224] __msan_chain_origin+0x57/0xa0 [ 1583.410071][T23221] get_compat_msghdr+0x108/0x2b0 [ 1583.415173][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1583.420121][T23221] do_recvmmsg+0xdaf/0x2300 [ 1583.425135][T23224] get_compat_msghdr+0x108/0x2b0 [ 1583.430329][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1583.434854][T23224] do_recvmmsg+0xdaf/0x2300 [ 1583.439790][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1583.446028][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1583.450521][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1583.455735][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1583.460397][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1583.466286][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1583.472356][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1583.477658][T23224] __do_fast_syscall_32+0x102/0x160 [ 1583.483798][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1583.489422][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1583.494615][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1583.499903][T23224] do_SYSENTER_32+0x73/0x90 [ 1583.504753][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1583.509719][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1583.514229][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1583.518877][T23224] [ 1583.525219][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1583.531004][T23224] Uninit was stored to memory at: [ 1583.533435][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1583.538632][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1583.543775][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1583.549835][T23224] __msan_chain_origin+0x57/0xa0 [ 1583.556341][T23221] __do_fast_syscall_32+0x102/0x160 [ 1583.563649][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1583.568699][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1583.574089][T23224] get_compat_msghdr+0x108/0x2b0 [ 1583.579217][T23221] do_SYSENTER_32+0x73/0x90 [ 1583.584411][T23224] do_recvmmsg+0xdaf/0x2300 [ 1583.589534][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1583.594229][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1583.599159][T23221] RIP: 0023:0xf7fd0549 [ 1583.605501][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1583.610197][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1583.614366][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1583.620417][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 [ 1583.641114][T23224] __do_fast_syscall_32+0x102/0x160 [ 1583.647456][T23221] ORIG_RAX: 0000000000000151 [ 1583.653534][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1583.658829][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1583.663532][T23224] do_SYSENTER_32+0x73/0x90 [ 1583.668353][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1583.676370][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1583.680850][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1583.689000][T23224] [ 1583.695336][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1583.703406][T23224] Uninit was stored to memory at: [ 1583.705734][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1583.713739][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1583.718733][T23221] Uninit was stored to memory at: [ 1583.726720][T23224] __msan_chain_origin+0x57/0xa0 [ 1583.732428][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1583.737990][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1583.743104][T23221] __msan_chain_origin+0x57/0xa0 [ 1583.748809][T23224] get_compat_msghdr+0x108/0x2b0 [ 1583.753944][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1583.758874][T23224] do_recvmmsg+0xdaf/0x2300 [ 1583.763826][T23221] get_compat_msghdr+0x108/0x2b0 [ 1583.768918][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1583.773416][T23221] do_recvmmsg+0xdaf/0x2300 [ 1583.778355][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1583.783015][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1583.787511][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1583.794122][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1583.799157][T23224] __do_fast_syscall_32+0x102/0x160 [ 1583.805512][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1583.811567][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1583.816757][T23221] __do_fast_syscall_32+0x102/0x160 [ 1583.822992][T23224] do_SYSENTER_32+0x73/0x90 [ 1583.828366][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1583.833559][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1583.838139][T23221] do_SYSENTER_32+0x73/0x90 [ 1583.843047][T23224] [ 1583.849397][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1583.853877][T23224] Uninit was stored to memory at: [ 1583.856196][T23221] [ 1583.862727][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1583.867715][T23221] Uninit was stored to memory at: [ 1583.870060][T23224] __msan_chain_origin+0x57/0xa0 [ 1583.875775][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1583.880790][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1583.885729][T23221] __msan_chain_origin+0x57/0xa0 [ 1583.891809][T23224] get_compat_msghdr+0x108/0x2b0 [ 1583.896913][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1583.901942][T23224] do_recvmmsg+0xdaf/0x2300 [ 1583.906969][T23221] get_compat_msghdr+0x108/0x2b0 [ 1583.912072][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1583.916654][T23221] do_recvmmsg+0xdaf/0x2300 [ 1583.921588][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1583.926277][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1583.930797][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1583.936884][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1583.941562][T23224] __do_fast_syscall_32+0x102/0x160 [ 1583.947721][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1583.953787][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1583.958986][T23221] __do_fast_syscall_32+0x102/0x160 [ 1583.965134][T23224] do_SYSENTER_32+0x73/0x90 [ 1583.969983][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1583.975203][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1583.979700][T23221] do_SYSENTER_32+0x73/0x90 [ 1583.984527][T23224] [ 1583.990981][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1583.995546][T23224] Uninit was stored to memory at: [ 1583.997860][T23221] [ 1584.004257][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1584.009247][T23221] Uninit was stored to memory at: [ 1584.012137][T23224] __msan_chain_origin+0x57/0xa0 [ 1584.017862][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1584.022880][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1584.027820][T23221] __msan_chain_origin+0x57/0xa0 [ 1584.033557][T23224] get_compat_msghdr+0x108/0x2b0 [ 1584.038669][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1584.043600][T23224] do_recvmmsg+0xdaf/0x2300 [ 1584.048617][T23221] get_compat_msghdr+0x108/0x2b0 [ 1584.053731][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1584.058224][T23221] do_recvmmsg+0xdaf/0x2300 [ 1584.063156][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1584.067836][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1584.072327][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1584.078488][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1584.083143][T23224] __do_fast_syscall_32+0x102/0x160 [ 1584.083178][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1584.089435][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1584.095495][T23224] do_SYSENTER_32+0x73/0x90 [ 1584.100690][T23221] __do_fast_syscall_32+0x102/0x160 [ 1584.105642][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1584.111795][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1584.116362][T23224] [ 1584.121582][T23221] do_SYSENTER_32+0x73/0x90 [ 1584.127897][T23224] Uninit was stored to memory at: [ 1584.132780][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1584.135121][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1584.139596][T23221] [ 1584.144639][T23224] __msan_chain_origin+0x57/0xa0 [ 1584.151288][T23221] Uninit was stored to memory at: [ 1584.157132][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1584.159456][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1584.164383][T23224] get_compat_msghdr+0x108/0x2b0 [ 1584.169397][T23221] __msan_chain_origin+0x57/0xa0 [ 1584.174508][T23224] do_recvmmsg+0xdaf/0x2300 [ 1584.180219][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1584.185550][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1584.190486][T23221] get_compat_msghdr+0x108/0x2b0 [ 1584.195096][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1584.200262][T23221] do_recvmmsg+0xdaf/0x2300 [ 1584.204946][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1584.209883][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1584.215962][T23224] __do_fast_syscall_32+0x102/0x160 [ 1584.220466][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1584.226639][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1584.231303][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1584.236489][T23224] do_SYSENTER_32+0x73/0x90 [ 1584.242565][T23221] __do_fast_syscall_32+0x102/0x160 [ 1584.247494][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1584.253646][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1584.258422][T23224] [ 1584.263831][T23221] do_SYSENTER_32+0x73/0x90 [ 1584.270230][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1584.275959][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1584.278277][T23224] do_recvmmsg+0xbc/0x2300 [ 1584.282757][T23221] [ 1584.289482][T23224] do_recvmmsg+0xbc/0x2300 [ 1584.296067][T23221] Uninit was stored to memory at: [ 1584.312346][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1584.318095][T23221] __msan_chain_origin+0x57/0xa0 [ 1584.323349][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1584.328576][T23221] get_compat_msghdr+0x108/0x2b0 [ 1584.333574][T23221] do_recvmmsg+0xdaf/0x2300 [ 1584.338452][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1584.343251][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1584.349348][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1584.355530][T23221] __do_fast_syscall_32+0x102/0x160 [ 1584.360783][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1584.366442][T23221] do_SYSENTER_32+0x73/0x90 [ 1584.371236][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1584.377563][T23221] [ 1584.379908][T23221] Uninit was stored to memory at: [ 1584.384949][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1584.390788][T23221] __msan_chain_origin+0x57/0xa0 [ 1584.395748][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1584.400978][T23221] get_compat_msghdr+0x108/0x2b0 [ 1584.406029][T23221] do_recvmmsg+0xdaf/0x2300 [ 1584.410555][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1584.415253][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1584.421352][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1584.427718][T23221] __do_fast_syscall_32+0x102/0x160 [ 1584.433134][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1584.438016][T23221] do_SYSENTER_32+0x73/0x90 [ 1584.442544][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1584.448876][T23221] [ 1584.451237][T23221] Uninit was stored to memory at: [ 1584.456325][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1584.462064][T23221] __msan_chain_origin+0x57/0xa0 [ 1584.467017][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1584.472158][T23221] get_compat_msghdr+0x108/0x2b0 [ 1584.477135][T23221] do_recvmmsg+0xdaf/0x2300 [ 1584.481668][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1584.486358][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1584.492440][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1584.498611][T23221] __do_fast_syscall_32+0x102/0x160 [ 1584.503858][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1584.508726][T23221] do_SYSENTER_32+0x73/0x90 [ 1584.513268][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1584.519686][T23221] [ 1584.522035][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1584.528729][T23221] do_recvmmsg+0xbc/0x2300 [ 1584.533259][T23221] do_recvmmsg+0xbc/0x2300 [ 1584.934892][T23221] not chained 6220000 origins [ 1584.939791][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1584.948584][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1584.958827][T23221] Call Trace: [ 1584.962146][T23221] dump_stack+0x21c/0x280 [ 1584.966511][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1584.972259][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1584.978535][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1584.983764][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1584.989772][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1584.995951][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1585.001352][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1585.006600][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1585.012356][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1585.018448][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1585.023404][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1585.028625][T23221] __msan_chain_origin+0x57/0xa0 [ 1585.033591][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1585.038735][T23221] get_compat_msghdr+0x108/0x2b0 [ 1585.043800][T23221] do_recvmmsg+0xdaf/0x2300 [ 1585.048350][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1585.054541][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1585.059976][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1585.065983][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1585.071216][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1585.076960][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1585.082272][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1585.087158][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1585.091863][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1585.097689][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1585.102906][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1585.109043][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1585.115218][T23221] __do_fast_syscall_32+0x102/0x160 [ 1585.120461][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1585.125369][T23221] do_SYSENTER_32+0x73/0x90 [ 1585.131731][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1585.138344][T23221] RIP: 0023:0xf7fd0549 [ 1585.142425][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1585.162146][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1585.170593][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1585.179129][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1585.187123][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1585.195140][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1585.203228][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1585.211487][T23221] Uninit was stored to memory at: [ 1585.216807][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1585.222625][T23221] __msan_chain_origin+0x57/0xa0 [ 1585.227570][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1585.232695][T23221] get_compat_msghdr+0x108/0x2b0 [ 1585.237653][T23221] do_recvmmsg+0xdaf/0x2300 [ 1585.242182][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1585.246880][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1585.253054][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1585.259244][T23221] __do_fast_syscall_32+0x102/0x160 [ 1585.264456][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1585.269319][T23221] do_SYSENTER_32+0x73/0x90 [ 1585.273858][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1585.280201][T23221] [ 1585.282537][T23221] Uninit was stored to memory at: [ 1585.287772][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1585.293509][T23221] __msan_chain_origin+0x57/0xa0 [ 1585.298492][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1585.303631][T23221] get_compat_msghdr+0x108/0x2b0 [ 1585.308589][T23221] do_recvmmsg+0xdaf/0x2300 [ 1585.313128][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1585.317812][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1585.323919][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1585.330103][T23221] __do_fast_syscall_32+0x102/0x160 [ 1585.335598][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1585.340482][T23221] do_SYSENTER_32+0x73/0x90 [ 1585.345007][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1585.351334][T23221] [ 1585.353669][T23221] Uninit was stored to memory at: [ 1585.358714][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1585.364453][T23221] __msan_chain_origin+0x57/0xa0 [ 1585.369412][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1585.374554][T23221] get_compat_msghdr+0x108/0x2b0 [ 1585.379537][T23221] do_recvmmsg+0xdaf/0x2300 [ 1585.384063][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1585.388759][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1585.394936][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1585.401383][T23221] __do_fast_syscall_32+0x102/0x160 [ 1585.406632][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1585.411511][T23221] do_SYSENTER_32+0x73/0x90 [ 1585.416074][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1585.422419][T23221] [ 1585.424766][T23221] Uninit was stored to memory at: [ 1585.429823][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1585.435570][T23221] __msan_chain_origin+0x57/0xa0 [ 1585.440535][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1585.445679][T23221] get_compat_msghdr+0x108/0x2b0 [ 1585.450662][T23221] do_recvmmsg+0xdaf/0x2300 [ 1585.455189][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1585.459914][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1585.466011][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1585.472208][T23221] __do_fast_syscall_32+0x102/0x160 [ 1585.477442][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1585.482317][T23221] do_SYSENTER_32+0x73/0x90 [ 1585.486847][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1585.493176][T23221] [ 1585.495513][T23221] Uninit was stored to memory at: [ 1585.500568][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1585.506312][T23221] __msan_chain_origin+0x57/0xa0 [ 1585.511385][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1585.516522][T23221] get_compat_msghdr+0x108/0x2b0 [ 1585.521496][T23221] do_recvmmsg+0xdaf/0x2300 [ 1585.526026][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1585.530728][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1585.536825][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1585.543011][T23221] __do_fast_syscall_32+0x102/0x160 [ 1585.548418][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1585.553299][T23221] do_SYSENTER_32+0x73/0x90 [ 1585.557824][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1585.564171][T23221] [ 1585.566515][T23221] Uninit was stored to memory at: [ 1585.571566][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1585.577332][T23221] __msan_chain_origin+0x57/0xa0 [ 1585.582303][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1585.587501][T23221] get_compat_msghdr+0x108/0x2b0 [ 1585.592475][T23221] do_recvmmsg+0xdaf/0x2300 [ 1585.597010][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1585.601717][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1585.607826][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1585.614013][T23221] __do_fast_syscall_32+0x102/0x160 [ 1585.619255][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1585.624139][T23221] do_SYSENTER_32+0x73/0x90 [ 1585.628989][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1585.635323][T23221] [ 1585.637659][T23221] Uninit was stored to memory at: [ 1585.642734][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1585.648563][T23221] __msan_chain_origin+0x57/0xa0 [ 1585.653530][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1585.658682][T23221] get_compat_msghdr+0x108/0x2b0 [ 1585.663666][T23221] do_recvmmsg+0xdaf/0x2300 [ 1585.668198][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1585.672905][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1585.679405][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1585.685894][T23221] __do_fast_syscall_32+0x102/0x160 [ 1585.691417][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1585.697003][T23221] do_SYSENTER_32+0x73/0x90 [ 1585.703741][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1585.710193][T23221] [ 1585.712522][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1585.719212][T23221] do_recvmmsg+0xbc/0x2300 [ 1585.723837][T23221] do_recvmmsg+0xbc/0x2300 [ 1585.958341][T23221] not chained 6230000 origins [ 1585.963084][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1585.971863][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1585.981942][T23221] Call Trace: [ 1585.985293][T23221] dump_stack+0x21c/0x280 [ 1585.989642][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1585.995843][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1586.001968][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1586.007192][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1586.013035][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1586.019128][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1586.024521][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1586.029741][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1586.035398][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1586.044621][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1586.049574][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1586.054791][T23221] __msan_chain_origin+0x57/0xa0 [ 1586.059756][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1586.064890][T23221] get_compat_msghdr+0x108/0x2b0 [ 1586.069843][T23221] do_recvmmsg+0xdaf/0x2300 [ 1586.074375][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1586.080466][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1586.085785][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1586.094541][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1586.100641][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1586.107791][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1586.113111][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1586.117900][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1586.122613][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1586.128450][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1586.133675][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1586.139795][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1586.146164][T23221] __do_fast_syscall_32+0x102/0x160 [ 1586.151398][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1586.156377][T23221] do_SYSENTER_32+0x73/0x90 [ 1586.160899][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1586.167250][T23221] RIP: 0023:0xf7fd0549 [ 1586.171560][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1586.192237][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1586.201103][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1586.209139][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1586.217161][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1586.225355][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1586.233355][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1586.241357][T23221] Uninit was stored to memory at: [ 1586.246453][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1586.252209][T23221] __msan_chain_origin+0x57/0xa0 [ 1586.257194][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1586.262426][T23221] get_compat_msghdr+0x108/0x2b0 [ 1586.267526][T23221] do_recvmmsg+0xdaf/0x2300 [ 1586.272082][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1586.276792][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1586.282887][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1586.289087][T23221] __do_fast_syscall_32+0x102/0x160 [ 1586.294310][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1586.299219][T23221] do_SYSENTER_32+0x73/0x90 [ 1586.303752][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1586.310111][T23221] [ 1586.312455][T23221] Uninit was stored to memory at: [ 1586.317621][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1586.323375][T23221] __msan_chain_origin+0x57/0xa0 [ 1586.328516][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1586.333685][T23221] get_compat_msghdr+0x108/0x2b0 [ 1586.338664][T23221] do_recvmmsg+0xdaf/0x2300 [ 1586.343202][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1586.347907][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1586.354023][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1586.360196][T23221] __do_fast_syscall_32+0x102/0x160 [ 1586.365414][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1586.370286][T23221] do_SYSENTER_32+0x73/0x90 [ 1586.375164][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1586.381494][T23221] [ 1586.383836][T23221] Uninit was stored to memory at: [ 1586.388890][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1586.394635][T23221] __msan_chain_origin+0x57/0xa0 [ 1586.399585][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1586.404710][T23221] get_compat_msghdr+0x108/0x2b0 [ 1586.409690][T23221] do_recvmmsg+0xdaf/0x2300 [ 1586.414229][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1586.418937][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1586.425040][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1586.431228][T23221] __do_fast_syscall_32+0x102/0x160 [ 1586.436459][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1586.441335][T23221] do_SYSENTER_32+0x73/0x90 [ 1586.445863][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1586.452230][T23221] [ 1586.454573][T23221] Uninit was stored to memory at: [ 1586.459628][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1586.465389][T23221] __msan_chain_origin+0x57/0xa0 [ 1586.470361][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1586.475489][T23221] get_compat_msghdr+0x108/0x2b0 [ 1586.480446][T23221] do_recvmmsg+0xdaf/0x2300 [ 1586.484980][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1586.489670][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1586.495752][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1586.501922][T23221] __do_fast_syscall_32+0x102/0x160 [ 1586.507750][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1586.512610][T23221] do_SYSENTER_32+0x73/0x90 [ 1586.517209][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1586.523613][T23221] [ 1586.525939][T23221] Uninit was stored to memory at: [ 1586.530990][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1586.536810][T23221] __msan_chain_origin+0x57/0xa0 [ 1586.541778][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1586.546913][T23221] get_compat_msghdr+0x108/0x2b0 [ 1586.551880][T23221] do_recvmmsg+0xdaf/0x2300 [ 1586.556396][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1586.561107][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1586.567194][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1586.573368][T23221] __do_fast_syscall_32+0x102/0x160 [ 1586.578581][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1586.583454][T23221] do_SYSENTER_32+0x73/0x90 [ 1586.588005][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1586.594333][T23221] [ 1586.596670][T23221] Uninit was stored to memory at: [ 1586.601719][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1586.607461][T23221] __msan_chain_origin+0x57/0xa0 [ 1586.612529][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1586.617755][T23221] get_compat_msghdr+0x108/0x2b0 [ 1586.622745][T23221] do_recvmmsg+0xdaf/0x2300 [ 1586.627274][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1586.631975][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1586.638062][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1586.644235][T23221] __do_fast_syscall_32+0x102/0x160 [ 1586.649464][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1586.654337][T23221] do_SYSENTER_32+0x73/0x90 [ 1586.658856][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1586.665184][T23221] [ 1586.667515][T23221] Uninit was stored to memory at: [ 1586.672563][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1586.678397][T23221] __msan_chain_origin+0x57/0xa0 [ 1586.683360][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1586.688490][T23221] get_compat_msghdr+0x108/0x2b0 [ 1586.693457][T23221] do_recvmmsg+0xdaf/0x2300 [ 1586.697995][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1586.702707][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1586.708793][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1586.714969][T23221] __do_fast_syscall_32+0x102/0x160 [ 1586.720195][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1586.725066][T23221] do_SYSENTER_32+0x73/0x90 [ 1586.729594][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1586.735925][T23221] [ 1586.738267][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1586.749051][T23221] do_recvmmsg+0xbc/0x2300 [ 1586.753493][T23221] do_recvmmsg+0xbc/0x2300 [ 1587.075066][T23224] not chained 6240000 origins [ 1587.079792][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1587.088558][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.098636][T23224] Call Trace: [ 1587.101947][T23224] dump_stack+0x21c/0x280 [ 1587.106331][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1587.112536][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1587.118692][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1587.124021][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1587.130223][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1587.136318][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1587.141736][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1587.146993][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1587.152664][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1587.158754][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1587.163716][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1587.169132][T23224] __msan_chain_origin+0x57/0xa0 [ 1587.175320][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1587.181279][T23224] get_compat_msghdr+0x108/0x2b0 [ 1587.186432][T23224] do_recvmmsg+0xdaf/0x2300 [ 1587.190989][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1587.196250][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1587.202170][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1587.207750][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1587.213602][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1587.218925][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1587.223706][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1587.228394][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1587.234205][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1587.239416][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1587.245762][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1587.251942][T23224] __do_fast_syscall_32+0x102/0x160 [ 1587.257271][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1587.262164][T23224] do_SYSENTER_32+0x73/0x90 [ 1587.266750][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1587.273089][T23224] RIP: 0023:0xf7fd0549 [ 1587.277173][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1587.296805][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1587.305243][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1587.313260][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1587.321271][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1587.329342][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1587.337327][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1587.345310][T23224] Uninit was stored to memory at: [ 1587.350423][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1587.356188][T23224] __msan_chain_origin+0x57/0xa0 [ 1587.361139][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1587.366523][T23224] get_compat_msghdr+0x108/0x2b0 [ 1587.371473][T23224] do_recvmmsg+0xdaf/0x2300 [ 1587.375985][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1587.380678][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1587.386781][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1587.392960][T23224] __do_fast_syscall_32+0x102/0x160 [ 1587.398180][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1587.403074][T23224] do_SYSENTER_32+0x73/0x90 [ 1587.407599][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1587.413922][T23224] [ 1587.416254][T23224] Uninit was stored to memory at: [ 1587.421297][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1587.427045][T23224] __msan_chain_origin+0x57/0xa0 [ 1587.432000][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1587.437132][T23224] get_compat_msghdr+0x108/0x2b0 [ 1587.442085][T23224] do_recvmmsg+0xdaf/0x2300 [ 1587.446604][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1587.451322][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1587.457404][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1587.463575][T23224] __do_fast_syscall_32+0x102/0x160 [ 1587.468787][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1587.473654][T23224] do_SYSENTER_32+0x73/0x90 [ 1587.478284][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1587.484635][T23224] [ 1587.487078][T23224] Uninit was stored to memory at: [ 1587.492239][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1587.497993][T23224] __msan_chain_origin+0x57/0xa0 [ 1587.502945][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1587.508070][T23224] get_compat_msghdr+0x108/0x2b0 [ 1587.513205][T23224] do_recvmmsg+0xdaf/0x2300 [ 1587.517725][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1587.523290][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1587.529453][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1587.535633][T23224] __do_fast_syscall_32+0x102/0x160 [ 1587.540854][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1587.545732][T23224] do_SYSENTER_32+0x73/0x90 [ 1587.550255][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1587.556581][T23224] [ 1587.558932][T23224] Uninit was stored to memory at: [ 1587.564002][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1587.569747][T23224] __msan_chain_origin+0x57/0xa0 [ 1587.574699][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1587.579830][T23224] get_compat_msghdr+0x108/0x2b0 [ 1587.584817][T23224] do_recvmmsg+0xdaf/0x2300 [ 1587.589338][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1587.594032][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1587.600123][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1587.606471][T23224] __do_fast_syscall_32+0x102/0x160 [ 1587.611683][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1587.616544][T23224] do_SYSENTER_32+0x73/0x90 [ 1587.621061][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1587.627475][T23224] [ 1587.629914][T23224] Uninit was stored to memory at: [ 1587.634967][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1587.640718][T23224] __msan_chain_origin+0x57/0xa0 [ 1587.645690][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1587.650973][T23224] get_compat_msghdr+0x108/0x2b0 [ 1587.655937][T23224] do_recvmmsg+0xdaf/0x2300 [ 1587.660477][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1587.665175][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1587.671281][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1587.677457][T23224] __do_fast_syscall_32+0x102/0x160 [ 1587.682696][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1587.687570][T23224] do_SYSENTER_32+0x73/0x90 [ 1587.692093][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1587.698420][T23224] [ 1587.700764][T23224] Uninit was stored to memory at: [ 1587.705998][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1587.711738][T23224] __msan_chain_origin+0x57/0xa0 [ 1587.716730][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1587.721895][T23224] get_compat_msghdr+0x108/0x2b0 [ 1587.726852][T23224] do_recvmmsg+0xdaf/0x2300 [ 1587.731730][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1587.736431][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1587.742512][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1587.748687][T23224] __do_fast_syscall_32+0x102/0x160 [ 1587.753922][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1587.758809][T23224] do_SYSENTER_32+0x73/0x90 [ 1587.763367][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1587.769800][T23224] [ 1587.772137][T23224] Uninit was stored to memory at: [ 1587.777189][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1587.782925][T23224] __msan_chain_origin+0x57/0xa0 [ 1587.787878][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1587.793100][T23224] get_compat_msghdr+0x108/0x2b0 [ 1587.798100][T23224] do_recvmmsg+0xdaf/0x2300 [ 1587.803001][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1587.807699][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1587.813802][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1587.819983][T23224] __do_fast_syscall_32+0x102/0x160 [ 1587.825203][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1587.830167][T23224] do_SYSENTER_32+0x73/0x90 [ 1587.834712][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1587.841124][T23224] [ 1587.843452][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1587.850156][T23224] do_recvmmsg+0xbc/0x2300 [ 1587.854598][T23224] do_recvmmsg+0xbc/0x2300 [ 1587.966272][T23221] not chained 6250000 origins [ 1587.971008][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1587.979786][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.990232][T23221] Call Trace: [ 1587.993560][T23221] dump_stack+0x21c/0x280 [ 1587.997924][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1588.003679][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1588.009782][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1588.015010][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1588.020845][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1588.026941][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1588.032345][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1588.037575][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1588.043241][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1588.049356][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1588.054321][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1588.059541][T23221] __msan_chain_origin+0x57/0xa0 [ 1588.064540][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1588.069701][T23221] get_compat_msghdr+0x108/0x2b0 [ 1588.074669][T23221] do_recvmmsg+0xdaf/0x2300 [ 1588.079192][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1588.085306][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1588.090543][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1588.096463][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1588.101783][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1588.107448][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1588.112773][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1588.117560][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1588.122359][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1588.128218][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1588.133437][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1588.139553][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1588.145739][T23221] __do_fast_syscall_32+0x102/0x160 [ 1588.150994][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1588.155882][T23221] do_SYSENTER_32+0x73/0x90 [ 1588.160418][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1588.166792][T23221] RIP: 0023:0xf7fd0549 [ 1588.170888][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1588.190520][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1588.198968][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1588.207117][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1588.215119][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1588.223115][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1588.231212][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1588.239202][T23221] Uninit was stored to memory at: [ 1588.244263][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1588.250008][T23221] __msan_chain_origin+0x57/0xa0 [ 1588.255423][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1588.260586][T23221] get_compat_msghdr+0x108/0x2b0 [ 1588.265554][T23221] do_recvmmsg+0xdaf/0x2300 [ 1588.270081][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1588.274789][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1588.280907][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1588.287092][T23221] __do_fast_syscall_32+0x102/0x160 [ 1588.292313][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1588.297184][T23221] do_SYSENTER_32+0x73/0x90 [ 1588.301718][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1588.308048][T23221] [ 1588.310398][T23221] Uninit was stored to memory at: [ 1588.315445][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1588.321175][T23221] __msan_chain_origin+0x57/0xa0 [ 1588.326137][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1588.331270][T23221] get_compat_msghdr+0x108/0x2b0 [ 1588.336232][T23221] do_recvmmsg+0xdaf/0x2300 [ 1588.340853][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1588.345558][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1588.351649][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1588.357835][T23221] __do_fast_syscall_32+0x102/0x160 [ 1588.363060][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1588.367938][T23221] do_SYSENTER_32+0x73/0x90 [ 1588.372560][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1588.379003][T23221] [ 1588.381358][T23221] Uninit was stored to memory at: [ 1588.386901][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1588.392739][T23221] __msan_chain_origin+0x57/0xa0 [ 1588.397722][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1588.402941][T23221] get_compat_msghdr+0x108/0x2b0 [ 1588.407919][T23221] do_recvmmsg+0xdaf/0x2300 [ 1588.412455][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1588.417248][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1588.423683][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1588.429866][T23221] __do_fast_syscall_32+0x102/0x160 [ 1588.435111][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1588.440003][T23221] do_SYSENTER_32+0x73/0x90 [ 1588.444545][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1588.450874][T23221] [ 1588.453211][T23221] Uninit was stored to memory at: [ 1588.458261][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1588.464088][T23221] __msan_chain_origin+0x57/0xa0 [ 1588.469052][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1588.474190][T23221] get_compat_msghdr+0x108/0x2b0 [ 1588.479146][T23221] do_recvmmsg+0xdaf/0x2300 [ 1588.483678][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1588.488467][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1588.494583][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1588.501116][T23221] __do_fast_syscall_32+0x102/0x160 [ 1588.506341][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1588.511237][T23221] do_SYSENTER_32+0x73/0x90 [ 1588.515801][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1588.522129][T23221] [ 1588.524467][T23221] Uninit was stored to memory at: [ 1588.529517][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1588.535255][T23221] __msan_chain_origin+0x57/0xa0 [ 1588.540221][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1588.545366][T23221] get_compat_msghdr+0x108/0x2b0 [ 1588.550420][T23221] do_recvmmsg+0xdaf/0x2300 [ 1588.554948][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1588.560192][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1588.566363][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1588.572635][T23221] __do_fast_syscall_32+0x102/0x160 [ 1588.577850][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1588.582718][T23221] do_SYSENTER_32+0x73/0x90 [ 1588.587241][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1588.593667][T23221] [ 1588.596009][T23221] Uninit was stored to memory at: [ 1588.601137][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1588.606871][T23221] __msan_chain_origin+0x57/0xa0 [ 1588.611849][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1588.617215][T23221] get_compat_msghdr+0x108/0x2b0 [ 1588.622291][T23221] do_recvmmsg+0xdaf/0x2300 [ 1588.626813][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1588.631533][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1588.637636][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1588.643832][T23221] __do_fast_syscall_32+0x102/0x160 [ 1588.649066][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1588.653956][T23221] do_SYSENTER_32+0x73/0x90 [ 1588.658481][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1588.664818][T23221] [ 1588.667153][T23221] Uninit was stored to memory at: [ 1588.672286][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1588.678032][T23221] __msan_chain_origin+0x57/0xa0 [ 1588.682987][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1588.688121][T23221] get_compat_msghdr+0x108/0x2b0 [ 1588.693257][T23221] do_recvmmsg+0xdaf/0x2300 [ 1588.697864][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1588.702564][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1588.709281][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1588.715467][T23221] __do_fast_syscall_32+0x102/0x160 [ 1588.720873][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1588.725744][T23221] do_SYSENTER_32+0x73/0x90 [ 1588.730266][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1588.736609][T23221] [ 1588.738945][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1588.745642][T23221] do_recvmmsg+0xbc/0x2300 [ 1588.750082][T23221] do_recvmmsg+0xbc/0x2300 [ 1589.038671][T23224] not chained 6260000 origins [ 1589.043410][T23224] CPU: 0 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1589.052172][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.062345][T23224] Call Trace: [ 1589.065655][T23224] dump_stack+0x21c/0x280 [ 1589.070005][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1589.075747][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1589.081831][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1589.087155][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1589.092977][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1589.099062][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1589.104465][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1589.109687][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1589.115343][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1589.121431][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1589.126386][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1589.131675][T23224] __msan_chain_origin+0x57/0xa0 [ 1589.136629][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1589.141762][T23224] get_compat_msghdr+0x108/0x2b0 [ 1589.146719][T23224] do_recvmmsg+0xdaf/0x2300 [ 1589.151241][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1589.156531][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1589.162438][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1589.167681][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1589.174290][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1589.179590][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1589.184364][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1589.189060][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1589.194909][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1589.200202][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1589.206317][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1589.212492][T23224] __do_fast_syscall_32+0x102/0x160 [ 1589.217772][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1589.222641][T23224] do_SYSENTER_32+0x73/0x90 [ 1589.227174][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1589.233604][T23224] RIP: 0023:0xf7fd0549 [ 1589.237684][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1589.257565][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1589.266003][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1589.274010][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1589.282284][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1589.290358][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1589.298338][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1589.306322][T23224] Uninit was stored to memory at: [ 1589.311380][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1589.317106][T23224] __msan_chain_origin+0x57/0xa0 [ 1589.322062][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1589.327231][T23224] get_compat_msghdr+0x108/0x2b0 [ 1589.332185][T23224] do_recvmmsg+0xdaf/0x2300 [ 1589.336722][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1589.341412][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1589.347515][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1589.354736][T23224] __do_fast_syscall_32+0x102/0x160 [ 1589.360059][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1589.365141][T23224] do_SYSENTER_32+0x73/0x90 [ 1589.369667][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1589.376006][T23224] [ 1589.378427][T23224] Uninit was stored to memory at: [ 1589.383475][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1589.389476][T23224] __msan_chain_origin+0x57/0xa0 [ 1589.394431][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1589.400780][T23224] get_compat_msghdr+0x108/0x2b0 [ 1589.405734][T23224] do_recvmmsg+0xdaf/0x2300 [ 1589.410276][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1589.414982][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1589.421414][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1589.427587][T23224] __do_fast_syscall_32+0x102/0x160 [ 1589.432808][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1589.437673][T23224] do_SYSENTER_32+0x73/0x90 [ 1589.442195][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1589.448518][T23224] [ 1589.450883][T23224] Uninit was stored to memory at: [ 1589.455954][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1589.461770][T23224] __msan_chain_origin+0x57/0xa0 [ 1589.466724][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1589.471858][T23224] get_compat_msghdr+0x108/0x2b0 [ 1589.476808][T23224] do_recvmmsg+0xdaf/0x2300 [ 1589.481322][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1589.486263][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1589.492349][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1589.498612][T23224] __do_fast_syscall_32+0x102/0x160 [ 1589.503984][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1589.508874][T23224] do_SYSENTER_32+0x73/0x90 [ 1589.513392][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1589.519791][T23224] [ 1589.522141][T23224] Uninit was stored to memory at: [ 1589.527212][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1589.532943][T23224] __msan_chain_origin+0x57/0xa0 [ 1589.537898][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1589.543078][T23224] get_compat_msghdr+0x108/0x2b0 [ 1589.548090][T23224] do_recvmmsg+0xdaf/0x2300 [ 1589.552612][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1589.557303][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1589.563410][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1589.569579][T23224] __do_fast_syscall_32+0x102/0x160 [ 1589.574879][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1589.579743][T23224] do_SYSENTER_32+0x73/0x90 [ 1589.584262][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1589.590589][T23224] [ 1589.592933][T23224] Uninit was stored to memory at: [ 1589.597981][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1589.603718][T23224] __msan_chain_origin+0x57/0xa0 [ 1589.608691][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1589.613818][T23224] get_compat_msghdr+0x108/0x2b0 [ 1589.618791][T23224] do_recvmmsg+0xdaf/0x2300 [ 1589.623394][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1589.628092][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1589.634190][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1589.640372][T23224] __do_fast_syscall_32+0x102/0x160 [ 1589.645622][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1589.650500][T23224] do_SYSENTER_32+0x73/0x90 [ 1589.655070][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1589.662625][T23224] [ 1589.664985][T23224] Uninit was stored to memory at: [ 1589.670040][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1589.676054][T23224] __msan_chain_origin+0x57/0xa0 [ 1589.681016][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1589.686143][T23224] get_compat_msghdr+0x108/0x2b0 [ 1589.691104][T23224] do_recvmmsg+0xdaf/0x2300 [ 1589.696083][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1589.700777][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1589.706863][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1589.713033][T23224] __do_fast_syscall_32+0x102/0x160 [ 1589.718287][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1589.723193][T23224] do_SYSENTER_32+0x73/0x90 [ 1589.727733][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1589.734057][T23224] [ 1589.736428][T23224] Uninit was stored to memory at: [ 1589.741478][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1589.747558][T23224] __msan_chain_origin+0x57/0xa0 [ 1589.752544][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1589.757674][T23224] get_compat_msghdr+0x108/0x2b0 [ 1589.762628][T23224] do_recvmmsg+0xdaf/0x2300 [ 1589.765139][T23221] not chained 6270000 origins [ 1589.767160][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1589.771856][T23221] CPU: 1 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1589.776622][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1589.785446][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.791585][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1589.801650][T23221] Call Trace: [ 1589.807837][T23224] __do_fast_syscall_32+0x102/0x160 [ 1589.811128][T23221] dump_stack+0x21c/0x280 [ 1589.816313][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1589.820630][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1589.825475][T23224] do_SYSENTER_32+0x73/0x90 [ 1589.831190][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1589.835685][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1589.841744][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1589.848048][T23224] [ 1589.853527][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1589.855835][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1589.861648][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1589.868319][T23224] do_recvmmsg+0xbc/0x2300 [ 1589.874394][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1589.878808][T23224] do_recvmmsg+0xbc/0x2300 [ 1589.884172][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1589.900994][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1589.907132][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1589.913756][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1589.920042][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1589.925728][T23221] __msan_chain_origin+0x57/0xa0 [ 1589.930733][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1589.935913][T23221] get_compat_msghdr+0x108/0x2b0 [ 1589.941588][T23221] do_recvmmsg+0xdaf/0x2300 [ 1589.946125][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1589.952837][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1589.960214][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1589.966186][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1589.972220][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1589.979113][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1589.984601][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1589.989504][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1589.994396][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1590.000397][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1590.006321][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1590.012423][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1590.018595][T23221] __do_fast_syscall_32+0x102/0x160 [ 1590.024248][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1590.029311][T23221] do_SYSENTER_32+0x73/0x90 [ 1590.033835][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1590.040177][T23221] RIP: 0023:0xf7fd0549 [ 1590.044310][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1590.063941][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1590.072385][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1590.080381][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1590.088476][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1590.096495][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1590.104488][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1590.112648][T23221] Uninit was stored to memory at: [ 1590.117705][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1590.123561][T23221] __msan_chain_origin+0x57/0xa0 [ 1590.128644][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1590.133807][T23221] get_compat_msghdr+0x108/0x2b0 [ 1590.139049][T23221] do_recvmmsg+0xdaf/0x2300 [ 1590.143582][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1590.148280][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1590.154369][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1590.160566][T23221] __do_fast_syscall_32+0x102/0x160 [ 1590.165790][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1590.170651][T23221] do_SYSENTER_32+0x73/0x90 [ 1590.175168][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1590.181493][T23221] [ 1590.183826][T23221] Uninit was stored to memory at: [ 1590.188869][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1590.194608][T23221] __msan_chain_origin+0x57/0xa0 [ 1590.199557][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1590.204718][T23221] get_compat_msghdr+0x108/0x2b0 [ 1590.209675][T23221] do_recvmmsg+0xdaf/0x2300 [ 1590.214192][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1590.218893][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1590.224987][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1590.231586][T23221] __do_fast_syscall_32+0x102/0x160 [ 1590.236802][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1590.241672][T23221] do_SYSENTER_32+0x73/0x90 [ 1590.246280][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1590.252879][T23221] [ 1590.255208][T23221] Uninit was stored to memory at: [ 1590.260259][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1590.265985][T23221] __msan_chain_origin+0x57/0xa0 [ 1590.270939][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1590.276068][T23221] get_compat_msghdr+0x108/0x2b0 [ 1590.281028][T23221] do_recvmmsg+0xdaf/0x2300 [ 1590.285548][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1590.290234][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1590.296318][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1590.302491][T23221] __do_fast_syscall_32+0x102/0x160 [ 1590.307706][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1590.312833][T23221] do_SYSENTER_32+0x73/0x90 [ 1590.317362][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1590.323687][T23221] [ 1590.326017][T23221] Uninit was stored to memory at: [ 1590.331072][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1590.336816][T23221] __msan_chain_origin+0x57/0xa0 [ 1590.341767][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1590.347070][T23221] get_compat_msghdr+0x108/0x2b0 [ 1590.352019][T23221] do_recvmmsg+0xdaf/0x2300 [ 1590.356532][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1590.361222][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1590.367305][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1590.373482][T23221] __do_fast_syscall_32+0x102/0x160 [ 1590.378693][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1590.383564][T23221] do_SYSENTER_32+0x73/0x90 [ 1590.388084][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1590.394404][T23221] [ 1590.396747][T23221] Uninit was stored to memory at: [ 1590.401795][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1590.407525][T23221] __msan_chain_origin+0x57/0xa0 [ 1590.412475][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1590.417598][T23221] get_compat_msghdr+0x108/0x2b0 [ 1590.422551][T23221] do_recvmmsg+0xdaf/0x2300 [ 1590.427065][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1590.431770][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1590.437872][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1590.444042][T23221] __do_fast_syscall_32+0x102/0x160 [ 1590.449257][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1590.454139][T23221] do_SYSENTER_32+0x73/0x90 [ 1590.458661][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1590.464987][T23221] [ 1590.467324][T23221] Uninit was stored to memory at: [ 1590.472371][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1590.478105][T23221] __msan_chain_origin+0x57/0xa0 [ 1590.483072][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1590.488212][T23221] get_compat_msghdr+0x108/0x2b0 [ 1590.493172][T23221] do_recvmmsg+0xdaf/0x2300 [ 1590.497689][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1590.502394][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1590.508507][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1590.514683][T23221] __do_fast_syscall_32+0x102/0x160 [ 1590.519981][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1590.524847][T23221] do_SYSENTER_32+0x73/0x90 [ 1590.529361][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1590.535682][T23221] [ 1590.538095][T23221] Uninit was stored to memory at: [ 1590.543150][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1590.548881][T23221] __msan_chain_origin+0x57/0xa0 [ 1590.553832][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1590.558949][T23221] get_compat_msghdr+0x108/0x2b0 [ 1590.563901][T23221] do_recvmmsg+0xdaf/0x2300 [ 1590.568420][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1590.573120][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1590.579224][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1590.585413][T23221] __do_fast_syscall_32+0x102/0x160 [ 1590.590633][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1590.595504][T23221] do_SYSENTER_32+0x73/0x90 [ 1590.600024][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1590.606347][T23221] [ 1590.608689][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1590.615385][T23221] do_recvmmsg+0xbc/0x2300 [ 1590.619818][T23221] do_recvmmsg+0xbc/0x2300 [ 1590.918322][T23224] not chained 6280000 origins [ 1590.923092][T23224] CPU: 1 PID: 23224 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1590.931855][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.941921][T23224] Call Trace: [ 1590.945254][T23224] dump_stack+0x21c/0x280 [ 1590.949614][T23224] kmsan_internal_chain_origin+0x6f/0x130 [ 1590.955361][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1590.961451][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1590.966673][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1590.972505][T23224] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1590.978599][T23224] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1590.984186][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1590.989530][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1590.995558][T23224] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1591.001650][T23224] ? _copy_from_user+0x1cd/0x2d0 [ 1591.006612][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1591.011825][T23224] __msan_chain_origin+0x57/0xa0 [ 1591.016869][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1591.022009][T23224] get_compat_msghdr+0x108/0x2b0 [ 1591.026977][T23224] do_recvmmsg+0xdaf/0x2300 [ 1591.031508][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1591.036751][T23224] ? kmsan_internal_check_memory+0xb1/0x520 [ 1591.042663][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1591.047884][T23224] ? kmsan_internal_set_origin+0x85/0xc0 [ 1591.053636][T23224] ? __msan_poison_alloca+0xe9/0x110 [ 1591.059119][T23224] ? __sys_recvmmsg+0xb5/0x5f0 [ 1591.063912][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1591.068617][T23224] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1591.074474][T23224] ? kmsan_get_metadata+0x116/0x180 [ 1591.079721][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.085829][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.092022][T23224] __do_fast_syscall_32+0x102/0x160 [ 1591.097367][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1591.102325][T23224] do_SYSENTER_32+0x73/0x90 [ 1591.106860][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1591.113202][T23224] RIP: 0023:0xf7fd0549 [ 1591.117289][T23224] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1591.137025][T23224] RSP: 002b:00000000f55a90cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1591.145639][T23224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1591.153633][T23224] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1591.161631][T23224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1591.169630][T23224] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1591.177640][T23224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1591.185974][T23224] Uninit was stored to memory at: [ 1591.191025][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1591.196943][T23224] __msan_chain_origin+0x57/0xa0 [ 1591.201893][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1591.207022][T23224] get_compat_msghdr+0x108/0x2b0 [ 1591.211988][T23224] do_recvmmsg+0xdaf/0x2300 [ 1591.216516][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1591.221227][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.227324][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.233498][T23224] __do_fast_syscall_32+0x102/0x160 [ 1591.238725][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1591.243599][T23224] do_SYSENTER_32+0x73/0x90 [ 1591.248128][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1591.254455][T23224] [ 1591.256793][T23224] Uninit was stored to memory at: [ 1591.261857][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1591.267618][T23224] __msan_chain_origin+0x57/0xa0 [ 1591.272569][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1591.277693][T23224] get_compat_msghdr+0x108/0x2b0 [ 1591.282672][T23224] do_recvmmsg+0xdaf/0x2300 [ 1591.287227][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1591.291916][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.298108][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.304297][T23224] __do_fast_syscall_32+0x102/0x160 [ 1591.309624][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1591.314524][T23224] do_SYSENTER_32+0x73/0x90 [ 1591.319136][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1591.325463][T23224] [ 1591.327828][T23224] Uninit was stored to memory at: [ 1591.332994][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1591.338732][T23224] __msan_chain_origin+0x57/0xa0 [ 1591.344208][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1591.349438][T23224] get_compat_msghdr+0x108/0x2b0 [ 1591.354394][T23224] do_recvmmsg+0xdaf/0x2300 [ 1591.358922][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1591.363642][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.369834][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.376011][T23224] __do_fast_syscall_32+0x102/0x160 [ 1591.381222][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1591.386087][T23224] do_SYSENTER_32+0x73/0x90 [ 1591.391321][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1591.397652][T23224] [ 1591.399982][T23224] Uninit was stored to memory at: [ 1591.405031][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1591.410780][T23224] __msan_chain_origin+0x57/0xa0 [ 1591.415542][T23221] not chained 6290000 origins [ 1591.415832][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1591.420513][T23221] CPU: 0 PID: 23221 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 1591.425635][T23224] get_compat_msghdr+0x108/0x2b0 [ 1591.434374][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.439313][T23224] do_recvmmsg+0xdaf/0x2300 [ 1591.449351][T23221] Call Trace: [ 1591.453871][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1591.457484][T23221] dump_stack+0x21c/0x280 [ 1591.462673][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.466998][T23221] kmsan_internal_chain_origin+0x6f/0x130 [ 1591.473079][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.478796][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1591.484948][T23224] __do_fast_syscall_32+0x102/0x160 [ 1591.491034][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1591.496404][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1591.501593][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1591.506427][T23224] do_SYSENTER_32+0x73/0x90 [ 1591.512422][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1591.516919][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1591.522970][T23221] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1591.529283][T23224] [ 1591.534661][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1591.536962][T23224] Uninit was stored to memory at: [ 1591.542197][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1591.547239][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1591.552862][T23221] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1591.558566][T23224] __msan_chain_origin+0x57/0xa0 [ 1591.564629][T23221] ? _copy_from_user+0x1cd/0x2d0 [ 1591.569579][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1591.574499][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1591.579613][T23224] get_compat_msghdr+0x108/0x2b0 [ 1591.584824][T23221] __msan_chain_origin+0x57/0xa0 [ 1591.589755][T23224] do_recvmmsg+0xdaf/0x2300 [ 1591.594687][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1591.599187][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1591.604292][T23221] get_compat_msghdr+0x108/0x2b0 [ 1591.608963][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.613883][T23221] do_recvmmsg+0xdaf/0x2300 [ 1591.619956][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.624550][T23221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1591.630716][T23224] __do_fast_syscall_32+0x102/0x160 [ 1591.636774][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1591.642097][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1591.647392][T23221] ? kmsan_internal_check_memory+0xb1/0x520 [ 1591.652231][T23224] do_SYSENTER_32+0x73/0x90 [ 1591.658124][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1591.662623][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1591.667816][T23221] ? kmsan_internal_set_origin+0x85/0xc0 [ 1591.674486][T23224] [ 1591.680140][T23221] ? __msan_poison_alloca+0xe9/0x110 [ 1591.682436][T23224] Uninit was stored to memory at: [ 1591.687724][T23221] ? __sys_recvmmsg+0xb5/0x5f0 [ 1591.692738][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1591.697507][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1591.703212][T23224] __msan_chain_origin+0x57/0xa0 [ 1591.707886][T23221] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1591.712805][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1591.718597][T23221] ? kmsan_get_metadata+0x116/0x180 [ 1591.723697][T23224] get_compat_msghdr+0x108/0x2b0 [ 1591.728910][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.733836][T23224] do_recvmmsg+0xdaf/0x2300 [ 1591.739915][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.744403][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1591.750552][T23221] __do_fast_syscall_32+0x102/0x160 [ 1591.755484][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.760697][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1591.767309][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.772157][T23221] do_SYSENTER_32+0x73/0x90 [ 1591.778320][T23224] __do_fast_syscall_32+0x102/0x160 [ 1591.782845][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1591.788037][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1591.794460][T23221] RIP: 0023:0xf7fd0549 [ 1591.799335][T23224] do_SYSENTER_32+0x73/0x90 [ 1591.803412][T23221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1591.807910][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1591.827534][T23221] RSP: 002b:00000000f55ca0cc EFLAGS: 00000296 [ 1591.833842][T23224] [ 1591.833877][T23221] ORIG_RAX: 0000000000000151 [ 1591.839935][T23224] Uninit was stored to memory at: [ 1591.842295][T23221] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1591.846973][T23224] kmsan_internal_chain_origin+0xad/0x130 [ 1591.851998][T23221] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1591.860013][T23224] __msan_chain_origin+0x57/0xa0 [ 1591.865726][T23221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1591.873707][T23224] __get_compat_msghdr+0x6db/0x9d0 [ 1591.878614][T23221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1591.886586][T23224] get_compat_msghdr+0x108/0x2b0 [ 1591.891670][T23221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1591.899658][T23224] do_recvmmsg+0xdaf/0x2300 [ 1591.904586][T23221] Uninit was stored to memory at: [ 1591.912597][T23224] __sys_recvmmsg+0x340/0x5f0 [ 1591.917369][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1591.922371][T23224] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.927038][T23221] __msan_chain_origin+0x57/0xa0 [ 1591.932766][T23224] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.938837][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1591.943788][T23224] __do_fast_syscall_32+0x102/0x160 [ 1591.949928][T23221] get_compat_msghdr+0x108/0x2b0 [ 1591.955020][T23224] do_fast_syscall_32+0x6a/0xc0 [ 1591.960398][T23221] do_recvmmsg+0xdaf/0x2300 [ 1591.965308][T23224] do_SYSENTER_32+0x73/0x90 [ 1591.965344][T23224] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1591.970228][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1591.974922][T23224] [ 1591.979443][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1591.985918][T23224] Local variable ----msg_sys@do_recvmmsg created at: [ 1591.990602][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1591.992910][T23224] do_recvmmsg+0xbc/0x2300 [ 1591.998994][T23221] __do_fast_syscall_32+0x102/0x160 [ 1592.005682][T23224] do_recvmmsg+0xbc/0x2300 [ 1592.011931][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1592.031237][T23221] do_SYSENTER_32+0x73/0x90 [ 1592.035767][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1592.042091][T23221] [ 1592.044436][T23221] Uninit was stored to memory at: [ 1592.049493][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1592.055238][T23221] __msan_chain_origin+0x57/0xa0 [ 1592.060206][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1592.065345][T23221] get_compat_msghdr+0x108/0x2b0 [ 1592.070306][T23221] do_recvmmsg+0xdaf/0x2300 [ 1592.074822][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1592.079510][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1592.085593][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1592.091763][T23221] __do_fast_syscall_32+0x102/0x160 [ 1592.097080][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1592.101951][T23221] do_SYSENTER_32+0x73/0x90 [ 1592.106470][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1592.112795][T23221] [ 1592.115128][T23221] Uninit was stored to memory at: [ 1592.120177][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1592.126037][T23221] __msan_chain_origin+0x57/0xa0 [ 1592.130994][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1592.136120][T23221] get_compat_msghdr+0x108/0x2b0 [ 1592.141081][T23221] do_recvmmsg+0xdaf/0x2300 [ 1592.145781][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1592.150567][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1592.156661][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1592.162858][T23221] __do_fast_syscall_32+0x102/0x160 [ 1592.168078][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1592.172960][T23221] do_SYSENTER_32+0x73/0x90 [ 1592.177501][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1592.183912][T23221] [ 1592.186267][T23221] Uninit was stored to memory at: [ 1592.191326][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1592.197066][T23221] __msan_chain_origin+0x57/0xa0 [ 1592.202012][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1592.207164][T23221] get_compat_msghdr+0x108/0x2b0 [ 1592.212128][T23221] do_recvmmsg+0xdaf/0x2300 [ 1592.216651][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1592.221345][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1592.227426][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1592.233594][T23221] __do_fast_syscall_32+0x102/0x160 [ 1592.238820][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1592.243684][T23221] do_SYSENTER_32+0x73/0x90 [ 1592.248302][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1592.254634][T23221] [ 1592.256980][T23221] Uninit was stored to memory at: [ 1592.262077][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1592.267842][T23221] __msan_chain_origin+0x57/0xa0 [ 1592.272806][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1592.277954][T23221] get_compat_msghdr+0x108/0x2b0 [ 1592.282947][T23221] do_recvmmsg+0xdaf/0x2300 [ 1592.287470][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1592.292185][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1592.298273][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1592.304458][T23221] __do_fast_syscall_32+0x102/0x160 [ 1592.309670][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1592.314536][T23221] do_SYSENTER_32+0x73/0x90 [ 1592.319094][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1592.325419][T23221] [ 1592.327752][T23221] Uninit was stored to memory at: [ 1592.332800][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1592.338535][T23221] __msan_chain_origin+0x57/0xa0 [ 1592.343674][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1592.348808][T23221] get_compat_msghdr+0x108/0x2b0 [ 1592.353772][T23221] do_recvmmsg+0xdaf/0x2300 [ 1592.358366][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1592.363076][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1592.369178][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1592.375345][T23221] __do_fast_syscall_32+0x102/0x160 [ 1592.380554][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1592.385437][T23221] do_SYSENTER_32+0x73/0x90 [ 1592.389951][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1592.396268][T23221] [ 1592.398690][T23221] Uninit was stored to memory at: [ 1592.403852][T23221] kmsan_internal_chain_origin+0xad/0x130 [ 1592.409607][T23221] __msan_chain_origin+0x57/0xa0 [ 1592.414818][T23221] __get_compat_msghdr+0x6db/0x9d0 [ 1592.419938][T23221] get_compat_msghdr+0x108/0x2b0 [ 1592.424886][T23221] do_recvmmsg+0xdaf/0x2300 [ 1592.429389][T23221] __sys_recvmmsg+0x340/0x5f0 [ 1592.434093][T23221] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1592.440167][T23221] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1592.446420][T23221] __do_fast_syscall_32+0x102/0x160 [ 1592.451641][T23221] do_fast_syscall_32+0x6a/0xc0 [ 1592.456503][T23221] do_SYSENTER_32+0x73/0x90 [ 1592.461014][T23221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1592.467336][T23221] [ 1592.469664][T23221] Local variable ----msg_sys@do_recvmmsg created at: [ 1592.476355][T23221] do_recvmmsg+0xbc/0x2300 [ 1592.480777][T23221] do_recvmmsg+0xbc/0x2300 07:01:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0xffffffffffffffce) 07:01:47 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1, 0x0, 0x0) 07:01:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000600010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) 07:01:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpid() r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x121c40, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0xffff, 0x0, 0x4, 0x9, 0x20}}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 07:01:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 07:01:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/sockstat\x00') writev(r2, &(0x7f0000000280)=[{&(0x7f0000000000)="83", 0x1}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="f23e0f3266b9800000c00f326635001000000f300fc769680f7842000f1d08d2593c0f2247670fc7383e65660ff27600bad104ec", 0x34}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mq_open(&(0x7f0000000440)='\x94gz\xf4\tR\xd9Z\xa2\xdc\xf6\x06\x80\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\x17\x05\xe6\xfc\xa0\xaf\r\x93Q\xf2\x7f\xb7W^n1\xd5(\x1a\x15\xa1^\x7f\xd3q)\xd1\xef\a\xf3\xe6\xa3<\xb3\xa2{\xca\xea\x05\xdc\'\xed\x7f\x97iy\xa6\xa5\x9e\xb8\xa9\x98p\x8f\r\n\xea\x1bi\x8b\r\x15\xaf\xe8\xa8\x14<\xd9\xa3\x04\x03\xc3D\xce)am\xbd\xb0\x17=\xc9PCpvP\x8aR\xe0ms-\xfd\xe3\x9e0D\x8eW\xe1\x9c\x9dm\t\xaa\x17\xa8`\x16\xc6\xc8\x8c\xd8GMB\xf8\xbd\xd9\xc2,$$)?\x99\xc7\xdf\x9a\xa4y\x11\xe7Y}1^\xca\xc0\xd5_\x8b\x1d\xcf\xc6\xa8\xd6\x9e\x0f\xc6\x8e\bM\xfai\xdb\x90\xf0\x1a\xfe:\\~\x96\x90b/\xa2]1\x90B\xc4\x1eTa\x99\xc7\xd6\xdfu\x00'/221, 0x40, 0x89, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x2c) openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x400, 0x0) 07:01:48 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_raw(r0, 0x0, 0xfffffffffffffc3a) 07:01:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000700010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) 07:01:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpid() r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x121c40, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0xffff, 0x0, 0x4, 0x9, 0x20}}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 07:01:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x8a80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mq_open(&(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @ioapic={0x4000, 0x7fff, 0x1, 0x8, 0x0, [{0x0, 0x0, 0x20, [], 0x8}, {0x9, 0x9, 0x7f, [], 0x50}, {0x0, 0x7, 0x7f, [], 0x4}, {0x1, 0x3f, 0x0, [], 0x40}, {0x1f, 0x8, 0x3f, [], 0x4}, {0x1, 0xe, 0xe, [], 0x6}, {0xb1, 0x7f, 0x4, [], 0x9}, {0x7, 0x3f, 0x2, [], 0x40}, {0x4, 0x7f, 0x8, [], 0x80}, {0xc0, 0x0, 0x1f, [], 0x5}, {0x1, 0x0, 0x2, [], 0x7f}, {0x2, 0x1, 0x8, [], 0x2}, {0x5, 0x20, 0x7, [], 0x5}, {0x40, 0x1, 0x0, [], 0x3f}, {0x69, 0xa3, 0x0, [], 0x8}, {0xfd, 0x8, 0x0, [], 0x1f}, {0x7f, 0x2, 0x1, [], 0x4}, {0x80, 0x7f, 0x3f, [], 0x40}, {0x90, 0x1, 0x1f, [], 0xb9}, {0x6, 0x1, 0x20, [], 0xbe}, {0x6, 0x2, 0x20, [], 0xfb}, {0x9, 0x5, 0xac, [], 0x6}, {0x5e, 0xa6, 0x5}, {0x7, 0x82, 0x0, [], 0xff}]}}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, &(0x7f0000000300)=0x683) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x46872df7eaae0a4d) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0xa, 0x4c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000180)={0x80fb, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="98731d3b", @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf255d00000008000300040000ff0cde3d21967df81b26de178b84d6f065a54dd07b060e210fefee4bcc", @ANYRES32=0x0, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x15) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a45321, &(0x7f0000000240)={{0x40, 0x6}, 'port1\x00', 0x82, 0x0, 0x5, 0xfff, 0x8, 0xfffffee3, 0x0, 0x0, 0x6, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:01:49 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1, 0x0, 0x0) 07:01:49 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0x5450, 0x0) [ 1598.182802][ T844] device hsr_slave_0 left promiscuous mode [ 1598.202950][ T844] device hsr_slave_1 left promiscuous mode [ 1598.223117][ T844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.233337][ T844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.249903][ T844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1598.257684][ T844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1598.275744][ T844] device bridge_slave_1 left promiscuous mode [ 1598.282528][ T844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.291657][ T844] device bridge_slave_0 left promiscuous mode [ 1598.298704][ T844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.316110][ T844] device veth1_macvtap left promiscuous mode [ 1598.322521][ T844] device veth0_macvtap left promiscuous mode [ 1598.330779][ T844] device veth1_vlan left promiscuous mode [ 1598.336839][ T844] device veth0_vlan left promiscuous mode [ 1600.620576][ T844] team0 (unregistering): Port device team_slave_1 removed [ 1600.647272][ T844] team0 (unregistering): Port device team_slave_0 removed [ 1600.662005][ T844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.685289][ T844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.764726][ T844] bond0 (unregistering): Released all slaves [ 1600.835634][T23341] IPVS: ftp: loaded support on port[0] = 21 [ 1601.089585][T23341] chnl_net:caif_netlink_parms(): no params data found [ 1601.221444][T23341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.229535][T23341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.239693][T23341] device bridge_slave_0 entered promiscuous mode [ 1601.259977][T23341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.268170][T23341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.278303][T23341] device bridge_slave_1 entered promiscuous mode [ 1601.360582][T23341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.382403][ T8503] Bluetooth: hci3: command 0x0409 tx timeout [ 1601.393110][T23341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.475713][T23341] team0: Port device team_slave_0 added [ 1601.499642][T23341] team0: Port device team_slave_1 added [ 1601.564164][T23341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.571301][T23341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.599440][T23341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.628103][T23341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.636135][T23341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.662967][T23341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.739410][T23341] device hsr_slave_0 entered promiscuous mode [ 1601.748512][T23341] device hsr_slave_1 entered promiscuous mode [ 1601.765382][T23341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1601.773585][T23341] Cannot create hsr debugfs directory [ 1602.197628][T23341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.231264][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1602.240368][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1602.259652][T23341] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.278668][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1602.288549][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1602.298409][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.305951][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.317879][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1602.340841][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1602.351518][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1602.361992][T22659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.369428][T22659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.394232][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1602.417248][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1602.442845][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1602.454465][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1602.469185][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1602.479551][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1602.490378][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1602.502670][ T32] Bluetooth: hci2: command 0x0406 tx timeout [ 1602.517122][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1602.532128][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1602.552899][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1602.563070][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1602.588727][T23341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1602.627865][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1602.635784][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1602.660423][T23341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1602.778250][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1602.789419][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1602.839279][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1602.849578][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1602.865841][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1602.875662][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1602.889042][T23341] device veth0_vlan entered promiscuous mode [ 1602.915802][T23341] device veth1_vlan entered promiscuous mode [ 1602.970573][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1602.981156][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1603.000578][T23341] device veth0_macvtap entered promiscuous mode [ 1603.019917][T23341] device veth1_macvtap entered promiscuous mode [ 1603.059873][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1603.070991][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.081283][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1603.092090][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.102306][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1603.112981][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.123154][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1603.133931][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.144236][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1603.154949][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.169320][T23341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.178891][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1603.189003][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1603.198413][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1603.209080][T22659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1603.229030][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1603.239863][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.252623][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1603.264289][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.274541][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1603.285815][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.296007][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1603.306715][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.316809][T23341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1603.327680][T23341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.340500][T23341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.355696][T10276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1603.366132][T10276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1603.476429][T10276] Bluetooth: hci3: command 0x041b tx timeout [ 1603.679970][ T1292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.688188][ T1292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.707868][T22247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1603.800752][T21409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.809234][T21409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.818947][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:01:58 executing program 3: socket$inet(0x2, 0x0, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 07:01:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000800010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) 07:01:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000180)={0x1, 0xfffffffc, 0x10000, 0x9, 0x4, 0x2}) mq_open(&(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:01:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = getpid() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x121c40, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0xffff, 0x0, 0x4, 0x9, 0x20}}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 07:01:58 executing program 2: select(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 07:01:58 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0x0, 0x0) [ 1604.360935][T23577] kvm: pic: level sensitive irq not supported [ 1604.361163][T23577] kvm: pic: level sensitive irq not supported [ 1604.396147][T23577] kvm: pic: level sensitive irq not supported [ 1604.410092][T23577] kvm: pic: level sensitive irq not supported [ 1604.424047][T23577] kvm: pic: level sensitive irq not supported 07:01:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x1ff}, 0x14}}, 0x0) [ 1604.431415][T23577] kvm: pic: level sensitive irq not supported 07:01:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x20}}, 0x0) [ 1604.469431][T23577] kvm: pic: level sensitive irq not supported 07:01:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000900010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) [ 1604.553803][T23577] kvm: pic: level sensitive irq not supported [ 1604.639625][T23577] kvm: pic: level sensitive irq not supported 07:01:59 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 07:01:59 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) mq_open(&(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) r2 = memfd_create(&(0x7f0000000180)='/dev/hwrng\x00', 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/sockstat\x00') writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)="83", 0x1}], 0x1) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000480)=0x101, 0x4) r4 = syz_mount_image$erofs(&(0x7f00000001c0)='erofs\x00', &(0x7f0000000240)='./file0\x00', 0x400, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="7a5e7493f69ef9a6c2422a366d90c35fa5502c10c3b67aa8e4b75f3ca7d0e34b59dabf813b35895e71c3dc4796283af447be8c50d97db0b55b40a35ff23684860600d646bd984d628f46c172c5756bc35fd82655a900ed", 0x57, 0xffff8000}], 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB='nm5oacl,smackfstransmute=']) sendfile(r2, r4, &(0x7f0000000440)=0x800, 0x50) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:01:59 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002d80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002e80)={0x0, 0x0, 0x11, &(0x7f0000002e00)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) 07:01:59 executing program 2: read$hidraw(0xffffffffffffffff, 0x0, 0x0) 07:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000a00010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) [ 1604.713263][T23577] kvm: pic: level sensitive irq not supported [ 1605.544656][ T8503] Bluetooth: hci3: command 0x040f tx timeout [ 1605.737037][T23613] erofs: Unknown parameter 'nm5oacl' 07:02:00 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000b0d3a0408c0701101a7a100203010902240001000000000904000001f57b5b0009210000000122810009050c"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00008100000081205cd44680001573baf2215d748473135ddce8b731e2321a3f0c58912ce15eeb65d394894c27875200ae414c1e5624f69148a143ac14e0792113b07d567c4f4f22315f599b69a360c65f939991e14d71ef01767be8776063146d378c81"], 0x0}, 0x0) [ 1606.254983][T23623] erofs: Unknown parameter 'nm5oacl' [ 1606.373900][T22659] usb 5-1: new high-speed USB device number 6 using dummy_hcd 07:02:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = getpid() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x121c40, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0xffff, 0x0, 0x4, 0x9, 0x20}}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 07:02:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000b00010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) 07:02:00 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001ec0)=ANY=[@ANYBLOB="12010000c0bb9b40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, &(0x7f00000027c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0xfffffffffffffe4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 07:02:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = mq_open(&(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0, 0x0) inotify_init() ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mq_timedsend(r2, &(0x7f0000000180)="682a14c0802ea21a39a25e32cc8d8e34572a65711742906a45052e170c52e02869e4d39020fa19d67251be09973c3d3ba740663d12bbac894eeff656614a5f52afd4cbf6", 0x44, 0x4, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1606.803384][ T2084] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1606.824205][T22659] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1607.003626][T22659] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 1607.013319][T22659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.021477][T22659] usb 5-1: Product: syz [ 1607.026081][T22659] usb 5-1: Manufacturer: syz [ 1607.030799][T22659] usb 5-1: SerialNumber: syz [ 1607.207129][ T2084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 07:02:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000c00010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000580012800b00010067656e6576650000480002800600050000000000060005004e210000140007"], 0x88}}, 0x0) [ 1607.300950][T22659] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1607.363680][ T2084] usb 4-1: New USB device found, idVendor=078c, idProduct=1001, bcdDevice=7a.1a [ 1607.373123][ T2084] usb 4-1: New USB device strings: Mfr=16, Product=2, SerialNumber=3 [ 1607.382787][ T2084] usb 4-1: Product: syz [ 1607.387074][ T2084] usb 4-1: Manufacturer: syz [ 1607.392903][ T2084] usb 4-1: SerialNumber: syz [ 1607.400396][ T3255] usb 3-1: new high-speed USB device number 2 using dummy_hcd 07:02:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mq_open(&(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000204, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1607.498840][T22659] usb 5-1: USB disconnect, device number 6 [ 1607.568278][ T2084] usb 4-1: config 0 descriptor?? [ 1607.623669][ T8503] Bluetooth: hci3: command 0x0419 tx timeout [ 1607.784033][ T3255] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1607.793463][ T3255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.833369][ T2084] ===================================================== [ 1607.840410][ T2084] BUG: KMSAN: uninit-value in gtco_probe+0x1d62/0x3930 [ 1607.847304][ T2084] CPU: 0 PID: 2084 Comm: kworker/0:2 Not tainted 5.10.0-rc4-syzkaller #0 [ 1607.855754][ T2084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1607.861651][ T3255] usb 3-1: config 0 descriptor?? [ 1607.865849][ T2084] Workqueue: usb_hub_wq hub_event [ 1607.865865][ T2084] Call Trace: [ 1607.865896][ T2084] dump_stack+0x21c/0x280 [ 1607.865973][ T2084] kmsan_report+0xf7/0x1e0 [ 1607.887971][ T2084] __msan_warning+0x5f/0xa0 [ 1607.892503][ T2084] gtco_probe+0x1d62/0x3930 [ 1607.897036][ T2084] ? kmsan_get_metadata+0x116/0x180 [ 1607.902260][ T2084] ? kmsan_get_metadata+0x116/0x180 [ 1607.907664][ T2084] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1607.913545][ T2084] ? store_tabletExecute+0x150/0x150 [ 1607.918890][ T2084] usb_probe_interface+0xfcc/0x1520 [ 1607.924119][ T2084] ? usb_register_driver+0x900/0x900 [ 1607.929429][ T2084] really_probe+0xebd/0x2420 [ 1607.934046][ T2084] driver_probe_device+0x293/0x390 [ 1607.939188][ T2084] __device_attach_driver+0x63f/0x830 [ 1607.944604][ T2084] bus_for_each_drv+0x2ca/0x3f0 [ 1607.949482][ T2084] ? state_synced_show+0x130/0x130 [ 1607.954621][ T2084] __device_attach+0x538/0x860 [ 1607.959415][ T2084] device_initial_probe+0x4a/0x60 [ 1607.964466][ T2084] bus_probe_device+0x177/0x3d0 [ 1607.969339][ T2084] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1607.975525][ T2084] device_add+0x399e/0x3f20 [ 1607.980417][ T2084] usb_set_configuration+0x39cf/0x4010 [ 1607.985914][ T2084] ? usb_set_configuration+0xa61/0x4010 [ 1607.991493][ T2084] ? kmsan_get_shadow_origin_ptr+0x50/0xb0 [ 1607.997339][ T2084] usb_generic_driver_probe+0x138/0x300 [ 1608.002922][ T2084] ? usb_choose_configuration+0xf00/0xf00 [ 1608.008675][ T2084] usb_probe_device+0x317/0x570 [ 1608.013559][ T2084] ? usb_register_device_driver+0x590/0x590 [ 1608.019480][ T2084] really_probe+0xebd/0x2420 [ 1608.024104][ T2084] driver_probe_device+0x293/0x390 [ 1608.029250][ T2084] __device_attach_driver+0x63f/0x830 [ 1608.034662][ T2084] bus_for_each_drv+0x2ca/0x3f0 [ 1608.039545][ T2084] ? state_synced_show+0x130/0x130 [ 1608.044717][ T2084] __device_attach+0x538/0x860 [ 1608.049522][ T2084] device_initial_probe+0x4a/0x60 [ 1608.054581][ T2084] bus_probe_device+0x177/0x3d0 [ 1608.059452][ T2084] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1608.065288][ T2084] device_add+0x399e/0x3f20 [ 1608.069862][ T2084] usb_new_device+0x1bd6/0x2a30 [ 1608.074750][ T2084] hub_event+0x5bc9/0x8890 [ 1608.079194][ T2084] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1608.085294][ T2084] ? kmsan_get_metadata+0x116/0x180 [ 1608.090785][ T2084] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1608.096617][ T2084] ? led_work+0x780/0x780 [ 1608.100985][ T2084] process_one_work+0x121c/0x1fc0 [ 1608.106042][ T2084] worker_thread+0x10cc/0x2740 [ 1608.110832][ T2084] ? kmsan_get_metadata+0x116/0x180 [ 1608.116059][ T2084] kthread+0x51c/0x560 [ 1608.120323][ T2084] ? process_one_work+0x1fc0/0x1fc0 [ 1608.125542][ T2084] ? kthread_blkcg+0x110/0x110 [ 1608.130351][ T2084] ret_from_fork+0x1f/0x30 [ 1608.134953][ T2084] [ 1608.137318][ T2084] Uninit was stored to memory at: [ 1608.142365][ T2084] kmsan_internal_chain_origin+0xad/0x130 [ 1608.148093][ T2084] __msan_chain_origin+0x57/0xa0 [ 1608.153053][ T2084] gtco_probe+0x1f5d/0x3930 [ 1608.157580][ T2084] usb_probe_interface+0xfcc/0x1520 [ 1608.162790][ T2084] really_probe+0xebd/0x2420 [ 1608.167396][ T2084] driver_probe_device+0x293/0x390 [ 1608.172539][ T2084] __device_attach_driver+0x63f/0x830 [ 1608.177943][ T2084] bus_for_each_drv+0x2ca/0x3f0 [ 1608.182810][ T2084] __device_attach+0x538/0x860 [ 1608.187592][ T2084] device_initial_probe+0x4a/0x60 [ 1608.192643][ T2084] bus_probe_device+0x177/0x3d0 [ 1608.197518][ T2084] device_add+0x399e/0x3f20 [ 1608.203101][ T2084] usb_set_configuration+0x39cf/0x4010 [ 1608.208614][ T2084] usb_generic_driver_probe+0x138/0x300 [ 1608.214210][ T2084] usb_probe_device+0x317/0x570 [ 1608.219079][ T2084] really_probe+0xebd/0x2420 [ 1608.223685][ T2084] driver_probe_device+0x293/0x390 [ 1608.228806][ T2084] __device_attach_driver+0x63f/0x830 [ 1608.234194][ T2084] bus_for_each_drv+0x2ca/0x3f0 [ 1608.239054][ T2084] __device_attach+0x538/0x860 [ 1608.243837][ T2084] device_initial_probe+0x4a/0x60 [ 1608.248882][ T2084] bus_probe_device+0x177/0x3d0 [ 1608.253871][ T2084] device_add+0x399e/0x3f20 [ 1608.258482][ T2084] usb_new_device+0x1bd6/0x2a30 [ 1608.263351][ T2084] hub_event+0x5bc9/0x8890 [ 1608.267786][ T2084] process_one_work+0x121c/0x1fc0 [ 1608.272816][ T2084] worker_thread+0x10cc/0x2740 [ 1608.277593][ T2084] kthread+0x51c/0x560 [ 1608.282116][ T2084] ret_from_fork+0x1f/0x30 [ 1608.286530][ T2084] [ 1608.288876][ T2084] Local variable ----globalval.i@gtco_probe created at: [ 1608.295833][ T2084] gtco_probe+0xee8/0x3930 [ 1608.300372][ T2084] gtco_probe+0xee8/0x3930 [ 1608.304809][ T2084] ===================================================== [ 1608.311769][ T2084] Disabling lock debugging due to kernel taint [ 1608.317953][ T2084] Kernel panic - not syncing: panic_on_warn set ... [ 1608.324551][ T2084] CPU: 0 PID: 2084 Comm: kworker/0:2 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 1608.335158][ T2084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1608.345256][ T2084] Workqueue: usb_hub_wq hub_event [ 1608.350306][ T2084] Call Trace: [ 1608.353625][ T2084] dump_stack+0x21c/0x280 [ 1608.357979][ T2084] panic+0x4c8/0xea7 [ 1608.362004][ T2084] ? add_taint+0x17c/0x210 [ 1608.366436][ T2084] kmsan_report+0x1da/0x1e0 [ 1608.370976][ T2084] __msan_warning+0x5f/0xa0 [ 1608.375781][ T2084] gtco_probe+0x1d62/0x3930 [ 1608.380345][ T2084] ? kmsan_get_metadata+0x116/0x180 [ 1608.385598][ T2084] ? kmsan_get_metadata+0x116/0x180 [ 1608.390824][ T2084] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1608.396657][ T2084] ? store_tabletExecute+0x150/0x150 [ 1608.401967][ T2084] usb_probe_interface+0xfcc/0x1520 [ 1608.407197][ T2084] ? usb_register_driver+0x900/0x900 [ 1608.412896][ T2084] really_probe+0xebd/0x2420 [ 1608.417516][ T2084] driver_probe_device+0x293/0x390 [ 1608.422645][ T2084] __device_attach_driver+0x63f/0x830 [ 1608.428153][ T2084] bus_for_each_drv+0x2ca/0x3f0 [ 1608.433037][ T2084] ? state_synced_show+0x130/0x130 [ 1608.438178][ T2084] __device_attach+0x538/0x860 [ 1608.442984][ T2084] device_initial_probe+0x4a/0x60 [ 1608.448048][ T2084] bus_probe_device+0x177/0x3d0 [ 1608.453026][ T2084] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1608.458873][ T2084] device_add+0x399e/0x3f20 [ 1608.463431][ T2084] usb_set_configuration+0x39cf/0x4010 [ 1608.468943][ T2084] ? usb_set_configuration+0xa61/0x4010 [ 1608.474525][ T2084] ? kmsan_get_shadow_origin_ptr+0x50/0xb0 [ 1608.480391][ T2084] usb_generic_driver_probe+0x138/0x300 [ 1608.486141][ T2084] ? usb_choose_configuration+0xf00/0xf00 [ 1608.491886][ T2084] usb_probe_device+0x317/0x570 [ 1608.496877][ T2084] ? usb_register_device_driver+0x590/0x590 [ 1608.502799][ T2084] really_probe+0xebd/0x2420 [ 1608.507417][ T2084] driver_probe_device+0x293/0x390 [ 1608.512573][ T2084] __device_attach_driver+0x63f/0x830 [ 1608.517996][ T2084] bus_for_each_drv+0x2ca/0x3f0 [ 1608.522870][ T2084] ? state_synced_show+0x130/0x130 [ 1608.528008][ T2084] __device_attach+0x538/0x860 [ 1608.532823][ T2084] device_initial_probe+0x4a/0x60 [ 1608.537906][ T2084] bus_probe_device+0x177/0x3d0 [ 1608.542808][ T2084] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1608.548653][ T2084] device_add+0x399e/0x3f20 [ 1608.553196][ T2084] usb_new_device+0x1bd6/0x2a30 [ 1608.558093][ T2084] hub_event+0x5bc9/0x8890 [ 1608.563171][ T2084] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1608.569283][ T2084] ? kmsan_get_metadata+0x116/0x180 [ 1608.574515][ T2084] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1608.580366][ T2084] ? led_work+0x780/0x780 [ 1608.584724][ T2084] process_one_work+0x121c/0x1fc0 [ 1608.589786][ T2084] worker_thread+0x10cc/0x2740 [ 1608.594596][ T2084] ? kmsan_get_metadata+0x116/0x180 [ 1608.599926][ T2084] kthread+0x51c/0x560 [ 1608.604082][ T2084] ? process_one_work+0x1fc0/0x1fc0 [ 1608.609301][ T2084] ? kthread_blkcg+0x110/0x110 [ 1608.614100][ T2084] ret_from_fork+0x1f/0x30 [ 1608.618984][ T2084] Kernel Offset: disabled [ 1608.623349][ T2084] Rebooting in 86400 seconds..