[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. syzkaller login: [ 142.712456][ T8217] IPVS: ftp: loaded support on port[0] = 21 [ 142.889811][ T8217] chnl_net:caif_netlink_parms(): no params data found [ 142.981525][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.991253][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.001203][ T8217] device bridge_slave_0 entered promiscuous mode [ 143.012862][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.022249][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.034251][ T8217] device bridge_slave_1 entered promiscuous mode [ 143.068557][ T8217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.086881][ T8217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.123748][ T8217] team0: Port device team_slave_0 added [ 143.136497][ T8217] team0: Port device team_slave_1 added [ 143.167554][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.175799][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.205698][ T8217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.222285][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.231404][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.263965][ T8217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.310878][ T8217] device hsr_slave_0 entered promiscuous mode [ 143.319945][ T8217] device hsr_slave_1 entered promiscuous mode [ 143.510230][ T8217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.526441][ T8217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.545003][ T8217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.562281][ T8217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.649931][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.657983][ T8217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.666254][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.674571][ T8217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.757142][ T8217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.779523][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.792044][ T1980] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.804999][ T1980] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.816773][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 143.836146][ T8217] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.858641][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.868575][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.877166][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.895717][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.908647][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.919392][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.927545][ T8426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.954614][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.979718][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.005772][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.017208][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.057936][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.069065][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.080701][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.091527][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.102253][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.124099][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.135532][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.160899][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.197322][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.206499][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.229678][ T8217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.266921][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.278005][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.314111][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.324467][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.338752][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.348462][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.361527][ T8217] device veth0_vlan entered promiscuous mode [ 144.382362][ T8217] device veth1_vlan entered promiscuous mode [ 144.427630][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.437781][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.449477][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.462213][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.480294][ T8217] device veth0_macvtap entered promiscuous mode [ 144.496689][ T8217] device veth1_macvtap entered promiscuous mode [ 144.531792][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.542496][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.555490][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.567581][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.581030][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.604166][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.614076][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.627802][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.649045][ T8217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.661517][ T8217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.672761][ T8217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.686102][ T8217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 144.824854][ C0] ===================================================== [ 144.832120][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 144.833201][ C0] CPU: 0 PID: 8429 Comm: syz-executor352 Not tainted 5.12.0-rc6-syzkaller #0 [ 144.846593][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.846593][ C0] Call Trace: [ 144.846593][ C0] [ 144.846593][ C0] dump_stack+0x24c/0x2e0 [ 144.846593][ C0] kmsan_report+0xfb/0x1e0 [ 144.846593][ C0] __msan_warning+0x5c/0xa0 [ 144.846593][ C0] ip_rcv_core+0xf4c/0x1480 [ 144.846593][ C0] ip_rcv+0xc7/0x820 [ 144.893949][ C0] ? kmsan_get_metadata+0x116/0x180 [ 144.893949][ C0] __netif_receive_skb+0x1ec/0x640 [ 144.893949][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 144.911607][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 144.917628][ C0] process_backlog+0x517/0xbd0 [ 144.923625][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.930921][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 144.937375][ C0] __napi_poll+0x13e/0xca0 [ 144.942287][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 144.949068][ C0] net_rx_action+0x726/0x14a0 [ 144.955337][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 144.961877][ C0] ? net_tx_action+0xd30/0xd30 [ 144.968007][ C0] __do_softirq+0x1b9/0x715 [ 144.972965][ C0] ? idle_cpu+0x9a/0x1d0 [ 144.977170][ C0] ? __irq_exit_rcu+0x83/0x280 [ 144.982020][ C0] do_softirq+0x123/0x1c0 [ 144.986982][ C0] [ 144.990703][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 144.995538][ C0] local_bh_enable+0x36/0x40 [ 145.001928][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 145.008209][ C0] dev_queue_xmit+0x4b/0x60 [ 145.013117][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 145.019186][ C0] packet_sendmsg+0x86ee/0x99d0 [ 145.025185][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.031230][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.038156][ C0] ? process_slab+0x13a8/0x1b70 [ 145.043280][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.048998][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 145.056183][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 145.061069][ C0] ? packet_getsockopt+0x1120/0x1120 [ 145.066990][ C0] __sys_sendmsg+0x714/0x830 [ 145.072025][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.078266][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 145.085582][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 145.091600][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.097610][ C0] __se_sys_sendmsg+0x97/0xb0 [ 145.102442][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 145.107917][ C0] do_syscall_64+0x9f/0x140 [ 145.112790][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.119267][ C0] RIP: 0033:0x443df9 [ 145.124154][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 145.147403][ C0] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.157187][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 145.165712][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 145.174414][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 145.184391][ C0] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 00007ffe87256450 [ 145.193600][ C0] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 0000000000000003 [ 145.202018][ C0] [ 145.205527][ C0] Uninit was stored to memory at: [ 145.211606][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 145.217623][ C0] __msan_chain_origin+0x54/0xa0 [ 145.223329][ C0] iptunnel_xmit+0xbd6/0xf20 [ 145.227661][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 145.233695][ C0] geneve_xmit+0x2139/0x3c40 [ 145.239694][ C0] xmit_one+0x2b6/0x760 [ 145.243395][ C0] __dev_queue_xmit+0x3432/0x4600 [ 145.248185][ C0] dev_queue_xmit+0x4b/0x60 [ 145.254175][ C0] packet_sendmsg+0x86ee/0x99d0 [ 145.260174][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 145.264994][ C0] __sys_sendmsg+0x714/0x830 [ 145.271381][ C0] __se_sys_sendmsg+0x97/0xb0 [ 145.277529][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 145.284140][ C0] do_syscall_64+0x9f/0x140 [ 145.289015][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.295011][ C0] [ 145.297420][ C0] Uninit was created at: [ 145.302233][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 145.309505][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 145.317236][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 145.325443][ C0] __alloc_skb+0x4dd/0xe90 [ 145.330328][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 145.336677][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 145.343283][ C0] packet_sendmsg+0x6a12/0x99d0 [ 145.350021][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 145.356821][ C0] __sys_sendmsg+0x714/0x830 [ 145.361764][ C0] __se_sys_sendmsg+0x97/0xb0 [ 145.367954][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 145.373431][ C0] do_syscall_64+0x9f/0x140 [ 145.378796][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.386013][ C0] ===================================================== [ 145.394664][ C0] Disabling lock debugging due to kernel taint [ 145.404731][ C0] ===================================================== [ 145.413101][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 145.414645][ C0] CPU: 0 PID: 8429 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 145.414645][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.443283][ C0] Call Trace: [ 145.443283][ C0] [ 145.443283][ C0] dump_stack+0x24c/0x2e0 [ 145.443283][ C0] kmsan_report+0xfb/0x1e0 [ 145.443283][ C0] __msan_warning+0x5c/0xa0 [ 145.473312][ C0] ip_rcv_core+0xf5d/0x1480 [ 145.473312][ C0] ip_rcv+0xc7/0x820 [ 145.473312][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.473312][ C0] __netif_receive_skb+0x1ec/0x640 [ 145.473312][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.503286][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 145.503286][ C0] process_backlog+0x517/0xbd0 [ 145.503286][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.503286][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 145.503286][ C0] __napi_poll+0x13e/0xca0 [ 145.533550][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 145.544015][ C0] net_rx_action+0x726/0x14a0 [ 145.548947][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.559155][ C0] ? net_tx_action+0xd30/0xd30 [ 145.566464][ C0] __do_softirq+0x1b9/0x715 [ 145.575179][ C0] ? idle_cpu+0x9a/0x1d0 [ 145.580168][ C0] ? __irq_exit_rcu+0x83/0x280 [ 145.586345][ C0] do_softirq+0x123/0x1c0 [ 145.591194][ C0] [ 145.594532][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 145.603338][ C0] local_bh_enable+0x36/0x40 [ 145.609901][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 145.616508][ C0] dev_queue_xmit+0x4b/0x60 [ 145.621394][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 145.627727][ C0] packet_sendmsg+0x86ee/0x99d0 [ 145.633439][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.640013][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.647483][ C0] ? process_slab+0x13a8/0x1b70 [ 145.653430][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 145.659943][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 145.667407][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 145.673695][ C0] ? packet_getsockopt+0x1120/0x1120 [ 145.673695][ C0] __sys_sendmsg+0x714/0x830 [ 145.684726][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 145.690840][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 145.697055][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 145.704233][ C0] ? kmsan_get_metadata+0x116/0x180 [ 145.709349][ C0] __se_sys_sendmsg+0x97/0xb0 [ 145.715446][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 145.721487][ C0] do_syscall_64+0x9f/0x140 [ 145.726316][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.732328][ C0] RIP: 0033:0x443df9 [ 145.737323][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 145.761094][ C0] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.770791][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 145.780644][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 145.789613][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 145.798327][ C0] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 00007ffe87256450 [ 145.806456][ C0] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 0000000000000003 [ 145.815447][ C0] [ 145.819162][ C0] Uninit was stored to memory at: [ 145.825305][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 145.831418][ C0] __msan_chain_origin+0x54/0xa0 [ 145.833363][ C0] iptunnel_xmit+0xbd6/0xf20 [ 145.842618][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 145.848862][ C0] geneve_xmit+0x2139/0x3c40 [ 145.853834][ C0] xmit_one+0x2b6/0x760 [ 145.860108][ C0] __dev_queue_xmit+0x3432/0x4600 [ 145.866399][ C0] dev_queue_xmit+0x4b/0x60 [ 145.872462][ C0] packet_sendmsg+0x86ee/0x99d0 [ 145.878453][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 145.883498][ C0] __sys_sendmsg+0x714/0x830 [ 145.888354][ C0] __se_sys_sendmsg+0x97/0xb0 [ 145.894373][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 145.899171][ C0] do_syscall_64+0x9f/0x140 [ 145.905171][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.911207][ C0] [ 145.913489][ C0] Uninit was created at: [ 145.919092][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 145.926506][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 145.932834][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 145.941716][ C0] __alloc_skb+0x4dd/0xe90 [ 145.950625][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 145.958226][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 145.965969][ C0] packet_sendmsg+0x6a12/0x99d0 [ 145.972157][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 145.978955][ C0] __sys_sendmsg+0x714/0x830 [ 145.983775][ C0] __se_sys_sendmsg+0x97/0xb0 [ 145.991037][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 145.992253][ C0] do_syscall_64+0x9f/0x140 [ 146.001569][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.008985][ C0] ===================================================== [ 146.018385][ C0] ===================================================== [ 146.027121][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 146.028256][ C0] CPU: 0 PID: 8429 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.043299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.043299][ C0] Call Trace: [ 146.043299][ C0] [ 146.043299][ C0] dump_stack+0x24c/0x2e0 [ 146.043299][ C0] kmsan_report+0xfb/0x1e0 [ 146.073373][ C0] __msan_warning+0x5c/0xa0 [ 146.073373][ C0] ip_rcv_core+0x1068/0x1480 [ 146.073373][ C0] ip_rcv+0xc7/0x820 [ 146.073373][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.073373][ C0] __netif_receive_skb+0x1ec/0x640 [ 146.103283][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.103283][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 146.119137][ C0] process_backlog+0x517/0xbd0 [ 146.126808][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.134605][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 146.140847][ C0] __napi_poll+0x13e/0xca0 [ 146.145338][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.152540][ C0] net_rx_action+0x726/0x14a0 [ 146.157510][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.163514][ C0] ? net_tx_action+0xd30/0xd30 [ 146.169824][ C0] __do_softirq+0x1b9/0x715 [ 146.176157][ C0] ? idle_cpu+0x9a/0x1d0 [ 146.180911][ C0] ? __irq_exit_rcu+0x83/0x280 [ 146.185906][ C0] do_softirq+0x123/0x1c0 [ 146.190722][ C0] [ 146.193565][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 146.199189][ C0] local_bh_enable+0x36/0x40 [ 146.205335][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 146.210272][ C0] dev_queue_xmit+0x4b/0x60 [ 146.216394][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 146.221291][ C0] packet_sendmsg+0x86ee/0x99d0 [ 146.227355][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.233654][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.239317][ C0] ? process_slab+0x13a8/0x1b70 [ 146.244354][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.251796][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.259140][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 146.264096][ C0] ? packet_getsockopt+0x1120/0x1120 [ 146.270456][ C0] __sys_sendmsg+0x714/0x830 [ 146.279003][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.285012][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 146.291042][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 146.298792][ C0] ? kmsan_get_metadata+0x116/0x180 [ 146.305165][ C0] __se_sys_sendmsg+0x97/0xb0 [ 146.310019][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 146.315855][ C0] do_syscall_64+0x9f/0x140 [ 146.320695][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.328421][ C0] RIP: 0033:0x443df9 [ 146.333561][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 146.355759][ C0] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.365512][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 146.375407][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 146.383853][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 146.392434][ C0] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 00007ffe87256450 [ 146.402307][ C0] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 0000000000000003 [ 146.412562][ C0] [ 146.415016][ C0] Uninit was stored to memory at: [ 146.421090][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 146.427087][ C0] __msan_chain_origin+0x54/0xa0 [ 146.431910][ C0] __ip_local_out+0x479/0x840 [ 146.438511][ C0] ip_local_out+0xa1/0x1e0 [ 146.443492][ C0] iptunnel_xmit+0x931/0xf20 [ 146.448341][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 146.456650][ C0] geneve_xmit+0x2139/0x3c40 [ 146.462716][ C0] xmit_one+0x2b6/0x760 [ 146.467564][ C0] __dev_queue_xmit+0x3432/0x4600 [ 146.472435][ C0] dev_queue_xmit+0x4b/0x60 [ 146.477380][ C0] packet_sendmsg+0x86ee/0x99d0 [ 146.483511][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 146.488330][ C0] __sys_sendmsg+0x714/0x830 [ 146.494327][ C0] __se_sys_sendmsg+0x97/0xb0 [ 146.499124][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 146.503921][ C0] do_syscall_64+0x9f/0x140 [ 146.509973][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.515983][ C0] [ 146.518372][ C0] Uninit was stored to memory at: [ 146.523335][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 146.530387][ C0] __msan_chain_origin+0x54/0xa0 [ 146.535206][ C0] iptunnel_xmit+0xbd6/0xf20 [ 146.539989][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 146.547479][ C0] geneve_xmit+0x2139/0x3c40 [ 146.553335][ C0] xmit_one+0x2b6/0x760 [ 146.557114][ C0] __dev_queue_xmit+0x3432/0x4600 [ 146.564757][ C0] dev_queue_xmit+0x4b/0x60 [ 146.570955][ C0] packet_sendmsg+0x86ee/0x99d0 [ 146.577304][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 146.583570][ C0] __sys_sendmsg+0x714/0x830 [ 146.588917][ C0] __se_sys_sendmsg+0x97/0xb0 [ 146.594933][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 146.599766][ C0] do_syscall_64+0x9f/0x140 [ 146.606165][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.613299][ C0] [ 146.616063][ C0] Uninit was created at: [ 146.620998][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.627288][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 146.632439][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.640107][ C0] __alloc_skb+0x4dd/0xe90 [ 146.645384][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 146.651440][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 146.657605][ C0] packet_sendmsg+0x6a12/0x99d0 [ 146.663290][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 146.668921][ C0] __sys_sendmsg+0x714/0x830 [ 146.675156][ C0] __se_sys_sendmsg+0x97/0xb0 [ 146.681204][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 146.687533][ C0] do_syscall_64+0x9f/0x140 [ 146.692397][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.698437][ C0] ===================================================== executing program [ 146.770775][ C1] ===================================================== [ 146.773192][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 146.773192][ C1] CPU: 1 PID: 8431 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.773192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.773192][ C1] Call Trace: [ 146.773192][ C1] [ 146.773192][ C1] dump_stack+0x24c/0x2e0 [ 146.773192][ C1] kmsan_report+0xfb/0x1e0 [ 146.773192][ C1] __msan_warning+0x5c/0xa0 [ 146.773192][ C1] ip_rcv_core+0xf4c/0x1480 [ 146.773192][ C1] ip_rcv+0xc7/0x820 [ 146.773192][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.773192][ C1] __netif_receive_skb+0x1ec/0x640 [ 146.773192][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.773192][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 146.773192][ C1] process_backlog+0x517/0xbd0 [ 146.773192][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 146.773192][ C1] __napi_poll+0x13e/0xca0 [ 146.773192][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.773192][ C1] net_rx_action+0x726/0x14a0 [ 146.773192][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.773192][ C1] ? net_tx_action+0xd30/0xd30 [ 146.773192][ C1] __do_softirq+0x1b9/0x715 [ 146.773192][ C1] ? idle_cpu+0x9a/0x1d0 [ 146.773192][ C1] ? __irq_exit_rcu+0x83/0x280 [ 146.773192][ C1] do_softirq+0x123/0x1c0 [ 146.773192][ C1] [ 146.773192][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 146.773192][ C1] local_bh_enable+0x36/0x40 [ 146.773192][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 146.773192][ C1] dev_queue_xmit+0x4b/0x60 [ 146.773192][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 146.773192][ C1] packet_sendmsg+0x86ee/0x99d0 [ 146.773192][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.773192][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.773192][ C1] ? process_slab+0x13a8/0x1b70 [ 146.773192][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.773192][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.773192][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 146.773192][ C1] ? packet_getsockopt+0x1120/0x1120 [ 146.773192][ C1] __sys_sendmsg+0x714/0x830 [ 146.773192][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 146.773192][ C1] ? up_read+0x40/0x2b0 [ 146.773192][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.773192][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.773192][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.773192][ C1] __se_sys_sendmsg+0x97/0xb0 [ 146.773192][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 146.773192][ C1] do_syscall_64+0x9f/0x140 [ 146.773192][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.773192][ C1] RIP: 0033:0x443df9 [ 146.773192][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 146.773192][ C1] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.773192][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 146.773192][ C1] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 146.773192][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 146.773192][ C1] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 00000000000235f8 [ 146.773192][ C1] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 146.773192][ C1] [ 146.773192][ C1] Uninit was stored to memory at: [ 146.773192][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 146.773192][ C1] __msan_chain_origin+0x54/0xa0 [ 146.773192][ C1] iptunnel_xmit+0xbd6/0xf20 [ 146.773192][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 146.773192][ C1] geneve_xmit+0x2139/0x3c40 [ 146.773192][ C1] xmit_one+0x2b6/0x760 [ 146.773192][ C1] __dev_queue_xmit+0x3432/0x4600 [ 146.773192][ C1] dev_queue_xmit+0x4b/0x60 [ 146.773192][ C1] packet_sendmsg+0x86ee/0x99d0 [ 146.773192][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 146.773192][ C1] __sys_sendmsg+0x714/0x830 [ 146.773192][ C1] __se_sys_sendmsg+0x97/0xb0 [ 146.773192][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 146.773192][ C1] do_syscall_64+0x9f/0x140 [ 146.773192][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.773192][ C1] [ 146.773192][ C1] Uninit was created at: [ 146.773192][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.773192][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.773192][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.773192][ C1] __alloc_skb+0x4dd/0xe90 [ 146.773192][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 146.773192][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 146.773192][ C1] packet_sendmsg+0x6a12/0x99d0 [ 146.773192][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 146.773192][ C1] __sys_sendmsg+0x714/0x830 [ 146.773192][ C1] __se_sys_sendmsg+0x97/0xb0 [ 146.773192][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 146.773192][ C1] do_syscall_64+0x9f/0x140 [ 146.773192][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.773192][ C1] ===================================================== [ 147.348253][ C1] ===================================================== [ 147.356097][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 147.358157][ C1] CPU: 1 PID: 8431 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.358157][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.358157][ C1] Call Trace: [ 147.358157][ C1] [ 147.358157][ C1] dump_stack+0x24c/0x2e0 [ 147.358157][ C1] kmsan_report+0xfb/0x1e0 [ 147.358157][ C1] __msan_warning+0x5c/0xa0 [ 147.358157][ C1] ip_rcv_core+0xf5d/0x1480 [ 147.358157][ C1] ip_rcv+0xc7/0x820 [ 147.358157][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.358157][ C1] __netif_receive_skb+0x1ec/0x640 [ 147.358157][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.358157][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 147.358157][ C1] process_backlog+0x517/0xbd0 [ 147.358157][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 147.358157][ C1] __napi_poll+0x13e/0xca0 [ 147.358157][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.358157][ C1] net_rx_action+0x726/0x14a0 [ 147.358157][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.358157][ C1] ? net_tx_action+0xd30/0xd30 [ 147.358157][ C1] __do_softirq+0x1b9/0x715 [ 147.358157][ C1] ? idle_cpu+0x9a/0x1d0 [ 147.358157][ C1] ? __irq_exit_rcu+0x83/0x280 [ 147.358157][ C1] do_softirq+0x123/0x1c0 [ 147.358157][ C1] [ 147.358157][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 147.358157][ C1] local_bh_enable+0x36/0x40 [ 147.358157][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 147.358157][ C1] dev_queue_xmit+0x4b/0x60 [ 147.358157][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 147.358157][ C1] packet_sendmsg+0x86ee/0x99d0 [ 147.358157][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.358157][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.358157][ C1] ? process_slab+0x13a8/0x1b70 [ 147.358157][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.358157][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.358157][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.358157][ C1] ? packet_getsockopt+0x1120/0x1120 [ 147.358157][ C1] __sys_sendmsg+0x714/0x830 [ 147.358157][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 147.358157][ C1] ? up_read+0x40/0x2b0 [ 147.358157][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.358157][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.358157][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.358157][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.358157][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.358157][ C1] do_syscall_64+0x9f/0x140 [ 147.358157][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.358157][ C1] RIP: 0033:0x443df9 [ 147.358157][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 147.358157][ C1] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.358157][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 147.358157][ C1] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 147.358157][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 147.358157][ C1] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 00000000000235f8 [ 147.358157][ C1] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 147.358157][ C1] [ 147.358157][ C1] Uninit was stored to memory at: [ 147.358157][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 147.358157][ C1] __msan_chain_origin+0x54/0xa0 [ 147.358157][ C1] iptunnel_xmit+0xbd6/0xf20 [ 147.358157][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 147.358157][ C1] geneve_xmit+0x2139/0x3c40 [ 147.358157][ C1] xmit_one+0x2b6/0x760 [ 147.358157][ C1] __dev_queue_xmit+0x3432/0x4600 [ 147.358157][ C1] dev_queue_xmit+0x4b/0x60 [ 147.358157][ C1] packet_sendmsg+0x86ee/0x99d0 [ 147.358157][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.358157][ C1] __sys_sendmsg+0x714/0x830 [ 147.358157][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.358157][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.358157][ C1] do_syscall_64+0x9f/0x140 [ 147.358157][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.358157][ C1] [ 147.358157][ C1] Uninit was created at: [ 147.358157][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.358157][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 147.358157][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.358157][ C1] __alloc_skb+0x4dd/0xe90 [ 147.358157][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 147.358157][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 147.358157][ C1] packet_sendmsg+0x6a12/0x99d0 [ 147.358157][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.358157][ C1] __sys_sendmsg+0x714/0x830 [ 147.358157][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.358157][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.358157][ C1] do_syscall_64+0x9f/0x140 [ 147.358157][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.358157][ C1] ===================================================== [ 147.956947][ C1] ===================================================== [ 147.965204][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 147.966896][ C1] CPU: 1 PID: 8431 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.966896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.966896][ C1] Call Trace: [ 147.966896][ C1] [ 147.966896][ C1] dump_stack+0x24c/0x2e0 [ 147.966896][ C1] kmsan_report+0xfb/0x1e0 [ 147.966896][ C1] __msan_warning+0x5c/0xa0 [ 147.966896][ C1] ip_rcv_core+0x1068/0x1480 [ 147.966896][ C1] ip_rcv+0xc7/0x820 [ 147.966896][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.966896][ C1] __netif_receive_skb+0x1ec/0x640 [ 147.966896][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.966896][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 147.966896][ C1] process_backlog+0x517/0xbd0 [ 147.966896][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 147.966896][ C1] __napi_poll+0x13e/0xca0 [ 147.966896][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.966896][ C1] net_rx_action+0x726/0x14a0 [ 147.966896][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.966896][ C1] ? net_tx_action+0xd30/0xd30 [ 147.966896][ C1] __do_softirq+0x1b9/0x715 [ 147.966896][ C1] ? idle_cpu+0x9a/0x1d0 [ 147.966896][ C1] ? __irq_exit_rcu+0x83/0x280 [ 147.966896][ C1] do_softirq+0x123/0x1c0 [ 147.966896][ C1] [ 147.966896][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 147.966896][ C1] local_bh_enable+0x36/0x40 [ 147.966896][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 147.966896][ C1] dev_queue_xmit+0x4b/0x60 [ 147.966896][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 147.966896][ C1] packet_sendmsg+0x86ee/0x99d0 [ 147.966896][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.966896][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.966896][ C1] ? process_slab+0x13a8/0x1b70 [ 147.966896][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.966896][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.966896][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.966896][ C1] ? packet_getsockopt+0x1120/0x1120 [ 147.966896][ C1] __sys_sendmsg+0x714/0x830 [ 147.966896][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 147.966896][ C1] ? up_read+0x40/0x2b0 [ 147.966896][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.966896][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.966896][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.966896][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.966896][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.966896][ C1] do_syscall_64+0x9f/0x140 [ 147.966896][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.966896][ C1] RIP: 0033:0x443df9 [ 147.966896][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 147.966896][ C1] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.966896][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 147.966896][ C1] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 147.966896][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 147.966896][ C1] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 00000000000235f8 [ 147.966896][ C1] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 147.966896][ C1] [ 147.966896][ C1] Uninit was stored to memory at: [ 147.966896][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 147.966896][ C1] __msan_chain_origin+0x54/0xa0 [ 147.966896][ C1] __ip_local_out+0x479/0x840 [ 147.966896][ C1] ip_local_out+0xa1/0x1e0 [ 147.966896][ C1] iptunnel_xmit+0x931/0xf20 [ 147.966896][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 147.966896][ C1] geneve_xmit+0x2139/0x3c40 [ 147.966896][ C1] xmit_one+0x2b6/0x760 [ 147.966896][ C1] __dev_queue_xmit+0x3432/0x4600 [ 147.966896][ C1] dev_queue_xmit+0x4b/0x60 [ 147.966896][ C1] packet_sendmsg+0x86ee/0x99d0 [ 147.966896][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.966896][ C1] __sys_sendmsg+0x714/0x830 [ 147.966896][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.966896][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.966896][ C1] do_syscall_64+0x9f/0x140 [ 147.966896][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.966896][ C1] [ 147.966896][ C1] Uninit was stored to memory at: [ 147.966896][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 147.966896][ C1] __msan_chain_origin+0x54/0xa0 [ 147.966896][ C1] iptunnel_xmit+0xbd6/0xf20 [ 147.966896][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 147.966896][ C1] geneve_xmit+0x2139/0x3c40 [ 147.966896][ C1] xmit_one+0x2b6/0x760 [ 147.966896][ C1] __dev_queue_xmit+0x3432/0x4600 [ 147.966896][ C1] dev_queue_xmit+0x4b/0x60 [ 147.966896][ C1] packet_sendmsg+0x86ee/0x99d0 [ 147.966896][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.966896][ C1] __sys_sendmsg+0x714/0x830 [ 147.966896][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.966896][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.966896][ C1] do_syscall_64+0x9f/0x140 [ 147.966896][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.966896][ C1] [ 147.966896][ C1] Uninit was created at: [ 147.966896][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.966896][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 147.966896][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.966896][ C1] __alloc_skb+0x4dd/0xe90 [ 147.966896][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 147.966896][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 147.966896][ C1] packet_sendmsg+0x6a12/0x99d0 [ 147.966896][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.966896][ C1] __sys_sendmsg+0x714/0x830 executing program [ 147.966896][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.966896][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.966896][ C1] do_syscall_64+0x9f/0x140 [ 147.966896][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.966896][ C1] ===================================================== [ 148.690806][ C1] ===================================================== [ 148.693178][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 148.693178][ C1] CPU: 1 PID: 8432 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.693178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.693178][ C1] Call Trace: [ 148.693178][ C1] [ 148.693178][ C1] dump_stack+0x24c/0x2e0 [ 148.693178][ C1] kmsan_report+0xfb/0x1e0 [ 148.753390][ C1] __msan_warning+0x5c/0xa0 [ 148.753390][ C1] ip_rcv_core+0xf4c/0x1480 [ 148.753390][ C1] ip_rcv+0xc7/0x820 [ 148.753390][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.753390][ C1] __netif_receive_skb+0x1ec/0x640 [ 148.753390][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.753390][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 148.753390][ C1] process_backlog+0x517/0xbd0 [ 148.753390][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 148.753390][ C1] __napi_poll+0x13e/0xca0 [ 148.753390][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.753390][ C1] net_rx_action+0x726/0x14a0 [ 148.753390][ C1] ? net_tx_action+0xd30/0xd30 [ 148.753390][ C1] __do_softirq+0x1b9/0x715 [ 148.753390][ C1] ? idle_cpu+0x9a/0x1d0 [ 148.753390][ C1] ? __irq_exit_rcu+0x83/0x280 [ 148.753390][ C1] do_softirq+0x123/0x1c0 [ 148.753390][ C1] [ 148.753390][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 148.753390][ C1] local_bh_enable+0x36/0x40 [ 148.753390][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 148.753390][ C1] dev_queue_xmit+0x4b/0x60 [ 148.753390][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 148.753390][ C1] packet_sendmsg+0x86ee/0x99d0 [ 148.753390][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.753390][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.753390][ C1] ? process_slab+0x13a8/0x1b70 [ 148.753390][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.753390][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.753390][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 148.753390][ C1] ? packet_getsockopt+0x1120/0x1120 [ 148.753390][ C1] __sys_sendmsg+0x714/0x830 [ 148.753390][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.753390][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 148.753390][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 148.753390][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.753390][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.753390][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.753390][ C1] do_syscall_64+0x9f/0x140 [ 148.753390][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.753390][ C1] RIP: 0033:0x443df9 [ 148.753390][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 148.753390][ C1] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.753390][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 148.753390][ C1] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 148.753390][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 148.753390][ C1] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 0000000000023da0 [ 148.753390][ C1] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 148.753390][ C1] [ 148.753390][ C1] Uninit was stored to memory at: [ 148.753390][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 148.753390][ C1] __msan_chain_origin+0x54/0xa0 [ 148.753390][ C1] iptunnel_xmit+0xbd6/0xf20 [ 148.753390][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 148.753390][ C1] geneve_xmit+0x2139/0x3c40 [ 148.753390][ C1] xmit_one+0x2b6/0x760 [ 148.753390][ C1] __dev_queue_xmit+0x3432/0x4600 [ 148.753390][ C1] dev_queue_xmit+0x4b/0x60 [ 148.753390][ C1] packet_sendmsg+0x86ee/0x99d0 [ 148.753390][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 148.753390][ C1] __sys_sendmsg+0x714/0x830 [ 148.753390][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.753390][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.753390][ C1] do_syscall_64+0x9f/0x140 [ 148.753390][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.753390][ C1] [ 148.753390][ C1] Uninit was created at: [ 148.753390][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.753390][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 148.753390][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.753390][ C1] __alloc_skb+0x4dd/0xe90 [ 148.753390][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 148.753390][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 148.753390][ C1] packet_sendmsg+0x6a12/0x99d0 [ 148.753390][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 148.753390][ C1] __sys_sendmsg+0x714/0x830 [ 148.753390][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.753390][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.753390][ C1] do_syscall_64+0x9f/0x140 [ 148.753390][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.753390][ C1] ===================================================== [ 149.276833][ C1] ===================================================== [ 149.284236][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 149.286764][ C1] CPU: 1 PID: 8432 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.286764][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.286764][ C1] Call Trace: [ 149.286764][ C1] [ 149.286764][ C1] dump_stack+0x24c/0x2e0 [ 149.286764][ C1] kmsan_report+0xfb/0x1e0 [ 149.286764][ C1] __msan_warning+0x5c/0xa0 [ 149.286764][ C1] ip_rcv_core+0xf5d/0x1480 [ 149.286764][ C1] ip_rcv+0xc7/0x820 [ 149.286764][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.286764][ C1] __netif_receive_skb+0x1ec/0x640 [ 149.286764][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.286764][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 149.286764][ C1] process_backlog+0x517/0xbd0 [ 149.286764][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 149.286764][ C1] __napi_poll+0x13e/0xca0 [ 149.286764][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.286764][ C1] net_rx_action+0x726/0x14a0 [ 149.286764][ C1] ? net_tx_action+0xd30/0xd30 [ 149.286764][ C1] __do_softirq+0x1b9/0x715 [ 149.286764][ C1] ? idle_cpu+0x9a/0x1d0 [ 149.286764][ C1] ? __irq_exit_rcu+0x83/0x280 [ 149.286764][ C1] do_softirq+0x123/0x1c0 [ 149.286764][ C1] [ 149.286764][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 149.286764][ C1] local_bh_enable+0x36/0x40 [ 149.286764][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 149.286764][ C1] dev_queue_xmit+0x4b/0x60 [ 149.286764][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 149.286764][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.286764][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.286764][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.286764][ C1] ? process_slab+0x13a8/0x1b70 [ 149.286764][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.286764][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.286764][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.286764][ C1] ? packet_getsockopt+0x1120/0x1120 [ 149.286764][ C1] __sys_sendmsg+0x714/0x830 [ 149.286764][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.286764][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 149.286764][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 149.286764][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.286764][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.286764][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.286764][ C1] do_syscall_64+0x9f/0x140 [ 149.286764][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.286764][ C1] RIP: 0033:0x443df9 [ 149.286764][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 149.286764][ C1] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.286764][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 149.286764][ C1] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 149.286764][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 149.286764][ C1] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 0000000000023da0 [ 149.286764][ C1] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 149.286764][ C1] [ 149.286764][ C1] Uninit was stored to memory at: [ 149.286764][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 149.286764][ C1] __msan_chain_origin+0x54/0xa0 [ 149.286764][ C1] iptunnel_xmit+0xbd6/0xf20 [ 149.286764][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 149.286764][ C1] geneve_xmit+0x2139/0x3c40 [ 149.286764][ C1] xmit_one+0x2b6/0x760 [ 149.286764][ C1] __dev_queue_xmit+0x3432/0x4600 [ 149.286764][ C1] dev_queue_xmit+0x4b/0x60 [ 149.286764][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.286764][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.286764][ C1] __sys_sendmsg+0x714/0x830 [ 149.286764][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.286764][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.286764][ C1] do_syscall_64+0x9f/0x140 [ 149.286764][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.286764][ C1] [ 149.286764][ C1] Uninit was created at: [ 149.286764][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.286764][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 149.286764][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.286764][ C1] __alloc_skb+0x4dd/0xe90 [ 149.286764][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 149.286764][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 149.286764][ C1] packet_sendmsg+0x6a12/0x99d0 [ 149.286764][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.286764][ C1] __sys_sendmsg+0x714/0x830 [ 149.286764][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.286764][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.286764][ C1] do_syscall_64+0x9f/0x140 [ 149.286764][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.286764][ C1] ===================================================== [ 149.882103][ C1] ===================================================== [ 149.889642][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 149.892053][ C1] CPU: 1 PID: 8432 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.892053][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.892053][ C1] Call Trace: [ 149.892053][ C1] [ 149.892053][ C1] dump_stack+0x24c/0x2e0 [ 149.892053][ C1] kmsan_report+0xfb/0x1e0 [ 149.892053][ C1] __msan_warning+0x5c/0xa0 [ 149.892053][ C1] ip_rcv_core+0x1068/0x1480 [ 149.892053][ C1] ip_rcv+0xc7/0x820 [ 149.892053][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.892053][ C1] __netif_receive_skb+0x1ec/0x640 [ 149.892053][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.892053][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 149.892053][ C1] process_backlog+0x517/0xbd0 [ 149.892053][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 149.892053][ C1] __napi_poll+0x13e/0xca0 [ 149.892053][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.892053][ C1] net_rx_action+0x726/0x14a0 [ 149.892053][ C1] ? net_tx_action+0xd30/0xd30 [ 149.892053][ C1] __do_softirq+0x1b9/0x715 [ 149.892053][ C1] ? idle_cpu+0x9a/0x1d0 [ 149.892053][ C1] ? __irq_exit_rcu+0x83/0x280 [ 149.892053][ C1] do_softirq+0x123/0x1c0 [ 149.892053][ C1] [ 149.892053][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 149.892053][ C1] local_bh_enable+0x36/0x40 [ 149.892053][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 149.892053][ C1] dev_queue_xmit+0x4b/0x60 [ 149.892053][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 149.892053][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.892053][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.892053][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.892053][ C1] ? process_slab+0x13a8/0x1b70 [ 149.892053][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.892053][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.892053][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.892053][ C1] ? packet_getsockopt+0x1120/0x1120 [ 149.892053][ C1] __sys_sendmsg+0x714/0x830 [ 149.892053][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.892053][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 149.892053][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 149.892053][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.892053][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.892053][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.892053][ C1] do_syscall_64+0x9f/0x140 [ 149.892053][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.892053][ C1] RIP: 0033:0x443df9 [ 149.892053][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 149.892053][ C1] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.892053][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 149.892053][ C1] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 149.892053][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 149.892053][ C1] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 0000000000023da0 [ 149.892053][ C1] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 149.892053][ C1] [ 149.892053][ C1] Uninit was stored to memory at: [ 149.892053][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 149.892053][ C1] __msan_chain_origin+0x54/0xa0 [ 149.892053][ C1] __ip_local_out+0x479/0x840 [ 149.892053][ C1] ip_local_out+0xa1/0x1e0 [ 149.892053][ C1] iptunnel_xmit+0x931/0xf20 [ 149.892053][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 149.892053][ C1] geneve_xmit+0x2139/0x3c40 [ 149.892053][ C1] xmit_one+0x2b6/0x760 [ 149.892053][ C1] __dev_queue_xmit+0x3432/0x4600 [ 149.892053][ C1] dev_queue_xmit+0x4b/0x60 [ 149.892053][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.892053][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.892053][ C1] __sys_sendmsg+0x714/0x830 [ 149.892053][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.892053][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.892053][ C1] do_syscall_64+0x9f/0x140 [ 149.892053][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.892053][ C1] [ 149.892053][ C1] Uninit was stored to memory at: [ 149.892053][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 149.892053][ C1] __msan_chain_origin+0x54/0xa0 [ 149.892053][ C1] iptunnel_xmit+0xbd6/0xf20 [ 149.892053][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 149.892053][ C1] geneve_xmit+0x2139/0x3c40 [ 149.892053][ C1] xmit_one+0x2b6/0x760 [ 149.892053][ C1] __dev_queue_xmit+0x3432/0x4600 [ 149.892053][ C1] dev_queue_xmit+0x4b/0x60 [ 149.892053][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.892053][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.892053][ C1] __sys_sendmsg+0x714/0x830 [ 149.892053][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.892053][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.892053][ C1] do_syscall_64+0x9f/0x140 [ 149.892053][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.892053][ C1] [ 149.892053][ C1] Uninit was created at: [ 149.892053][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.892053][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 149.892053][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.892053][ C1] __alloc_skb+0x4dd/0xe90 [ 149.892053][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 149.892053][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 149.892053][ C1] packet_sendmsg+0x6a12/0x99d0 [ 149.892053][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.892053][ C1] __sys_sendmsg+0x714/0x830 [ 149.892053][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.892053][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.892053][ C1] do_syscall_64+0x9f/0x140 [ 149.892053][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.892053][ C1] ===================================================== executing program [ 150.603100][ C0] ===================================================== [ 150.603179][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 150.603179][ C0] CPU: 0 PID: 11 Comm: ksoftirqd/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 150.603179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.603179][ C0] Call Trace: [ 150.643271][ C0] dump_stack+0x24c/0x2e0 [ 150.643271][ C0] kmsan_report+0xfb/0x1e0 [ 150.643271][ C0] __msan_warning+0x5c/0xa0 [ 150.643271][ C0] ip_rcv_core+0xf4c/0x1480 [ 150.643271][ C0] ip_rcv+0xc7/0x820 [ 150.643271][ C0] ? kmsan_get_metadata+0x116/0x180 [ 150.677976][ C0] __netif_receive_skb+0x1ec/0x640 [ 150.683989][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.691438][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 150.698954][ C0] process_backlog+0x517/0xbd0 [ 150.703893][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 150.710172][ C0] __napi_poll+0x13e/0xca0 [ 150.716324][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.723803][ C0] net_rx_action+0x726/0x14a0 [ 150.728879][ C0] ? net_tx_action+0xd30/0xd30 [ 150.735511][ C0] __do_softirq+0x1b9/0x715 [ 150.740522][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 150.745357][ C0] run_ksoftirqd+0x20/0x40 [ 150.751762][ C0] smpboot_thread_fn+0x5f5/0xa90 [ 150.757322][ C0] kthread+0x521/0x560 [ 150.763607][ C0] ? cpu_report_death+0x1a0/0x1a0 [ 150.769665][ C0] ? kthread_blkcg+0x110/0x110 [ 150.775963][ C0] ret_from_fork+0x1f/0x30 [ 150.782237][ C0] [ 150.786049][ C0] Uninit was stored to memory at: [ 150.790763][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 150.798011][ C0] __msan_chain_origin+0x54/0xa0 [ 150.802813][ C0] iptunnel_xmit+0xbd6/0xf20 [ 150.807654][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 150.813895][ C0] geneve_xmit+0x2139/0x3c40 [ 150.820099][ C0] xmit_one+0x2b6/0x760 [ 150.825175][ C0] __dev_queue_xmit+0x3432/0x4600 [ 150.831359][ C0] dev_queue_xmit+0x4b/0x60 [ 150.837439][ C0] packet_sendmsg+0x86ee/0x99d0 [ 150.843406][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 150.848567][ C0] __sys_sendmsg+0x714/0x830 [ 150.853435][ C0] __se_sys_sendmsg+0x97/0xb0 [ 150.859821][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 150.864891][ C0] do_syscall_64+0x9f/0x140 [ 150.869839][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.875897][ C0] [ 150.878315][ C0] Uninit was created at: [ 150.884356][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 150.891931][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 150.896804][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 150.904195][ C0] __alloc_skb+0x4dd/0xe90 [ 150.910240][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 150.915043][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 150.921125][ C0] packet_sendmsg+0x6a12/0x99d0 [ 150.927368][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 150.933640][ C0] __sys_sendmsg+0x714/0x830 [ 150.939716][ C0] __se_sys_sendmsg+0x97/0xb0 [ 150.945933][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 150.951062][ C0] do_syscall_64+0x9f/0x140 [ 150.957353][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.963552][ C0] ===================================================== [ 150.972542][ C0] ===================================================== [ 150.981425][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 150.982497][ C0] CPU: 0 PID: 11 Comm: ksoftirqd/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 150.982497][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.982497][ C0] Call Trace: [ 151.013471][ C0] dump_stack+0x24c/0x2e0 [ 151.013471][ C0] kmsan_report+0xfb/0x1e0 [ 151.013471][ C0] __msan_warning+0x5c/0xa0 [ 151.013471][ C0] ip_rcv_core+0xf5d/0x1480 [ 151.037508][ C0] ip_rcv+0xc7/0x820 [ 151.042495][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.048531][ C0] __netif_receive_skb+0x1ec/0x640 [ 151.054702][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.062056][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 151.068347][ C0] process_backlog+0x517/0xbd0 [ 151.073518][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 151.079591][ C0] __napi_poll+0x13e/0xca0 [ 151.085991][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.092279][ C0] net_rx_action+0x726/0x14a0 [ 151.098466][ C0] ? net_tx_action+0xd30/0xd30 [ 151.103444][ C0] __do_softirq+0x1b9/0x715 [ 151.108500][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 151.117487][ C0] run_ksoftirqd+0x20/0x40 [ 151.122484][ C0] smpboot_thread_fn+0x5f5/0xa90 [ 151.128574][ C0] kthread+0x521/0x560 [ 151.132227][ C0] ? cpu_report_death+0x1a0/0x1a0 [ 151.138833][ C0] ? kthread_blkcg+0x110/0x110 [ 151.143675][ C0] ret_from_fork+0x1f/0x30 [ 151.148545][ C0] [ 151.151073][ C0] Uninit was stored to memory at: [ 151.157451][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 151.163645][ C0] __msan_chain_origin+0x54/0xa0 [ 151.169877][ C0] iptunnel_xmit+0xbd6/0xf20 [ 151.174101][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 151.180200][ C0] geneve_xmit+0x2139/0x3c40 [ 151.185000][ C0] xmit_one+0x2b6/0x760 [ 151.189844][ C0] __dev_queue_xmit+0x3432/0x4600 [ 151.195987][ C0] dev_queue_xmit+0x4b/0x60 [ 151.200822][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.207108][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.212169][ C0] __sys_sendmsg+0x714/0x830 [ 151.217162][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.223305][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.228337][ C0] do_syscall_64+0x9f/0x140 [ 151.233328][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.239533][ C0] [ 151.242144][ C0] Uninit was created at: [ 151.246985][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.254349][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 151.259202][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.265244][ C0] __alloc_skb+0x4dd/0xe90 [ 151.271471][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 151.277786][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 151.284261][ C0] packet_sendmsg+0x6a12/0x99d0 [ 151.290556][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.296794][ C0] __sys_sendmsg+0x714/0x830 [ 151.303406][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.310070][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.317507][ C0] do_syscall_64+0x9f/0x140 [ 151.322496][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.328729][ C0] ===================================================== [ 151.337935][ C0] ===================================================== [ 151.345585][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 151.347865][ C0] CPU: 0 PID: 11 Comm: ksoftirqd/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.347865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.347865][ C0] Call Trace: [ 151.347865][ C0] dump_stack+0x24c/0x2e0 [ 151.347865][ C0] kmsan_report+0xfb/0x1e0 [ 151.347865][ C0] __msan_warning+0x5c/0xa0 [ 151.347865][ C0] ip_rcv_core+0x1068/0x1480 [ 151.347865][ C0] ip_rcv+0xc7/0x820 [ 151.402735][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.407758][ C0] __netif_receive_skb+0x1ec/0x640 [ 151.413999][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.420165][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 151.428157][ C0] process_backlog+0x517/0xbd0 [ 151.433424][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 151.439603][ C0] __napi_poll+0x13e/0xca0 [ 151.443315][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.449936][ C0] net_rx_action+0x726/0x14a0 [ 151.459129][ C0] ? net_tx_action+0xd30/0xd30 [ 151.466641][ C0] __do_softirq+0x1b9/0x715 [ 151.474357][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 151.480883][ C0] run_ksoftirqd+0x20/0x40 [ 151.488376][ C0] smpboot_thread_fn+0x5f5/0xa90 [ 151.494787][ C0] kthread+0x521/0x560 [ 151.501085][ C0] ? cpu_report_death+0x1a0/0x1a0 [ 151.508798][ C0] ? kthread_blkcg+0x110/0x110 [ 151.513864][ C0] ret_from_fork+0x1f/0x30 [ 151.518735][ C0] [ 151.522354][ C0] Uninit was stored to memory at: [ 151.527229][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 151.533475][ C0] __msan_chain_origin+0x54/0xa0 [ 151.541122][ C0] __ip_local_out+0x479/0x840 [ 151.546018][ C0] ip_local_out+0xa1/0x1e0 [ 151.551117][ C0] iptunnel_xmit+0x931/0xf20 [ 151.557486][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 151.564803][ C0] geneve_xmit+0x2139/0x3c40 [ 151.569663][ C0] xmit_one+0x2b6/0x760 [ 151.573548][ C0] __dev_queue_xmit+0x3432/0x4600 [ 151.581042][ C0] dev_queue_xmit+0x4b/0x60 [ 151.587278][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.592183][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.604415][ C0] __sys_sendmsg+0x714/0x830 [ 151.613379][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.620853][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.628709][ C0] do_syscall_64+0x9f/0x140 [ 151.636258][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.643897][ C0] [ 151.647661][ C0] Uninit was stored to memory at: [ 151.653827][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 151.661490][ C0] __msan_chain_origin+0x54/0xa0 [ 151.668980][ C0] iptunnel_xmit+0xbd6/0xf20 [ 151.673842][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 151.681377][ C0] geneve_xmit+0x2139/0x3c40 [ 151.686233][ C0] xmit_one+0x2b6/0x760 [ 151.691258][ C0] __dev_queue_xmit+0x3432/0x4600 [ 151.696223][ C0] dev_queue_xmit+0x4b/0x60 [ 151.702608][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.708713][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.716034][ C0] __sys_sendmsg+0x714/0x830 [ 151.722115][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.727311][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.733692][ C0] do_syscall_64+0x9f/0x140 [ 151.738542][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.745789][ C0] [ 151.748197][ C0] Uninit was created at: [ 151.752980][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.759004][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 151.763972][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.771202][ C0] __alloc_skb+0x4dd/0xe90 [ 151.775998][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 151.783389][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 151.789629][ C0] packet_sendmsg+0x6a12/0x99d0 [ 151.794609][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.800789][ C0] __sys_sendmsg+0x714/0x830 executing program [ 151.807669][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.812592][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.818761][ C0] do_syscall_64+0x9f/0x140 [ 151.823750][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.833408][ C0] ===================================================== [ 151.873582][ C0] ===================================================== [ 151.880857][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 151.883169][ C0] CPU: 0 PID: 8434 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.883169][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.883169][ C0] Call Trace: [ 151.883169][ C0] [ 151.883169][ C0] dump_stack+0x24c/0x2e0 [ 151.883169][ C0] kmsan_report+0xfb/0x1e0 [ 151.923320][ C0] __msan_warning+0x5c/0xa0 [ 151.923320][ C0] ip_rcv_core+0xf4c/0x1480 [ 151.923320][ C0] ip_rcv+0xc7/0x820 [ 151.923320][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.923320][ C0] __netif_receive_skb+0x1ec/0x640 [ 151.923320][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.923320][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 151.923320][ C0] process_backlog+0x517/0xbd0 [ 151.923320][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 151.923320][ C0] __napi_poll+0x13e/0xca0 [ 151.923320][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.923320][ C0] net_rx_action+0x726/0x14a0 [ 151.923320][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.923320][ C0] ? net_tx_action+0xd30/0xd30 [ 151.923320][ C0] __do_softirq+0x1b9/0x715 [ 151.923320][ C0] ? idle_cpu+0x9a/0x1d0 [ 151.923320][ C0] ? __irq_exit_rcu+0x83/0x280 [ 151.923320][ C0] do_softirq+0x123/0x1c0 [ 151.923320][ C0] [ 151.923320][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 151.923320][ C0] local_bh_enable+0x36/0x40 [ 151.923320][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 151.923320][ C0] dev_queue_xmit+0x4b/0x60 [ 151.923320][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 151.923320][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.923320][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.923320][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.923320][ C0] ? process_slab+0x13a8/0x1b70 [ 151.923320][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.923320][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.923320][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.923320][ C0] ? packet_getsockopt+0x1120/0x1120 [ 151.923320][ C0] __sys_sendmsg+0x714/0x830 [ 151.923320][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 151.923320][ C0] ? up_read+0x40/0x2b0 [ 151.923320][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.923320][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.923320][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.923320][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.923320][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.923320][ C0] do_syscall_64+0x9f/0x140 [ 151.923320][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.923320][ C0] RIP: 0033:0x443df9 [ 151.923320][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 151.923320][ C0] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.923320][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 151.923320][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 151.923320][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 151.923320][ C0] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 0000000000024c91 [ 151.923320][ C0] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 151.923320][ C0] [ 151.923320][ C0] Uninit was stored to memory at: [ 151.923320][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 151.923320][ C0] __msan_chain_origin+0x54/0xa0 [ 151.923320][ C0] iptunnel_xmit+0xbd6/0xf20 [ 151.923320][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 151.923320][ C0] geneve_xmit+0x2139/0x3c40 [ 151.923320][ C0] xmit_one+0x2b6/0x760 [ 151.923320][ C0] __dev_queue_xmit+0x3432/0x4600 [ 151.923320][ C0] dev_queue_xmit+0x4b/0x60 [ 151.923320][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.923320][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.923320][ C0] __sys_sendmsg+0x714/0x830 [ 151.923320][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.923320][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.923320][ C0] do_syscall_64+0x9f/0x140 [ 151.923320][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.923320][ C0] [ 151.923320][ C0] Uninit was created at: [ 151.923320][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.923320][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 151.923320][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.923320][ C0] __alloc_skb+0x4dd/0xe90 [ 151.923320][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 151.923320][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 151.923320][ C0] packet_sendmsg+0x6a12/0x99d0 [ 151.923320][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.923320][ C0] __sys_sendmsg+0x714/0x830 [ 151.923320][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.923320][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.923320][ C0] do_syscall_64+0x9f/0x140 [ 151.923320][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.923320][ C0] ===================================================== [ 152.471911][ C0] ===================================================== [ 152.480478][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 152.481783][ C0] CPU: 0 PID: 8434 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 152.481783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.481783][ C0] Call Trace: [ 152.481783][ C0] [ 152.481783][ C0] dump_stack+0x24c/0x2e0 [ 152.481783][ C0] kmsan_report+0xfb/0x1e0 [ 152.481783][ C0] __msan_warning+0x5c/0xa0 [ 152.481783][ C0] ip_rcv_core+0xf5d/0x1480 [ 152.481783][ C0] ip_rcv+0xc7/0x820 [ 152.481783][ C0] ? kmsan_get_metadata+0x116/0x180 [ 152.481783][ C0] __netif_receive_skb+0x1ec/0x640 [ 152.481783][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.481783][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 152.481783][ C0] process_backlog+0x517/0xbd0 [ 152.578421][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 152.584146][ C0] __napi_poll+0x13e/0xca0 [ 152.590352][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.597592][ C0] net_rx_action+0x726/0x14a0 [ 152.602408][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.610407][ C0] ? net_tx_action+0xd30/0xd30 [ 152.615304][ C0] __do_softirq+0x1b9/0x715 [ 152.621551][ C0] ? idle_cpu+0x9a/0x1d0 [ 152.625362][ C0] ? __irq_exit_rcu+0x83/0x280 [ 152.631387][ C0] do_softirq+0x123/0x1c0 [ 152.637777][ C0] [ 152.640243][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 152.645521][ C0] local_bh_enable+0x36/0x40 [ 152.651775][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 152.657813][ C0] dev_queue_xmit+0x4b/0x60 [ 152.664123][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 152.670186][ C0] packet_sendmsg+0x86ee/0x99d0 [ 152.676355][ C0] ? kmsan_get_metadata+0x116/0x180 [ 152.682763][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.682763][ C0] ? process_slab+0x13a8/0x1b70 [ 152.682763][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.682763][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.682763][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 152.682763][ C0] ? packet_getsockopt+0x1120/0x1120 [ 152.682763][ C0] __sys_sendmsg+0x714/0x830 [ 152.682763][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 152.682763][ C0] ? up_read+0x40/0x2b0 [ 152.682763][ C0] ? kmsan_get_metadata+0x116/0x180 [ 152.682763][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.682763][ C0] ? kmsan_get_metadata+0x116/0x180 [ 152.682763][ C0] __se_sys_sendmsg+0x97/0xb0 [ 152.682763][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 152.682763][ C0] do_syscall_64+0x9f/0x140 [ 152.682763][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.682763][ C0] RIP: 0033:0x443df9 [ 152.786519][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 152.809563][ C0] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.819402][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 152.827970][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 152.836519][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 152.846520][ C0] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 0000000000024c91 [ 152.856180][ C0] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 152.865259][ C0] [ 152.869144][ C0] Uninit was stored to memory at: [ 152.876309][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 152.882353][ C0] __msan_chain_origin+0x54/0xa0 [ 152.887773][ C0] iptunnel_xmit+0xbd6/0xf20 [ 152.894979][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 152.901034][ C0] geneve_xmit+0x2139/0x3c40 [ 152.906571][ C0] xmit_one+0x2b6/0x760 [ 152.911445][ C0] __dev_queue_xmit+0x3432/0x4600 [ 152.917495][ C0] dev_queue_xmit+0x4b/0x60 [ 152.924135][ C0] packet_sendmsg+0x86ee/0x99d0 [ 152.930283][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 152.936393][ C0] __sys_sendmsg+0x714/0x830 [ 152.942576][ C0] __se_sys_sendmsg+0x97/0xb0 [ 152.949493][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 152.955604][ C0] do_syscall_64+0x9f/0x140 [ 152.960518][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.966595][ C0] [ 152.969017][ C0] Uninit was created at: [ 152.975223][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 152.981267][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 152.986781][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 152.994586][ C0] __alloc_skb+0x4dd/0xe90 [ 152.999451][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 153.005628][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 153.014347][ C0] packet_sendmsg+0x6a12/0x99d0 [ 153.020529][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 153.025369][ C0] __sys_sendmsg+0x714/0x830 [ 153.031433][ C0] __se_sys_sendmsg+0x97/0xb0 [ 153.037517][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 153.042337][ C0] do_syscall_64+0x9f/0x140 [ 153.047743][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.053738][ C0] ===================================================== [ 153.062869][ C0] ===================================================== [ 153.070684][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 153.072814][ C0] CPU: 0 PID: 8434 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.083287][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.083287][ C0] Call Trace: [ 153.083287][ C0] [ 153.083287][ C0] dump_stack+0x24c/0x2e0 [ 153.083287][ C0] kmsan_report+0xfb/0x1e0 [ 153.113435][ C0] __msan_warning+0x5c/0xa0 [ 153.113435][ C0] ip_rcv_core+0x1068/0x1480 [ 153.113435][ C0] ip_rcv+0xc7/0x820 [ 153.113435][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.113435][ C0] __netif_receive_skb+0x1ec/0x640 [ 153.143261][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.143261][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 153.143261][ C0] process_backlog+0x517/0xbd0 [ 153.161356][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 153.167474][ C0] __napi_poll+0x13e/0xca0 [ 153.172339][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.180513][ C0] net_rx_action+0x726/0x14a0 [ 153.185562][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.191630][ C0] ? net_tx_action+0xd30/0xd30 [ 153.197842][ C0] __do_softirq+0x1b9/0x715 [ 153.202766][ C0] ? idle_cpu+0x9a/0x1d0 [ 153.206584][ C0] ? __irq_exit_rcu+0x83/0x280 [ 153.214368][ C0] do_softirq+0x123/0x1c0 [ 153.220617][ C0] [ 153.223380][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 153.229122][ C0] local_bh_enable+0x36/0x40 [ 153.234120][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 153.238993][ C0] dev_queue_xmit+0x4b/0x60 [ 153.243851][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 153.249969][ C0] packet_sendmsg+0x86ee/0x99d0 [ 153.256619][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.261454][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.268803][ C0] ? process_slab+0x13a8/0x1b70 [ 153.274300][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.280414][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.286973][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 153.291904][ C0] ? packet_getsockopt+0x1120/0x1120 [ 153.298964][ C0] __sys_sendmsg+0x714/0x830 [ 153.304192][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 153.310379][ C0] ? up_read+0x40/0x2b0 [ 153.315450][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.321512][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.329054][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.335854][ C0] __se_sys_sendmsg+0x97/0xb0 [ 153.343456][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 153.349766][ C0] do_syscall_64+0x9f/0x140 [ 153.352343][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.361130][ C0] RIP: 0033:0x443df9 [ 153.365958][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 153.390292][ C0] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.400479][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 153.408973][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 153.419307][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 153.430413][ C0] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 0000000000024c91 [ 153.440461][ C0] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 153.449289][ C0] [ 153.454746][ C0] Uninit was stored to memory at: [ 153.461198][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 153.468549][ C0] __msan_chain_origin+0x54/0xa0 [ 153.475400][ C0] __ip_local_out+0x479/0x840 [ 153.480538][ C0] ip_local_out+0xa1/0x1e0 [ 153.485515][ C0] iptunnel_xmit+0x931/0xf20 [ 153.490536][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 153.496728][ C0] geneve_xmit+0x2139/0x3c40 [ 153.501616][ C0] xmit_one+0x2b6/0x760 [ 153.507841][ C0] __dev_queue_xmit+0x3432/0x4600 [ 153.514176][ C0] dev_queue_xmit+0x4b/0x60 [ 153.520234][ C0] packet_sendmsg+0x86ee/0x99d0 [ 153.525066][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 153.531372][ C0] __sys_sendmsg+0x714/0x830 [ 153.538078][ C0] __se_sys_sendmsg+0x97/0xb0 [ 153.543269][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 153.549013][ C0] do_syscall_64+0x9f/0x140 [ 153.552614][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.559711][ C0] [ 153.562121][ C0] Uninit was stored to memory at: [ 153.568346][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 153.575304][ C0] __msan_chain_origin+0x54/0xa0 [ 153.581628][ C0] iptunnel_xmit+0xbd6/0xf20 [ 153.587656][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 153.592462][ C0] geneve_xmit+0x2139/0x3c40 [ 153.597767][ C0] xmit_one+0x2b6/0x760 [ 153.602557][ C0] __dev_queue_xmit+0x3432/0x4600 [ 153.608858][ C0] dev_queue_xmit+0x4b/0x60 [ 153.614160][ C0] packet_sendmsg+0x86ee/0x99d0 [ 153.620182][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 153.626207][ C0] __sys_sendmsg+0x714/0x830 [ 153.631060][ C0] __se_sys_sendmsg+0x97/0xb0 [ 153.636534][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 153.641374][ C0] do_syscall_64+0x9f/0x140 [ 153.647607][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.655505][ C0] [ 153.657987][ C0] Uninit was created at: [ 153.663276][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.669156][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 153.673059][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.681826][ C0] __alloc_skb+0x4dd/0xe90 [ 153.686729][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 153.692939][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 153.699154][ C0] packet_sendmsg+0x6a12/0x99d0 [ 153.705233][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 153.710114][ C0] __sys_sendmsg+0x714/0x830 [ 153.715337][ C0] __se_sys_sendmsg+0x97/0xb0 [ 153.721943][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 153.726768][ C0] do_syscall_64+0x9f/0x140 executing program [ 153.731608][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.737822][ C0] ===================================================== [ 153.779664][ C0] ===================================================== [ 153.783156][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 153.783156][ C0] CPU: 0 PID: 8435 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.783156][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.783156][ C0] Call Trace: [ 153.783156][ C0] [ 153.783156][ C0] dump_stack+0x24c/0x2e0 [ 153.783156][ C0] kmsan_report+0xfb/0x1e0 [ 153.783156][ C0] __msan_warning+0x5c/0xa0 [ 153.783156][ C0] ip_rcv_core+0xf4c/0x1480 [ 153.783156][ C0] ip_rcv+0xc7/0x820 [ 153.783156][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.783156][ C0] __netif_receive_skb+0x1ec/0x640 [ 153.783156][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.783156][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 153.783156][ C0] process_backlog+0x517/0xbd0 [ 153.783156][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 153.783156][ C0] __napi_poll+0x13e/0xca0 [ 153.783156][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.783156][ C0] net_rx_action+0x726/0x14a0 [ 153.783156][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.783156][ C0] ? net_tx_action+0xd30/0xd30 [ 153.783156][ C0] __do_softirq+0x1b9/0x715 [ 153.783156][ C0] ? idle_cpu+0x9a/0x1d0 [ 153.783156][ C0] ? __irq_exit_rcu+0x83/0x280 [ 153.783156][ C0] do_softirq+0x123/0x1c0 [ 153.783156][ C0] [ 153.783156][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 153.783156][ C0] local_bh_enable+0x36/0x40 [ 153.783156][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 153.783156][ C0] dev_queue_xmit+0x4b/0x60 [ 153.783156][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 153.783156][ C0] packet_sendmsg+0x86ee/0x99d0 [ 153.783156][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.783156][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.783156][ C0] ? process_slab+0x13a8/0x1b70 [ 153.783156][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.783156][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.783156][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 153.783156][ C0] ? packet_getsockopt+0x1120/0x1120 [ 153.783156][ C0] __sys_sendmsg+0x714/0x830 [ 153.783156][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 153.783156][ C0] ? up_read+0x40/0x2b0 [ 153.783156][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.783156][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.783156][ C0] ? kmsan_get_metadata+0x116/0x180 [ 153.783156][ C0] __se_sys_sendmsg+0x97/0xb0 [ 153.783156][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 153.783156][ C0] do_syscall_64+0x9f/0x140 [ 153.783156][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.783156][ C0] RIP: 0033:0x443df9 [ 153.783156][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 153.783156][ C0] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.783156][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 153.783156][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 153.783156][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 153.783156][ C0] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 000000000002518b [ 153.783156][ C0] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 153.783156][ C0] [ 153.783156][ C0] Uninit was stored to memory at: [ 153.783156][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 153.783156][ C0] __msan_chain_origin+0x54/0xa0 [ 153.783156][ C0] iptunnel_xmit+0xbd6/0xf20 [ 153.783156][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 153.783156][ C0] geneve_xmit+0x2139/0x3c40 [ 153.783156][ C0] xmit_one+0x2b6/0x760 [ 153.783156][ C0] __dev_queue_xmit+0x3432/0x4600 [ 153.783156][ C0] dev_queue_xmit+0x4b/0x60 [ 153.783156][ C0] packet_sendmsg+0x86ee/0x99d0 [ 153.783156][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 153.783156][ C0] __sys_sendmsg+0x714/0x830 [ 153.783156][ C0] __se_sys_sendmsg+0x97/0xb0 [ 153.783156][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 153.783156][ C0] do_syscall_64+0x9f/0x140 [ 153.783156][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.783156][ C0] [ 153.783156][ C0] Uninit was created at: [ 153.783156][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.783156][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 153.783156][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.783156][ C0] __alloc_skb+0x4dd/0xe90 [ 153.783156][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 153.783156][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 153.783156][ C0] packet_sendmsg+0x6a12/0x99d0 [ 153.783156][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 153.783156][ C0] __sys_sendmsg+0x714/0x830 [ 153.783156][ C0] __se_sys_sendmsg+0x97/0xb0 [ 153.783156][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 153.783156][ C0] do_syscall_64+0x9f/0x140 [ 153.783156][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.783156][ C0] ===================================================== [ 154.342562][ C0] ===================================================== [ 154.349967][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 154.352505][ C0] CPU: 0 PID: 8435 Comm: syz-executor352 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 154.352505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.352505][ C0] Call Trace: [ 154.352505][ C0] [ 154.352505][ C0] dump_stack+0x24c/0x2e0 [ 154.352505][ C0] kmsan_report+0xfb/0x1e0 [ 154.352505][ C0] __msan_warning+0x5c/0xa0 [ 154.352505][ C0] ip_rcv_core+0xf5d/0x1480 [ 154.352505][ C0] ip_rcv+0xc7/0x820 [ 154.352505][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.352505][ C0] __netif_receive_skb+0x1ec/0x640 [ 154.352505][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.352505][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 154.352505][ C0] process_backlog+0x517/0xbd0 [ 154.352505][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 154.352505][ C0] __napi_poll+0x13e/0xca0 [ 154.352505][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.352505][ C0] net_rx_action+0x726/0x14a0 [ 154.352505][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.352505][ C0] ? net_tx_action+0xd30/0xd30 [ 154.352505][ C0] __do_softirq+0x1b9/0x715 [ 154.352505][ C0] ? idle_cpu+0x9a/0x1d0 [ 154.352505][ C0] ? __irq_exit_rcu+0x83/0x280 [ 154.352505][ C0] do_softirq+0x123/0x1c0 [ 154.352505][ C0] [ 154.352505][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 154.352505][ C0] local_bh_enable+0x36/0x40 [ 154.352505][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 154.352505][ C0] dev_queue_xmit+0x4b/0x60 [ 154.352505][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 154.352505][ C0] packet_sendmsg+0x86ee/0x99d0 [ 154.352505][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.352505][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.352505][ C0] ? process_slab+0x13a8/0x1b70 [ 154.352505][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.352505][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.352505][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 154.352505][ C0] ? packet_getsockopt+0x1120/0x1120 [ 154.352505][ C0] __sys_sendmsg+0x714/0x830 [ 154.352505][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 154.352505][ C0] ? up_read+0x40/0x2b0 [ 154.352505][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.352505][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.352505][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.352505][ C0] __se_sys_sendmsg+0x97/0xb0 [ 154.352505][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 154.352505][ C0] do_syscall_64+0x9f/0x140 [ 154.352505][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.352505][ C0] RIP: 0033:0x443df9 [ 154.352505][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 154.352505][ C0] RSP: 002b:00007ffe87256418 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.352505][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443df9 [ 154.352505][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 154.352505][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 154.352505][ C0] R10: 00007ffe87255e90 R11: 0000000000000246 R12: 000000000002518b [ 154.352505][ C0] R13: 00007ffe87256440 R14: 00007ffe87256430 R15: 00007ffe87256424 [ 154.352505][ C0] [ 154.352505][ C0] Uninit was stored to memory at: [ 154.352505][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 154.352505][ C0] __msan_chain_origin+0x54/0xa0 [ 154.352505][ C0] iptunnel_xmit+0xbd6/0xf20 [ 154.352505][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 154.352505][ C0] geneve_xmit+0x2139/0x3c40 [ 154.352505][ C0] xmit_one+0x2b6/0x760 [ 154.352505][ C0] __dev_queue_xmit+0x3432/0x4600 [ 154.352505][ C0] dev_queue_xmit+0x4b/0x60 [ 154.352505][ C0] packet_sendmsg+0x86ee/0x99d0 [ 154.352505][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 154.793463][ C0] __sys_sendmsg+0x714/0x830 [ 154.798507][ C0] __se_sys_sendmsg+0x97/0xb0 [ 154.803466][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 154.809507][ C0] do_syscall_64+0x9f/0x140 [ 154.814704][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.822047][ C0] [ 154.824589][ C0] Uninit was created at: [ 154.829709][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 154.835942][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 154.842351][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 154.848693][ C0] __alloc_skb+0x4dd/0xe90 [ 154.853577][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 154.859934][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 154.867184][ C0] packet_sendmsg+0x6a12/0x99d0 [ 154.873605][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 154.879879][ C0] __sys_sendmsg+0x714/0x830