18.347094][T32055] get_compat_msghdr+0x108/0x2b0 [ 1918.352020][T32055] do_recvmmsg+0xdba/0x22c0 [ 1918.356519][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1918.361188][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1918.367259][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1918.373405][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1918.378607][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1918.383464][T32055] do_SYSENTER_32+0x73/0x90 [ 1918.387968][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1918.394280][T32055] [ 1918.396624][T32055] Uninit was stored to memory at: [ 1918.401659][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1918.407385][T32055] __msan_chain_origin+0x50/0x90 [ 1918.412315][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1918.417426][T32055] get_compat_msghdr+0x108/0x2b0 [ 1918.422354][T32055] do_recvmmsg+0xdba/0x22c0 [ 1918.426846][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1918.431528][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1918.437600][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1918.443743][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1918.448931][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1918.453765][T32055] do_SYSENTER_32+0x73/0x90 [ 1918.458253][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1918.464565][T32055] [ 1918.466872][T32055] Uninit was stored to memory at: [ 1918.471886][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1918.477588][T32055] __msan_chain_origin+0x50/0x90 [ 1918.482519][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1918.487629][T32055] get_compat_msghdr+0x108/0x2b0 [ 1918.492552][T32055] do_recvmmsg+0xdba/0x22c0 [ 1918.497037][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1918.501717][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1918.507788][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1918.513930][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1918.519117][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1918.523953][T32055] do_SYSENTER_32+0x73/0x90 [ 1918.528454][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1918.534756][T32055] [ 1918.537065][T32055] Uninit was stored to memory at: [ 1918.542089][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1918.547791][T32055] __msan_chain_origin+0x50/0x90 [ 1918.552717][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1918.557816][T32055] get_compat_msghdr+0x108/0x2b0 [ 1918.562757][T32055] do_recvmmsg+0xdba/0x22c0 [ 1918.567281][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1918.571979][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1918.578057][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1918.584215][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1918.589417][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1918.594260][T32055] do_SYSENTER_32+0x73/0x90 [ 1918.598755][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1918.605063][T32055] [ 1918.607378][T32055] Uninit was stored to memory at: [ 1918.612417][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1918.618144][T32055] __msan_chain_origin+0x50/0x90 [ 1918.623093][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1918.628215][T32055] get_compat_msghdr+0x108/0x2b0 [ 1918.633158][T32055] do_recvmmsg+0xdba/0x22c0 [ 1918.637667][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1918.642347][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1918.648417][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1918.654568][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1918.659752][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1918.664599][T32055] do_SYSENTER_32+0x73/0x90 [ 1918.669088][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1918.675391][T32055] [ 1918.677700][T32055] Uninit was stored to memory at: [ 1918.682723][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1918.688434][T32055] __msan_chain_origin+0x50/0x90 [ 1918.693359][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1918.698454][T32055] get_compat_msghdr+0x108/0x2b0 [ 1918.703378][T32055] do_recvmmsg+0xdba/0x22c0 [ 1918.707879][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1918.712554][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1918.718608][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1918.724761][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1918.729963][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1918.734810][T32055] do_SYSENTER_32+0x73/0x90 [ 1918.739297][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1918.745596][T32055] [ 1918.747903][T32055] Uninit was stored to memory at: [ 1918.752930][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1918.758632][T32055] __msan_chain_origin+0x50/0x90 [ 1918.763564][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1918.768670][T32055] get_compat_msghdr+0x108/0x2b0 [ 1918.773589][T32055] do_recvmmsg+0xdba/0x22c0 [ 1918.778075][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1918.782739][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1918.788796][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1918.794950][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1918.800137][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1918.804993][T32055] do_SYSENTER_32+0x73/0x90 [ 1918.809514][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1918.815831][T32055] [ 1918.818159][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1918.824821][T32055] do_recvmmsg+0xc2/0x22c0 [ 1918.829247][T32055] do_recvmmsg+0xc2/0x22c0 [ 1918.990998][T32055] not chained 7060000 origins [ 1918.995739][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1919.004416][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1919.014577][T32055] Call Trace: [ 1919.017893][T32055] dump_stack+0x21c/0x280 [ 1919.022255][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1919.028017][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1919.033256][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1919.039084][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1919.045169][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1919.050385][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1919.055954][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1919.062047][T32055] ? _copy_from_user+0x221/0x330 [ 1919.067008][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1919.072223][T32055] __msan_chain_origin+0x50/0x90 [ 1919.077207][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1919.082366][T32055] get_compat_msghdr+0x108/0x2b0 [ 1919.087355][T32055] do_recvmmsg+0xdba/0x22c0 [ 1919.091909][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1919.097132][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1919.103044][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1919.108270][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1919.113579][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1919.118378][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1919.123164][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1919.127899][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1919.134055][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1919.140232][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1919.145470][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1919.150347][T32055] do_SYSENTER_32+0x73/0x90 [ 1919.154873][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1919.161209][T32055] RIP: 0023:0xf7f40549 [ 1919.165275][T32055] Code: Bad RIP value. [ 1919.169355][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1919.177800][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1919.185781][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1919.193764][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1919.201744][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1919.209740][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1919.217736][T32055] Uninit was stored to memory at: [ 1919.222801][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1919.228531][T32055] __msan_chain_origin+0x50/0x90 [ 1919.233494][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1919.238616][T32055] get_compat_msghdr+0x108/0x2b0 [ 1919.243569][T32055] do_recvmmsg+0xdba/0x22c0 [ 1919.248107][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1919.252824][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1919.258905][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1919.265076][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1919.270287][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1919.275168][T32055] do_SYSENTER_32+0x73/0x90 [ 1919.279685][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1919.286007][T32055] [ 1919.288336][T32055] Uninit was stored to memory at: [ 1919.293377][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1919.299131][T32055] __msan_chain_origin+0x50/0x90 [ 1919.304082][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1919.309205][T32055] get_compat_msghdr+0x108/0x2b0 [ 1919.314159][T32055] do_recvmmsg+0xdba/0x22c0 [ 1919.318723][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1919.323414][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1919.329494][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1919.335661][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1919.340876][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1919.345738][T32055] do_SYSENTER_32+0x73/0x90 [ 1919.350253][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1919.356574][T32055] [ 1919.358923][T32055] Uninit was stored to memory at: [ 1919.363963][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1919.369694][T32055] __msan_chain_origin+0x50/0x90 [ 1919.374648][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1919.379769][T32055] get_compat_msghdr+0x108/0x2b0 [ 1919.384717][T32055] do_recvmmsg+0xdba/0x22c0 [ 1919.389229][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1919.393922][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1919.400002][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1919.406168][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1919.411382][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1919.416249][T32055] do_SYSENTER_32+0x73/0x90 [ 1919.421029][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1919.427351][T32055] [ 1919.429683][T32055] Uninit was stored to memory at: [ 1919.434722][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1919.440447][T32055] __msan_chain_origin+0x50/0x90 [ 1919.445415][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1919.450521][T32055] get_compat_msghdr+0x108/0x2b0 [ 1919.455445][T32055] do_recvmmsg+0xdba/0x22c0 [ 1919.459963][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1919.464635][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1919.470701][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1919.476866][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1919.482064][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1919.486922][T32055] do_SYSENTER_32+0x73/0x90 [ 1919.492378][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1919.498695][T32055] [ 1919.501009][T32055] Uninit was stored to memory at: [ 1919.506033][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1919.511747][T32055] __msan_chain_origin+0x50/0x90 [ 1919.516684][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1919.521807][T32055] get_compat_msghdr+0x108/0x2b0 [ 1919.526742][T32055] do_recvmmsg+0xdba/0x22c0 [ 1919.531238][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1919.535913][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1919.541978][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1919.548140][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1919.553335][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1919.558166][T32055] do_SYSENTER_32+0x73/0x90 [ 1919.562667][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1919.568984][T32055] [ 1919.571301][T32055] Uninit was stored to memory at: [ 1919.576340][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1919.582056][T32055] __msan_chain_origin+0x50/0x90 [ 1919.586995][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1919.592100][T32055] get_compat_msghdr+0x108/0x2b0 [ 1919.597045][T32055] do_recvmmsg+0xdba/0x22c0 [ 1919.601541][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1919.606239][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1919.612317][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1919.618482][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1919.623671][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1919.629208][T32055] do_SYSENTER_32+0x73/0x90 [ 1919.633696][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1919.640009][T32055] [ 1919.642335][T32055] Uninit was stored to memory at: [ 1919.647359][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1919.653062][T32055] __msan_chain_origin+0x50/0x90 [ 1919.657983][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1919.663076][T32055] get_compat_msghdr+0x108/0x2b0 [ 1919.667995][T32055] do_recvmmsg+0xdba/0x22c0 [ 1919.672482][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1919.677141][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1919.683191][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1919.689328][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1919.694514][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1919.699348][T32055] do_SYSENTER_32+0x73/0x90 [ 1919.703850][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1919.710158][T32055] [ 1919.712476][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1919.719151][T32055] do_recvmmsg+0xc2/0x22c0 [ 1919.723567][T32055] do_recvmmsg+0xc2/0x22c0 [ 1919.897366][T32055] not chained 7070000 origins [ 1919.902090][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1919.910759][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1919.920834][T32055] Call Trace: [ 1919.924149][T32055] dump_stack+0x21c/0x280 [ 1919.928484][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1919.934247][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1919.939454][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1919.945259][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1919.951333][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1919.956532][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1919.962092][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1919.968154][T32055] ? _copy_from_user+0x221/0x330 [ 1919.973085][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1919.978278][T32055] __msan_chain_origin+0x50/0x90 [ 1919.983230][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1919.988363][T32055] get_compat_msghdr+0x108/0x2b0 [ 1919.993318][T32055] do_recvmmsg+0xdba/0x22c0 [ 1919.997832][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1920.003114][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1920.009878][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1920.015074][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1920.020383][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1920.025148][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1920.029905][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1920.034606][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1920.040696][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1920.046976][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1920.052182][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1920.057028][T32055] do_SYSENTER_32+0x73/0x90 [ 1920.062141][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1920.068466][T32055] RIP: 0023:0xf7f40549 [ 1920.072532][T32055] Code: Bad RIP value. [ 1920.076584][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1920.084999][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1920.092979][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1920.100951][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1920.109032][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1920.117110][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1920.125105][T32055] Uninit was stored to memory at: [ 1920.130911][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1920.136620][T32055] __msan_chain_origin+0x50/0x90 [ 1920.141563][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1920.146677][T32055] get_compat_msghdr+0x108/0x2b0 [ 1920.151624][T32055] do_recvmmsg+0xdba/0x22c0 [ 1920.156128][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1920.160796][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1920.166846][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1920.173332][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1920.178517][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1920.183354][T32055] do_SYSENTER_32+0x73/0x90 [ 1920.187856][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1920.194171][T32055] [ 1920.196481][T32055] Uninit was stored to memory at: [ 1920.201508][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1920.207209][T32055] __msan_chain_origin+0x50/0x90 [ 1920.213089][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1920.218188][T32055] get_compat_msghdr+0x108/0x2b0 [ 1920.223119][T32055] do_recvmmsg+0xdba/0x22c0 [ 1920.227617][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1920.232281][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1920.238347][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1920.244486][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1920.249672][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1920.254512][T32055] do_SYSENTER_32+0x73/0x90 [ 1920.259021][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1920.265333][T32055] [ 1920.267649][T32055] Uninit was stored to memory at: [ 1920.272702][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1920.278441][T32055] __msan_chain_origin+0x50/0x90 [ 1920.283380][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1920.288493][T32055] get_compat_msghdr+0x108/0x2b0 [ 1920.293448][T32055] do_recvmmsg+0xdba/0x22c0 [ 1920.297948][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1920.302644][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1920.308728][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1920.315054][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1920.320257][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1920.325289][T32055] do_SYSENTER_32+0x73/0x90 [ 1920.329799][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1920.336112][T32055] [ 1920.338433][T32055] Uninit was stored to memory at: [ 1920.343463][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1920.349364][T32055] __msan_chain_origin+0x50/0x90 [ 1920.354321][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1920.359457][T32055] get_compat_msghdr+0x108/0x2b0 [ 1920.364396][T32055] do_recvmmsg+0xdba/0x22c0 [ 1920.368905][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1920.373583][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1920.379665][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1920.385818][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1920.391017][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1920.395870][T32055] do_SYSENTER_32+0x73/0x90 [ 1920.400385][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1920.406716][T32055] [ 1920.409032][T32055] Uninit was stored to memory at: [ 1920.414754][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1920.420486][T32055] __msan_chain_origin+0x50/0x90 [ 1920.425445][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1920.430570][T32055] get_compat_msghdr+0x108/0x2b0 [ 1920.436394][T32055] do_recvmmsg+0xdba/0x22c0 [ 1920.440922][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1920.445597][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1920.451671][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1920.457839][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1920.463037][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1920.467880][T32055] do_SYSENTER_32+0x73/0x90 [ 1920.472387][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1920.478695][T32055] [ 1920.481026][T32055] Uninit was stored to memory at: [ 1920.486059][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1920.492222][T32055] __msan_chain_origin+0x50/0x90 [ 1920.497170][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1920.503076][T32055] get_compat_msghdr+0x108/0x2b0 [ 1920.507998][T32055] do_recvmmsg+0xdba/0x22c0 [ 1920.512485][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1920.517158][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1920.523221][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1920.529368][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1920.534574][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1920.539426][T32055] do_SYSENTER_32+0x73/0x90 [ 1920.543926][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1920.550229][T32055] [ 1920.552551][T32055] Uninit was stored to memory at: [ 1920.557568][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1920.563989][T32055] __msan_chain_origin+0x50/0x90 [ 1920.568922][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1920.574067][T32055] get_compat_msghdr+0x108/0x2b0 [ 1920.578993][T32055] do_recvmmsg+0xdba/0x22c0 [ 1920.583483][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1920.588150][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1920.594223][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1920.600369][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1920.605565][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1920.610406][T32055] do_SYSENTER_32+0x73/0x90 [ 1920.615438][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1920.621740][T32055] [ 1920.624078][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1920.630754][T32055] do_recvmmsg+0xc2/0x22c0 [ 1920.635168][T32055] do_recvmmsg+0xc2/0x22c0 [ 1920.818697][T32055] not chained 7080000 origins [ 1920.823468][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1920.832166][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1920.842265][T32055] Call Trace: [ 1920.845620][T32055] dump_stack+0x21c/0x280 [ 1920.849997][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1920.855771][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1920.861100][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1920.866939][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1920.873033][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1920.878266][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1920.883851][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1920.889961][T32055] ? _copy_from_user+0x221/0x330 [ 1920.894952][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1920.900181][T32055] __msan_chain_origin+0x50/0x90 [ 1920.905156][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1920.911031][T32055] get_compat_msghdr+0x108/0x2b0 [ 1920.916020][T32055] do_recvmmsg+0xdba/0x22c0 [ 1920.929733][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1920.934970][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1920.940921][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1920.946158][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1920.951472][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1920.956257][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1920.961138][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1920.965864][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1920.972011][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1920.978204][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1920.983440][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1920.988840][T32055] do_SYSENTER_32+0x73/0x90 [ 1920.993376][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1920.999723][T32055] RIP: 0023:0xf7f40549 [ 1921.003801][T32055] Code: Bad RIP value. [ 1921.007914][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1921.016350][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1921.024342][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1921.032765][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1921.040757][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1921.048789][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1921.056785][T32055] Uninit was stored to memory at: [ 1921.061832][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1921.076010][T32055] __msan_chain_origin+0x50/0x90 [ 1921.080967][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1921.086094][T32055] get_compat_msghdr+0x108/0x2b0 [ 1921.091031][T32055] do_recvmmsg+0xdba/0x22c0 [ 1921.095528][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1921.100187][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1921.106238][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1921.112385][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1921.117587][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1921.122427][T32055] do_SYSENTER_32+0x73/0x90 [ 1921.126933][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1921.133258][T32055] [ 1921.135591][T32055] Uninit was stored to memory at: [ 1921.140602][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1921.146316][T32055] __msan_chain_origin+0x50/0x90 [ 1921.151262][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1921.156365][T32055] get_compat_msghdr+0x108/0x2b0 [ 1921.161289][T32055] do_recvmmsg+0xdba/0x22c0 [ 1921.165777][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1921.170439][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1921.176508][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1921.182663][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1921.187864][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1921.192702][T32055] do_SYSENTER_32+0x73/0x90 [ 1921.197201][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1921.203501][T32055] [ 1921.205810][T32055] Uninit was stored to memory at: [ 1921.210838][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1921.216542][T32055] __msan_chain_origin+0x50/0x90 [ 1921.221467][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1921.227967][T32055] get_compat_msghdr+0x108/0x2b0 [ 1921.232907][T32055] do_recvmmsg+0xdba/0x22c0 [ 1921.237415][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1921.242091][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1921.248188][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1921.254336][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1921.259558][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1921.264395][T32055] do_SYSENTER_32+0x73/0x90 [ 1921.268899][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1921.275203][T32055] [ 1921.277525][T32055] Uninit was stored to memory at: [ 1921.282586][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1921.288301][T32055] __msan_chain_origin+0x50/0x90 [ 1921.293241][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1921.298429][T32055] get_compat_msghdr+0x108/0x2b0 [ 1921.303370][T32055] do_recvmmsg+0xdba/0x22c0 [ 1921.307895][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1921.312584][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1921.318636][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1921.324789][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1921.329987][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1921.334825][T32055] do_SYSENTER_32+0x73/0x90 [ 1921.339317][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1921.345617][T32055] [ 1921.347924][T32055] Uninit was stored to memory at: [ 1921.352936][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1921.358655][T32055] __msan_chain_origin+0x50/0x90 [ 1921.363578][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1921.368673][T32055] get_compat_msghdr+0x108/0x2b0 [ 1921.373596][T32055] do_recvmmsg+0xdba/0x22c0 [ 1921.378095][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1921.382758][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1921.388824][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1921.394977][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1921.400176][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1921.405033][T32055] do_SYSENTER_32+0x73/0x90 [ 1921.409807][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1921.416124][T32055] [ 1921.418432][T32055] Uninit was stored to memory at: [ 1921.423442][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1921.430098][T32055] __msan_chain_origin+0x50/0x90 [ 1921.435022][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1921.440117][T32055] get_compat_msghdr+0x108/0x2b0 [ 1921.445050][T32055] do_recvmmsg+0xdba/0x22c0 [ 1921.449535][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1921.454218][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1921.460277][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1921.466428][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1921.471619][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1921.476453][T32055] do_SYSENTER_32+0x73/0x90 [ 1921.480956][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1921.487257][T32055] [ 1921.489574][T32055] Uninit was stored to memory at: [ 1921.494587][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1921.500290][T32055] __msan_chain_origin+0x50/0x90 [ 1921.505217][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1921.510311][T32055] get_compat_msghdr+0x108/0x2b0 [ 1921.515242][T32055] do_recvmmsg+0xdba/0x22c0 [ 1921.519727][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1921.524409][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1921.530474][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1921.536616][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1921.541804][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1921.546637][T32055] do_SYSENTER_32+0x73/0x90 [ 1921.551133][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1921.557434][T32055] [ 1921.559741][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1921.566413][T32055] do_recvmmsg+0xc2/0x22c0 [ 1921.570822][T32055] do_recvmmsg+0xc2/0x22c0 [ 1921.718892][T32055] not chained 7090000 origins [ 1921.723652][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1921.732324][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1921.742385][T32055] Call Trace: [ 1921.745736][T32055] dump_stack+0x21c/0x280 [ 1921.750099][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1921.755866][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1921.761174][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1921.766998][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1921.773081][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1921.778297][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1921.783862][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1921.789958][T32055] ? _copy_from_user+0x221/0x330 [ 1921.794914][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1921.800132][T32055] __msan_chain_origin+0x50/0x90 [ 1921.805112][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1921.810273][T32055] get_compat_msghdr+0x108/0x2b0 [ 1921.815271][T32055] do_recvmmsg+0xdba/0x22c0 [ 1921.819845][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1921.825077][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1921.831081][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1921.836320][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1921.841677][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1921.846458][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1921.851247][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1921.855969][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1921.862071][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1921.868270][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1921.873629][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1921.878501][T32055] do_SYSENTER_32+0x73/0x90 [ 1921.883029][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1921.889367][T32055] RIP: 0023:0xf7f40549 [ 1921.893442][T32055] Code: Bad RIP value. [ 1921.897515][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1921.905972][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1921.913968][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1921.922098][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1921.930077][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1921.938050][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1921.946030][T32055] Uninit was stored to memory at: [ 1921.951077][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1921.956806][T32055] __msan_chain_origin+0x50/0x90 [ 1921.961763][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1921.966879][T32055] get_compat_msghdr+0x108/0x2b0 [ 1921.971821][T32055] do_recvmmsg+0xdba/0x22c0 [ 1921.976325][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1921.980992][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1921.987048][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1921.993191][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1921.998399][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1922.003247][T32055] do_SYSENTER_32+0x73/0x90 [ 1922.007738][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1922.014082][T32055] [ 1922.016395][T32055] Uninit was stored to memory at: [ 1922.021435][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1922.027158][T32055] __msan_chain_origin+0x50/0x90 [ 1922.032122][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1922.037257][T32055] get_compat_msghdr+0x108/0x2b0 [ 1922.042210][T32055] do_recvmmsg+0xdba/0x22c0 [ 1922.046698][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1922.051395][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1922.057471][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1922.063632][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1922.068824][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1922.073683][T32055] do_SYSENTER_32+0x73/0x90 [ 1922.078180][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1922.084499][T32055] [ 1922.086811][T32055] Uninit was stored to memory at: [ 1922.091838][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1922.097541][T32055] __msan_chain_origin+0x50/0x90 [ 1922.102468][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1922.107566][T32055] get_compat_msghdr+0x108/0x2b0 [ 1922.112489][T32055] do_recvmmsg+0xdba/0x22c0 [ 1922.116986][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1922.122606][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1922.128659][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1922.134820][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1922.140028][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1922.144864][T32055] do_SYSENTER_32+0x73/0x90 [ 1922.149364][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1922.155672][T32055] [ 1922.157981][T32055] Uninit was stored to memory at: [ 1922.163012][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1922.168718][T32055] __msan_chain_origin+0x50/0x90 [ 1922.173652][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1922.178757][T32055] get_compat_msghdr+0x108/0x2b0 [ 1922.183681][T32055] do_recvmmsg+0xdba/0x22c0 [ 1922.188192][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1922.192857][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1922.198915][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1922.205063][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1922.210258][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1922.215181][T32055] do_SYSENTER_32+0x73/0x90 [ 1922.219671][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1922.225972][T32055] [ 1922.228286][T32055] Uninit was stored to memory at: [ 1922.233301][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1922.239021][T32055] __msan_chain_origin+0x50/0x90 [ 1922.243961][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1922.249061][T32055] get_compat_msghdr+0x108/0x2b0 [ 1922.253990][T32055] do_recvmmsg+0xdba/0x22c0 [ 1922.258481][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1922.263163][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1922.269217][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1922.275640][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1922.280846][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1922.285681][T32055] do_SYSENTER_32+0x73/0x90 [ 1922.290193][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1922.296499][T32055] [ 1922.298814][T32055] Uninit was stored to memory at: [ 1922.303838][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1922.309545][T32055] __msan_chain_origin+0x50/0x90 [ 1922.314481][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1922.319589][T32055] get_compat_msghdr+0x108/0x2b0 [ 1922.324511][T32055] do_recvmmsg+0xdba/0x22c0 [ 1922.328995][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1922.333670][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1922.339727][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1922.345871][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1922.351079][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1922.355933][T32055] do_SYSENTER_32+0x73/0x90 [ 1922.360423][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1922.366735][T32055] [ 1922.369045][T32055] Uninit was stored to memory at: [ 1922.374077][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1922.379790][T32055] __msan_chain_origin+0x50/0x90 [ 1922.384714][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1922.389811][T32055] get_compat_msghdr+0x108/0x2b0 [ 1922.394734][T32055] do_recvmmsg+0xdba/0x22c0 [ 1922.399222][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1922.403887][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1922.409943][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1922.416092][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1922.421274][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1922.426106][T32055] do_SYSENTER_32+0x73/0x90 [ 1922.430612][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1922.436924][T32055] [ 1922.439237][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1922.445903][T32055] do_recvmmsg+0xc2/0x22c0 [ 1922.450302][T32055] do_recvmmsg+0xc2/0x22c0 [ 1922.710523][T32055] not chained 7100000 origins [ 1922.715269][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1922.723944][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1922.734011][T32055] Call Trace: [ 1922.738029][T32055] dump_stack+0x21c/0x280 [ 1922.742390][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1922.748170][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1922.753394][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1922.759219][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1922.765301][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1922.770532][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1922.776096][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1922.782202][T32055] ? _copy_from_user+0x221/0x330 [ 1922.787173][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1922.792390][T32055] __msan_chain_origin+0x50/0x90 [ 1922.797353][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1922.802515][T32055] get_compat_msghdr+0x108/0x2b0 [ 1922.807496][T32055] do_recvmmsg+0xdba/0x22c0 [ 1922.812071][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1922.817298][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1922.823251][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1922.828478][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1922.833787][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1922.838563][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1922.843394][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1922.848114][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1922.854223][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1922.860400][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1922.865632][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1922.870505][T32055] do_SYSENTER_32+0x73/0x90 [ 1922.875032][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1922.881370][T32055] RIP: 0023:0xf7f40549 [ 1922.885437][T32055] Code: Bad RIP value. [ 1922.889511][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1922.897947][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1922.905940][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1922.913928][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1922.921925][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1922.929907][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1922.937999][T32055] Uninit was stored to memory at: [ 1922.943173][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1922.948900][T32055] __msan_chain_origin+0x50/0x90 [ 1922.953828][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1922.958954][T32055] get_compat_msghdr+0x108/0x2b0 [ 1922.963877][T32055] do_recvmmsg+0xdba/0x22c0 [ 1922.968362][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1922.973040][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1922.979091][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1922.985230][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1922.990431][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1922.995266][T32055] do_SYSENTER_32+0x73/0x90 [ 1922.999753][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.006054][T32055] [ 1923.008367][T32055] Uninit was stored to memory at: [ 1923.013378][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1923.019079][T32055] __msan_chain_origin+0x50/0x90 [ 1923.024004][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.029110][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.034046][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.038533][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.043229][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.049314][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1923.055483][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1923.060697][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1923.065552][T32055] do_SYSENTER_32+0x73/0x90 [ 1923.070041][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.077310][T32055] [ 1923.079619][T32055] Uninit was stored to memory at: [ 1923.084633][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1923.090357][T32055] __msan_chain_origin+0x50/0x90 [ 1923.095285][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.100388][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.105312][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.109814][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.114508][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.120561][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1923.126704][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1923.131918][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1923.136779][T32055] do_SYSENTER_32+0x73/0x90 [ 1923.141269][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.147570][T32055] [ 1923.149876][T32055] Uninit was stored to memory at: [ 1923.154891][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1923.160598][T32055] __msan_chain_origin+0x50/0x90 [ 1923.165525][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.170654][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.175597][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.180082][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.184743][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.190808][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1923.196972][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1923.202157][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1923.206989][T32055] do_SYSENTER_32+0x73/0x90 [ 1923.211581][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.217890][T32055] [ 1923.220194][T32055] Uninit was stored to memory at: [ 1923.225205][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1923.230920][T32055] __msan_chain_origin+0x50/0x90 [ 1923.235869][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.240973][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.245910][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.250420][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.255084][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.261149][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1923.267302][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1923.272498][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1923.277348][T32055] do_SYSENTER_32+0x73/0x90 [ 1923.281852][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.288153][T32055] [ 1923.290526][T32055] Uninit was stored to memory at: [ 1923.295555][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1923.301268][T32055] __msan_chain_origin+0x50/0x90 [ 1923.306195][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.311295][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.316216][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.320817][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.325503][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.331574][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1923.338467][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1923.343656][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1923.348493][T32055] do_SYSENTER_32+0x73/0x90 [ 1923.353000][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.359322][T32055] [ 1923.361635][T32055] Uninit was stored to memory at: [ 1923.366680][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1923.372398][T32055] __msan_chain_origin+0x50/0x90 [ 1923.377344][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.382454][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.387426][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.391916][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.396579][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.402628][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1923.408766][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1923.413962][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1923.418809][T32055] do_SYSENTER_32+0x73/0x90 [ 1923.423324][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.429638][T32055] [ 1923.431954][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1923.438632][T32055] do_recvmmsg+0xc2/0x22c0 [ 1923.443050][T32055] do_recvmmsg+0xc2/0x22c0 [ 1923.587197][T32055] not chained 7110000 origins [ 1923.591941][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1923.600636][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1923.611412][T32055] Call Trace: [ 1923.614737][T32055] dump_stack+0x21c/0x280 [ 1923.619097][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1923.624913][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1923.630132][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1923.636020][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1923.642099][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1923.647320][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1923.652888][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1923.658983][T32055] ? _copy_from_user+0x221/0x330 [ 1923.664041][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1923.669261][T32055] __msan_chain_origin+0x50/0x90 [ 1923.674228][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.679384][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.684360][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.688911][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1923.694133][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1923.700084][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1923.705310][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1923.710619][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1923.715396][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1923.720184][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.724905][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.731005][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1923.737218][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1923.742477][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1923.747351][T32055] do_SYSENTER_32+0x73/0x90 [ 1923.751880][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.758307][T32055] RIP: 0023:0xf7f40549 [ 1923.762380][T32055] Code: Bad RIP value. [ 1923.766481][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1923.774908][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1923.782891][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1923.790874][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1923.798859][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1923.806843][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1923.814843][T32055] Uninit was stored to memory at: [ 1923.819889][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1923.825621][T32055] __msan_chain_origin+0x50/0x90 [ 1923.830569][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.835692][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.840643][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.845164][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.849856][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.855935][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1923.862123][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1923.867340][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1923.872203][T32055] do_SYSENTER_32+0x73/0x90 [ 1923.876771][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.883093][T32055] [ 1923.885426][T32055] Uninit was stored to memory at: [ 1923.890470][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1923.896201][T32055] __msan_chain_origin+0x50/0x90 [ 1923.901157][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.906281][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.911231][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.916268][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.920959][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.927042][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1923.933237][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1923.938423][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1923.943269][T32055] do_SYSENTER_32+0x73/0x90 [ 1923.947780][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1923.954097][T32055] [ 1923.956404][T32055] Uninit was stored to memory at: [ 1923.961426][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1923.967152][T32055] __msan_chain_origin+0x50/0x90 [ 1923.972078][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1923.977189][T32055] get_compat_msghdr+0x108/0x2b0 [ 1923.982122][T32055] do_recvmmsg+0xdba/0x22c0 [ 1923.986631][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1923.991321][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1923.997386][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1924.003541][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1924.008793][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1924.013638][T32055] do_SYSENTER_32+0x73/0x90 [ 1924.018253][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1924.024563][T32055] [ 1924.026904][T32055] Uninit was stored to memory at: [ 1924.031917][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1924.037619][T32055] __msan_chain_origin+0x50/0x90 [ 1924.042556][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1924.047667][T32055] get_compat_msghdr+0x108/0x2b0 [ 1924.052604][T32055] do_recvmmsg+0xdba/0x22c0 [ 1924.057105][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1924.061813][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1924.067878][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1924.074018][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1924.079203][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1924.084039][T32055] do_SYSENTER_32+0x73/0x90 [ 1924.088539][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1924.094838][T32055] [ 1924.097148][T32055] Uninit was stored to memory at: [ 1924.102172][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1924.107892][T32055] __msan_chain_origin+0x50/0x90 [ 1924.112905][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1924.118013][T32055] get_compat_msghdr+0x108/0x2b0 [ 1924.122949][T32055] do_recvmmsg+0xdba/0x22c0 [ 1924.127451][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1924.132134][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1924.138203][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1924.144354][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1924.149546][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1924.154382][T32055] do_SYSENTER_32+0x73/0x90 [ 1924.158956][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1924.165269][T32055] [ 1924.167599][T32055] Uninit was stored to memory at: [ 1924.172633][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1924.178390][T32055] __msan_chain_origin+0x50/0x90 [ 1924.183326][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1924.188443][T32055] get_compat_msghdr+0x108/0x2b0 [ 1924.193383][T32055] do_recvmmsg+0xdba/0x22c0 [ 1924.197883][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1924.202562][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1924.208644][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1924.214782][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1924.219988][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1924.224824][T32055] do_SYSENTER_32+0x73/0x90 [ 1924.229327][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1924.235627][T32055] [ 1924.237936][T32055] Uninit was stored to memory at: [ 1924.242960][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1924.248694][T32055] __msan_chain_origin+0x50/0x90 [ 1924.253640][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1924.258748][T32055] get_compat_msghdr+0x108/0x2b0 [ 1924.263703][T32055] do_recvmmsg+0xdba/0x22c0 [ 1924.268216][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1924.272896][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1924.278965][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1924.285113][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1924.290298][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1924.295139][T32055] do_SYSENTER_32+0x73/0x90 [ 1924.299645][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1924.305945][T32055] [ 1924.308275][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1924.314933][T32055] do_recvmmsg+0xc2/0x22c0 [ 1924.319348][T32055] do_recvmmsg+0xc2/0x22c0 [ 1924.514293][T32055] not chained 7120000 origins [ 1924.519025][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1924.527698][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1924.537761][T32055] Call Trace: [ 1924.541078][T32055] dump_stack+0x21c/0x280 [ 1924.545452][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1924.551201][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1924.556418][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1924.562250][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1924.567462][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1924.573288][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1924.579375][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1924.584594][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1924.590166][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1924.596260][T32055] ? _copy_from_user+0x221/0x330 [ 1924.601223][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1924.606426][T32055] __msan_chain_origin+0x50/0x90 [ 1924.611357][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1924.616475][T32055] get_compat_msghdr+0x108/0x2b0 [ 1924.621431][T32055] do_recvmmsg+0xdba/0x22c0 [ 1924.625957][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1924.631150][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1924.637060][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1924.642262][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1924.647567][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1924.652334][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1924.657089][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1924.661774][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1924.667836][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1924.673981][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1924.679175][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1924.684020][T32055] do_SYSENTER_32+0x73/0x90 [ 1924.688514][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1924.694823][T32055] RIP: 0023:0xf7f40549 [ 1924.698880][T32055] Code: Bad RIP value. [ 1924.702928][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1924.711336][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1924.719321][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1924.727454][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1924.735419][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1924.743398][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1924.751367][T32055] Uninit was stored to memory at: [ 1924.756383][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1924.762088][T32055] __msan_chain_origin+0x50/0x90 [ 1924.767016][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1924.772111][T32055] get_compat_msghdr+0x108/0x2b0 [ 1924.777053][T32055] do_recvmmsg+0xdba/0x22c0 [ 1924.781539][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1924.786212][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1924.792280][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1924.798465][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1924.803669][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1924.808538][T32055] do_SYSENTER_32+0x73/0x90 [ 1924.813046][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1924.819348][T32055] [ 1924.821684][T32055] Uninit was stored to memory at: [ 1924.826715][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1924.832423][T32055] __msan_chain_origin+0x50/0x90 [ 1924.837371][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1924.842465][T32055] get_compat_msghdr+0x108/0x2b0 [ 1924.847401][T32055] do_recvmmsg+0xdba/0x22c0 [ 1924.851905][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1924.856567][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1924.862633][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1924.868785][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1924.873991][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1924.878827][T32055] do_SYSENTER_32+0x73/0x90 [ 1924.883322][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1924.889756][T32055] [ 1924.892133][T32055] Uninit was stored to memory at: [ 1924.897259][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1924.903088][T32055] __msan_chain_origin+0x50/0x90 [ 1924.908165][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1924.913329][T32055] get_compat_msghdr+0x108/0x2b0 [ 1924.918308][T32055] do_recvmmsg+0xdba/0x22c0 [ 1924.922799][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1924.927475][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1924.933542][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1924.939698][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1924.944882][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1924.949715][T32055] do_SYSENTER_32+0x73/0x90 [ 1924.954206][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1924.960616][T32055] [ 1924.962980][T32055] Uninit was stored to memory at: [ 1924.968018][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1924.973728][T32055] __msan_chain_origin+0x50/0x90 [ 1924.978653][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1924.983750][T32055] get_compat_msghdr+0x108/0x2b0 [ 1924.988683][T32055] do_recvmmsg+0xdba/0x22c0 [ 1924.993178][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1924.997850][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1925.003905][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1925.010047][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1925.015232][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1925.020075][T32055] do_SYSENTER_32+0x73/0x90 [ 1925.024571][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1925.030968][T32055] [ 1925.033297][T32055] Uninit was stored to memory at: [ 1925.038309][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1925.044012][T32055] __msan_chain_origin+0x50/0x90 [ 1925.048936][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1925.054070][T32055] get_compat_msghdr+0x108/0x2b0 [ 1925.058992][T32055] do_recvmmsg+0xdba/0x22c0 [ 1925.063481][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1925.068141][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1925.074207][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1925.080363][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1925.085547][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1925.090380][T32055] do_SYSENTER_32+0x73/0x90 [ 1925.094867][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1925.101174][T32055] [ 1925.103485][T32055] Uninit was stored to memory at: [ 1925.108512][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1925.114215][T32055] __msan_chain_origin+0x50/0x90 [ 1925.119137][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1925.124234][T32055] get_compat_msghdr+0x108/0x2b0 [ 1925.129197][T32055] do_recvmmsg+0xdba/0x22c0 [ 1925.133704][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1925.138384][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1925.144445][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1925.150587][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1925.155777][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1925.160616][T32055] do_SYSENTER_32+0x73/0x90 [ 1925.165128][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1925.171431][T32055] [ 1925.173740][T32055] Uninit was stored to memory at: [ 1925.178752][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1925.184469][T32055] __msan_chain_origin+0x50/0x90 [ 1925.189393][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1925.194487][T32055] get_compat_msghdr+0x108/0x2b0 [ 1925.199405][T32055] do_recvmmsg+0xdba/0x22c0 [ 1925.203893][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1925.208553][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1925.214621][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1925.220774][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1925.225989][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1925.230837][T32055] do_SYSENTER_32+0x73/0x90 [ 1925.235364][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1925.241698][T32055] [ 1925.244063][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1925.250746][T32055] do_recvmmsg+0xc2/0x22c0 [ 1925.256137][T32055] do_recvmmsg+0xc2/0x22c0 [ 1925.458916][T32055] not chained 7130000 origins [ 1925.463660][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1925.472359][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1925.482422][T32055] Call Trace: [ 1925.485740][T32055] dump_stack+0x21c/0x280 [ 1925.490103][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1925.495869][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1925.501089][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1925.506917][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1925.513121][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1925.518337][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1925.523952][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1925.530047][T32055] ? _copy_from_user+0x221/0x330 [ 1925.535006][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1925.540223][T32055] __msan_chain_origin+0x50/0x90 [ 1925.545184][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1925.550340][T32055] get_compat_msghdr+0x108/0x2b0 [ 1925.555311][T32055] do_recvmmsg+0xdba/0x22c0 [ 1925.559868][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1925.565092][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1925.571011][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1925.576238][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1925.581542][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1925.586335][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1925.591154][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1925.595874][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1925.601978][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1925.608151][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1925.613385][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1925.618262][T32055] do_SYSENTER_32+0x73/0x90 [ 1925.622792][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1925.629122][T32055] RIP: 0023:0xf7f40549 [ 1925.633176][T32055] Code: Bad RIP value. [ 1925.637224][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1925.645664][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1925.653647][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1925.661619][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1925.669591][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1925.677547][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1925.685635][T32055] Uninit was stored to memory at: [ 1925.690679][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1925.696397][T32055] __msan_chain_origin+0x50/0x90 [ 1925.701339][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1925.706447][T32055] get_compat_msghdr+0x108/0x2b0 [ 1925.711416][T32055] do_recvmmsg+0xdba/0x22c0 [ 1925.715917][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1925.720577][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1925.726629][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1925.732784][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1925.738027][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1925.742912][T32055] do_SYSENTER_32+0x73/0x90 [ 1925.747439][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1925.753742][T32055] [ 1925.756051][T32055] Uninit was stored to memory at: [ 1925.761077][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1925.766803][T32055] __msan_chain_origin+0x50/0x90 [ 1925.771742][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1925.776871][T32055] get_compat_msghdr+0x108/0x2b0 [ 1925.781809][T32055] do_recvmmsg+0xdba/0x22c0 [ 1925.786327][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1925.791001][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1925.797085][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1925.803225][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1925.808411][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1925.813255][T32055] do_SYSENTER_32+0x73/0x90 [ 1925.817770][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1925.824075][T32055] [ 1925.826386][T32055] Uninit was stored to memory at: [ 1925.831418][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1925.837137][T32055] __msan_chain_origin+0x50/0x90 [ 1925.842062][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1925.847167][T32055] get_compat_msghdr+0x108/0x2b0 [ 1925.852100][T32055] do_recvmmsg+0xdba/0x22c0 [ 1925.856609][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1925.861281][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1925.867380][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1925.873537][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1925.878720][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1925.883555][T32055] do_SYSENTER_32+0x73/0x90 [ 1925.888042][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1925.894460][T32055] [ 1925.896782][T32055] Uninit was stored to memory at: [ 1925.901808][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1925.907526][T32055] __msan_chain_origin+0x50/0x90 [ 1925.912462][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1925.917571][T32055] get_compat_msghdr+0x108/0x2b0 [ 1925.922507][T32055] do_recvmmsg+0xdba/0x22c0 [ 1925.927001][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1925.931686][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1925.937756][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1925.943913][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1925.949157][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1925.953995][T32055] do_SYSENTER_32+0x73/0x90 [ 1925.958574][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1925.964875][T32055] [ 1925.967212][T32055] Uninit was stored to memory at: [ 1925.972235][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1925.977951][T32055] __msan_chain_origin+0x50/0x90 [ 1925.982907][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1925.987999][T32055] get_compat_msghdr+0x108/0x2b0 [ 1925.992931][T32055] do_recvmmsg+0xdba/0x22c0 [ 1925.997431][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1926.002106][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1926.008182][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1926.014342][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1926.019546][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1926.024384][T32055] do_SYSENTER_32+0x73/0x90 [ 1926.028882][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1926.035193][T32055] [ 1926.037500][T32055] Uninit was stored to memory at: [ 1926.042522][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1926.048222][T32055] __msan_chain_origin+0x50/0x90 [ 1926.053176][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1926.058287][T32055] get_compat_msghdr+0x108/0x2b0 [ 1926.063219][T32055] do_recvmmsg+0xdba/0x22c0 [ 1926.067704][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1926.072386][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1926.078453][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1926.084595][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1926.089781][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1926.094626][T32055] do_SYSENTER_32+0x73/0x90 [ 1926.099118][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1926.105416][T32055] [ 1926.107733][T32055] Uninit was stored to memory at: [ 1926.112759][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1926.118473][T32055] __msan_chain_origin+0x50/0x90 [ 1926.123413][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1926.128526][T32055] get_compat_msghdr+0x108/0x2b0 [ 1926.133452][T32055] do_recvmmsg+0xdba/0x22c0 [ 1926.137937][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1926.142598][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1926.148656][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1926.154796][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1926.159979][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1926.164826][T32055] do_SYSENTER_32+0x73/0x90 [ 1926.169325][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1926.175626][T32055] [ 1926.177933][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1926.184590][T32055] do_recvmmsg+0xc2/0x22c0 [ 1926.188985][T32055] do_recvmmsg+0xc2/0x22c0 [ 1926.387284][T32055] not chained 7140000 origins [ 1926.392829][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1926.401505][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1926.411573][T32055] Call Trace: [ 1926.414890][T32055] dump_stack+0x21c/0x280 [ 1926.419255][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1926.425020][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1926.430240][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1926.436065][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1926.442151][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1926.447367][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1926.452939][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1926.459078][T32055] ? _copy_from_user+0x221/0x330 [ 1926.464040][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1926.469265][T32055] __msan_chain_origin+0x50/0x90 [ 1926.474229][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1926.479391][T32055] get_compat_msghdr+0x108/0x2b0 [ 1926.484365][T32055] do_recvmmsg+0xdba/0x22c0 [ 1926.488919][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1926.494189][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1926.500103][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1926.505331][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1926.510625][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1926.515375][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1926.520133][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1926.524823][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1926.530902][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1926.537061][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1926.542256][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1926.547092][T32055] do_SYSENTER_32+0x73/0x90 [ 1926.551604][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1926.557931][T32055] RIP: 0023:0xf7f40549 [ 1926.561985][T32055] Code: Bad RIP value. [ 1926.566048][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1926.574451][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1926.582417][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1926.590369][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1926.598329][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1926.606299][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1926.614265][T32055] Uninit was stored to memory at: [ 1926.619294][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1926.624997][T32055] __msan_chain_origin+0x50/0x90 [ 1926.629931][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1926.635024][T32055] get_compat_msghdr+0x108/0x2b0 [ 1926.639943][T32055] do_recvmmsg+0xdba/0x22c0 [ 1926.644703][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1926.649401][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1926.655452][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1926.661606][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1926.666827][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1926.671672][T32055] do_SYSENTER_32+0x73/0x90 [ 1926.676191][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1926.682491][T32055] [ 1926.684797][T32055] Uninit was stored to memory at: [ 1926.689807][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1926.695520][T32055] __msan_chain_origin+0x50/0x90 [ 1926.700442][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1926.705535][T32055] get_compat_msghdr+0x108/0x2b0 [ 1926.710465][T32055] do_recvmmsg+0xdba/0x22c0 [ 1926.714952][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1926.719622][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1926.725685][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1926.732220][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1926.738206][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1926.743049][T32055] do_SYSENTER_32+0x73/0x90 [ 1926.747546][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1926.753848][T32055] [ 1926.756156][T32055] Uninit was stored to memory at: [ 1926.761205][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1926.766928][T32055] __msan_chain_origin+0x50/0x90 [ 1926.771864][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1926.776977][T32055] get_compat_msghdr+0x108/0x2b0 [ 1926.781911][T32055] do_recvmmsg+0xdba/0x22c0 [ 1926.786414][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1926.791108][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1926.797171][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1926.803312][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1926.808496][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1926.814061][T32055] do_SYSENTER_32+0x73/0x90 [ 1926.818573][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1926.824873][T32055] [ 1926.827182][T32055] Uninit was stored to memory at: [ 1926.832210][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1926.837912][T32055] __msan_chain_origin+0x50/0x90 [ 1926.842845][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1926.847938][T32055] get_compat_msghdr+0x108/0x2b0 [ 1926.852861][T32055] do_recvmmsg+0xdba/0x22c0 [ 1926.857355][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1926.862030][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1926.868079][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1926.874224][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1926.879426][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1926.884277][T32055] do_SYSENTER_32+0x73/0x90 [ 1926.888795][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1926.895231][T32055] [ 1926.897538][T32055] Uninit was stored to memory at: [ 1926.902550][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1926.908250][T32055] __msan_chain_origin+0x50/0x90 [ 1926.913186][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1926.918280][T32055] get_compat_msghdr+0x108/0x2b0 [ 1926.923212][T32055] do_recvmmsg+0xdba/0x22c0 [ 1926.927710][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1926.932390][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1926.938465][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1926.946018][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1926.951226][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1926.956090][T32055] do_SYSENTER_32+0x73/0x90 [ 1926.960582][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1926.966898][T32055] [ 1926.969220][T32055] Uninit was stored to memory at: [ 1926.974235][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1926.979962][T32055] __msan_chain_origin+0x50/0x90 [ 1926.984904][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1926.989999][T32055] get_compat_msghdr+0x108/0x2b0 [ 1926.994924][T32055] do_recvmmsg+0xdba/0x22c0 [ 1926.999414][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.004081][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1927.010150][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1927.016301][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1927.021527][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1927.026380][T32055] do_SYSENTER_32+0x73/0x90 [ 1927.030901][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1927.037492][T32055] [ 1927.039820][T32055] Uninit was stored to memory at: [ 1927.044832][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1927.050533][T32055] __msan_chain_origin+0x50/0x90 [ 1927.055458][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1927.060553][T32055] get_compat_msghdr+0x108/0x2b0 [ 1927.065475][T32055] do_recvmmsg+0xdba/0x22c0 [ 1927.070005][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.074669][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1927.080740][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1927.086902][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1927.092871][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1927.097706][T32055] do_SYSENTER_32+0x73/0x90 [ 1927.102209][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1927.108530][T32055] [ 1927.110850][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1927.117558][T32055] do_recvmmsg+0xc2/0x22c0 [ 1927.121962][T32055] do_recvmmsg+0xc2/0x22c0 [ 1927.314053][T32055] not chained 7150000 origins [ 1927.318806][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1927.327478][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1927.337535][T32055] Call Trace: [ 1927.340854][T32055] dump_stack+0x21c/0x280 [ 1927.345219][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1927.350990][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1927.356296][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1927.362150][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1927.368258][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1927.373477][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1927.379045][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1927.385140][T32055] ? _copy_from_user+0x221/0x330 [ 1927.390206][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1927.395426][T32055] __msan_chain_origin+0x50/0x90 [ 1927.400414][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1927.405570][T32055] get_compat_msghdr+0x108/0x2b0 [ 1927.410538][T32055] do_recvmmsg+0xdba/0x22c0 [ 1927.415086][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1927.420310][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1927.426229][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1927.431455][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1927.436763][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1927.441544][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1927.446324][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.451048][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1927.457146][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1927.463322][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1927.468554][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1927.473432][T32055] do_SYSENTER_32+0x73/0x90 [ 1927.477960][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1927.484294][T32055] RIP: 0023:0xf7f40549 [ 1927.488364][T32055] Code: Bad RIP value. [ 1927.492443][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1927.500867][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1927.508874][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1927.516853][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1927.524833][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1927.532818][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1927.540811][T32055] Uninit was stored to memory at: [ 1927.545857][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1927.551586][T32055] __msan_chain_origin+0x50/0x90 [ 1927.556550][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1927.561658][T32055] get_compat_msghdr+0x108/0x2b0 [ 1927.566592][T32055] do_recvmmsg+0xdba/0x22c0 [ 1927.571077][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.575745][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1927.581808][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1927.587959][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1927.593155][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1927.598001][T32055] do_SYSENTER_32+0x73/0x90 [ 1927.602500][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1927.608814][T32055] [ 1927.611120][T32055] Uninit was stored to memory at: [ 1927.616130][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1927.621845][T32055] __msan_chain_origin+0x50/0x90 [ 1927.626794][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1927.631889][T32055] get_compat_msghdr+0x108/0x2b0 [ 1927.636806][T32055] do_recvmmsg+0xdba/0x22c0 [ 1927.641302][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.645978][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1927.652045][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1927.658198][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1927.663403][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1927.668251][T32055] do_SYSENTER_32+0x73/0x90 [ 1927.672744][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1927.679147][T32055] [ 1927.681458][T32055] Uninit was stored to memory at: [ 1927.686508][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1927.692222][T32055] __msan_chain_origin+0x50/0x90 [ 1927.697140][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1927.702244][T32055] get_compat_msghdr+0x108/0x2b0 [ 1927.707179][T32055] do_recvmmsg+0xdba/0x22c0 [ 1927.711679][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.716356][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1927.722443][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1927.728596][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1927.733779][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1927.738614][T32055] do_SYSENTER_32+0x73/0x90 [ 1927.743117][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1927.749432][T32055] [ 1927.751740][T32055] Uninit was stored to memory at: [ 1927.756749][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1927.762465][T32055] __msan_chain_origin+0x50/0x90 [ 1927.767459][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1927.772583][T32055] get_compat_msghdr+0x108/0x2b0 [ 1927.777527][T32055] do_recvmmsg+0xdba/0x22c0 [ 1927.782015][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.786676][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1927.792738][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1927.798896][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1927.804120][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1927.808963][T32055] do_SYSENTER_32+0x73/0x90 [ 1927.813471][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1927.819790][T32055] [ 1927.822103][T32055] Uninit was stored to memory at: [ 1927.827116][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1927.832829][T32055] __msan_chain_origin+0x50/0x90 [ 1927.837778][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1927.842881][T32055] get_compat_msghdr+0x108/0x2b0 [ 1927.847808][T32055] do_recvmmsg+0xdba/0x22c0 [ 1927.852304][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.856981][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1927.863048][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1927.869187][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1927.874401][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1927.879251][T32055] do_SYSENTER_32+0x73/0x90 [ 1927.883744][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1927.890045][T32055] [ 1927.892377][T32055] Uninit was stored to memory at: [ 1927.897443][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1927.903155][T32055] __msan_chain_origin+0x50/0x90 [ 1927.908084][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1927.913197][T32055] get_compat_msghdr+0x108/0x2b0 [ 1927.918156][T32055] do_recvmmsg+0xdba/0x22c0 [ 1927.922661][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.927354][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1927.933430][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1927.939591][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1927.944780][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1927.949619][T32055] do_SYSENTER_32+0x73/0x90 [ 1927.954113][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1927.960416][T32055] [ 1927.962723][T32055] Uninit was stored to memory at: [ 1927.967770][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1927.973483][T32055] __msan_chain_origin+0x50/0x90 [ 1927.978423][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1927.983538][T32055] get_compat_msghdr+0x108/0x2b0 [ 1927.988490][T32055] do_recvmmsg+0xdba/0x22c0 [ 1927.992987][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1927.997666][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1928.003717][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1928.009853][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1928.015040][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1928.019871][T32055] do_SYSENTER_32+0x73/0x90 [ 1928.024364][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1928.030661][T32055] [ 1928.032979][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1928.039651][T32055] do_recvmmsg+0xc2/0x22c0 [ 1928.044067][T32055] do_recvmmsg+0xc2/0x22c0 [ 1928.376558][T32055] not chained 7160000 origins [ 1928.381298][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1928.389970][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1928.400072][T32055] Call Trace: [ 1928.403391][T32055] dump_stack+0x21c/0x280 [ 1928.407716][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1928.413447][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1928.418653][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1928.424451][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1928.430511][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1928.435700][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1928.441237][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1928.447298][T32055] ? _copy_from_user+0x221/0x330 [ 1928.452259][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1928.457475][T32055] __msan_chain_origin+0x50/0x90 [ 1928.462411][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1928.467526][T32055] get_compat_msghdr+0x108/0x2b0 [ 1928.472462][T32055] do_recvmmsg+0xdba/0x22c0 [ 1928.477010][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1928.482205][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1928.488115][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1928.493340][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1928.498614][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1928.503371][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1928.508136][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1928.512828][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1928.518890][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1928.525044][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1928.530251][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1928.535105][T32055] do_SYSENTER_32+0x73/0x90 [ 1928.539596][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1928.545905][T32055] RIP: 0023:0xf7f40549 [ 1928.549948][T32055] Code: Bad RIP value. [ 1928.553994][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1928.562389][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1928.570352][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1928.578322][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1928.586274][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1928.594229][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1928.602196][T32055] Uninit was stored to memory at: [ 1928.607224][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1928.612935][T32055] __msan_chain_origin+0x50/0x90 [ 1928.617858][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1928.622952][T32055] get_compat_msghdr+0x108/0x2b0 [ 1928.627874][T32055] do_recvmmsg+0xdba/0x22c0 [ 1928.632369][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1928.637028][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1928.643088][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1928.649225][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1928.654409][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1928.659240][T32055] do_SYSENTER_32+0x73/0x90 [ 1928.663726][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1928.670033][T32055] [ 1928.672356][T32055] Uninit was stored to memory at: [ 1928.677369][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1928.683081][T32055] __msan_chain_origin+0x50/0x90 [ 1928.688014][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1928.693113][T32055] get_compat_msghdr+0x108/0x2b0 [ 1928.698032][T32055] do_recvmmsg+0xdba/0x22c0 [ 1928.702515][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1928.707177][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1928.713227][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1928.719363][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1928.724546][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1928.729384][T32055] do_SYSENTER_32+0x73/0x90 [ 1928.733871][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1928.740170][T32055] [ 1928.742484][T32055] Uninit was stored to memory at: [ 1928.747503][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1928.753246][T32055] __msan_chain_origin+0x50/0x90 [ 1928.758167][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1928.763307][T32055] get_compat_msghdr+0x108/0x2b0 [ 1928.768229][T32055] do_recvmmsg+0xdba/0x22c0 [ 1928.772717][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1928.777375][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1928.783425][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1928.789563][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1928.794760][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1928.799592][T32055] do_SYSENTER_32+0x73/0x90 [ 1928.804086][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1928.810389][T32055] [ 1928.812697][T32055] Uninit was stored to memory at: [ 1928.817746][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1928.823448][T32055] __msan_chain_origin+0x50/0x90 [ 1928.828377][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1928.833558][T32055] get_compat_msghdr+0x108/0x2b0 [ 1928.838483][T32055] do_recvmmsg+0xdba/0x22c0 [ 1928.842969][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1928.847639][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1928.853691][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1928.859829][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1928.865029][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1928.869863][T32055] do_SYSENTER_32+0x73/0x90 [ 1928.874397][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1928.880719][T32055] [ 1928.883042][T32055] Uninit was stored to memory at: [ 1928.888056][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1928.893760][T32055] __msan_chain_origin+0x50/0x90 [ 1928.898683][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1928.903782][T32055] get_compat_msghdr+0x108/0x2b0 [ 1928.908704][T32055] do_recvmmsg+0xdba/0x22c0 [ 1928.913191][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1928.917885][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1928.923939][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1928.930076][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1928.935261][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1928.940091][T32055] do_SYSENTER_32+0x73/0x90 [ 1928.944586][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1928.950950][T32055] [ 1928.953299][T32055] Uninit was stored to memory at: [ 1928.958313][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1928.964017][T32055] __msan_chain_origin+0x50/0x90 [ 1928.968954][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1928.974061][T32055] get_compat_msghdr+0x108/0x2b0 [ 1928.978989][T32055] do_recvmmsg+0xdba/0x22c0 [ 1928.983484][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1928.988151][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1928.994232][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.000375][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.005560][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1929.010392][T32055] do_SYSENTER_32+0x73/0x90 [ 1929.014918][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1929.021264][T32055] [ 1929.023586][T32055] Uninit was stored to memory at: [ 1929.028770][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1929.034486][T32055] __msan_chain_origin+0x50/0x90 [ 1929.039408][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1929.044542][T32055] get_compat_msghdr+0x108/0x2b0 [ 1929.049462][T32055] do_recvmmsg+0xdba/0x22c0 [ 1929.053947][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1929.058606][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1929.064670][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.070818][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.076053][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1929.080901][T32055] do_SYSENTER_32+0x73/0x90 [ 1929.085392][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1929.091691][T32055] [ 1929.094002][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1929.100657][T32055] do_recvmmsg+0xc2/0x22c0 [ 1929.105052][T32055] do_recvmmsg+0xc2/0x22c0 [ 1929.294229][T32055] not chained 7170000 origins [ 1929.298969][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1929.307673][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1929.317736][T32055] Call Trace: [ 1929.321055][T32055] dump_stack+0x21c/0x280 [ 1929.325420][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1929.331184][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1929.336405][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1929.342228][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1929.348311][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1929.353527][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1929.359098][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1929.365191][T32055] ? _copy_from_user+0x221/0x330 [ 1929.370155][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1929.375380][T32055] __msan_chain_origin+0x50/0x90 [ 1929.380348][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1929.385509][T32055] get_compat_msghdr+0x108/0x2b0 [ 1929.390485][T32055] do_recvmmsg+0xdba/0x22c0 [ 1929.395036][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1929.400256][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1929.406173][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1929.411406][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1929.416717][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1929.421492][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1929.426279][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1929.431004][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1929.437122][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.443317][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.448552][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1929.453432][T32055] do_SYSENTER_32+0x73/0x90 [ 1929.457960][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1929.464297][T32055] RIP: 0023:0xf7f40549 [ 1929.468461][T32055] Code: Bad RIP value. [ 1929.472534][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1929.480959][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1929.490242][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1929.498234][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1929.506213][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1929.514197][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1929.522197][T32055] Uninit was stored to memory at: [ 1929.527943][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1929.533693][T32055] __msan_chain_origin+0x50/0x90 [ 1929.538645][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1929.543769][T32055] get_compat_msghdr+0x108/0x2b0 [ 1929.548717][T32055] do_recvmmsg+0xdba/0x22c0 [ 1929.553234][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1929.557924][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1929.564006][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.570183][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.575415][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1929.580259][T32055] do_SYSENTER_32+0x73/0x90 [ 1929.584758][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1929.591057][T32055] [ 1929.593364][T32055] Uninit was stored to memory at: [ 1929.598383][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1929.604083][T32055] __msan_chain_origin+0x50/0x90 [ 1929.609004][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1929.614101][T32055] get_compat_msghdr+0x108/0x2b0 [ 1929.619030][T32055] do_recvmmsg+0xdba/0x22c0 [ 1929.623516][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1929.628876][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1929.634939][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.641081][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.646267][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1929.651111][T32055] do_SYSENTER_32+0x73/0x90 [ 1929.655623][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1929.661923][T32055] [ 1929.664244][T32055] Uninit was stored to memory at: [ 1929.669259][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1929.674962][T32055] __msan_chain_origin+0x50/0x90 [ 1929.679883][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1929.684986][T32055] get_compat_msghdr+0x108/0x2b0 [ 1929.689903][T32055] do_recvmmsg+0xdba/0x22c0 [ 1929.694414][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1929.699086][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1929.705137][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.711275][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.716458][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1929.721292][T32055] do_SYSENTER_32+0x73/0x90 [ 1929.725778][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1929.732076][T32055] [ 1929.734388][T32055] Uninit was stored to memory at: [ 1929.739401][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1929.745101][T32055] __msan_chain_origin+0x50/0x90 [ 1929.750035][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1929.755149][T32055] get_compat_msghdr+0x108/0x2b0 [ 1929.760068][T32055] do_recvmmsg+0xdba/0x22c0 [ 1929.764556][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1929.769227][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1929.775287][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.781435][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.786616][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1929.791461][T32055] do_SYSENTER_32+0x73/0x90 [ 1929.795949][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1929.802260][T32055] [ 1929.804567][T32055] Uninit was stored to memory at: [ 1929.809577][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1929.815286][T32055] __msan_chain_origin+0x50/0x90 [ 1929.820360][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1929.825467][T32055] get_compat_msghdr+0x108/0x2b0 [ 1929.830394][T32055] do_recvmmsg+0xdba/0x22c0 [ 1929.834883][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1929.839547][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1929.845601][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.851752][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.856970][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1929.861817][T32055] do_SYSENTER_32+0x73/0x90 [ 1929.866305][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1929.872610][T32055] [ 1929.874933][T32055] Uninit was stored to memory at: [ 1929.879961][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1929.885665][T32055] __msan_chain_origin+0x50/0x90 [ 1929.890593][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1929.895688][T32055] get_compat_msghdr+0x108/0x2b0 [ 1929.900623][T32055] do_recvmmsg+0xdba/0x22c0 [ 1929.905125][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1929.909788][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1929.915846][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.921987][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.927172][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1929.932046][T32055] do_SYSENTER_32+0x73/0x90 [ 1929.936534][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1929.942837][T32055] [ 1929.945154][T32055] Uninit was stored to memory at: [ 1929.950221][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1929.955997][T32055] __msan_chain_origin+0x50/0x90 [ 1929.960926][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1929.966022][T32055] get_compat_msghdr+0x108/0x2b0 [ 1929.970948][T32055] do_recvmmsg+0xdba/0x22c0 [ 1929.975436][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1929.980105][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1929.986174][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1929.992314][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1929.997500][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1930.002333][T32055] do_SYSENTER_32+0x73/0x90 [ 1930.006821][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1930.013144][T32055] [ 1930.015456][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1930.022120][T32055] do_recvmmsg+0xc2/0x22c0 [ 1930.026521][T32055] do_recvmmsg+0xc2/0x22c0 [ 1930.187667][T32055] not chained 7180000 origins [ 1930.192412][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1930.201086][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1930.211145][T32055] Call Trace: [ 1930.214461][T32055] dump_stack+0x21c/0x280 [ 1930.218825][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1930.224590][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1930.229805][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1930.235632][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1930.241713][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1930.246931][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1930.252499][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1930.258593][T32055] ? _copy_from_user+0x221/0x330 [ 1930.263552][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1930.268769][T32055] __msan_chain_origin+0x50/0x90 [ 1930.273732][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1930.278895][T32055] get_compat_msghdr+0x108/0x2b0 [ 1930.283864][T32055] do_recvmmsg+0xdba/0x22c0 [ 1930.288420][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1930.293644][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1930.299561][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1930.304786][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1930.310092][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1930.314868][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1930.319651][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1930.324388][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1930.330492][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1930.336666][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1930.341896][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1930.346769][T32055] do_SYSENTER_32+0x73/0x90 [ 1930.351300][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1930.357692][T32055] RIP: 0023:0xf7f40549 [ 1930.361783][T32055] Code: Bad RIP value. [ 1930.365857][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1930.374459][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1930.382435][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1930.390428][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1930.398402][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1930.406357][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1930.414325][T32055] Uninit was stored to memory at: [ 1930.419342][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1930.425056][T32055] __msan_chain_origin+0x50/0x90 [ 1930.429983][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1930.435081][T32055] get_compat_msghdr+0x108/0x2b0 [ 1930.440005][T32055] do_recvmmsg+0xdba/0x22c0 [ 1930.444494][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1930.449155][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1930.455217][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1930.461370][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1930.466552][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1930.471384][T32055] do_SYSENTER_32+0x73/0x90 [ 1930.475870][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1930.482169][T32055] [ 1930.484487][T32055] Uninit was stored to memory at: [ 1930.489503][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1930.495205][T32055] __msan_chain_origin+0x50/0x90 [ 1930.500129][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1930.505237][T32055] get_compat_msghdr+0x108/0x2b0 [ 1930.510166][T32055] do_recvmmsg+0xdba/0x22c0 [ 1930.514664][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1930.519334][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1930.525383][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1930.531522][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1930.536706][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1930.541550][T32055] do_SYSENTER_32+0x73/0x90 [ 1930.546046][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1930.552357][T32055] [ 1930.554665][T32055] Uninit was stored to memory at: [ 1930.559687][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1930.565408][T32055] __msan_chain_origin+0x50/0x90 [ 1930.570335][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1930.575430][T32055] get_compat_msghdr+0x108/0x2b0 [ 1930.580361][T32055] do_recvmmsg+0xdba/0x22c0 [ 1930.584845][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1930.589508][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1930.595576][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1930.601820][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1930.607002][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1930.611858][T32055] do_SYSENTER_32+0x73/0x90 [ 1930.616343][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1930.622654][T32055] [ 1930.624965][T32055] Uninit was stored to memory at: [ 1930.629975][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1930.635677][T32055] __msan_chain_origin+0x50/0x90 [ 1930.640600][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1930.645695][T32055] get_compat_msghdr+0x108/0x2b0 [ 1930.650627][T32055] do_recvmmsg+0xdba/0x22c0 [ 1930.655121][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1930.659780][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1930.665827][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1930.671976][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1930.677157][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1930.682001][T32055] do_SYSENTER_32+0x73/0x90 [ 1930.686510][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1930.692808][T32055] [ 1930.695128][T32055] Uninit was stored to memory at: [ 1930.700365][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1930.706074][T32055] __msan_chain_origin+0x50/0x90 [ 1930.711010][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1930.716103][T32055] get_compat_msghdr+0x108/0x2b0 [ 1930.721037][T32055] do_recvmmsg+0xdba/0x22c0 [ 1930.725531][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1930.730198][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1930.736260][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1930.742403][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1930.747597][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1930.752431][T32055] do_SYSENTER_32+0x73/0x90 [ 1930.756918][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1930.763217][T32055] [ 1930.765521][T32055] Uninit was stored to memory at: [ 1930.770534][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1930.776235][T32055] __msan_chain_origin+0x50/0x90 [ 1930.781181][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1930.786284][T32055] get_compat_msghdr+0x108/0x2b0 [ 1930.791205][T32055] do_recvmmsg+0xdba/0x22c0 [ 1930.795689][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1930.800351][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1930.806404][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1930.812556][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1930.817757][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1930.822628][T32055] do_SYSENTER_32+0x73/0x90 [ 1930.827140][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1930.833441][T32055] [ 1930.835751][T32055] Uninit was stored to memory at: [ 1930.840797][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1930.846529][T32055] __msan_chain_origin+0x50/0x90 [ 1930.851452][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1930.856568][T32055] get_compat_msghdr+0x108/0x2b0 [ 1930.861488][T32055] do_recvmmsg+0xdba/0x22c0 [ 1930.865991][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1930.870650][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1930.876698][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1930.882836][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1930.888020][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1930.892852][T32055] do_SYSENTER_32+0x73/0x90 [ 1930.897349][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1930.903647][T32055] [ 1930.905957][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1930.912616][T32055] do_recvmmsg+0xc2/0x22c0 [ 1930.917024][T32055] do_recvmmsg+0xc2/0x22c0 [ 1931.063472][T32055] not chained 7190000 origins [ 1931.068219][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1931.076893][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1931.086954][T32055] Call Trace: [ 1931.090277][T32055] dump_stack+0x21c/0x280 [ 1931.094667][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1931.100436][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1931.105657][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1931.111489][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1931.117571][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1931.122792][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1931.128360][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1931.134457][T32055] ? _copy_from_user+0x221/0x330 [ 1931.139417][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1931.144636][T32055] __msan_chain_origin+0x50/0x90 [ 1931.149622][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1931.154785][T32055] get_compat_msghdr+0x108/0x2b0 [ 1931.159757][T32055] do_recvmmsg+0xdba/0x22c0 [ 1931.164307][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1931.169533][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1931.175455][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1931.180680][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1931.186032][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1931.190829][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1931.195612][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1931.200350][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1931.206483][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1931.212659][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1931.217892][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1931.222768][T32055] do_SYSENTER_32+0x73/0x90 [ 1931.227296][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1931.233635][T32055] RIP: 0023:0xf7f40549 [ 1931.237705][T32055] Code: Bad RIP value. [ 1931.241778][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1931.250206][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1931.258186][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1931.266166][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1931.274149][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1931.282131][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1931.290133][T32055] Uninit was stored to memory at: [ 1931.295182][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1931.300912][T32055] __msan_chain_origin+0x50/0x90 [ 1931.305925][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1931.311043][T32055] get_compat_msghdr+0x108/0x2b0 [ 1931.315992][T32055] do_recvmmsg+0xdba/0x22c0 [ 1931.320484][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1931.325150][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1931.331218][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1931.337367][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1931.342553][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1931.347404][T32055] do_SYSENTER_32+0x73/0x90 [ 1931.351893][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1931.358205][T32055] [ 1931.360524][T32055] Uninit was stored to memory at: [ 1931.365539][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1931.371241][T32055] __msan_chain_origin+0x50/0x90 [ 1931.376166][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1931.381261][T32055] get_compat_msghdr+0x108/0x2b0 [ 1931.386180][T32055] do_recvmmsg+0xdba/0x22c0 [ 1931.390682][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1931.395350][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1931.401408][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1931.407547][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1931.412733][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1931.417587][T32055] do_SYSENTER_32+0x73/0x90 [ 1931.422076][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1931.428401][T32055] [ 1931.430710][T32055] Uninit was stored to memory at: [ 1931.435727][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1931.441436][T32055] __msan_chain_origin+0x50/0x90 [ 1931.446373][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1931.451468][T32055] get_compat_msghdr+0x108/0x2b0 [ 1931.456400][T32055] do_recvmmsg+0xdba/0x22c0 [ 1931.460887][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1931.465545][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1931.471597][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1931.477752][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1931.482952][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1931.487800][T32055] do_SYSENTER_32+0x73/0x90 [ 1931.492305][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1931.498604][T32055] [ 1931.500913][T32055] Uninit was stored to memory at: [ 1931.505930][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1931.511648][T32055] __msan_chain_origin+0x50/0x90 [ 1931.516571][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1931.521667][T32055] get_compat_msghdr+0x108/0x2b0 [ 1931.526588][T32055] do_recvmmsg+0xdba/0x22c0 [ 1931.531073][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1931.535757][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1931.541832][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1931.547971][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1931.553159][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1931.557993][T32055] do_SYSENTER_32+0x73/0x90 [ 1931.562523][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1931.568837][T32055] [ 1931.571160][T32055] Uninit was stored to memory at: [ 1931.576295][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1931.582011][T32055] __msan_chain_origin+0x50/0x90 [ 1931.586936][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1931.592033][T32055] get_compat_msghdr+0x108/0x2b0 [ 1931.596968][T32055] do_recvmmsg+0xdba/0x22c0 [ 1931.601456][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1931.606120][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1931.612174][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1931.618321][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1931.623516][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1931.628351][T32055] do_SYSENTER_32+0x73/0x90 [ 1931.632840][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1931.639141][T32055] [ 1931.641458][T32055] Uninit was stored to memory at: [ 1931.646472][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1931.652188][T32055] __msan_chain_origin+0x50/0x90 [ 1931.657111][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1931.662207][T32055] get_compat_msghdr+0x108/0x2b0 [ 1931.667137][T32055] do_recvmmsg+0xdba/0x22c0 [ 1931.671634][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1931.676307][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1931.682359][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1931.688496][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1931.693687][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1931.698551][T32055] do_SYSENTER_32+0x73/0x90 [ 1931.703053][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1931.709365][T32055] [ 1931.711673][T32055] Uninit was stored to memory at: [ 1931.716684][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1931.722487][T32055] __msan_chain_origin+0x50/0x90 [ 1931.727416][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1931.732518][T32055] get_compat_msghdr+0x108/0x2b0 [ 1931.737437][T32055] do_recvmmsg+0xdba/0x22c0 [ 1931.741939][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1931.746658][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1931.752751][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1931.758890][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1931.764078][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1931.768919][T32055] do_SYSENTER_32+0x73/0x90 [ 1931.773410][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1931.779712][T32055] [ 1931.782029][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1931.788688][T32055] do_recvmmsg+0xc2/0x22c0 [ 1931.793087][T32055] do_recvmmsg+0xc2/0x22c0 [ 1931.956864][T32055] not chained 7200000 origins [ 1931.961607][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1931.970283][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1931.980344][T32055] Call Trace: [ 1931.983665][T32055] dump_stack+0x21c/0x280 [ 1931.988027][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1931.993795][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1931.999014][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1932.004857][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1932.010945][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1932.016263][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1932.021836][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1932.027933][T32055] ? _copy_from_user+0x221/0x330 [ 1932.032896][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1932.038117][T32055] __msan_chain_origin+0x50/0x90 [ 1932.043118][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1932.048281][T32055] get_compat_msghdr+0x108/0x2b0 [ 1932.053254][T32055] do_recvmmsg+0xdba/0x22c0 [ 1932.057806][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1932.063031][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1932.068947][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1932.074200][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1932.079506][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1932.084306][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1932.089091][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1932.093810][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1932.099931][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1932.106125][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1932.111364][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1932.116240][T32055] do_SYSENTER_32+0x73/0x90 [ 1932.120764][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1932.127103][T32055] RIP: 0023:0xf7f40549 [ 1932.131190][T32055] Code: Bad RIP value. [ 1932.135264][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1932.143683][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1932.151668][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1932.159652][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1932.167612][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1932.175583][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1932.183552][T32055] Uninit was stored to memory at: [ 1932.188584][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1932.194288][T32055] __msan_chain_origin+0x50/0x90 [ 1932.199226][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1932.204321][T32055] get_compat_msghdr+0x108/0x2b0 [ 1932.209238][T32055] do_recvmmsg+0xdba/0x22c0 [ 1932.213727][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1932.218434][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1932.224488][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1932.230627][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1932.235830][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1932.240664][T32055] do_SYSENTER_32+0x73/0x90 [ 1932.245168][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1932.251484][T32055] [ 1932.253795][T32055] Uninit was stored to memory at: [ 1932.258822][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1932.264569][T32055] __msan_chain_origin+0x50/0x90 [ 1932.269493][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1932.274599][T32055] get_compat_msghdr+0x108/0x2b0 [ 1932.279534][T32055] do_recvmmsg+0xdba/0x22c0 [ 1932.284025][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1932.288687][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1932.294738][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1932.301073][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1932.306281][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1932.311134][T32055] do_SYSENTER_32+0x73/0x90 [ 1932.315627][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1932.321949][T32055] [ 1932.324260][T32055] Uninit was stored to memory at: [ 1932.329270][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1932.334972][T32055] __msan_chain_origin+0x50/0x90 [ 1932.339894][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1932.344990][T32055] get_compat_msghdr+0x108/0x2b0 [ 1932.349909][T32055] do_recvmmsg+0xdba/0x22c0 [ 1932.354412][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1932.359081][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1932.365293][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1932.371440][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1932.376654][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1932.381489][T32055] do_SYSENTER_32+0x73/0x90 [ 1932.385977][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1932.392312][T32055] [ 1932.394622][T32055] Uninit was stored to memory at: [ 1932.399648][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1932.405370][T32055] __msan_chain_origin+0x50/0x90 [ 1932.410291][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1932.415388][T32055] get_compat_msghdr+0x108/0x2b0 [ 1932.420307][T32055] do_recvmmsg+0xdba/0x22c0 [ 1932.424792][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1932.429452][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1932.435509][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1932.441649][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1932.446846][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1932.451679][T32055] do_SYSENTER_32+0x73/0x90 [ 1932.456183][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1932.462481][T32055] [ 1932.464792][T32055] Uninit was stored to memory at: [ 1932.469813][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1932.475516][T32055] __msan_chain_origin+0x50/0x90 [ 1932.480443][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1932.485537][T32055] get_compat_msghdr+0x108/0x2b0 [ 1932.490454][T32055] do_recvmmsg+0xdba/0x22c0 [ 1932.494942][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1932.499603][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1932.505652][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1932.511791][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1932.516975][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1932.521809][T32055] do_SYSENTER_32+0x73/0x90 [ 1932.526298][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1932.532625][T32055] [ 1932.534949][T32055] Uninit was stored to memory at: [ 1932.539962][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1932.545665][T32055] __msan_chain_origin+0x50/0x90 [ 1932.550588][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1932.555699][T32055] get_compat_msghdr+0x108/0x2b0 [ 1932.560619][T32055] do_recvmmsg+0xdba/0x22c0 [ 1932.565128][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1932.569789][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1932.575853][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1932.581993][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1932.587192][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1932.592040][T32055] do_SYSENTER_32+0x73/0x90 [ 1932.596541][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1932.602842][T32055] [ 1932.605168][T32055] Uninit was stored to memory at: [ 1932.610181][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1932.615881][T32055] __msan_chain_origin+0x50/0x90 [ 1932.620815][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1932.625928][T32055] get_compat_msghdr+0x108/0x2b0 [ 1932.630857][T32055] do_recvmmsg+0xdba/0x22c0 [ 1932.635359][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1932.640019][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1932.646068][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1932.652207][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1932.657394][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1932.662232][T32055] do_SYSENTER_32+0x73/0x90 [ 1932.666722][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1932.673025][T32055] [ 1932.675343][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1932.682004][T32055] do_recvmmsg+0xc2/0x22c0 [ 1932.686421][T32055] do_recvmmsg+0xc2/0x22c0 [ 1932.834561][T32055] not chained 7210000 origins [ 1932.839311][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1932.847991][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1932.858147][T32055] Call Trace: [ 1932.861467][T32055] dump_stack+0x21c/0x280 [ 1932.865832][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1932.871610][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1932.876832][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1932.882669][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1932.888760][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1932.893980][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1932.899553][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1932.905646][T32055] ? _copy_from_user+0x221/0x330 [ 1932.910604][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1932.915825][T32055] __msan_chain_origin+0x50/0x90 [ 1932.920798][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1932.925964][T32055] get_compat_msghdr+0x108/0x2b0 [ 1932.930942][T32055] do_recvmmsg+0xdba/0x22c0 [ 1932.935500][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1932.940815][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1932.946738][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1932.951974][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1932.957308][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1932.962104][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1932.966891][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1932.971613][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1932.977714][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1932.983888][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1932.989166][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1932.994056][T32055] do_SYSENTER_32+0x73/0x90 [ 1932.998579][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1933.004915][T32055] RIP: 0023:0xf7f40549 [ 1933.009004][T32055] Code: Bad RIP value. [ 1933.013080][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1933.021505][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1933.029487][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1933.037470][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1933.045452][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1933.053430][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1933.061426][T32055] Uninit was stored to memory at: [ 1933.066475][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1933.072210][T32055] __msan_chain_origin+0x50/0x90 [ 1933.077163][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1933.082285][T32055] get_compat_msghdr+0x108/0x2b0 [ 1933.087233][T32055] do_recvmmsg+0xdba/0x22c0 [ 1933.091736][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1933.096401][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1933.102453][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1933.108594][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1933.113792][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1933.118628][T32055] do_SYSENTER_32+0x73/0x90 [ 1933.123118][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1933.129437][T32055] [ 1933.131761][T32055] Uninit was stored to memory at: [ 1933.136880][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1933.142581][T32055] __msan_chain_origin+0x50/0x90 [ 1933.147503][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1933.152595][T32055] get_compat_msghdr+0x108/0x2b0 [ 1933.157514][T32055] do_recvmmsg+0xdba/0x22c0 [ 1933.161999][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1933.166662][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1933.172726][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1933.178865][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1933.184069][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1933.188903][T32055] do_SYSENTER_32+0x73/0x90 [ 1933.193394][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1933.199709][T32055] [ 1933.202017][T32055] Uninit was stored to memory at: [ 1933.207026][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1933.212727][T32055] __msan_chain_origin+0x50/0x90 [ 1933.217647][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1933.222739][T32055] get_compat_msghdr+0x108/0x2b0 [ 1933.227667][T32055] do_recvmmsg+0xdba/0x22c0 [ 1933.232152][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1933.236827][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1933.242877][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1933.249028][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1933.254212][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1933.259046][T32055] do_SYSENTER_32+0x73/0x90 [ 1933.263546][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1933.269861][T32055] [ 1933.272171][T32055] Uninit was stored to memory at: [ 1933.277181][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1933.282895][T32055] __msan_chain_origin+0x50/0x90 [ 1933.287817][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1933.292911][T32055] get_compat_msghdr+0x108/0x2b0 [ 1933.297831][T32055] do_recvmmsg+0xdba/0x22c0 [ 1933.302316][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1933.306994][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1933.313058][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1933.319196][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1933.324381][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1933.329229][T32055] do_SYSENTER_32+0x73/0x90 [ 1933.333717][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1933.340027][T32055] [ 1933.342340][T32055] Uninit was stored to memory at: [ 1933.347361][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1933.353061][T32055] __msan_chain_origin+0x50/0x90 [ 1933.357993][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1933.363091][T32055] get_compat_msghdr+0x108/0x2b0 [ 1933.368028][T32055] do_recvmmsg+0xdba/0x22c0 [ 1933.372514][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1933.377177][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1933.383238][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1933.389378][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1933.394562][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1933.399409][T32055] do_SYSENTER_32+0x73/0x90 [ 1933.403896][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1933.410209][T32055] [ 1933.412515][T32055] Uninit was stored to memory at: [ 1933.417526][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1933.423361][T32055] __msan_chain_origin+0x50/0x90 [ 1933.428292][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1933.433392][T32055] get_compat_msghdr+0x108/0x2b0 [ 1933.438361][T32055] do_recvmmsg+0xdba/0x22c0 [ 1933.442849][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1933.447540][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1933.453618][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1933.459757][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1933.464942][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1933.469807][T32055] do_SYSENTER_32+0x73/0x90 [ 1933.474297][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1933.480600][T32055] [ 1933.482911][T32055] Uninit was stored to memory at: [ 1933.487928][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1933.493631][T32055] __msan_chain_origin+0x50/0x90 [ 1933.498571][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1933.503763][T32055] get_compat_msghdr+0x108/0x2b0 [ 1933.508691][T32055] do_recvmmsg+0xdba/0x22c0 [ 1933.513177][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1933.517859][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1933.523918][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1933.530056][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1933.535423][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1933.540256][T32055] do_SYSENTER_32+0x73/0x90 [ 1933.544745][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1933.551046][T32055] [ 1933.553368][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1933.560039][T32055] do_recvmmsg+0xc2/0x22c0 [ 1933.564439][T32055] do_recvmmsg+0xc2/0x22c0 [ 1933.749636][T32055] not chained 7220000 origins [ 1933.754378][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1933.763077][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1933.773144][T32055] Call Trace: [ 1933.776464][T32055] dump_stack+0x21c/0x280 [ 1933.780842][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1933.786616][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1933.791841][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1933.797669][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1933.803769][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1933.808991][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1933.814567][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1933.820670][T32055] ? _copy_from_user+0x221/0x330 [ 1933.825671][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1933.830891][T32055] __msan_chain_origin+0x50/0x90 [ 1933.836812][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1933.841972][T32055] get_compat_msghdr+0x108/0x2b0 [ 1933.846961][T32055] do_recvmmsg+0xdba/0x22c0 [ 1933.851513][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1933.856748][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1933.863282][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1933.868508][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1933.873903][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1933.878682][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1933.883469][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1933.889055][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1933.895140][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1933.901286][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1933.906482][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1933.911323][T32055] do_SYSENTER_32+0x73/0x90 [ 1933.915816][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1933.922134][T32055] RIP: 0023:0xf7f40549 [ 1933.926180][T32055] Code: Bad RIP value. [ 1933.930227][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1933.938984][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1933.946949][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1933.954903][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1933.962870][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1933.970839][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1933.978830][T32055] Uninit was stored to memory at: [ 1933.983847][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1933.989554][T32055] __msan_chain_origin+0x50/0x90 [ 1933.994486][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1933.999598][T32055] get_compat_msghdr+0x108/0x2b0 [ 1934.004547][T32055] do_recvmmsg+0xdba/0x22c0 [ 1934.009035][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1934.013697][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1934.019757][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1934.025900][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1934.031087][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1934.035942][T32055] do_SYSENTER_32+0x73/0x90 [ 1934.040441][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1934.046830][T32055] [ 1934.049844][T32055] Uninit was stored to memory at: [ 1934.054857][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1934.060559][T32055] __msan_chain_origin+0x50/0x90 [ 1934.065493][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1934.070674][T32055] get_compat_msghdr+0x108/0x2b0 [ 1934.075603][T32055] do_recvmmsg+0xdba/0x22c0 [ 1934.080135][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1934.084838][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1934.091075][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1934.097227][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1934.102411][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1934.107245][T32055] do_SYSENTER_32+0x73/0x90 [ 1934.111735][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1934.118070][T32055] [ 1934.120400][T32055] Uninit was stored to memory at: [ 1934.125415][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1934.131132][T32055] __msan_chain_origin+0x50/0x90 [ 1934.136065][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1934.141162][T32055] get_compat_msghdr+0x108/0x2b0 [ 1934.146093][T32055] do_recvmmsg+0xdba/0x22c0 [ 1934.150597][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1934.155275][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1934.161344][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1934.167494][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1934.172677][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1934.177514][T32055] do_SYSENTER_32+0x73/0x90 [ 1934.182330][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1934.188900][T32055] [ 1934.191215][T32055] Uninit was stored to memory at: [ 1934.196231][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1934.201937][T32055] __msan_chain_origin+0x50/0x90 [ 1934.206888][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1934.212021][T32055] get_compat_msghdr+0x108/0x2b0 [ 1934.216979][T32055] do_recvmmsg+0xdba/0x22c0 [ 1934.221468][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1934.226825][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1934.232883][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1934.239041][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1934.244505][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1934.249358][T32055] do_SYSENTER_32+0x73/0x90 [ 1934.253863][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1934.260165][T32055] [ 1934.262473][T32055] Uninit was stored to memory at: [ 1934.267485][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1934.273187][T32055] __msan_chain_origin+0x50/0x90 [ 1934.278131][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1934.283231][T32055] get_compat_msghdr+0x108/0x2b0 [ 1934.288152][T32055] do_recvmmsg+0xdba/0x22c0 [ 1934.292637][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1934.297297][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1934.303521][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1934.309678][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1934.314867][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1934.319728][T32055] do_SYSENTER_32+0x73/0x90 [ 1934.324222][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1934.330617][T32055] [ 1934.332926][T32055] Uninit was stored to memory at: [ 1934.337940][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1934.343660][T32055] __msan_chain_origin+0x50/0x90 [ 1934.348608][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1934.353748][T32055] get_compat_msghdr+0x108/0x2b0 [ 1934.358722][T32055] do_recvmmsg+0xdba/0x22c0 [ 1934.363233][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1934.368022][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1934.374074][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1934.380223][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1934.385421][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1934.390275][T32055] do_SYSENTER_32+0x73/0x90 [ 1934.394778][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1934.401095][T32055] [ 1934.403414][T32055] Uninit was stored to memory at: [ 1934.408430][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1934.414208][T32055] __msan_chain_origin+0x50/0x90 [ 1934.419136][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1934.424231][T32055] get_compat_msghdr+0x108/0x2b0 [ 1934.429152][T32055] do_recvmmsg+0xdba/0x22c0 [ 1934.433641][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1934.438299][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1934.444934][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1934.451090][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1934.456337][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1934.461186][T32055] do_SYSENTER_32+0x73/0x90 [ 1934.465687][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1934.471991][T32055] [ 1934.474301][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1934.480972][T32055] do_recvmmsg+0xc2/0x22c0 [ 1934.485822][T32055] do_recvmmsg+0xc2/0x22c0 [ 1934.765333][T32055] not chained 7230000 origins [ 1934.770090][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1934.778769][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1934.788836][T32055] Call Trace: [ 1934.792158][T32055] dump_stack+0x21c/0x280 [ 1934.796541][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1934.802554][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1934.808641][T32055] ? sched_clock_cpu+0x65/0x8e0 [ 1934.813524][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1934.818746][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1934.824638][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1934.830726][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1934.836592][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1934.847285][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1934.857984][T32055] ? _copy_from_user+0x221/0x330 [ 1934.862966][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1934.868604][T32055] __msan_chain_origin+0x50/0x90 [ 1934.873543][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1934.878675][T32055] get_compat_msghdr+0x108/0x2b0 [ 1934.883638][T32055] do_recvmmsg+0xdba/0x22c0 [ 1934.888251][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1934.893442][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1934.899323][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1934.904514][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1934.909805][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1934.914569][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1934.919338][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1934.924021][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1934.930100][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1934.936257][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1934.941458][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1934.946327][T32055] do_SYSENTER_32+0x73/0x90 [ 1934.950842][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1934.957169][T32055] RIP: 0023:0xf7f40549 [ 1934.961223][T32055] Code: Bad RIP value. [ 1934.965294][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1934.973721][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1934.982198][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1934.990152][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1934.998135][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1935.006092][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1935.014077][T32055] Uninit was stored to memory at: [ 1935.019109][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1935.024814][T32055] __msan_chain_origin+0x50/0x90 [ 1935.029738][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1935.034846][T32055] get_compat_msghdr+0x108/0x2b0 [ 1935.039767][T32055] do_recvmmsg+0xdba/0x22c0 [ 1935.044254][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1935.048916][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1935.055017][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1935.061190][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1935.066395][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1935.071276][T32055] do_SYSENTER_32+0x73/0x90 [ 1935.075796][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1935.082123][T32055] [ 1935.084450][T32055] Uninit was stored to memory at: [ 1935.089472][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1935.095179][T32055] __msan_chain_origin+0x50/0x90 [ 1935.101513][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1935.106616][T32055] get_compat_msghdr+0x108/0x2b0 [ 1935.111538][T32055] do_recvmmsg+0xdba/0x22c0 [ 1935.116038][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1935.120697][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1935.126749][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1935.132890][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1935.138075][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1935.142910][T32055] do_SYSENTER_32+0x73/0x90 [ 1935.147399][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1935.153701][T32055] [ 1935.156027][T32055] Uninit was stored to memory at: [ 1935.161054][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1935.166772][T32055] __msan_chain_origin+0x50/0x90 [ 1935.171696][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1935.176788][T32055] get_compat_msghdr+0x108/0x2b0 [ 1935.181721][T32055] do_recvmmsg+0xdba/0x22c0 [ 1935.186235][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1935.191650][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1935.197727][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1935.203870][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1935.209057][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1935.213891][T32055] do_SYSENTER_32+0x73/0x90 [ 1935.218518][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1935.224826][T32055] [ 1935.227137][T32055] Uninit was stored to memory at: [ 1935.232153][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1935.237856][T32055] __msan_chain_origin+0x50/0x90 [ 1935.242805][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1935.247924][T32055] get_compat_msghdr+0x108/0x2b0 [ 1935.252848][T32055] do_recvmmsg+0xdba/0x22c0 [ 1935.257349][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1935.262032][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1935.268083][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1935.274237][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1935.279531][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1935.284397][T32055] do_SYSENTER_32+0x73/0x90 [ 1935.288903][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1935.295225][T32055] [ 1935.297551][T32055] Uninit was stored to memory at: [ 1935.302583][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1935.308302][T32055] __msan_chain_origin+0x50/0x90 [ 1935.313228][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1935.318692][T32055] get_compat_msghdr+0x108/0x2b0 [ 1935.323625][T32055] do_recvmmsg+0xdba/0x22c0 [ 1935.328126][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1935.332790][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1935.338853][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1935.344993][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1935.350193][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1935.355028][T32055] do_SYSENTER_32+0x73/0x90 [ 1935.359531][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1935.365831][T32055] [ 1935.368156][T32055] Uninit was stored to memory at: [ 1935.373193][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1935.379176][T32055] __msan_chain_origin+0x50/0x90 [ 1935.384119][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1935.389215][T32055] get_compat_msghdr+0x108/0x2b0 [ 1935.394163][T32055] do_recvmmsg+0xdba/0x22c0 [ 1935.398664][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1935.403444][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1935.410470][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1935.416631][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1935.421819][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1935.426673][T32055] do_SYSENTER_32+0x73/0x90 [ 1935.431179][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1935.437479][T32055] [ 1935.439790][T32055] Uninit was stored to memory at: [ 1935.444822][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1935.451830][T32055] __msan_chain_origin+0x50/0x90 [ 1935.456769][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1935.461895][T32055] get_compat_msghdr+0x108/0x2b0 [ 1935.467882][T32055] do_recvmmsg+0xdba/0x22c0 [ 1935.472463][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1935.477147][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1935.483201][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1935.489342][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1935.494530][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1935.499454][T32055] do_SYSENTER_32+0x73/0x90 [ 1935.503950][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1935.510277][T32055] [ 1935.512599][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1935.519385][T32055] do_recvmmsg+0xc2/0x22c0 [ 1935.523801][T32055] do_recvmmsg+0xc2/0x22c0 [ 1935.687632][T32055] not chained 7240000 origins [ 1935.692383][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1935.701068][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1935.711234][T32055] Call Trace: [ 1935.714555][T32055] dump_stack+0x21c/0x280 [ 1935.718938][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1935.724693][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1935.729930][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1935.735766][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1935.740987][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1935.746813][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1935.752896][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1935.758157][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1935.763728][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1935.769823][T32055] ? _copy_from_user+0x221/0x330 [ 1935.774791][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1935.780008][T32055] __msan_chain_origin+0x50/0x90 [ 1935.784983][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1935.790147][T32055] get_compat_msghdr+0x108/0x2b0 [ 1935.795121][T32055] do_recvmmsg+0xdba/0x22c0 [ 1935.799679][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1935.804917][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1935.810834][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1935.816781][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1935.822090][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1935.826872][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1935.831665][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1935.836429][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1935.842560][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1935.848741][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1935.853998][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1935.858882][T32055] do_SYSENTER_32+0x73/0x90 [ 1935.863413][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1935.870214][T32055] RIP: 0023:0xf7f40549 [ 1935.874284][T32055] Code: Bad RIP value. [ 1935.878365][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1935.886802][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1935.894799][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1935.903131][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1935.911134][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1935.919126][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1935.927239][T32055] Uninit was stored to memory at: [ 1935.932290][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1935.938227][T32055] __msan_chain_origin+0x50/0x90 [ 1935.943157][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1935.948253][T32055] get_compat_msghdr+0x108/0x2b0 [ 1935.953191][T32055] do_recvmmsg+0xdba/0x22c0 [ 1935.957694][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1935.962377][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1935.968451][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1935.974591][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1935.979777][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1935.984630][T32055] do_SYSENTER_32+0x73/0x90 [ 1935.989118][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1935.995506][T32055] [ 1935.998000][T32055] Uninit was stored to memory at: [ 1936.003013][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1936.008723][T32055] __msan_chain_origin+0x50/0x90 [ 1936.013666][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1936.018814][T32055] get_compat_msghdr+0x108/0x2b0 [ 1936.023741][T32055] do_recvmmsg+0xdba/0x22c0 [ 1936.028244][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1936.032910][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1936.038965][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1936.045108][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1936.050397][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1936.056196][T32055] do_SYSENTER_32+0x73/0x90 [ 1936.060694][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1936.067047][T32055] [ 1936.069357][T32055] Uninit was stored to memory at: [ 1936.074388][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1936.080362][T32055] __msan_chain_origin+0x50/0x90 [ 1936.085333][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1936.090458][T32055] get_compat_msghdr+0x108/0x2b0 [ 1936.095404][T32055] do_recvmmsg+0xdba/0x22c0 [ 1936.099890][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1936.104555][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1936.110617][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1936.116763][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1936.121968][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1936.126802][T32055] do_SYSENTER_32+0x73/0x90 [ 1936.131319][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1936.137619][T32055] [ 1936.140726][T32055] Uninit was stored to memory at: [ 1936.146022][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1936.151731][T32055] __msan_chain_origin+0x50/0x90 [ 1936.156664][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1936.162194][T32055] get_compat_msghdr+0x108/0x2b0 [ 1936.167127][T32055] do_recvmmsg+0xdba/0x22c0 [ 1936.171632][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1936.176339][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1936.182416][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1936.188570][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1936.193930][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1936.198777][T32055] do_SYSENTER_32+0x73/0x90 [ 1936.203286][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1936.209588][T32055] [ 1936.211896][T32055] Uninit was stored to memory at: [ 1936.216924][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1936.222626][T32055] __msan_chain_origin+0x50/0x90 [ 1936.227558][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1936.232667][T32055] get_compat_msghdr+0x108/0x2b0 [ 1936.237592][T32055] do_recvmmsg+0xdba/0x22c0 [ 1936.242169][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1936.246843][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1936.252909][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1936.259049][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1936.264256][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1936.269107][T32055] do_SYSENTER_32+0x73/0x90 [ 1936.273611][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1936.280608][T32055] [ 1936.282926][T32055] Uninit was stored to memory at: [ 1936.287975][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1936.293704][T32055] __msan_chain_origin+0x50/0x90 [ 1936.298650][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1936.303754][T32055] get_compat_msghdr+0x108/0x2b0 [ 1936.308691][T32055] do_recvmmsg+0xdba/0x22c0 [ 1936.313191][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1936.318089][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1936.324150][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1936.330298][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1936.335494][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1936.340334][T32055] do_SYSENTER_32+0x73/0x90 [ 1936.344828][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1936.351131][T32055] [ 1936.353453][T32055] Uninit was stored to memory at: [ 1936.358467][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1936.364185][T32055] __msan_chain_origin+0x50/0x90 [ 1936.369212][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1936.374310][T32055] get_compat_msghdr+0x108/0x2b0 [ 1936.379233][T32055] do_recvmmsg+0xdba/0x22c0 [ 1936.383744][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1936.388409][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1936.394475][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1936.400634][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1936.405836][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1936.410678][T32055] do_SYSENTER_32+0x73/0x90 [ 1936.415187][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1936.421490][T32055] [ 1936.423813][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1936.430489][T32055] do_recvmmsg+0xc2/0x22c0 [ 1936.434997][T32055] do_recvmmsg+0xc2/0x22c0 [ 1936.659778][T32055] not chained 7250000 origins [ 1936.664507][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1936.673226][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1936.683288][T32055] Call Trace: [ 1936.686607][T32055] dump_stack+0x21c/0x280 [ 1936.690972][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1936.696731][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1936.701957][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1936.707809][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1936.713030][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1936.718837][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1936.724910][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1936.730144][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1936.735723][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1936.741806][T32055] ? _copy_from_user+0x221/0x330 [ 1936.747166][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1936.752353][T32055] __msan_chain_origin+0x50/0x90 [ 1936.757285][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1936.762408][T32055] get_compat_msghdr+0x108/0x2b0 [ 1936.767358][T32055] do_recvmmsg+0xdba/0x22c0 [ 1936.771870][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1936.777059][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1936.782955][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1936.788146][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1936.793427][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1936.798187][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1936.802942][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1936.807671][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1936.813865][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1936.820055][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1936.825313][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1936.831149][T32055] do_SYSENTER_32+0x73/0x90 [ 1936.835685][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1936.842021][T32055] RIP: 0023:0xf7f40549 [ 1936.846082][T32055] Code: Bad RIP value. [ 1936.850128][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1936.858523][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1936.866485][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1936.874458][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1936.882416][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1936.890372][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1936.898358][T32055] Uninit was stored to memory at: [ 1936.903420][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1936.909122][T32055] __msan_chain_origin+0x50/0x90 [ 1936.914048][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1936.919287][T32055] get_compat_msghdr+0x108/0x2b0 [ 1936.924228][T32055] do_recvmmsg+0xdba/0x22c0 [ 1936.928838][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1936.933513][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1936.940017][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1936.946173][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1936.951399][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1936.956272][T32055] do_SYSENTER_32+0x73/0x90 [ 1936.960803][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1936.967136][T32055] [ 1936.969462][T32055] Uninit was stored to memory at: [ 1936.974499][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1936.980204][T32055] __msan_chain_origin+0x50/0x90 [ 1936.986027][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1936.991149][T32055] get_compat_msghdr+0x108/0x2b0 [ 1936.996090][T32055] do_recvmmsg+0xdba/0x22c0 [ 1937.000575][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1937.005242][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1937.011296][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1937.017436][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1937.023410][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1937.028258][T32055] do_SYSENTER_32+0x73/0x90 [ 1937.032857][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1937.039175][T32055] [ 1937.041486][T32055] Uninit was stored to memory at: [ 1937.046850][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1937.052576][T32055] __msan_chain_origin+0x50/0x90 [ 1937.057527][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1937.062645][T32055] get_compat_msghdr+0x108/0x2b0 [ 1937.067585][T32055] do_recvmmsg+0xdba/0x22c0 [ 1937.072080][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1937.076749][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1937.082807][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1937.088961][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1937.094148][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1937.098987][T32055] do_SYSENTER_32+0x73/0x90 [ 1937.103495][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1937.109794][T32055] [ 1937.112115][T32055] Uninit was stored to memory at: [ 1937.117132][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1937.122838][T32055] __msan_chain_origin+0x50/0x90 [ 1937.127762][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1937.132862][T32055] get_compat_msghdr+0x108/0x2b0 [ 1937.137787][T32055] do_recvmmsg+0xdba/0x22c0 [ 1937.142288][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1937.146949][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1937.153002][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1937.159157][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1937.164359][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1937.169211][T32055] do_SYSENTER_32+0x73/0x90 [ 1937.173741][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1937.180074][T32055] [ 1937.182396][T32055] Uninit was stored to memory at: [ 1937.187411][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1937.193129][T32055] __msan_chain_origin+0x50/0x90 [ 1937.198058][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1937.203177][T32055] get_compat_msghdr+0x108/0x2b0 [ 1937.208107][T32055] do_recvmmsg+0xdba/0x22c0 [ 1937.212605][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1937.217271][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1937.223328][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1937.229483][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1937.234671][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1937.239507][T32055] do_SYSENTER_32+0x73/0x90 [ 1937.244018][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1937.252406][T32055] [ 1937.254723][T32055] Uninit was stored to memory at: [ 1937.259737][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1937.265444][T32055] __msan_chain_origin+0x50/0x90 [ 1937.270384][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1937.275494][T32055] get_compat_msghdr+0x108/0x2b0 [ 1937.280451][T32055] do_recvmmsg+0xdba/0x22c0 [ 1937.284941][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1937.289604][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1937.296268][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1937.302425][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1937.307620][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1937.312464][T32055] do_SYSENTER_32+0x73/0x90 [ 1937.316953][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1937.323302][T32055] [ 1937.325631][T32055] Uninit was stored to memory at: [ 1937.330642][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1937.336359][T32055] __msan_chain_origin+0x50/0x90 [ 1937.341283][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1937.346394][T32055] get_compat_msghdr+0x108/0x2b0 [ 1937.351489][T32055] do_recvmmsg+0xdba/0x22c0 [ 1937.356001][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1937.360663][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1937.366730][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1937.372886][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1937.378073][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1937.383450][T32055] do_SYSENTER_32+0x73/0x90 [ 1937.387969][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1937.394274][T32055] [ 1937.396586][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1937.403262][T32055] do_recvmmsg+0xc2/0x22c0 [ 1937.407666][T32055] do_recvmmsg+0xc2/0x22c0 [ 1937.589703][T32055] not chained 7260000 origins [ 1937.594449][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1937.603122][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1937.613186][T32055] Call Trace: [ 1937.616504][T32055] dump_stack+0x21c/0x280 [ 1937.620868][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1937.626620][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1937.631839][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1937.638280][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1937.643511][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1937.650385][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1937.656470][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1937.661691][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1937.667272][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1937.673368][T32055] ? _copy_from_user+0x221/0x330 [ 1937.678977][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1937.684199][T32055] __msan_chain_origin+0x50/0x90 [ 1937.689166][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1937.694323][T32055] get_compat_msghdr+0x108/0x2b0 [ 1937.699294][T32055] do_recvmmsg+0xdba/0x22c0 [ 1937.703846][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1937.709087][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1937.715011][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1937.720264][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1937.725573][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1937.730421][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1937.736352][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1937.741071][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1937.747171][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1937.753347][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1937.758581][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1937.764148][T32055] do_SYSENTER_32+0x73/0x90 [ 1937.768674][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1937.775015][T32055] RIP: 0023:0xf7f40549 [ 1937.779209][T32055] Code: Bad RIP value. [ 1937.783284][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1937.791713][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1937.799696][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1937.807684][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1937.815672][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1937.823667][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1937.831700][T32055] Uninit was stored to memory at: [ 1937.836752][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1937.842488][T32055] __msan_chain_origin+0x50/0x90 [ 1937.847436][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1937.852561][T32055] get_compat_msghdr+0x108/0x2b0 [ 1937.857482][T32055] do_recvmmsg+0xdba/0x22c0 [ 1937.861981][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1937.866660][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1937.872831][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1937.878970][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1937.884173][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1937.889024][T32055] do_SYSENTER_32+0x73/0x90 [ 1937.893531][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1937.899841][T32055] [ 1937.902182][T32055] Uninit was stored to memory at: [ 1937.907725][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1937.913443][T32055] __msan_chain_origin+0x50/0x90 [ 1937.918388][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1937.923485][T32055] get_compat_msghdr+0x108/0x2b0 [ 1937.928413][T32055] do_recvmmsg+0xdba/0x22c0 [ 1937.932914][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1937.937617][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1937.943694][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1937.949866][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1937.955053][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1937.959931][T32055] do_SYSENTER_32+0x73/0x90 [ 1937.964472][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1937.970892][T32055] [ 1937.973219][T32055] Uninit was stored to memory at: [ 1937.978252][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1937.983986][T32055] __msan_chain_origin+0x50/0x90 [ 1937.988911][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1937.994007][T32055] get_compat_msghdr+0x108/0x2b0 [ 1937.998938][T32055] do_recvmmsg+0xdba/0x22c0 [ 1938.003427][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1938.008092][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1938.014143][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1938.020294][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1938.025490][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1938.030335][T32055] do_SYSENTER_32+0x73/0x90 [ 1938.034853][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1938.041165][T32055] [ 1938.043498][T32055] Uninit was stored to memory at: [ 1938.048532][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1938.054256][T32055] __msan_chain_origin+0x50/0x90 [ 1938.059180][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1938.064273][T32055] get_compat_msghdr+0x108/0x2b0 [ 1938.069200][T32055] do_recvmmsg+0xdba/0x22c0 [ 1938.073688][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1938.078365][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1938.084427][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1938.090579][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1938.095767][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1938.100605][T32055] do_SYSENTER_32+0x73/0x90 [ 1938.105099][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1938.111408][T32055] [ 1938.113717][T32055] Uninit was stored to memory at: [ 1938.118739][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1938.124441][T32055] __msan_chain_origin+0x50/0x90 [ 1938.129364][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1938.134471][T32055] get_compat_msghdr+0x108/0x2b0 [ 1938.139412][T32055] do_recvmmsg+0xdba/0x22c0 [ 1938.143898][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1938.148568][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1938.154629][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1938.160783][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1938.165980][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1938.170813][T32055] do_SYSENTER_32+0x73/0x90 [ 1938.175314][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1938.181623][T32055] [ 1938.183931][T32055] Uninit was stored to memory at: [ 1938.188953][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1938.194653][T32055] __msan_chain_origin+0x50/0x90 [ 1938.199577][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1938.204682][T32055] get_compat_msghdr+0x108/0x2b0 [ 1938.209603][T32055] do_recvmmsg+0xdba/0x22c0 [ 1938.214090][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1938.218764][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1938.224818][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1938.230970][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1938.236172][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1938.241027][T32055] do_SYSENTER_32+0x73/0x90 [ 1938.245546][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1938.251846][T32055] [ 1938.254155][T32055] Uninit was stored to memory at: [ 1938.259165][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1938.264895][T32055] __msan_chain_origin+0x50/0x90 [ 1938.269839][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1938.275630][T32055] get_compat_msghdr+0x108/0x2b0 [ 1938.280550][T32055] do_recvmmsg+0xdba/0x22c0 [ 1938.285046][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1938.289716][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1938.295770][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1938.301928][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1938.307112][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1938.311947][T32055] do_SYSENTER_32+0x73/0x90 [ 1938.316434][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1938.322747][T32055] [ 1938.325068][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1938.331727][T32055] do_recvmmsg+0xc2/0x22c0 [ 1938.336124][T32055] do_recvmmsg+0xc2/0x22c0 [ 1938.556993][T32055] not chained 7270000 origins [ 1938.561750][T32055] CPU: 0 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1938.570422][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1938.580483][T32055] Call Trace: [ 1938.583821][T32055] dump_stack+0x21c/0x280 [ 1938.588183][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1938.593946][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1938.599168][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1938.604998][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1938.610233][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1938.616059][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1938.622140][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1938.627361][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1938.632932][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1938.639024][T32055] ? _copy_from_user+0x221/0x330 [ 1938.643988][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1938.649201][T32055] __msan_chain_origin+0x50/0x90 [ 1938.654169][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1938.659326][T32055] get_compat_msghdr+0x108/0x2b0 [ 1938.664296][T32055] do_recvmmsg+0xdba/0x22c0 [ 1938.668839][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1938.674060][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1938.679976][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1938.685207][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1938.690515][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1938.695311][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1938.700175][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1938.704885][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1938.710992][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1938.717150][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1938.722371][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1938.727238][T32055] do_SYSENTER_32+0x73/0x90 [ 1938.731734][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1938.738072][T32055] RIP: 0023:0xf7f40549 [ 1938.742151][T32055] Code: Bad RIP value. [ 1938.746199][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1938.754594][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1938.762552][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1938.770505][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1938.778469][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1938.786436][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1938.794419][T32055] Uninit was stored to memory at: [ 1938.799436][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1938.805150][T32055] __msan_chain_origin+0x50/0x90 [ 1938.810094][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1938.815207][T32055] get_compat_msghdr+0x108/0x2b0 [ 1938.820154][T32055] do_recvmmsg+0xdba/0x22c0 [ 1938.824644][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1938.829306][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1938.835358][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1938.841510][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1938.846704][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1938.851536][T32055] do_SYSENTER_32+0x73/0x90 [ 1938.856025][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1938.862324][T32055] [ 1938.864814][T32055] Uninit was stored to memory at: [ 1938.869823][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1938.875527][T32055] __msan_chain_origin+0x50/0x90 [ 1938.880460][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1938.885566][T32055] get_compat_msghdr+0x108/0x2b0 [ 1938.890500][T32055] do_recvmmsg+0xdba/0x22c0 [ 1938.894984][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1938.899644][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1938.905692][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1938.911830][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1938.917011][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1938.921857][T32055] do_SYSENTER_32+0x73/0x90 [ 1938.926374][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1938.932710][T32055] [ 1938.935016][T32055] Uninit was stored to memory at: [ 1938.940031][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1938.945777][T32055] __msan_chain_origin+0x50/0x90 [ 1938.950709][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1938.955806][T32055] get_compat_msghdr+0x108/0x2b0 [ 1938.960743][T32055] do_recvmmsg+0xdba/0x22c0 [ 1938.965232][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1938.969892][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1938.975952][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1938.982091][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1938.987274][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1938.992122][T32055] do_SYSENTER_32+0x73/0x90 [ 1938.996609][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1939.003777][T32055] [ 1939.006082][T32055] Uninit was stored to memory at: [ 1939.011119][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1939.016847][T32055] __msan_chain_origin+0x50/0x90 [ 1939.021769][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1939.026862][T32055] get_compat_msghdr+0x108/0x2b0 [ 1939.031797][T32055] do_recvmmsg+0xdba/0x22c0 [ 1939.036311][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1939.040994][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1939.047073][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1939.053242][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1939.058446][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1939.063280][T32055] do_SYSENTER_32+0x73/0x90 [ 1939.067767][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1939.074077][T32055] [ 1939.076386][T32055] Uninit was stored to memory at: [ 1939.081397][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1939.087114][T32055] __msan_chain_origin+0x50/0x90 [ 1939.092037][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1939.097132][T32055] get_compat_msghdr+0x108/0x2b0 [ 1939.102051][T32055] do_recvmmsg+0xdba/0x22c0 [ 1939.106534][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1939.111202][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1939.117252][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1939.123407][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1939.128601][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1939.133453][T32055] do_SYSENTER_32+0x73/0x90 [ 1939.137942][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1939.144251][T32055] [ 1939.146578][T32055] Uninit was stored to memory at: [ 1939.151591][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1939.157296][T32055] __msan_chain_origin+0x50/0x90 [ 1939.162406][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1939.167521][T32055] get_compat_msghdr+0x108/0x2b0 [ 1939.172445][T32055] do_recvmmsg+0xdba/0x22c0 [ 1939.176932][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1939.181609][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1939.187669][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1939.193808][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1939.198990][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1939.203824][T32055] do_SYSENTER_32+0x73/0x90 [ 1939.208311][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1939.214610][T32055] [ 1939.216920][T32055] Uninit was stored to memory at: [ 1939.221933][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1939.227644][T32055] __msan_chain_origin+0x50/0x90 [ 1939.232578][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1939.238629][T32055] get_compat_msghdr+0x108/0x2b0 [ 1939.243551][T32055] do_recvmmsg+0xdba/0x22c0 [ 1939.248037][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1939.252712][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1939.258793][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1939.264934][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1939.270130][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1939.274979][T32055] do_SYSENTER_32+0x73/0x90 [ 1939.279482][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1939.285784][T32055] [ 1939.288104][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1939.294776][T32055] do_recvmmsg+0xc2/0x22c0 [ 1939.299188][T32055] do_recvmmsg+0xc2/0x22c0 [ 1939.494776][T32055] not chained 7280000 origins [ 1939.499517][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1939.508194][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1939.518256][T32055] Call Trace: [ 1939.521577][T32055] dump_stack+0x21c/0x280 [ 1939.525952][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1939.531704][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1939.536933][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1939.542762][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1939.548022][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1939.553849][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1939.559941][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1939.565162][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1939.570728][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1939.576822][T32055] ? _copy_from_user+0x221/0x330 [ 1939.581780][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1939.586998][T32055] __msan_chain_origin+0x50/0x90 [ 1939.591968][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1939.597124][T32055] get_compat_msghdr+0x108/0x2b0 [ 1939.602094][T32055] do_recvmmsg+0xdba/0x22c0 [ 1939.606648][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1939.611874][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1939.617787][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1939.623012][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1939.628318][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1939.633097][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1939.637883][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1939.643424][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1939.649533][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1939.655707][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1939.660942][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1939.665812][T32055] do_SYSENTER_32+0x73/0x90 [ 1939.670346][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1939.676722][T32055] RIP: 0023:0xf7f40549 [ 1939.680765][T32055] Code: Bad RIP value. [ 1939.684813][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1939.693223][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1939.701192][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1939.709148][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1939.717104][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1939.725071][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1939.733052][T32055] Uninit was stored to memory at: [ 1939.738086][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1939.745268][T32055] __msan_chain_origin+0x50/0x90 [ 1939.750199][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1939.755302][T32055] get_compat_msghdr+0x108/0x2b0 [ 1939.760342][T32055] do_recvmmsg+0xdba/0x22c0 [ 1939.764842][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1939.770479][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1939.776547][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1939.782702][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1939.787893][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1939.792731][T32055] do_SYSENTER_32+0x73/0x90 [ 1939.797220][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1939.803530][T32055] [ 1939.805836][T32055] Uninit was stored to memory at: [ 1939.810857][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1939.816586][T32055] __msan_chain_origin+0x50/0x90 [ 1939.821521][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1939.826615][T32055] get_compat_msghdr+0x108/0x2b0 [ 1939.831546][T32055] do_recvmmsg+0xdba/0x22c0 [ 1939.836137][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1939.840797][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1939.846856][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1939.852997][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1939.858184][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1939.863018][T32055] do_SYSENTER_32+0x73/0x90 [ 1939.867505][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1939.874080][T32055] [ 1939.876390][T32055] Uninit was stored to memory at: [ 1939.881416][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1939.887135][T32055] __msan_chain_origin+0x50/0x90 [ 1939.892059][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1939.897153][T32055] get_compat_msghdr+0x108/0x2b0 [ 1939.902089][T32055] do_recvmmsg+0xdba/0x22c0 [ 1939.906588][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1939.911249][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1939.917301][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1939.923440][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1939.928636][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1939.933481][T32055] do_SYSENTER_32+0x73/0x90 [ 1939.937970][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1939.944279][T32055] [ 1939.946627][T32055] Uninit was stored to memory at: [ 1939.951643][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1939.957344][T32055] __msan_chain_origin+0x50/0x90 [ 1939.962273][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1939.967381][T32055] get_compat_msghdr+0x108/0x2b0 [ 1939.972304][T32055] do_recvmmsg+0xdba/0x22c0 [ 1939.976789][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1939.981454][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1939.987504][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1939.993654][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1939.998846][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1940.003718][T32055] do_SYSENTER_32+0x73/0x90 [ 1940.008208][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1940.014547][T32055] [ 1940.016856][T32055] Uninit was stored to memory at: [ 1940.021868][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1940.027576][T32055] __msan_chain_origin+0x50/0x90 [ 1940.032502][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1940.037599][T32055] get_compat_msghdr+0x108/0x2b0 [ 1940.042699][T32055] do_recvmmsg+0xdba/0x22c0 [ 1940.047217][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1940.051915][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1940.057966][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1940.064106][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1940.069292][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1940.074131][T32055] do_SYSENTER_32+0x73/0x90 [ 1940.078641][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1940.084949][T32055] [ 1940.087264][T32055] Uninit was stored to memory at: [ 1940.092288][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1940.097991][T32055] __msan_chain_origin+0x50/0x90 [ 1940.102944][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1940.108039][T32055] get_compat_msghdr+0x108/0x2b0 [ 1940.112966][T32055] do_recvmmsg+0xdba/0x22c0 [ 1940.117462][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1940.122145][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1940.128195][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1940.134346][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1940.139532][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1940.144367][T32055] do_SYSENTER_32+0x73/0x90 [ 1940.148855][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1940.155167][T32055] [ 1940.157476][T32055] Uninit was stored to memory at: [ 1940.162502][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1940.168214][T32055] __msan_chain_origin+0x50/0x90 [ 1940.173152][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1940.178258][T32055] get_compat_msghdr+0x108/0x2b0 [ 1940.183179][T32055] do_recvmmsg+0xdba/0x22c0 [ 1940.187664][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1940.192338][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1940.198386][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1940.204524][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1940.209709][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1940.214542][T32055] do_SYSENTER_32+0x73/0x90 [ 1940.219042][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1940.225344][T32055] [ 1940.227653][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1940.234311][T32055] do_recvmmsg+0xc2/0x22c0 [ 1940.238709][T32055] do_recvmmsg+0xc2/0x22c0 [ 1940.466428][T32055] not chained 7290000 origins [ 1940.471177][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1940.479850][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1940.489918][T32055] Call Trace: [ 1940.493233][T32055] dump_stack+0x21c/0x280 [ 1940.497598][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1940.503352][T32055] ? idle_cpu+0x9a/0x1d0 [ 1940.507623][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1940.512843][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1940.518670][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1940.524772][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1940.529995][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1940.535559][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1940.541650][T32055] ? _copy_from_user+0x221/0x330 [ 1940.546607][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1940.551844][T32055] __msan_chain_origin+0x50/0x90 [ 1940.556807][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1940.561961][T32055] get_compat_msghdr+0x108/0x2b0 [ 1940.566931][T32055] do_recvmmsg+0xdba/0x22c0 [ 1940.571482][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1940.576724][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1940.582639][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1940.587862][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1940.593166][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1940.597962][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1940.602747][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1940.607464][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1940.613573][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1940.619750][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1940.624979][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1940.629851][T32055] do_SYSENTER_32+0x73/0x90 [ 1940.634374][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1940.640712][T32055] RIP: 0023:0xf7f40549 [ 1940.644777][T32055] Code: Bad RIP value. [ 1940.648839][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1940.657246][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1940.665210][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1940.673178][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1940.681144][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1940.689105][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1940.697083][T32055] Uninit was stored to memory at: [ 1940.702113][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1940.707815][T32055] __msan_chain_origin+0x50/0x90 [ 1940.712749][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1940.717844][T32055] get_compat_msghdr+0x108/0x2b0 [ 1940.722786][T32055] do_recvmmsg+0xdba/0x22c0 [ 1940.727269][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1940.731970][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1940.738030][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1940.744171][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1940.749367][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1940.754205][T32055] do_SYSENTER_32+0x73/0x90 [ 1940.758692][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1940.765004][T32055] [ 1940.767310][T32055] Uninit was stored to memory at: [ 1940.772321][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1940.778038][T32055] __msan_chain_origin+0x50/0x90 [ 1940.783020][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1940.788117][T32055] get_compat_msghdr+0x108/0x2b0 [ 1940.793039][T32055] do_recvmmsg+0xdba/0x22c0 [ 1940.797525][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1940.802187][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1940.808238][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1940.814405][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1940.819599][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1940.824444][T32055] do_SYSENTER_32+0x73/0x90 [ 1940.828932][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1940.835233][T32055] [ 1940.837556][T32055] Uninit was stored to memory at: [ 1940.842569][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1940.848271][T32055] __msan_chain_origin+0x50/0x90 [ 1940.853197][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1940.858735][T32055] get_compat_msghdr+0x108/0x2b0 [ 1940.863654][T32055] do_recvmmsg+0xdba/0x22c0 [ 1940.868137][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1940.872808][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1940.878869][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1940.885009][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1940.890214][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1940.895051][T32055] do_SYSENTER_32+0x73/0x90 [ 1940.899541][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1940.905849][T32055] [ 1940.908159][T32055] Uninit was stored to memory at: [ 1940.913180][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1940.918881][T32055] __msan_chain_origin+0x50/0x90 [ 1940.923816][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1940.928909][T32055] get_compat_msghdr+0x108/0x2b0 [ 1940.933861][T32055] do_recvmmsg+0xdba/0x22c0 [ 1940.938371][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1940.943037][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1940.949087][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1940.955232][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1940.960420][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1940.965303][T32055] do_SYSENTER_32+0x73/0x90 [ 1940.969834][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1940.976166][T32055] [ 1940.978474][T32055] Uninit was stored to memory at: [ 1940.983484][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1940.989185][T32055] __msan_chain_origin+0x50/0x90 [ 1940.994120][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1940.999217][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.004149][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.008644][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.013302][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.019351][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.025499][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.030683][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1941.035517][T32055] do_SYSENTER_32+0x73/0x90 [ 1941.040017][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1941.046339][T32055] [ 1941.048648][T32055] Uninit was stored to memory at: [ 1941.053665][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1941.059376][T32055] __msan_chain_origin+0x50/0x90 [ 1941.064315][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1941.069427][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.074359][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.078847][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.083519][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.089580][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.095718][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.100911][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1941.105756][T32055] do_SYSENTER_32+0x73/0x90 [ 1941.110265][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1941.116588][T32055] [ 1941.118903][T32055] Uninit was stored to memory at: [ 1941.123912][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1941.129709][T32055] __msan_chain_origin+0x50/0x90 [ 1941.134641][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1941.139733][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.144654][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.149149][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.153814][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.159871][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.166018][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.171216][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1941.176060][T32055] do_SYSENTER_32+0x73/0x90 [ 1941.180558][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1941.186868][T32055] [ 1941.189175][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1941.195841][T32055] do_recvmmsg+0xc2/0x22c0 [ 1941.200235][T32055] do_recvmmsg+0xc2/0x22c0 [ 1941.366698][T32055] not chained 7300000 origins [ 1941.371439][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1941.380109][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1941.390175][T32055] Call Trace: [ 1941.393493][T32055] dump_stack+0x21c/0x280 [ 1941.397850][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1941.403614][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1941.408833][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1941.414657][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1941.420740][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1941.425957][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1941.431521][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1941.437612][T32055] ? _copy_from_user+0x221/0x330 [ 1941.442571][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1941.447789][T32055] __msan_chain_origin+0x50/0x90 [ 1941.452752][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1941.457906][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.462880][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.467433][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1941.472658][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1941.478573][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1941.483794][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1941.489102][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1941.493879][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1941.498663][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.503375][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.509481][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.515655][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.520886][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1941.525758][T32055] do_SYSENTER_32+0x73/0x90 [ 1941.530286][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1941.536627][T32055] RIP: 0023:0xf7f40549 [ 1941.540696][T32055] Code: Bad RIP value. [ 1941.544767][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1941.553192][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1941.561171][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1941.569149][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1941.577122][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1941.585076][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1941.593063][T32055] Uninit was stored to memory at: [ 1941.598078][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1941.603778][T32055] __msan_chain_origin+0x50/0x90 [ 1941.608700][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1941.613792][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.618711][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.623209][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.627924][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.633975][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.640111][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.645292][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1941.650124][T32055] do_SYSENTER_32+0x73/0x90 [ 1941.654612][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1941.660917][T32055] [ 1941.663237][T32055] Uninit was stored to memory at: [ 1941.668245][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1941.673946][T32055] __msan_chain_origin+0x50/0x90 [ 1941.678866][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1941.683958][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.688874][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.693371][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.698035][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.704083][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.710216][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.715401][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1941.720232][T32055] do_SYSENTER_32+0x73/0x90 [ 1941.724721][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1941.731021][T32055] [ 1941.733329][T32055] Uninit was stored to memory at: [ 1941.738352][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1941.744052][T32055] __msan_chain_origin+0x50/0x90 [ 1941.748973][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1941.754066][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.758986][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.763484][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.768144][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.774198][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.780346][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.785530][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1941.790361][T32055] do_SYSENTER_32+0x73/0x90 [ 1941.794855][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1941.801165][T32055] [ 1941.803474][T32055] Uninit was stored to memory at: [ 1941.808496][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1941.814214][T32055] __msan_chain_origin+0x50/0x90 [ 1941.819172][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1941.824284][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.829203][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.833702][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.838362][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.844424][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.850582][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.856737][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1941.861572][T32055] do_SYSENTER_32+0x73/0x90 [ 1941.866061][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1941.872361][T32055] [ 1941.874673][T32055] Uninit was stored to memory at: [ 1941.879684][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1941.885405][T32055] __msan_chain_origin+0x50/0x90 [ 1941.890336][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1941.895443][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.900364][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.905546][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.910206][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.916258][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.922425][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.927608][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1941.932454][T32055] do_SYSENTER_32+0x73/0x90 [ 1941.936941][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1941.943267][T32055] [ 1941.946277][T32055] Uninit was stored to memory at: [ 1941.951304][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1941.957036][T32055] __msan_chain_origin+0x50/0x90 [ 1941.961960][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1941.967054][T32055] get_compat_msghdr+0x108/0x2b0 [ 1941.971975][T32055] do_recvmmsg+0xdba/0x22c0 [ 1941.976460][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1941.981120][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1941.987171][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1941.993324][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1941.998509][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.003353][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.007840][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.014141][T32055] [ 1942.016457][T32055] Uninit was stored to memory at: [ 1942.021564][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1942.027269][T32055] __msan_chain_origin+0x50/0x90 [ 1942.032194][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1942.037290][T32055] get_compat_msghdr+0x108/0x2b0 [ 1942.042230][T32055] do_recvmmsg+0xdba/0x22c0 [ 1942.046717][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1942.051399][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1942.057448][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1942.063598][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1942.068784][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.073616][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.078104][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.084534][T32055] [ 1942.086844][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1942.093498][T32055] do_recvmmsg+0xc2/0x22c0 [ 1942.097894][T32055] do_recvmmsg+0xc2/0x22c0 [ 1942.246151][T32055] not chained 7310000 origins [ 1942.250892][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1942.259564][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1942.269625][T32055] Call Trace: [ 1942.272943][T32055] dump_stack+0x21c/0x280 [ 1942.277303][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1942.283084][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1942.288323][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1942.294152][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1942.300237][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1942.305459][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1942.311024][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1942.317116][T32055] ? _copy_from_user+0x221/0x330 [ 1942.322093][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1942.327314][T32055] __msan_chain_origin+0x50/0x90 [ 1942.332275][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1942.337447][T32055] get_compat_msghdr+0x108/0x2b0 [ 1942.342427][T32055] do_recvmmsg+0xdba/0x22c0 [ 1942.346979][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1942.352222][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1942.358401][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1942.363629][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1942.368934][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1942.373707][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1942.378503][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1942.383220][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1942.389369][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1942.395548][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1942.400780][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.405653][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.410178][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.416515][T32055] RIP: 0023:0xf7f40549 [ 1942.420582][T32055] Code: Bad RIP value. [ 1942.424654][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1942.433086][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1942.441069][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1942.449052][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1942.457033][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1942.465013][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1942.473010][T32055] Uninit was stored to memory at: [ 1942.478057][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1942.483808][T32055] __msan_chain_origin+0x50/0x90 [ 1942.488763][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1942.493888][T32055] get_compat_msghdr+0x108/0x2b0 [ 1942.498838][T32055] do_recvmmsg+0xdba/0x22c0 [ 1942.503342][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1942.508014][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1942.517277][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1942.523417][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1942.528602][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.533435][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.537925][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.544236][T32055] [ 1942.546554][T32055] Uninit was stored to memory at: [ 1942.551566][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1942.557280][T32055] __msan_chain_origin+0x50/0x90 [ 1942.562203][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1942.567298][T32055] get_compat_msghdr+0x108/0x2b0 [ 1942.572234][T32055] do_recvmmsg+0xdba/0x22c0 [ 1942.576727][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1942.581407][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1942.587458][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1942.593608][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1942.598803][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.603647][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.608145][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.614447][T32055] [ 1942.616775][T32055] Uninit was stored to memory at: [ 1942.621784][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1942.627488][T32055] __msan_chain_origin+0x50/0x90 [ 1942.632415][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1942.637508][T32055] get_compat_msghdr+0x108/0x2b0 [ 1942.642489][T32055] do_recvmmsg+0xdba/0x22c0 [ 1942.646973][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1942.651647][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1942.657707][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1942.663846][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1942.669029][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.673861][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.678349][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.684647][T32055] [ 1942.686955][T32055] Uninit was stored to memory at: [ 1942.691966][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1942.697667][T32055] __msan_chain_origin+0x50/0x90 [ 1942.702590][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1942.707686][T32055] get_compat_msghdr+0x108/0x2b0 [ 1942.712609][T32055] do_recvmmsg+0xdba/0x22c0 [ 1942.717107][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1942.721770][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1942.727820][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1942.733957][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1942.739146][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.743978][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.748478][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.754789][T32055] [ 1942.757110][T32055] Uninit was stored to memory at: [ 1942.762132][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1942.767846][T32055] __msan_chain_origin+0x50/0x90 [ 1942.772772][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1942.777867][T32055] get_compat_msghdr+0x108/0x2b0 [ 1942.782788][T32055] do_recvmmsg+0xdba/0x22c0 [ 1942.787287][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1942.791948][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1942.797999][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1942.804163][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1942.809365][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.814216][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.818726][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.825032][T32055] [ 1942.827369][T32055] Uninit was stored to memory at: [ 1942.832426][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1942.838135][T32055] __msan_chain_origin+0x50/0x90 [ 1942.843065][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1942.848165][T32055] get_compat_msghdr+0x108/0x2b0 [ 1942.853091][T32055] do_recvmmsg+0xdba/0x22c0 [ 1942.857583][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1942.862253][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1942.868318][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1942.874462][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1942.879665][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.884506][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.889154][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.895455][T32055] [ 1942.897801][T32055] Uninit was stored to memory at: [ 1942.902812][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1942.908537][T32055] __msan_chain_origin+0x50/0x90 [ 1942.913460][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1942.918568][T32055] get_compat_msghdr+0x108/0x2b0 [ 1942.923489][T32055] do_recvmmsg+0xdba/0x22c0 [ 1942.928122][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1942.932789][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1942.938842][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1942.944982][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1942.950183][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1942.955024][T32055] do_SYSENTER_32+0x73/0x90 [ 1942.959512][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1942.965826][T32055] [ 1942.968136][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1942.974798][T32055] do_recvmmsg+0xc2/0x22c0 [ 1942.979199][T32055] do_recvmmsg+0xc2/0x22c0 [ 1943.197929][T32055] not chained 7320000 origins [ 1943.202666][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1943.211342][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1943.221406][T32055] Call Trace: [ 1943.224727][T32055] dump_stack+0x21c/0x280 [ 1943.229087][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1943.234832][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1943.241080][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1943.246932][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1943.252992][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1943.258184][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1943.263719][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1943.269780][T32055] ? _copy_from_user+0x221/0x330 [ 1943.274707][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1943.279913][T32055] __msan_chain_origin+0x50/0x90 [ 1943.284847][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1943.290201][T32055] get_compat_msghdr+0x108/0x2b0 [ 1943.295137][T32055] do_recvmmsg+0xdba/0x22c0 [ 1943.299738][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1943.304928][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1943.310826][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1943.316034][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1943.321310][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1943.326072][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1943.330840][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1943.335548][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1943.341643][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1943.347785][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1943.352979][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1943.357818][T32055] do_SYSENTER_32+0x73/0x90 [ 1943.362325][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1943.368640][T32055] RIP: 0023:0xf7f40549 [ 1943.372689][T32055] Code: Bad RIP value. [ 1943.376736][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1943.385155][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1943.393123][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1943.401608][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1943.409563][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1943.417516][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1943.425484][T32055] Uninit was stored to memory at: [ 1943.430513][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1943.436216][T32055] __msan_chain_origin+0x50/0x90 [ 1943.441176][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1943.446299][T32055] get_compat_msghdr+0x108/0x2b0 [ 1943.451236][T32055] do_recvmmsg+0xdba/0x22c0 [ 1943.455736][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1943.460407][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1943.466459][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1943.472611][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1943.477793][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1943.482628][T32055] do_SYSENTER_32+0x73/0x90 [ 1943.487114][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1943.493416][T32055] [ 1943.495726][T32055] Uninit was stored to memory at: [ 1943.500736][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1943.506439][T32055] __msan_chain_origin+0x50/0x90 [ 1943.511405][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1943.516533][T32055] get_compat_msghdr+0x108/0x2b0 [ 1943.521492][T32055] do_recvmmsg+0xdba/0x22c0 [ 1943.525992][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1943.530657][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1943.536709][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1943.542850][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1943.548049][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1943.552900][T32055] do_SYSENTER_32+0x73/0x90 [ 1943.557409][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1943.563713][T32055] [ 1943.566023][T32055] Uninit was stored to memory at: [ 1943.571047][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1943.576759][T32055] __msan_chain_origin+0x50/0x90 [ 1943.581701][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1943.586812][T32055] get_compat_msghdr+0x108/0x2b0 [ 1943.591735][T32055] do_recvmmsg+0xdba/0x22c0 [ 1943.596232][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1943.600907][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1943.606975][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1943.613127][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1943.618311][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1943.623158][T32055] do_SYSENTER_32+0x73/0x90 [ 1943.627671][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1943.633987][T32055] [ 1943.636295][T32055] Uninit was stored to memory at: [ 1943.641308][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1943.647012][T32055] __msan_chain_origin+0x50/0x90 [ 1943.651953][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1943.657048][T32055] get_compat_msghdr+0x108/0x2b0 [ 1943.661987][T32055] do_recvmmsg+0xdba/0x22c0 [ 1943.666503][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1943.671176][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1943.677234][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1943.683376][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1943.688577][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1943.693412][T32055] do_SYSENTER_32+0x73/0x90 [ 1943.697913][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1943.704214][T32055] [ 1943.706522][T32055] Uninit was stored to memory at: [ 1943.711550][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1943.717337][T32055] __msan_chain_origin+0x50/0x90 [ 1943.722263][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1943.727357][T32055] get_compat_msghdr+0x108/0x2b0 [ 1943.732279][T32055] do_recvmmsg+0xdba/0x22c0 [ 1943.736782][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1943.741446][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1943.747496][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1943.753656][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1943.758848][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1943.763686][T32055] do_SYSENTER_32+0x73/0x90 [ 1943.768188][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1943.774496][T32055] [ 1943.776825][T32055] Uninit was stored to memory at: [ 1943.781895][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1943.787597][T32055] __msan_chain_origin+0x50/0x90 [ 1943.792544][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1943.797640][T32055] get_compat_msghdr+0x108/0x2b0 [ 1943.802575][T32055] do_recvmmsg+0xdba/0x22c0 [ 1943.807070][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1943.811735][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1943.817788][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1943.823934][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1943.829132][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1943.833968][T32055] do_SYSENTER_32+0x73/0x90 [ 1943.838469][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1943.844781][T32055] [ 1943.847100][T32055] Uninit was stored to memory at: [ 1943.852115][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1943.857818][T32055] __msan_chain_origin+0x50/0x90 [ 1943.862742][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1943.867924][T32055] get_compat_msghdr+0x108/0x2b0 [ 1943.872846][T32055] do_recvmmsg+0xdba/0x22c0 [ 1943.877340][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1943.882015][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1943.888083][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1943.894240][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1943.899423][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1943.904256][T32055] do_SYSENTER_32+0x73/0x90 [ 1943.908742][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1943.915040][T32055] [ 1943.917363][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1943.924038][T32055] do_recvmmsg+0xc2/0x22c0 [ 1943.928438][T32055] do_recvmmsg+0xc2/0x22c0 [ 1944.132588][T32055] not chained 7330000 origins [ 1944.137330][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1944.146005][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1944.156068][T32055] Call Trace: [ 1944.159393][T32055] dump_stack+0x21c/0x280 [ 1944.163757][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1944.169566][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1944.174785][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1944.180613][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1944.186698][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1944.191918][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1944.197485][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1944.203581][T32055] ? _copy_from_user+0x221/0x330 [ 1944.208544][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1944.213763][T32055] __msan_chain_origin+0x50/0x90 [ 1944.218728][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1944.223887][T32055] get_compat_msghdr+0x108/0x2b0 [ 1944.228866][T32055] do_recvmmsg+0xdba/0x22c0 [ 1944.233431][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1944.238660][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1944.244583][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1944.249806][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1944.255112][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1944.259892][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1944.264679][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1944.269415][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1944.275537][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1944.281723][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1944.286953][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1944.291827][T32055] do_SYSENTER_32+0x73/0x90 [ 1944.296364][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1944.302713][T32055] RIP: 0023:0xf7f40549 [ 1944.306782][T32055] Code: Bad RIP value. [ 1944.310853][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1944.319282][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1944.327268][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1944.335252][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1944.343241][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1944.351223][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1944.359225][T32055] Uninit was stored to memory at: [ 1944.364274][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1944.370138][T32055] __msan_chain_origin+0x50/0x90 [ 1944.375091][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1944.380215][T32055] get_compat_msghdr+0x108/0x2b0 [ 1944.385195][T32055] do_recvmmsg+0xdba/0x22c0 [ 1944.389682][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1944.394348][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1944.400409][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1944.406566][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1944.411792][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1944.416634][T32055] do_SYSENTER_32+0x73/0x90 [ 1944.421134][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1944.427448][T32055] [ 1944.429757][T32055] Uninit was stored to memory at: [ 1944.434805][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1944.440530][T32055] __msan_chain_origin+0x50/0x90 [ 1944.445473][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1944.450569][T32055] get_compat_msghdr+0x108/0x2b0 [ 1944.455505][T32055] do_recvmmsg+0xdba/0x22c0 [ 1944.459991][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1944.464656][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1944.470721][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1944.476863][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1944.482049][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1944.486886][T32055] do_SYSENTER_32+0x73/0x90 [ 1944.491397][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1944.497698][T32055] [ 1944.500016][T32055] Uninit was stored to memory at: [ 1944.505038][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1944.510746][T32055] __msan_chain_origin+0x50/0x90 [ 1944.515683][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1944.520804][T32055] get_compat_msghdr+0x108/0x2b0 [ 1944.525736][T32055] do_recvmmsg+0xdba/0x22c0 [ 1944.530228][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1944.534896][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1944.540962][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1944.547126][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1944.552327][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1944.557172][T32055] do_SYSENTER_32+0x73/0x90 [ 1944.561662][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1944.567962][T32055] [ 1944.570267][T32055] Uninit was stored to memory at: [ 1944.575298][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1944.581019][T32055] __msan_chain_origin+0x50/0x90 [ 1944.585959][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1944.591064][T32055] get_compat_msghdr+0x108/0x2b0 [ 1944.596023][T32055] do_recvmmsg+0xdba/0x22c0 [ 1944.600509][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1944.605222][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1944.611294][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1944.617449][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1944.622635][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1944.627479][T32055] do_SYSENTER_32+0x73/0x90 [ 1944.631974][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1944.638279][T32055] [ 1944.640605][T32055] Uninit was stored to memory at: [ 1944.645623][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1944.651351][T32055] __msan_chain_origin+0x50/0x90 [ 1944.656305][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1944.661467][T32055] get_compat_msghdr+0x108/0x2b0 [ 1944.666417][T32055] do_recvmmsg+0xdba/0x22c0 [ 1944.670913][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1944.675595][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1944.681664][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1944.687817][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1944.693006][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1944.697842][T32055] do_SYSENTER_32+0x73/0x90 [ 1944.702331][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1944.708642][T32055] [ 1944.710956][T32055] Uninit was stored to memory at: [ 1944.715996][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1944.721701][T32055] __msan_chain_origin+0x50/0x90 [ 1944.726636][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1944.731747][T32055] get_compat_msghdr+0x108/0x2b0 [ 1944.736681][T32055] do_recvmmsg+0xdba/0x22c0 [ 1944.741170][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1944.746912][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1944.752965][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1944.759127][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1944.764336][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1944.769199][T32055] do_SYSENTER_32+0x73/0x90 [ 1944.773691][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1944.779993][T32055] [ 1944.782304][T32055] Uninit was stored to memory at: [ 1944.787328][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1944.793034][T32055] __msan_chain_origin+0x50/0x90 [ 1944.797982][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1944.803078][T32055] get_compat_msghdr+0x108/0x2b0 [ 1944.808012][T32055] do_recvmmsg+0xdba/0x22c0 [ 1944.812501][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1944.817176][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1944.823227][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1944.829366][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1944.834549][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1944.839382][T32055] do_SYSENTER_32+0x73/0x90 [ 1944.843872][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1944.850173][T32055] [ 1944.852483][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1944.859161][T32055] do_recvmmsg+0xc2/0x22c0 [ 1944.863561][T32055] do_recvmmsg+0xc2/0x22c0 [ 1945.039227][T32055] not chained 7340000 origins [ 1945.043974][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1945.052652][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1945.062715][T32055] Call Trace: [ 1945.066032][T32055] dump_stack+0x21c/0x280 [ 1945.070402][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1945.076173][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1945.081398][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1945.087225][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1945.094270][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1945.099488][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1945.105057][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1945.111163][T32055] ? _copy_from_user+0x221/0x330 [ 1945.116124][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1945.121351][T32055] __msan_chain_origin+0x50/0x90 [ 1945.126344][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1945.131503][T32055] get_compat_msghdr+0x108/0x2b0 [ 1945.137435][T32055] do_recvmmsg+0xdba/0x22c0 [ 1945.141995][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1945.147223][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1945.153151][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1945.158382][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1945.163690][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1945.168468][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1945.173263][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1945.178019][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1945.184124][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1945.190307][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1945.195527][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1945.200374][T32055] do_SYSENTER_32+0x73/0x90 [ 1945.204873][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1945.211217][T32055] RIP: 0023:0xf7f40549 [ 1945.215279][T32055] Code: Bad RIP value. [ 1945.219328][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1945.227727][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1945.235702][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1945.244367][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1945.252341][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1945.260315][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1945.268307][T32055] Uninit was stored to memory at: [ 1945.273346][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1945.279055][T32055] __msan_chain_origin+0x50/0x90 [ 1945.283985][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1945.289084][T32055] get_compat_msghdr+0x108/0x2b0 [ 1945.294010][T32055] do_recvmmsg+0xdba/0x22c0 [ 1945.298497][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1945.303182][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1945.309248][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1945.315390][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1945.320589][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1945.325426][T32055] do_SYSENTER_32+0x73/0x90 [ 1945.329914][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1945.336237][T32055] [ 1945.338560][T32055] Uninit was stored to memory at: [ 1945.343577][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1945.349292][T32055] __msan_chain_origin+0x50/0x90 [ 1945.354229][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1945.359349][T32055] get_compat_msghdr+0x108/0x2b0 [ 1945.364285][T32055] do_recvmmsg+0xdba/0x22c0 [ 1945.368798][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1945.373487][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1945.379567][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1945.385733][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1945.390944][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1945.395811][T32055] do_SYSENTER_32+0x73/0x90 [ 1945.400302][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1945.406605][T32055] [ 1945.408929][T32055] Uninit was stored to memory at: [ 1945.413953][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1945.419656][T32055] __msan_chain_origin+0x50/0x90 [ 1945.424579][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1945.429689][T32055] get_compat_msghdr+0x108/0x2b0 [ 1945.434612][T32055] do_recvmmsg+0xdba/0x22c0 [ 1945.439150][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1945.443831][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1945.449910][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1945.456080][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1945.461294][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1945.466164][T32055] do_SYSENTER_32+0x73/0x90 [ 1945.470681][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1945.476998][T32055] [ 1945.479305][T32055] Uninit was stored to memory at: [ 1945.484316][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1945.490018][T32055] __msan_chain_origin+0x50/0x90 [ 1945.494942][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1945.500037][T32055] get_compat_msghdr+0x108/0x2b0 [ 1945.504972][T32055] do_recvmmsg+0xdba/0x22c0 [ 1945.509469][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1945.514134][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1945.520206][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1945.526346][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1945.531546][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1945.536382][T32055] do_SYSENTER_32+0x73/0x90 [ 1945.540872][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1945.547192][T32055] [ 1945.549513][T32055] Uninit was stored to memory at: [ 1945.554528][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1945.560243][T32055] __msan_chain_origin+0x50/0x90 [ 1945.566297][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1945.571398][T32055] get_compat_msghdr+0x108/0x2b0 [ 1945.576338][T32055] do_recvmmsg+0xdba/0x22c0 [ 1945.580823][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1945.585516][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1945.591587][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1945.597826][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1945.603012][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1945.607859][T32055] do_SYSENTER_32+0x73/0x90 [ 1945.612348][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1945.618650][T32055] [ 1945.620966][T32055] Uninit was stored to memory at: [ 1945.626041][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1945.631758][T32055] __msan_chain_origin+0x50/0x90 [ 1945.636692][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1945.641801][T32055] get_compat_msghdr+0x108/0x2b0 [ 1945.646719][T32055] do_recvmmsg+0xdba/0x22c0 [ 1945.651210][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1945.655885][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1945.661936][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1945.668077][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1945.673260][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1945.678095][T32055] do_SYSENTER_32+0x73/0x90 [ 1945.682626][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1945.688976][T32055] [ 1945.691294][T32055] Uninit was stored to memory at: [ 1945.696333][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1945.702073][T32055] __msan_chain_origin+0x50/0x90 [ 1945.707007][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1945.712121][T32055] get_compat_msghdr+0x108/0x2b0 [ 1945.717043][T32055] do_recvmmsg+0xdba/0x22c0 [ 1945.721529][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1945.726204][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1945.732255][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1945.738405][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1945.743590][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1945.748426][T32055] do_SYSENTER_32+0x73/0x90 [ 1945.752927][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1945.759227][T32055] [ 1945.761537][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1945.768216][T32055] do_recvmmsg+0xc2/0x22c0 [ 1945.772617][T32055] do_recvmmsg+0xc2/0x22c0 [ 1945.930723][T32055] not chained 7350000 origins [ 1945.935471][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1945.944182][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1945.954249][T32055] Call Trace: [ 1945.957567][T32055] dump_stack+0x21c/0x280 [ 1945.961929][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1945.967698][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1945.972923][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1945.978800][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1945.984891][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1945.990114][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1945.995681][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1946.001805][T32055] ? _copy_from_user+0x221/0x330 [ 1946.006785][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1946.012126][T32055] __msan_chain_origin+0x50/0x90 [ 1946.017091][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1946.022268][T32055] get_compat_msghdr+0x108/0x2b0 [ 1946.027240][T32055] do_recvmmsg+0xdba/0x22c0 [ 1946.031793][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1946.037019][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1946.042936][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1946.048191][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1946.053524][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1946.058325][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1946.063132][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1946.067851][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1946.073953][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1946.080130][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1946.085365][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1946.090246][T32055] do_SYSENTER_32+0x73/0x90 [ 1946.094793][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1946.101159][T32055] RIP: 0023:0xf7f40549 [ 1946.105229][T32055] Code: Bad RIP value. [ 1946.109304][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1946.117733][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1946.125719][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1946.133710][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1946.141727][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1946.149715][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1946.157732][T32055] Uninit was stored to memory at: [ 1946.162878][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1946.168611][T32055] __msan_chain_origin+0x50/0x90 [ 1946.173564][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1946.178695][T32055] get_compat_msghdr+0x108/0x2b0 [ 1946.183650][T32055] do_recvmmsg+0xdba/0x22c0 [ 1946.188173][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1946.192865][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1946.198944][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1946.205115][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1946.210336][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1946.215204][T32055] do_SYSENTER_32+0x73/0x90 [ 1946.219728][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1946.226054][T32055] [ 1946.228385][T32055] Uninit was stored to memory at: [ 1946.233427][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1946.239160][T32055] __msan_chain_origin+0x50/0x90 [ 1946.244146][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1946.249272][T32055] get_compat_msghdr+0x108/0x2b0 [ 1946.254224][T32055] do_recvmmsg+0xdba/0x22c0 [ 1946.258740][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1946.263435][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1946.269517][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1946.275697][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1946.280917][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1946.285789][T32055] do_SYSENTER_32+0x73/0x90 [ 1946.290330][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1946.296655][T32055] [ 1946.298996][T32055] Uninit was stored to memory at: [ 1946.304039][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1946.309766][T32055] __msan_chain_origin+0x50/0x90 [ 1946.314702][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1946.319798][T32055] get_compat_msghdr+0x108/0x2b0 [ 1946.324722][T32055] do_recvmmsg+0xdba/0x22c0 [ 1946.329235][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1946.333911][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1946.339980][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1946.346124][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1946.351324][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1946.351344][T32055] do_SYSENTER_32+0x73/0x90 [ 1946.351366][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1946.351373][T32055] [ 1946.351381][T32055] Uninit was stored to memory at: [ 1946.351401][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1946.351421][T32055] __msan_chain_origin+0x50/0x90 [ 1946.351442][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1946.351461][T32055] get_compat_msghdr+0x108/0x2b0 [ 1946.351481][T32055] do_recvmmsg+0xdba/0x22c0 [ 1946.351540][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1946.404271][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1946.410359][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1946.416529][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1946.421743][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1946.426594][T32055] do_SYSENTER_32+0x73/0x90 [ 1946.431099][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1946.437426][T32055] [ 1946.439735][T32055] Uninit was stored to memory at: [ 1946.444748][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1946.450461][T32055] __msan_chain_origin+0x50/0x90 [ 1946.455405][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1946.460500][T32055] get_compat_msghdr+0x108/0x2b0 [ 1946.465428][T32055] do_recvmmsg+0xdba/0x22c0 [ 1946.469923][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1946.474780][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1946.480851][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1946.486992][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1946.492193][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1946.497047][T32055] do_SYSENTER_32+0x73/0x90 [ 1946.501550][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1946.507880][T32055] [ 1946.510190][T32055] Uninit was stored to memory at: [ 1946.515202][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1946.520934][T32055] __msan_chain_origin+0x50/0x90 [ 1946.525890][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1946.531005][T32055] get_compat_msghdr+0x108/0x2b0 [ 1946.535948][T32055] do_recvmmsg+0xdba/0x22c0 [ 1946.540459][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1946.545125][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1946.551198][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1946.557368][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1946.562573][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1946.567440][T32055] do_SYSENTER_32+0x73/0x90 [ 1946.571964][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1946.578282][T32055] [ 1946.580596][T32055] Uninit was stored to memory at: [ 1946.585614][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1946.591333][T32055] __msan_chain_origin+0x50/0x90 [ 1946.596280][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1946.601389][T32055] get_compat_msghdr+0x108/0x2b0 [ 1946.606326][T32055] do_recvmmsg+0xdba/0x22c0 [ 1946.610819][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1946.615489][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1946.621586][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1946.627791][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1946.632982][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1946.637823][T32055] do_SYSENTER_32+0x73/0x90 [ 1946.642334][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1946.648649][T32055] [ 1946.650969][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1946.657661][T32055] do_recvmmsg+0xc2/0x22c0 [ 1946.662083][T32055] do_recvmmsg+0xc2/0x22c0 [ 1946.862298][T32055] not chained 7360000 origins [ 1946.866998][T32055] CPU: 1 PID: 32055 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1946.875652][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1946.885713][T32055] Call Trace: [ 1946.889005][T32055] dump_stack+0x21c/0x280 [ 1946.893335][T32055] kmsan_internal_chain_origin+0x6f/0x130 [ 1946.899061][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1946.904267][T32055] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1946.910090][T32055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1946.916161][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1946.921370][T32055] ? kmsan_set_origin_checked+0x95/0xf0 [ 1946.926947][T32055] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1946.933029][T32055] ? _copy_from_user+0x221/0x330 [ 1946.937989][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1946.943192][T32055] __msan_chain_origin+0x50/0x90 [ 1946.948127][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1946.953246][T32055] get_compat_msghdr+0x108/0x2b0 [ 1946.958185][T32055] do_recvmmsg+0xdba/0x22c0 [ 1946.962697][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1946.967914][T32055] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1946.973800][T32055] ? kmsan_get_metadata+0x116/0x180 [ 1946.979003][T32055] ? __msan_poison_alloca+0xf0/0x120 [ 1946.984280][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1946.989027][T32055] ? __sys_recvmmsg+0xbb/0x610 [ 1946.993782][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1946.998510][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1947.004589][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1947.010732][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1947.015944][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1947.020815][T32055] do_SYSENTER_32+0x73/0x90 [ 1947.025312][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1947.031643][T32055] RIP: 0023:0xf7f40549 [ 1947.035721][T32055] Code: Bad RIP value. [ 1947.039791][T32055] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1947.048200][T32055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1947.056187][T32055] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1947.064159][T32055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1947.072142][T32055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1947.080154][T32055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1947.088121][T32055] Uninit was stored to memory at: [ 1947.093156][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1947.098857][T32055] __msan_chain_origin+0x50/0x90 [ 1947.103780][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1947.108876][T32055] get_compat_msghdr+0x108/0x2b0 [ 1947.113797][T32055] do_recvmmsg+0xdba/0x22c0 [ 1947.118288][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1947.122952][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1947.129002][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1947.135146][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1947.140348][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1947.145206][T32055] do_SYSENTER_32+0x73/0x90 [ 1947.149695][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1947.156009][T32055] [ 1947.158316][T32055] Uninit was stored to memory at: [ 1947.163342][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1947.169106][T32055] __msan_chain_origin+0x50/0x90 [ 1947.174452][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1947.179920][T32055] get_compat_msghdr+0x108/0x2b0 [ 1947.185209][T32055] do_recvmmsg+0xdba/0x22c0 [ 1947.189840][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1947.194607][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1947.200676][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1947.206828][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1947.212019][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1947.216856][T32055] do_SYSENTER_32+0x73/0x90 [ 1947.221355][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1947.227656][T32055] [ 1947.229964][T32055] Uninit was stored to memory at: [ 1947.234974][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1947.240684][T32055] __msan_chain_origin+0x50/0x90 [ 1947.245614][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1947.250717][T32055] get_compat_msghdr+0x108/0x2b0 [ 1947.255657][T32055] do_recvmmsg+0xdba/0x22c0 [ 1947.260283][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1947.264955][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1947.271027][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1947.277184][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1947.282372][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1947.287209][T32055] do_SYSENTER_32+0x73/0x90 [ 1947.291730][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1947.298047][T32055] [ 1947.300354][T32055] Uninit was stored to memory at: [ 1947.305382][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1947.311096][T32055] __msan_chain_origin+0x50/0x90 [ 1947.316048][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1947.321146][T32055] get_compat_msghdr+0x108/0x2b0 [ 1947.326069][T32055] do_recvmmsg+0xdba/0x22c0 [ 1947.330642][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1947.335306][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1947.341368][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1947.347507][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1947.352691][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1947.357561][T32055] do_SYSENTER_32+0x73/0x90 [ 1947.362064][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1947.368418][T32055] [ 1947.370750][T32055] Uninit was stored to memory at: [ 1947.375791][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1947.381526][T32055] __msan_chain_origin+0x50/0x90 [ 1947.386570][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1947.391669][T32055] get_compat_msghdr+0x108/0x2b0 [ 1947.396610][T32055] do_recvmmsg+0xdba/0x22c0 [ 1947.401115][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1947.405795][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1947.411866][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1947.418008][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1947.423205][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1947.428047][T32055] do_SYSENTER_32+0x73/0x90 [ 1947.432539][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1947.438841][T32055] [ 1947.441158][T32055] Uninit was stored to memory at: [ 1947.446208][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1947.454726][T32055] __msan_chain_origin+0x50/0x90 [ 1947.459674][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1947.464773][T32055] get_compat_msghdr+0x108/0x2b0 [ 1947.469713][T32055] do_recvmmsg+0xdba/0x22c0 [ 1947.474210][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1947.478884][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1947.484938][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1947.491094][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1947.496325][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1947.501179][T32055] do_SYSENTER_32+0x73/0x90 [ 1947.505672][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1947.511972][T32055] [ 1947.514287][T32055] Uninit was stored to memory at: [ 1947.519314][T32055] kmsan_internal_chain_origin+0xad/0x130 [ 1947.525018][T32055] __msan_chain_origin+0x50/0x90 [ 1947.529940][T32055] __get_compat_msghdr+0x6db/0x9d0 [ 1947.535051][T32055] get_compat_msghdr+0x108/0x2b0 [ 1947.539989][T32055] do_recvmmsg+0xdba/0x22c0 [ 1947.544486][T32055] __sys_recvmmsg+0x5dd/0x610 [ 1947.549151][T32055] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1947.555206][T32055] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1947.561355][T32055] __do_fast_syscall_32+0x2af/0x480 [ 1947.566539][T32055] do_fast_syscall_32+0x6b/0xd0 [ 1947.571399][T32055] do_SYSENTER_32+0x73/0x90 [ 1947.575888][T32055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1947.582202][T32055] [ 1947.584520][T32055] Local variable ----msg_sys@do_recvmmsg created at: [ 1947.591188][T32055] do_recvmmsg+0xc2/0x22c0 [ 1947.595608][T32055] do_recvmmsg+0xc2/0x22c0 09:33:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:33:57 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2c8, 0x3, 0x3b0, 0x200, 0x240, 0x240, 0x0, 0x0, 0x318, 0x328, 0x328, 0x318, 0x328, 0x3, 0x0, {[{{@ip={@loopback, @private, 0x0, 0x0, 'veth0_to_hsr\x00', 'ip6gre0\x00'}, 0x0, 0x198, 0x200, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0, 'conntrack\x00'}, {{@ipv6=@loopback, [], @ipv4=@loopback, [], @ipv4=@dev, [], @ipv6=@empty}}}, @common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'caif0\x00', {}, 'geneve1\x00', {}, 0x0, 0x1b}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) setreuid(0xee01, 0x0) getuid() 09:33:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5011}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket(0x1, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)=@ipx}, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:33:57 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005000c000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:33:57 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:33:57 executing program 3: 09:33:57 executing program 5: 09:33:57 executing program 3: 09:33:58 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005000f000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:33:58 executing program 5: 09:33:58 executing program 3: 09:33:58 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050010000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 1948.915060][T32105] not chained 7370000 origins [ 1948.919797][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1948.928482][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.938551][T32105] Call Trace: [ 1948.941887][T32105] dump_stack+0x21c/0x280 [ 1948.946270][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1948.952032][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1948.957264][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1948.963087][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1948.969168][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1948.975362][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1948.980937][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1948.987037][T32105] ? _copy_from_user+0x221/0x330 [ 1948.991996][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1948.997209][T32105] __msan_chain_origin+0x50/0x90 [ 1949.002177][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1949.007333][T32105] get_compat_msghdr+0x108/0x2b0 [ 1949.012308][T32105] do_recvmmsg+0xdba/0x22c0 [ 1949.016838][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1949.022868][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1949.028100][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1949.034010][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1949.039235][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1949.044534][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1949.049310][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1949.054089][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1949.058808][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1949.064908][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1949.071078][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1949.076319][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1949.081188][T32105] do_SYSENTER_32+0x73/0x90 [ 1949.085712][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1949.092046][T32105] RIP: 0023:0xf7f40549 [ 1949.096111][T32105] Code: Bad RIP value. [ 1949.100196][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1949.111837][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1949.119818][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1949.127886][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1949.135863][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1949.143840][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1949.151833][T32105] Uninit was stored to memory at: [ 1949.156895][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1949.162630][T32105] __msan_chain_origin+0x50/0x90 [ 1949.167583][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1949.172726][T32105] get_compat_msghdr+0x108/0x2b0 [ 1949.177689][T32105] do_recvmmsg+0xdba/0x22c0 [ 1949.182221][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1949.186908][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1949.193001][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1949.199167][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1949.204380][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1949.209242][T32105] do_SYSENTER_32+0x73/0x90 [ 1949.213755][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1949.220081][T32105] [ 1949.222408][T32105] Uninit was stored to memory at: [ 1949.227445][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1949.233172][T32105] __msan_chain_origin+0x50/0x90 [ 1949.238131][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1949.243271][T32105] get_compat_msghdr+0x108/0x2b0 [ 1949.248221][T32105] do_recvmmsg+0xdba/0x22c0 [ 1949.252732][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1949.257421][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1949.263508][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1949.269716][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1949.274931][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1949.279790][T32105] do_SYSENTER_32+0x73/0x90 [ 1949.284307][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1949.290630][T32105] [ 1949.292957][T32105] Uninit was stored to memory at: [ 1949.297998][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1949.304419][T32105] __msan_chain_origin+0x50/0x90 [ 1949.309368][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1949.314487][T32105] get_compat_msghdr+0x108/0x2b0 [ 1949.319428][T32105] do_recvmmsg+0xdba/0x22c0 [ 1949.323939][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1949.328627][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1949.334708][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1949.340870][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1949.346078][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1949.350932][T32105] do_SYSENTER_32+0x73/0x90 [ 1949.355445][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1949.361763][T32105] [ 1949.364087][T32105] Uninit was stored to memory at: [ 1949.369119][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1949.374844][T32105] __msan_chain_origin+0x50/0x90 [ 1949.379792][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1949.384913][T32105] get_compat_msghdr+0x108/0x2b0 [ 1949.389881][T32105] do_recvmmsg+0xdba/0x22c0 [ 1949.394395][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1949.399081][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1949.405157][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1949.411335][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1949.416542][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1949.421417][T32105] do_SYSENTER_32+0x73/0x90 [ 1949.425927][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1949.432243][T32105] [ 1949.434567][T32105] Uninit was stored to memory at: [ 1949.439623][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1949.445352][T32105] __msan_chain_origin+0x50/0x90 [ 1949.450297][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1949.455503][T32105] get_compat_msghdr+0x108/0x2b0 [ 1949.460447][T32105] do_recvmmsg+0xdba/0x22c0 [ 1949.464954][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1949.469644][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1949.475739][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1949.481925][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1949.487163][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1949.492025][T32105] do_SYSENTER_32+0x73/0x90 [ 1949.496538][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1949.502857][T32105] [ 1949.505292][T32105] Uninit was stored to memory at: [ 1949.510330][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1949.516058][T32105] __msan_chain_origin+0x50/0x90 [ 1949.521003][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1949.526122][T32105] get_compat_msghdr+0x108/0x2b0 [ 1949.531065][T32105] do_recvmmsg+0xdba/0x22c0 [ 1949.535586][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1949.540278][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1949.546357][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1949.552539][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1949.557746][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1949.562605][T32105] do_SYSENTER_32+0x73/0x90 [ 1949.567122][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1949.573444][T32105] [ 1949.575781][T32105] Uninit was stored to memory at: [ 1949.580819][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1949.586551][T32105] __msan_chain_origin+0x50/0x90 [ 1949.591501][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1949.596627][T32105] get_compat_msghdr+0x108/0x2b0 [ 1949.601572][T32105] do_recvmmsg+0xdba/0x22c0 [ 1949.606078][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1949.610762][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1949.616837][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1949.623000][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1949.628215][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1949.633074][T32105] do_SYSENTER_32+0x73/0x90 [ 1949.637587][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1949.643909][T32105] [ 1949.646238][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1949.652919][T32105] do_recvmmsg+0xc2/0x22c0 [ 1949.657342][T32105] do_recvmmsg+0xc2/0x22c0 [ 1950.506145][T32105] not chained 7380000 origins [ 1950.510886][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1950.519565][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1950.529631][T32105] Call Trace: [ 1950.532958][T32105] dump_stack+0x21c/0x280 [ 1950.537321][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1950.543086][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1950.548313][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1950.554141][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1950.560245][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1950.565490][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1950.571060][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1950.577169][T32105] ? _copy_from_user+0x221/0x330 [ 1950.582131][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1950.587350][T32105] __msan_chain_origin+0x50/0x90 [ 1950.592313][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1950.597491][T32105] get_compat_msghdr+0x108/0x2b0 [ 1950.602466][T32105] do_recvmmsg+0xdba/0x22c0 [ 1950.607003][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1950.613021][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1950.618246][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1950.624167][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1950.629417][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1950.634728][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1950.639508][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1950.644295][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1950.649015][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1950.655154][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1950.661353][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1950.666590][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1950.671467][T32105] do_SYSENTER_32+0x73/0x90 [ 1950.676002][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1950.682341][T32105] RIP: 0023:0xf7f40549 [ 1950.686410][T32105] Code: Bad RIP value. [ 1950.690481][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1950.698907][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1950.706891][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1950.715399][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1950.723384][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1950.731367][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1950.739374][T32105] Uninit was stored to memory at: [ 1950.744452][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1950.750235][T32105] __msan_chain_origin+0x50/0x90 [ 1950.755199][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1950.760325][T32105] get_compat_msghdr+0x108/0x2b0 [ 1950.765272][T32105] do_recvmmsg+0xdba/0x22c0 [ 1950.769825][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1950.774525][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1950.780637][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1950.786833][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1950.792043][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1950.796902][T32105] do_SYSENTER_32+0x73/0x90 [ 1950.801416][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1950.807731][T32105] [ 1950.810055][T32105] Uninit was stored to memory at: [ 1950.815097][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1950.820822][T32105] __msan_chain_origin+0x50/0x90 [ 1950.825774][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1950.830893][T32105] get_compat_msghdr+0x108/0x2b0 [ 1950.835853][T32105] do_recvmmsg+0xdba/0x22c0 [ 1950.840365][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1950.845052][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1950.851142][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1950.857306][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1950.862514][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1950.867373][T32105] do_SYSENTER_32+0x73/0x90 [ 1950.871884][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1950.878203][T32105] [ 1950.880532][T32105] Uninit was stored to memory at: [ 1950.885574][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1950.891569][T32105] __msan_chain_origin+0x50/0x90 [ 1950.896530][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1950.901665][T32105] get_compat_msghdr+0x108/0x2b0 [ 1950.906617][T32105] do_recvmmsg+0xdba/0x22c0 [ 1950.911462][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1950.916173][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1950.922256][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1950.928419][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1950.933631][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1950.938498][T32105] do_SYSENTER_32+0x73/0x90 [ 1950.943039][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1950.949362][T32105] [ 1950.951694][T32105] Uninit was stored to memory at: [ 1950.956733][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1950.962485][T32105] __msan_chain_origin+0x50/0x90 [ 1950.967442][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1950.972561][T32105] get_compat_msghdr+0x108/0x2b0 [ 1950.977506][T32105] do_recvmmsg+0xdba/0x22c0 [ 1950.982018][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1950.986703][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1950.992779][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1950.998944][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1951.004174][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1951.009032][T32105] do_SYSENTER_32+0x73/0x90 [ 1951.013546][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1951.019864][T32105] [ 1951.022194][T32105] Uninit was stored to memory at: [ 1951.028210][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1951.033957][T32105] __msan_chain_origin+0x50/0x90 [ 1951.038906][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1951.044025][T32105] get_compat_msghdr+0x108/0x2b0 [ 1951.048969][T32105] do_recvmmsg+0xdba/0x22c0 [ 1951.053479][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1951.058237][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1951.064323][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1951.070494][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1951.075706][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1951.080563][T32105] do_SYSENTER_32+0x73/0x90 [ 1951.085074][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1951.091485][T32105] [ 1951.093814][T32105] Uninit was stored to memory at: [ 1951.098848][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1951.104590][T32105] __msan_chain_origin+0x50/0x90 [ 1951.109536][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1951.114655][T32105] get_compat_msghdr+0x108/0x2b0 [ 1951.119602][T32105] do_recvmmsg+0xdba/0x22c0 [ 1951.124116][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1951.128806][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1951.134887][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1951.141054][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1951.146264][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1951.151134][T32105] do_SYSENTER_32+0x73/0x90 [ 1951.155650][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1951.161968][T32105] [ 1951.164293][T32105] Uninit was stored to memory at: [ 1951.169349][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1951.175082][T32105] __msan_chain_origin+0x50/0x90 [ 1951.180030][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1951.185153][T32105] get_compat_msghdr+0x108/0x2b0 [ 1951.190102][T32105] do_recvmmsg+0xdba/0x22c0 [ 1951.194614][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1951.199305][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1951.205415][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1951.211583][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1951.216787][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1951.221648][T32105] do_SYSENTER_32+0x73/0x90 [ 1951.226175][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1951.232506][T32105] [ 1951.234850][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1951.241536][T32105] do_recvmmsg+0xc2/0x22c0 [ 1951.245956][T32105] do_recvmmsg+0xc2/0x22c0 [ 1952.154325][T32105] not chained 7390000 origins [ 1952.159051][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1952.167726][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1952.177786][T32105] Call Trace: [ 1952.181104][T32105] dump_stack+0x21c/0x280 [ 1952.185480][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1952.191234][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1952.196466][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1952.201713][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1952.207543][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1952.213633][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1952.218854][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1952.224428][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1952.230523][T32105] ? _copy_from_user+0x221/0x330 [ 1952.235485][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1952.240705][T32105] __msan_chain_origin+0x50/0x90 [ 1952.245673][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1952.250918][T32105] get_compat_msghdr+0x108/0x2b0 [ 1952.255889][T32105] do_recvmmsg+0xdba/0x22c0 [ 1952.260434][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1952.266457][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1952.271681][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1952.277595][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1952.282822][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1952.288131][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1952.292909][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1952.297712][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1952.302442][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1952.308545][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1952.314720][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1952.319952][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1952.324828][T32105] do_SYSENTER_32+0x73/0x90 [ 1952.329357][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1952.335693][T32105] RIP: 0023:0xf7f40549 [ 1952.339757][T32105] Code: Bad RIP value. [ 1952.343846][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1952.352275][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1952.360255][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1952.368234][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1952.376210][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1952.384208][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1952.392211][T32105] Uninit was stored to memory at: [ 1952.397261][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1952.403146][T32105] __msan_chain_origin+0x50/0x90 [ 1952.408103][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1952.413227][T32105] get_compat_msghdr+0x108/0x2b0 [ 1952.418179][T32105] do_recvmmsg+0xdba/0x22c0 [ 1952.422693][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1952.427382][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1952.433471][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1952.439642][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1952.444854][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1952.449711][T32105] do_SYSENTER_32+0x73/0x90 [ 1952.454224][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1952.460542][T32105] [ 1952.462868][T32105] Uninit was stored to memory at: [ 1952.467904][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1952.473646][T32105] __msan_chain_origin+0x50/0x90 [ 1952.478591][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1952.483706][T32105] get_compat_msghdr+0x108/0x2b0 [ 1952.488650][T32105] do_recvmmsg+0xdba/0x22c0 [ 1952.493270][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1952.497956][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1952.504044][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1952.510738][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1952.515953][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1952.520808][T32105] do_SYSENTER_32+0x73/0x90 [ 1952.525333][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1952.531673][T32105] [ 1952.533998][T32105] Uninit was stored to memory at: [ 1952.539030][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1952.544753][T32105] __msan_chain_origin+0x50/0x90 [ 1952.549712][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1952.554830][T32105] get_compat_msghdr+0x108/0x2b0 [ 1952.559769][T32105] do_recvmmsg+0xdba/0x22c0 [ 1952.564277][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1952.568961][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1952.575036][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1952.581982][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1952.587190][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1952.592045][T32105] do_SYSENTER_32+0x73/0x90 [ 1952.596557][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1952.602874][T32105] [ 1952.605200][T32105] Uninit was stored to memory at: [ 1952.610235][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1952.615960][T32105] __msan_chain_origin+0x50/0x90 [ 1952.620905][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1952.626033][T32105] get_compat_msghdr+0x108/0x2b0 [ 1952.630982][T32105] do_recvmmsg+0xdba/0x22c0 [ 1952.635490][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1952.640174][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1952.646250][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1952.652418][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1952.657639][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1952.662497][T32105] do_SYSENTER_32+0x73/0x90 [ 1952.667025][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1952.673345][T32105] [ 1952.675674][T32105] Uninit was stored to memory at: [ 1952.680708][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1952.686434][T32105] __msan_chain_origin+0x50/0x90 [ 1952.691377][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1952.696519][T32105] get_compat_msghdr+0x108/0x2b0 [ 1952.701461][T32105] do_recvmmsg+0xdba/0x22c0 [ 1952.705966][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1952.710650][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1952.716745][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1952.722921][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1952.728128][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1952.732983][T32105] do_SYSENTER_32+0x73/0x90 [ 1952.737493][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1952.743809][T32105] [ 1952.746137][T32105] Uninit was stored to memory at: [ 1952.751172][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1952.761099][T32105] __msan_chain_origin+0x50/0x90 [ 1952.766056][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1952.771181][T32105] get_compat_msghdr+0x108/0x2b0 [ 1952.776121][T32105] do_recvmmsg+0xdba/0x22c0 [ 1952.780633][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1952.785319][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1952.791404][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1952.797587][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1952.802794][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1952.807648][T32105] do_SYSENTER_32+0x73/0x90 [ 1952.812262][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1952.818580][T32105] [ 1952.820903][T32105] Uninit was stored to memory at: [ 1952.825942][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1952.831667][T32105] __msan_chain_origin+0x50/0x90 [ 1952.836613][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1952.841899][T32105] get_compat_msghdr+0x108/0x2b0 [ 1952.846848][T32105] do_recvmmsg+0xdba/0x22c0 [ 1952.851357][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1952.856043][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1952.862115][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1952.868279][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1952.873487][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1952.878343][T32105] do_SYSENTER_32+0x73/0x90 [ 1952.882854][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1952.889174][T32105] [ 1952.891503][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1952.898188][T32105] do_recvmmsg+0xc2/0x22c0 [ 1952.902614][T32105] do_recvmmsg+0xc2/0x22c0 [ 1953.389097][T32105] not chained 7400000 origins [ 1953.393801][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1953.402451][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1953.412486][T32105] Call Trace: [ 1953.415776][T32105] dump_stack+0x21c/0x280 [ 1953.420099][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1953.425819][T32105] ? idle_cpu+0x9a/0x1d0 [ 1953.430061][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1953.435253][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1953.441069][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1953.447158][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1953.452345][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1953.457880][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1953.463941][T32105] ? _copy_from_user+0x221/0x330 [ 1953.468889][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1953.474074][T32105] __msan_chain_origin+0x50/0x90 [ 1953.479005][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1953.484121][T32105] get_compat_msghdr+0x108/0x2b0 [ 1953.489067][T32105] do_recvmmsg+0xdba/0x22c0 [ 1953.493569][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1953.499559][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1953.504749][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1953.510631][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1953.515832][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1953.521111][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1953.525859][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1953.530610][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1953.535291][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1953.541703][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1953.547857][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1953.553054][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1953.557894][T32105] do_SYSENTER_32+0x73/0x90 [ 1953.562401][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1953.568708][T32105] RIP: 0023:0xf7f40549 [ 1953.572753][T32105] Code: Bad RIP value. [ 1953.576809][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1953.585215][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1953.593168][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1953.601122][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1953.609075][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1953.617042][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1953.625012][T32105] Uninit was stored to memory at: [ 1953.630027][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1953.635728][T32105] __msan_chain_origin+0x50/0x90 [ 1953.640650][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1953.645744][T32105] get_compat_msghdr+0x108/0x2b0 [ 1953.650675][T32105] do_recvmmsg+0xdba/0x22c0 [ 1953.655174][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1953.659836][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1953.665885][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1953.672023][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1953.677219][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1953.682065][T32105] do_SYSENTER_32+0x73/0x90 [ 1953.686565][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1953.692875][T32105] [ 1953.695183][T32105] Uninit was stored to memory at: [ 1953.700214][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1953.705916][T32105] __msan_chain_origin+0x50/0x90 [ 1953.710838][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1953.715933][T32105] get_compat_msghdr+0x108/0x2b0 [ 1953.720865][T32105] do_recvmmsg+0xdba/0x22c0 [ 1953.725354][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1953.730027][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1953.736076][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1953.742226][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1953.747410][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1953.752255][T32105] do_SYSENTER_32+0x73/0x90 [ 1953.756742][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1953.763043][T32105] [ 1953.765426][T32105] Uninit was stored to memory at: [ 1953.771030][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1953.776781][T32105] __msan_chain_origin+0x50/0x90 [ 1953.781714][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1953.786867][T32105] get_compat_msghdr+0x108/0x2b0 [ 1953.791826][T32105] do_recvmmsg+0xdba/0x22c0 [ 1953.796314][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1953.801019][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1953.807085][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1953.813227][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1953.818415][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1953.823251][T32105] do_SYSENTER_32+0x73/0x90 [ 1953.827739][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1953.834079][T32105] [ 1953.836389][T32105] Uninit was stored to memory at: [ 1953.841507][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1953.847218][T32105] __msan_chain_origin+0x50/0x90 [ 1953.852160][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1953.857261][T32105] get_compat_msghdr+0x108/0x2b0 [ 1953.862184][T32105] do_recvmmsg+0xdba/0x22c0 [ 1953.866694][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1953.871374][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1953.877424][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1953.883569][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1953.888756][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1953.893606][T32105] do_SYSENTER_32+0x73/0x90 [ 1953.898094][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1953.904403][T32105] [ 1953.906711][T32105] Uninit was stored to memory at: [ 1953.911725][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1953.917484][T32105] __msan_chain_origin+0x50/0x90 [ 1953.922408][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1953.927501][T32105] get_compat_msghdr+0x108/0x2b0 [ 1953.932423][T32105] do_recvmmsg+0xdba/0x22c0 [ 1953.936907][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1953.941586][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1953.947637][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1953.953776][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1953.958960][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1953.963825][T32105] do_SYSENTER_32+0x73/0x90 [ 1953.968319][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1953.974624][T32105] [ 1953.976945][T32105] Uninit was stored to memory at: [ 1953.981956][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1953.987658][T32105] __msan_chain_origin+0x50/0x90 [ 1953.992596][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1953.997704][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.002643][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.007166][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.011841][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.017893][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.024043][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.029224][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.034070][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.038560][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.044863][T32105] [ 1954.047169][T32105] Uninit was stored to memory at: [ 1954.052183][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1954.057886][T32105] __msan_chain_origin+0x50/0x90 [ 1954.062809][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1954.067916][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.072855][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.077355][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.082019][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.088084][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.094223][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.099406][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.104241][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.108728][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.115028][T32105] [ 1954.117338][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1954.124012][T32105] do_recvmmsg+0xc2/0x22c0 [ 1954.128411][T32105] do_recvmmsg+0xc2/0x22c0 [ 1954.267661][T32105] not chained 7410000 origins [ 1954.272399][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1954.281079][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1954.291153][T32105] Call Trace: [ 1954.294495][T32105] dump_stack+0x21c/0x280 [ 1954.298861][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1954.304628][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1954.309845][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1954.315675][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1954.321770][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1954.326990][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1954.332556][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1954.338650][T32105] ? _copy_from_user+0x221/0x330 [ 1954.343607][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1954.348838][T32105] __msan_chain_origin+0x50/0x90 [ 1954.353803][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1954.358959][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.363927][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.368465][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1954.374480][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1954.379703][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1954.385619][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1954.390844][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1954.396151][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1954.400932][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1954.405738][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.410455][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.416556][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.422732][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.427963][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.432837][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.437363][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.443699][T32105] RIP: 0023:0xf7f40549 [ 1954.447769][T32105] Code: Bad RIP value. [ 1954.451841][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1954.460268][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1954.468251][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1954.476233][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1954.484213][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1954.492280][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1954.500283][T32105] Uninit was stored to memory at: [ 1954.505345][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1954.511079][T32105] __msan_chain_origin+0x50/0x90 [ 1954.516045][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1954.521180][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.526174][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.530711][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.535410][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.541492][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.547663][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.552876][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.557762][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.562281][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.568630][T32105] [ 1954.570961][T32105] Uninit was stored to memory at: [ 1954.576000][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1954.581729][T32105] __msan_chain_origin+0x50/0x90 [ 1954.586690][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1954.591814][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.596761][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.601274][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.605972][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.612050][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.618243][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.623455][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.628345][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.632835][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.639171][T32105] [ 1954.641479][T32105] Uninit was stored to memory at: [ 1954.646490][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1954.652193][T32105] __msan_chain_origin+0x50/0x90 [ 1954.657114][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1954.662208][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.667129][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.671628][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.676288][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.682363][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.688499][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.693686][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.698520][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.703009][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.709368][T32105] [ 1954.711677][T32105] Uninit was stored to memory at: [ 1954.716688][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1954.722389][T32105] __msan_chain_origin+0x50/0x90 [ 1954.727317][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1954.732417][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.737337][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.741836][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.746509][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.752561][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.758713][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.764038][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.768877][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.773365][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.779665][T32105] [ 1954.781986][T32105] Uninit was stored to memory at: [ 1954.786997][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1954.792786][T32105] __msan_chain_origin+0x50/0x90 [ 1954.797709][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1954.802823][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.807745][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.812247][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.816913][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.822964][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.829101][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.834288][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.839121][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.843609][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.849919][T32105] [ 1954.852224][T32105] Uninit was stored to memory at: [ 1954.857233][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1954.862935][T32105] __msan_chain_origin+0x50/0x90 [ 1954.867856][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1954.873036][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.877964][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.882448][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.887109][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.893160][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.899298][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.904488][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.909318][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.913805][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.920113][T32105] [ 1954.922427][T32105] Uninit was stored to memory at: [ 1954.927439][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1954.933142][T32105] __msan_chain_origin+0x50/0x90 [ 1954.938087][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1954.943190][T32105] get_compat_msghdr+0x108/0x2b0 [ 1954.948113][T32105] do_recvmmsg+0xdba/0x22c0 [ 1954.952601][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1954.957263][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1954.963313][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1954.969448][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1954.974632][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1954.979466][T32105] do_SYSENTER_32+0x73/0x90 [ 1954.983955][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1954.990254][T32105] [ 1954.992562][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1954.999221][T32105] do_recvmmsg+0xc2/0x22c0 [ 1955.003620][T32105] do_recvmmsg+0xc2/0x22c0 [ 1955.142392][T32105] not chained 7420000 origins [ 1955.147137][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1955.155817][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1955.165879][T32105] Call Trace: [ 1955.169196][T32105] dump_stack+0x21c/0x280 [ 1955.174250][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1955.180004][T32105] ? idle_cpu+0x9a/0x1d0 [ 1955.184286][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1955.189505][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1955.195338][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1955.201420][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1955.206641][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1955.212207][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1955.218297][T32105] ? _copy_from_user+0x221/0x330 [ 1955.223255][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1955.228475][T32105] __msan_chain_origin+0x50/0x90 [ 1955.233483][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1955.238637][T32105] get_compat_msghdr+0x108/0x2b0 [ 1955.243608][T32105] do_recvmmsg+0xdba/0x22c0 [ 1955.248146][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1955.254168][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1955.259397][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1955.265335][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1955.270560][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1955.275866][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1955.280640][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1955.285436][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1955.290174][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1955.296273][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1955.302434][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1955.307631][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1955.312473][T32105] do_SYSENTER_32+0x73/0x90 [ 1955.317005][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1955.323314][T32105] RIP: 0023:0xf7f40549 [ 1955.327403][T32105] Code: Bad RIP value. [ 1955.331454][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1955.339860][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1955.347813][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1955.355768][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1955.363724][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1955.371679][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1955.379646][T32105] Uninit was stored to memory at: [ 1955.384668][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1955.390386][T32105] __msan_chain_origin+0x50/0x90 [ 1955.395311][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1955.400410][T32105] get_compat_msghdr+0x108/0x2b0 [ 1955.405350][T32105] do_recvmmsg+0xdba/0x22c0 [ 1955.409866][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1955.414529][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1955.420578][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1955.426716][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1955.431900][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1955.436742][T32105] do_SYSENTER_32+0x73/0x90 [ 1955.441230][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1955.447532][T32105] [ 1955.449850][T32105] Uninit was stored to memory at: [ 1955.454861][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1955.460560][T32105] __msan_chain_origin+0x50/0x90 [ 1955.465494][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1955.470673][T32105] get_compat_msghdr+0x108/0x2b0 [ 1955.475596][T32105] do_recvmmsg+0xdba/0x22c0 [ 1955.480083][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1955.484745][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1955.490804][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1955.496952][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1955.502139][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1955.506985][T32105] do_SYSENTER_32+0x73/0x90 [ 1955.511472][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1955.517783][T32105] [ 1955.520087][T32105] Uninit was stored to memory at: [ 1955.525099][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1955.530801][T32105] __msan_chain_origin+0x50/0x90 [ 1955.535723][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1955.540828][T32105] get_compat_msghdr+0x108/0x2b0 [ 1955.545760][T32105] do_recvmmsg+0xdba/0x22c0 [ 1955.550255][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1955.554926][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1955.560978][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1955.567141][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1955.572325][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1955.577191][T32105] do_SYSENTER_32+0x73/0x90 [ 1955.581681][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1955.587979][T32105] [ 1955.590298][T32105] Uninit was stored to memory at: [ 1955.595310][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1955.601028][T32105] __msan_chain_origin+0x50/0x90 [ 1955.605969][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1955.611076][T32105] get_compat_msghdr+0x108/0x2b0 [ 1955.616025][T32105] do_recvmmsg+0xdba/0x22c0 [ 1955.620511][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1955.625178][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1955.631231][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1955.637389][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1955.642574][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1955.647409][T32105] do_SYSENTER_32+0x73/0x90 [ 1955.651898][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1955.658195][T32105] [ 1955.660502][T32105] Uninit was stored to memory at: [ 1955.665512][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1955.671227][T32105] __msan_chain_origin+0x50/0x90 [ 1955.676146][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1955.681254][T32105] get_compat_msghdr+0x108/0x2b0 [ 1955.686175][T32105] do_recvmmsg+0xdba/0x22c0 [ 1955.690658][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1955.695319][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1955.701397][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1955.707534][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1955.712718][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1955.717550][T32105] do_SYSENTER_32+0x73/0x90 [ 1955.722038][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1955.728337][T32105] [ 1955.730646][T32105] Uninit was stored to memory at: [ 1955.735656][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1955.741371][T32105] __msan_chain_origin+0x50/0x90 [ 1955.746299][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1955.751409][T32105] get_compat_msghdr+0x108/0x2b0 [ 1955.756337][T32105] do_recvmmsg+0xdba/0x22c0 [ 1955.760820][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1955.765490][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1955.771540][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1955.777681][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1955.782865][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1955.787695][T32105] do_SYSENTER_32+0x73/0x90 [ 1955.792182][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1955.798482][T32105] [ 1955.800792][T32105] Uninit was stored to memory at: [ 1955.805838][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1955.811546][T32105] __msan_chain_origin+0x50/0x90 [ 1955.816472][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1955.821570][T32105] get_compat_msghdr+0x108/0x2b0 [ 1955.826490][T32105] do_recvmmsg+0xdba/0x22c0 [ 1955.830974][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1955.835639][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1955.841692][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1955.847831][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1955.853101][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1955.857941][T32105] do_SYSENTER_32+0x73/0x90 [ 1955.862435][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1955.868734][T32105] [ 1955.871049][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1955.877727][T32105] do_recvmmsg+0xc2/0x22c0 [ 1955.882124][T32105] do_recvmmsg+0xc2/0x22c0 [ 1956.047482][T32105] not chained 7430000 origins [ 1956.052242][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1956.060916][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.071063][T32105] Call Trace: [ 1956.074401][T32105] dump_stack+0x21c/0x280 [ 1956.078761][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1956.084529][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1956.089749][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1956.095575][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1956.101657][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1956.106874][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1956.112440][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1956.118537][T32105] ? _copy_from_user+0x221/0x330 [ 1956.123507][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1956.128724][T32105] __msan_chain_origin+0x50/0x90 [ 1956.133686][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1956.138840][T32105] get_compat_msghdr+0x108/0x2b0 [ 1956.143812][T32105] do_recvmmsg+0xdba/0x22c0 [ 1956.148346][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1956.154368][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1956.159596][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1956.168250][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1956.173478][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1956.178785][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1956.183561][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1956.188348][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1956.193118][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1956.199221][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1956.205399][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1956.210631][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1956.215503][T32105] do_SYSENTER_32+0x73/0x90 [ 1956.220032][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1956.226424][T32105] RIP: 0023:0xf7f40549 [ 1956.230489][T32105] Code: Bad RIP value. [ 1956.234563][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1956.242985][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1956.250962][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1956.258941][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1956.266924][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1956.274908][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1956.282905][T32105] Uninit was stored to memory at: [ 1956.287951][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1956.293682][T32105] __msan_chain_origin+0x50/0x90 [ 1956.298721][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1956.303845][T32105] get_compat_msghdr+0x108/0x2b0 [ 1956.308795][T32105] do_recvmmsg+0xdba/0x22c0 [ 1956.313307][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1956.317984][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1956.324037][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1956.330218][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1956.335405][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1956.340266][T32105] do_SYSENTER_32+0x73/0x90 [ 1956.344753][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1956.351056][T32105] [ 1956.353380][T32105] Uninit was stored to memory at: [ 1956.358478][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1956.364193][T32105] __msan_chain_origin+0x50/0x90 [ 1956.369140][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1956.374244][T32105] get_compat_msghdr+0x108/0x2b0 [ 1956.379186][T32105] do_recvmmsg+0xdba/0x22c0 [ 1956.383682][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1956.388340][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1956.394399][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1956.400538][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1956.405725][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1956.410559][T32105] do_SYSENTER_32+0x73/0x90 [ 1956.415046][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1956.421349][T32105] [ 1956.423658][T32105] Uninit was stored to memory at: [ 1956.428668][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1956.434369][T32105] __msan_chain_origin+0x50/0x90 [ 1956.439294][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1956.444396][T32105] get_compat_msghdr+0x108/0x2b0 [ 1956.449328][T32105] do_recvmmsg+0xdba/0x22c0 [ 1956.453823][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1956.458493][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1956.464553][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1956.470694][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1956.475892][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1956.480729][T32105] do_SYSENTER_32+0x73/0x90 [ 1956.485217][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1956.491516][T32105] [ 1956.493821][T32105] Uninit was stored to memory at: [ 1956.498832][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1956.504531][T32105] __msan_chain_origin+0x50/0x90 [ 1956.509455][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1956.515590][T32105] get_compat_msghdr+0x108/0x2b0 [ 1956.520507][T32105] do_recvmmsg+0xdba/0x22c0 [ 1956.524992][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1956.529662][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1956.535710][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1956.541847][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1956.547032][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1956.551873][T32105] do_SYSENTER_32+0x73/0x90 [ 1956.556359][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1956.562664][T32105] [ 1956.564968][T32105] Uninit was stored to memory at: [ 1956.569974][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1956.575676][T32105] __msan_chain_origin+0x50/0x90 [ 1956.580600][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1956.585703][T32105] get_compat_msghdr+0x108/0x2b0 [ 1956.590632][T32105] do_recvmmsg+0xdba/0x22c0 [ 1956.595115][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1956.599785][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1956.605842][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1956.611979][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1956.617165][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1956.621999][T32105] do_SYSENTER_32+0x73/0x90 [ 1956.626657][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1956.632956][T32105] [ 1956.635261][T32105] Uninit was stored to memory at: [ 1956.640273][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1956.645984][T32105] __msan_chain_origin+0x50/0x90 [ 1956.650914][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1956.656007][T32105] get_compat_msghdr+0x108/0x2b0 [ 1956.660936][T32105] do_recvmmsg+0xdba/0x22c0 [ 1956.665425][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1956.670099][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1956.676164][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1956.682315][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1956.687497][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1956.692345][T32105] do_SYSENTER_32+0x73/0x90 [ 1956.696843][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1956.703144][T32105] [ 1956.705451][T32105] Uninit was stored to memory at: [ 1956.710465][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1956.716171][T32105] __msan_chain_origin+0x50/0x90 [ 1956.721112][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1956.726217][T32105] get_compat_msghdr+0x108/0x2b0 [ 1956.731142][T32105] do_recvmmsg+0xdba/0x22c0 [ 1956.735629][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1956.740286][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1956.746335][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1956.752486][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1956.757669][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1956.762514][T32105] do_SYSENTER_32+0x73/0x90 [ 1956.767001][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1956.773300][T32105] [ 1956.775608][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1956.782269][T32105] do_recvmmsg+0xc2/0x22c0 [ 1956.786694][T32105] do_recvmmsg+0xc2/0x22c0 [ 1956.936909][T32105] not chained 7440000 origins [ 1956.941653][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1956.950335][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.960399][T32105] Call Trace: [ 1956.963724][T32105] dump_stack+0x21c/0x280 [ 1956.968096][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1956.973858][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1956.979084][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1956.984913][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1956.990994][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1956.996210][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1957.001774][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1957.007953][T32105] ? _copy_from_user+0x221/0x330 [ 1957.012913][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1957.018128][T32105] __msan_chain_origin+0x50/0x90 [ 1957.023094][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1957.028318][T32105] get_compat_msghdr+0x108/0x2b0 [ 1957.033290][T32105] do_recvmmsg+0xdba/0x22c0 [ 1957.037844][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1957.043860][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1957.049091][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1957.055020][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1957.060248][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1957.065556][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1957.070343][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1957.075134][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1957.079855][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1957.085961][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1957.092191][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1957.097422][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1957.102294][T32105] do_SYSENTER_32+0x73/0x90 [ 1957.106824][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1957.113164][T32105] RIP: 0023:0xf7f40549 [ 1957.117231][T32105] Code: Bad RIP value. [ 1957.121306][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1957.129825][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1957.137807][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1957.145783][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1957.153751][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1957.161708][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1957.169702][T32105] Uninit was stored to memory at: [ 1957.174730][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1957.180432][T32105] __msan_chain_origin+0x50/0x90 [ 1957.185359][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1957.190466][T32105] get_compat_msghdr+0x108/0x2b0 [ 1957.195401][T32105] do_recvmmsg+0xdba/0x22c0 [ 1957.199905][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1957.204567][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1957.210616][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1957.216766][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1957.221952][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1957.226783][T32105] do_SYSENTER_32+0x73/0x90 [ 1957.231279][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1957.237579][T32105] [ 1957.239884][T32105] Uninit was stored to memory at: [ 1957.244892][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1957.250594][T32105] __msan_chain_origin+0x50/0x90 [ 1957.255521][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1957.260635][T32105] get_compat_msghdr+0x108/0x2b0 [ 1957.265587][T32105] do_recvmmsg+0xdba/0x22c0 [ 1957.270072][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1957.274731][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1957.280779][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1957.286921][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1957.292105][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1957.296940][T32105] do_SYSENTER_32+0x73/0x90 [ 1957.301428][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1957.307739][T32105] [ 1957.310058][T32105] Uninit was stored to memory at: [ 1957.315069][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1957.320785][T32105] __msan_chain_origin+0x50/0x90 [ 1957.325723][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1957.330816][T32105] get_compat_msghdr+0x108/0x2b0 [ 1957.335735][T32105] do_recvmmsg+0xdba/0x22c0 [ 1957.340236][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1957.344897][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1957.350952][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1957.358044][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1957.363240][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1957.368070][T32105] do_SYSENTER_32+0x73/0x90 [ 1957.372609][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1957.378914][T32105] [ 1957.381223][T32105] Uninit was stored to memory at: [ 1957.386246][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1957.391947][T32105] __msan_chain_origin+0x50/0x90 [ 1957.396879][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1957.401986][T32105] get_compat_msghdr+0x108/0x2b0 [ 1957.406914][T32105] do_recvmmsg+0xdba/0x22c0 [ 1957.411421][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1957.416175][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1957.422242][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1957.428387][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1957.433571][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1957.438405][T32105] do_SYSENTER_32+0x73/0x90 [ 1957.442893][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1957.449203][T32105] [ 1957.451521][T32105] Uninit was stored to memory at: [ 1957.456538][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1957.462238][T32105] __msan_chain_origin+0x50/0x90 [ 1957.467163][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1957.472258][T32105] get_compat_msghdr+0x108/0x2b0 [ 1957.477177][T32105] do_recvmmsg+0xdba/0x22c0 [ 1957.481663][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1957.486325][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1957.492393][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1957.498545][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1957.503729][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1957.508560][T32105] do_SYSENTER_32+0x73/0x90 [ 1957.513047][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1957.519349][T32105] [ 1957.521655][T32105] Uninit was stored to memory at: [ 1957.526663][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1957.532363][T32105] __msan_chain_origin+0x50/0x90 [ 1957.537288][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1957.542386][T32105] get_compat_msghdr+0x108/0x2b0 [ 1957.547316][T32105] do_recvmmsg+0xdba/0x22c0 [ 1957.551801][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1957.556462][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1957.562510][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1957.568645][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1957.573840][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1957.578683][T32105] do_SYSENTER_32+0x73/0x90 [ 1957.583171][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1957.589468][T32105] [ 1957.591776][T32105] Uninit was stored to memory at: [ 1957.596783][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1957.602482][T32105] __msan_chain_origin+0x50/0x90 [ 1957.607408][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1957.612501][T32105] get_compat_msghdr+0x108/0x2b0 [ 1957.617417][T32105] do_recvmmsg+0xdba/0x22c0 [ 1957.621903][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1957.626566][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1957.632628][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1957.638763][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1957.643943][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1957.648775][T32105] do_SYSENTER_32+0x73/0x90 [ 1957.653262][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1957.659572][T32105] [ 1957.661881][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1957.668535][T32105] do_recvmmsg+0xc2/0x22c0 [ 1957.672931][T32105] do_recvmmsg+0xc2/0x22c0 [ 1957.884666][T32105] not chained 7450000 origins [ 1957.889418][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1957.898093][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1957.908158][T32105] Call Trace: [ 1957.911479][T32105] dump_stack+0x21c/0x280 [ 1957.915840][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1957.921609][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1957.926829][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1957.932655][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1957.938736][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1957.943959][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1957.949534][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1957.955633][T32105] ? _copy_from_user+0x221/0x330 [ 1957.960641][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1957.965860][T32105] __msan_chain_origin+0x50/0x90 [ 1957.970848][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1957.976096][T32105] get_compat_msghdr+0x108/0x2b0 [ 1957.981084][T32105] do_recvmmsg+0xdba/0x22c0 [ 1957.985620][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1957.991639][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1957.996867][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1958.002791][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1958.008018][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1958.013327][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1958.018107][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1958.022899][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1958.027618][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1958.033723][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1958.039923][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1958.045160][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1958.050037][T32105] do_SYSENTER_32+0x73/0x90 [ 1958.054564][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1958.060908][T32105] RIP: 0023:0xf7f40549 [ 1958.064976][T32105] Code: Bad RIP value. [ 1958.069052][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1958.077480][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1958.085462][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1958.093447][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1958.101429][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1958.109400][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1958.117369][T32105] Uninit was stored to memory at: [ 1958.122424][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1958.128128][T32105] __msan_chain_origin+0x50/0x90 [ 1958.133071][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1958.138166][T32105] get_compat_msghdr+0x108/0x2b0 [ 1958.143093][T32105] do_recvmmsg+0xdba/0x22c0 [ 1958.147598][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1958.152261][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1958.158324][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1958.164462][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1958.169649][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1958.174489][T32105] do_SYSENTER_32+0x73/0x90 [ 1958.178977][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1958.185280][T32105] [ 1958.187588][T32105] Uninit was stored to memory at: [ 1958.192612][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1958.198315][T32105] __msan_chain_origin+0x50/0x90 [ 1958.203252][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1958.208362][T32105] get_compat_msghdr+0x108/0x2b0 [ 1958.213292][T32105] do_recvmmsg+0xdba/0x22c0 [ 1958.217777][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1958.222459][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1958.228529][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1958.234670][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1958.239854][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1958.244694][T32105] do_SYSENTER_32+0x73/0x90 [ 1958.249182][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1958.255489][T32105] [ 1958.257799][T32105] Uninit was stored to memory at: [ 1958.262823][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1958.268617][T32105] __msan_chain_origin+0x50/0x90 [ 1958.273553][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1958.278781][T32105] get_compat_msghdr+0x108/0x2b0 [ 1958.283715][T32105] do_recvmmsg+0xdba/0x22c0 [ 1958.288209][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1958.292879][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1958.298931][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1958.305071][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1958.310257][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1958.315097][T32105] do_SYSENTER_32+0x73/0x90 [ 1958.319594][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1958.325895][T32105] [ 1958.328202][T32105] Uninit was stored to memory at: [ 1958.334183][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1958.339884][T32105] __msan_chain_origin+0x50/0x90 [ 1958.344810][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1958.349902][T32105] get_compat_msghdr+0x108/0x2b0 [ 1958.354822][T32105] do_recvmmsg+0xdba/0x22c0 [ 1958.359307][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1958.363968][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1958.370019][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1958.376157][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1958.381344][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1958.386178][T32105] do_SYSENTER_32+0x73/0x90 [ 1958.390665][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1958.396968][T32105] [ 1958.399275][T32105] Uninit was stored to memory at: [ 1958.404286][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1958.409994][T32105] __msan_chain_origin+0x50/0x90 [ 1958.414930][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1958.420025][T32105] get_compat_msghdr+0x108/0x2b0 [ 1958.425056][T32105] do_recvmmsg+0xdba/0x22c0 [ 1958.429554][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1958.434227][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1958.440280][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1958.446430][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1958.451615][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1958.456445][T32105] do_SYSENTER_32+0x73/0x90 [ 1958.460929][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1958.467232][T32105] [ 1958.469549][T32105] Uninit was stored to memory at: [ 1958.474573][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1958.480285][T32105] __msan_chain_origin+0x50/0x90 [ 1958.485209][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1958.490301][T32105] get_compat_msghdr+0x108/0x2b0 [ 1958.495220][T32105] do_recvmmsg+0xdba/0x22c0 [ 1958.499704][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1958.504387][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1958.510438][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1958.516576][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1958.521760][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1958.526590][T32105] do_SYSENTER_32+0x73/0x90 [ 1958.531087][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1958.537410][T32105] [ 1958.539716][T32105] Uninit was stored to memory at: [ 1958.544726][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1958.550426][T32105] __msan_chain_origin+0x50/0x90 [ 1958.555362][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1958.560471][T32105] get_compat_msghdr+0x108/0x2b0 [ 1958.565406][T32105] do_recvmmsg+0xdba/0x22c0 [ 1958.569889][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1958.574549][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1958.580598][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1958.586738][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1958.591928][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1958.596764][T32105] do_SYSENTER_32+0x73/0x90 [ 1958.601252][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1958.607570][T32105] [ 1958.609882][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1958.616558][T32105] do_recvmmsg+0xc2/0x22c0 [ 1958.620954][T32105] do_recvmmsg+0xc2/0x22c0 [ 1958.784287][T32105] not chained 7460000 origins [ 1958.789052][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1958.797724][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.807786][T32105] Call Trace: [ 1958.811105][T32105] dump_stack+0x21c/0x280 [ 1958.815483][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1958.821246][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1958.826462][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1958.832288][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1958.838370][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1958.843593][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1958.849161][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1958.855348][T32105] ? _copy_from_user+0x221/0x330 [ 1958.860310][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1958.865535][T32105] __msan_chain_origin+0x50/0x90 [ 1958.870496][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1958.875650][T32105] get_compat_msghdr+0x108/0x2b0 [ 1958.880625][T32105] do_recvmmsg+0xdba/0x22c0 [ 1958.885215][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1958.891253][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1958.896478][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1958.902401][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1958.907626][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1958.912951][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1958.917728][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1958.922513][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1958.927255][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1958.933356][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1958.939535][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1958.944770][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1958.949651][T32105] do_SYSENTER_32+0x73/0x90 [ 1958.954209][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1958.960547][T32105] RIP: 0023:0xf7f40549 [ 1958.964615][T32105] Code: Bad RIP value. [ 1958.968686][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1958.977113][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1958.985091][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1958.993073][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1959.001051][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1959.009023][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1959.016997][T32105] Uninit was stored to memory at: [ 1959.022056][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1959.027758][T32105] __msan_chain_origin+0x50/0x90 [ 1959.032695][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1959.037789][T32105] get_compat_msghdr+0x108/0x2b0 [ 1959.042712][T32105] do_recvmmsg+0xdba/0x22c0 [ 1959.047200][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1959.051876][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1959.057925][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1959.064064][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1959.069246][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1959.074089][T32105] do_SYSENTER_32+0x73/0x90 [ 1959.078587][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1959.084893][T32105] [ 1959.087201][T32105] Uninit was stored to memory at: [ 1959.092225][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1959.097925][T32105] __msan_chain_origin+0x50/0x90 [ 1959.102855][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1959.107957][T32105] get_compat_msghdr+0x108/0x2b0 [ 1959.112880][T32105] do_recvmmsg+0xdba/0x22c0 [ 1959.117364][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1959.122042][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1959.128108][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1959.134276][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1959.139460][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1959.144292][T32105] do_SYSENTER_32+0x73/0x90 [ 1959.148789][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1959.155098][T32105] [ 1959.157410][T32105] Uninit was stored to memory at: [ 1959.162436][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1959.168147][T32105] __msan_chain_origin+0x50/0x90 [ 1959.173069][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1959.178163][T32105] get_compat_msghdr+0x108/0x2b0 [ 1959.183096][T32105] do_recvmmsg+0xdba/0x22c0 [ 1959.187589][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1959.192250][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1959.198300][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1959.204446][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1959.209643][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1959.214489][T32105] do_SYSENTER_32+0x73/0x90 [ 1959.218978][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1959.225277][T32105] [ 1959.227669][T32105] Uninit was stored to memory at: [ 1959.232684][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1959.238411][T32105] __msan_chain_origin+0x50/0x90 [ 1959.243335][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1959.248427][T32105] get_compat_msghdr+0x108/0x2b0 [ 1959.253357][T32105] do_recvmmsg+0xdba/0x22c0 [ 1959.257854][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1959.262515][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1959.268573][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1959.274721][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1959.279916][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1959.284761][T32105] do_SYSENTER_32+0x73/0x90 [ 1959.289260][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1959.295563][T32105] [ 1959.297870][T32105] Uninit was stored to memory at: [ 1959.302882][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1959.308593][T32105] __msan_chain_origin+0x50/0x90 [ 1959.313515][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1959.318607][T32105] get_compat_msghdr+0x108/0x2b0 [ 1959.323525][T32105] do_recvmmsg+0xdba/0x22c0 [ 1959.328009][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1959.332670][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1959.338730][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1959.346732][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1959.351933][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1959.356799][T32105] do_SYSENTER_32+0x73/0x90 [ 1959.361289][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1959.367606][T32105] [ 1959.369928][T32105] Uninit was stored to memory at: [ 1959.374950][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1959.380670][T32105] __msan_chain_origin+0x50/0x90 [ 1959.385941][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1959.391145][T32105] get_compat_msghdr+0x108/0x2b0 [ 1959.396080][T32105] do_recvmmsg+0xdba/0x22c0 [ 1959.400563][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1959.405242][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1959.411317][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1959.417737][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1959.422923][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1959.427772][T32105] do_SYSENTER_32+0x73/0x90 [ 1959.432271][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1959.438579][T32105] [ 1959.440892][T32105] Uninit was stored to memory at: [ 1959.445909][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1959.451631][T32105] __msan_chain_origin+0x50/0x90 [ 1959.456559][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1959.461669][T32105] get_compat_msghdr+0x108/0x2b0 [ 1959.466593][T32105] do_recvmmsg+0xdba/0x22c0 [ 1959.471092][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1959.475792][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1959.481842][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1959.487980][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1959.493180][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1959.498027][T32105] do_SYSENTER_32+0x73/0x90 [ 1959.502563][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1959.508864][T32105] [ 1959.511436][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1959.518110][T32105] do_recvmmsg+0xc2/0x22c0 [ 1959.522509][T32105] do_recvmmsg+0xc2/0x22c0 [ 1959.678893][T32105] not chained 7470000 origins [ 1959.683637][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1959.693095][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1959.703166][T32105] Call Trace: [ 1959.706488][T32105] dump_stack+0x21c/0x280 [ 1959.710851][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1959.716616][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1959.721837][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1959.727670][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1959.733767][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1959.738998][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1959.744565][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1959.750681][T32105] ? _copy_from_user+0x221/0x330 [ 1959.755663][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1959.760893][T32105] __msan_chain_origin+0x50/0x90 [ 1959.765878][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1959.771038][T32105] get_compat_msghdr+0x108/0x2b0 [ 1959.776367][T32105] do_recvmmsg+0xdba/0x22c0 [ 1959.780901][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1959.786918][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1959.792146][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1959.798070][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1959.803341][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1959.808704][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1959.813486][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1959.818432][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1959.823179][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1959.829315][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1959.835494][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1959.840722][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1959.845598][T32105] do_SYSENTER_32+0x73/0x90 [ 1959.850126][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1959.856493][T32105] RIP: 0023:0xf7f40549 [ 1959.860580][T32105] Code: Bad RIP value. [ 1959.864675][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1959.873123][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1959.881106][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1959.889177][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1959.897161][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1959.905222][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1959.914326][T32105] Uninit was stored to memory at: [ 1959.919365][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1959.925072][T32105] __msan_chain_origin+0x50/0x90 [ 1959.930005][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1959.935104][T32105] get_compat_msghdr+0x108/0x2b0 [ 1959.940059][T32105] do_recvmmsg+0xdba/0x22c0 [ 1959.944596][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1959.949269][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1959.955344][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1959.961502][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1959.966687][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1959.971523][T32105] do_SYSENTER_32+0x73/0x90 [ 1959.976025][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1959.982336][T32105] [ 1959.984651][T32105] Uninit was stored to memory at: [ 1959.989678][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1959.995402][T32105] __msan_chain_origin+0x50/0x90 [ 1960.000334][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.005444][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.010387][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.014894][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.019558][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.025636][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.032474][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.037685][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1960.042537][T32105] do_SYSENTER_32+0x73/0x90 [ 1960.047125][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1960.053463][T32105] [ 1960.055776][T32105] Uninit was stored to memory at: [ 1960.060804][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1960.066506][T32105] __msan_chain_origin+0x50/0x90 [ 1960.071433][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.076556][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.081493][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.085980][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.090644][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.096718][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.102880][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.108078][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1960.112925][T32105] do_SYSENTER_32+0x73/0x90 [ 1960.117419][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1960.123720][T32105] [ 1960.126028][T32105] Uninit was stored to memory at: [ 1960.131389][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1960.137543][T32105] __msan_chain_origin+0x50/0x90 [ 1960.142481][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.147577][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.152501][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.156984][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.161649][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.167699][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.173849][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.179047][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1960.183889][T32105] do_SYSENTER_32+0x73/0x90 [ 1960.188549][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1960.194861][T32105] [ 1960.197170][T32105] Uninit was stored to memory at: [ 1960.202195][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1960.207907][T32105] __msan_chain_origin+0x50/0x90 [ 1960.212849][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.217945][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.222880][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.227379][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.232060][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.238108][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.244247][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.249435][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1960.254288][T32105] do_SYSENTER_32+0x73/0x90 [ 1960.258777][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1960.265859][T32105] [ 1960.268180][T32105] Uninit was stored to memory at: [ 1960.273194][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1960.278909][T32105] __msan_chain_origin+0x50/0x90 [ 1960.283848][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.288941][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.294051][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.298556][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.304044][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.310103][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.316246][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.321432][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1960.326264][T32105] do_SYSENTER_32+0x73/0x90 [ 1960.330756][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1960.337058][T32105] [ 1960.339374][T32105] Uninit was stored to memory at: [ 1960.344407][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1960.350108][T32105] __msan_chain_origin+0x50/0x90 [ 1960.355032][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.360141][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.365074][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.369572][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.374244][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.380294][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.386433][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.392226][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1960.397058][T32105] do_SYSENTER_32+0x73/0x90 [ 1960.401545][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1960.407855][T32105] [ 1960.410164][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1960.416943][T32105] do_recvmmsg+0xc2/0x22c0 [ 1960.421341][T32105] do_recvmmsg+0xc2/0x22c0 [ 1960.566981][T32105] not chained 7480000 origins [ 1960.571805][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1960.580482][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.590549][T32105] Call Trace: [ 1960.593873][T32105] dump_stack+0x21c/0x280 [ 1960.598256][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1960.604042][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1960.616128][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1960.621961][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1960.628050][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1960.633269][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1960.638854][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1960.644950][T32105] ? _copy_from_user+0x221/0x330 [ 1960.649932][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1960.655153][T32105] __msan_chain_origin+0x50/0x90 [ 1960.660146][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.665306][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.670287][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.674821][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1960.680838][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1960.686065][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1960.691988][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1960.697322][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1960.702629][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1960.707414][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1960.712221][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.716997][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.723095][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.729290][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.734527][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1960.739404][T32105] do_SYSENTER_32+0x73/0x90 [ 1960.743951][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1960.750292][T32105] RIP: 0023:0xf7f40549 [ 1960.754367][T32105] Code: Bad RIP value. [ 1960.758464][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1960.766893][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1960.774965][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1960.782949][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1960.790922][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1960.798894][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1960.806875][T32105] Uninit was stored to memory at: [ 1960.811907][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1960.817619][T32105] __msan_chain_origin+0x50/0x90 [ 1960.822543][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.827637][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.832558][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.837043][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.841708][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.847771][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.853919][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.859111][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1960.863943][T32105] do_SYSENTER_32+0x73/0x90 [ 1960.868430][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1960.874729][T32105] [ 1960.877042][T32105] Uninit was stored to memory at: [ 1960.882074][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1960.887784][T32105] __msan_chain_origin+0x50/0x90 [ 1960.892707][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.897798][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.902726][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.907212][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.911874][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.917923][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.924065][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.929248][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1960.934086][T32105] do_SYSENTER_32+0x73/0x90 [ 1960.938574][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1960.944880][T32105] [ 1960.947189][T32105] Uninit was stored to memory at: [ 1960.952203][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1960.957909][T32105] __msan_chain_origin+0x50/0x90 [ 1960.962835][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1960.967929][T32105] get_compat_msghdr+0x108/0x2b0 [ 1960.972850][T32105] do_recvmmsg+0xdba/0x22c0 [ 1960.977347][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1960.982013][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1960.988065][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1960.994220][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1960.999407][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.004241][T32105] do_SYSENTER_32+0x73/0x90 [ 1961.008730][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1961.015029][T32105] [ 1961.017345][T32105] Uninit was stored to memory at: [ 1961.023314][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1961.029025][T32105] __msan_chain_origin+0x50/0x90 [ 1961.033949][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1961.039043][T32105] get_compat_msghdr+0x108/0x2b0 [ 1961.043966][T32105] do_recvmmsg+0xdba/0x22c0 [ 1961.048450][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1961.053139][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1961.059187][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1961.065329][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1961.070521][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.075383][T32105] do_SYSENTER_32+0x73/0x90 [ 1961.079870][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1961.086173][T32105] [ 1961.088488][T32105] Uninit was stored to memory at: [ 1961.093504][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1961.099206][T32105] __msan_chain_origin+0x50/0x90 [ 1961.104235][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1961.109340][T32105] get_compat_msghdr+0x108/0x2b0 [ 1961.114262][T32105] do_recvmmsg+0xdba/0x22c0 [ 1961.118746][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1961.123582][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1961.129657][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1961.135811][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1961.141013][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.145847][T32105] do_SYSENTER_32+0x73/0x90 [ 1961.150340][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1961.156643][T32105] [ 1961.158949][T32105] Uninit was stored to memory at: [ 1961.163963][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1961.169674][T32105] __msan_chain_origin+0x50/0x90 [ 1961.174600][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1961.179694][T32105] get_compat_msghdr+0x108/0x2b0 [ 1961.184626][T32105] do_recvmmsg+0xdba/0x22c0 [ 1961.189110][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1961.193773][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1961.199832][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1961.205971][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1961.211169][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.216016][T32105] do_SYSENTER_32+0x73/0x90 [ 1961.220513][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1961.226900][T32105] [ 1961.229209][T32105] Uninit was stored to memory at: [ 1961.234221][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1961.239921][T32105] __msan_chain_origin+0x50/0x90 [ 1961.244845][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1961.249950][T32105] get_compat_msghdr+0x108/0x2b0 [ 1961.254870][T32105] do_recvmmsg+0xdba/0x22c0 [ 1961.259353][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1961.264025][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1961.270085][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1961.276224][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1961.281409][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.286243][T32105] do_SYSENTER_32+0x73/0x90 [ 1961.290731][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1961.297032][T32105] [ 1961.299343][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1961.306015][T32105] do_recvmmsg+0xc2/0x22c0 [ 1961.310416][T32105] do_recvmmsg+0xc2/0x22c0 [ 1961.496909][T32105] not chained 7490000 origins [ 1961.501650][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1961.510322][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.520393][T32105] Call Trace: [ 1961.523714][T32105] dump_stack+0x21c/0x280 [ 1961.528074][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1961.533838][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1961.539055][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1961.544881][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1961.551658][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1961.556877][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1961.562447][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1961.568554][T32105] ? _copy_from_user+0x221/0x330 [ 1961.573518][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1961.578750][T32105] __msan_chain_origin+0x50/0x90 [ 1961.583713][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1961.588868][T32105] get_compat_msghdr+0x108/0x2b0 [ 1961.593840][T32105] do_recvmmsg+0xdba/0x22c0 [ 1961.598377][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1961.604405][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1961.609631][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1961.615545][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1961.620771][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1961.626084][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1961.630861][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1961.635760][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1961.640501][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1961.646614][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1961.652788][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1961.658016][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.662929][T32105] do_SYSENTER_32+0x73/0x90 [ 1961.667455][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1961.673800][T32105] RIP: 0023:0xf7f40549 [ 1961.677868][T32105] Code: Bad RIP value. [ 1961.681940][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1961.690373][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1961.698352][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1961.706341][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1961.714296][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1961.722269][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1961.730249][T32105] Uninit was stored to memory at: [ 1961.735276][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1961.740977][T32105] __msan_chain_origin+0x50/0x90 [ 1961.745903][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1961.751132][T32105] get_compat_msghdr+0x108/0x2b0 [ 1961.756067][T32105] do_recvmmsg+0xdba/0x22c0 [ 1961.760572][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1961.765245][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1961.771298][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1961.777448][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1961.782674][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.787538][T32105] do_SYSENTER_32+0x73/0x90 [ 1961.792037][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1961.798342][T32105] [ 1961.800659][T32105] Uninit was stored to memory at: [ 1961.805676][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1961.811397][T32105] __msan_chain_origin+0x50/0x90 [ 1961.816326][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1961.821429][T32105] get_compat_msghdr+0x108/0x2b0 [ 1961.826353][T32105] do_recvmmsg+0xdba/0x22c0 [ 1961.830839][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1961.835505][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1961.841557][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1961.847700][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1961.852899][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.857734][T32105] do_SYSENTER_32+0x73/0x90 [ 1961.862225][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1961.868534][T32105] [ 1961.870841][T32105] Uninit was stored to memory at: [ 1961.875855][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1961.881563][T32105] __msan_chain_origin+0x50/0x90 [ 1961.886498][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1961.891592][T32105] get_compat_msghdr+0x108/0x2b0 [ 1961.896523][T32105] do_recvmmsg+0xdba/0x22c0 [ 1961.901016][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1961.905687][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1961.911737][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1961.917874][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1961.923069][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.927901][T32105] do_SYSENTER_32+0x73/0x90 [ 1961.932397][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1961.938700][T32105] [ 1961.941016][T32105] Uninit was stored to memory at: [ 1961.946047][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1961.951755][T32105] __msan_chain_origin+0x50/0x90 [ 1961.956688][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1961.961781][T32105] get_compat_msghdr+0x108/0x2b0 [ 1961.966706][T32105] do_recvmmsg+0xdba/0x22c0 [ 1961.971206][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1961.975874][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1961.981934][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1961.988072][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1961.993258][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1961.998101][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.002591][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.008902][T32105] [ 1962.011217][T32105] Uninit was stored to memory at: [ 1962.016234][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1962.021941][T32105] __msan_chain_origin+0x50/0x90 [ 1962.026868][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1962.031963][T32105] get_compat_msghdr+0x108/0x2b0 [ 1962.036897][T32105] do_recvmmsg+0xdba/0x22c0 [ 1962.041408][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1962.046094][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1962.052160][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1962.058301][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1962.063485][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1962.068319][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.073505][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.079806][T32105] [ 1962.082113][T32105] Uninit was stored to memory at: [ 1962.087125][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1962.092840][T32105] __msan_chain_origin+0x50/0x90 [ 1962.097766][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1962.102861][T32105] get_compat_msghdr+0x108/0x2b0 [ 1962.107782][T32105] do_recvmmsg+0xdba/0x22c0 [ 1962.112267][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1962.116928][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1962.122977][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1962.129118][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1962.134312][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1962.139147][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.143637][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.149936][T32105] [ 1962.152242][T32105] Uninit was stored to memory at: [ 1962.157262][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1962.162973][T32105] __msan_chain_origin+0x50/0x90 [ 1962.167908][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1962.173001][T32105] get_compat_msghdr+0x108/0x2b0 [ 1962.177918][T32105] do_recvmmsg+0xdba/0x22c0 [ 1962.182407][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1962.187066][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1962.193566][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1962.199708][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1962.204899][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1962.209739][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.214228][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.220529][T32105] [ 1962.222836][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1962.229494][T32105] do_recvmmsg+0xc2/0x22c0 [ 1962.233901][T32105] do_recvmmsg+0xc2/0x22c0 [ 1962.393573][T32105] not chained 7500000 origins [ 1962.398363][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1962.407043][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.417104][T32105] Call Trace: [ 1962.420436][T32105] dump_stack+0x21c/0x280 [ 1962.424794][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1962.430559][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1962.435779][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1962.441605][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1962.447684][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1962.452901][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1962.458470][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1962.464564][T32105] ? _copy_from_user+0x221/0x330 [ 1962.469524][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1962.474741][T32105] __msan_chain_origin+0x50/0x90 [ 1962.479702][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1962.484985][T32105] get_compat_msghdr+0x108/0x2b0 [ 1962.489960][T32105] do_recvmmsg+0xdba/0x22c0 [ 1962.494496][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1962.500790][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1962.506031][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1962.512052][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1962.517287][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1962.522596][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1962.527504][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1962.532289][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1962.537008][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1962.543116][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1962.549295][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1962.554526][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1962.559408][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.564894][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.571677][T32105] RIP: 0023:0xf7f40549 [ 1962.575743][T32105] Code: Bad RIP value. [ 1962.579817][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1962.588232][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1962.596187][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1962.604144][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1962.612099][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1962.620051][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1962.628020][T32105] Uninit was stored to memory at: [ 1962.633047][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1962.639458][T32105] __msan_chain_origin+0x50/0x90 [ 1962.644398][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1962.649491][T32105] get_compat_msghdr+0x108/0x2b0 [ 1962.654424][T32105] do_recvmmsg+0xdba/0x22c0 [ 1962.658922][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1962.663595][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1962.669658][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1962.675797][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1962.680985][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1962.685823][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.690309][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.696614][T32105] [ 1962.698921][T32105] Uninit was stored to memory at: [ 1962.703931][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1962.709718][T32105] __msan_chain_origin+0x50/0x90 [ 1962.714640][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1962.719749][T32105] get_compat_msghdr+0x108/0x2b0 [ 1962.724783][T32105] do_recvmmsg+0xdba/0x22c0 [ 1962.729275][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1962.733959][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1962.740009][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1962.746155][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1962.751357][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1962.756195][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.760690][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.767012][T32105] [ 1962.769323][T32105] Uninit was stored to memory at: [ 1962.774340][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1962.780075][T32105] __msan_chain_origin+0x50/0x90 [ 1962.785000][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1962.790093][T32105] get_compat_msghdr+0x108/0x2b0 [ 1962.795016][T32105] do_recvmmsg+0xdba/0x22c0 [ 1962.799512][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1962.804224][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1962.810297][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1962.817182][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1962.822369][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1962.827202][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.831718][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.838030][T32105] [ 1962.840342][T32105] Uninit was stored to memory at: [ 1962.845360][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1962.851068][T32105] __msan_chain_origin+0x50/0x90 [ 1962.856036][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1962.861159][T32105] get_compat_msghdr+0x108/0x2b0 [ 1962.866108][T32105] do_recvmmsg+0xdba/0x22c0 [ 1962.870592][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1962.875257][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1962.881325][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1962.887477][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1962.892663][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1962.897501][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.901993][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.908293][T32105] [ 1962.910617][T32105] Uninit was stored to memory at: [ 1962.915632][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1962.921336][T32105] __msan_chain_origin+0x50/0x90 [ 1962.926281][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1962.931378][T32105] get_compat_msghdr+0x108/0x2b0 [ 1962.936298][T32105] do_recvmmsg+0xdba/0x22c0 [ 1962.940799][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1962.945462][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1962.951514][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1962.957655][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1962.962856][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1962.967693][T32105] do_SYSENTER_32+0x73/0x90 [ 1962.972183][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1962.978507][T32105] [ 1962.981262][T32105] Uninit was stored to memory at: [ 1962.986275][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1962.991978][T32105] __msan_chain_origin+0x50/0x90 [ 1962.996902][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1963.001998][T32105] get_compat_msghdr+0x108/0x2b0 [ 1963.006920][T32105] do_recvmmsg+0xdba/0x22c0 [ 1963.011483][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1963.016503][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1963.022556][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1963.028713][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1963.033906][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1963.038756][T32105] do_SYSENTER_32+0x73/0x90 [ 1963.043246][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1963.049636][T32105] [ 1963.051948][T32105] Uninit was stored to memory at: [ 1963.056987][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1963.062692][T32105] __msan_chain_origin+0x50/0x90 [ 1963.067618][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1963.072731][T32105] get_compat_msghdr+0x108/0x2b0 [ 1963.077668][T32105] do_recvmmsg+0xdba/0x22c0 [ 1963.082156][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1963.086831][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1963.092899][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1963.099141][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1963.104339][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1963.109187][T32105] do_SYSENTER_32+0x73/0x90 [ 1963.113679][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1963.120000][T32105] [ 1963.122312][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1963.128978][T32105] do_recvmmsg+0xc2/0x22c0 [ 1963.133378][T32105] do_recvmmsg+0xc2/0x22c0 [ 1963.336652][T32105] not chained 7510000 origins [ 1963.341416][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1963.350648][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1963.360715][T32105] Call Trace: [ 1963.364045][T32105] dump_stack+0x21c/0x280 [ 1963.368411][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1963.374271][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1963.379663][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1963.385499][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1963.391642][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1963.396861][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1963.402456][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1963.408548][T32105] ? _copy_from_user+0x221/0x330 [ 1963.413508][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1963.418728][T32105] __msan_chain_origin+0x50/0x90 [ 1963.423698][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1963.428859][T32105] get_compat_msghdr+0x108/0x2b0 [ 1963.433836][T32105] do_recvmmsg+0xdba/0x22c0 [ 1963.438373][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1963.444396][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1963.449630][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1963.455556][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1963.461771][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1963.467078][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1963.471862][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1963.476650][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1963.481376][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1963.487476][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1963.493625][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1963.498823][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1963.503690][T32105] do_SYSENTER_32+0x73/0x90 [ 1963.508199][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1963.514598][T32105] RIP: 0023:0xf7f40549 [ 1963.518655][T32105] Code: Bad RIP value. [ 1963.522723][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1963.531150][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1963.539119][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1963.547073][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1963.555044][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1963.563016][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1963.571005][T32105] Uninit was stored to memory at: [ 1963.576636][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1963.582342][T32105] __msan_chain_origin+0x50/0x90 [ 1963.587264][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1963.592372][T32105] get_compat_msghdr+0x108/0x2b0 [ 1963.597299][T32105] do_recvmmsg+0xdba/0x22c0 [ 1963.601806][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1963.606479][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1963.612535][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1963.618677][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1963.623905][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1963.628743][T32105] do_SYSENTER_32+0x73/0x90 [ 1963.633413][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1963.639716][T32105] [ 1963.642035][T32105] Uninit was stored to memory at: [ 1963.647053][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1963.652759][T32105] __msan_chain_origin+0x50/0x90 [ 1963.657689][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1963.662786][T32105] get_compat_msghdr+0x108/0x2b0 [ 1963.667709][T32105] do_recvmmsg+0xdba/0x22c0 [ 1963.672196][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1963.676870][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1963.682927][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1963.689084][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1963.694269][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1963.699104][T32105] do_SYSENTER_32+0x73/0x90 [ 1963.703609][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1963.710054][T32105] [ 1963.712361][T32105] Uninit was stored to memory at: [ 1963.717389][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1963.723101][T32105] __msan_chain_origin+0x50/0x90 [ 1963.728028][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1963.733223][T32105] get_compat_msghdr+0x108/0x2b0 [ 1963.738163][T32105] do_recvmmsg+0xdba/0x22c0 [ 1963.742673][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1963.747359][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1963.753434][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1963.759581][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1963.764780][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1963.769612][T32105] do_SYSENTER_32+0x73/0x90 [ 1963.774129][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1963.780435][T32105] [ 1963.782753][T32105] Uninit was stored to memory at: [ 1963.787764][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1963.793471][T32105] __msan_chain_origin+0x50/0x90 [ 1963.798407][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1963.803502][T32105] get_compat_msghdr+0x108/0x2b0 [ 1963.808432][T32105] do_recvmmsg+0xdba/0x22c0 [ 1963.813093][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1963.817770][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1963.823914][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1963.830062][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1963.835258][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1963.840092][T32105] do_SYSENTER_32+0x73/0x90 [ 1963.844591][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1963.850892][T32105] [ 1963.853209][T32105] Uninit was stored to memory at: [ 1963.858221][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1963.863922][T32105] __msan_chain_origin+0x50/0x90 [ 1963.868846][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1963.873945][T32105] get_compat_msghdr+0x108/0x2b0 [ 1963.878886][T32105] do_recvmmsg+0xdba/0x22c0 [ 1963.883378][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1963.888051][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1963.894102][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1963.900239][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1963.905431][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1963.910266][T32105] do_SYSENTER_32+0x73/0x90 [ 1963.914753][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1963.921054][T32105] [ 1963.923375][T32105] Uninit was stored to memory at: [ 1963.929265][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1963.934967][T32105] __msan_chain_origin+0x50/0x90 [ 1963.939902][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1963.945528][T32105] get_compat_msghdr+0x108/0x2b0 [ 1963.950459][T32105] do_recvmmsg+0xdba/0x22c0 [ 1963.954946][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1963.959616][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1963.965727][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1963.975815][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1963.981294][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1963.986795][T32105] do_SYSENTER_32+0x73/0x90 [ 1963.991461][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1963.997781][T32105] [ 1964.000096][T32105] Uninit was stored to memory at: [ 1964.005552][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1964.011260][T32105] __msan_chain_origin+0x50/0x90 [ 1964.016200][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1964.021333][T32105] get_compat_msghdr+0x108/0x2b0 [ 1964.026264][T32105] do_recvmmsg+0xdba/0x22c0 [ 1964.030748][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1964.035408][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1964.041458][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1964.047593][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1964.054317][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1964.059176][T32105] do_SYSENTER_32+0x73/0x90 [ 1964.063675][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1964.069979][T32105] [ 1964.072292][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1964.078951][T32105] do_recvmmsg+0xc2/0x22c0 [ 1964.083365][T32105] do_recvmmsg+0xc2/0x22c0 [ 1964.280197][T32105] not chained 7520000 origins [ 1964.284919][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1964.293585][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.303628][T32105] Call Trace: [ 1964.306922][T32105] dump_stack+0x21c/0x280 [ 1964.311250][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1964.316970][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1964.322157][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1964.327952][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1964.334018][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1964.339207][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1964.344755][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1964.350813][T32105] ? _copy_from_user+0x221/0x330 [ 1964.355743][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1964.360930][T32105] __msan_chain_origin+0x50/0x90 [ 1964.365860][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1964.371246][T32105] get_compat_msghdr+0x108/0x2b0 [ 1964.376179][T32105] do_recvmmsg+0xdba/0x22c0 [ 1964.381233][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1964.387213][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1964.392406][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1964.399257][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1964.404460][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1964.409745][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1964.414502][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1964.419340][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1964.424026][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1964.430089][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1964.436668][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1964.441881][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1964.446723][T32105] do_SYSENTER_32+0x73/0x90 [ 1964.451227][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1964.457537][T32105] RIP: 0023:0xf7f40549 [ 1964.461580][T32105] Code: Bad RIP value. [ 1964.467019][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1964.475434][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1964.483389][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1964.491344][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1964.499319][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1964.507284][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1964.515280][T32105] Uninit was stored to memory at: [ 1964.520296][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1964.526005][T32105] __msan_chain_origin+0x50/0x90 [ 1964.531214][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1964.536309][T32105] get_compat_msghdr+0x108/0x2b0 [ 1964.541243][T32105] do_recvmmsg+0xdba/0x22c0 [ 1964.545748][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1964.550428][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1964.556479][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1964.562635][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1964.567830][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1964.572671][T32105] do_SYSENTER_32+0x73/0x90 [ 1964.577173][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1964.583507][T32105] [ 1964.585828][T32105] Uninit was stored to memory at: [ 1964.590852][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1964.596572][T32105] __msan_chain_origin+0x50/0x90 [ 1964.601496][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1964.606605][T32105] get_compat_msghdr+0x108/0x2b0 [ 1964.611525][T32105] do_recvmmsg+0xdba/0x22c0 [ 1964.616011][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1964.620683][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1964.626757][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1964.632911][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1964.638108][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1964.642954][T32105] do_SYSENTER_32+0x73/0x90 [ 1964.647441][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1964.653751][T32105] [ 1964.656070][T32105] Uninit was stored to memory at: [ 1964.661095][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1964.666815][T32105] __msan_chain_origin+0x50/0x90 [ 1964.671742][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1964.677539][T32105] get_compat_msghdr+0x108/0x2b0 [ 1964.682463][T32105] do_recvmmsg+0xdba/0x22c0 [ 1964.686950][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1964.691617][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1964.697688][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1964.703830][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1964.709017][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1964.713858][T32105] do_SYSENTER_32+0x73/0x90 [ 1964.718350][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1964.724653][T32105] [ 1964.726963][T32105] Uninit was stored to memory at: [ 1964.731978][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1964.737695][T32105] __msan_chain_origin+0x50/0x90 [ 1964.742617][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1964.747713][T32105] get_compat_msghdr+0x108/0x2b0 [ 1964.752646][T32105] do_recvmmsg+0xdba/0x22c0 [ 1964.757133][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1964.761796][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1964.767865][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1964.774022][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1964.779229][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1964.784085][T32105] do_SYSENTER_32+0x73/0x90 [ 1964.788573][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1964.794913][T32105] [ 1964.797220][T32105] Uninit was stored to memory at: [ 1964.802232][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1964.807934][T32105] __msan_chain_origin+0x50/0x90 [ 1964.812871][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1964.817969][T32105] get_compat_msghdr+0x108/0x2b0 [ 1964.822892][T32105] do_recvmmsg+0xdba/0x22c0 [ 1964.827378][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1964.832053][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1964.838138][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1964.844289][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1964.852777][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1964.857609][T32105] do_SYSENTER_32+0x73/0x90 [ 1964.862099][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1964.868411][T32105] [ 1964.870716][T32105] Uninit was stored to memory at: [ 1964.875728][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1964.881437][T32105] __msan_chain_origin+0x50/0x90 [ 1964.886362][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1964.891474][T32105] get_compat_msghdr+0x108/0x2b0 [ 1964.896413][T32105] do_recvmmsg+0xdba/0x22c0 [ 1964.900897][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1964.905657][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1964.911709][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1964.917848][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1964.923032][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1964.927873][T32105] do_SYSENTER_32+0x73/0x90 [ 1964.932361][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1964.938679][T32105] [ 1964.940984][T32105] Uninit was stored to memory at: [ 1964.945997][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1964.951698][T32105] __msan_chain_origin+0x50/0x90 [ 1964.956621][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1964.961730][T32105] get_compat_msghdr+0x108/0x2b0 [ 1964.966650][T32105] do_recvmmsg+0xdba/0x22c0 [ 1964.971166][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1964.975853][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1964.981915][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1964.988065][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1964.994205][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1964.999048][T32105] do_SYSENTER_32+0x73/0x90 [ 1965.003535][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1965.009843][T32105] [ 1965.012164][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1965.018820][T32105] do_recvmmsg+0xc2/0x22c0 [ 1965.027394][T32105] do_recvmmsg+0xc2/0x22c0 [ 1965.238524][T32105] not chained 7530000 origins [ 1965.243268][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1965.251948][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.262554][T32105] Call Trace: [ 1965.265964][T32105] dump_stack+0x21c/0x280 [ 1965.270330][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1965.276105][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1965.281320][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1965.287150][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1965.293239][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1965.298462][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1965.304033][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1965.310145][T32105] ? _copy_from_user+0x221/0x330 [ 1965.315108][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1965.320327][T32105] __msan_chain_origin+0x50/0x90 [ 1965.325302][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1965.330471][T32105] get_compat_msghdr+0x108/0x2b0 [ 1965.335450][T32105] do_recvmmsg+0xdba/0x22c0 [ 1965.339985][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1965.346020][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1965.351243][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1965.357160][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1965.362392][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1965.367700][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1965.372485][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1965.377289][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1965.382012][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1965.388112][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1965.394288][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1965.399520][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1965.404395][T32105] do_SYSENTER_32+0x73/0x90 [ 1965.408931][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1965.415272][T32105] RIP: 0023:0xf7f40549 [ 1965.419344][T32105] Code: Bad RIP value. [ 1965.423420][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1965.431850][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1965.439837][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1965.447822][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1965.455824][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1965.463811][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1965.471814][T32105] Uninit was stored to memory at: [ 1965.476862][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1965.482608][T32105] __msan_chain_origin+0x50/0x90 [ 1965.487566][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1965.492691][T32105] get_compat_msghdr+0x108/0x2b0 [ 1965.497643][T32105] do_recvmmsg+0xdba/0x22c0 [ 1965.502177][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1965.506870][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1965.512957][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1965.519126][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1965.524340][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1965.529206][T32105] do_SYSENTER_32+0x73/0x90 [ 1965.533724][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1965.540046][T32105] [ 1965.542396][T32105] Uninit was stored to memory at: [ 1965.547436][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1965.553189][T32105] __msan_chain_origin+0x50/0x90 [ 1965.558142][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1965.563268][T32105] get_compat_msghdr+0x108/0x2b0 [ 1965.568218][T32105] do_recvmmsg+0xdba/0x22c0 [ 1965.572732][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1965.577424][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1965.583508][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1965.589676][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1965.594898][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1965.599762][T32105] do_SYSENTER_32+0x73/0x90 [ 1965.604281][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1965.610605][T32105] [ 1965.612935][T32105] Uninit was stored to memory at: [ 1965.617976][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1965.623710][T32105] __msan_chain_origin+0x50/0x90 [ 1965.628663][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1965.633785][T32105] get_compat_msghdr+0x108/0x2b0 [ 1965.638733][T32105] do_recvmmsg+0xdba/0x22c0 [ 1965.643249][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1965.647940][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1965.654022][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1965.661058][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1965.666272][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1965.671148][T32105] do_SYSENTER_32+0x73/0x90 [ 1965.675668][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1965.681995][T32105] [ 1965.684328][T32105] Uninit was stored to memory at: [ 1965.689372][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1965.695106][T32105] __msan_chain_origin+0x50/0x90 [ 1965.700059][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1965.705182][T32105] get_compat_msghdr+0x108/0x2b0 [ 1965.710130][T32105] do_recvmmsg+0xdba/0x22c0 [ 1965.714642][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1965.719333][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1965.725402][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1965.731576][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1965.736763][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1965.741600][T32105] do_SYSENTER_32+0x73/0x90 [ 1965.746089][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1965.752409][T32105] [ 1965.754717][T32105] Uninit was stored to memory at: [ 1965.759732][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1965.765439][T32105] __msan_chain_origin+0x50/0x90 [ 1965.770369][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1965.775489][T32105] get_compat_msghdr+0x108/0x2b0 [ 1965.780417][T32105] do_recvmmsg+0xdba/0x22c0 [ 1965.784919][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1965.789596][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1965.795647][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1965.801801][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1965.807003][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1965.811837][T32105] do_SYSENTER_32+0x73/0x90 [ 1965.816327][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1965.822627][T32105] [ 1965.824953][T32105] Uninit was stored to memory at: [ 1965.830051][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1965.835756][T32105] __msan_chain_origin+0x50/0x90 [ 1965.840678][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1965.845787][T32105] get_compat_msghdr+0x108/0x2b0 [ 1965.850722][T32105] do_recvmmsg+0xdba/0x22c0 [ 1965.855210][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1965.860309][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1965.866377][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1965.872523][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1965.877711][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1965.882547][T32105] do_SYSENTER_32+0x73/0x90 [ 1965.887038][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1965.893353][T32105] [ 1965.895662][T32105] Uninit was stored to memory at: [ 1965.900674][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1965.906379][T32105] __msan_chain_origin+0x50/0x90 [ 1965.911316][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1965.916440][T32105] get_compat_msghdr+0x108/0x2b0 [ 1965.921394][T32105] do_recvmmsg+0xdba/0x22c0 [ 1965.925898][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1965.930560][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1965.937583][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1965.943901][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1965.949089][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1965.953925][T32105] do_SYSENTER_32+0x73/0x90 [ 1965.958434][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1965.964739][T32105] [ 1965.967070][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1965.973747][T32105] do_recvmmsg+0xc2/0x22c0 [ 1965.978160][T32105] do_recvmmsg+0xc2/0x22c0 [ 1966.160231][T32105] not chained 7540000 origins [ 1966.164941][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1966.173627][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.183685][T32105] Call Trace: [ 1966.186982][T32105] dump_stack+0x21c/0x280 [ 1966.191331][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1966.197076][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1966.202277][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1966.208074][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1966.214128][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1966.219336][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1966.224879][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1966.230982][T32105] ? _copy_from_user+0x221/0x330 [ 1966.235951][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1966.241251][T32105] __msan_chain_origin+0x50/0x90 [ 1966.246216][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1966.251371][T32105] get_compat_msghdr+0x108/0x2b0 [ 1966.256324][T32105] do_recvmmsg+0xdba/0x22c0 [ 1966.260845][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1966.266844][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1966.272057][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1966.277968][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1966.283174][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1966.288454][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1966.293219][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1966.297986][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1966.302671][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1966.308751][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1966.314897][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1966.320108][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1966.324966][T32105] do_SYSENTER_32+0x73/0x90 [ 1966.329460][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1966.335785][T32105] RIP: 0023:0xf7f40549 [ 1966.339829][T32105] Code: Bad RIP value. [ 1966.343888][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1966.352554][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1966.360527][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1966.368505][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1966.376462][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1966.384417][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1966.392401][T32105] Uninit was stored to memory at: [ 1966.397433][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1966.403163][T32105] __msan_chain_origin+0x50/0x90 [ 1966.408087][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1966.413199][T32105] get_compat_msghdr+0x108/0x2b0 [ 1966.418134][T32105] do_recvmmsg+0xdba/0x22c0 [ 1966.422625][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1966.427288][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1966.433368][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1966.439520][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1966.444705][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1966.449539][T32105] do_SYSENTER_32+0x73/0x90 [ 1966.454027][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1966.460343][T32105] [ 1966.462664][T32105] Uninit was stored to memory at: [ 1966.467715][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1966.473431][T32105] __msan_chain_origin+0x50/0x90 [ 1966.478381][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1966.483507][T32105] get_compat_msghdr+0x108/0x2b0 [ 1966.488454][T32105] do_recvmmsg+0xdba/0x22c0 [ 1966.492964][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1966.497642][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1966.503701][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1966.509839][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1966.515039][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1966.519897][T32105] do_SYSENTER_32+0x73/0x90 [ 1966.524390][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1966.530711][T32105] [ 1966.533027][T32105] Uninit was stored to memory at: [ 1966.538056][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1966.543760][T32105] __msan_chain_origin+0x50/0x90 [ 1966.548702][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1966.553798][T32105] get_compat_msghdr+0x108/0x2b0 [ 1966.558721][T32105] do_recvmmsg+0xdba/0x22c0 [ 1966.563234][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1966.567940][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1966.574022][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1966.580195][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1966.585418][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1966.590256][T32105] do_SYSENTER_32+0x73/0x90 [ 1966.594746][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1966.601059][T32105] [ 1966.603368][T32105] Uninit was stored to memory at: [ 1966.608380][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1966.614087][T32105] __msan_chain_origin+0x50/0x90 [ 1966.619010][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1966.624107][T32105] get_compat_msghdr+0x108/0x2b0 [ 1966.629044][T32105] do_recvmmsg+0xdba/0x22c0 [ 1966.633562][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1966.638254][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1966.644308][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1966.650547][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1966.655733][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1966.660576][T32105] do_SYSENTER_32+0x73/0x90 [ 1966.665080][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1966.671408][T32105] [ 1966.673751][T32105] Uninit was stored to memory at: [ 1966.678790][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1966.684495][T32105] __msan_chain_origin+0x50/0x90 [ 1966.689417][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1966.694525][T32105] get_compat_msghdr+0x108/0x2b0 [ 1966.699475][T32105] do_recvmmsg+0xdba/0x22c0 [ 1966.703961][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1966.708638][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1966.714691][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1966.720831][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1966.726047][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1966.730886][T32105] do_SYSENTER_32+0x73/0x90 [ 1966.735382][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1966.741686][T32105] [ 1966.744007][T32105] Uninit was stored to memory at: [ 1966.749026][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1966.754750][T32105] __msan_chain_origin+0x50/0x90 [ 1966.759676][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1966.764772][T32105] get_compat_msghdr+0x108/0x2b0 [ 1966.769713][T32105] do_recvmmsg+0xdba/0x22c0 [ 1966.774201][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1966.778863][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1966.784913][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1966.791052][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1966.796250][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1966.801118][T32105] do_SYSENTER_32+0x73/0x90 [ 1966.805636][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1966.811962][T32105] [ 1966.814287][T32105] Uninit was stored to memory at: [ 1966.819311][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1966.825012][T32105] __msan_chain_origin+0x50/0x90 [ 1966.829934][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1966.835043][T32105] get_compat_msghdr+0x108/0x2b0 [ 1966.839968][T32105] do_recvmmsg+0xdba/0x22c0 [ 1966.844454][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1966.849119][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1966.855209][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1966.861365][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1966.866563][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1966.871409][T32105] do_SYSENTER_32+0x73/0x90 [ 1966.875923][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1966.882247][T32105] [ 1966.884561][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1966.891236][T32105] do_recvmmsg+0xc2/0x22c0 [ 1966.895654][T32105] do_recvmmsg+0xc2/0x22c0 [ 1967.144764][T32105] not chained 7550000 origins [ 1967.149521][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1967.158199][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.168263][T32105] Call Trace: [ 1967.171579][T32105] dump_stack+0x21c/0x280 [ 1967.175938][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1967.182052][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1967.187293][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1967.193127][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1967.199213][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1967.204437][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1967.210005][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1967.216101][T32105] ? _copy_from_user+0x221/0x330 [ 1967.221061][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1967.226282][T32105] __msan_chain_origin+0x50/0x90 [ 1967.232142][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1967.237301][T32105] get_compat_msghdr+0x108/0x2b0 [ 1967.242282][T32105] do_recvmmsg+0xdba/0x22c0 [ 1967.246823][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1967.252839][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1967.258065][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1967.263983][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1967.269207][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1967.274515][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1967.279321][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1967.284109][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1967.288831][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1967.294933][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1967.301106][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1967.306343][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1967.311217][T32105] do_SYSENTER_32+0x73/0x90 [ 1967.315745][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1967.322083][T32105] RIP: 0023:0xf7f40549 [ 1967.326175][T32105] Code: Bad RIP value. [ 1967.330241][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1967.338637][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1967.346595][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1967.354578][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1967.362559][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1967.370542][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1967.378512][T32105] Uninit was stored to memory at: [ 1967.383530][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1967.389247][T32105] __msan_chain_origin+0x50/0x90 [ 1967.394188][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1967.399283][T32105] get_compat_msghdr+0x108/0x2b0 [ 1967.404224][T32105] do_recvmmsg+0xdba/0x22c0 [ 1967.408710][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1967.413373][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1967.419428][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1967.425569][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1967.430767][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1967.435602][T32105] do_SYSENTER_32+0x73/0x90 [ 1967.440091][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1967.446394][T32105] [ 1967.448718][T32105] Uninit was stored to memory at: [ 1967.453729][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1967.459443][T32105] __msan_chain_origin+0x50/0x90 [ 1967.464380][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1967.469499][T32105] get_compat_msghdr+0x108/0x2b0 [ 1967.474423][T32105] do_recvmmsg+0xdba/0x22c0 [ 1967.478908][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1967.483584][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1967.489646][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1967.495787][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1967.500976][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1967.505812][T32105] do_SYSENTER_32+0x73/0x90 [ 1967.510299][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1967.516641][T32105] [ 1967.518948][T32105] Uninit was stored to memory at: [ 1967.523959][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1967.529661][T32105] __msan_chain_origin+0x50/0x90 [ 1967.534585][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1967.539693][T32105] get_compat_msghdr+0x108/0x2b0 [ 1967.544634][T32105] do_recvmmsg+0xdba/0x22c0 [ 1967.549131][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1967.553793][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1967.559856][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1967.566010][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1967.571206][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1967.576069][T32105] do_SYSENTER_32+0x73/0x90 [ 1967.580575][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1967.586877][T32105] [ 1967.589199][T32105] Uninit was stored to memory at: [ 1967.594214][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1967.599917][T32105] __msan_chain_origin+0x50/0x90 [ 1967.604855][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1967.609949][T32105] get_compat_msghdr+0x108/0x2b0 [ 1967.614885][T32105] do_recvmmsg+0xdba/0x22c0 [ 1967.619370][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1967.624034][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1967.630084][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1967.636225][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1967.641430][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1967.646327][T32105] do_SYSENTER_32+0x73/0x90 [ 1967.650813][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1967.657128][T32105] [ 1967.659453][T32105] Uninit was stored to memory at: [ 1967.664464][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1967.670181][T32105] __msan_chain_origin+0x50/0x90 [ 1967.675105][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1967.680198][T32105] get_compat_msghdr+0x108/0x2b0 [ 1967.685131][T32105] do_recvmmsg+0xdba/0x22c0 [ 1967.689641][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1967.694304][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1967.700372][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1967.706525][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1967.711723][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1967.716572][T32105] do_SYSENTER_32+0x73/0x90 [ 1967.721073][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1967.727378][T32105] [ 1967.729688][T32105] Uninit was stored to memory at: [ 1967.735673][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1967.741394][T32105] __msan_chain_origin+0x50/0x90 [ 1967.746349][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1967.751456][T32105] get_compat_msghdr+0x108/0x2b0 [ 1967.756391][T32105] do_recvmmsg+0xdba/0x22c0 [ 1967.760874][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1967.765536][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1967.771604][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1967.777809][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1967.783012][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1967.787861][T32105] do_SYSENTER_32+0x73/0x90 [ 1967.792364][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1967.798700][T32105] [ 1967.801006][T32105] Uninit was stored to memory at: [ 1967.806023][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1967.811739][T32105] __msan_chain_origin+0x50/0x90 [ 1967.816687][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1967.826913][T32105] get_compat_msghdr+0x108/0x2b0 [ 1967.831865][T32105] do_recvmmsg+0xdba/0x22c0 [ 1967.836376][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1967.841045][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1967.847111][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1967.853280][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1967.858483][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1967.863338][T32105] do_SYSENTER_32+0x73/0x90 [ 1967.867826][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1967.874132][T32105] [ 1967.876449][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1967.883224][T32105] do_recvmmsg+0xc2/0x22c0 [ 1967.887624][T32105] do_recvmmsg+0xc2/0x22c0 [ 1968.140652][T32105] not chained 7560000 origins [ 1968.146354][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1968.155051][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.165144][T32105] Call Trace: [ 1968.168438][T32105] dump_stack+0x21c/0x280 [ 1968.172765][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1968.178578][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1968.183802][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1968.189598][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1968.195655][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1968.200874][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1968.206413][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1968.212474][T32105] ? _copy_from_user+0x221/0x330 [ 1968.217492][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1968.222716][T32105] __msan_chain_origin+0x50/0x90 [ 1968.227652][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1968.232768][T32105] get_compat_msghdr+0x108/0x2b0 [ 1968.237702][T32105] do_recvmmsg+0xdba/0x22c0 [ 1968.242210][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1968.248188][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1968.253397][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1968.259300][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1968.264492][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1968.269764][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1968.274523][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1968.279277][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1968.283957][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1968.290017][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1968.296165][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1968.301393][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1968.306258][T32105] do_SYSENTER_32+0x73/0x90 [ 1968.310752][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1968.317062][T32105] RIP: 0023:0xf7f40549 [ 1968.321117][T32105] Code: Bad RIP value. [ 1968.325179][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1968.333587][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1968.341574][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1968.349551][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1968.357520][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1968.365492][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1968.373486][T32105] Uninit was stored to memory at: [ 1968.378504][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1968.384911][T32105] __msan_chain_origin+0x50/0x90 [ 1968.389844][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1968.394949][T32105] get_compat_msghdr+0x108/0x2b0 [ 1968.400563][T32105] do_recvmmsg+0xdba/0x22c0 [ 1968.405060][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1968.409721][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1968.415781][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1968.421923][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1968.427124][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1968.431959][T32105] do_SYSENTER_32+0x73/0x90 [ 1968.436450][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1968.442750][T32105] [ 1968.445067][T32105] Uninit was stored to memory at: [ 1968.450082][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1968.455794][T32105] __msan_chain_origin+0x50/0x90 [ 1968.460716][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1968.465822][T32105] get_compat_msghdr+0x108/0x2b0 [ 1968.470751][T32105] do_recvmmsg+0xdba/0x22c0 [ 1968.475250][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1968.479940][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1968.486004][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1968.492171][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1968.497389][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1968.502236][T32105] do_SYSENTER_32+0x73/0x90 [ 1968.506724][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1968.513036][T32105] [ 1968.515349][T32105] Uninit was stored to memory at: [ 1968.520367][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1968.526069][T32105] __msan_chain_origin+0x50/0x90 [ 1968.530991][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1968.536086][T32105] get_compat_msghdr+0x108/0x2b0 [ 1968.541008][T32105] do_recvmmsg+0xdba/0x22c0 [ 1968.545491][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1968.550153][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1968.556222][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1968.562364][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1968.567560][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1968.572395][T32105] do_SYSENTER_32+0x73/0x90 [ 1968.576888][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1968.583195][T32105] [ 1968.585524][T32105] Uninit was stored to memory at: [ 1968.590561][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1968.596268][T32105] __msan_chain_origin+0x50/0x90 [ 1968.601204][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1968.606312][T32105] get_compat_msghdr+0x108/0x2b0 [ 1968.611244][T32105] do_recvmmsg+0xdba/0x22c0 [ 1968.615754][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1968.620423][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1968.626477][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1968.632618][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1968.637803][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1968.642636][T32105] do_SYSENTER_32+0x73/0x90 [ 1968.647138][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1968.653453][T32105] [ 1968.655763][T32105] Uninit was stored to memory at: [ 1968.660775][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1968.666479][T32105] __msan_chain_origin+0x50/0x90 [ 1968.671429][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1968.676537][T32105] get_compat_msghdr+0x108/0x2b0 [ 1968.681468][T32105] do_recvmmsg+0xdba/0x22c0 [ 1968.685955][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1968.690614][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1968.696694][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1968.702859][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1968.708045][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1968.712890][T32105] do_SYSENTER_32+0x73/0x90 [ 1968.717389][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1968.723696][T32105] [ 1968.726003][T32105] Uninit was stored to memory at: [ 1968.731014][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1968.736717][T32105] __msan_chain_origin+0x50/0x90 [ 1968.741639][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1968.746732][T32105] get_compat_msghdr+0x108/0x2b0 [ 1968.751661][T32105] do_recvmmsg+0xdba/0x22c0 [ 1968.756147][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1968.763075][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1968.769402][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1968.775550][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1968.780734][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1968.785579][T32105] do_SYSENTER_32+0x73/0x90 [ 1968.790076][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1968.796387][T32105] [ 1968.798705][T32105] Uninit was stored to memory at: [ 1968.803729][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1968.809471][T32105] __msan_chain_origin+0x50/0x90 [ 1968.814405][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1968.819505][T32105] get_compat_msghdr+0x108/0x2b0 [ 1968.824434][T32105] do_recvmmsg+0xdba/0x22c0 [ 1968.828928][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1968.833603][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1968.839676][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1968.845816][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1968.851000][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1968.855833][T32105] do_SYSENTER_32+0x73/0x90 [ 1968.860321][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1968.866723][T32105] [ 1968.869031][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1968.875715][T32105] do_recvmmsg+0xc2/0x22c0 [ 1968.880124][T32105] do_recvmmsg+0xc2/0x22c0 [ 1969.107332][T32105] not chained 7570000 origins [ 1969.112081][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1969.120786][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.130856][T32105] Call Trace: [ 1969.134271][T32105] dump_stack+0x21c/0x280 [ 1969.138635][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1969.144396][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1969.149625][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1969.155468][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1969.160687][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1969.166516][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1969.172623][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1969.177846][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1969.183434][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1969.189529][T32105] ? _copy_from_user+0x221/0x330 [ 1969.194489][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1969.199708][T32105] __msan_chain_origin+0x50/0x90 [ 1969.204677][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1969.209835][T32105] get_compat_msghdr+0x108/0x2b0 [ 1969.214828][T32105] do_recvmmsg+0xdba/0x22c0 [ 1969.219364][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1969.225387][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1969.230617][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1969.236539][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1969.241769][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1969.247080][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1969.251880][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1969.256652][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1969.261351][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1969.267456][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1969.273606][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1969.278812][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1969.283658][T32105] do_SYSENTER_32+0x73/0x90 [ 1969.288189][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1969.294535][T32105] RIP: 0023:0xf7f40549 [ 1969.298611][T32105] Code: Bad RIP value. [ 1969.302671][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1969.311079][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1969.319038][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1969.327006][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1969.334976][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1969.342936][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1969.350906][T32105] Uninit was stored to memory at: [ 1969.355940][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1969.361671][T32105] __msan_chain_origin+0x50/0x90 [ 1969.366597][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1969.371693][T32105] get_compat_msghdr+0x108/0x2b0 [ 1969.376614][T32105] do_recvmmsg+0xdba/0x22c0 [ 1969.381111][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1969.385776][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1969.391829][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1969.397987][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1969.403180][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1969.408022][T32105] do_SYSENTER_32+0x73/0x90 [ 1969.412511][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1969.418907][T32105] [ 1969.421231][T32105] Uninit was stored to memory at: [ 1969.426268][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1969.431985][T32105] __msan_chain_origin+0x50/0x90 [ 1969.436920][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1969.442015][T32105] get_compat_msghdr+0x108/0x2b0 [ 1969.446935][T32105] do_recvmmsg+0xdba/0x22c0 [ 1969.451431][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1969.456098][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1969.462176][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1969.468335][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1969.473529][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1969.478473][T32105] do_SYSENTER_32+0x73/0x90 [ 1969.482984][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1969.489289][T32105] [ 1969.491601][T32105] Uninit was stored to memory at: [ 1969.496663][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1969.502371][T32105] __msan_chain_origin+0x50/0x90 [ 1969.507307][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1969.512401][T32105] get_compat_msghdr+0x108/0x2b0 [ 1969.517323][T32105] do_recvmmsg+0xdba/0x22c0 [ 1969.521809][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1969.526476][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1969.532528][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1969.538667][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1969.543862][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1969.548719][T32105] do_SYSENTER_32+0x73/0x90 [ 1969.553209][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1969.559513][T32105] [ 1969.561824][T32105] Uninit was stored to memory at: [ 1969.566847][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1969.572566][T32105] __msan_chain_origin+0x50/0x90 [ 1969.577531][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1969.582630][T32105] get_compat_msghdr+0x108/0x2b0 [ 1969.587549][T32105] do_recvmmsg+0xdba/0x22c0 [ 1969.592033][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1969.596693][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1969.602745][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1969.608884][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1969.614070][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1969.618902][T32105] do_SYSENTER_32+0x73/0x90 [ 1969.623390][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1969.629700][T32105] [ 1969.632008][T32105] Uninit was stored to memory at: [ 1969.637019][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1969.642736][T32105] __msan_chain_origin+0x50/0x90 [ 1969.647658][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1969.652766][T32105] get_compat_msghdr+0x108/0x2b0 [ 1969.657698][T32105] do_recvmmsg+0xdba/0x22c0 [ 1969.662182][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1969.666840][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1969.672976][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1969.680345][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1969.685545][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1969.690394][T32105] do_SYSENTER_32+0x73/0x90 [ 1969.694883][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1969.701188][T32105] [ 1969.703510][T32105] Uninit was stored to memory at: [ 1969.708530][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1969.714242][T32105] __msan_chain_origin+0x50/0x90 [ 1969.719165][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1969.724262][T32105] get_compat_msghdr+0x108/0x2b0 [ 1969.729183][T32105] do_recvmmsg+0xdba/0x22c0 [ 1969.733679][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1969.738352][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1969.744419][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1969.750569][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1969.755765][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1969.760609][T32105] do_SYSENTER_32+0x73/0x90 [ 1969.765127][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1969.771457][T32105] [ 1969.773817][T32105] Uninit was stored to memory at: [ 1969.778857][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1969.784588][T32105] __msan_chain_origin+0x50/0x90 [ 1969.789542][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1969.794674][T32105] get_compat_msghdr+0x108/0x2b0 [ 1969.799627][T32105] do_recvmmsg+0xdba/0x22c0 [ 1969.804211][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1969.808926][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1969.814992][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1969.821183][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1969.826393][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1969.831244][T32105] do_SYSENTER_32+0x73/0x90 [ 1969.835748][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1969.842047][T32105] [ 1969.844353][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1969.851008][T32105] do_recvmmsg+0xc2/0x22c0 [ 1969.855408][T32105] do_recvmmsg+0xc2/0x22c0 [ 1970.015814][T32105] not chained 7580000 origins [ 1970.020559][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1970.029239][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.039300][T32105] Call Trace: [ 1970.042640][T32105] dump_stack+0x21c/0x280 [ 1970.047003][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1970.053226][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1970.058444][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1970.064272][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1970.070361][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1970.075578][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1970.081144][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1970.087244][T32105] ? _copy_from_user+0x221/0x330 [ 1970.092204][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1970.097424][T32105] __msan_chain_origin+0x50/0x90 [ 1970.102389][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1970.107547][T32105] get_compat_msghdr+0x108/0x2b0 [ 1970.112519][T32105] do_recvmmsg+0xdba/0x22c0 [ 1970.117053][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1970.123088][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1970.128310][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1970.134226][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1970.139458][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1970.144767][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1970.149545][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1970.154329][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1970.159050][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1970.165158][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1970.171334][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1970.176565][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1970.181431][T32105] do_SYSENTER_32+0x73/0x90 [ 1970.185957][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1970.192293][T32105] RIP: 0023:0xf7f40549 [ 1970.196360][T32105] Code: Bad RIP value. [ 1970.200434][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1970.208857][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1970.216846][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1970.224828][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1970.232809][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1970.240790][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1970.248795][T32105] Uninit was stored to memory at: [ 1970.253839][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1970.259572][T32105] __msan_chain_origin+0x50/0x90 [ 1970.264527][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1970.269650][T32105] get_compat_msghdr+0x108/0x2b0 [ 1970.274600][T32105] do_recvmmsg+0xdba/0x22c0 [ 1970.279161][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1970.283854][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1970.289960][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1970.296130][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1970.301344][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1970.306210][T32105] do_SYSENTER_32+0x73/0x90 [ 1970.310734][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1970.317058][T32105] [ 1970.319386][T32105] Uninit was stored to memory at: [ 1970.324427][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1970.330181][T32105] __msan_chain_origin+0x50/0x90 [ 1970.335132][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1970.340254][T32105] get_compat_msghdr+0x108/0x2b0 [ 1970.345203][T32105] do_recvmmsg+0xdba/0x22c0 [ 1970.349726][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1970.354421][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1970.360502][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1970.366674][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1970.371895][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1970.376759][T32105] do_SYSENTER_32+0x73/0x90 [ 1970.381276][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1970.387600][T32105] [ 1970.389928][T32105] Uninit was stored to memory at: [ 1970.394967][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1970.400699][T32105] __msan_chain_origin+0x50/0x90 [ 1970.405652][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1970.410778][T32105] get_compat_msghdr+0x108/0x2b0 [ 1970.415801][T32105] do_recvmmsg+0xdba/0x22c0 [ 1970.420312][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1970.424992][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1970.431045][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1970.437186][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1970.442372][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1970.447205][T32105] do_SYSENTER_32+0x73/0x90 [ 1970.451799][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1970.458115][T32105] [ 1970.460434][T32105] Uninit was stored to memory at: [ 1970.465461][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1970.471193][T32105] __msan_chain_origin+0x50/0x90 [ 1970.476133][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1970.481255][T32105] get_compat_msghdr+0x108/0x2b0 [ 1970.486210][T32105] do_recvmmsg+0xdba/0x22c0 [ 1970.490714][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1970.495407][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1970.501475][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1970.507618][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1970.512816][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1970.517665][T32105] do_SYSENTER_32+0x73/0x90 [ 1970.522154][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1970.528452][T32105] [ 1970.530941][T32105] Uninit was stored to memory at: [ 1970.535967][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1970.541669][T32105] __msan_chain_origin+0x50/0x90 [ 1970.546604][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1970.551717][T32105] get_compat_msghdr+0x108/0x2b0 [ 1970.556652][T32105] do_recvmmsg+0xdba/0x22c0 [ 1970.561151][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1970.565828][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1970.571981][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1970.578147][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1970.583348][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1970.588181][T32105] do_SYSENTER_32+0x73/0x90 [ 1970.592684][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1970.598998][T32105] [ 1970.601313][T32105] Uninit was stored to memory at: [ 1970.606357][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1970.612077][T32105] __msan_chain_origin+0x50/0x90 [ 1970.617015][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1970.622110][T32105] get_compat_msghdr+0x108/0x2b0 [ 1970.627031][T32105] do_recvmmsg+0xdba/0x22c0 [ 1970.631527][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1970.636204][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1970.642256][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1970.648397][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1970.653597][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1970.658447][T32105] do_SYSENTER_32+0x73/0x90 [ 1970.662937][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1970.669246][T32105] [ 1970.671575][T32105] Uninit was stored to memory at: [ 1970.676604][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1970.682320][T32105] __msan_chain_origin+0x50/0x90 [ 1970.687259][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1970.692368][T32105] get_compat_msghdr+0x108/0x2b0 [ 1970.697307][T32105] do_recvmmsg+0xdba/0x22c0 [ 1970.701804][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1970.706494][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1970.712579][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1970.718743][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1970.723950][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1970.728783][T32105] do_SYSENTER_32+0x73/0x90 [ 1970.733283][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1970.739713][T32105] [ 1970.742023][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1970.748683][T32105] do_recvmmsg+0xc2/0x22c0 [ 1970.753441][T32105] do_recvmmsg+0xc2/0x22c0 [ 1970.922067][T32105] not chained 7590000 origins [ 1970.926811][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1970.935483][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.945544][T32105] Call Trace: [ 1970.948862][T32105] dump_stack+0x21c/0x280 [ 1970.953223][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1970.958986][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1970.964205][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1970.970035][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1970.976123][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1970.981389][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1970.986960][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1970.993053][T32105] ? _copy_from_user+0x221/0x330 [ 1970.998014][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1971.003253][T32105] __msan_chain_origin+0x50/0x90 [ 1971.008239][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1971.013440][T32105] get_compat_msghdr+0x108/0x2b0 [ 1971.018716][T32105] do_recvmmsg+0xdba/0x22c0 [ 1971.023254][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1971.029270][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1971.034493][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1971.040417][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1971.045641][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1971.050945][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1971.055726][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1971.060557][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1971.065281][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1971.071389][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1971.077566][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1971.082798][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1971.087690][T32105] do_SYSENTER_32+0x73/0x90 [ 1971.092218][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1971.098578][T32105] RIP: 0023:0xf7f40549 [ 1971.102632][T32105] Code: Bad RIP value. [ 1971.106693][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1971.115088][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1971.123052][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1971.131147][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1971.139148][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1971.147124][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1971.156069][T32105] Uninit was stored to memory at: [ 1971.161375][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1971.167123][T32105] __msan_chain_origin+0x50/0x90 [ 1971.172064][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1971.177173][T32105] get_compat_msghdr+0x108/0x2b0 [ 1971.182113][T32105] do_recvmmsg+0xdba/0x22c0 [ 1971.186627][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1971.191302][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1971.197892][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1971.204044][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1971.209244][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1971.215729][T32105] do_SYSENTER_32+0x73/0x90 [ 1971.220219][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1971.226519][T32105] [ 1971.228831][T32105] Uninit was stored to memory at: [ 1971.233867][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1971.239581][T32105] __msan_chain_origin+0x50/0x90 [ 1971.244517][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1971.249627][T32105] get_compat_msghdr+0x108/0x2b0 [ 1971.254724][T32105] do_recvmmsg+0xdba/0x22c0 [ 1971.259225][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1971.263901][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1971.269988][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1971.276141][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1971.281436][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1971.286302][T32105] do_SYSENTER_32+0x73/0x90 [ 1971.290790][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1971.297099][T32105] [ 1971.299411][T32105] Uninit was stored to memory at: [ 1971.304445][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1971.310198][T32105] __msan_chain_origin+0x50/0x90 [ 1971.315143][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1971.320779][T32105] get_compat_msghdr+0x108/0x2b0 [ 1971.325707][T32105] do_recvmmsg+0xdba/0x22c0 [ 1971.330198][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1971.334891][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1971.340949][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1971.347109][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1971.352315][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1971.357185][T32105] do_SYSENTER_32+0x73/0x90 [ 1971.361692][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1971.368013][T32105] [ 1971.370322][T32105] Uninit was stored to memory at: [ 1971.375874][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1971.382313][T32105] __msan_chain_origin+0x50/0x90 [ 1971.387431][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1971.392530][T32105] get_compat_msghdr+0x108/0x2b0 [ 1971.397454][T32105] do_recvmmsg+0xdba/0x22c0 [ 1971.401955][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1971.406651][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1971.412706][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1971.418847][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1971.424056][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1971.428931][T32105] do_SYSENTER_32+0x73/0x90 [ 1971.433445][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1971.439748][T32105] [ 1971.442091][T32105] Uninit was stored to memory at: [ 1971.447125][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1971.452843][T32105] __msan_chain_origin+0x50/0x90 [ 1971.457769][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1971.462881][T32105] get_compat_msghdr+0x108/0x2b0 [ 1971.467833][T32105] do_recvmmsg+0xdba/0x22c0 [ 1971.472360][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1971.477067][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1971.483134][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1971.489309][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1971.494498][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1971.499349][T32105] do_SYSENTER_32+0x73/0x90 [ 1971.503852][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1971.510169][T32105] [ 1971.512481][T32105] Uninit was stored to memory at: [ 1971.517512][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1971.523254][T32105] __msan_chain_origin+0x50/0x90 [ 1971.528207][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1971.533317][T32105] get_compat_msghdr+0x108/0x2b0 [ 1971.538239][T32105] do_recvmmsg+0xdba/0x22c0 [ 1971.542739][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1971.547438][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1971.553767][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1971.559914][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1971.565104][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1971.569952][T32105] do_SYSENTER_32+0x73/0x90 [ 1971.574467][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1971.580780][T32105] [ 1971.583120][T32105] Uninit was stored to memory at: [ 1971.589906][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1971.595611][T32105] __msan_chain_origin+0x50/0x90 [ 1971.600532][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1971.605625][T32105] get_compat_msghdr+0x108/0x2b0 [ 1971.610544][T32105] do_recvmmsg+0xdba/0x22c0 [ 1971.615040][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1971.619719][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1971.626749][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1971.632909][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1971.638125][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1971.642972][T32105] do_SYSENTER_32+0x73/0x90 [ 1971.647462][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1971.653761][T32105] [ 1971.656071][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1971.662744][T32105] do_recvmmsg+0xc2/0x22c0 [ 1971.667157][T32105] do_recvmmsg+0xc2/0x22c0 [ 1971.867857][T32105] not chained 7600000 origins [ 1971.872602][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1971.881388][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1971.891460][T32105] Call Trace: [ 1971.894783][T32105] dump_stack+0x21c/0x280 [ 1971.899151][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1971.904920][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1971.910142][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1971.915971][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1971.922059][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1971.927280][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1971.932848][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1971.938952][T32105] ? _copy_from_user+0x221/0x330 [ 1971.943918][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1971.949150][T32105] __msan_chain_origin+0x50/0x90 [ 1971.954118][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1971.959283][T32105] get_compat_msghdr+0x108/0x2b0 [ 1971.964254][T32105] do_recvmmsg+0xdba/0x22c0 [ 1971.968793][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1971.974809][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1971.980069][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1971.985988][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1971.991212][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1971.996519][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1972.001313][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1972.006101][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1972.010824][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1972.016932][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1972.023112][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1972.028371][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1972.033230][T32105] do_SYSENTER_32+0x73/0x90 [ 1972.037739][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1972.044082][T32105] RIP: 0023:0xf7f40549 [ 1972.048172][T32105] Code: Bad RIP value. [ 1972.052232][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1972.060676][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1972.068631][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1972.076626][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1972.084604][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1972.092603][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1972.100585][T32105] Uninit was stored to memory at: [ 1972.105608][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1972.111326][T32105] __msan_chain_origin+0x50/0x90 [ 1972.116266][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1972.121388][T32105] get_compat_msghdr+0x108/0x2b0 [ 1972.126340][T32105] do_recvmmsg+0xdba/0x22c0 [ 1972.130840][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1972.135516][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1972.141597][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1972.147764][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1972.153049][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1972.157900][T32105] do_SYSENTER_32+0x73/0x90 [ 1972.162399][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1972.171749][T32105] [ 1972.174108][T32105] Uninit was stored to memory at: [ 1972.179158][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1972.184890][T32105] __msan_chain_origin+0x50/0x90 [ 1972.189817][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1972.194912][T32105] get_compat_msghdr+0x108/0x2b0 [ 1972.199832][T32105] do_recvmmsg+0xdba/0x22c0 [ 1972.204687][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1972.209370][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1972.215453][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1972.221605][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1972.226807][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1972.231655][T32105] do_SYSENTER_32+0x73/0x90 [ 1972.236172][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1972.242496][T32105] [ 1972.244820][T32105] Uninit was stored to memory at: [ 1972.249832][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1972.255533][T32105] __msan_chain_origin+0x50/0x90 [ 1972.260457][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1972.265551][T32105] get_compat_msghdr+0x108/0x2b0 [ 1972.270487][T32105] do_recvmmsg+0xdba/0x22c0 [ 1972.274987][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1972.279648][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1972.285706][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1972.291865][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1972.297075][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1972.301924][T32105] do_SYSENTER_32+0x73/0x90 [ 1972.306417][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1972.312722][T32105] [ 1972.315058][T32105] Uninit was stored to memory at: [ 1972.320073][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1972.325792][T32105] __msan_chain_origin+0x50/0x90 [ 1972.330761][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1972.335908][T32105] get_compat_msghdr+0x108/0x2b0 [ 1972.340882][T32105] do_recvmmsg+0xdba/0x22c0 [ 1972.345399][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1972.350093][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1972.356175][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1972.362344][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1972.367553][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1972.372409][T32105] do_SYSENTER_32+0x73/0x90 [ 1972.377172][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1972.383483][T32105] [ 1972.385791][T32105] Uninit was stored to memory at: [ 1972.390811][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1972.396518][T32105] __msan_chain_origin+0x50/0x90 [ 1972.401469][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1972.406580][T32105] get_compat_msghdr+0x108/0x2b0 [ 1972.411513][T32105] do_recvmmsg+0xdba/0x22c0 [ 1972.416014][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1972.420763][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1972.426814][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1972.432965][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1972.438165][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1972.442998][T32105] do_SYSENTER_32+0x73/0x90 [ 1972.447501][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1972.453801][T32105] [ 1972.456109][T32105] Uninit was stored to memory at: [ 1972.461120][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1972.466835][T32105] __msan_chain_origin+0x50/0x90 [ 1972.471786][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1972.476906][T32105] get_compat_msghdr+0x108/0x2b0 [ 1972.481842][T32105] do_recvmmsg+0xdba/0x22c0 [ 1972.486353][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1972.491033][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1972.497171][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1972.503310][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1972.508495][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1972.513337][T32105] do_SYSENTER_32+0x73/0x90 [ 1972.517827][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1972.524129][T32105] [ 1972.526438][T32105] Uninit was stored to memory at: [ 1972.531461][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1972.537196][T32105] __msan_chain_origin+0x50/0x90 [ 1972.544475][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1972.549569][T32105] get_compat_msghdr+0x108/0x2b0 [ 1972.554493][T32105] do_recvmmsg+0xdba/0x22c0 [ 1972.558981][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1972.563647][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1972.569709][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1972.575861][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1972.581062][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1972.585910][T32105] do_SYSENTER_32+0x73/0x90 [ 1972.590405][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1972.597409][T32105] [ 1972.599736][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1972.606414][T32105] do_recvmmsg+0xc2/0x22c0 [ 1972.610814][T32105] do_recvmmsg+0xc2/0x22c0 [ 1972.829169][T32105] not chained 7610000 origins [ 1972.833918][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1972.842595][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.852663][T32105] Call Trace: [ 1972.855981][T32105] dump_stack+0x21c/0x280 [ 1972.860365][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1972.866136][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1972.871376][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1972.877211][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1972.883295][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1972.888513][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1972.894083][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1972.900185][T32105] ? _copy_from_user+0x221/0x330 [ 1972.905158][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1972.910390][T32105] __msan_chain_origin+0x50/0x90 [ 1972.915347][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1972.920465][T32105] get_compat_msghdr+0x108/0x2b0 [ 1972.925478][T32105] do_recvmmsg+0xdba/0x22c0 [ 1972.929999][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1972.936005][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1972.941224][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1972.947119][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1972.952311][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1972.957596][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1972.962360][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1972.967130][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1972.971813][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1972.977884][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1972.984030][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1972.989225][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1972.994066][T32105] do_SYSENTER_32+0x73/0x90 [ 1972.998566][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1973.004879][T32105] RIP: 0023:0xf7f40549 [ 1973.008923][T32105] Code: Bad RIP value. [ 1973.012997][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1973.021428][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1973.029410][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1973.037379][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1973.045353][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1973.053341][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1973.061342][T32105] Uninit was stored to memory at: [ 1973.066384][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1973.072100][T32105] __msan_chain_origin+0x50/0x90 [ 1973.077027][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1973.082127][T32105] get_compat_msghdr+0x108/0x2b0 [ 1973.087055][T32105] do_recvmmsg+0xdba/0x22c0 [ 1973.091573][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1973.096235][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1973.102287][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1973.108601][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1973.113788][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1973.118621][T32105] do_SYSENTER_32+0x73/0x90 [ 1973.123171][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1973.129497][T32105] [ 1973.131826][T32105] Uninit was stored to memory at: [ 1973.136863][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1973.142567][T32105] __msan_chain_origin+0x50/0x90 [ 1973.147491][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1973.152592][T32105] get_compat_msghdr+0x108/0x2b0 [ 1973.157514][T32105] do_recvmmsg+0xdba/0x22c0 [ 1973.162019][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1973.166690][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1973.172744][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1973.178899][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1973.184086][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1973.188934][T32105] do_SYSENTER_32+0x73/0x90 [ 1973.193429][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1973.199730][T32105] [ 1973.202038][T32105] Uninit was stored to memory at: [ 1973.207060][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1973.212775][T32105] __msan_chain_origin+0x50/0x90 [ 1973.217712][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1973.222808][T32105] get_compat_msghdr+0x108/0x2b0 [ 1973.227729][T32105] do_recvmmsg+0xdba/0x22c0 [ 1973.232227][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1973.236906][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1973.242969][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1973.249111][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1973.254295][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1973.259126][T32105] do_SYSENTER_32+0x73/0x90 [ 1973.263616][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1973.269919][T32105] [ 1973.272232][T32105] Uninit was stored to memory at: [ 1973.277264][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1973.282968][T32105] __msan_chain_origin+0x50/0x90 [ 1973.287903][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1973.293023][T32105] get_compat_msghdr+0x108/0x2b0 [ 1973.297946][T32105] do_recvmmsg+0xdba/0x22c0 [ 1973.302435][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1973.307112][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1973.313184][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1973.319425][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1973.324611][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1973.329489][T32105] do_SYSENTER_32+0x73/0x90 [ 1973.334013][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1973.340316][T32105] [ 1973.342640][T32105] Uninit was stored to memory at: [ 1973.347683][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1973.353404][T32105] __msan_chain_origin+0x50/0x90 [ 1973.358328][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1973.363448][T32105] get_compat_msghdr+0x108/0x2b0 [ 1973.368556][T32105] do_recvmmsg+0xdba/0x22c0 [ 1973.373044][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1973.377719][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1973.383771][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1973.389915][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1973.395101][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1973.399934][T32105] do_SYSENTER_32+0x73/0x90 [ 1973.404440][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1973.410741][T32105] [ 1973.413048][T32105] Uninit was stored to memory at: [ 1973.418059][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1973.423764][T32105] __msan_chain_origin+0x50/0x90 [ 1973.428688][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1973.433785][T32105] get_compat_msghdr+0x108/0x2b0 [ 1973.438720][T32105] do_recvmmsg+0xdba/0x22c0 [ 1973.443212][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1973.447888][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1973.453965][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1973.460136][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1973.465321][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1973.470174][T32105] do_SYSENTER_32+0x73/0x90 [ 1973.474679][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1973.480979][T32105] [ 1973.483289][T32105] Uninit was stored to memory at: [ 1973.488352][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1973.494055][T32105] __msan_chain_origin+0x50/0x90 [ 1973.498978][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1973.508069][T32105] get_compat_msghdr+0x108/0x2b0 [ 1973.513008][T32105] do_recvmmsg+0xdba/0x22c0 [ 1973.517507][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1973.522193][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1973.528262][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1973.534405][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1973.539588][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1973.544428][T32105] do_SYSENTER_32+0x73/0x90 [ 1973.548921][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1973.555222][T32105] [ 1973.557530][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1973.564290][T32105] do_recvmmsg+0xc2/0x22c0 [ 1973.568708][T32105] do_recvmmsg+0xc2/0x22c0 [ 1973.764764][T32105] not chained 7620000 origins [ 1973.769512][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1973.778322][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1973.788389][T32105] Call Trace: [ 1973.791730][T32105] dump_stack+0x21c/0x280 [ 1973.796104][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1973.801871][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1973.807102][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1973.812959][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1973.819041][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1973.824259][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1973.829832][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1973.836033][T32105] ? _copy_from_user+0x221/0x330 [ 1973.841006][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1973.846226][T32105] __msan_chain_origin+0x50/0x90 [ 1973.851191][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1973.856355][T32105] get_compat_msghdr+0x108/0x2b0 [ 1973.861325][T32105] do_recvmmsg+0xdba/0x22c0 [ 1973.865858][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1973.871874][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1973.877097][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1973.883011][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1973.888230][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1973.893534][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1973.898328][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1973.903114][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1973.907835][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1973.913936][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1973.920111][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1973.925351][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1973.930227][T32105] do_SYSENTER_32+0x73/0x90 [ 1973.934760][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1973.941098][T32105] RIP: 0023:0xf7f40549 [ 1973.945208][T32105] Code: Bad RIP value. [ 1973.949281][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1973.957708][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1973.965692][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1973.973673][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1973.981671][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1973.989664][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1973.997674][T32105] Uninit was stored to memory at: [ 1974.002730][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1974.008478][T32105] __msan_chain_origin+0x50/0x90 [ 1974.013434][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1974.018563][T32105] get_compat_msghdr+0x108/0x2b0 [ 1974.023513][T32105] do_recvmmsg+0xdba/0x22c0 [ 1974.028030][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1974.032725][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1974.038806][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1974.044962][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1974.050170][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1974.055004][T32105] do_SYSENTER_32+0x73/0x90 [ 1974.059513][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1974.065814][T32105] [ 1974.068182][T32105] Uninit was stored to memory at: [ 1974.073230][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1974.078947][T32105] __msan_chain_origin+0x50/0x90 [ 1974.083887][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1974.089027][T32105] get_compat_msghdr+0x108/0x2b0 [ 1974.093992][T32105] do_recvmmsg+0xdba/0x22c0 [ 1974.098491][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1974.103155][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1974.109216][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1974.115371][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1974.120572][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1974.125422][T32105] do_SYSENTER_32+0x73/0x90 [ 1974.129912][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1974.136213][T32105] [ 1974.138523][T32105] Uninit was stored to memory at: [ 1974.143534][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1974.149237][T32105] __msan_chain_origin+0x50/0x90 [ 1974.154264][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1974.159363][T32105] get_compat_msghdr+0x108/0x2b0 [ 1974.164297][T32105] do_recvmmsg+0xdba/0x22c0 [ 1974.168810][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1974.173501][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1974.179566][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1974.185705][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1974.190890][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1974.195742][T32105] do_SYSENTER_32+0x73/0x90 [ 1974.200243][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1974.206542][T32105] [ 1974.208864][T32105] Uninit was stored to memory at: [ 1974.213888][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1974.219621][T32105] __msan_chain_origin+0x50/0x90 [ 1974.224558][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1974.229669][T32105] get_compat_msghdr+0x108/0x2b0 [ 1974.234591][T32105] do_recvmmsg+0xdba/0x22c0 [ 1974.239089][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1974.243762][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1974.249842][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1974.256011][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1974.261238][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1974.266102][T32105] do_SYSENTER_32+0x73/0x90 [ 1974.270590][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1974.276902][T32105] [ 1974.279231][T32105] Uninit was stored to memory at: [ 1974.284258][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1974.289958][T32105] __msan_chain_origin+0x50/0x90 [ 1974.294920][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1974.300026][T32105] get_compat_msghdr+0x108/0x2b0 [ 1974.304958][T32105] do_recvmmsg+0xdba/0x22c0 [ 1974.309453][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1974.314137][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1974.320201][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1974.326341][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1974.331538][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1974.336407][T32105] do_SYSENTER_32+0x73/0x90 [ 1974.340927][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1974.347231][T32105] [ 1974.349541][T32105] Uninit was stored to memory at: [ 1974.354720][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1974.360432][T32105] __msan_chain_origin+0x50/0x90 [ 1974.365368][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1974.370468][T32105] get_compat_msghdr+0x108/0x2b0 [ 1974.375422][T32105] do_recvmmsg+0xdba/0x22c0 [ 1974.379921][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1974.384594][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1974.390644][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1974.396800][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1974.401990][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1974.406824][T32105] do_SYSENTER_32+0x73/0x90 [ 1974.411326][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1974.417642][T32105] [ 1974.419990][T32105] Uninit was stored to memory at: [ 1974.425033][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1974.430749][T32105] __msan_chain_origin+0x50/0x90 [ 1974.435678][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1974.440776][T32105] get_compat_msghdr+0x108/0x2b0 [ 1974.445714][T32105] do_recvmmsg+0xdba/0x22c0 [ 1974.450218][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1974.454895][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1974.460958][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1974.467111][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1974.472309][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1974.477159][T32105] do_SYSENTER_32+0x73/0x90 [ 1974.481651][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1974.487951][T32105] [ 1974.490262][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1974.496922][T32105] do_recvmmsg+0xc2/0x22c0 [ 1974.501336][T32105] do_recvmmsg+0xc2/0x22c0 [ 1974.731838][T32105] not chained 7630000 origins [ 1974.736534][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1974.745182][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1974.755224][T32105] Call Trace: [ 1974.758514][T32105] dump_stack+0x21c/0x280 [ 1974.762857][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1974.768607][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1974.773811][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1974.779630][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1974.785685][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1974.790871][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1974.796495][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1974.802585][T32105] ? _copy_from_user+0x221/0x330 [ 1974.807537][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1974.812733][T32105] __msan_chain_origin+0x50/0x90 [ 1974.817684][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1974.822827][T32105] get_compat_msghdr+0x108/0x2b0 [ 1974.827778][T32105] do_recvmmsg+0xdba/0x22c0 [ 1974.832280][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1974.838699][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1974.843907][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1974.849820][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1974.855014][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1974.860294][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1974.865051][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1974.869807][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1974.874508][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1974.880574][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1974.886741][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1974.891974][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1974.896846][T32105] do_SYSENTER_32+0x73/0x90 [ 1974.901375][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1974.907733][T32105] RIP: 0023:0xf7f40549 [ 1974.911781][T32105] Code: Bad RIP value. [ 1974.915829][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1974.924237][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1974.932228][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1974.940186][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1974.948146][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1974.956135][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1974.964117][T32105] Uninit was stored to memory at: [ 1974.969149][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1974.974849][T32105] __msan_chain_origin+0x50/0x90 [ 1974.979775][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1974.984871][T32105] get_compat_msghdr+0x108/0x2b0 [ 1974.989832][T32105] do_recvmmsg+0xdba/0x22c0 [ 1974.994330][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1974.999012][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1975.005073][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1975.011272][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1975.016472][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1975.021318][T32105] do_SYSENTER_32+0x73/0x90 [ 1975.025824][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.032140][T32105] [ 1975.034449][T32105] Uninit was stored to memory at: [ 1975.039462][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1975.045166][T32105] __msan_chain_origin+0x50/0x90 [ 1975.050120][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1975.055217][T32105] get_compat_msghdr+0x108/0x2b0 [ 1975.060153][T32105] do_recvmmsg+0xdba/0x22c0 [ 1975.064639][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1975.069301][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1975.075357][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1975.081508][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1975.086708][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1975.091543][T32105] do_SYSENTER_32+0x73/0x90 [ 1975.096049][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.102374][T32105] [ 1975.104706][T32105] Uninit was stored to memory at: [ 1975.109734][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1975.115439][T32105] __msan_chain_origin+0x50/0x90 [ 1975.120370][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1975.125480][T32105] get_compat_msghdr+0x108/0x2b0 [ 1975.130430][T32105] do_recvmmsg+0xdba/0x22c0 [ 1975.134942][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1975.139622][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1975.145683][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1975.151886][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1975.157097][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1975.161939][T32105] do_SYSENTER_32+0x73/0x90 [ 1975.166445][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.172754][T32105] [ 1975.175117][T32105] Uninit was stored to memory at: [ 1975.180128][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1975.185835][T32105] __msan_chain_origin+0x50/0x90 [ 1975.190759][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1975.195856][T32105] get_compat_msghdr+0x108/0x2b0 [ 1975.200789][T32105] do_recvmmsg+0xdba/0x22c0 [ 1975.205289][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1975.209968][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1975.216035][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1975.222216][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1975.231061][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1975.235909][T32105] do_SYSENTER_32+0x73/0x90 [ 1975.240418][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.246722][T32105] [ 1975.249029][T32105] Uninit was stored to memory at: [ 1975.254056][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1975.259773][T32105] __msan_chain_origin+0x50/0x90 [ 1975.264728][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1975.269823][T32105] get_compat_msghdr+0x108/0x2b0 [ 1975.274804][T32105] do_recvmmsg+0xdba/0x22c0 [ 1975.279295][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1975.283979][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1975.290046][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1975.296205][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1975.301403][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1975.306265][T32105] do_SYSENTER_32+0x73/0x90 [ 1975.310757][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.317067][T32105] [ 1975.319383][T32105] Uninit was stored to memory at: [ 1975.324410][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1975.330143][T32105] __msan_chain_origin+0x50/0x90 [ 1975.335075][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1975.340177][T32105] get_compat_msghdr+0x108/0x2b0 [ 1975.345100][T32105] do_recvmmsg+0xdba/0x22c0 [ 1975.349602][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1975.354291][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1975.360368][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1975.366516][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1975.371719][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1975.376577][T32105] do_SYSENTER_32+0x73/0x90 [ 1975.381067][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.387368][T32105] [ 1975.389704][T32105] Uninit was stored to memory at: [ 1975.394743][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1975.400451][T32105] __msan_chain_origin+0x50/0x90 [ 1975.405479][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1975.410587][T32105] get_compat_msghdr+0x108/0x2b0 [ 1975.415526][T32105] do_recvmmsg+0xdba/0x22c0 [ 1975.420013][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1975.424678][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1975.430730][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1975.436884][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1975.442100][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1975.446933][T32105] do_SYSENTER_32+0x73/0x90 [ 1975.451433][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.457749][T32105] [ 1975.460058][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1975.466728][T32105] do_recvmmsg+0xc2/0x22c0 [ 1975.471137][T32105] do_recvmmsg+0xc2/0x22c0 [ 1975.768584][T32105] not chained 7640000 origins [ 1975.773341][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1975.783162][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.793213][T32105] Call Trace: [ 1975.796516][T32105] dump_stack+0x21c/0x280 [ 1975.800856][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1975.806579][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1975.811783][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1975.817591][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1975.823654][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1975.828882][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1975.834422][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1975.840481][T32105] ? _copy_from_user+0x221/0x330 [ 1975.845413][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1975.850598][T32105] __msan_chain_origin+0x50/0x90 [ 1975.855530][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1975.860654][T32105] get_compat_msghdr+0x108/0x2b0 [ 1975.865589][T32105] do_recvmmsg+0xdba/0x22c0 [ 1975.870087][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1975.876086][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1975.881310][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1975.887210][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1975.892401][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1975.897679][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1975.902444][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1975.907206][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1975.911903][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1975.918005][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1975.924152][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1975.929348][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1975.934195][T32105] do_SYSENTER_32+0x73/0x90 [ 1975.938720][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.945072][T32105] RIP: 0023:0xf7f40549 [ 1975.949131][T32105] Code: Bad RIP value. [ 1975.953182][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1975.961598][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1975.969554][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1975.977518][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1975.985485][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1975.993453][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1976.001442][T32105] Uninit was stored to memory at: [ 1976.006470][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1976.012174][T32105] __msan_chain_origin+0x50/0x90 [ 1976.017097][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1976.022192][T32105] get_compat_msghdr+0x108/0x2b0 [ 1976.027126][T32105] do_recvmmsg+0xdba/0x22c0 [ 1976.031612][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1976.036375][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1976.042536][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1976.048678][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1976.053864][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1976.058698][T32105] do_SYSENTER_32+0x73/0x90 [ 1976.063211][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1976.069511][T32105] [ 1976.071821][T32105] Uninit was stored to memory at: [ 1976.076844][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1976.082564][T32105] __msan_chain_origin+0x50/0x90 [ 1976.087505][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1976.092618][T32105] get_compat_msghdr+0x108/0x2b0 [ 1976.097556][T32105] do_recvmmsg+0xdba/0x22c0 [ 1976.102064][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1976.106725][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1976.112780][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1976.118964][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1976.124153][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1976.128997][T32105] do_SYSENTER_32+0x73/0x90 [ 1976.133504][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1976.139809][T32105] [ 1976.142121][T32105] Uninit was stored to memory at: [ 1976.147173][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1976.152884][T32105] __msan_chain_origin+0x50/0x90 [ 1976.157816][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1976.162929][T32105] get_compat_msghdr+0x108/0x2b0 [ 1976.167877][T32105] do_recvmmsg+0xdba/0x22c0 [ 1976.172392][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1976.177111][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1976.183369][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1976.189534][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1976.194808][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1976.199649][T32105] do_SYSENTER_32+0x73/0x90 [ 1976.204152][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1976.210466][T32105] [ 1976.212791][T32105] Uninit was stored to memory at: [ 1976.217803][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1976.223508][T32105] __msan_chain_origin+0x50/0x90 [ 1976.228433][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1976.233548][T32105] get_compat_msghdr+0x108/0x2b0 [ 1976.238467][T32105] do_recvmmsg+0xdba/0x22c0 [ 1976.242965][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1976.247652][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1976.253720][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1976.259860][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1976.265055][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1976.269896][T32105] do_SYSENTER_32+0x73/0x90 [ 1976.274403][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1976.280707][T32105] [ 1976.283015][T32105] Uninit was stored to memory at: [ 1976.288029][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1976.293735][T32105] __msan_chain_origin+0x50/0x90 [ 1976.298658][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1976.303767][T32105] get_compat_msghdr+0x108/0x2b0 [ 1976.308689][T32105] do_recvmmsg+0xdba/0x22c0 [ 1976.313194][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1976.317888][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1976.323952][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1976.330090][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1976.335292][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1976.340135][T32105] do_SYSENTER_32+0x73/0x90 [ 1976.344636][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1976.350947][T32105] [ 1976.353271][T32105] Uninit was stored to memory at: [ 1976.358285][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1976.363987][T32105] __msan_chain_origin+0x50/0x90 [ 1976.368915][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1976.374010][T32105] get_compat_msghdr+0x108/0x2b0 [ 1976.378929][T32105] do_recvmmsg+0xdba/0x22c0 [ 1976.383418][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1976.388082][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1976.394135][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1976.400272][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1976.405458][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1976.410301][T32105] do_SYSENTER_32+0x73/0x90 [ 1976.414793][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1976.421094][T32105] [ 1976.423417][T32105] Uninit was stored to memory at: [ 1976.428449][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1976.434152][T32105] __msan_chain_origin+0x50/0x90 [ 1976.439074][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1976.444170][T32105] get_compat_msghdr+0x108/0x2b0 [ 1976.449101][T32105] do_recvmmsg+0xdba/0x22c0 [ 1976.453588][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1976.458266][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1976.464316][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1976.471770][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1976.476955][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1976.481787][T32105] do_SYSENTER_32+0x73/0x90 [ 1976.486287][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1976.492596][T32105] [ 1976.494908][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1976.504525][T32105] do_recvmmsg+0xc2/0x22c0 [ 1976.508926][T32105] do_recvmmsg+0xc2/0x22c0 [ 1976.706089][T32105] not chained 7650000 origins [ 1976.710830][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1976.719507][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.729570][T32105] Call Trace: [ 1976.732892][T32105] dump_stack+0x21c/0x280 [ 1976.737260][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1976.743029][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1976.748248][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1976.754074][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1976.760159][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1976.765385][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1976.770955][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1976.777089][T32105] ? _copy_from_user+0x221/0x330 [ 1976.782050][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1976.787290][T32105] __msan_chain_origin+0x50/0x90 [ 1976.792283][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1976.797447][T32105] get_compat_msghdr+0x108/0x2b0 [ 1976.802422][T32105] do_recvmmsg+0xdba/0x22c0 [ 1976.806960][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1976.812979][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1976.818208][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1976.824126][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1976.830049][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1976.835363][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1976.840150][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1976.844940][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1976.849670][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1976.855776][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1976.861956][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1976.867191][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1976.872067][T32105] do_SYSENTER_32+0x73/0x90 [ 1976.876592][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1976.882959][T32105] RIP: 0023:0xf7f40549 [ 1976.887032][T32105] Code: Bad RIP value. [ 1976.891106][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1976.899548][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1976.907574][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1976.915580][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1976.923736][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1976.931727][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1976.939735][T32105] Uninit was stored to memory at: [ 1976.944791][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1976.950526][T32105] __msan_chain_origin+0x50/0x90 [ 1976.955482][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1976.961301][T32105] get_compat_msghdr+0x108/0x2b0 [ 1976.966248][T32105] do_recvmmsg+0xdba/0x22c0 [ 1976.970772][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1976.975464][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1976.981547][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1976.987730][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1976.992956][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1976.997820][T32105] do_SYSENTER_32+0x73/0x90 [ 1977.002337][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1977.008669][T32105] [ 1977.010979][T32105] Uninit was stored to memory at: [ 1977.016153][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1977.021858][T32105] __msan_chain_origin+0x50/0x90 [ 1977.026783][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1977.031893][T32105] get_compat_msghdr+0x108/0x2b0 [ 1977.036831][T32105] do_recvmmsg+0xdba/0x22c0 [ 1977.041330][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1977.046009][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1977.052084][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1977.058256][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1977.063440][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1977.068289][T32105] do_SYSENTER_32+0x73/0x90 [ 1977.072789][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1977.079114][T32105] [ 1977.081429][T32105] Uninit was stored to memory at: [ 1977.086559][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1977.092362][T32105] __msan_chain_origin+0x50/0x90 [ 1977.097304][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1977.102402][T32105] get_compat_msghdr+0x108/0x2b0 [ 1977.107337][T32105] do_recvmmsg+0xdba/0x22c0 [ 1977.111833][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1977.116523][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1977.122580][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1977.128982][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1977.134191][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1977.139039][T32105] do_SYSENTER_32+0x73/0x90 [ 1977.143542][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1977.149934][T32105] [ 1977.152257][T32105] Uninit was stored to memory at: [ 1977.157287][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1977.163007][T32105] __msan_chain_origin+0x50/0x90 [ 1977.167957][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1977.173064][T32105] get_compat_msghdr+0x108/0x2b0 [ 1977.178002][T32105] do_recvmmsg+0xdba/0x22c0 [ 1977.182489][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1977.187151][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1977.193215][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1977.199390][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1977.204589][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1977.209453][T32105] do_SYSENTER_32+0x73/0x90 [ 1977.214062][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1977.220378][T32105] [ 1977.222700][T32105] Uninit was stored to memory at: [ 1977.227716][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1977.233432][T32105] __msan_chain_origin+0x50/0x90 [ 1977.238377][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1977.243489][T32105] get_compat_msghdr+0x108/0x2b0 [ 1977.248421][T32105] do_recvmmsg+0xdba/0x22c0 [ 1977.252917][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1977.257594][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1977.263645][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1977.269782][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1977.274967][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1977.279812][T32105] do_SYSENTER_32+0x73/0x90 [ 1977.284318][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1977.290641][T32105] [ 1977.292972][T32105] Uninit was stored to memory at: [ 1977.298013][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1977.303785][T32105] __msan_chain_origin+0x50/0x90 [ 1977.309358][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1977.314484][T32105] get_compat_msghdr+0x108/0x2b0 [ 1977.319421][T32105] do_recvmmsg+0xdba/0x22c0 [ 1977.323908][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1977.328571][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1977.334623][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1977.340765][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1977.345954][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1977.350796][T32105] do_SYSENTER_32+0x73/0x90 [ 1977.355297][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1977.361610][T32105] [ 1977.365064][T32105] Uninit was stored to memory at: [ 1977.370080][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1977.376320][T32105] __msan_chain_origin+0x50/0x90 [ 1977.381287][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1977.386758][T32105] get_compat_msghdr+0x108/0x2b0 [ 1977.391706][T32105] do_recvmmsg+0xdba/0x22c0 [ 1977.396211][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1977.403706][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1977.409771][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1977.415928][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1977.421138][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1977.425985][T32105] do_SYSENTER_32+0x73/0x90 [ 1977.430482][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1977.436784][T32105] [ 1977.439357][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1977.446036][T32105] do_recvmmsg+0xc2/0x22c0 [ 1977.450440][T32105] do_recvmmsg+0xc2/0x22c0 [ 1977.646399][T32105] not chained 7660000 origins [ 1977.651171][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1977.659854][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1977.669918][T32105] Call Trace: [ 1977.673242][T32105] dump_stack+0x21c/0x280 [ 1977.677602][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1977.683344][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1977.688545][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1977.694341][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1977.700394][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1977.705599][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1977.711165][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1977.717235][T32105] ? _copy_from_user+0x221/0x330 [ 1977.722184][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1977.727381][T32105] __msan_chain_origin+0x50/0x90 [ 1977.732378][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1977.737523][T32105] get_compat_msghdr+0x108/0x2b0 [ 1977.742505][T32105] do_recvmmsg+0xdba/0x22c0 [ 1977.747044][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1977.754013][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1977.759317][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1977.765213][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1977.770416][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1977.775696][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1977.780452][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1977.785223][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1977.789920][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1977.795991][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1977.802164][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1977.807366][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1977.812214][T32105] do_SYSENTER_32+0x73/0x90 [ 1977.816709][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1977.823045][T32105] RIP: 0023:0xf7f40549 [ 1977.827103][T32105] Code: Bad RIP value. [ 1977.831168][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1977.839578][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1977.847546][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1977.855504][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1977.863472][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1977.871444][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1977.879418][T32105] Uninit was stored to memory at: [ 1977.884441][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1977.890492][T32105] __msan_chain_origin+0x50/0x90 [ 1977.895423][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1977.900523][T32105] get_compat_msghdr+0x108/0x2b0 [ 1977.905449][T32105] do_recvmmsg+0xdba/0x22c0 [ 1977.909949][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1977.914612][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1977.920676][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1977.927360][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1977.932546][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1977.938087][T32105] do_SYSENTER_32+0x73/0x90 [ 1977.942591][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1977.949563][T32105] [ 1977.951890][T32105] Uninit was stored to memory at: [ 1977.958404][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1977.965258][T32105] __msan_chain_origin+0x50/0x90 [ 1977.970187][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1977.975297][T32105] get_compat_msghdr+0x108/0x2b0 [ 1977.980237][T32105] do_recvmmsg+0xdba/0x22c0 [ 1977.984741][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1977.989415][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1977.995826][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1978.001986][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1978.007191][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1978.012046][T32105] do_SYSENTER_32+0x73/0x90 [ 1978.016585][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1978.022956][T32105] [ 1978.025268][T32105] Uninit was stored to memory at: [ 1978.030471][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1978.036183][T32105] __msan_chain_origin+0x50/0x90 [ 1978.041111][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1978.047165][T32105] get_compat_msghdr+0x108/0x2b0 [ 1978.052089][T32105] do_recvmmsg+0xdba/0x22c0 [ 1978.056574][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1978.061286][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1978.067364][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1978.073524][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1978.078732][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1978.083593][T32105] do_SYSENTER_32+0x73/0x90 [ 1978.088112][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1978.094436][T32105] [ 1978.096766][T32105] Uninit was stored to memory at: [ 1978.101886][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1978.107590][T32105] __msan_chain_origin+0x50/0x90 [ 1978.113144][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1978.118269][T32105] get_compat_msghdr+0x108/0x2b0 [ 1978.123208][T32105] do_recvmmsg+0xdba/0x22c0 [ 1978.127811][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1978.138322][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1978.144394][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1978.150803][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1978.155997][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1978.161291][T32105] do_SYSENTER_32+0x73/0x90 [ 1978.165809][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1978.172115][T32105] [ 1978.174451][T32105] Uninit was stored to memory at: [ 1978.179464][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1978.185179][T32105] __msan_chain_origin+0x50/0x90 [ 1978.190105][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1978.195214][T32105] get_compat_msghdr+0x108/0x2b0 [ 1978.200153][T32105] do_recvmmsg+0xdba/0x22c0 [ 1978.204657][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1978.209326][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1978.215388][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1978.221531][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1978.226715][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1978.231564][T32105] do_SYSENTER_32+0x73/0x90 [ 1978.236068][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1978.242898][T32105] [ 1978.245239][T32105] Uninit was stored to memory at: [ 1978.250293][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1978.256030][T32105] __msan_chain_origin+0x50/0x90 [ 1978.260978][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1978.266090][T32105] get_compat_msghdr+0x108/0x2b0 [ 1978.271128][T32105] do_recvmmsg+0xdba/0x22c0 [ 1978.275629][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1978.280311][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1978.288111][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1978.294269][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1978.299471][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1978.304330][T32105] do_SYSENTER_32+0x73/0x90 [ 1978.309339][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1978.315657][T32105] [ 1978.317973][T32105] Uninit was stored to memory at: [ 1978.323003][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1978.328742][T32105] __msan_chain_origin+0x50/0x90 [ 1978.333696][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1978.338815][T32105] get_compat_msghdr+0x108/0x2b0 [ 1978.343747][T32105] do_recvmmsg+0xdba/0x22c0 [ 1978.348375][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1978.353069][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1978.359131][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1978.365278][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1978.370462][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1978.375336][T32105] do_SYSENTER_32+0x73/0x90 [ 1978.379839][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1978.386151][T32105] [ 1978.388461][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1978.396127][T32105] do_recvmmsg+0xc2/0x22c0 [ 1978.400528][T32105] do_recvmmsg+0xc2/0x22c0 [ 1978.617867][T32105] not chained 7670000 origins [ 1978.622605][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1978.631280][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.641344][T32105] Call Trace: [ 1978.644661][T32105] dump_stack+0x21c/0x280 [ 1978.649023][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1978.654815][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1978.660053][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1978.665896][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1978.672849][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1978.678075][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1978.683656][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1978.690368][T32105] ? _copy_from_user+0x221/0x330 [ 1978.695358][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1978.700574][T32105] __msan_chain_origin+0x50/0x90 [ 1978.705536][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1978.710869][T32105] get_compat_msghdr+0x108/0x2b0 [ 1978.715843][T32105] do_recvmmsg+0xdba/0x22c0 [ 1978.720386][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1978.726403][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1978.731630][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1978.737546][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1978.742773][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1978.748102][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1978.752888][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1978.757676][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1978.762412][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1978.768487][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1978.774646][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1978.779845][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1978.784690][T32105] do_SYSENTER_32+0x73/0x90 [ 1978.789201][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1978.795511][T32105] RIP: 0023:0xf7f40549 [ 1978.799563][T32105] Code: Bad RIP value. [ 1978.803610][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1978.812020][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1978.819989][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1978.827946][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1978.835921][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1978.843994][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1978.851976][T32105] Uninit was stored to memory at: [ 1978.856994][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1978.862712][T32105] __msan_chain_origin+0x50/0x90 [ 1978.867668][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1978.872768][T32105] get_compat_msghdr+0x108/0x2b0 [ 1978.877704][T32105] do_recvmmsg+0xdba/0x22c0 [ 1978.882197][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1978.886866][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1978.892917][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1978.899059][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1978.904246][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1978.909085][T32105] do_SYSENTER_32+0x73/0x90 [ 1978.913593][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1978.919905][T32105] [ 1978.922219][T32105] Uninit was stored to memory at: [ 1978.927845][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1978.933570][T32105] __msan_chain_origin+0x50/0x90 [ 1978.938492][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1978.950283][T32105] get_compat_msghdr+0x108/0x2b0 [ 1978.955233][T32105] do_recvmmsg+0xdba/0x22c0 [ 1978.959721][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1978.964386][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1978.970445][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1978.976761][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1978.981966][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1978.986800][T32105] do_SYSENTER_32+0x73/0x90 [ 1978.991305][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1978.997621][T32105] [ 1979.000660][T32105] Uninit was stored to memory at: [ 1979.005684][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1979.011417][T32105] __msan_chain_origin+0x50/0x90 [ 1979.016391][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1979.021506][T32105] get_compat_msghdr+0x108/0x2b0 [ 1979.026435][T32105] do_recvmmsg+0xdba/0x22c0 [ 1979.030927][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1979.035604][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1979.041660][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1979.047803][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1979.053028][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1979.057902][T32105] do_SYSENTER_32+0x73/0x90 [ 1979.062405][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1979.068722][T32105] [ 1979.071043][T32105] Uninit was stored to memory at: [ 1979.076065][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1979.081780][T32105] __msan_chain_origin+0x50/0x90 [ 1979.086723][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1979.091819][T32105] get_compat_msghdr+0x108/0x2b0 [ 1979.096740][T32105] do_recvmmsg+0xdba/0x22c0 [ 1979.101227][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1979.105923][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1979.111982][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1979.118124][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1979.123315][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1979.128241][T32105] do_SYSENTER_32+0x73/0x90 [ 1979.132742][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1979.139408][T32105] [ 1979.141736][T32105] Uninit was stored to memory at: [ 1979.146765][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1979.152566][T32105] __msan_chain_origin+0x50/0x90 [ 1979.157496][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1979.162596][T32105] get_compat_msghdr+0x108/0x2b0 [ 1979.167959][T32105] do_recvmmsg+0xdba/0x22c0 [ 1979.173249][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1979.177935][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1979.184108][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1979.190255][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1979.195465][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1979.200304][T32105] do_SYSENTER_32+0x73/0x90 [ 1979.204882][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1979.211199][T32105] [ 1979.213516][T32105] Uninit was stored to memory at: [ 1979.218559][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1979.224357][T32105] __msan_chain_origin+0x50/0x90 [ 1979.229282][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1979.234391][T32105] get_compat_msghdr+0x108/0x2b0 [ 1979.239314][T32105] do_recvmmsg+0xdba/0x22c0 [ 1979.243806][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1979.248473][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1979.254566][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1979.260707][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1979.267372][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1979.272315][T32105] do_SYSENTER_32+0x73/0x90 [ 1979.276804][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1979.283111][T32105] [ 1979.285444][T32105] Uninit was stored to memory at: [ 1979.291187][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1979.296906][T32105] __msan_chain_origin+0x50/0x90 [ 1979.301843][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1979.307138][T32105] get_compat_msghdr+0x108/0x2b0 [ 1979.312079][T32105] do_recvmmsg+0xdba/0x22c0 [ 1979.316565][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1979.321250][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1979.327353][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1979.333839][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1979.339035][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1979.343880][T32105] do_SYSENTER_32+0x73/0x90 [ 1979.348376][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1979.354696][T32105] [ 1979.357011][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1979.363685][T32105] do_recvmmsg+0xc2/0x22c0 [ 1979.368723][T32105] do_recvmmsg+0xc2/0x22c0 [ 1979.590794][T32105] not chained 7680000 origins [ 1979.595531][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1979.604210][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1979.614276][T32105] Call Trace: [ 1979.617618][T32105] dump_stack+0x21c/0x280 [ 1979.621991][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1979.627759][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1979.632982][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1979.638809][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1979.644892][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1979.650112][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1979.656929][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1979.663053][T32105] ? _copy_from_user+0x221/0x330 [ 1979.668026][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1979.673243][T32105] __msan_chain_origin+0x50/0x90 [ 1979.678202][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1979.683364][T32105] get_compat_msghdr+0x108/0x2b0 [ 1979.688513][T32105] do_recvmmsg+0xdba/0x22c0 [ 1979.693049][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1979.699200][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1979.705119][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1979.716194][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1979.721418][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1979.726713][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1979.732179][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1979.736979][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1979.741663][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1979.747729][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1979.753899][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1979.759117][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1979.764090][T32105] do_SYSENTER_32+0x73/0x90 [ 1979.768597][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1979.774938][T32105] RIP: 0023:0xf7f40549 [ 1979.778995][T32105] Code: Bad RIP value. [ 1979.783064][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1979.791503][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1979.799482][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1979.807451][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1979.815633][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1979.823611][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1979.832016][T32105] Uninit was stored to memory at: [ 1979.837065][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1979.842786][T32105] __msan_chain_origin+0x50/0x90 [ 1979.847747][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1979.852859][T32105] get_compat_msghdr+0x108/0x2b0 [ 1979.857797][T32105] do_recvmmsg+0xdba/0x22c0 [ 1979.862296][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1979.866990][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1979.873057][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1979.879197][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1979.884394][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1979.889929][T32105] do_SYSENTER_32+0x73/0x90 [ 1979.894420][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1979.900722][T32105] [ 1979.903032][T32105] Uninit was stored to memory at: [ 1979.909182][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1979.914910][T32105] __msan_chain_origin+0x50/0x90 [ 1979.929656][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1979.934979][T32105] get_compat_msghdr+0x108/0x2b0 [ 1979.939924][T32105] do_recvmmsg+0xdba/0x22c0 [ 1979.944415][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1979.949082][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1979.955135][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1979.961288][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1979.966488][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1979.971334][T32105] do_SYSENTER_32+0x73/0x90 [ 1979.975850][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1979.982151][T32105] [ 1979.984468][T32105] Uninit was stored to memory at: [ 1979.989489][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1979.995192][T32105] __msan_chain_origin+0x50/0x90 [ 1980.000117][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1980.005212][T32105] get_compat_msghdr+0x108/0x2b0 [ 1980.010136][T32105] do_recvmmsg+0xdba/0x22c0 [ 1980.014666][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1980.019410][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1980.031025][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1980.037186][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1980.042392][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1980.047246][T32105] do_SYSENTER_32+0x73/0x90 [ 1980.051754][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1980.058072][T32105] [ 1980.060392][T32105] Uninit was stored to memory at: [ 1980.065422][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1980.071147][T32105] __msan_chain_origin+0x50/0x90 [ 1980.076094][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1980.081190][T32105] get_compat_msghdr+0x108/0x2b0 [ 1980.086114][T32105] do_recvmmsg+0xdba/0x22c0 [ 1980.090601][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1980.095962][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1980.102023][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1980.108212][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1980.113922][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1980.118762][T32105] do_SYSENTER_32+0x73/0x90 [ 1980.123283][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1980.129678][T32105] [ 1980.132007][T32105] Uninit was stored to memory at: [ 1980.137484][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1980.143195][T32105] __msan_chain_origin+0x50/0x90 [ 1980.148122][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1980.153246][T32105] get_compat_msghdr+0x108/0x2b0 [ 1980.158172][T32105] do_recvmmsg+0xdba/0x22c0 [ 1980.162754][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1980.167461][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1980.173529][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1980.179759][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1980.184951][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1980.189789][T32105] do_SYSENTER_32+0x73/0x90 [ 1980.194297][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1980.200610][T32105] [ 1980.202931][T32105] Uninit was stored to memory at: [ 1980.207943][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1980.213647][T32105] __msan_chain_origin+0x50/0x90 [ 1980.218573][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1980.223672][T32105] get_compat_msghdr+0x108/0x2b0 [ 1980.228595][T32105] do_recvmmsg+0xdba/0x22c0 [ 1980.233098][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1980.237764][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1980.243847][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1980.250001][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1980.255187][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1980.260025][T32105] do_SYSENTER_32+0x73/0x90 [ 1980.264515][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1980.270817][T32105] [ 1980.273143][T32105] Uninit was stored to memory at: [ 1980.278173][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1980.284855][T32105] __msan_chain_origin+0x50/0x90 [ 1980.290145][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1980.295258][T32105] get_compat_msghdr+0x108/0x2b0 [ 1980.300181][T32105] do_recvmmsg+0xdba/0x22c0 [ 1980.304684][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1980.309365][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1980.315538][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1980.321692][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1980.327018][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1980.332058][T32105] do_SYSENTER_32+0x73/0x90 [ 1980.336566][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1980.343029][T32105] [ 1980.345350][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1980.352018][T32105] do_recvmmsg+0xc2/0x22c0 [ 1980.356463][T32105] do_recvmmsg+0xc2/0x22c0 [ 1980.607268][T32105] not chained 7690000 origins [ 1980.612041][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1980.620762][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.630832][T32105] Call Trace: [ 1980.634149][T32105] dump_stack+0x21c/0x280 [ 1980.638512][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1980.644276][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1980.649496][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1980.655323][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1980.662752][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1980.667937][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1980.673486][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1980.687032][T32105] ? _copy_from_user+0x221/0x330 [ 1980.691969][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1980.697169][T32105] __msan_chain_origin+0x50/0x90 [ 1980.702107][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1980.707259][T32105] get_compat_msghdr+0x108/0x2b0 [ 1980.712196][T32105] do_recvmmsg+0xdba/0x22c0 [ 1980.716700][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1980.722705][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1980.727930][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1980.733830][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1980.739195][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1980.744488][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1980.749238][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1980.754008][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1980.758693][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1980.764758][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1980.770918][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1980.776378][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1980.781239][T32105] do_SYSENTER_32+0x73/0x90 [ 1980.785995][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1980.792308][T32105] RIP: 0023:0xf7f40549 [ 1980.796440][T32105] Code: Bad RIP value. [ 1980.800489][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1980.808898][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1980.816863][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1980.824962][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1980.833631][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1980.841620][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1980.849608][T32105] Uninit was stored to memory at: [ 1980.854651][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1980.860376][T32105] __msan_chain_origin+0x50/0x90 [ 1980.865304][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1980.870402][T32105] get_compat_msghdr+0x108/0x2b0 [ 1980.875326][T32105] do_recvmmsg+0xdba/0x22c0 [ 1980.879821][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1980.885266][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1980.891333][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1980.897507][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1980.902716][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1980.907561][T32105] do_SYSENTER_32+0x73/0x90 [ 1980.912100][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1980.918405][T32105] [ 1980.920773][T32105] Uninit was stored to memory at: [ 1980.925794][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1980.931595][T32105] __msan_chain_origin+0x50/0x90 [ 1980.936524][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1980.941772][T32105] get_compat_msghdr+0x108/0x2b0 [ 1980.947596][T32105] do_recvmmsg+0xdba/0x22c0 [ 1980.952090][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1980.956754][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1980.962820][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1980.968979][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1980.974186][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1980.979021][T32105] do_SYSENTER_32+0x73/0x90 [ 1980.983525][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1980.990439][T32105] [ 1980.992756][T32105] Uninit was stored to memory at: [ 1980.997768][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1981.003470][T32105] __msan_chain_origin+0x50/0x90 [ 1981.008393][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1981.013509][T32105] get_compat_msghdr+0x108/0x2b0 [ 1981.018436][T32105] do_recvmmsg+0xdba/0x22c0 [ 1981.022924][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1981.027585][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1981.033909][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1981.040065][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1981.045260][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1981.050103][T32105] do_SYSENTER_32+0x73/0x90 [ 1981.054697][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1981.061025][T32105] [ 1981.063336][T32105] Uninit was stored to memory at: [ 1981.068388][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1981.074104][T32105] __msan_chain_origin+0x50/0x90 [ 1981.079592][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1981.085043][T32105] get_compat_msghdr+0x108/0x2b0 [ 1981.089966][T32105] do_recvmmsg+0xdba/0x22c0 [ 1981.094453][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1981.099126][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1981.105179][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1981.112624][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1981.117821][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1981.123002][T32105] do_SYSENTER_32+0x73/0x90 [ 1981.127937][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1981.134238][T32105] [ 1981.136547][T32105] Uninit was stored to memory at: [ 1981.141584][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1981.147302][T32105] __msan_chain_origin+0x50/0x90 [ 1981.152421][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1981.157949][T32105] get_compat_msghdr+0x108/0x2b0 [ 1981.162884][T32105] do_recvmmsg+0xdba/0x22c0 [ 1981.167387][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1981.172070][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1981.178120][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1981.184289][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1981.189484][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1981.194318][T32105] do_SYSENTER_32+0x73/0x90 [ 1981.198807][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1981.205115][T32105] [ 1981.207446][T32105] Uninit was stored to memory at: [ 1981.212484][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1981.218219][T32105] __msan_chain_origin+0x50/0x90 [ 1981.223258][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1981.228358][T32105] get_compat_msghdr+0x108/0x2b0 [ 1981.233291][T32105] do_recvmmsg+0xdba/0x22c0 [ 1981.237784][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1981.242453][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1981.248513][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1981.254655][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1981.259849][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1981.264685][T32105] do_SYSENTER_32+0x73/0x90 [ 1981.269202][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1981.275505][T32105] [ 1981.278769][T32105] Uninit was stored to memory at: [ 1981.283820][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1981.295428][T32105] __msan_chain_origin+0x50/0x90 [ 1981.300375][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1981.305501][T32105] get_compat_msghdr+0x108/0x2b0 [ 1981.310429][T32105] do_recvmmsg+0xdba/0x22c0 [ 1981.314917][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1981.319598][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1981.325665][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1981.331825][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1981.337026][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1981.341862][T32105] do_SYSENTER_32+0x73/0x90 [ 1981.346374][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1981.352696][T32105] [ 1981.355021][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1981.361701][T32105] do_recvmmsg+0xc2/0x22c0 [ 1981.366125][T32105] do_recvmmsg+0xc2/0x22c0 [ 1981.674549][T32105] not chained 7700000 origins [ 1981.679286][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1981.687969][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.698052][T32105] Call Trace: [ 1981.701357][T32105] dump_stack+0x21c/0x280 [ 1981.705712][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1981.711487][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1981.716703][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1981.722500][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1981.727687][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1981.733499][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1981.739566][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1981.744757][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1981.750314][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1981.756468][T32105] ? _copy_from_user+0x221/0x330 [ 1981.761415][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1981.766624][T32105] __msan_chain_origin+0x50/0x90 [ 1981.771558][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1981.776705][T32105] get_compat_msghdr+0x108/0x2b0 [ 1981.781651][T32105] do_recvmmsg+0xdba/0x22c0 [ 1981.786152][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1981.792147][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1981.797389][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1981.803279][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1981.808482][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1981.813774][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1981.818544][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1981.823313][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1981.828010][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1981.834104][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1981.840246][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1981.845443][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1981.850299][T32105] do_SYSENTER_32+0x73/0x90 [ 1981.854807][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1981.861128][T32105] RIP: 0023:0xf7f40549 [ 1981.865177][T32105] Code: Bad RIP value. [ 1981.869230][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1981.877670][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1981.885628][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1981.894221][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1981.902187][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1981.910157][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1981.918126][T32105] Uninit was stored to memory at: [ 1981.923159][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1981.928870][T32105] __msan_chain_origin+0x50/0x90 [ 1981.933826][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1981.938938][T32105] get_compat_msghdr+0x108/0x2b0 [ 1981.943862][T32105] do_recvmmsg+0xdba/0x22c0 [ 1981.949043][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1981.953728][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1981.959814][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1981.966307][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1981.971510][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1981.976347][T32105] do_SYSENTER_32+0x73/0x90 [ 1981.982674][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1981.989008][T32105] [ 1981.991328][T32105] Uninit was stored to memory at: [ 1981.996367][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1982.002074][T32105] __msan_chain_origin+0x50/0x90 [ 1982.007269][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1982.012374][T32105] get_compat_msghdr+0x108/0x2b0 [ 1982.017318][T32105] do_recvmmsg+0xdba/0x22c0 [ 1982.021812][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1982.026474][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1982.032526][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1982.038667][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1982.043866][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1982.048745][T32105] do_SYSENTER_32+0x73/0x90 [ 1982.053245][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1982.059551][T32105] [ 1982.061870][T32105] Uninit was stored to memory at: [ 1982.066899][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1982.072695][T32105] __msan_chain_origin+0x50/0x90 [ 1982.077624][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1982.082729][T32105] get_compat_msghdr+0x108/0x2b0 [ 1982.087666][T32105] do_recvmmsg+0xdba/0x22c0 [ 1982.092166][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1982.096844][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1982.102910][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1982.109147][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1982.114350][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1982.124224][T32105] do_SYSENTER_32+0x73/0x90 [ 1982.128722][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1982.135029][T32105] [ 1982.137336][T32105] Uninit was stored to memory at: [ 1982.142360][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1982.148326][T32105] __msan_chain_origin+0x50/0x90 [ 1982.153297][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1982.158407][T32105] get_compat_msghdr+0x108/0x2b0 [ 1982.167178][T32105] do_recvmmsg+0xdba/0x22c0 [ 1982.171679][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1982.176366][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1982.182430][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1982.188602][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1982.194756][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1982.199594][T32105] do_SYSENTER_32+0x73/0x90 [ 1982.204084][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1982.210904][T32105] [ 1982.213223][T32105] Uninit was stored to memory at: [ 1982.218250][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1982.224009][T32105] __msan_chain_origin+0x50/0x90 [ 1982.228938][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1982.234036][T32105] get_compat_msghdr+0x108/0x2b0 [ 1982.238957][T32105] do_recvmmsg+0xdba/0x22c0 [ 1982.243740][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1982.249060][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1982.255125][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1982.261277][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1982.266491][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1982.271602][T32105] do_SYSENTER_32+0x73/0x90 [ 1982.279657][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1982.285961][T32105] [ 1982.288275][T32105] Uninit was stored to memory at: [ 1982.293559][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1982.299336][T32105] __msan_chain_origin+0x50/0x90 [ 1982.304269][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1982.309372][T32105] get_compat_msghdr+0x108/0x2b0 [ 1982.314314][T32105] do_recvmmsg+0xdba/0x22c0 [ 1982.318806][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1982.323478][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1982.329529][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1982.335667][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1982.340862][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1982.345709][T32105] do_SYSENTER_32+0x73/0x90 [ 1982.350459][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1982.356761][T32105] [ 1982.359067][T32105] Uninit was stored to memory at: [ 1982.364082][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1982.369786][T32105] __msan_chain_origin+0x50/0x90 [ 1982.374708][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1982.379813][T32105] get_compat_msghdr+0x108/0x2b0 [ 1982.384737][T32105] do_recvmmsg+0xdba/0x22c0 [ 1982.389221][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1982.394006][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1982.400073][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1982.406225][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1982.411439][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1982.416647][T32105] do_SYSENTER_32+0x73/0x90 [ 1982.421151][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1982.427455][T32105] [ 1982.429786][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1982.436460][T32105] do_recvmmsg+0xc2/0x22c0 [ 1982.440870][T32105] do_recvmmsg+0xc2/0x22c0 [ 1982.679594][T32105] not chained 7710000 origins [ 1982.684590][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1982.693280][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.703352][T32105] Call Trace: [ 1982.706671][T32105] dump_stack+0x21c/0x280 [ 1982.711057][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1982.716849][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1982.722073][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1982.727907][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1982.733998][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1982.739221][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1982.744788][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1982.750903][T32105] ? _copy_from_user+0x221/0x330 [ 1982.755880][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1982.761137][T32105] __msan_chain_origin+0x50/0x90 [ 1982.766102][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1982.771263][T32105] get_compat_msghdr+0x108/0x2b0 [ 1982.776243][T32105] do_recvmmsg+0xdba/0x22c0 [ 1982.780784][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1982.786808][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1982.792469][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1982.798407][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1982.803654][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1982.808962][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1982.813729][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1982.818499][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1982.823182][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1982.829255][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1982.836837][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1982.842349][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1982.847193][T32105] do_SYSENTER_32+0x73/0x90 [ 1982.851712][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1982.858133][T32105] RIP: 0023:0xf7f40549 [ 1982.862183][T32105] Code: Bad RIP value. [ 1982.866246][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1982.874659][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1982.882619][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1982.890706][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1982.899359][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1982.907325][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1982.915310][T32105] Uninit was stored to memory at: [ 1982.920331][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1982.926042][T32105] __msan_chain_origin+0x50/0x90 [ 1982.930992][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1982.936114][T32105] get_compat_msghdr+0x108/0x2b0 [ 1982.941075][T32105] do_recvmmsg+0xdba/0x22c0 [ 1982.945575][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1982.950249][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1982.956477][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1982.962632][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1982.967851][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1982.972733][T32105] do_SYSENTER_32+0x73/0x90 [ 1982.977254][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1982.983557][T32105] [ 1982.985867][T32105] Uninit was stored to memory at: [ 1982.990883][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1982.996951][T32105] __msan_chain_origin+0x50/0x90 [ 1983.001891][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1983.006989][T32105] get_compat_msghdr+0x108/0x2b0 [ 1983.011922][T32105] do_recvmmsg+0xdba/0x22c0 [ 1983.016417][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1983.021084][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1983.027177][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1983.033335][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1983.038544][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1983.043380][T32105] do_SYSENTER_32+0x73/0x90 [ 1983.047868][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1983.054174][T32105] [ 1983.056484][T32105] Uninit was stored to memory at: [ 1983.061850][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1983.067602][T32105] __msan_chain_origin+0x50/0x90 [ 1983.072570][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1983.077699][T32105] get_compat_msghdr+0x108/0x2b0 [ 1983.082647][T32105] do_recvmmsg+0xdba/0x22c0 [ 1983.087169][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1983.091834][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1983.097886][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1983.104037][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1983.116358][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1983.121200][T32105] do_SYSENTER_32+0x73/0x90 [ 1983.125699][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1983.132015][T32105] [ 1983.134344][T32105] Uninit was stored to memory at: [ 1983.139357][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1983.145062][T32105] __msan_chain_origin+0x50/0x90 [ 1983.150082][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1983.155187][T32105] get_compat_msghdr+0x108/0x2b0 [ 1983.160287][T32105] do_recvmmsg+0xdba/0x22c0 [ 1983.164777][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1983.169454][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1983.175508][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1983.181660][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1983.186854][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1983.191691][T32105] do_SYSENTER_32+0x73/0x90 [ 1983.196180][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1983.202488][T32105] [ 1983.204809][T32105] Uninit was stored to memory at: [ 1983.209822][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1983.215526][T32105] __msan_chain_origin+0x50/0x90 [ 1983.220449][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1983.225566][T32105] get_compat_msghdr+0x108/0x2b0 [ 1983.230489][T32105] do_recvmmsg+0xdba/0x22c0 [ 1983.234990][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1983.239651][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1983.245716][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1983.252577][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1983.257791][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1983.262650][T32105] do_SYSENTER_32+0x73/0x90 [ 1983.267157][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1983.274239][T32105] [ 1983.276553][T32105] Uninit was stored to memory at: [ 1983.282284][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1983.288027][T32105] __msan_chain_origin+0x50/0x90 [ 1983.292955][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1983.298049][T32105] get_compat_msghdr+0x108/0x2b0 [ 1983.302975][T32105] do_recvmmsg+0xdba/0x22c0 [ 1983.307494][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1983.312163][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1983.318345][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1983.324488][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1983.329681][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1983.335473][T32105] do_SYSENTER_32+0x73/0x90 [ 1983.339974][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1983.346280][T32105] [ 1983.348605][T32105] Uninit was stored to memory at: [ 1983.353684][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1983.359387][T32105] __msan_chain_origin+0x50/0x90 [ 1983.364327][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1983.369476][T32105] get_compat_msghdr+0x108/0x2b0 [ 1983.374800][T32105] do_recvmmsg+0xdba/0x22c0 [ 1983.379303][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1983.383990][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1983.390152][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1983.396307][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1983.401521][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1983.407082][T32105] do_SYSENTER_32+0x73/0x90 [ 1983.411577][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1983.417898][T32105] [ 1983.420222][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1983.426894][T32105] do_recvmmsg+0xc2/0x22c0 [ 1983.431306][T32105] do_recvmmsg+0xc2/0x22c0 [ 1983.644863][T32105] not chained 7720000 origins [ 1983.649597][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1983.658277][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.668344][T32105] Call Trace: [ 1983.671715][T32105] dump_stack+0x21c/0x280 [ 1983.676081][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1983.681876][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1983.687454][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1983.693304][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1983.699388][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1983.704609][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1983.710178][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1983.716280][T32105] ? _copy_from_user+0x221/0x330 [ 1983.721260][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1983.726481][T32105] __msan_chain_origin+0x50/0x90 [ 1983.731445][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1983.736603][T32105] get_compat_msghdr+0x108/0x2b0 [ 1983.741573][T32105] do_recvmmsg+0xdba/0x22c0 [ 1983.746631][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1983.752668][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1983.757893][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1983.763811][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1983.769037][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1983.774349][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1983.779131][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1983.783936][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1983.788656][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1983.794761][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1983.800936][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1983.806169][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1983.811050][T32105] do_SYSENTER_32+0x73/0x90 [ 1983.815675][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1983.822011][T32105] RIP: 0023:0xf7f40549 [ 1983.826081][T32105] Code: Bad RIP value. [ 1983.830182][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1983.838624][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1983.846596][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1983.854579][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1983.862570][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1983.870545][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1983.878527][T32105] Uninit was stored to memory at: [ 1983.883584][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1983.889325][T32105] __msan_chain_origin+0x50/0x90 [ 1983.894261][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1983.899372][T32105] get_compat_msghdr+0x108/0x2b0 [ 1983.904295][T32105] do_recvmmsg+0xdba/0x22c0 [ 1983.908784][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1983.913483][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1983.919552][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1983.925695][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1983.930893][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1983.935741][T32105] do_SYSENTER_32+0x73/0x90 [ 1983.940252][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1983.946554][T32105] [ 1983.948863][T32105] Uninit was stored to memory at: [ 1983.953887][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1983.959626][T32105] __msan_chain_origin+0x50/0x90 [ 1983.964569][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1983.969682][T32105] get_compat_msghdr+0x108/0x2b0 [ 1983.974605][T32105] do_recvmmsg+0xdba/0x22c0 [ 1983.979118][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1983.983789][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1983.989841][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1983.995994][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.001192][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.006028][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.010519][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.016819][T32105] [ 1984.019129][T32105] Uninit was stored to memory at: [ 1984.024180][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1984.029912][T32105] __msan_chain_origin+0x50/0x90 [ 1984.034837][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1984.039944][T32105] get_compat_msghdr+0x108/0x2b0 [ 1984.044866][T32105] do_recvmmsg+0xdba/0x22c0 [ 1984.049355][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1984.054040][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1984.060107][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1984.066256][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.071462][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.076331][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.080846][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.087164][T32105] [ 1984.089472][T32105] Uninit was stored to memory at: [ 1984.094490][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1984.100197][T32105] __msan_chain_origin+0x50/0x90 [ 1984.105120][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1984.110215][T32105] get_compat_msghdr+0x108/0x2b0 [ 1984.115157][T32105] do_recvmmsg+0xdba/0x22c0 [ 1984.119657][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1984.124338][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1984.130399][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1984.136552][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.141751][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.146587][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.151435][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.157750][T32105] [ 1984.160058][T32105] Uninit was stored to memory at: [ 1984.165070][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1984.170771][T32105] __msan_chain_origin+0x50/0x90 [ 1984.175716][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1984.180898][T32105] get_compat_msghdr+0x108/0x2b0 [ 1984.185821][T32105] do_recvmmsg+0xdba/0x22c0 [ 1984.190319][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1984.194984][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1984.201037][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1984.207193][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.212394][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.217245][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.221751][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.228053][T32105] [ 1984.230364][T32105] Uninit was stored to memory at: [ 1984.235406][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1984.241114][T32105] __msan_chain_origin+0x50/0x90 [ 1984.246039][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1984.251156][T32105] get_compat_msghdr+0x108/0x2b0 [ 1984.256080][T32105] do_recvmmsg+0xdba/0x22c0 [ 1984.260564][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1984.265229][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1984.271284][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1984.277441][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.282627][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.287466][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.291988][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.298335][T32105] [ 1984.300645][T32105] Uninit was stored to memory at: [ 1984.305658][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1984.311375][T32105] __msan_chain_origin+0x50/0x90 [ 1984.316333][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1984.321450][T32105] get_compat_msghdr+0x108/0x2b0 [ 1984.326389][T32105] do_recvmmsg+0xdba/0x22c0 [ 1984.330876][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1984.335582][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1984.341635][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1984.347775][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.355234][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.360087][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.364578][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.370878][T32105] [ 1984.373214][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1984.379890][T32105] do_recvmmsg+0xc2/0x22c0 [ 1984.384294][T32105] do_recvmmsg+0xc2/0x22c0 [ 1984.532902][T32105] not chained 7730000 origins [ 1984.537656][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1984.546335][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.556406][T32105] Call Trace: [ 1984.559722][T32105] dump_stack+0x21c/0x280 [ 1984.564081][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1984.569829][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1984.575051][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1984.580907][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1984.586126][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1984.591955][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1984.598063][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1984.603283][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1984.608859][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1984.614956][T32105] ? _copy_from_user+0x221/0x330 [ 1984.619961][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1984.625181][T32105] __msan_chain_origin+0x50/0x90 [ 1984.630178][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1984.635362][T32105] get_compat_msghdr+0x108/0x2b0 [ 1984.640340][T32105] do_recvmmsg+0xdba/0x22c0 [ 1984.644874][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1984.650891][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1984.656122][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1984.662046][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1984.667268][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1984.672581][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1984.677363][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1984.682149][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1984.686870][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1984.692973][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1984.700127][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.705366][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.710241][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.714767][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.721196][T32105] RIP: 0023:0xf7f40549 [ 1984.725269][T32105] Code: Bad RIP value. [ 1984.729341][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1984.737767][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1984.745752][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1984.753734][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1984.761720][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1984.769704][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1984.777701][T32105] Uninit was stored to memory at: [ 1984.782769][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1984.788501][T32105] __msan_chain_origin+0x50/0x90 [ 1984.793456][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1984.798597][T32105] get_compat_msghdr+0x108/0x2b0 [ 1984.803559][T32105] do_recvmmsg+0xdba/0x22c0 [ 1984.808079][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1984.812775][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1984.818866][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1984.825040][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.830254][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.835117][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.839635][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.845957][T32105] [ 1984.848286][T32105] Uninit was stored to memory at: [ 1984.853329][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1984.859050][T32105] __msan_chain_origin+0x50/0x90 [ 1984.863993][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1984.869100][T32105] get_compat_msghdr+0x108/0x2b0 [ 1984.874037][T32105] do_recvmmsg+0xdba/0x22c0 [ 1984.878523][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1984.883187][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1984.889263][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1984.896396][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.901599][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.906463][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.910961][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.917262][T32105] [ 1984.919570][T32105] Uninit was stored to memory at: [ 1984.924583][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1984.930299][T32105] __msan_chain_origin+0x50/0x90 [ 1984.935237][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1984.940390][T32105] get_compat_msghdr+0x108/0x2b0 [ 1984.945389][T32105] do_recvmmsg+0xdba/0x22c0 [ 1984.949881][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1984.954547][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1984.960630][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1984.966770][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1984.971967][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1984.976831][T32105] do_SYSENTER_32+0x73/0x90 [ 1984.981331][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1984.987647][T32105] [ 1984.989967][T32105] Uninit was stored to memory at: [ 1984.994982][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1985.000696][T32105] __msan_chain_origin+0x50/0x90 [ 1985.005623][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.010821][T32105] get_compat_msghdr+0x108/0x2b0 [ 1985.015761][T32105] do_recvmmsg+0xdba/0x22c0 [ 1985.020246][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1985.024908][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1985.030961][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1985.037115][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1985.042318][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1985.051622][T32105] do_SYSENTER_32+0x73/0x90 [ 1985.056131][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1985.062440][T32105] [ 1985.064761][T32105] Uninit was stored to memory at: [ 1985.069791][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1985.075495][T32105] __msan_chain_origin+0x50/0x90 [ 1985.080420][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.085525][T32105] get_compat_msghdr+0x108/0x2b0 [ 1985.090453][T32105] do_recvmmsg+0xdba/0x22c0 [ 1985.094941][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1985.099607][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1985.105658][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1985.111811][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1985.117036][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1985.121894][T32105] do_SYSENTER_32+0x73/0x90 [ 1985.126419][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1985.132744][T32105] [ 1985.135075][T32105] Uninit was stored to memory at: [ 1985.140123][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1985.145857][T32105] __msan_chain_origin+0x50/0x90 [ 1985.150821][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.155962][T32105] get_compat_msghdr+0x108/0x2b0 [ 1985.160916][T32105] do_recvmmsg+0xdba/0x22c0 [ 1985.165432][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1985.170122][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1985.176238][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1985.182394][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1985.187600][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1985.192450][T32105] do_SYSENTER_32+0x73/0x90 [ 1985.196963][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1985.203265][T32105] [ 1985.205572][T32105] Uninit was stored to memory at: [ 1985.210595][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1985.216299][T32105] __msan_chain_origin+0x50/0x90 [ 1985.221233][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.227283][T32105] get_compat_msghdr+0x108/0x2b0 [ 1985.232216][T32105] do_recvmmsg+0xdba/0x22c0 [ 1985.236760][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1985.241448][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1985.247515][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1985.253658][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1985.258847][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1985.263681][T32105] do_SYSENTER_32+0x73/0x90 [ 1985.268183][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1985.274499][T32105] [ 1985.276842][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1985.283604][T32105] do_recvmmsg+0xc2/0x22c0 [ 1985.288005][T32105] do_recvmmsg+0xc2/0x22c0 [ 1985.463926][T32105] not chained 7740000 origins [ 1985.468663][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1985.477335][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.487398][T32105] Call Trace: [ 1985.490724][T32105] dump_stack+0x21c/0x280 [ 1985.495087][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1985.500853][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1985.506076][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1985.511905][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1985.517986][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1985.523204][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1985.528770][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1985.534862][T32105] ? _copy_from_user+0x221/0x330 [ 1985.539855][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1985.545072][T32105] __msan_chain_origin+0x50/0x90 [ 1985.550036][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.555192][T32105] get_compat_msghdr+0x108/0x2b0 [ 1985.560161][T32105] do_recvmmsg+0xdba/0x22c0 [ 1985.564695][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1985.570710][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1985.575937][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1985.581873][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1985.587100][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1985.592416][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1985.597201][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1985.601981][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1985.606699][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1985.612795][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1985.618971][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1985.624222][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1985.629075][T32105] do_SYSENTER_32+0x73/0x90 [ 1985.633584][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1985.639906][T32105] RIP: 0023:0xf7f40549 [ 1985.643951][T32105] Code: Bad RIP value. [ 1985.647999][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1985.656393][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1985.664470][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1985.672444][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1985.680431][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1985.688390][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1985.696369][T32105] Uninit was stored to memory at: [ 1985.701401][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1985.707124][T32105] __msan_chain_origin+0x50/0x90 [ 1985.712062][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.717175][T32105] get_compat_msghdr+0x108/0x2b0 [ 1985.722098][T32105] do_recvmmsg+0xdba/0x22c0 [ 1985.726583][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1985.731247][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1985.737299][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1985.743441][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1985.748623][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1985.753489][T32105] do_SYSENTER_32+0x73/0x90 [ 1985.757995][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1985.764296][T32105] [ 1985.766612][T32105] Uninit was stored to memory at: [ 1985.771655][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1985.777383][T32105] __msan_chain_origin+0x50/0x90 [ 1985.782320][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.787440][T32105] get_compat_msghdr+0x108/0x2b0 [ 1985.792378][T32105] do_recvmmsg+0xdba/0x22c0 [ 1985.796885][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1985.801556][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1985.807611][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1985.813781][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1985.818985][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1985.823860][T32105] do_SYSENTER_32+0x73/0x90 [ 1985.828739][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1985.835058][T32105] [ 1985.837381][T32105] Uninit was stored to memory at: [ 1985.843155][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1985.848902][T32105] __msan_chain_origin+0x50/0x90 [ 1985.853847][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.858977][T32105] get_compat_msghdr+0x108/0x2b0 [ 1985.863905][T32105] do_recvmmsg+0xdba/0x22c0 [ 1985.868394][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1985.873074][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1985.879141][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1985.885284][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1985.890472][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1985.895416][T32105] do_SYSENTER_32+0x73/0x90 [ 1985.899922][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1985.906227][T32105] [ 1985.908538][T32105] Uninit was stored to memory at: [ 1985.913566][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1985.919283][T32105] __msan_chain_origin+0x50/0x90 [ 1985.924222][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.929339][T32105] get_compat_msghdr+0x108/0x2b0 [ 1985.934286][T32105] do_recvmmsg+0xdba/0x22c0 [ 1985.938790][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1985.943456][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1985.949515][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1985.955694][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1985.960882][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1985.965719][T32105] do_SYSENTER_32+0x73/0x90 [ 1985.970209][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1985.976509][T32105] [ 1985.978830][T32105] Uninit was stored to memory at: [ 1985.983892][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1985.989594][T32105] __msan_chain_origin+0x50/0x90 [ 1985.994518][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1985.999614][T32105] get_compat_msghdr+0x108/0x2b0 [ 1986.004539][T32105] do_recvmmsg+0xdba/0x22c0 [ 1986.009023][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1986.013701][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1986.019778][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1986.025930][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1986.031135][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1986.035973][T32105] do_SYSENTER_32+0x73/0x90 [ 1986.040463][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1986.046764][T32105] [ 1986.049073][T32105] Uninit was stored to memory at: [ 1986.055046][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1986.060764][T32105] __msan_chain_origin+0x50/0x90 [ 1986.065689][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1986.070784][T32105] get_compat_msghdr+0x108/0x2b0 [ 1986.075704][T32105] do_recvmmsg+0xdba/0x22c0 [ 1986.080194][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1986.084857][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1986.091883][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1986.098047][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1986.103238][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1986.108082][T32105] do_SYSENTER_32+0x73/0x90 [ 1986.112582][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1986.118911][T32105] [ 1986.121232][T32105] Uninit was stored to memory at: [ 1986.126252][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1986.131967][T32105] __msan_chain_origin+0x50/0x90 [ 1986.136907][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1986.142001][T32105] get_compat_msghdr+0x108/0x2b0 [ 1986.146932][T32105] do_recvmmsg+0xdba/0x22c0 [ 1986.151521][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1986.156213][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1986.162293][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1986.168437][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1986.173655][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1986.178504][T32105] do_SYSENTER_32+0x73/0x90 [ 1986.182998][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1986.189296][T32105] [ 1986.191611][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1986.198285][T32105] do_recvmmsg+0xc2/0x22c0 [ 1986.202725][T32105] do_recvmmsg+0xc2/0x22c0 [ 1986.398728][T32105] not chained 7750000 origins [ 1986.403477][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1986.412161][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.422233][T32105] Call Trace: [ 1986.425563][T32105] dump_stack+0x21c/0x280 [ 1986.429937][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1986.435727][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1986.440952][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1986.446788][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1986.452875][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1986.458120][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1986.463693][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1986.469791][T32105] ? _copy_from_user+0x221/0x330 [ 1986.474753][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1986.479975][T32105] __msan_chain_origin+0x50/0x90 [ 1986.484946][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1986.490111][T32105] get_compat_msghdr+0x108/0x2b0 [ 1986.495086][T32105] do_recvmmsg+0xdba/0x22c0 [ 1986.499622][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1986.505643][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1986.510869][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1986.516795][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1986.522023][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1986.527329][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1986.532111][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1986.536902][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1986.541643][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1986.548616][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1986.554796][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1986.560031][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1986.564913][T32105] do_SYSENTER_32+0x73/0x90 [ 1986.569443][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1986.575782][T32105] RIP: 0023:0xf7f40549 [ 1986.579852][T32105] Code: Bad RIP value. [ 1986.583927][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1986.592354][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1986.600340][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1986.608334][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1986.616316][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1986.624302][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1986.632302][T32105] Uninit was stored to memory at: [ 1986.637376][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1986.643108][T32105] __msan_chain_origin+0x50/0x90 [ 1986.648063][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1986.653190][T32105] get_compat_msghdr+0x108/0x2b0 [ 1986.658139][T32105] do_recvmmsg+0xdba/0x22c0 [ 1986.662658][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1986.667348][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1986.673431][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1986.679602][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1986.684816][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1986.689734][T32105] do_SYSENTER_32+0x73/0x90 [ 1986.694273][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1986.700599][T32105] [ 1986.702930][T32105] Uninit was stored to memory at: [ 1986.707970][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1986.713706][T32105] __msan_chain_origin+0x50/0x90 [ 1986.718660][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1986.723783][T32105] get_compat_msghdr+0x108/0x2b0 [ 1986.728731][T32105] do_recvmmsg+0xdba/0x22c0 [ 1986.733244][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1986.737938][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1986.744020][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1986.750185][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1986.755402][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1986.760255][T32105] do_SYSENTER_32+0x73/0x90 [ 1986.764747][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1986.774916][T32105] [ 1986.777223][T32105] Uninit was stored to memory at: [ 1986.782249][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1986.788054][T32105] __msan_chain_origin+0x50/0x90 [ 1986.793017][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1986.798132][T32105] get_compat_msghdr+0x108/0x2b0 [ 1986.803078][T32105] do_recvmmsg+0xdba/0x22c0 [ 1986.807598][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1986.812282][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1986.818352][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1986.824544][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1986.829746][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1986.834582][T32105] do_SYSENTER_32+0x73/0x90 [ 1986.839070][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1986.845400][T32105] [ 1986.847715][T32105] Uninit was stored to memory at: [ 1986.852727][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1986.858431][T32105] __msan_chain_origin+0x50/0x90 [ 1986.863383][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1986.868493][T32105] get_compat_msghdr+0x108/0x2b0 [ 1986.873416][T32105] do_recvmmsg+0xdba/0x22c0 [ 1986.877899][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1986.882584][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1986.888707][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1986.894852][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1986.900039][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1986.904874][T32105] do_SYSENTER_32+0x73/0x90 [ 1986.909364][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1986.915666][T32105] [ 1986.917975][T32105] Uninit was stored to memory at: [ 1986.923000][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1986.928719][T32105] __msan_chain_origin+0x50/0x90 [ 1986.933644][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1986.938755][T32105] get_compat_msghdr+0x108/0x2b0 [ 1986.943688][T32105] do_recvmmsg+0xdba/0x22c0 [ 1986.948208][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1986.952875][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1986.958927][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1986.965069][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1986.970263][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1986.975100][T32105] do_SYSENTER_32+0x73/0x90 [ 1986.979589][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1986.985893][T32105] [ 1986.988202][T32105] Uninit was stored to memory at: [ 1986.993228][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1986.998960][T32105] __msan_chain_origin+0x50/0x90 [ 1987.003897][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1987.009046][T32105] get_compat_msghdr+0x108/0x2b0 [ 1987.013973][T32105] do_recvmmsg+0xdba/0x22c0 [ 1987.018462][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1987.023138][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1987.029206][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1987.035370][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1987.040556][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1987.045406][T32105] do_SYSENTER_32+0x73/0x90 [ 1987.049927][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1987.056512][T32105] [ 1987.058867][T32105] Uninit was stored to memory at: [ 1987.063911][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1987.069640][T32105] __msan_chain_origin+0x50/0x90 [ 1987.074599][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1987.079722][T32105] get_compat_msghdr+0x108/0x2b0 [ 1987.085106][T32105] do_recvmmsg+0xdba/0x22c0 [ 1987.089616][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1987.094316][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1987.100398][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1987.106567][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1987.111783][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1987.116645][T32105] do_SYSENTER_32+0x73/0x90 [ 1987.121213][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1987.127536][T32105] [ 1987.129870][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1987.136556][T32105] do_recvmmsg+0xc2/0x22c0 [ 1987.140982][T32105] do_recvmmsg+0xc2/0x22c0 [ 1987.348375][T32105] not chained 7760000 origins [ 1987.353078][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1987.361768][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.371806][T32105] Call Trace: [ 1987.375097][T32105] dump_stack+0x21c/0x280 [ 1987.379424][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1987.385145][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1987.390348][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1987.395577][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1987.401481][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1987.407532][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1987.413429][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1987.418962][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1987.425021][T32105] ? _copy_from_user+0x221/0x330 [ 1987.429949][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1987.435138][T32105] __msan_chain_origin+0x50/0x90 [ 1987.440068][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1987.445195][T32105] get_compat_msghdr+0x108/0x2b0 [ 1987.450246][T32105] do_recvmmsg+0xdba/0x22c0 [ 1987.454783][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1987.460777][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1987.465992][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1987.471876][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1987.477067][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1987.482349][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1987.487096][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1987.491847][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1987.496553][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1987.502617][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1987.508778][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1987.513976][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1987.518814][T32105] do_SYSENTER_32+0x73/0x90 [ 1987.523312][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1987.529800][T32105] RIP: 0023:0xf7f40549 [ 1987.533857][T32105] Code: Bad RIP value. [ 1987.537907][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1987.546315][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1987.554285][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1987.562248][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1987.570205][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1987.578177][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1987.586144][T32105] Uninit was stored to memory at: [ 1987.591175][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1987.596881][T32105] __msan_chain_origin+0x50/0x90 [ 1987.601808][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1987.606917][T32105] get_compat_msghdr+0x108/0x2b0 [ 1987.611841][T32105] do_recvmmsg+0xdba/0x22c0 [ 1987.616347][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1987.621007][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1987.627078][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1987.633218][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1987.638400][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1987.643252][T32105] do_SYSENTER_32+0x73/0x90 [ 1987.647740][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1987.654041][T32105] [ 1987.656350][T32105] Uninit was stored to memory at: [ 1987.661373][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1987.667089][T32105] __msan_chain_origin+0x50/0x90 [ 1987.672023][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1987.677137][T32105] get_compat_msghdr+0x108/0x2b0 [ 1987.682059][T32105] do_recvmmsg+0xdba/0x22c0 [ 1987.686546][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1987.691214][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1987.697282][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1987.703527][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1987.708712][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1987.713544][T32105] do_SYSENTER_32+0x73/0x90 [ 1987.718031][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1987.724347][T32105] [ 1987.726654][T32105] Uninit was stored to memory at: [ 1987.731663][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1987.737365][T32105] __msan_chain_origin+0x50/0x90 [ 1987.742291][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1987.747401][T32105] get_compat_msghdr+0x108/0x2b0 [ 1987.752321][T32105] do_recvmmsg+0xdba/0x22c0 [ 1987.756806][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1987.761483][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1987.767545][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1987.773687][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1987.779575][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1987.784415][T32105] do_SYSENTER_32+0x73/0x90 [ 1987.788903][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1987.795204][T32105] [ 1987.798580][T32105] Uninit was stored to memory at: [ 1987.803592][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1987.809292][T32105] __msan_chain_origin+0x50/0x90 [ 1987.814252][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1987.819373][T32105] get_compat_msghdr+0x108/0x2b0 [ 1987.824294][T32105] do_recvmmsg+0xdba/0x22c0 [ 1987.828789][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1987.833462][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1987.839512][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1987.845650][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1987.850849][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1987.855684][T32105] do_SYSENTER_32+0x73/0x90 [ 1987.860192][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1987.866492][T32105] [ 1987.868805][T32105] Uninit was stored to memory at: [ 1987.873841][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1987.879544][T32105] __msan_chain_origin+0x50/0x90 [ 1987.884469][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1987.889564][T32105] get_compat_msghdr+0x108/0x2b0 [ 1987.894487][T32105] do_recvmmsg+0xdba/0x22c0 [ 1987.898982][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1987.903648][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1987.909699][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1987.915878][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1987.921066][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1987.925924][T32105] do_SYSENTER_32+0x73/0x90 [ 1987.930418][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1987.936727][T32105] [ 1987.939040][T32105] Uninit was stored to memory at: [ 1987.944067][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1987.949770][T32105] __msan_chain_origin+0x50/0x90 [ 1987.954696][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1987.959814][T32105] get_compat_msghdr+0x108/0x2b0 [ 1987.964751][T32105] do_recvmmsg+0xdba/0x22c0 [ 1987.969238][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1987.973903][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1987.979966][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1987.986108][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1987.991315][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1987.996160][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.000661][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.006974][T32105] [ 1988.009280][T32105] Uninit was stored to memory at: [ 1988.014292][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1988.020092][T32105] __msan_chain_origin+0x50/0x90 [ 1988.025020][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1988.030114][T32105] get_compat_msghdr+0x108/0x2b0 [ 1988.035042][T32105] do_recvmmsg+0xdba/0x22c0 [ 1988.039542][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1988.044226][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1988.050278][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1988.056443][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1988.061627][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1988.067421][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.071926][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.078241][T32105] [ 1988.080549][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1988.087227][T32105] do_recvmmsg+0xc2/0x22c0 [ 1988.091626][T32105] do_recvmmsg+0xc2/0x22c0 [ 1988.232169][T32105] not chained 7770000 origins [ 1988.236906][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1988.245610][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.255679][T32105] Call Trace: [ 1988.259000][T32105] dump_stack+0x21c/0x280 [ 1988.263364][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1988.269119][T32105] ? idle_cpu+0x9a/0x1d0 [ 1988.273397][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1988.278616][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1988.284447][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1988.290538][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1988.295759][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1988.301350][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1988.307447][T32105] ? _copy_from_user+0x221/0x330 [ 1988.312416][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1988.317635][T32105] __msan_chain_origin+0x50/0x90 [ 1988.322600][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1988.327756][T32105] get_compat_msghdr+0x108/0x2b0 [ 1988.332725][T32105] do_recvmmsg+0xdba/0x22c0 [ 1988.337262][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1988.343277][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1988.348501][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1988.354419][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1988.359646][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1988.364953][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1988.369747][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1988.374535][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1988.379273][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1988.385380][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1988.391555][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1988.396787][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1988.401660][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.406210][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.412548][T32105] RIP: 0023:0xf7f40549 [ 1988.416615][T32105] Code: Bad RIP value. [ 1988.420687][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1988.429112][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1988.437098][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1988.445085][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1988.453068][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1988.461047][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1988.469047][T32105] Uninit was stored to memory at: [ 1988.474096][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1988.479830][T32105] __msan_chain_origin+0x50/0x90 [ 1988.484783][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1988.489930][T32105] get_compat_msghdr+0x108/0x2b0 [ 1988.494906][T32105] do_recvmmsg+0xdba/0x22c0 [ 1988.499547][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1988.504270][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1988.510360][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1988.516529][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1988.521744][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1988.526607][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.531147][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.537471][T32105] [ 1988.539805][T32105] Uninit was stored to memory at: [ 1988.544893][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1988.550626][T32105] __msan_chain_origin+0x50/0x90 [ 1988.555602][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1988.560726][T32105] get_compat_msghdr+0x108/0x2b0 [ 1988.565676][T32105] do_recvmmsg+0xdba/0x22c0 [ 1988.570188][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1988.574878][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1988.580949][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1988.587089][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1988.592276][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1988.597110][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.601600][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.607937][T32105] [ 1988.610246][T32105] Uninit was stored to memory at: [ 1988.615270][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1988.620973][T32105] __msan_chain_origin+0x50/0x90 [ 1988.625914][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1988.631011][T32105] get_compat_msghdr+0x108/0x2b0 [ 1988.635935][T32105] do_recvmmsg+0xdba/0x22c0 [ 1988.640419][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1988.646141][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1988.652197][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1988.658338][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1988.663522][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1988.668365][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.672854][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.679155][T32105] [ 1988.681464][T32105] Uninit was stored to memory at: [ 1988.686479][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1988.692183][T32105] __msan_chain_origin+0x50/0x90 [ 1988.697121][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1988.702220][T32105] get_compat_msghdr+0x108/0x2b0 [ 1988.707160][T32105] do_recvmmsg+0xdba/0x22c0 [ 1988.711654][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1988.716316][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1988.722369][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1988.728508][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1988.733692][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1988.738523][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.743011][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.749313][T32105] [ 1988.751621][T32105] Uninit was stored to memory at: [ 1988.756641][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1988.762347][T32105] __msan_chain_origin+0x50/0x90 [ 1988.767271][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1988.772381][T32105] get_compat_msghdr+0x108/0x2b0 [ 1988.777323][T32105] do_recvmmsg+0xdba/0x22c0 [ 1988.781809][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1988.786470][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1988.792534][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1988.798672][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1988.803867][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1988.808701][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.813193][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.819495][T32105] [ 1988.821804][T32105] Uninit was stored to memory at: [ 1988.826814][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1988.832538][T32105] __msan_chain_origin+0x50/0x90 [ 1988.837464][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1988.842573][T32105] get_compat_msghdr+0x108/0x2b0 [ 1988.847510][T32105] do_recvmmsg+0xdba/0x22c0 [ 1988.851995][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1988.856676][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1988.862728][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1988.868865][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1988.874049][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1988.878895][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.883385][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.889702][T32105] [ 1988.892038][T32105] Uninit was stored to memory at: [ 1988.897068][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1988.902771][T32105] __msan_chain_origin+0x50/0x90 [ 1988.907711][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1988.912807][T32105] get_compat_msghdr+0x108/0x2b0 [ 1988.917728][T32105] do_recvmmsg+0xdba/0x22c0 [ 1988.922215][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1988.926875][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1988.932925][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1988.939060][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1988.944245][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1988.949080][T32105] do_SYSENTER_32+0x73/0x90 [ 1988.953567][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1988.959865][T32105] [ 1988.962176][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1988.968843][T32105] do_recvmmsg+0xc2/0x22c0 [ 1988.973245][T32105] do_recvmmsg+0xc2/0x22c0 [ 1989.112254][T32105] not chained 7780000 origins [ 1989.116994][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1989.125671][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.135732][T32105] Call Trace: [ 1989.139047][T32105] dump_stack+0x21c/0x280 [ 1989.143406][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1989.149174][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1989.154424][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1989.160280][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1989.166369][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1989.171587][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1989.177179][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1989.183273][T32105] ? _copy_from_user+0x221/0x330 [ 1989.188243][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1989.193461][T32105] __msan_chain_origin+0x50/0x90 [ 1989.198427][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1989.203586][T32105] get_compat_msghdr+0x108/0x2b0 [ 1989.208560][T32105] do_recvmmsg+0xdba/0x22c0 [ 1989.213095][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1989.219111][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1989.224339][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1989.230261][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1989.235490][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1989.240797][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1989.245576][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1989.250378][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1989.255124][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1989.261210][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1989.267489][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1989.272687][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1989.277529][T32105] do_SYSENTER_32+0x73/0x90 [ 1989.282039][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1989.288357][T32105] RIP: 0023:0xf7f40549 [ 1989.292401][T32105] Code: Bad RIP value. [ 1989.296451][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1989.304856][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1989.312827][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1989.320782][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1989.328739][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1989.336698][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1989.344680][T32105] Uninit was stored to memory at: [ 1989.349697][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1989.355403][T32105] __msan_chain_origin+0x50/0x90 [ 1989.360347][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1989.365464][T32105] get_compat_msghdr+0x108/0x2b0 [ 1989.370394][T32105] do_recvmmsg+0xdba/0x22c0 [ 1989.374965][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1989.379629][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1989.385696][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1989.391838][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1989.397022][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1989.401856][T32105] do_SYSENTER_32+0x73/0x90 [ 1989.406347][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1989.412646][T32105] [ 1989.414951][T32105] Uninit was stored to memory at: [ 1989.419992][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1989.427086][T32105] __msan_chain_origin+0x50/0x90 [ 1989.432011][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1989.437109][T32105] get_compat_msghdr+0x108/0x2b0 [ 1989.442044][T32105] do_recvmmsg+0xdba/0x22c0 [ 1989.446532][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1989.451191][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1989.457248][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1989.463386][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1989.468583][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1989.473421][T32105] do_SYSENTER_32+0x73/0x90 [ 1989.477910][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1989.484211][T32105] [ 1989.486519][T32105] Uninit was stored to memory at: [ 1989.491532][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1989.497233][T32105] __msan_chain_origin+0x50/0x90 [ 1989.502178][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1989.507283][T32105] get_compat_msghdr+0x108/0x2b0 [ 1989.512204][T32105] do_recvmmsg+0xdba/0x22c0 [ 1989.516690][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1989.521357][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1989.527436][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1989.533575][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1989.538771][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1989.543609][T32105] do_SYSENTER_32+0x73/0x90 [ 1989.548097][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1989.554402][T32105] [ 1989.556710][T32105] Uninit was stored to memory at: [ 1989.561722][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1989.567423][T32105] __msan_chain_origin+0x50/0x90 [ 1989.572346][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1989.577440][T32105] get_compat_msghdr+0x108/0x2b0 [ 1989.582374][T32105] do_recvmmsg+0xdba/0x22c0 [ 1989.586858][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1989.591519][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1989.597571][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1989.603723][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1989.608904][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1989.613738][T32105] do_SYSENTER_32+0x73/0x90 [ 1989.618224][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1989.624532][T32105] [ 1989.626839][T32105] Uninit was stored to memory at: [ 1989.631874][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1989.637593][T32105] __msan_chain_origin+0x50/0x90 [ 1989.642522][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1989.647620][T32105] get_compat_msghdr+0x108/0x2b0 [ 1989.652566][T32105] do_recvmmsg+0xdba/0x22c0 [ 1989.657052][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1989.661718][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1989.667781][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1989.673936][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1989.679126][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1989.683967][T32105] do_SYSENTER_32+0x73/0x90 [ 1989.688469][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1989.694782][T32105] [ 1989.697089][T32105] Uninit was stored to memory at: [ 1989.702100][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1989.707817][T32105] __msan_chain_origin+0x50/0x90 [ 1989.712740][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1989.717834][T32105] get_compat_msghdr+0x108/0x2b0 [ 1989.722768][T32105] do_recvmmsg+0xdba/0x22c0 [ 1989.727256][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1989.731933][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1989.737982][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1989.744121][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1989.749332][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1989.754169][T32105] do_SYSENTER_32+0x73/0x90 [ 1989.758664][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1989.764963][T32105] [ 1989.767270][T32105] Uninit was stored to memory at: [ 1989.772281][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1989.777982][T32105] __msan_chain_origin+0x50/0x90 [ 1989.782904][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1989.787997][T32105] get_compat_msghdr+0x108/0x2b0 [ 1989.792918][T32105] do_recvmmsg+0xdba/0x22c0 [ 1989.797404][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1989.802067][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1989.808117][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1989.814271][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1989.819473][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1989.824309][T32105] do_SYSENTER_32+0x73/0x90 [ 1989.828883][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1989.835205][T32105] [ 1989.837515][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1989.844171][T32105] do_recvmmsg+0xc2/0x22c0 [ 1989.848579][T32105] do_recvmmsg+0xc2/0x22c0 [ 1989.998121][T32105] not chained 7790000 origins [ 1990.002858][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1990.011536][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.021601][T32105] Call Trace: [ 1990.024921][T32105] dump_stack+0x21c/0x280 [ 1990.029292][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1990.035041][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1990.040284][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1990.046139][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1990.051384][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1990.057248][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1990.063330][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1990.068553][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1990.074121][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1990.080218][T32105] ? _copy_from_user+0x221/0x330 [ 1990.085183][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1990.090463][T32105] __msan_chain_origin+0x50/0x90 [ 1990.095430][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1990.100591][T32105] get_compat_msghdr+0x108/0x2b0 [ 1990.105579][T32105] do_recvmmsg+0xdba/0x22c0 [ 1990.110135][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1990.116210][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1990.121437][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1990.127364][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1990.132592][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1990.137904][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1990.142710][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1990.147500][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1990.152265][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1990.158375][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1990.164552][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1990.169786][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1990.174667][T32105] do_SYSENTER_32+0x73/0x90 [ 1990.179197][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1990.185536][T32105] RIP: 0023:0xf7f40549 [ 1990.189605][T32105] Code: Bad RIP value. [ 1990.193680][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1990.202107][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1990.210091][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1990.218074][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1990.226060][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1990.234045][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1990.242052][T32105] Uninit was stored to memory at: [ 1990.247102][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1990.252841][T32105] __msan_chain_origin+0x50/0x90 [ 1990.257793][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1990.262925][T32105] get_compat_msghdr+0x108/0x2b0 [ 1990.267875][T32105] do_recvmmsg+0xdba/0x22c0 [ 1990.272378][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1990.277042][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1990.283104][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1990.289361][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1990.294569][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1990.299405][T32105] do_SYSENTER_32+0x73/0x90 [ 1990.303896][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1990.310197][T32105] [ 1990.312507][T32105] Uninit was stored to memory at: [ 1990.317523][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1990.323246][T32105] __msan_chain_origin+0x50/0x90 [ 1990.328172][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1990.333282][T32105] get_compat_msghdr+0x108/0x2b0 [ 1990.338205][T32105] do_recvmmsg+0xdba/0x22c0 [ 1990.342691][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1990.347352][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1990.353405][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1990.359545][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1990.364729][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1990.369564][T32105] do_SYSENTER_32+0x73/0x90 [ 1990.374055][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1990.380354][T32105] [ 1990.382662][T32105] Uninit was stored to memory at: [ 1990.387688][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1990.393406][T32105] __msan_chain_origin+0x50/0x90 [ 1990.398336][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1990.403430][T32105] get_compat_msghdr+0x108/0x2b0 [ 1990.408360][T32105] do_recvmmsg+0xdba/0x22c0 [ 1990.412851][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1990.417515][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1990.423569][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1990.429707][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1990.434891][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1990.439725][T32105] do_SYSENTER_32+0x73/0x90 [ 1990.444215][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1990.450524][T32105] [ 1990.452842][T32105] Uninit was stored to memory at: [ 1990.457859][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1990.463577][T32105] __msan_chain_origin+0x50/0x90 [ 1990.468499][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1990.473593][T32105] get_compat_msghdr+0x108/0x2b0 [ 1990.478564][T32105] do_recvmmsg+0xdba/0x22c0 [ 1990.483060][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1990.487720][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1990.493772][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1990.499908][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1990.505105][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1990.509939][T32105] do_SYSENTER_32+0x73/0x90 [ 1990.514429][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1990.520729][T32105] [ 1990.523052][T32105] Uninit was stored to memory at: [ 1990.528075][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1990.533778][T32105] __msan_chain_origin+0x50/0x90 [ 1990.538700][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1990.543795][T32105] get_compat_msghdr+0x108/0x2b0 [ 1990.548738][T32105] do_recvmmsg+0xdba/0x22c0 [ 1990.553229][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1990.557895][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1990.563960][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1990.570098][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1990.575282][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1990.580116][T32105] do_SYSENTER_32+0x73/0x90 [ 1990.584616][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1990.590930][T32105] [ 1990.593237][T32105] Uninit was stored to memory at: [ 1990.598250][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1990.603952][T32105] __msan_chain_origin+0x50/0x90 [ 1990.608874][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1990.613970][T32105] get_compat_msghdr+0x108/0x2b0 [ 1990.618890][T32105] do_recvmmsg+0xdba/0x22c0 [ 1990.623383][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1990.628064][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1990.634114][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1990.640270][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1990.645453][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1990.650286][T32105] do_SYSENTER_32+0x73/0x90 [ 1990.654791][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1990.661099][T32105] [ 1990.663437][T32105] Uninit was stored to memory at: [ 1990.668452][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1990.674191][T32105] __msan_chain_origin+0x50/0x90 [ 1990.679130][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1990.684235][T32105] get_compat_msghdr+0x108/0x2b0 [ 1990.689163][T32105] do_recvmmsg+0xdba/0x22c0 [ 1990.693652][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1990.698315][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1990.704369][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1990.710508][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1990.715692][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1990.720540][T32105] do_SYSENTER_32+0x73/0x90 [ 1990.725030][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1990.731343][T32105] [ 1990.733661][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1990.740325][T32105] do_recvmmsg+0xc2/0x22c0 [ 1990.744730][T32105] do_recvmmsg+0xc2/0x22c0 [ 1990.928876][T32105] not chained 7800000 origins [ 1990.933636][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1990.942311][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.952376][T32105] Call Trace: [ 1990.955700][T32105] dump_stack+0x21c/0x280 [ 1990.960070][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1990.965819][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1990.971920][T32105] ? sched_clock_cpu+0x65/0x8e0 [ 1990.976797][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1990.982017][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1990.987841][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1990.993928][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1990.999163][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1991.004734][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1991.011089][T32105] ? _copy_from_user+0x221/0x330 [ 1991.016077][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1991.021303][T32105] __msan_chain_origin+0x50/0x90 [ 1991.026269][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1991.031431][T32105] get_compat_msghdr+0x108/0x2b0 [ 1991.036416][T32105] do_recvmmsg+0xdba/0x22c0 [ 1991.041001][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1991.047133][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1991.052376][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1991.058348][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1991.063578][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1991.068885][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1991.073659][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1991.078456][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1991.083181][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1991.089279][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1991.095480][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1991.100725][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1991.105566][T32105] do_SYSENTER_32+0x73/0x90 [ 1991.110085][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1991.116400][T32105] RIP: 0023:0xf7f40549 [ 1991.120451][T32105] Code: Bad RIP value. [ 1991.124501][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1991.132896][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1991.140850][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1991.148818][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1991.156775][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1991.164729][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1991.172699][T32105] Uninit was stored to memory at: [ 1991.177717][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1991.183432][T32105] __msan_chain_origin+0x50/0x90 [ 1991.188357][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1991.193452][T32105] get_compat_msghdr+0x108/0x2b0 [ 1991.198381][T32105] do_recvmmsg+0xdba/0x22c0 [ 1991.202911][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1991.207579][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1991.213643][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1991.219780][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1991.224967][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1991.229805][T32105] do_SYSENTER_32+0x73/0x90 [ 1991.234295][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1991.240597][T32105] [ 1991.242904][T32105] Uninit was stored to memory at: [ 1991.247930][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1991.253643][T32105] __msan_chain_origin+0x50/0x90 [ 1991.258574][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1991.263669][T32105] get_compat_msghdr+0x108/0x2b0 [ 1991.268590][T32105] do_recvmmsg+0xdba/0x22c0 [ 1991.273086][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1991.277749][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1991.283804][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1991.289945][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1991.295153][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1991.299990][T32105] do_SYSENTER_32+0x73/0x90 [ 1991.304481][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1991.310782][T32105] [ 1991.313113][T32105] Uninit was stored to memory at: [ 1991.318141][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1991.323845][T32105] __msan_chain_origin+0x50/0x90 [ 1991.328780][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1991.333875][T32105] get_compat_msghdr+0x108/0x2b0 [ 1991.338796][T32105] do_recvmmsg+0xdba/0x22c0 [ 1991.343282][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1991.347943][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1991.354007][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1991.360144][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1991.365330][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1991.370170][T32105] do_SYSENTER_32+0x73/0x90 [ 1991.374660][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1991.380961][T32105] [ 1991.383270][T32105] Uninit was stored to memory at: [ 1991.388281][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1991.393982][T32105] __msan_chain_origin+0x50/0x90 [ 1991.398903][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1991.403995][T32105] get_compat_msghdr+0x108/0x2b0 [ 1991.408914][T32105] do_recvmmsg+0xdba/0x22c0 [ 1991.413399][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1991.418075][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1991.424128][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1991.430714][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1991.435918][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1991.440752][T32105] do_SYSENTER_32+0x73/0x90 [ 1991.445243][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1991.451545][T32105] [ 1991.453872][T32105] Uninit was stored to memory at: [ 1991.458887][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1991.464589][T32105] __msan_chain_origin+0x50/0x90 [ 1991.469514][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1991.474608][T32105] get_compat_msghdr+0x108/0x2b0 [ 1991.479539][T32105] do_recvmmsg+0xdba/0x22c0 [ 1991.484037][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1991.488699][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1991.494752][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1991.500889][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1991.506089][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1991.510921][T32105] do_SYSENTER_32+0x73/0x90 [ 1991.515420][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1991.521721][T32105] [ 1991.524028][T32105] Uninit was stored to memory at: [ 1991.529036][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1991.534739][T32105] __msan_chain_origin+0x50/0x90 [ 1991.539673][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1991.544778][T32105] get_compat_msghdr+0x108/0x2b0 [ 1991.549699][T32105] do_recvmmsg+0xdba/0x22c0 [ 1991.554195][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1991.558856][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1991.564918][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1991.571056][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1991.576242][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1991.581090][T32105] do_SYSENTER_32+0x73/0x90 [ 1991.585586][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1991.591898][T32105] [ 1991.594216][T32105] Uninit was stored to memory at: [ 1991.599239][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1991.604954][T32105] __msan_chain_origin+0x50/0x90 [ 1991.609891][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1991.614995][T32105] get_compat_msghdr+0x108/0x2b0 [ 1991.619932][T32105] do_recvmmsg+0xdba/0x22c0 [ 1991.624435][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1991.629107][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1991.635159][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1991.641308][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1991.646491][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1991.651324][T32105] do_SYSENTER_32+0x73/0x90 [ 1991.655814][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1991.662116][T32105] [ 1991.664424][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1991.671082][T32105] do_recvmmsg+0xc2/0x22c0 [ 1991.675484][T32105] do_recvmmsg+0xc2/0x22c0 [ 1991.818594][T32105] not chained 7810000 origins [ 1991.823308][T32105] CPU: 0 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1991.831978][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.842027][T32105] Call Trace: [ 1991.845321][T32105] dump_stack+0x21c/0x280 [ 1991.849672][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1991.855394][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1991.860594][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1991.866393][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1991.871581][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1991.877439][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1991.883507][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1991.888694][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1991.894258][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1991.900318][T32105] ? _copy_from_user+0x221/0x330 [ 1991.905257][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1991.910451][T32105] __msan_chain_origin+0x50/0x90 [ 1991.915397][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1991.920548][T32105] get_compat_msghdr+0x108/0x2b0 [ 1991.925485][T32105] do_recvmmsg+0xdba/0x22c0 [ 1991.929985][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1991.936000][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1991.941196][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1991.947080][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1991.952273][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1991.957565][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1991.962313][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1991.967079][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1991.971765][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1991.977838][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1991.983983][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1991.989182][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1991.994024][T32105] do_SYSENTER_32+0x73/0x90 [ 1991.998520][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1992.004853][T32105] RIP: 0023:0xf7f40549 [ 1992.008918][T32105] Code: Bad RIP value. [ 1992.012981][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1992.021414][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1992.029394][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1992.037355][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1992.045315][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1992.053279][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1992.061265][T32105] Uninit was stored to memory at: [ 1992.066303][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1992.072014][T32105] __msan_chain_origin+0x50/0x90 [ 1992.076940][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1992.082036][T32105] get_compat_msghdr+0x108/0x2b0 [ 1992.086957][T32105] do_recvmmsg+0xdba/0x22c0 [ 1992.091455][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1992.096234][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1992.102285][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1992.108435][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1992.113620][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1992.118454][T32105] do_SYSENTER_32+0x73/0x90 [ 1992.122944][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1992.129245][T32105] [ 1992.131554][T32105] Uninit was stored to memory at: [ 1992.136586][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1992.142983][T32105] __msan_chain_origin+0x50/0x90 [ 1992.147929][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1992.153025][T32105] get_compat_msghdr+0x108/0x2b0 [ 1992.157949][T32105] do_recvmmsg+0xdba/0x22c0 [ 1992.162449][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1992.167113][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1992.173170][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1992.179307][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1992.184491][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1992.189323][T32105] do_SYSENTER_32+0x73/0x90 [ 1992.193827][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1992.200142][T32105] [ 1992.202464][T32105] Uninit was stored to memory at: [ 1992.207478][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1992.213181][T32105] __msan_chain_origin+0x50/0x90 [ 1992.218108][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1992.223210][T32105] get_compat_msghdr+0x108/0x2b0 [ 1992.228134][T32105] do_recvmmsg+0xdba/0x22c0 [ 1992.232620][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1992.237283][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1992.243424][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1992.249562][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1992.254748][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1992.259584][T32105] do_SYSENTER_32+0x73/0x90 [ 1992.264085][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1992.270384][T32105] [ 1992.272701][T32105] Uninit was stored to memory at: [ 1992.277714][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1992.283427][T32105] __msan_chain_origin+0x50/0x90 [ 1992.288349][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1992.293452][T32105] get_compat_msghdr+0x108/0x2b0 [ 1992.298375][T32105] do_recvmmsg+0xdba/0x22c0 [ 1992.302859][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1992.307522][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1992.313579][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1992.319725][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1992.324909][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1992.329743][T32105] do_SYSENTER_32+0x73/0x90 [ 1992.334230][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1992.340536][T32105] [ 1992.342845][T32105] Uninit was stored to memory at: [ 1992.347856][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1992.353569][T32105] __msan_chain_origin+0x50/0x90 [ 1992.358489][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1992.363582][T32105] get_compat_msghdr+0x108/0x2b0 [ 1992.368512][T32105] do_recvmmsg+0xdba/0x22c0 [ 1992.373000][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1992.377662][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1992.383711][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1992.389859][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1992.395043][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1992.399877][T32105] do_SYSENTER_32+0x73/0x90 [ 1992.404365][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1992.410664][T32105] [ 1992.412972][T32105] Uninit was stored to memory at: [ 1992.417984][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1992.423687][T32105] __msan_chain_origin+0x50/0x90 [ 1992.428611][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1992.433713][T32105] get_compat_msghdr+0x108/0x2b0 [ 1992.438637][T32105] do_recvmmsg+0xdba/0x22c0 [ 1992.443132][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1992.447798][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1992.453848][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1992.459990][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1992.465178][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1992.470009][T32105] do_SYSENTER_32+0x73/0x90 [ 1992.474497][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1992.480799][T32105] [ 1992.483121][T32105] Uninit was stored to memory at: [ 1992.488144][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1992.493862][T32105] __msan_chain_origin+0x50/0x90 [ 1992.498787][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1992.503880][T32105] get_compat_msghdr+0x108/0x2b0 [ 1992.508811][T32105] do_recvmmsg+0xdba/0x22c0 [ 1992.513299][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1992.517959][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1992.524022][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1992.530163][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1992.535354][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1992.540201][T32105] do_SYSENTER_32+0x73/0x90 [ 1992.544689][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1992.550999][T32105] [ 1992.553331][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1992.559999][T32105] do_recvmmsg+0xc2/0x22c0 [ 1992.564405][T32105] do_recvmmsg+0xc2/0x22c0 [ 1992.742795][T32105] not chained 7820000 origins [ 1992.747555][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1992.756231][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.766299][T32105] Call Trace: [ 1992.769620][T32105] dump_stack+0x21c/0x280 [ 1992.773998][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1992.779751][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1992.784974][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1992.790811][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1992.796036][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1992.801867][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1992.807979][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1992.813207][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1992.818781][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1992.824996][T32105] ? _copy_from_user+0x221/0x330 [ 1992.830219][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1992.835438][T32105] __msan_chain_origin+0x50/0x90 [ 1992.840426][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1992.845579][T32105] get_compat_msghdr+0x108/0x2b0 [ 1992.850562][T32105] do_recvmmsg+0xdba/0x22c0 [ 1992.855139][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1992.861160][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1992.866523][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1992.872446][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1992.877677][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1992.882985][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1992.887762][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1992.892550][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1992.897271][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1992.903371][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1992.909548][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1992.914779][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1992.919660][T32105] do_SYSENTER_32+0x73/0x90 [ 1992.924188][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1992.930544][T32105] RIP: 0023:0xf7f40549 [ 1992.934614][T32105] Code: Bad RIP value. [ 1992.938693][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1992.947115][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1992.955107][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1992.963092][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1992.971074][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1992.979056][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1992.987054][T32105] Uninit was stored to memory at: [ 1992.992102][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1992.997840][T32105] __msan_chain_origin+0x50/0x90 [ 1993.002818][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.008117][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.013069][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.017593][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.022291][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.028372][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.034542][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.039781][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.044645][T32105] do_SYSENTER_32+0x73/0x90 [ 1993.049171][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1993.055515][T32105] [ 1993.057867][T32105] Uninit was stored to memory at: [ 1993.062907][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1993.068641][T32105] __msan_chain_origin+0x50/0x90 [ 1993.073593][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.078718][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.083669][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.088188][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.092923][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.099003][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.105181][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.110395][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.115261][T32105] do_SYSENTER_32+0x73/0x90 [ 1993.119780][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1993.126124][T32105] [ 1993.128461][T32105] Uninit was stored to memory at: [ 1993.133505][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1993.139240][T32105] __msan_chain_origin+0x50/0x90 [ 1993.144198][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.149325][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.154280][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.158794][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.163512][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.169592][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.175760][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.180971][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.185835][T32105] do_SYSENTER_32+0x73/0x90 [ 1993.190351][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1993.196672][T32105] [ 1993.199002][T32105] Uninit was stored to memory at: [ 1993.204043][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1993.209777][T32105] __msan_chain_origin+0x50/0x90 [ 1993.214727][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.219853][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.224826][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.229340][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.234032][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.240114][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.246282][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.251500][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.256363][T32105] do_SYSENTER_32+0x73/0x90 [ 1993.260880][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1993.267205][T32105] [ 1993.269538][T32105] Uninit was stored to memory at: [ 1993.274601][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1993.280340][T32105] __msan_chain_origin+0x50/0x90 [ 1993.285299][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.290425][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.295381][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.299916][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.304630][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.310713][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.316884][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.322096][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.326960][T32105] do_SYSENTER_32+0x73/0x90 [ 1993.331475][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1993.337801][T32105] [ 1993.340131][T32105] Uninit was stored to memory at: [ 1993.345195][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1993.350927][T32105] __msan_chain_origin+0x50/0x90 [ 1993.355877][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.361003][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.365953][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.370470][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.375171][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.381252][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.387424][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.392638][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.397504][T32105] do_SYSENTER_32+0x73/0x90 [ 1993.402020][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1993.408345][T32105] [ 1993.410693][T32105] Uninit was stored to memory at: [ 1993.415732][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1993.421466][T32105] __msan_chain_origin+0x50/0x90 [ 1993.426417][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.431545][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.436497][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.441029][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.445723][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.451810][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.457979][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.463195][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.468059][T32105] do_SYSENTER_32+0x73/0x90 [ 1993.472576][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1993.478947][T32105] [ 1993.481279][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1993.487964][T32105] do_recvmmsg+0xc2/0x22c0 [ 1993.492392][T32105] do_recvmmsg+0xc2/0x22c0 [ 1993.635505][T32105] not chained 7830000 origins [ 1993.640308][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1993.648975][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1993.659051][T32105] Call Trace: [ 1993.662374][T32105] dump_stack+0x21c/0x280 [ 1993.666720][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1993.672479][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1993.677700][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1993.684227][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1993.690296][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1993.695507][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1993.701051][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1993.707136][T32105] ? _copy_from_user+0x221/0x330 [ 1993.712082][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1993.717285][T32105] __msan_chain_origin+0x50/0x90 [ 1993.722217][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.727334][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.732290][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.736803][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1993.742785][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1993.747992][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1993.753896][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1993.759135][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1993.764435][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1993.769204][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1993.773977][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.778892][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.784987][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.791166][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.796471][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.801323][T32105] do_SYSENTER_32+0x73/0x90 [ 1993.805841][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1993.812176][T32105] RIP: 0023:0xf7f40549 [ 1993.816249][T32105] Code: Bad RIP value. [ 1993.820318][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1993.828725][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1993.836704][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1993.844702][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1993.853282][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1993.861255][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1993.869231][T32105] Uninit was stored to memory at: [ 1993.874269][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1993.879992][T32105] __msan_chain_origin+0x50/0x90 [ 1993.885102][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.890203][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.895144][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.899666][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.904352][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.910407][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.916555][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.921763][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.926966][T32105] do_SYSENTER_32+0x73/0x90 [ 1993.931481][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1993.937807][T32105] [ 1993.940121][T32105] Uninit was stored to memory at: [ 1993.945157][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1993.950915][T32105] __msan_chain_origin+0x50/0x90 [ 1993.955971][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1993.961071][T32105] get_compat_msghdr+0x108/0x2b0 [ 1993.966012][T32105] do_recvmmsg+0xdba/0x22c0 [ 1993.970511][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1993.975182][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1993.981762][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1993.988094][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1993.993330][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1993.998193][T32105] do_SYSENTER_32+0x73/0x90 [ 1994.002699][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1994.009640][T32105] [ 1994.011961][T32105] Uninit was stored to memory at: [ 1994.017084][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1994.022791][T32105] __msan_chain_origin+0x50/0x90 [ 1994.027731][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1994.032864][T32105] get_compat_msghdr+0x108/0x2b0 [ 1994.037817][T32105] do_recvmmsg+0xdba/0x22c0 [ 1994.042307][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1994.046974][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1994.053044][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1994.059215][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1994.064426][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1994.069261][T32105] do_SYSENTER_32+0x73/0x90 [ 1994.073876][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1994.080196][T32105] [ 1994.082507][T32105] Uninit was stored to memory at: [ 1994.087547][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1994.093264][T32105] __msan_chain_origin+0x50/0x90 [ 1994.098204][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1994.103341][T32105] get_compat_msghdr+0x108/0x2b0 [ 1994.108269][T32105] do_recvmmsg+0xdba/0x22c0 [ 1994.113738][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1994.118438][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1994.124524][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1994.130691][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1994.135886][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1994.140737][T32105] do_SYSENTER_32+0x73/0x90 [ 1994.145232][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1994.151554][T32105] [ 1994.153902][T32105] Uninit was stored to memory at: [ 1994.159368][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1994.165095][T32105] __msan_chain_origin+0x50/0x90 [ 1994.170026][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1994.175137][T32105] get_compat_msghdr+0x108/0x2b0 [ 1994.180616][T32105] do_recvmmsg+0xdba/0x22c0 [ 1994.185104][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1994.189794][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1994.195867][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1994.202016][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1994.207220][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1994.212070][T32105] do_SYSENTER_32+0x73/0x90 [ 1994.216594][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1994.223083][T32105] [ 1994.225420][T32105] Uninit was stored to memory at: [ 1994.230470][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1994.236191][T32105] __msan_chain_origin+0x50/0x90 [ 1994.241125][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1994.246240][T32105] get_compat_msghdr+0x108/0x2b0 [ 1994.251252][T32105] do_recvmmsg+0xdba/0x22c0 [ 1994.255748][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1994.260425][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1994.266494][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1994.272649][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1994.277866][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1994.282713][T32105] do_SYSENTER_32+0x73/0x90 [ 1994.287206][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1994.293517][T32105] [ 1994.295846][T32105] Uninit was stored to memory at: [ 1994.300865][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1994.306570][T32105] __msan_chain_origin+0x50/0x90 [ 1994.311534][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1994.316649][T32105] get_compat_msghdr+0x108/0x2b0 [ 1994.321587][T32105] do_recvmmsg+0xdba/0x22c0 [ 1994.326089][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1994.330873][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1994.336947][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1994.343131][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1994.348323][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1994.353176][T32105] do_SYSENTER_32+0x73/0x90 [ 1994.357683][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1994.363988][T32105] [ 1994.366299][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1994.372995][T32105] do_recvmmsg+0xc2/0x22c0 [ 1994.377418][T32105] do_recvmmsg+0xc2/0x22c0 [ 1994.606220][T32105] not chained 7840000 origins [ 1994.610966][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1994.619646][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.629713][T32105] Call Trace: [ 1994.633036][T32105] dump_stack+0x21c/0x280 [ 1994.637403][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1994.643180][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1994.648400][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1994.654236][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1994.660324][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1994.665547][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1994.671136][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1994.677236][T32105] ? _copy_from_user+0x221/0x330 [ 1994.682375][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1994.687602][T32105] __msan_chain_origin+0x50/0x90 [ 1994.692569][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1994.697733][T32105] get_compat_msghdr+0x108/0x2b0 [ 1994.702729][T32105] do_recvmmsg+0xdba/0x22c0 [ 1994.707266][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1994.713289][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1994.718513][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1994.724435][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1994.729690][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1994.734997][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1994.739777][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1994.745040][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1994.749803][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1994.756452][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1994.762648][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1994.768778][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1994.773655][T32105] do_SYSENTER_32+0x73/0x90 [ 1994.778184][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1994.784545][T32105] RIP: 0023:0xf7f40549 [ 1994.788614][T32105] Code: Bad RIP value. [ 1994.792695][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1994.801145][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1994.809139][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1994.817130][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.825129][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1994.833112][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.841743][T32105] Uninit was stored to memory at: [ 1994.846789][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1994.852529][T32105] __msan_chain_origin+0x50/0x90 [ 1994.857484][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1994.862620][T32105] get_compat_msghdr+0x108/0x2b0 [ 1994.867577][T32105] do_recvmmsg+0xdba/0x22c0 [ 1994.872101][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1994.876830][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1994.882900][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1994.889061][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1994.894258][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1994.899126][T32105] do_SYSENTER_32+0x73/0x90 [ 1994.903615][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1994.909930][T32105] [ 1994.912255][T32105] Uninit was stored to memory at: [ 1994.917310][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1994.923029][T32105] __msan_chain_origin+0x50/0x90 [ 1994.927969][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1994.933078][T32105] get_compat_msghdr+0x108/0x2b0 [ 1994.938016][T32105] do_recvmmsg+0xdba/0x22c0 [ 1994.942517][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1994.947200][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1994.953268][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1994.959430][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1994.964620][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1994.969466][T32105] do_SYSENTER_32+0x73/0x90 [ 1994.973999][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1994.980322][T32105] [ 1994.982648][T32105] Uninit was stored to memory at: [ 1994.987662][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1994.993384][T32105] __msan_chain_origin+0x50/0x90 [ 1994.999024][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1995.004925][T32105] get_compat_msghdr+0x108/0x2b0 [ 1995.009858][T32105] do_recvmmsg+0xdba/0x22c0 [ 1995.014364][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1995.019046][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1995.025101][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1995.031281][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1995.036477][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1995.042354][T32105] do_SYSENTER_32+0x73/0x90 [ 1995.046969][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1995.053294][T32105] [ 1995.055628][T32105] Uninit was stored to memory at: [ 1995.060645][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1995.066346][T32105] __msan_chain_origin+0x50/0x90 [ 1995.071269][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1995.076366][T32105] get_compat_msghdr+0x108/0x2b0 [ 1995.081288][T32105] do_recvmmsg+0xdba/0x22c0 [ 1995.085784][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1995.090454][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1995.096519][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1995.102770][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1995.107985][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1995.112833][T32105] do_SYSENTER_32+0x73/0x90 [ 1995.117353][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1995.123659][T32105] [ 1995.127541][T32105] Uninit was stored to memory at: [ 1995.132564][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1995.138290][T32105] __msan_chain_origin+0x50/0x90 [ 1995.143216][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1995.148330][T32105] get_compat_msghdr+0x108/0x2b0 [ 1995.153264][T32105] do_recvmmsg+0xdba/0x22c0 [ 1995.157772][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1995.162447][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1995.168496][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1995.174662][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1995.179867][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1995.184717][T32105] do_SYSENTER_32+0x73/0x90 [ 1995.189208][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1995.195510][T32105] [ 1995.197834][T32105] Uninit was stored to memory at: [ 1995.202872][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1995.208685][T32105] __msan_chain_origin+0x50/0x90 [ 1995.213639][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1995.218764][T32105] get_compat_msghdr+0x108/0x2b0 [ 1995.223707][T32105] do_recvmmsg+0xdba/0x22c0 [ 1995.228194][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1995.232872][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1995.239469][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1995.245610][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1995.250809][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1995.255657][T32105] do_SYSENTER_32+0x73/0x90 [ 1995.260147][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1995.266447][T32105] [ 1995.268757][T32105] Uninit was stored to memory at: [ 1995.273867][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1995.279586][T32105] __msan_chain_origin+0x50/0x90 [ 1995.284515][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1995.289613][T32105] get_compat_msghdr+0x108/0x2b0 [ 1995.294625][T32105] do_recvmmsg+0xdba/0x22c0 [ 1995.299111][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1995.303787][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1995.309910][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1995.316076][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1995.321294][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1995.326147][T32105] do_SYSENTER_32+0x73/0x90 [ 1995.330651][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1995.336953][T32105] [ 1995.339279][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1995.345937][T32105] do_recvmmsg+0xc2/0x22c0 [ 1995.350346][T32105] do_recvmmsg+0xc2/0x22c0 [ 1995.559472][T32105] not chained 7850000 origins [ 1995.564205][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1995.573493][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1995.583549][T32105] Call Trace: [ 1995.586849][T32105] dump_stack+0x21c/0x280 [ 1995.591187][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1995.596934][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1995.602163][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1995.608013][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1995.614616][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1995.619816][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1995.625360][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1995.631942][T32105] ? _copy_from_user+0x221/0x330 [ 1995.636871][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1995.642750][T32105] __msan_chain_origin+0x50/0x90 [ 1995.647700][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1995.652854][T32105] get_compat_msghdr+0x108/0x2b0 [ 1995.658460][T32105] do_recvmmsg+0xdba/0x22c0 [ 1995.662973][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1995.668954][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1995.674146][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1995.680028][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1995.685245][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1995.690520][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1995.695297][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1995.700124][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1995.704806][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1995.710868][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1995.717805][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1995.723025][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1995.727876][T32105] do_SYSENTER_32+0x73/0x90 [ 1995.732379][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1995.738713][T32105] RIP: 0023:0xf7f40549 [ 1995.742761][T32105] Code: Bad RIP value. [ 1995.746820][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1995.755217][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1995.763181][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1995.771165][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1995.779122][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1995.787102][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1995.795102][T32105] Uninit was stored to memory at: [ 1995.800150][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1995.806695][T32105] __msan_chain_origin+0x50/0x90 [ 1995.811664][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1995.816845][T32105] get_compat_msghdr+0x108/0x2b0 [ 1995.821816][T32105] do_recvmmsg+0xdba/0x22c0 [ 1995.826501][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1995.831170][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1995.837239][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1995.843397][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1995.848627][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1995.853496][T32105] do_SYSENTER_32+0x73/0x90 [ 1995.858023][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1995.864340][T32105] [ 1995.866648][T32105] Uninit was stored to memory at: [ 1995.871675][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1995.877393][T32105] __msan_chain_origin+0x50/0x90 [ 1995.882343][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1995.887439][T32105] get_compat_msghdr+0x108/0x2b0 [ 1995.892361][T32105] do_recvmmsg+0xdba/0x22c0 [ 1995.896862][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1995.901572][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1995.907639][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1995.913797][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1995.919687][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1995.924540][T32105] do_SYSENTER_32+0x73/0x90 [ 1995.929043][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1995.935372][T32105] [ 1995.937688][T32105] Uninit was stored to memory at: [ 1995.942709][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1995.948510][T32105] __msan_chain_origin+0x50/0x90 [ 1995.953444][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1995.958561][T32105] get_compat_msghdr+0x108/0x2b0 [ 1995.963488][T32105] do_recvmmsg+0xdba/0x22c0 [ 1995.968843][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1995.973522][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1995.979763][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1995.985932][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1995.991865][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1995.996699][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.001190][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.007617][T32105] [ 1996.009947][T32105] Uninit was stored to memory at: [ 1996.014989][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1996.020721][T32105] __msan_chain_origin+0x50/0x90 [ 1996.025674][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1996.030897][T32105] get_compat_msghdr+0x108/0x2b0 [ 1996.035836][T32105] do_recvmmsg+0xdba/0x22c0 [ 1996.042080][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1996.049438][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1996.055498][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1996.061654][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1996.066839][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1996.071709][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.076210][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.082699][T32105] [ 1996.085006][T32105] Uninit was stored to memory at: [ 1996.090017][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1996.095823][T32105] __msan_chain_origin+0x50/0x90 [ 1996.100764][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1996.105873][T32105] get_compat_msghdr+0x108/0x2b0 [ 1996.110793][T32105] do_recvmmsg+0xdba/0x22c0 [ 1996.116235][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1996.121351][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1996.128002][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1996.134350][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1996.139775][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1996.144795][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.149282][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.155617][T32105] [ 1996.157943][T32105] Uninit was stored to memory at: [ 1996.162959][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1996.168661][T32105] __msan_chain_origin+0x50/0x90 [ 1996.173586][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1996.178694][T32105] get_compat_msghdr+0x108/0x2b0 [ 1996.183617][T32105] do_recvmmsg+0xdba/0x22c0 [ 1996.188111][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1996.192772][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1996.198819][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1996.204974][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1996.210194][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1996.215029][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.219519][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.225828][T32105] [ 1996.228134][T32105] Uninit was stored to memory at: [ 1996.233144][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1996.239290][T32105] __msan_chain_origin+0x50/0x90 [ 1996.244221][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1996.249314][T32105] get_compat_msghdr+0x108/0x2b0 [ 1996.254237][T32105] do_recvmmsg+0xdba/0x22c0 [ 1996.258722][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1996.263393][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1996.269469][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1996.275701][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1996.280894][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1996.285727][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.290227][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.296526][T32105] [ 1996.298849][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1996.305513][T32105] do_recvmmsg+0xc2/0x22c0 [ 1996.309924][T32105] do_recvmmsg+0xc2/0x22c0 [ 1996.473515][T32105] not chained 7860000 origins [ 1996.478258][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1996.486959][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.497027][T32105] Call Trace: [ 1996.500354][T32105] dump_stack+0x21c/0x280 [ 1996.504720][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1996.510487][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1996.515728][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1996.521558][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1996.527641][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1996.532883][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1996.538455][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1996.544550][T32105] ? _copy_from_user+0x221/0x330 [ 1996.549535][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1996.554754][T32105] __msan_chain_origin+0x50/0x90 [ 1996.559717][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1996.564875][T32105] get_compat_msghdr+0x108/0x2b0 [ 1996.569850][T32105] do_recvmmsg+0xdba/0x22c0 [ 1996.574386][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1996.580427][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1996.585653][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1996.591569][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1996.596796][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1996.602102][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1996.606877][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1996.611661][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1996.616384][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1996.622492][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1996.628688][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1996.633919][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1996.638792][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.643320][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.649656][T32105] RIP: 0023:0xf7f40549 [ 1996.653723][T32105] Code: Bad RIP value. [ 1996.657792][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1996.666219][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1996.674200][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1996.682178][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1996.690165][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1996.698164][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1996.706167][T32105] Uninit was stored to memory at: [ 1996.711220][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1996.716972][T32105] __msan_chain_origin+0x50/0x90 [ 1996.721928][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1996.727052][T32105] get_compat_msghdr+0x108/0x2b0 [ 1996.731999][T32105] do_recvmmsg+0xdba/0x22c0 [ 1996.736511][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1996.741201][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1996.747305][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1996.753474][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1996.758691][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1996.763554][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.768072][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.774488][T32105] [ 1996.776822][T32105] Uninit was stored to memory at: [ 1996.781867][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1996.787598][T32105] __msan_chain_origin+0x50/0x90 [ 1996.792555][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1996.797677][T32105] get_compat_msghdr+0x108/0x2b0 [ 1996.802632][T32105] do_recvmmsg+0xdba/0x22c0 [ 1996.807180][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1996.811884][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1996.817965][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1996.824132][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1996.829346][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1996.834303][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.838820][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.845143][T32105] [ 1996.847475][T32105] Uninit was stored to memory at: [ 1996.852520][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1996.858249][T32105] __msan_chain_origin+0x50/0x90 [ 1996.863201][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1996.868324][T32105] get_compat_msghdr+0x108/0x2b0 [ 1996.873293][T32105] do_recvmmsg+0xdba/0x22c0 [ 1996.877808][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1996.882501][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1996.888591][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1996.894759][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1996.899988][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1996.904853][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.909372][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.915692][T32105] [ 1996.918024][T32105] Uninit was stored to memory at: [ 1996.923071][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1996.928811][T32105] __msan_chain_origin+0x50/0x90 [ 1996.933767][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1996.938897][T32105] get_compat_msghdr+0x108/0x2b0 [ 1996.943865][T32105] do_recvmmsg+0xdba/0x22c0 [ 1996.948384][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1996.953123][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1996.959220][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1996.965406][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1996.970612][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1996.975468][T32105] do_SYSENTER_32+0x73/0x90 [ 1996.979986][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1996.986292][T32105] [ 1996.988604][T32105] Uninit was stored to memory at: [ 1996.993659][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1996.999387][T32105] __msan_chain_origin+0x50/0x90 [ 1997.004327][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.009450][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.014394][T32105] do_recvmmsg+0xdba/0x22c0 [ 1997.018914][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1997.023617][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1997.029704][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1997.035865][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1997.041067][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1997.045917][T32105] do_SYSENTER_32+0x73/0x90 [ 1997.050429][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1997.056742][T32105] [ 1997.059051][T32105] Uninit was stored to memory at: [ 1997.064065][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1997.069782][T32105] __msan_chain_origin+0x50/0x90 [ 1997.074753][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.079848][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.084781][T32105] do_recvmmsg+0xdba/0x22c0 [ 1997.089268][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1997.093948][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1997.100024][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1997.106170][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1997.111355][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1997.116196][T32105] do_SYSENTER_32+0x73/0x90 [ 1997.120738][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1997.127040][T32105] [ 1997.129368][T32105] Uninit was stored to memory at: [ 1997.134424][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1997.140152][T32105] __msan_chain_origin+0x50/0x90 [ 1997.145095][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.150197][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.155125][T32105] do_recvmmsg+0xdba/0x22c0 [ 1997.159626][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1997.164294][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1997.170361][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1997.176522][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1997.181726][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1997.186568][T32105] do_SYSENTER_32+0x73/0x90 [ 1997.191057][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1997.197369][T32105] [ 1997.199707][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1997.206373][T32105] do_recvmmsg+0xc2/0x22c0 [ 1997.210791][T32105] do_recvmmsg+0xc2/0x22c0 [ 1997.385732][T32105] not chained 7870000 origins [ 1997.390478][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1997.399145][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.409201][T32105] Call Trace: [ 1997.412515][T32105] dump_stack+0x21c/0x280 [ 1997.416885][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1997.422642][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1997.427848][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1997.433668][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1997.439744][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1997.444953][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1997.450513][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1997.456602][T32105] ? _copy_from_user+0x221/0x330 [ 1997.461568][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1997.466789][T32105] __msan_chain_origin+0x50/0x90 [ 1997.471743][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.476887][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.481829][T32105] do_recvmmsg+0xdba/0x22c0 [ 1997.486351][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1997.492363][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1997.497576][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1997.503495][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1997.509390][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1997.514675][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1997.519449][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1997.524245][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1997.528950][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1997.535025][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1997.541187][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1997.546389][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1997.551246][T32105] do_SYSENTER_32+0x73/0x90 [ 1997.555776][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1997.562116][T32105] RIP: 0023:0xf7f40549 [ 1997.566179][T32105] Code: Bad RIP value. [ 1997.570229][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1997.578631][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1997.586607][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1997.594595][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1997.602568][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1997.611063][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1997.619057][T32105] Uninit was stored to memory at: [ 1997.624087][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1997.629813][T32105] __msan_chain_origin+0x50/0x90 [ 1997.634770][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.639894][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.644831][T32105] do_recvmmsg+0xdba/0x22c0 [ 1997.649773][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1997.654454][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1997.660525][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1997.666685][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1997.671891][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1997.676769][T32105] do_SYSENTER_32+0x73/0x90 [ 1997.681280][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1997.687594][T32105] [ 1997.689932][T32105] Uninit was stored to memory at: [ 1997.694983][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1997.700749][T32105] __msan_chain_origin+0x50/0x90 [ 1997.705698][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.710816][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.715760][T32105] do_recvmmsg+0xdba/0x22c0 [ 1997.720259][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1997.724932][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1997.731008][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1997.737174][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1997.742381][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1997.747260][T32105] do_SYSENTER_32+0x73/0x90 [ 1997.751757][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1997.758065][T32105] [ 1997.760642][T32105] Uninit was stored to memory at: [ 1997.765696][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1997.771460][T32105] __msan_chain_origin+0x50/0x90 [ 1997.776408][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.781527][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.786491][T32105] do_recvmmsg+0xdba/0x22c0 [ 1997.791005][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1997.795678][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1997.801887][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1997.808062][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1997.813268][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1997.818809][T32105] do_SYSENTER_32+0x73/0x90 [ 1997.823311][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1997.829626][T32105] [ 1997.831955][T32105] Uninit was stored to memory at: [ 1997.836989][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1997.842707][T32105] __msan_chain_origin+0x50/0x90 [ 1997.847651][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.852766][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.857738][T32105] do_recvmmsg+0xdba/0x22c0 [ 1997.862244][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1997.866920][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1997.872985][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1997.879127][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1997.884332][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1997.889185][T32105] do_SYSENTER_32+0x73/0x90 [ 1997.893711][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1997.900030][T32105] [ 1997.902354][T32105] Uninit was stored to memory at: [ 1997.907394][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1997.913100][T32105] __msan_chain_origin+0x50/0x90 [ 1997.918024][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.923141][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.928107][T32105] do_recvmmsg+0xdba/0x22c0 [ 1997.932623][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1997.937288][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1997.943360][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1997.949560][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1997.954789][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1997.959639][T32105] do_SYSENTER_32+0x73/0x90 [ 1997.964149][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1997.970467][T32105] [ 1997.972792][T32105] Uninit was stored to memory at: [ 1997.977833][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1997.983557][T32105] __msan_chain_origin+0x50/0x90 [ 1997.988501][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1997.993637][T32105] get_compat_msghdr+0x108/0x2b0 [ 1997.998575][T32105] do_recvmmsg+0xdba/0x22c0 [ 1998.003093][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1998.007781][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1998.013838][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1998.019986][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1998.025215][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1998.030074][T32105] do_SYSENTER_32+0x73/0x90 [ 1998.034582][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1998.040900][T32105] [ 1998.043216][T32105] Uninit was stored to memory at: [ 1998.048243][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1998.053947][T32105] __msan_chain_origin+0x50/0x90 [ 1998.058890][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1998.064018][T32105] get_compat_msghdr+0x108/0x2b0 [ 1998.068970][T32105] do_recvmmsg+0xdba/0x22c0 [ 1998.073484][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1998.078170][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1998.084237][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1998.090391][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1998.095591][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1998.101410][T32105] do_SYSENTER_32+0x73/0x90 [ 1998.105921][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1998.112319][T32105] [ 1998.114647][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1998.121324][T32105] do_recvmmsg+0xc2/0x22c0 [ 1998.125728][T32105] do_recvmmsg+0xc2/0x22c0 [ 1998.366407][T32105] not chained 7880000 origins [ 1998.371159][T32105] CPU: 1 PID: 32105 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1998.379881][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1998.389948][T32105] Call Trace: [ 1998.393272][T32105] dump_stack+0x21c/0x280 [ 1998.397634][T32105] kmsan_internal_chain_origin+0x6f/0x130 [ 1998.403410][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1998.408675][T32105] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1998.414505][T32105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1998.420594][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1998.425841][T32105] ? kmsan_set_origin_checked+0x95/0xf0 [ 1998.431585][T32105] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1998.437682][T32105] ? _copy_from_user+0x221/0x330 [ 1998.442651][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1998.447898][T32105] __msan_chain_origin+0x50/0x90 [ 1998.452864][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1998.458025][T32105] get_compat_msghdr+0x108/0x2b0 [ 1998.463000][T32105] do_recvmmsg+0xdba/0x22c0 [ 1998.467538][T32105] ? sysvec_call_function_single+0x11e/0x130 [ 1998.473577][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1998.478806][T32105] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1998.484770][T32105] ? kmsan_get_metadata+0x116/0x180 [ 1998.490002][T32105] ? __msan_poison_alloca+0xf0/0x120 [ 1998.495309][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1998.500093][T32105] ? __sys_recvmmsg+0xbb/0x610 [ 1998.504966][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1998.509692][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1998.515804][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1998.522000][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1998.527242][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1998.532135][T32105] do_SYSENTER_32+0x73/0x90 [ 1998.536667][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1998.543008][T32105] RIP: 0023:0xf7f40549 [ 1998.547076][T32105] Code: Bad RIP value. [ 1998.551166][T32105] RSP: 002b:00000000f553a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1998.559594][T32105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1998.567580][T32105] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1998.575566][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1998.583552][T32105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1998.591533][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1998.599537][T32105] Uninit was stored to memory at: [ 1998.604591][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1998.610347][T32105] __msan_chain_origin+0x50/0x90 [ 1998.615302][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1998.620430][T32105] get_compat_msghdr+0x108/0x2b0 [ 1998.625392][T32105] do_recvmmsg+0xdba/0x22c0 [ 1998.629910][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1998.634607][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1998.640694][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1998.646865][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1998.652084][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1998.656938][T32105] do_SYSENTER_32+0x73/0x90 [ 1998.661443][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1998.667784][T32105] [ 1998.670107][T32105] Uninit was stored to memory at: [ 1998.675122][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1998.680827][T32105] __msan_chain_origin+0x50/0x90 [ 1998.685756][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1998.691291][T32105] get_compat_msghdr+0x108/0x2b0 [ 1998.696214][T32105] do_recvmmsg+0xdba/0x22c0 [ 1998.700698][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1998.705381][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1998.711433][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1998.717587][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1998.722788][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1998.727657][T32105] do_SYSENTER_32+0x73/0x90 [ 1998.732176][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1998.738492][T32105] [ 1998.740802][T32105] Uninit was stored to memory at: [ 1998.745852][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1998.751569][T32105] __msan_chain_origin+0x50/0x90 [ 1998.756511][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1998.761623][T32105] get_compat_msghdr+0x108/0x2b0 [ 1998.766637][T32105] do_recvmmsg+0xdba/0x22c0 [ 1998.771132][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1998.775841][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1998.781910][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1998.791889][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1998.797088][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1998.804714][T32105] do_SYSENTER_32+0x73/0x90 [ 1998.809285][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1998.815610][T32105] [ 1998.817918][T32105] Uninit was stored to memory at: [ 1998.822934][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1998.828640][T32105] __msan_chain_origin+0x50/0x90 [ 1998.833578][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1998.838709][T32105] get_compat_msghdr+0x108/0x2b0 [ 1998.843646][T32105] do_recvmmsg+0xdba/0x22c0 [ 1998.848150][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1998.852830][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1998.858897][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1998.865053][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1998.870240][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1998.875075][T32105] do_SYSENTER_32+0x73/0x90 [ 1998.879573][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1998.885886][T32105] [ 1998.888193][T32105] Uninit was stored to memory at: [ 1998.893220][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1998.898938][T32105] __msan_chain_origin+0x50/0x90 [ 1998.903865][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1998.908957][T32105] get_compat_msghdr+0x108/0x2b0 [ 1998.913889][T32105] do_recvmmsg+0xdba/0x22c0 [ 1998.918390][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1998.923057][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1998.929106][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1998.935253][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1998.940451][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1998.945292][T32105] do_SYSENTER_32+0x73/0x90 [ 1998.949782][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1998.956089][T32105] [ 1998.958464][T32105] Uninit was stored to memory at: [ 1998.963499][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1998.969231][T32105] __msan_chain_origin+0x50/0x90 [ 1998.974184][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1998.979294][T32105] get_compat_msghdr+0x108/0x2b0 [ 1998.984233][T32105] do_recvmmsg+0xdba/0x22c0 [ 1998.988729][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1998.993407][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1998.999481][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1999.005656][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1999.010842][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1999.015694][T32105] do_SYSENTER_32+0x73/0x90 [ 1999.020182][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1999.026502][T32105] [ 1999.028812][T32105] Uninit was stored to memory at: [ 1999.033841][T32105] kmsan_internal_chain_origin+0xad/0x130 [ 1999.039557][T32105] __msan_chain_origin+0x50/0x90 [ 1999.044482][T32105] __get_compat_msghdr+0x6db/0x9d0 [ 1999.049575][T32105] get_compat_msghdr+0x108/0x2b0 [ 1999.054504][T32105] do_recvmmsg+0xdba/0x22c0 [ 1999.059005][T32105] __sys_recvmmsg+0x5dd/0x610 [ 1999.063680][T32105] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1999.069785][T32105] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1999.075929][T32105] __do_fast_syscall_32+0x2af/0x480 [ 1999.081121][T32105] do_fast_syscall_32+0x6b/0xd0 [ 1999.085955][T32105] do_SYSENTER_32+0x73/0x90 [ 1999.090448][T32105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1999.096749][T32105] [ 1999.099056][T32105] Local variable ----msg_sys@do_recvmmsg created at: [ 1999.105731][T32105] do_recvmmsg+0xc2/0x22c0 [ 1999.110132][T32105] do_recvmmsg+0xc2/0x22c0 09:34:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:34:49 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:34:49 executing program 5: 09:34:49 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050011000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:34:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e03000023000535d25a80648c63940d0424fc60100003400a000200051a82c137153e670402018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 09:34:49 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050012000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) [ 2000.099089][T32157] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2000.107535][T32157] netlink: 262 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2000.117198][T32157] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 09:34:50 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000480)={@random="dfb8190eb3ba", @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\n)q', 0x8, 0x0, 0x0, @private2, @dev, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x67}]}}}}}, 0x0) 09:34:50 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050013000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:50 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:34:50 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 09:34:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:34:50 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050060000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:50 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:34:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 2001.030448][ T28] audit: type=1326 audit(1599903290.883:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32174 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fc3549 code=0x0 09:34:51 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005006f000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 2001.769153][ T28] audit: type=1326 audit(1599903291.623:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32174 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fc3549 code=0x0 09:34:51 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x84, 0x21, 0x0, &(0x7f0000000140)) 09:34:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:34:51 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:34:51 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000030000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:51 executing program 5: r0 = getpid() ptrace$peeksig(0x4209, r0, 0x0, 0x0) 09:34:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:34:52 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000050000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:34:52 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:34:52 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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", 0xe00) fallocate(r1, 0x0, 0x0, 0x10000) sendfile(r1, r2, 0x0, 0x14000) [ 2002.704762][ T28] audit: type=1800 audit(1599903292.563:43): pid=32211 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15928 res=0 [ 2002.725996][ T28] audit: type=1804 audit(1599903292.563:44): pid=32211 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir238408016/syzkaller.2QDv6P/554/file0" dev="sda1" ino=15928 res=1 09:34:52 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:34:52 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000060000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 2003.020100][ T28] audit: type=1800 audit(1599903292.873:45): pid=32214 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=15928 res=0 09:34:53 executing program 1: r0 = syz_io_uring_setup(0x1b0c, &(0x7f0000000080), &(0x7f0000d76000/0x1000)=nil, &(0x7f0000b54000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72b8, 0x0, 0x0, 0x0, 0x0) 09:34:53 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000001b80)={'ip_vti0\x00', 0x0, 0x0, 0x3d2af40599b16caa, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty}}}}) 09:34:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:34:53 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000090000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:53 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:34:53 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:34:53 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:34:53 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500000a0000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$snapshot(r0, &(0x7f0000000040)=""/143, 0x8f) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 09:34:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:34:54 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500000b0000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:34:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 09:34:55 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:34:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:34:55 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500000c0000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:34:55 executing program 5: r0 = socket(0x2, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f0000000080)={0x0, 0x6}}, 0x0) 09:34:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x16, r0, r2, 0x0, 0x0) 09:34:55 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500000f0000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:34:56 executing program 5: setuid(0xee01) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) 09:34:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:34:56 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000110000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 2007.519233][ T28] audit: type=1400 audit(1599903297.373:46): avc: denied { set_context_mgr } for pid=32296 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 09:34:57 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x802, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd(0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}], 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RSTATu(r2, 0x0, 0xfb) fcntl$dupfd(r1, 0x0, r1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @mcast1, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 09:34:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:34:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:34:57 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:34:57 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000120000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:57 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x4, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_emit_ethernet(0x300cce, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) syz_open_procfs(0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46802) io_setup(0xc32f, &(0x7f0000001140)=0x0) io_submit(r4, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x784, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc000}]) 09:34:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:34:57 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000130000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:34:58 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500003f0000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:34:58 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:34:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:00 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0x4020565b, &(0x7f0000000180)={0xff000000, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8aa44f5c"}, 0x0, 0x0, @planes=0x0}) 09:35:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:35:00 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050088470000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:00 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x3e48, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3e34, 0x3, 0x0, 0x1, [{0x1204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "355e5a0297b3fbb1ee6a04301becdc6b1517e5e3d91381a70a53336dd5a84696162764f81f80142d4346adb3d1"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x61, 0x1, "99863b9fb4fe233152cec857764534134e3ce7648c72093bc798e651c49a5aa50286c415f9b16ffc3fc59ace5c56a581fe3a206dfdef937bd3f7d0c5b0c7d44233e02c33215828eef19d9a7c739e1a71cf806e238e6cae75bbf68324b7"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "0a07cc892991e06cd0da7a8df9c5bd809410c4ca90d613b8a8147d5c8602a4d14ae240063b977687784dc3a80cdfb6def239aaa3dd"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1001, 0x1, "6dc906ee908f5f0728adf6d8be00d983d8156829c3a93770e9e822b23cbd98548fa5dd497bdc1c16f8b1574102c3153ef94b9437e9f9927e1ea1ff5a03f9361d30c43e1311bd087de2734bea48c8b3e0b7a0395c6f563c976c1b4ac1a13de9942dd10227df3c6359d0129c116da8d2c10bca0020e8364bc90f5dc9e786980ecee192a9e4d24c5b75bd20998203118b83a014e59a50548bb21c94cba11916543ffca30f53c19e7242d85ae8b11ad955696fe1c84a2c07e0651c1bd6d2ca51c9a67d42fe8972e5eae2a00bb0ec53c855338fc2b33595072fa4858093736be67ee5cc8a4b5a6e044b30bee3dacf70d7d55e0667ede98a5ad51dee2c44f4f5513b7111ff7017421e9df23d0e66c4e447726f2dca6808e007dcdaea40270aaf40c058c8825168132f1d983f5c2831a59bcd26ced70476cfb77bd0151ce2a90fcb1b8b842e5fe274d15d1ef028ddc7f3ea4bfab78a69409ad5d3012e52708aafe39710365d2238968fc43a8600961db87102995c011336070c7084b1f8008eae0724465f253bd0a05659da36bed384dd0abcc58c02b83319d45bdeabfc850eb74d241d5165520ea44b02187477757e348d2c1f942bd768e641b53bdf2725c3afb475cd67e031ab2c4d83ca0a5354de798e75cb220f0714de8b920927ee1e31058d53337d8009ae29ebf2377c63e7887fdff695cd14a6d31ecc5359cf0e4dab6ea0dbc423b877cff7ad9d73ffa3bb11932e5b423d9b2902f8aeef776dcb082c8165db8233f85b3f1c99b0f15846c62aaf808ba399cfbee8de9ba76a5ce86807e7848d06d071b5ab7b1b5f7756bbe51d7d39dbddd7b5c9983c8bc9e1b89f45e62cbae6b9c4bd79f9d0f9ddfcaf252a2e8a89666f259f87e5e1cd00ad22a9b2d3da50c5923e394a8f1324236835093a0252c4461e92f45d25ca33d4787b3518d67e1328ec89cb15caf121513d51f6e7ced66b2ddbbd8bc2c165e1e36f34be3817bc1d2259f09753b7a4499a854d7c38926b82758097680019e277169327d33adb76875c575ecbf4da6039005029c07122429110f447631a5a03b49e0fcc4704019ed41ff339dc676772900f2cb3b8c06884c3094aa5eb02a4d6d712b98ed67586625cd4d9843c249be7e2918f821db85cf4d6986a45e72df0464c3d3571ebb932102d66572ee5292ded2acb664e36b8d9dfbde3946ebe5b3f0650394ea49ab0da6eb8abeddd48cd0bb7d97e07f01f632a2d9e2913842cc65a00add4c73cd62fd96f4be12ff177079a14fe66400a4bdb586fa876946a42b01a468ff5388417b249ce6e4fca4cf1d6d2f62751c5a059fd0cc0ca0ee077f30cafa0c4228090c18096b16d7b6439dfc35851291b6a6fcbdcf188beb67e5b03ce5ac314ce4c7d4e0ae79a90c9d5a6d338a1703c524d51fb5717e5334ce95a16ff0daebc17ab4cafcf296f66ae625a9a71bea606cd128742c5388ecbf3b31e10444ea827cbee53d97c701cfa90712bd7972ef15aa11c0ce2b4ee14d828f7e98c50022779ecb97ea14ebee9480a16eb4e9656dc3983b9985974391207c2336cd4b847f941849b759ce12679ba81064de58d52eca3c438f160ac4308cafbe888064ac5b9a750ecd2f84be48f09215d0bdf6ce3f3b09f2c0e0300df5afbef7afeb05fe636bc69c2287252c3dcfcaf47061fed2b36a6064bf46a353083a94b277f158a125ebf090a64e64029c6a784d29df0ecdda97dc0d2a5bbf00b2018dda103c0c4a42651d73d13219eb7414e51f5b7a593e17fe77d0355b8515cabe0ae5bc904f803d445b4cd836ad1d62b0d20d6b570e1f02e00fa69a2337da6959d426ced1c5cd69f897501d0c0598156b124e34b71c8e99843ad186b8c6be8f2927a27d92cf079a608edc9ef47be2b76713086c2dd66b13b27c9167af0c3914ffa3d517a05a89a0b7a484f019d5a130d31fafc10d33b2bd7086d3754350466e9830527f14f8a6429ff5d520e67e70ea0dda37f25aca231a84a36d3098b5540bb2874664439d0b32f30e61018c736110cc0531d5f28dd4c110122b7f9e14c3180bf911d06615ff47c6ff4abe6a544a4e82f96286f4c2142ecdcc6f92ac7106ec7f0bb08ff644aed8a7d45fda9d59460560148cf180b5bd9a38c91e188ee790d5fb8e2bb3768c0d970751f021b07011fcafbaafb4da0d7ee2b260a5527807792a139ed97c9c12081b551818a2a22ca2f1410017b4bb075adffbaf3e4ccadb1e1400d307fe719cc8bfe668f2b6775740578bb6721fb12cd61b5f8553fc4475fa35ec35b8a9dc1ea156d53d316c5491a32f7fd5c98ecebc44ea0d88dcf91c6d6e9de01e5190c5522e453a3f7c110d0a621607af430fe887e7cbecb1b6a34c355fbe7c8d48c0b75aec9ab9403b57458493e88c53f5fb5db90acecb3ea7e6a8d014818cff4bff1186fd68e959c9754db07c5ec02c5df0394b44c9840a8e60b93e84d6fe3181e2fba12dae93dc999f275ab9f77e94dc7e86b483d9d29aa5300a9b4ef5b457c477f78f191950c4eb954dbb2560a0e00e9db2593f67f77c1146c513885c916232a11d8b335ad34306e3b67a93e39250c8b88b69ec9fe762427451b2dea48f1b1053c10559bfed6f807066a64f3309202e8257bfa4c737b6ae5e3b8d220e627173126f315a2a66ac6d8a9951e8ab17f9911fa7eb1191567bd764943efafd03a6949b548c164d815d95e8fea482c9b03e5308bd43eba2800bc624e7cb898b3dba2cd5cef022584ac940bb1f3eecc6d174f976a7227eaf174aa7da638e99839c617b9655d759b273503eb1cc5a00f7a13cb04932d4447dffbcdf0cd5941f148f12ab72e8df8de4bf592b74df2a2892b13633dcbd2ebba252010d22447b667c8eb4f9200b81e786e833ac31b37bbc1b0af63dc6f5cc50392b7c4479aa00d32159c2b064b3a190f657422a7b9b1f520b45f3f9276321a9f12742d5a364cd5712ef52e0bf0d3a329474473cdfcda7b84ec90c0ca1097eaf9278fb881f68078c3ab134e3a50e5546bc1927d85ede5d79d1c912264d1fde240c8b0c0ee592028bfc49f1663d31aff676b96f1e898147203c0d1b6b5fa2af5c11fcbfaa50b41cc8939cb83cd4a58603c21b72b23d8c28231541afd9de02a50b81dd9eb585310964d8fc9a1ec585587943ec58b70c7c06be196955e03a42aac1574b40494b2f2af7f105f2dd859b51197ead7bddec1737aa26b3c222940ac09b6a96760c77aa3ee895200a06fb2799c964f29d6852b6d863f2c074a046d91650b2b5902a5501c7fd490a46e54f4df3353992f4f1922a266f934db7b2e9aff86b24f0d5b2e3aa2fe6404cc7e6f4c890d03dcdb0d20d0e2ec4d5a7bbc167739114153f1977477b1c9d7ca68d7404202287f0676490c5da8d683d1acfc295fe3dcd4e282a7ead6256aa0b33fbb333d84339075f81ffb56035f62e4d02b9f1a72e4fedd8fbd3703c6ffbaf571d7f2c650c6f39818d200106f34fd1b3cb3a94844a4d3b88b9c0fdbaae368586c4b2491f5ccf722e4b294ee719b48cc29da9c6a0a6f9dfcfb3bd4b3b66f3b1b00df134b668e842b4d12947ffa1f4a82f690b8ad97703998a63a0c5b7a0c2d7e0e0a7f1843d28e633d7312ba696f5ca0a1970ae2da648e0bf9a67cbd1506bf0543c0b062e22c8c402e441e6af02bf9e85ca902813926134e66201c726493aeeb5e93aabc93ded2a8e2c4a821dd2b2a77680a4a4138433224edae31678649b438aa0dbcce96b17fc58db4b2ab32737a872d44469c0705bb37cabee4ac6bdaec20fcb3476479f34149052a609bcc461f00f2d2326657244504a25355482c748d5713dc1c72be9b2b42505cba117f4aeb4ab53ce78ab049ed835099c9808932e0106976048f9db0666636108af4b347fffa7ad11d21733694a8e2d30bb516305fe8e38dadb76a71da34eee3d4e926ba2f0dd1b6da3d4028ae4f25f31dd64c84591606c3da100dd491f1c4ca12cfddab60487babeaa969fbf0684e96c62351b6ff25428eef5f696ea353966a6d3d29f69c55634665da0ef8a14145c3f611196f3c59153402b793d011ea0c45e18fec06ffeb0d88d357c549873908a93f4c0f667e2a17d7bdc4decf935bfa72da9fedc675bc83af7b4d34a1ddd8c83205ce2b07041ef5813925d05a9feb86e4e18612650fc79c2b4e47eb2c434fa43365039a304aec7f611fbb735b012111c324383479cf09132954558300ee1dd9c5d36cdb57145422f57eeab3304f64cd5cf771570d048d0d93d6e86b7193e90d20e7af5f54fb3eb5ae0ea25403ab8dc8de290e147915301382a71f9c684e6af225e79ae9e1afa1e4c47c2b0334c0c62225048d0a4a9f95caaf0b1fb5e18c1c8ed3a6bdb24603cd949f3ce076611dd41ae38437be99832800dff8f9ce076a9e8f6b1d24ad64119d357792cc689323ee53da43f13064f232e9cde19a28cd69b82418a05c9b19850df68ca0172953acc5ac1b64a8bc6c071fc122b997286cda8c027730efa5accbb97d33115d7ac0e20c1de79df5fa25ef60c7f803724ce3a9060ba356461ac1506e5a46e7e126bdd425144d55422fc5a8b3f6c9a357ffa57feecf432aab81e9b27a16d0f8ea0603c67cd28c7106df55de4298689285ef6e671a23b109624c432d014055f750dbadbb98136ebcb3f57e54ee10e71465c69a074ee11e275583a2d0280d2ff466bbc8aa9fc7ac3766e5d42b65ddcc4e2d75f1b81160eba68dbfeb5a090cce3ea8cf1b48c22d18c75905b1407e9eb1c1af160b0900a726999b681e8166b5ae96626aa93b5982635543dedd71e35310b4d3f416e348e271b090758a7af9f6c3deef6eb9be2d8236e77e07fc6200b9e1360a1219bbfb5c733eb55fbb924aadb1822305cbc071f770b459e542022e00e20e20551b0127d013f9b665377e0495cab097435dcdb64bed32424d1aad5df62e9dad2badf6dccf539965a8adefc08ab48d822692017a61a9e31771f7a53629911d2c8be4db8eaed75a9c0ee374d4c4d18e62df8f59eefe04381cc75b0ac92c8e9de27c1ffd60cc787157e43f6bd45030a388c1c8bb191105565bcf53abe35261857866a9e584649b1912bdfa284e5b5cb6015dc456856e575dfd9bc478689ce2b6aa1a620456e314c726ae00eff62dac5316b3c298d1dfd134ae147e4e95e95dce33cbb9132e7e69fe3e248d7e56a7cf3bb808b5dd056ee6febbda152044a802e293d1fbd54d0128f499c50bc9f6a0f6c2ac6b30eed6dee0aafd4fe3e39229a6aa502b706a4fdc149561bef7df37a593ae76b3790a550114052a1b586967d27764d864ac16f2ceec49ce5cd228a3ea9745c701d873a3f733fc55d1b0cdb1e3444bb6ee011f04f2929888c43cb0226a3bef98ed6ef0f9764bcd55c2fd443bccc744db4589956591544a53de17ca650f146fc39f504411ad21bba01c8df2629df487a22e41b68b5c3bb1d74581cec2b44a4b8c7b2c26b710d6a2f9689c3cc1b6ede1a670c4df793777b9a940c8c5b8bd94339257d6fb18c49fc8bca502ef00de42121ab0ba107aef0627b850e4a65cc5dec389fb7558dbdbb5d0e41350f35c22f5fdb0aac0c63df11474bea7351e2c12e7abb2af19be0366c882f94b058a67a762a6d9b8743096fc787c131bd1499841c00915fa67c9ecb33158733f30da32475a66a38d96c2ecc7b2a47ab49551602bb067d39123da9829b66a51cabed3e28520a157e1bcd3cf1636e95c1163fa7a6265685181af721674a6ec7ecbc76bb105785c45b4ef95c00d6f02338c4002d9067c5e8838133fe052c397986e8b75c1"}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x2a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "6e7f90d4d9fa620e4438cf6771dbc11d502f5c93b573d847cd0d87cf93b2b0c133393ff4f624210cb593c2ecfe4f2a0908aa75abfe1144b4ef0fbebe4497d512991d8bf6a8d4516a54c3344f050ecd9c91f36a972f5f58d975c372e43a2548629d58141bbc31c262e164af5334adabcdc8185f7f0d2233436a6445615032205cc035ad21183cc8d820964aca2e4433c9c37298d0b0a106b61e16fff666e4e94cd71339ef747433b823f91499f7305d311da778dabe7c4308d6d25659980a9318ee302a1bfd"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "8e45488415b5af00ece20dc0f3528d6ad7a443169c35e7fb5cd57e208582b865902a2cd44f0a898d37e52a22b0fa8bd9b281827d47da4fdd466caa577da681ab0b4a798d4eb2dd56d385b83ee6e60fe72fc438ed5cb23d79b480fa31567f46b4515b31beaebb0f961f962ab363132269a954974b94dfca30129a8f891e53db225da1238f4d75affb1eb9276059a98aab8108ca6132fe0e91444fc8518fad2d0acc2c70b0251f886d8a"}]}, {0x14c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xd5, 0x6, 0x1, 0x0, "124ebae04729122e277506c8cb0d9a1c919b8c5cb431d232f9ed41d0fe9e6a391fb6c6f10d3ed3d85d6a398ce7a60a286c5bc5f9f795e7cd4b7c7985f6723d31847668e3cccf43e55f65c6b575bf6b43d4826f5aa8bf75533edd58580634536a0fb574d3d5a7c12f8205937311d7319f0f584ed7bbd6c8c9cdc150bd66ba71bc8346d8fef1be90d42f64f1ff7f0561d1e0c98019afe843b17fd1b8f91d228cd8b9e1c9f00e4e57eba84c15674af067b152fc4d07b92513f865128f6bfda3b233b72c4cbd754f127193b35d42c03fdedb74"}, @NFTA_SET_ELEM_KEY={0x128c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VALUE={0xe1, 0x1, "ff1f5f8751f1ba2684c317e0013e6e653732fccdeb522daa29ddcb36fe523f52a9af27f7c26fbe4f7ed5abfd7af81ee2d9541efcbf99efbe8f368acef49a38b85f51e4049f64bd6b93458a40064888bc032190a855b8a16a70a50003f93050ac33827b06e6132d5c2212c86538bf2a982ace0dd6bc599fa5efbb3f4ca540cb91828bbe5f0ec3844b84a4abcb88fa02c15f583edd39cbad49b746d2ee39bacc0356627de5b6a2c8f05ec1cbe8d2c8259cb0c756fa53535609063cd6bf16daa5d4f58fc53318c16501882570da71bfd446da48cb323b6fcfe2c13461557f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x55, 0x1, "b2b633beea86c65f735348f02bc508c36134c6e94ee6e03511e441d88c5d1bad5b1a01baf28fc798961bd476b8135f4687b8683467782a5770816f4444b1442bb29307e4c2aa8ee86c0ae005aaa4888a42"}]}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xed, 0x1, "9b3bd2c36f648568afbbafb4e7414835f429a79c5b6e99033588c2b28f1f45f420621943c7ea3fe8ed2cb05913cc63c887826160fc0fa740aa2768c18835f74438ef41d1f11279eeda2284ef2ed10f2edf14045d3405235cbc576558b5892333682e718077ed5ba4cf018bffbedc6d6da4e0621c927db5713daf481bb536162be6a27c3fb5115806d83fec7812c97eb75bc2f0be016f08bf93790595d73beb409f407e7a70aa232da80ef99093264349fb7fa2928ea31c8aa6c6f8a7fdda43f3342959829b22ccf53ba3921a2643aadb28c7cab8d6556c2bba46d81b560b2b4f8ea4728b2bc05493fd"}]}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "1307bb9a9d58b0d8b0fb6d39a1612136504e41108088ca58e68dcfae692fe6822deba06fe648deb54f1ef14dc94d8b16ade6a9765353351bdda502e4e664c86b950a71e72f72b96c0a4101522faa1842e1957a64f36c18eab2ddfbdab8312fb3de62c1a347"}, @NFTA_SET_ELEM_DATA={0xb0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "dce27296fc394d454e574b2a9473089d5e35158ed6d1da07a79fa914b045dec6df0af082272edf16db861b799e768b1bd63d51e4f49e2047e2fe5eacb925b63f171325af1d6191195cddd587b814a84a9b1d7f5bc52c4f7dac0aa96fd3ea83b969254e07fbbf904cc02328450e9b5a287f"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x420, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "d620872845ace561e072a1a0098d140baebd3e993906e9ef15c37aa5d9ed9d5531845aa2bee953175020139be055ac890e51e06162840aed8f20e71f0d95e5920d838c40f804c0fa638bc1c556fcc9d79fd44d18ce9e2896b51b8d1e71572f62e72b1c3429d0c67cfd74116b34498c5993396fb9646d5b5d48854b62c6e7ea9e3dcf2e210a75ac54850789325944b063d75b13765d4a8f890509b05fd6"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x35c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "b589e60664f2dc3f5b417dc07df543a8808013ff154914146be31e1388cf9457a3eb2649d92eb7730197dc81bd6545bd4208f1c5e15926f64bb1cdd245dec721bd2ca3fc81fd85aac4a0bbfd04b935e4b2061c6afd"}, @NFTA_DATA_VALUE={0xc1, 0x1, "887ea836383b54a0c935c7f353f6339239a156a97ed18151b58def351b82ee26c55c9b15b456ee2e8f7a436768cb53a7f77219983bf7f67d716e5e06bc0d6a67c45518390c98efa0ba10cc5f3904f9f5db358ab05c94669b51692c47431b28fcc502c6d12d9220641b10df83f0803b1b2d2e173f522fdbec893323254a73ac62da69efd919d4aa4f3922e029101c756be390a4c722f4bffa5258ba6513b6ba5d4936abe107f39bbf1e22708615784302c6f9cb2a27fda5e903216ba827"}, @NFTA_DATA_VALUE={0xd9, 0x1, "281224f719838603a2cea67ca396ac4ab168bb32ff94809c28d9e203051cdeca313771c6bb0668ec52d65f59ea75dffbc5dd026aed9a6d3f4595eaa20f66680ca8db53518facfd3c7ffedd6c118cf917999dd8abb7c5e8da7203c878cbaeda35bfc98511aff17af7e0d8ebef9cfb6f63cc258c5626305ff5863caad65a5a45b47021c644ed6bd3182742b4f31de951a9c6fd5dfc175852ab9ccbe1e07a725adf7e9fdb47a6ef33d175756dad29d921e4a3f06bf4a416e9344f560f3e9d5f8d026592e5dab30cbefab5feb435c51f3c9e251bb17f3b"}, @NFTA_DATA_VALUE={0xf1, 0x1, "ec4d90190d004b5fba90e60ce84dde0d3fdd2288cd992083cbd59ede3c0652d2234e9c595a6022cd1159b9a66c2c98943c8101506d4d8cba850c21a1aa590fcd97bce1fd72193dbc2feefd33feb37f4123e8e7337bb3feb9cee9dc163085fb12b1a0ffc5022acfdea948dcebffc38b2e4b90e77b0cbd246765fa901c4f08cd72c3b4781f6073cc8f1eb85cc45c2f690e350eb7cbfaa023ac07faa347c925b7b2115a27135f4e221101ead11bf28bf6e0bb0c60621e6d9822211750f1a0e6ca329b54218cfd66c792c40aab49de2e04823623f12b60cf546837dc0ab6bf9b3ac9483e8e78d2d27fe6370c7eb487"}]}]}, {0xf6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0xf5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf55, 0x1, "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"}]}]}]}]}], {0x14}}, 0x3ec4}}, 0x0) 09:35:00 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:35:00 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050088480000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x48040, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0xa]}, 0x3}, 0x20) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x81, 0x4, 0x0, 0x6, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x406, 0x2, 0x1, 0x2, 0x8, 0x2, 0x81}, r2, 0xd, r1, 0x5) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x8, 0x1, 0x20, 0x3, 0x0, 0x200, 0x200, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x10208, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3ff}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x80, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000380)=0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000300)="05ab5f008500"/20, 0x14, 0x48040, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0xa]}, 0x3, 0x2}, 0x20) 09:35:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:35:00 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050065580000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x4a0c0}], 0x1) dup3(r0, r1, 0x0) 09:35:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = clone3(0x0, 0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x40001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x8, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4d87, 0x6}, 0x9200, 0x9, 0x3, 0x1, 0x6c4, 0x3, 0x200}, r1, 0xf, r0, 0xe) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 09:35:01 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:35:01 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000600000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="22b20ba640ce58ed77b0d9b8f556dcd4ecb721e7b69f27888a27d637f4389acdf44b6247dac5e42a30d99f82eacdceae586c2f48b6374b453d64aa65e4e27ea1b7dabccfa40b8c3bfde12d744b891396bf0f8ee26e0540c64420030e06a8deb42cbc3abb1337790e8cdf82d6d3de8e70076be27958063ca7087375a1a9467b8b6c0318cd69e27ae9b3949325d4f5a5fdb6e0f03f953c81042624f4d0a5dd7f0e06ce61987a1316f722", 0xa9}, {&(0x7f0000000000)="68bd7638257d609aba60f1abdcd05e52c4b8accdb17f", 0x16}, {&(0x7f0000000200)="b3", 0x1}], 0x3}, 0x0) 09:35:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:35:02 executing program 5: r0 = socket(0xa, 0x3, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000000)=@ethtool_ts_info={0x34}}) 09:35:02 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050058650000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040), 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f0000002540)={0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0xee01]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x3, 0x3c8, [0x20000100, 0x0, 0x0, 0x20000328, 0x20000358], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYBLOB, @ANYBLOB, @ANYRES16=r0]}, 0x68) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) 09:35:02 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500006f0000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:35:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:04 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:04 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = clone3(0x0, 0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x40001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x8, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4d87, 0x6}, 0x9200, 0x9, 0x3, 0x1, 0x6c4, 0x3, 0x200}, r1, 0xf, r0, 0xe) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 09:35:04 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000810000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:35:04 executing program 5: pidfd_open(0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x7fff, 0x141241) 09:35:05 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050047880000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:05 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_opts(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)=0x700) 09:35:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:35:05 executing program 5: syz_mount_image$vfat(&(0x7f00000007c0)='vfat\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000a00)={[{@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@uni_xlate='uni_xlate=1'}, {@uni_xlate='uni_xlate=1'}], [{@obj_role={'obj_role', 0x3d, '}/g^\\${Y\x00'}}, {@measure='measure'}, {@obj_role={'obj_role', 0x3d, '!*&'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x0, 0x66, 0x66, 0x34, 0x35, 0x39], 0x2d, [0x39, 0x39, 0x65, 0x36], 0x2d, [0x66, 0x63, 0x65, 0x63], 0x2d, [0x30, 0x5b, 0x63, 0x66], 0x2d, [0x34, 0xf, 0x35, 0x63, 0x62, 0x66, 0x61, 0x32]}}}, {@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, '/\x00'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@pcr={'pcr', 0x3d, 0x7}}, {@appraise_type='appraise_type=imasig'}]}) 09:35:05 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050048880000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:05 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fstatfs(r0, &(0x7f0000000000)=""/73) 09:35:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:35:06 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000400300000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:06 executing program 5: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x2, 0x105000) 09:35:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:07 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:07 executing program 5: r0 = socket(0xa, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 09:35:07 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000034000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:35:07 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) bpf$MAP_CREATE(0x6, 0x0, 0x0) 09:35:07 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000001000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:07 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:08 executing program 1: r0 = socket(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x2753}}}, 0x24}}, 0x0) 09:35:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:35:08 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000002000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:08 executing program 5: socket(0x0, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x8}, 0x0, 0x0, 0x81, 0x0, 0x0, 0xbc4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:35:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:35:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:10 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4008001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4cc85, 0x0) 09:35:10 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000003000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:10 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, 0x0) 09:35:10 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000004000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:10 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @remote, 'hsr0\x00'}}, 0x1e) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 09:35:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x1c}, [@call={0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:35:10 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x2) dup3(0xffffffffffffffff, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 2020.950056][T32527] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2020.956746][T32527] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2021.026293][T32532] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2021.033015][T32532] hsr_slave_1: hsr_addr_subst_dest: Unknown node 09:35:11 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000005000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:11 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x4601, &(0x7f0000000080)) 09:35:11 executing program 3: r0 = socket(0xa, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000040)={'bond_slave_1\x00', @ifru_ivalue}) 09:35:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:13 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000006000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000000040)=""/62, 0x3e) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) open(0x0, 0x0, 0x0) 09:35:13 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002200)=[{&(0x7f00000022c0)=""/4104, 0x1008}], 0x1, 0x0, 0x0) 09:35:13 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x2) dup3(0xffffffffffffffff, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4008001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4cc85, 0x0) [ 2024.039595][T32567] input: syz1 as /devices/virtual/input/input5 09:35:14 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 09:35:14 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000008000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:14 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) getresuid(0x0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) [ 2024.499373][T32582] vivid-000: ================= START STATUS ================= [ 2024.507435][T32582] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 2024.514291][T32582] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 2024.521230][T32582] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 2024.528737][T32582] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 2024.536183][T32582] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 2024.542562][T32582] v4l2-ctrls: vivid-000: Show Border: false [ 2024.548718][T32582] v4l2-ctrls: vivid-000: Show Square: false [ 2024.554945][T32582] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 2024.562435][T32582] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 2024.569638][T32582] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 2024.577035][T32582] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 2024.584216][T32582] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 2024.590725][T32582] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 2024.597749][T32582] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 2024.604847][T32582] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 2024.611623][T32582] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 2024.618725][T32582] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 2024.624614][T32582] v4l2-ctrls: vivid-000: Transfer Function: Default [ 2024.631293][T32582] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 2024.637893][T32582] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 2024.644510][T32582] v4l2-ctrls: vivid-000: Quantization: Default [ 2024.650778][T32582] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 2024.657866][T32582] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 2024.664615][T32582] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2024.673560][T32582] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 2024.680666][T32582] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2024.689164][T32582] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 2024.695571][T32582] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 2024.702940][T32582] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 2024.710477][T32582] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 2024.717445][T32582] tpg source WxH: 640x360 (Y'CbCr) [ 2024.722736][T32582] tpg field: 1 [ 2024.726169][T32582] tpg crop: 640x360@0x0 [ 2024.730380][T32582] tpg compose: 640x360@0x0 [ 2024.735042][T32582] tpg colorspace: 8 [ 2024.738941][T32582] tpg transfer function: 0/0 [ 2024.743705][T32582] tpg Y'CbCr encoding: 0/0 [ 2024.748177][T32582] tpg quantization: 0/0 [ 2024.752509][T32582] tpg RGB range: 0/2 [ 2024.756460][T32582] vivid-000: ================== END STATUS ================== 09:35:14 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x2) dup3(0xffffffffffffffff, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:14 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 09:35:15 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000009000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 2025.419402][T32596] vivid-000: ================= START STATUS ================= [ 2025.427493][T32596] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 2025.434417][T32596] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 2025.441405][T32596] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 2025.448717][T32596] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 2025.455875][T32596] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 2025.461971][T32596] v4l2-ctrls: vivid-000: Show Border: false [ 2025.467980][T32596] v4l2-ctrls: vivid-000: Show Square: false [ 2025.474114][T32596] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 2025.481514][T32596] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 2025.488917][T32596] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 2025.496211][T32596] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 2025.503452][T32596] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 2025.509981][T32596] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 2025.517075][T32596] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 2025.524249][T32596] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 2025.530997][T32596] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 2025.538220][T32596] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 2025.544130][T32596] v4l2-ctrls: vivid-000: Transfer Function: Default [ 2025.550830][T32596] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 2025.557531][T32596] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 2025.564385][T32596] v4l2-ctrls: vivid-000: Quantization: Default [ 2025.570610][T32596] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 2025.577840][T32596] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 2025.584626][T32596] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2025.593632][T32596] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 2025.600735][T32596] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2025.609321][T32596] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 2025.615783][T32596] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 2025.623305][T32596] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 2025.630843][T32596] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 2025.637698][T32596] tpg source WxH: 640x360 (Y'CbCr) [ 2025.642993][T32596] tpg field: 1 [ 2025.646459][T32596] tpg crop: 640x360@0x0 [ 2025.650704][T32596] tpg compose: 640x360@0x0 [ 2025.655289][T32596] tpg colorspace: 8 [ 2025.659152][T32596] tpg transfer function: 0/0 [ 2025.663932][T32596] tpg Y'CbCr encoding: 0/0 [ 2025.668399][T32596] tpg quantization: 0/0 [ 2025.672712][T32596] tpg RGB range: 0/2 [ 2025.676698][T32596] vivid-000: ================== END STATUS ================== 09:35:17 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005000000000a000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:17 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 09:35:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:17 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:17 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@remote}, 0x14) 09:35:17 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 2027.425869][T32618] vivid-000: ================= START STATUS ================= [ 2027.433684][T32618] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 2027.440352][T32618] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 2027.447529][T32618] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 2027.454804][T32618] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 2027.461901][T32618] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 2027.467977][T32618] v4l2-ctrls: vivid-000: Show Border: false [ 2027.474061][T32618] v4l2-ctrls: vivid-000: Show Square: false [ 2027.480028][T32618] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 2027.488522][T32618] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 2027.495798][T32618] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 2027.503038][T32618] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 2027.510128][T32618] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 2027.516744][T32618] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 2027.523763][T32618] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 2027.530770][T32618] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 2027.537602][T32618] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 2027.545038][T32618] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 2027.550842][T32618] v4l2-ctrls: vivid-000: Transfer Function: Default [ 2027.557606][T32618] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 2027.564177][T32618] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 2027.570571][T32618] v4l2-ctrls: vivid-000: Quantization: Default [ 2027.577070][T32618] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 2027.584236][T32618] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 2027.590898][T32618] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2027.599886][T32618] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 2027.607312][T32618] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2027.615844][T32618] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 2027.622279][T32618] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 2027.629556][T32618] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 2027.637213][T32618] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 2027.643973][T32618] tpg source WxH: 640x360 (Y'CbCr) [ 2027.649131][T32618] tpg field: 1 [ 2027.652678][T32618] tpg crop: 640x360@0x0 [ 2027.656895][T32618] tpg compose: 640x360@0x0 [ 2027.661359][T32618] tpg colorspace: 8 [ 2027.665334][T32618] tpg transfer function: 0/0 [ 2027.670027][T32618] tpg Y'CbCr encoding: 0/0 [ 2027.674838][T32618] tpg quantization: 0/0 [ 2027.679054][T32618] tpg RGB range: 0/2 [ 2027.683120][T32618] vivid-000: ================== END STATUS ================== 09:35:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]}) 09:35:17 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005000000000b000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:18 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 09:35:18 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005000000000c000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:18 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x101080, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x7, 0x5, 0x18, @loopback, @local, 0x7800, 0x700, 0xffff}}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000200)=r2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x200000000000007, 0x37}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x1, 0x2c}) r3 = socket(0x29, 0x5, 0x0) sendmmsg$sock(r3, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="523d530cb7ac5471d7b7a8ec41759ad9c84c23772e83a01a6a3907cf01467f6582fd7b6c34795e8aa01c41552ee4834cd4091e904f6e3a8db54c60796c46b4e85dc729ec638911201fed3ff90366712bf41d3fab30d3ee5fed18380173addce50d8cb046898301eaa946a6e9b5ad5a688e0df080614a6b7b44ef5b12458aa5ececd01fc1d2bb760d2490f7cd54fea14d587720bd3498767966a170", 0x9b}, {&(0x7f0000000280)="91f85f68f35863fe9a6ef9043fc332a79ca3a3fc3c6050dc7ceb0cbf41b4ac865ae040240e36f084824adde357995206d777e8922e4a4c1989a8d38ba31a1b9fafbdcc55ad7174f89f6535d416da6405", 0x50}, {&(0x7f00000000c0)="3d67a210e65c2a6ff80b153fe72450ce2b15e6e040fcc5286a64cf", 0x1b}], 0x3}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="cda86ae4f02d7b9cabd347f013b1d46308d2f164039265c068bdf507894389c5f1c116dbbd5b67689c3141aac4651da7939143e208234284099fe9590322ca3904df4c49b07110478ecc006897677e81148cb7619ecdfb44db3a304d5398189560477ac600472d45e892076f299187623d16414ab876e0390e49709870ae84e69e995f217077aab1221a3001787911f68fa5ca7122876f15a8884a659a5755b270d4874edc9bd8a32aa39d9627bb25cf2a236e216e9af7bdf8909ae8b5e444871417e160bec7683af6d88c98f61ccf8c33b21021bc602a2c274af46526c7", 0xde}, {&(0x7f0000000500)="51e5d5284ad5e10b7ccda5e70bb1af363d720fb92fcc7595281c5ab704bb4697a362cd6b7dbf9a6e9b65e09a2b25010b015ac3d43f281dcf8d09dd05c0bfa517d639c51d6ba4943c2aa9b55b2496c618fe78c3302e331f118972b7449d2e69cb0abfc783238d7b8bd8a030d869a4c7b57113c5a83a112d89e4fae5ece33c889fa5db269c2b8247a554a677023cf5dfbf4cab04d721671b85e2966de15486a5a1e94715381863f8720fbc1e7456bc1096e523e2225a21f1570bd0dd5ce0071ee7100715dd9dcc5f70bbcdd40b864325d1", 0xd0}, {&(0x7f0000000600)="c5e9c0689af7f79c3875139defe8580698e701992dffccea7aae43ac7a6c7adffa2dc16d7ab90a333599bfccc99303ec9da76ce96ddbf77bc00607af8f0741695872", 0x7fffee52}, {&(0x7f0000000680)="a4cfd47c5ef344de808a8b9862025719af43bc0975d010f408185b6cd1b293b048ff6b3242466368ad124120feaf2128e5cdf101558eebbbfe", 0x39}, {&(0x7f00000006c0)="e2930ef80b6883c5cdd4d2e1acf8d3dfc8d04c1f73b6da1a92f9f0bbef489a1b4a44e3a6c33e990f954771701f5603f324d7bd00d0d50e96c146445a9109dfb802ecea059b5c30bb8b01e7a1d628685f3e89044cc68d5bd3fefc1936e5cc50387a9c6d975b68c0403f90c1efe32fd35332a1b0bd58746745db621baa9f71a5e2d8e2a799a109216c231ca36d4cf8a78af22fa9fba267202dbfd750b33132117d78200fe39e973c98fe95e246da8deb57a5dee487aabb83ad46904f71940525730dbc", 0xc2}], 0x5}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)="cf", 0x1}, {&(0x7f00000009c0)="cfcea14a2bd66c1d4af4b98cd75f3ca0d4dfc497c49e8bc6b04f8e767d0a1053bbb202ab3e65753ccd6dded5d990941dbcb417dae4b27e0ba3d9c434975373cae32a431c42a74a0aaddace55665e1b9456264a5d962815af50b75452511ae519995897935d9b8dbe7ed1f90168c824f6ac5073c6f5284638", 0x78}, {&(0x7f0000000a40)="e407453203a9d70e655f2a94b83e604a816402c086c50ed1642088fb40190b5d6203dbf01850d0c8f1", 0x29}, {&(0x7f0000000a80)="91104875b4647939fb476a29e171931fa0bc0b93540f2cc869bcaf46789636f057881763b565785f78a9e3c3406c2dd03f8c4c18153a8baa295a1a07c599b14a5473746ca33e1e06c0533adf272a4df9b49d12a8e4fa7750a2b56304e44286627770169047ce990d19646d750e3498b163980afbc13b67667d0a2d52ed51fd435a9b2dae82ba5b8b9adf53", 0x8b}, {&(0x7f0000000b40)="5715b8", 0x3}, {&(0x7f0000000b80)="afe5cd99ad792986ca6e94fb7d76d51b0a98ff00860b0329f23d6b8c17fcaf305d41225cd20e1809de6b8f347d321584282433c6deed782167df7d0e43989864f2f223b86d90c79ab8a99beb84d19bd77156776588069cfce62260fb6ac7d42191c6bf93ca667e10bd4f25235870d4975e49a4b11981b00f52f5597b18ede34672ce9b5f064b7fe4c64e08ef8860fd4b2315ff0ff73c10e2e828548f64bfcdf3c6d11017d11e8cbba6e706ced960f86f34b9a7d7a3d0e40d366e9453b175a13344f3f25038d1d1b200370deb91f136113dc64051de8e0c08e3c9ca311dfa1e5d20963f", 0xe3}], 0x6}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000e80)="d054ad4d54c8a988d60bb63b07bd7dc231b2d3b0cd7df656e4cdc18c023334868290ef2460cd54badcb1776d3d8286417522a8a27e6a27a78f5d95d06ec4ca4249b34ab83e8d6d6ba944952a88efe153eaf1b1dba7e565d4730fc526e8792ebe4a7218436ced8318f9eae6e5af3bf3920b56be46daee9541", 0x78}, {&(0x7f0000000f00)="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", 0x984}], 0x2}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002140)=':', 0x1}], 0x1}}], 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', r2, 0x2f, 0x0, 0x24, 0x7fff, 0x1, @mcast2, @dev={0xfe, 0x80, [], 0x1f}, 0x10, 0x7, 0x4, 0x522}}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000100)=0x6) [ 2028.510603][T32642] vivid-000: ================= START STATUS ================= [ 2028.518522][T32642] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 2028.525559][T32642] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 2028.532615][T32642] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 2028.539805][T32642] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 2028.546974][T32642] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 2028.553149][T32642] v4l2-ctrls: vivid-000: Show Border: false [ 2028.559115][T32642] v4l2-ctrls: vivid-000: Show Square: false [ 2028.565206][T32642] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 2028.572701][T32642] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 2028.579901][T32642] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 2028.587130][T32642] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 2028.594366][T32642] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 2028.600855][T32642] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 2028.608077][T32642] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 2028.615264][T32642] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 2028.622148][T32642] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 2028.629156][T32642] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 2028.635093][T32642] v4l2-ctrls: vivid-000: Transfer Function: Default [ 2028.641759][T32642] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 2028.648378][T32642] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 2028.654906][T32642] v4l2-ctrls: vivid-000: Quantization: Default [ 2028.661174][T32642] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 2028.668319][T32642] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 2028.675453][T32642] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2028.684384][T32642] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 2028.691494][T32642] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2028.699991][T32642] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 2028.706382][T32642] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 2028.713749][T32642] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 2028.721275][T32642] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 2028.727947][T32642] tpg source WxH: 640x360 (Y'CbCr) [ 2028.733178][T32642] tpg field: 1 [ 2028.736611][T32642] tpg crop: 640x360@0x0 [ 2028.740828][T32642] tpg compose: 640x360@0x0 [ 2028.745549][T32642] tpg colorspace: 8 [ 2028.749412][T32642] tpg transfer function: 0/0 [ 2028.754139][T32642] tpg Y'CbCr encoding: 0/0 [ 2028.758603][T32642] tpg quantization: 0/0 [ 2028.762878][T32642] tpg RGB range: 0/2 [ 2028.766823][T32642] vivid-000: ================== END STATUS ================== 09:35:18 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005000000000f000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:19 executing program 5: ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 09:35:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:20 executing program 3: syz_mount_image$hfs(&(0x7f0000000340)='hfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x1268400, &(0x7f0000000440)) 09:35:20 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000010000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:20 executing program 5: ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 09:35:20 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) 09:35:20 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000011000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:20 executing program 5: ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 09:35:20 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000200)=ANY=[], 0x20000101) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0xc08e0000, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/4096, 0x20001480}], 0x1, &(0x7f00000002c0)=""/132, 0x84}, 0x100) 09:35:21 executing program 5: r0 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 09:35:21 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000012000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:21 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:24 executing program 5: r0 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 09:35:24 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000013000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 09:35:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:24 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x288, 0x0, 0xa0, 0xa0, 0x288, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'ip6tnl0\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'netpci0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@ip={@empty, @dev, 0x0, 0x0, 'veth1_vlan\x00', 'batadv0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 09:35:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xac47e7c7e31aa5b1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) dup2(r2, r0) 09:35:24 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005000000003f000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:24 executing program 5: r0 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 09:35:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:24 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000060000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:24 executing program 3: openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcbd, 0x8001}, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r0 = socket(0x2b, 0x801, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2035.186617][T32733] fuse: Bad value for 'fd' [ 2035.240594][T32735] fuse: Bad value for 'fd' 09:35:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:27 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 09:35:27 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in=@loopback}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) 09:35:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000000000009c08", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000040)={@multicast, @local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}, {0x12, 0x0, 0x0, @local}}}}}, 0x0) 09:35:27 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000005865000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 2037.585909][T32754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:35:27 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005000000006f000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 2037.639324][T32757] bridge1: port 1(syz_tun) entered blocking state [ 2037.646374][T32757] bridge1: port 1(syz_tun) entered disabled state [ 2037.655804][T32757] device syz_tun entered promiscuous mode 09:35:27 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 2037.699795][T32754] bridge1: port 1(syz_tun) entered blocking state [ 2037.706576][T32754] bridge1: port 1(syz_tun) entered forwarding state [ 2037.758483][T32761] bridge1: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 09:35:27 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000000000009c08", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000040)={@multicast, @local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}, {0x12, 0x0, 0x0, @local}}}}}, 0x0) 09:35:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 09:35:28 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000081000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 2038.268064][ T303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2038.305746][ T303] device syz_tun left promiscuous mode [ 2038.312518][ T303] bridge1: port 1(syz_tun) entered disabled state [ 2038.339421][ T303] bridge2: port 1(syz_tun) entered blocking state [ 2038.346815][ T303] bridge2: port 1(syz_tun) entered disabled state [ 2038.356085][ T303] device syz_tun entered promiscuous mode [ 2038.381142][ T308] bridge2: port 1(syz_tun) entered blocking state [ 2038.387920][ T308] bridge2: port 1(syz_tun) entered forwarding state [ 2038.428546][ T309] bridge2: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 09:35:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:30 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 09:35:30 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 09:35:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000000000009c08", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000040)={@multicast, @local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}, {0x12, 0x0, 0x0, @local}}}}}, 0x0) 09:35:30 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000004788000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:30 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2040.917274][ T329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:35:30 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) [ 2040.972998][ T334] device syz_tun left promiscuous mode [ 2040.979346][ T334] bridge2: port 1(syz_tun) entered disabled state [ 2041.042343][ T334] bridge3: port 1(syz_tun) entered blocking state [ 2041.049013][ T334] bridge3: port 1(syz_tun) entered disabled state [ 2041.058849][ T334] device syz_tun entered promiscuous mode 09:35:30 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000004888000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:31 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) 09:35:31 executing program 3: mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x10000, 0x0) socket(0x29, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000cfc1380aafa28e99993476f7e0fce20a30b6de37d0bf24350bfc736825b34584b7ebf35ffb87f4842d743f8786941037624c26051c0c83a737d30a4a22603f5ec949e40060af4f64ba577eed0f98e7b4d90eaa7372a4a5689498b00affb61476dc9dfecd", @ANYRES16=0x0], 0x14}}, 0x0) 09:35:31 executing program 5: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 09:35:31 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500ffffa888000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x11, 0x0, 0x0, 0x0, 0x0) 09:35:33 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500ffffff9e000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:33 executing program 5: r0 = socket(0x15, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000340)) 09:35:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:35:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty={[0x0, 0x78]}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) 09:35:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) 09:35:34 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500ffffffea000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:34 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) 09:35:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000041c0)={0x30, 0x12, 0x901, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x11, 0x0, 0x0, 0x1, [@typed={0x4, 0x67}, @typed={0x8, 0x16, 0x0, 0x0, @u32}, @generic='}']}]}, 0x30}], 0x1}, 0x0) 09:35:34 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500ffffffef000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r2 = fsopen(&(0x7f00000000c0)='pipefs\x00', 0x0) dup2(r1, r2) [ 2044.971927][ T401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2044.981685][ T401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:35:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:37 executing program 3: r0 = io_uring_setup(0x1486, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x60000000000000) syz_io_uring_setup(0xfe5, &(0x7f0000000100), &(0x7f0000400000/0xc00000)=nil, &(0x7f00008dd000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2a9e, &(0x7f00000004c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 09:35:37 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500fffffff0000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:37 executing program 5: io_setup(0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000001680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4f0000}]) io_pgetevents(r0, 0x0, 0x1, &(0x7f0000000200)=[{}], 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={[0xa1]}, 0x8}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000040)) io_setup(0xa56d, &(0x7f0000000100)) 09:35:37 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1700"], 0x24}, 0x0) 09:35:37 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500fffffffe000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:37 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 09:35:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:37 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) 09:35:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x2b8, 0x0, 0x0, 0x0, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond0\x00', {0x0, 0x0, 0xd22, 0x0, 0x0, 0x1, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'caif0\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 09:35:37 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050088a8ffff000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x80e00, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x8, 0x80, 0x0, 0x3, 0x0, 0x1, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f00000001c0), 0x5}, 0xc04, 0x6, 0x7ff, 0x0, 0x0, 0x7fffffff, 0xcfd}, 0x0, 0xd, r0, 0x1) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x3f, 0x0, 0x3, 0x81, 0x0, 0x0, 0x20000, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x10400, 0x7, 0x80000001, 0xd, 0x0, 0x48f, 0x7}, 0xffffffffffffffff, 0x2, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x81, 0x8, 0x9, 0x9, 0x0, 0x0, 0xc03, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0x2fd, 0x7, 0x9, 0x9, 0x9bb}, 0xffffffffffffffff, 0x0, r3, 0x0) 09:35:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:38 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x5c043, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 09:35:38 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005007fffffff000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:39 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a8", 0x1}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f00000030c0)="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", 0x20003c37}, {&(0x7f0000000cc0)="566b6fa404cbd3460d6ba929960936f77b16d4dd0d184e00805f22e1e6fac53d08cd974cb4134fbb88f2ce6c3bd6b6da48f5814facb6466cbd9ec836ae1c2ed1563cce0c2332d4fbc534c5d579d132549218484cd2", 0x55}, {&(0x7f0000000d40)="4547ff8707581f326bfc83d323e299fd92e5c9fb302318d831b0a9216076bcd6c25dc6ce78aeedca7cc62bc92711d24ad027d4f2b8fcba2dc9e7dd34ad0d69b1c2e0", 0x42}, {&(0x7f0000000dc0)="69a725451b7ee081e2c0d8a8bf22ce6eed66228b2c36734f90a583906c496121a37dfb54f0d3710fbb47527435d03bc26322c2af942a9f0afa7d381cf264c67f16bcda0d172ebd595af0136b1401b3191760b1875e34d7fd9927dc19236ddbc11ad3169ba7c829df3f325c9af688690d472f7a43f6b937f90d6152c3a9a560b60d86b01d19e45fd9d1c87a20fc2bfa4b453da5bd4f7143cf2214f332d9d853c6a479eebbae3cd607c844259666533bd57381557eeb0b4e586c5d9355b9a1b9eee7805df7fa98b08a00747cdd27d4d9f50a591ce77f87ff53d75b7faca180db4e84310c1ffd7a1f", 0xe7}, {&(0x7f0000000ec0)="240e50031d22aed2c19e3b40c7c20e5a38f01f752b824101cf5f2f44b32d1cf3c766baae02a3a7821336c30a418f9faa6b7a2cf7958a9a8237c5974c17cc7ff9dfa02ceef2d6ac07166c38fd01f2ebee35997f5073f98ace9f85f5786acfea0f46870b4b2aaa95cf597aa1f1a6a208078a9d8414a74551036c2b71d6ed5c4a0021511d0da6991c83cfaad6cd70dd0ccac89bc986bddf605d42173fb594c2aa7e79885dd8486c1852abb2193eb749855e1015a3f0a605e94ec767825c5c7db956b5d5332ebe36", 0xc6}, {0x0}, {&(0x7f00000040c0)}, {0x0}, {0x0}], 0x9, &(0x7f0000004380)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}], 0x48}}], 0x2, 0x0) 09:35:39 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f00000001000000190005009effffff000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 09:35:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:41 executing program 4: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 09:35:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a00054034000000000000000800"], 0x50}}, 0x0) 09:35:41 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500eaffffff000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 09:35:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:41 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) [ 2051.389036][ T504] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 2051.410121][ T504] device macsec1 entered promiscuous mode [ 2051.416032][ T504] device virt_wifi0 entered promiscuous mode [ 2051.556505][ T516] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 09:35:41 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500efffffff000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0), 0x0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:41 executing program 3: r0 = socket(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) 09:35:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xa808) 09:35:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0), 0x0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:42 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500f0ffffff000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:42 executing program 4: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 09:35:42 executing program 3: lsetxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 09:35:42 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500feffffff000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0), 0x0, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:42 executing program 5: shmat(0x0, &(0x7f0000003000/0x4000)=nil, 0x7000) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/239, 0xef}], 0x1, 0x0) 09:35:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x6, 0x7, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x20, 0x8, 0x2, 0x0, 0xf359}, 0x0, 0x2, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x280, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x11) 09:35:44 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500849b000044d504000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:44 executing program 3: syz_mount_image$cifs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001540)=[{&(0x7f00000000c0)="18", 0x1, 0xffffffff80000001}], 0x0, 0x0) 09:35:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}]}}}]}, 0x40}}, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x0, [0x4, 0x1f], 0x3}, 0x10) socketpair(0x8, 0x3, 0x7fffffff, &(0x7f0000000040)) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x2}, 0x0) 09:35:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:44 executing program 4: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 09:35:44 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000340000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:44 executing program 3: r0 = socket(0x2, 0x3, 0x40) connect$can_j1939(r0, &(0x7f0000000080)={0x2}, 0x18) 09:35:44 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000010004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) keyctl$join(0x1, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) [ 2055.508253][ T608] ucma_write: process 1805 (syz-executor.5) changed security contexts after opening file descriptor, this is not allowed. 09:35:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:46 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c, &(0x7f00000014c0)=[{&(0x7f00000004c0)="8b", 0x1}], 0x1}, 0x0) 09:35:46 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 09:35:46 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x5542, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x3400) 09:35:46 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000020004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x40, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000440)=@tcp6=r0}, 0x20) [ 2056.390293][ T28] audit: type=1800 audit(1599903346.243:47): pid=634 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16219 res=0 [ 2056.440235][ T28] audit: type=1800 audit(1599903346.293:48): pid=634 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16219 res=0 09:35:46 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000030004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:46 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)='fuseblk\x00', 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}]}}) 09:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000300)={'tunl0\x00', @ifru_mtu=0x531101}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0xef8}], 0x1) setuid(0xee01) r1 = request_key(&(0x7f0000000080)='keyring\x00', 0x0, &(0x7f0000000100)='tunl0\x00', 0xfffffffffffffffc) keyctl$negate(0xd, r1, 0x4, 0xfffffffffffffffd) 09:35:46 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000040004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:47 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58) [ 2057.684956][ T666] IPVS: ftp: loaded support on port[0] = 21 [ 2058.190468][T31515] tipc: TX() has been purged, node left! 09:35:49 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 09:35:49 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 09:35:49 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000050004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8, 0x7, 0x5, 0x0, 0x100000001, 0x35, 0x2b5a, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x1f}}, {0x0, 0x8}}}, 0xa0) 09:35:49 executing program 3: socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000007c0)={{0xa, 0x4e24, 0x80000000, @mcast2, 0x1aed}, {0xa, 0x4e24, 0x9, @ipv4={[], [], @remote}, 0x7}, 0x93, [0x1, 0x0, 0x9, 0x5, 0xffff, 0x5, 0x8, 0x413]}, 0x5c) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000080)="c732c4ad9caf70e46e5b85b8b27bd9311c67d5b4a2e947f93712cdbb5f3008890489379846755148ce9ada15c6316db38d121a64f147eb160be709c6488f5f3ee9b18509035686775ad9ea54f0a9157fdb246c438e4eae38876f97b1b9291c86807e2df3008cd0b0487a81aa231294c7b18f17900254feb37b98463395998d4826bdffc6ec0ccb8912a0ac2864e4c06eec6608cb8df9fbc91efc3e17affec4684650d3e8be8db656df195764ef8a7ad12317667eb3cd56f821071fa349d1e9414d6484bab41fe71095867f6b8fb1570658c6e314207f2ddbb18bd19f6acba4e5d00ec2abf14a", 0xe6, 0x5}, {&(0x7f0000000180)="7008f5ae1e43e100d4dbebaa39f310dcbe1f0c693d83fa07f4c9d4034bc9dd8ffa0605b51c732e768cd70e92bf54ca88de6efd8933bb882724aa9bf39808d6719a622f795edea828b7c5b73ff7cba8b20670f87b333f8d0034296a5dc4d2d88620358541aefd40ab39bbb772043886837ac93143644daa1ec5475d", 0x7b, 0x8}, {&(0x7f0000000200)="d4a9524ac4462ae79b254b7b33733dee93e19eaec5b5dad4743d1ad59fb32edd659c71360e1bda1e02739e47ce35167f6c1a930982862a4dd69cdbaf2856c8d35539a6417a94927235e407f22dcd570d", 0x50, 0x7}, {&(0x7f0000000280)="b9f1b390a2c90a2c11630cd43fc6ce9ab971b2776df560a74fafe8a14aeb90a9ec290dd1500bcc511b4515f49b970644b2495159afb5ca4e652f2417af6bc3a32d6f6a28392588919b3fa06f93ae07cff4b5ca3e5c8a3d16", 0x58, 0x80000000}, {&(0x7f0000000300)="07f650a87794e3f674f80e7b85baf294898e1e1e055461512fd944b60ee9d14a57afe4", 0x23, 0x8c}, {&(0x7f00000009c0)="1d2a12f8bdeb025dabe5991818f09365bf7f6fe792f05172c8545de1ea90399873b53600614265e0f07ca6fc03a00da0f1e05b46e11e2e136dc616217b3965a25278db5df238774a965a9087d697d13563d546348d6952724f54d3669a42076443bab065b11640611fbfe96e1e6a45e41f348afac33863987437210c9b2cd29924cc115fa0d2d920153b16f16dd8e58c720a254ce8000a90b96295e9dd5a24bc9a9263a9bd9e3f451f89478b9562381a9b4e7789cb82f772d3e8a3242947ceefe0893c49aaeb3b941cd7de860599d9753e2344cf43847264fd5066af89c3258ad998fd95c58367589e25b326d775cce96630f3e6a4664c3d2b6e92e54b37ce0e8a11359a27e6aaebd4bc192b35d326c629afe967c245c9715a351954a03f153e01b31877be048bb4a141b33c891348fe4fb2ad02a81448d5d96bafe58903d4360b4ea42e1f683e6499ae75136226732159c57d14e475b2417cdabede32f45d18927dacd855f6a9a247f8a71e2be06def0069062b9925532ff5015e9834d4441a585c4f5f99776640fd11a9581ab606f19b976b592ed5e9598c30ce1f74f30332630fe6d5743fc9dee5f308d76471ed96f17e9956d78af64d9f7617af7b7bcef20b4fdf1953d6ae08d6dfbde3ebf8e288609301a93e0a938a44047829729642c69e4bf495db0fd68ea9134502468f07d7d32bf1ad4a8fd2cc88c33c62929b18fa59d1582c0b2df7e77dcbde25945307c2c35550922464fc290477ad92867d3598802753040f825c49c84713eb2f28bf923710d6206e0fad024984382734978fcdb942473690c6334e2a3abddfbfceb9e220dc99fbdd0437446151b5d2ad5241904b6cbd3affe6d35e2715f2d7cec55a1d9802653ec9a76972f7a5da92af6478e0a43669686eff0644ab9bfd6238417435fab4a3317dc88ad407133224927f58596a77f55d91a5207fb31db8a4b745286607aa43733ec7b11833b959a3196cd63050a2e44b6c18eb150d88e53619c15fed279549a251b66e2240f8ec580fbe91065472f2a17c182ba9c65af5e6015723b5d1c497dd96e6a090f03ffc225d6a4ca26a37d5ae4b8ad5f155d04ed2c5cab5b448d15a24af02a0cad020f0086c6243e74cff9efa7d5ff91800e2fdb32b60f373bcc4f6978981e6599a2ff69caf55b2982a35a69ca3d5684b27fcab0f9c0181f5feac28ec9ddd045ebcbc2008168ddd44f45676c0e288f00b007b7ceaa5d4196b4035d47f80c9572e93406a9316e3045bd0b07a2443545b0ab3aae164a6f763c8935239117cb6d4dfb05a8087650d787f849fe2c299bb2c23837d27954b05a0b21ee78cdad344e79c5972fbea99155ebbe4b482986ae869f911dad78483875bd69957cd7e71c047e0166c20190a5edbb74a77f5e31ab8f66c33ea50060e16af2d9ebfcb20776571b7d9947a6ad9048a86c4b7990c1c5fc48683f91661944a003e21048dad3842d874686d80ca4d93bdc10427ebadfb5d0b76aa8d04dc004eeaa47b4da9dd0511ea3d1c790b704a6e2691bfb05ad2a75f10906cdf323c2cb72c86c41be2f02b75a2f00e645e3dabb5fbdbc656d9331a94c5812a9be1b45c1d50a19944e89b25deb1f483ae0d0367db6d9992943ae301dd122075a72c9abcd5763b6ca7d0e833f057a48febd216fb35c51c0ada89cad8af05ff1a6d393f561fef985c1d9ac0c7d1008e74384fd5e88c96ec1edb228cc1a6a20fb14c4acab0f432f6bd49f34c3fd35a619eeb6d86e9fc67000d03bf3b7d7704f37c14ce595a7f94d66ceda872aba48dfe7f660ee38667701aa5941d5dc697e525d5923932b0026a9131072bd8d4ce78f73fdc9c30ce6a7a51e0054ff9c52458e5fc4da49a8bad80e5574eca3d646a804c6f96e5149a92553f166eef26f530bab098125f0dc76d23f855578ef0b847ef00cf69028fa7785997bd99c92e7a0067f7c15d362408606944ad217b8835ba5f95a21aa34e169f049ca1383f66fb1ef6b2d7806139635a4e295e892cc364e836ac506b44dcef6f6ea071134374be9b3c7fa03bfb6f177d2bc3c932c626a7dc0dc1bb3a7650cd3464e4efd3de7d48b7dd0109f122f5aa01f8d722f25ba35518d4364f1ce060adb45003a7386e36a09bde0e0c7f4f137d4dc4fb5346153cf25256b44efc9c3366d2ff18754eb0412ed7c8107ba7fc59e927198e02326ef0a1ae333e97d07dd3470ebe4e45b4a095c03ec789d2176120b82a4114a9ad84c1ba0d046e511d66aef86764cb5c4c31e4f55ad6b436c09df42b4ac0f3ffe28f668b66e89445137d391151f4e7b0ef64aa507cce72fae6cb96d9a8b77b9b4a4602705275d065422784b7c6226e6c98cf76e641310a22a6f6a49d004480e94b154477e65c132ce2f0aba78aec0edab95bd3237578a38c82a870931cf632bc53036fea608c4be3ff79a7241259f21aa365e1bb6c5e385d9deed26d1dd5fd28d76e035bfaab60af16f48ad0179b8b6b5cd55d80683949dd7cb69c3624f0bdaa7720a127f83f6efade964b48426acfd5dc10edebf7517021883cf353566b5b36100f77132f663d49cb7ce4e67f14376a24be2f9643bde58be29a2dc77a057b983800df681b9f65753f9e4b1d1f2b4e1768e90138be0180831f77c02e8d3dd1b904bedc898359561a45a3245c9b6465871c3f55fe718bbd277f452d3c7ce325efdbc73879c9740e4f97179a0154fa9781eb440c26c838721d09dcb33138ab79bc36d533e0668da0a108bb9136f23f5aeed8710b753296f4268cf0b819ca82426568aa131b1275470d8e1150e9edb3b3cc86817e7052574ea81a2381078e560613952c9b9b1b02005201eb047272b97636683d692152ad82e0114f57e51f41fa1597203a45b7158ab52158a50ca4c461d0eeecde3d6377e0a9f54eadc9730633019c03b7caf9b90caa97d80a27b73a5a2e148d572ff0306f2e6bc026e6df56362ac5c813486b790d016b4248e2177dacb4066fa17b4729abe5c5531c98e21b7e952da4dc548e734f7d1f53dd932da5b31f6946edb45294d5fd179f8c4c752a6697f60ce00432af238ea4528d3bfacb29d98f71887640524725b1b7cfc44368a34505acfe1a2b378a9084b7d51a960307c5ed1bcb8eb71ac3603ffde7dcf6e63e3c7d3efd715dc6dc07a3c6020a0eb13331c913fa90e985702ed925ebf8a0684efe1388f2d1e522bd90cf9fdb482afdc39ee30c12ddcc2524a749a58804b6f2a2c24cacb54f7d65da65d1bdf7e1d12d1bb3716b43afbd5aa10c5e92ecc102d781b4d35dd63fcaae5be0229c73c0236520d7677dbe24283116aa996a4527fcb563319d17e852da50e08623f5903d816ac293ff22487c82b5578ab807796cd3d52824d4a89699bbb5238a7b119b5f02b1f05ba51a90d3a5ff95d8ba13a734fe89dcc32fe1591c1b8fdda079fc850c60ad948b5525a324c2173a0528d21a0741766462da6fdaa315a6c886c4fcd5eff092800c2e07e4bd1bacbbaa0745e6625867bd0c84caa54ee80d350904635982405c6e5a7cd33d6efd1bee5c4dd0027fee34a00ff9018dc305f7d5074573263ff238e939431fafbb095740c66d83d114f3a3b9fa7417ed796a6dc72d62dbdc7b4410e17b335722e7e6728c67558ad6c1641492845d8486562505682f1eae7cda74b5a3073652ce299719567604a4a401172979b6030319d926288418959ddcb8e173ebcb6f06393a005d31f1d57bdab07f7b805ab33968ff910c6a79e25d131d3134a51611b3e6fa109b5f19d829db0f6536b28d5e5de48a8db2aa2db0c53a5e6e58b7f0508710494d8abd4860a0e2656297d85a53696d0e9dcf19a64871b43285ee2a6ad27bea21ccc18c8edae094b70a6e27adb10b5b73316b29dbfde5d813080b872653717ff7e2bd0b4da890afcfaca7f464675cd76f1e20a992afda0cfd4b170e30808277ce164c1d87bf15386aa8967defe64239daf393e7c47e439e6717fa68a7153fa5a4942ecd062a49b7d361824d5eba30c880aec3792f2d5894e57397465c98571570db9533415409a71d43c3b4b6902923b34b54a92615dfeccffedac85dc216e0e5ff4bcfcebd1ea292ab843537782456b7a0dbc202aecd5cacdd9b2ef1c5f6e9255a3218c90ccf1f15f4b2e97974e8f2b1a96c7c82b64be9fe75860d1a0a1c820dbca45c4397f6ed3714d289540839d9eb9a2d10e13ef1dd64d0252bd77d9ce5efc3f559d1adc1dd8707ae12ff136814a5d7ef4b089f753f9668fbc9cdc842de0173c643e4eea519d69de4cfb608ac8e9a86bf5d84492d9c107d41334a890b8099865926d264c9e24e73af7ae89f5a258d74dfd3e183940428fc29a2acf6ca005586ae3def0964a6f6cfd507ed72bb8e8db2ca37d26984ccf830cfddc932f79fc59b9c1fc70030d7821914a73f5e251b1a68b19c79b47b499a552cfdf7d53fe42d0b8b1a17a9e6f3e072b8d43c74b08f4b53c67932aa9a99e6a38cff698e9a0c3d2a2c42188c858ec1c070208c764c4d0e2bc262367888a994cb98b920cb43118acaffe280275a4d0027ee3c111d24f6a83541bcf2e073afceabff9df95b4274da48cb1ee65c19a15ddf507fde11e59b77fc2e6e3c2fc1df0ebcacc524b2f9632541360924317a85a5cc1b88282aadcc6cb31df3f3a92803872e55d5203d18f6dc254408be242b93ffa8559b87b4f71a1e69a0ff6e4319fb673c9d1a4c63897cf24e016dadc2184b0f9723d654b7513e31c0b0893bd4e178ae0257fb5a5ff2b2704bbd17df62195479a0243345260a66bee6452fcea10d2d229a274427c1d5f3316785385b8eede5f130d21ce33a0f19d8c1f34f985a474e0bdbdb5fea7c1a54237921cda37c616efb69f1eab99a571abb01a35c7070216a015907cdb8e48bbc28a35f04b6401fa5ec57804e4a49eff75cde7426f860132a4cdbf04bff27fe09f6f4050f7a1083065a53e137151eb2fa15b50bcecdb3b9c67ff80e4144d5fa0bf6a914f87a0c4fd7d4c1a525390ca5aa0c91bdb8bf6f1b78fa2bda359344acba881010608bea9760175ab8a9de5a17049009352547b002906325d32d182399e7de13c372ad3021a003164f9c2db5782f53e29a090d2302afb40a60f09f969652b1f8039477e0edb71593d20e0407ee8d3930a842600dff2ad1bad46ebd50a7a3ed170c189398845ba0d11410e382e76368113a67bcf09315e11ad37e12ae3a649f86ffe259fd013e1ee0e2c8d2a50aa707edb1f33628485a9ecb47bb1db1391db658206b5da048a3841500462bdeffa624da40d9b93289b9fa19547824892e1d02e8f98bd0df53f49c04af2dc0afb6495dbd6d38b914aa69aae6524ac6b02bf02441f7235b52427a87f0189bb791220936b80b4b7003b6e3a36c7bc6f17c1d2f750b733ddf1abd1ba0e967eb53b73b55f0cacc0341ff99650b17f7b20521cef14c5c281c8261525f70b3a4b23efdbf11e30d82ffa16e10305dafdb734f27189d708aebbe3a87a8a77ccf92881b4c630206cfecf73e", 0xf39, 0xd1}, {&(0x7f0000000340)="c505f4b8ec4f0dd0b81be4a6582af5cf3b27d1", 0x13}, {&(0x7f0000000380)="b5baf805fd0bf146e4", 0x9, 0xed92}], 0x110004, &(0x7f0000000480)=ANY=[@ANYBLOB='compress,commit=0x30000000eelog;datacow,treelog,appraise_type=imasig,\x00'/83]) r0 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x80, &(0x7f0000000100)) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) 09:35:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp6\x00') r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000001580), 0x1000) 09:35:50 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000060004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:50 executing program 5: timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4037e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[], 0xffffffb7) sendfile(r0, r0, 0x0, 0x808100000002) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = getpgrp(0x0) close(r0) tkill(r1, 0x13) 09:35:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:50 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000080004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x1a}, 0x1c) 09:35:52 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000002100)={0x60, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}}}, 0x60) 09:35:52 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 09:35:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(0x0, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:52 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000090004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x501189fed260fc21) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x1}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x600c8c5}, 0x8041) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x240408d0) 09:35:52 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000002100)={0x60, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}}}, 0x60) 09:35:52 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500000000000000000a0004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(0x0, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 09:35:53 executing program 4: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x541a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "4608dc074c4e017e0792713357ef882a260dde"}) 09:35:53 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500000000000000000b0004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000002100)={0x60, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}}}, 0x60) 09:35:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x501189fed260fc21) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x1}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x600c8c5}, 0x8041) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x240408d0) 09:35:54 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xe000) 09:35:54 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500000000000000000c0004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x501189fed260fc21) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x1}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x600c8c5}, 0x8041) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x240408d0) 09:35:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001540)=@req3, 0x1c) 09:35:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(0x0, 0x14) write$binfmt_aout(r0, 0x0, 0x0) [ 2065.360631][ T2330] ion_buffer_destroy: buffer still mapped in the kernel 09:35:55 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f0000000100000019000500000000000000000f0004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:55 executing program 3: r0 = socket(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x44}, 0x1, 0x500000000000000}, 0x0) accept4(r2, &(0x7f0000000980)=@generic, &(0x7f0000000a00)=0x80, 0x40800) ioctl$sock_ifreq(r1, 0x8916, &(0x7f0000000000)={'rose0\x00', @ifru_settings={0x0, 0x3, @fr_pvc=0x0}}) recvmsg$can_bcm(r0, &(0x7f0000000940)={&(0x7f0000000040)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/132, 0x84}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000680)=""/195, 0xc3}], 0x9, &(0x7f0000000840)=""/206, 0xce}, 0x10102) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x894b, &(0x7f0000000300)) 09:35:55 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) 09:35:55 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000100004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:55 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x80405600, &(0x7f0000000140)={0x0, 0x0, @start}) 09:35:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000003040)=[{{&(0x7f0000000240)=@ipx={0x4, 0x0, 0x0, "84a34f8046f1"}, 0x80, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x39, 0x0, 0x0, "1ee1855c02b9f9814d96119bf5ca56e3", "c47ce7b70c526f92dfbc991d1185bef1b3eef8904c77096016e20e2ba446000000000000"}, 0x39, 0x0) 09:35:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x501189fed260fc21) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x1}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x600c8c5}, 0x8041) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x240408d0) 09:35:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x81001) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 09:35:57 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000110004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:57 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) getrandom(&(0x7f0000000380)=""/111, 0x6f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b24, &(0x7f0000000240)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\xbd\xf8\x04U\x00\x00\x00\x00\t\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x93\xf6\x7f\f\xeb(-\xb3\x9a\xde~\x80\x00i\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00l\x00\x00\x00\x10\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\x7f\x00\x00\x00\xcd\x15\xc1K\xab\xe9\xe3h\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19\xcc\x87\xb1\x9a\xc6D\xb4\xa7e\"\xfc$4EI\x95(\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1xX\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\xb8T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa\xaeWPX9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\xcc\x96\xc3\xd6\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb3\xb0\xe8\xdb[\xc8\xa5\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xbaO\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99\x00\xb7\xd5\xd4\x9fm\xb4\xb0\xa0V3)\xa7\x005b+\xcamN\x8f}\x90/\xe9W?~\xc7W\xd2\xb1\xa6\xf7!\x16\x03D\xd0\xda/\xa7\xe20@\xe1\x8e\x1c\xa7\xb1\x85g\v\r\xd5/\xaf\xea\xedI\xbb\'[\xfc\xe7j\x81{\xcb9PW\x8daR\x01$\xba\xc6\x1aV\x04\xff\x190wR;\x8c\t\x8b~T\xac\xa0\xd7j&\xe0\x19\x9c\x13\x00\xca\x1c\x17\x1b=~\xaa\xad\x8c\x04\xf4\xfdT\x00'/540) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b24, &(0x7f0000000240)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\xbd\xf8\x04U\x00\x00\x00\x00\t\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x93\xf6\x7f\f\xeb(-\xb3\x9a\xde~\x80\x00i\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00l\x00\x00\x00\x10\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\x7f\x00\x00\x00\xcd\x15\xc1K\xab\xe9\xe3h\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19\xcc\x87\xb1\x9a\xc6D\xb4\xa7e\"\xfc$4EI\x95(\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1xX\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\xb8T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa\xaeWPX9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\xcc\x96\xc3\xd6\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb3\xb0\xe8\xdb[\xc8\xa5\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xbaO\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99\x00\xb7\xd5\xd4\x9fm\xb4\xb0\xa0V3)\xa7\x005b+\xcamN\x8f}\x90/\xe9W?~\xc7W\xd2\xb1\xa6\xf7!\x16\x03D\xd0\xda/\xa7\xe20@\xe1\x8e\x1c\xa7\xb1\x85g\v\r\xd5/\xaf\xea\xedI\xbb\'[\xfc\xe7j\x81{\xcb9PW\x8daR\x01$\xba\xc6\x1aV\x04\xff\x190wR;\x8c\t\x8b~T\xac\xa0\xd7j&\xe0\x19\x9c\x13\x00\xca\x1c\x17\x1b=~\xaa\xad\x8c\x04\xf4\xfdT\x00'/540) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x20002801) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000005c0)={0x9, 0x3, 0x85, 0x80000001, 0x401, 0x4}) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e0300002abd7000fcdbdf25000000"], 0x10}}, 0x40810) 09:35:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 09:35:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x501189fed260fc21) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x1}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x600c8c5}, 0x8041) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x240408d0) 09:35:57 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 09:35:57 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000120004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:35:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$FUSE_DIRENT(r0, &(0x7f0000000000)={0x30, 0x0, 0x0, [{0xe00, 0x0, 0x4, 0x0, '*%\x9b@'}]}, 0x30) 09:35:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000000000004) sendfile(r1, r0, 0x0, 0x8000000000004) 09:35:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 09:35:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x501189fed260fc21) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x1}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x600c8c5}, 0x8041) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x240408d0) [ 2069.558992][ T868] not chained 7890000 origins [ 2069.563730][ T868] CPU: 1 PID: 868 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 2069.572232][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2069.582300][ T868] Call Trace: [ 2069.585623][ T868] dump_stack+0x21c/0x280 [ 2069.589987][ T868] kmsan_internal_chain_origin+0x6f/0x130 [ 2069.595744][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2069.600964][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2069.606796][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2069.612022][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2069.617850][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2069.623932][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2069.629150][ T868] ? kmsan_set_origin_checked+0x95/0xf0 [ 2069.634717][ T868] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2069.640815][ T868] ? _copy_from_user+0x221/0x330 [ 2069.645780][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2069.651000][ T868] __msan_chain_origin+0x50/0x90 [ 2069.655971][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2069.661135][ T868] get_compat_msghdr+0x108/0x2b0 [ 2069.666127][ T868] do_recvmmsg+0xdba/0x22c0 [ 2069.670679][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2069.675901][ T868] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2069.681813][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2069.687034][ T868] ? __msan_poison_alloca+0xf0/0x120 [ 2069.692333][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2069.697115][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2069.701909][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2069.706617][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2069.712707][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2069.718873][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2069.724099][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2069.728962][ T868] do_SYSENTER_32+0x73/0x90 [ 2069.733479][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2069.739822][ T868] RIP: 0023:0xf7f40549 [ 2069.743883][ T868] Code: Bad RIP value. [ 2069.747946][ T868] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2069.756362][ T868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2069.764336][ T868] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2069.772309][ T868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2069.780288][ T868] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2069.788265][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2069.796257][ T868] Uninit was stored to memory at: [ 2069.801299][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2069.807026][ T868] __msan_chain_origin+0x50/0x90 [ 2069.811972][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2069.817092][ T868] get_compat_msghdr+0x108/0x2b0 [ 2069.822037][ T868] do_recvmmsg+0xdba/0x22c0 [ 2069.826544][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2069.831244][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2069.837323][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2069.843482][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2069.848688][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2069.853545][ T868] do_SYSENTER_32+0x73/0x90 [ 2069.858071][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2069.864386][ T868] [ 2069.866712][ T868] Uninit was stored to memory at: [ 2069.871743][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2069.877469][ T868] __msan_chain_origin+0x50/0x90 [ 2069.882412][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2069.887529][ T868] get_compat_msghdr+0x108/0x2b0 [ 2069.892472][ T868] do_recvmmsg+0xdba/0x22c0 [ 2069.896977][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2069.901676][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2069.907753][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2069.913914][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2069.919141][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2069.924010][ T868] do_SYSENTER_32+0x73/0x90 [ 2069.928524][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2069.934840][ T868] [ 2069.937184][ T868] Uninit was stored to memory at: [ 2069.942225][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2069.947954][ T868] __msan_chain_origin+0x50/0x90 [ 2069.952900][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2069.958038][ T868] get_compat_msghdr+0x108/0x2b0 [ 2069.963003][ T868] do_recvmmsg+0xdba/0x22c0 [ 2069.967512][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2069.972196][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2069.978271][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2069.984432][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2069.989639][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2069.994499][ T868] do_SYSENTER_32+0x73/0x90 [ 2069.999009][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2070.005329][ T868] [ 2070.007681][ T868] Uninit was stored to memory at: [ 2070.012716][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2070.018442][ T868] __msan_chain_origin+0x50/0x90 [ 2070.023402][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2070.028518][ T868] get_compat_msghdr+0x108/0x2b0 [ 2070.033460][ T868] do_recvmmsg+0xdba/0x22c0 [ 2070.037974][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2070.042663][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2070.048735][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2070.054899][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2070.060108][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2070.064980][ T868] do_SYSENTER_32+0x73/0x90 [ 2070.069491][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2070.075808][ T868] [ 2070.078133][ T868] Uninit was stored to memory at: [ 2070.083179][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2070.088905][ T868] __msan_chain_origin+0x50/0x90 [ 2070.093852][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2070.098969][ T868] get_compat_msghdr+0x108/0x2b0 [ 2070.103911][ T868] do_recvmmsg+0xdba/0x22c0 [ 2070.108417][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2070.113104][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2070.119179][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2070.125344][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2070.130556][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2070.135421][ T868] do_SYSENTER_32+0x73/0x90 [ 2070.139946][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2070.146267][ T868] [ 2070.148591][ T868] Uninit was stored to memory at: [ 2070.153624][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2070.159349][ T868] __msan_chain_origin+0x50/0x90 [ 2070.164295][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2070.169414][ T868] get_compat_msghdr+0x108/0x2b0 [ 2070.174357][ T868] do_recvmmsg+0xdba/0x22c0 [ 2070.178866][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2070.183554][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2070.189631][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2070.195793][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2070.200999][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2070.205856][ T868] do_SYSENTER_32+0x73/0x90 [ 2070.210370][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2070.216697][ T868] [ 2070.219022][ T868] Uninit was stored to memory at: [ 2070.224055][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2070.229798][ T868] __msan_chain_origin+0x50/0x90 [ 2070.234742][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2070.239857][ T868] get_compat_msghdr+0x108/0x2b0 [ 2070.244797][ T868] do_recvmmsg+0xdba/0x22c0 [ 2070.249303][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2070.253995][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2070.260073][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2070.266237][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2070.271441][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2070.276300][ T868] do_SYSENTER_32+0x73/0x90 [ 2070.280811][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2070.287133][ T868] [ 2070.289461][ T868] Local variable ----msg_sys@do_recvmmsg created at: [ 2070.296157][ T868] do_recvmmsg+0xc2/0x22c0 [ 2070.300575][ T868] do_recvmmsg+0xc2/0x22c0 [ 2071.293363][ T868] not chained 7900000 origins [ 2071.298128][ T868] CPU: 0 PID: 868 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 2071.306632][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2071.316691][ T868] Call Trace: [ 2071.320009][ T868] dump_stack+0x21c/0x280 [ 2071.324369][ T868] kmsan_internal_chain_origin+0x6f/0x130 [ 2071.330140][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2071.335361][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2071.341196][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2071.347278][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2071.352495][ T868] ? kmsan_set_origin_checked+0x95/0xf0 [ 2071.358062][ T868] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2071.364157][ T868] ? _copy_from_user+0x221/0x330 [ 2071.369114][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2071.374331][ T868] __msan_chain_origin+0x50/0x90 [ 2071.379296][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2071.384463][ T868] get_compat_msghdr+0x108/0x2b0 [ 2071.389437][ T868] do_recvmmsg+0xdba/0x22c0 [ 2071.393983][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2071.399207][ T868] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2071.405122][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2071.410344][ T868] ? __msan_poison_alloca+0xf0/0x120 [ 2071.415677][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2071.420456][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2071.425241][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2071.429957][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2071.436075][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2071.442248][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2071.447472][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2071.452357][ T868] do_SYSENTER_32+0x73/0x90 [ 2071.456884][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2071.463223][ T868] RIP: 0023:0xf7f40549 [ 2071.467288][ T868] Code: Bad RIP value. [ 2071.471359][ T868] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2071.479785][ T868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2071.487765][ T868] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2071.495741][ T868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2071.503719][ T868] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2071.511691][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2071.519700][ T868] Uninit was stored to memory at: [ 2071.524737][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2071.530464][ T868] __msan_chain_origin+0x50/0x90 [ 2071.535413][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2071.540531][ T868] get_compat_msghdr+0x108/0x2b0 [ 2071.545474][ T868] do_recvmmsg+0xdba/0x22c0 [ 2071.549981][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2071.554681][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2071.560753][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2071.566916][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2071.572123][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2071.576990][ T868] do_SYSENTER_32+0x73/0x90 [ 2071.581497][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2071.587815][ T868] [ 2071.590138][ T868] Uninit was stored to memory at: [ 2071.595170][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2071.600894][ T868] __msan_chain_origin+0x50/0x90 [ 2071.605836][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2071.610951][ T868] get_compat_msghdr+0x108/0x2b0 [ 2071.615895][ T868] do_recvmmsg+0xdba/0x22c0 [ 2071.620402][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2071.625092][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2071.631176][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2071.637341][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2071.642548][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2071.647403][ T868] do_SYSENTER_32+0x73/0x90 [ 2071.651915][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2071.658231][ T868] [ 2071.660552][ T868] Uninit was stored to memory at: [ 2071.665584][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2071.671307][ T868] __msan_chain_origin+0x50/0x90 [ 2071.676254][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2071.681369][ T868] get_compat_msghdr+0x108/0x2b0 [ 2071.686314][ T868] do_recvmmsg+0xdba/0x22c0 [ 2071.690822][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2071.695507][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2071.701579][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2071.707739][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2071.712944][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2071.717809][ T868] do_SYSENTER_32+0x73/0x90 [ 2071.722320][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2071.728637][ T868] [ 2071.730963][ T868] Uninit was stored to memory at: [ 2071.736008][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2071.741750][ T868] __msan_chain_origin+0x50/0x90 [ 2071.746696][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2071.751828][ T868] get_compat_msghdr+0x108/0x2b0 [ 2071.756767][ T868] do_recvmmsg+0xdba/0x22c0 [ 2071.761272][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2071.765990][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2071.772066][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2071.778228][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2071.783442][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2071.788298][ T868] do_SYSENTER_32+0x73/0x90 [ 2071.792808][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2071.799123][ T868] [ 2071.801448][ T868] Uninit was stored to memory at: [ 2071.806493][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2071.812227][ T868] __msan_chain_origin+0x50/0x90 [ 2071.817177][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2071.822300][ T868] get_compat_msghdr+0x108/0x2b0 [ 2071.827266][ T868] do_recvmmsg+0xdba/0x22c0 [ 2071.831774][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2071.836460][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2071.842533][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2071.848691][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2071.853897][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2071.858757][ T868] do_SYSENTER_32+0x73/0x90 [ 2071.863269][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2071.869587][ T868] [ 2071.871914][ T868] Uninit was stored to memory at: [ 2071.876959][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2071.882685][ T868] __msan_chain_origin+0x50/0x90 [ 2071.887629][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2071.893702][ T868] get_compat_msghdr+0x108/0x2b0 [ 2071.898642][ T868] do_recvmmsg+0xdba/0x22c0 [ 2071.903156][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2071.907844][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2071.913919][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2071.920084][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2071.925290][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2071.930162][ T868] do_SYSENTER_32+0x73/0x90 [ 2071.934672][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2071.940992][ T868] [ 2071.943339][ T868] Uninit was stored to memory at: [ 2071.948380][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2071.954105][ T868] __msan_chain_origin+0x50/0x90 [ 2071.959052][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2071.964172][ T868] get_compat_msghdr+0x108/0x2b0 [ 2071.969114][ T868] do_recvmmsg+0xdba/0x22c0 [ 2071.973621][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2071.978312][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2071.984388][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2071.990546][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2071.995757][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2072.000613][ T868] do_SYSENTER_32+0x73/0x90 [ 2072.005126][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2072.011445][ T868] [ 2072.013784][ T868] Local variable ----msg_sys@do_recvmmsg created at: [ 2072.020468][ T868] do_recvmmsg+0xc2/0x22c0 [ 2072.024889][ T868] do_recvmmsg+0xc2/0x22c0 [ 2072.604706][ T868] not chained 7910000 origins [ 2072.609448][ T868] CPU: 0 PID: 868 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 2072.618290][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2072.628348][ T868] Call Trace: [ 2072.631662][ T868] dump_stack+0x21c/0x280 [ 2072.636021][ T868] kmsan_internal_chain_origin+0x6f/0x130 [ 2072.641779][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2072.646991][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2072.652813][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2072.658888][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2072.664102][ T868] ? kmsan_set_origin_checked+0x95/0xf0 [ 2072.669659][ T868] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2072.675745][ T868] ? _copy_from_user+0x221/0x330 [ 2072.680696][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2072.685907][ T868] __msan_chain_origin+0x50/0x90 [ 2072.690868][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2072.696018][ T868] get_compat_msghdr+0x108/0x2b0 [ 2072.701071][ T868] do_recvmmsg+0xdba/0x22c0 [ 2072.705616][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2072.710833][ T868] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2072.716737][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2072.721959][ T868] ? __msan_poison_alloca+0xf0/0x120 [ 2072.727254][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2072.732025][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2072.736801][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2072.741516][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2072.747605][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2072.753777][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2072.758999][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2072.763863][ T868] do_SYSENTER_32+0x73/0x90 [ 2072.768380][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2072.774712][ T868] RIP: 0023:0xf7f40549 [ 2072.778782][ T868] Code: Bad RIP value. [ 2072.782853][ T868] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2072.791269][ T868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2072.799243][ T868] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2072.807217][ T868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2072.815195][ T868] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2072.823169][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2072.831167][ T868] Uninit was stored to memory at: [ 2072.836217][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2072.841940][ T868] __msan_chain_origin+0x50/0x90 [ 2072.846893][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2072.852012][ T868] get_compat_msghdr+0x108/0x2b0 [ 2072.856958][ T868] do_recvmmsg+0xdba/0x22c0 [ 2072.861461][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2072.866148][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2072.872224][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2072.878394][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2072.883649][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2072.888505][ T868] do_SYSENTER_32+0x73/0x90 [ 2072.893033][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2072.899349][ T868] [ 2072.901672][ T868] Uninit was stored to memory at: [ 2072.906709][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2072.912435][ T868] __msan_chain_origin+0x50/0x90 [ 2072.917377][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2072.922493][ T868] get_compat_msghdr+0x108/0x2b0 [ 2072.927433][ T868] do_recvmmsg+0xdba/0x22c0 [ 2072.931940][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2072.936697][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2072.942784][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2072.949048][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2072.954259][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2072.959114][ T868] do_SYSENTER_32+0x73/0x90 [ 2072.963626][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2072.969946][ T868] [ 2072.972288][ T868] Uninit was stored to memory at: [ 2072.977325][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2072.983064][ T868] __msan_chain_origin+0x50/0x90 [ 2072.988005][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2072.993122][ T868] get_compat_msghdr+0x108/0x2b0 [ 2072.998062][ T868] do_recvmmsg+0xdba/0x22c0 [ 2073.002572][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2073.007255][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2073.013329][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2073.019489][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2073.024698][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2073.029553][ T868] do_SYSENTER_32+0x73/0x90 [ 2073.034072][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2073.040391][ T868] [ 2073.042719][ T868] Uninit was stored to memory at: [ 2073.047756][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2073.053479][ T868] __msan_chain_origin+0x50/0x90 [ 2073.058424][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2073.063546][ T868] get_compat_msghdr+0x108/0x2b0 [ 2073.068490][ T868] do_recvmmsg+0xdba/0x22c0 [ 2073.073000][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2073.077685][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2073.083759][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2073.089921][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2073.095129][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2073.099989][ T868] do_SYSENTER_32+0x73/0x90 [ 2073.104516][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2073.110836][ T868] [ 2073.113163][ T868] Uninit was stored to memory at: [ 2073.118196][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2073.123935][ T868] __msan_chain_origin+0x50/0x90 [ 2073.128885][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2073.134007][ T868] get_compat_msghdr+0x108/0x2b0 [ 2073.138948][ T868] do_recvmmsg+0xdba/0x22c0 [ 2073.143462][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2073.148157][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2073.154248][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2073.160412][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2073.165622][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2073.170480][ T868] do_SYSENTER_32+0x73/0x90 [ 2073.174995][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2073.181310][ T868] [ 2073.183637][ T868] Uninit was stored to memory at: [ 2073.188856][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2073.194579][ T868] __msan_chain_origin+0x50/0x90 [ 2073.199537][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2073.204657][ T868] get_compat_msghdr+0x108/0x2b0 [ 2073.209610][ T868] do_recvmmsg+0xdba/0x22c0 [ 2073.214133][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2073.218817][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2073.224890][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2073.231052][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2073.236257][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2073.241110][ T868] do_SYSENTER_32+0x73/0x90 [ 2073.245619][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2073.251938][ T868] [ 2073.254266][ T868] Uninit was stored to memory at: [ 2073.259302][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2073.265029][ T868] __msan_chain_origin+0x50/0x90 [ 2073.269975][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2073.275091][ T868] get_compat_msghdr+0x108/0x2b0 [ 2073.280040][ T868] do_recvmmsg+0xdba/0x22c0 [ 2073.284545][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2073.289231][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2073.295302][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2073.301462][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2073.306673][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2073.311531][ T868] do_SYSENTER_32+0x73/0x90 [ 2073.316042][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2073.322357][ T868] [ 2073.324684][ T868] Local variable ----msg_sys@do_recvmmsg created at: [ 2073.331375][ T868] do_recvmmsg+0xc2/0x22c0 [ 2073.335794][ T868] do_recvmmsg+0xc2/0x22c0 [ 2073.518371][ T868] not chained 7920000 origins [ 2073.523109][ T868] CPU: 1 PID: 868 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 2073.531610][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2073.541668][ T868] Call Trace: [ 2073.544987][ T868] dump_stack+0x21c/0x280 [ 2073.549348][ T868] kmsan_internal_chain_origin+0x6f/0x130 [ 2073.555097][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2073.560318][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2073.566148][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2073.571368][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2073.577192][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2073.583276][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2073.588500][ T868] ? kmsan_set_origin_checked+0x95/0xf0 [ 2073.594070][ T868] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2073.600161][ T868] ? _copy_from_user+0x221/0x330 [ 2073.605123][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2073.610342][ T868] __msan_chain_origin+0x50/0x90 [ 2073.615312][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2073.620482][ T868] get_compat_msghdr+0x108/0x2b0 [ 2073.625455][ T868] do_recvmmsg+0xdba/0x22c0 [ 2073.630011][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2073.638099][ T868] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2073.644034][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2073.649259][ T868] ? __msan_poison_alloca+0xf0/0x120 [ 2073.654592][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2073.659366][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2073.664151][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2073.668912][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2073.675014][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2073.681187][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2073.686419][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2073.691289][ T868] do_SYSENTER_32+0x73/0x90 [ 2073.695818][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2073.702176][ T868] RIP: 0023:0xf7f40549 [ 2073.706243][ T868] Code: Bad RIP value. [ 2073.710315][ T868] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2073.718741][ T868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2073.726724][ T868] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2073.734703][ T868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2073.742685][ T868] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2073.750671][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2073.758669][ T868] Uninit was stored to memory at: [ 2073.763710][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2073.769439][ T868] __msan_chain_origin+0x50/0x90 [ 2073.774395][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2073.779518][ T868] get_compat_msghdr+0x108/0x2b0 [ 2073.784474][ T868] do_recvmmsg+0xdba/0x22c0 [ 2073.788989][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2073.793681][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2073.799804][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2073.805975][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2073.811298][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2073.816162][ T868] do_SYSENTER_32+0x73/0x90 [ 2073.820688][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2073.827018][ T868] [ 2073.829351][ T868] Uninit was stored to memory at: [ 2073.834440][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2073.840169][ T868] __msan_chain_origin+0x50/0x90 [ 2073.845121][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2073.850239][ T868] get_compat_msghdr+0x108/0x2b0 [ 2073.855185][ T868] do_recvmmsg+0xdba/0x22c0 [ 2073.859693][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2073.864376][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2073.870447][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2073.876607][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2073.881817][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2073.886689][ T868] do_SYSENTER_32+0x73/0x90 [ 2073.891201][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2073.897514][ T868] [ 2073.899839][ T868] Uninit was stored to memory at: [ 2073.904869][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2073.914239][ T868] __msan_chain_origin+0x50/0x90 [ 2073.919199][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2073.924321][ T868] get_compat_msghdr+0x108/0x2b0 [ 2073.929264][ T868] do_recvmmsg+0xdba/0x22c0 [ 2073.933774][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2073.938460][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2073.944539][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2073.950704][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2073.955911][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2073.960770][ T868] do_SYSENTER_32+0x73/0x90 [ 2073.965298][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2073.971619][ T868] [ 2073.973973][ T868] Uninit was stored to memory at: [ 2073.979012][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2073.984738][ T868] __msan_chain_origin+0x50/0x90 [ 2073.989684][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2073.994802][ T868] get_compat_msghdr+0x108/0x2b0 [ 2073.999748][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.004258][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2074.008958][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2074.015042][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2074.021207][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2074.026509][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2074.031379][ T868] do_SYSENTER_32+0x73/0x90 [ 2074.035894][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2074.042217][ T868] [ 2074.044546][ T868] Uninit was stored to memory at: [ 2074.049585][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2074.055310][ T868] __msan_chain_origin+0x50/0x90 [ 2074.060252][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2074.065368][ T868] get_compat_msghdr+0x108/0x2b0 [ 2074.070311][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.074819][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2074.079502][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2074.085574][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2074.091734][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2074.096944][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2074.101803][ T868] do_SYSENTER_32+0x73/0x90 [ 2074.106333][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2074.112657][ T868] [ 2074.114982][ T868] Uninit was stored to memory at: [ 2074.120026][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2074.125748][ T868] __msan_chain_origin+0x50/0x90 [ 2074.130689][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2074.135806][ T868] get_compat_msghdr+0x108/0x2b0 [ 2074.140748][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.145256][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2074.149959][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2074.156031][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2074.162195][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2074.167400][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2074.172256][ T868] do_SYSENTER_32+0x73/0x90 [ 2074.176779][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2074.183097][ T868] [ 2074.185423][ T868] Uninit was stored to memory at: [ 2074.190469][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2074.196195][ T868] __msan_chain_origin+0x50/0x90 [ 2074.201137][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2074.206253][ T868] get_compat_msghdr+0x108/0x2b0 [ 2074.211197][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.215703][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2074.220392][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2074.226469][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2074.232630][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2074.237836][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2074.242693][ T868] do_SYSENTER_32+0x73/0x90 [ 2074.247199][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2074.253518][ T868] [ 2074.255843][ T868] Local variable ----msg_sys@do_recvmmsg created at: [ 2074.262519][ T868] do_recvmmsg+0xc2/0x22c0 [ 2074.266943][ T868] do_recvmmsg+0xc2/0x22c0 [ 2074.454396][ T868] not chained 7930000 origins [ 2074.459150][ T868] CPU: 1 PID: 868 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 2074.467642][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2074.477695][ T868] Call Trace: [ 2074.481020][ T868] dump_stack+0x21c/0x280 [ 2074.485393][ T868] kmsan_internal_chain_origin+0x6f/0x130 [ 2074.491140][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2074.497234][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2074.502443][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2074.508273][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2074.514347][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2074.519558][ T868] ? kmsan_set_origin_checked+0x95/0xf0 [ 2074.525118][ T868] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2074.531205][ T868] ? _copy_from_user+0x221/0x330 [ 2074.536156][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2074.541366][ T868] __msan_chain_origin+0x50/0x90 [ 2074.546319][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2074.551466][ T868] get_compat_msghdr+0x108/0x2b0 [ 2074.556428][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.560972][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2074.566188][ T868] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2074.572097][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2074.577314][ T868] ? __msan_poison_alloca+0xf0/0x120 [ 2074.582610][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2074.587380][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2074.592158][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2074.596868][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2074.602964][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2074.609145][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2074.614368][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2074.619234][ T868] do_SYSENTER_32+0x73/0x90 [ 2074.623755][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2074.630084][ T868] RIP: 0023:0xf7f40549 [ 2074.634149][ T868] Code: Bad RIP value. [ 2074.638219][ T868] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2074.646635][ T868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2074.654607][ T868] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2074.662579][ T868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2074.670560][ T868] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2074.678536][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2074.686612][ T868] Uninit was stored to memory at: [ 2074.691650][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2074.697378][ T868] __msan_chain_origin+0x50/0x90 [ 2074.702326][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2074.707441][ T868] get_compat_msghdr+0x108/0x2b0 [ 2074.712383][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.716892][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2074.721573][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2074.727643][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2074.733807][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2074.739013][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2074.743872][ T868] do_SYSENTER_32+0x73/0x90 [ 2074.748380][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2074.754697][ T868] [ 2074.757018][ T868] Uninit was stored to memory at: [ 2074.762049][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2074.767774][ T868] __msan_chain_origin+0x50/0x90 [ 2074.772717][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2074.777834][ T868] get_compat_msghdr+0x108/0x2b0 [ 2074.782777][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.787285][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2074.791972][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2074.798043][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2074.804291][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2074.809513][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2074.814378][ T868] do_SYSENTER_32+0x73/0x90 [ 2074.818894][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2074.825219][ T868] [ 2074.827563][ T868] Uninit was stored to memory at: [ 2074.832599][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2074.838326][ T868] __msan_chain_origin+0x50/0x90 [ 2074.843273][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2074.848390][ T868] get_compat_msghdr+0x108/0x2b0 [ 2074.853338][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.857968][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2074.862662][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2074.868736][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2074.874898][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2074.880106][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2074.884967][ T868] do_SYSENTER_32+0x73/0x90 [ 2074.889479][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2074.895796][ T868] [ 2074.898123][ T868] Uninit was stored to memory at: [ 2074.903155][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2074.908879][ T868] __msan_chain_origin+0x50/0x90 [ 2074.913821][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2074.918936][ T868] get_compat_msghdr+0x108/0x2b0 [ 2074.923883][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.928392][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2074.933077][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2074.939159][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2074.945329][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2074.950544][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2074.955410][ T868] do_SYSENTER_32+0x73/0x90 [ 2074.959928][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2074.966245][ T868] [ 2074.968578][ T868] Uninit was stored to memory at: [ 2074.973609][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2074.979337][ T868] __msan_chain_origin+0x50/0x90 [ 2074.984282][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2074.989398][ T868] get_compat_msghdr+0x108/0x2b0 [ 2074.994341][ T868] do_recvmmsg+0xdba/0x22c0 [ 2074.998846][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2075.003531][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2075.009602][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2075.015761][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2075.020965][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2075.025822][ T868] do_SYSENTER_32+0x73/0x90 [ 2075.030332][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2075.036648][ T868] [ 2075.038973][ T868] Uninit was stored to memory at: [ 2075.044012][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2075.049744][ T868] __msan_chain_origin+0x50/0x90 [ 2075.054693][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2075.059809][ T868] get_compat_msghdr+0x108/0x2b0 [ 2075.064754][ T868] do_recvmmsg+0xdba/0x22c0 [ 2075.069259][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2075.073947][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2075.080023][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2075.086187][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2075.091394][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2075.096253][ T868] do_SYSENTER_32+0x73/0x90 [ 2075.100766][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2075.107080][ T868] [ 2075.109406][ T868] Uninit was stored to memory at: [ 2075.114438][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2075.120161][ T868] __msan_chain_origin+0x50/0x90 [ 2075.125108][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2075.130222][ T868] get_compat_msghdr+0x108/0x2b0 [ 2075.135166][ T868] do_recvmmsg+0xdba/0x22c0 [ 2075.139672][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2075.144357][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2075.150430][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2075.156591][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2075.161808][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2075.166666][ T868] do_SYSENTER_32+0x73/0x90 [ 2075.171185][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2075.177505][ T868] [ 2075.179834][ T868] Local variable ----msg_sys@do_recvmmsg created at: [ 2075.186513][ T868] do_recvmmsg+0xc2/0x22c0 [ 2075.190942][ T868] do_recvmmsg+0xc2/0x22c0 [ 2075.411333][ T868] not chained 7940000 origins [ 2075.416107][ T868] CPU: 1 PID: 868 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 2075.424609][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2075.434673][ T868] Call Trace: [ 2075.437993][ T868] dump_stack+0x21c/0x280 [ 2075.442356][ T868] kmsan_internal_chain_origin+0x6f/0x130 [ 2075.448112][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2075.453330][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2075.459180][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2075.464455][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2075.470283][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2075.476458][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2075.481672][ T868] ? kmsan_set_origin_checked+0x95/0xf0 [ 2075.487237][ T868] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2075.493331][ T868] ? _copy_from_user+0x221/0x330 [ 2075.498322][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2075.503644][ T868] __msan_chain_origin+0x50/0x90 [ 2075.508606][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2075.513763][ T868] get_compat_msghdr+0x108/0x2b0 [ 2075.518739][ T868] do_recvmmsg+0xdba/0x22c0 [ 2075.523290][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2075.528515][ T868] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2075.534438][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2075.539663][ T868] ? __msan_poison_alloca+0xf0/0x120 [ 2075.544965][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2075.549742][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2075.554527][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2075.559247][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2075.565348][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2075.571527][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2075.576753][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2075.581622][ T868] do_SYSENTER_32+0x73/0x90 [ 2075.586152][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2075.592491][ T868] RIP: 0023:0xf7f40549 [ 2075.596561][ T868] Code: Bad RIP value. [ 2075.600633][ T868] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2075.609056][ T868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2075.617037][ T868] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2075.625016][ T868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2075.632997][ T868] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2075.640977][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2075.648970][ T868] Uninit was stored to memory at: [ 2075.654010][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2075.659740][ T868] __msan_chain_origin+0x50/0x90 [ 2075.664692][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2075.669816][ T868] get_compat_msghdr+0x108/0x2b0 [ 2075.674766][ T868] do_recvmmsg+0xdba/0x22c0 [ 2075.679277][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2075.683967][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2075.690045][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2075.696211][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2075.701428][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2075.706294][ T868] do_SYSENTER_32+0x73/0x90 [ 2075.710819][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2075.717140][ T868] [ 2075.719472][ T868] Uninit was stored to memory at: [ 2075.724507][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2075.730237][ T868] __msan_chain_origin+0x50/0x90 [ 2075.735204][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2075.740347][ T868] get_compat_msghdr+0x108/0x2b0 [ 2075.745299][ T868] do_recvmmsg+0xdba/0x22c0 [ 2075.749821][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2075.754544][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2075.760626][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2075.766791][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2075.772024][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2075.776885][ T868] do_SYSENTER_32+0x73/0x90 [ 2075.781434][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2075.787755][ T868] [ 2075.790083][ T868] Uninit was stored to memory at: [ 2075.795125][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2075.800854][ T868] __msan_chain_origin+0x50/0x90 [ 2075.805804][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2075.810925][ T868] get_compat_msghdr+0x108/0x2b0 [ 2075.815878][ T868] do_recvmmsg+0xdba/0x22c0 [ 2075.820398][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2075.825096][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2075.831186][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2075.837358][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2075.842573][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2075.847440][ T868] do_SYSENTER_32+0x73/0x90 [ 2075.851959][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2075.858280][ T868] [ 2075.860608][ T868] Uninit was stored to memory at: [ 2075.865652][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2075.871381][ T868] __msan_chain_origin+0x50/0x90 [ 2075.876339][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2075.881466][ T868] get_compat_msghdr+0x108/0x2b0 [ 2075.886414][ T868] do_recvmmsg+0xdba/0x22c0 [ 2075.890950][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2075.895649][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2075.901726][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2075.907894][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2075.913122][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2075.918002][ T868] do_SYSENTER_32+0x73/0x90 [ 2075.922518][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2075.928838][ T868] [ 2075.931179][ T868] Uninit was stored to memory at: [ 2075.936218][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2075.941958][ T868] __msan_chain_origin+0x50/0x90 [ 2075.946914][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2075.952038][ T868] get_compat_msghdr+0x108/0x2b0 [ 2075.956989][ T868] do_recvmmsg+0xdba/0x22c0 [ 2075.961503][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2075.966205][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2075.972281][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2075.978446][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2075.983653][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2075.988514][ T868] do_SYSENTER_32+0x73/0x90 [ 2075.993025][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2075.999342][ T868] [ 2076.001665][ T868] Uninit was stored to memory at: [ 2076.006697][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2076.012419][ T868] __msan_chain_origin+0x50/0x90 [ 2076.017382][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2076.022498][ T868] get_compat_msghdr+0x108/0x2b0 [ 2076.027443][ T868] do_recvmmsg+0xdba/0x22c0 [ 2076.031949][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2076.036631][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2076.042702][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2076.048861][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2076.054065][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2076.058921][ T868] do_SYSENTER_32+0x73/0x90 [ 2076.063431][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2076.069751][ T868] [ 2076.072077][ T868] Uninit was stored to memory at: [ 2076.077110][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2076.082834][ T868] __msan_chain_origin+0x50/0x90 [ 2076.087774][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2076.092904][ T868] get_compat_msghdr+0x108/0x2b0 [ 2076.097844][ T868] do_recvmmsg+0xdba/0x22c0 [ 2076.102349][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2076.107046][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2076.113121][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2076.119279][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2076.124482][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2076.129335][ T868] do_SYSENTER_32+0x73/0x90 [ 2076.133848][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2076.140166][ T868] [ 2076.142492][ T868] Local variable ----msg_sys@do_recvmmsg created at: [ 2076.149168][ T868] do_recvmmsg+0xc2/0x22c0 [ 2076.153587][ T868] do_recvmmsg+0xc2/0x22c0 [ 2076.363074][ T868] not chained 7950000 origins [ 2076.367818][ T868] CPU: 1 PID: 868 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 2076.376313][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2076.386369][ T868] Call Trace: [ 2076.389689][ T868] dump_stack+0x21c/0x280 [ 2076.394042][ T868] kmsan_internal_chain_origin+0x6f/0x130 [ 2076.399789][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2076.405015][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2076.410229][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2076.415442][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2076.421262][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2076.427340][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2076.432565][ T868] ? kmsan_set_origin_checked+0x95/0xf0 [ 2076.438125][ T868] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2076.444212][ T868] ? _copy_from_user+0x221/0x330 [ 2076.449162][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2076.454370][ T868] __msan_chain_origin+0x50/0x90 [ 2076.459339][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2076.464492][ T868] get_compat_msghdr+0x108/0x2b0 [ 2076.469458][ T868] do_recvmmsg+0xdba/0x22c0 [ 2076.474001][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2076.479216][ T868] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2076.485122][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2076.490336][ T868] ? __msan_poison_alloca+0xf0/0x120 [ 2076.495632][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2076.500403][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2076.505186][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2076.509902][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2076.515993][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2076.522178][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2076.527397][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2076.532266][ T868] do_SYSENTER_32+0x73/0x90 [ 2076.536780][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2076.543111][ T868] RIP: 0023:0xf7f40549 [ 2076.547176][ T868] Code: Bad RIP value. [ 2076.551242][ T868] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2076.559659][ T868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2076.567649][ T868] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2076.575623][ T868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2076.584568][ T868] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2076.592540][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2076.600528][ T868] Uninit was stored to memory at: [ 2076.605577][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2076.611302][ T868] __msan_chain_origin+0x50/0x90 [ 2076.616247][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2076.621366][ T868] get_compat_msghdr+0x108/0x2b0 [ 2076.626311][ T868] do_recvmmsg+0xdba/0x22c0 [ 2076.630830][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2076.635513][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2076.641585][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2076.647746][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2076.652969][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2076.657823][ T868] do_SYSENTER_32+0x73/0x90 [ 2076.662332][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2076.668667][ T868] [ 2076.670992][ T868] Uninit was stored to memory at: [ 2076.676981][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2076.682703][ T868] __msan_chain_origin+0x50/0x90 [ 2076.687646][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2076.692761][ T868] get_compat_msghdr+0x108/0x2b0 [ 2076.697700][ T868] do_recvmmsg+0xdba/0x22c0 [ 2076.702208][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2076.706889][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2076.712964][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2076.719126][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2076.724331][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2076.729186][ T868] do_SYSENTER_32+0x73/0x90 [ 2076.733694][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2076.740011][ T868] [ 2076.742334][ T868] Uninit was stored to memory at: [ 2076.747365][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2076.753089][ T868] __msan_chain_origin+0x50/0x90 [ 2076.758054][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2076.763170][ T868] get_compat_msghdr+0x108/0x2b0 [ 2076.768116][ T868] do_recvmmsg+0xdba/0x22c0 [ 2076.772627][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2076.777313][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2076.783387][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2076.789548][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2076.794771][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2076.799642][ T868] do_SYSENTER_32+0x73/0x90 [ 2076.804152][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2076.810469][ T868] [ 2076.812791][ T868] Uninit was stored to memory at: [ 2076.817822][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2076.823548][ T868] __msan_chain_origin+0x50/0x90 [ 2076.828488][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2076.833602][ T868] get_compat_msghdr+0x108/0x2b0 [ 2076.838543][ T868] do_recvmmsg+0xdba/0x22c0 [ 2076.843049][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2076.847729][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2076.853822][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2076.859981][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2076.865185][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2076.870040][ T868] do_SYSENTER_32+0x73/0x90 [ 2076.874550][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2076.880864][ T868] [ 2076.883186][ T868] Uninit was stored to memory at: [ 2076.888224][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2076.893946][ T868] __msan_chain_origin+0x50/0x90 [ 2076.898887][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2076.904006][ T868] get_compat_msghdr+0x108/0x2b0 [ 2076.908949][ T868] do_recvmmsg+0xdba/0x22c0 [ 2076.913463][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2076.918331][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2076.924409][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2076.930577][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2076.935788][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2076.940661][ T868] do_SYSENTER_32+0x73/0x90 [ 2076.945180][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2076.951500][ T868] [ 2076.953842][ T868] Uninit was stored to memory at: [ 2076.958876][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2076.964631][ T868] __msan_chain_origin+0x50/0x90 [ 2076.969576][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2076.974692][ T868] get_compat_msghdr+0x108/0x2b0 [ 2076.979641][ T868] do_recvmmsg+0xdba/0x22c0 [ 2076.984147][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2076.988830][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2076.994905][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2077.001065][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2077.006273][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2077.011131][ T868] do_SYSENTER_32+0x73/0x90 [ 2077.015667][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2077.021994][ T868] [ 2077.024319][ T868] Uninit was stored to memory at: [ 2077.029355][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2077.035086][ T868] __msan_chain_origin+0x50/0x90 [ 2077.040033][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2077.045165][ T868] get_compat_msghdr+0x108/0x2b0 [ 2077.050125][ T868] do_recvmmsg+0xdba/0x22c0 [ 2077.054638][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2077.059325][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2077.065402][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2077.071567][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2077.076776][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2077.081631][ T868] do_SYSENTER_32+0x73/0x90 [ 2077.086174][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2077.092495][ T868] [ 2077.094838][ T868] Local variable ----msg_sys@do_recvmmsg created at: [ 2077.101515][ T868] do_recvmmsg+0xc2/0x22c0 [ 2077.105937][ T868] do_recvmmsg+0xc2/0x22c0 [ 2077.528964][ T868] not chained 7960000 origins [ 2077.533709][ T868] CPU: 0 PID: 868 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 2077.542297][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2077.552361][ T868] Call Trace: [ 2077.555685][ T868] dump_stack+0x21c/0x280 [ 2077.560044][ T868] kmsan_internal_chain_origin+0x6f/0x130 [ 2077.565813][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2077.571037][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2077.576864][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2077.582949][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2077.588167][ T868] ? kmsan_set_origin_checked+0x95/0xf0 [ 2077.593735][ T868] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2077.599826][ T868] ? _copy_from_user+0x221/0x330 [ 2077.604805][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2077.610021][ T868] __msan_chain_origin+0x50/0x90 [ 2077.614985][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2077.620160][ T868] get_compat_msghdr+0x108/0x2b0 [ 2077.625133][ T868] do_recvmmsg+0xdba/0x22c0 [ 2077.629692][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2077.634917][ T868] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2077.640833][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2077.646058][ T868] ? __msan_poison_alloca+0xf0/0x120 [ 2077.651361][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2077.656135][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2077.660924][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2077.665659][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2077.671763][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2077.677943][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2077.683175][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2077.688054][ T868] do_SYSENTER_32+0x73/0x90 [ 2077.692584][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2077.698920][ T868] RIP: 0023:0xf7f40549 [ 2077.702987][ T868] Code: Bad RIP value. [ 2077.707057][ T868] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2077.715478][ T868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2077.723455][ T868] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2077.731428][ T868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2077.739401][ T868] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2077.747379][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2077.755372][ T868] Uninit was stored to memory at: [ 2077.760433][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2077.766163][ T868] __msan_chain_origin+0x50/0x90 [ 2077.771109][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2077.776229][ T868] get_compat_msghdr+0x108/0x2b0 [ 2077.781170][ T868] do_recvmmsg+0xdba/0x22c0 [ 2077.785691][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2077.790376][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2077.796458][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2077.802618][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2077.807824][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2077.812702][ T868] do_SYSENTER_32+0x73/0x90 [ 2077.817219][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2077.823541][ T868] [ 2077.825863][ T868] Uninit was stored to memory at: [ 2077.830898][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2077.836621][ T868] __msan_chain_origin+0x50/0x90 [ 2077.841564][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2077.846684][ T868] get_compat_msghdr+0x108/0x2b0 [ 2077.851630][ T868] do_recvmmsg+0xdba/0x22c0 [ 2077.856143][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2077.860828][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2077.866904][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2077.873068][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2077.878296][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2077.883157][ T868] do_SYSENTER_32+0x73/0x90 [ 2077.887762][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2077.894093][ T868] [ 2077.896533][ T868] Uninit was stored to memory at: [ 2077.901576][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2077.907307][ T868] __msan_chain_origin+0x50/0x90 [ 2077.912260][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2077.926880][ T868] get_compat_msghdr+0x108/0x2b0 [ 2077.931847][ T868] do_recvmmsg+0xdba/0x22c0 [ 2077.936355][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2077.941044][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2077.947132][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2077.953306][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2077.958526][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2077.963388][ T868] do_SYSENTER_32+0x73/0x90 [ 2077.967901][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2077.974226][ T868] [ 2077.977509][ T868] Uninit was stored to memory at: [ 2077.982546][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2077.988287][ T868] __msan_chain_origin+0x50/0x90 [ 2077.993236][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2077.998371][ T868] get_compat_msghdr+0x108/0x2b0 [ 2078.003316][ T868] do_recvmmsg+0xdba/0x22c0 [ 2078.007836][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2078.012539][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2078.019243][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2078.025411][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2078.030640][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2078.035504][ T868] do_SYSENTER_32+0x73/0x90 [ 2078.040032][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2078.046351][ T868] [ 2078.048677][ T868] Uninit was stored to memory at: [ 2078.053711][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2078.059454][ T868] __msan_chain_origin+0x50/0x90 [ 2078.064404][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2078.069523][ T868] get_compat_msghdr+0x108/0x2b0 [ 2078.074468][ T868] do_recvmmsg+0xdba/0x22c0 [ 2078.078985][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2078.083676][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2078.089749][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2078.095913][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2078.101123][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2078.106003][ T868] do_SYSENTER_32+0x73/0x90 [ 2078.110514][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2078.116851][ T868] [ 2078.119179][ T868] Uninit was stored to memory at: [ 2078.124230][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2078.129957][ T868] __msan_chain_origin+0x50/0x90 [ 2078.134999][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2078.140121][ T868] get_compat_msghdr+0x108/0x2b0 [ 2078.145068][ T868] do_recvmmsg+0xdba/0x22c0 [ 2078.149575][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2078.154261][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2078.160337][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2078.166497][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2078.171729][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2078.176699][ T868] do_SYSENTER_32+0x73/0x90 [ 2078.181486][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2078.187820][ T868] [ 2078.190147][ T868] Uninit was stored to memory at: [ 2078.195614][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2078.201370][ T868] __msan_chain_origin+0x50/0x90 [ 2078.206316][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2078.211445][ T868] get_compat_msghdr+0x108/0x2b0 [ 2078.216408][ T868] do_recvmmsg+0xdba/0x22c0 [ 2078.220915][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2078.225601][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2078.231687][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2078.237865][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2078.243071][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2078.247946][ T868] do_SYSENTER_32+0x73/0x90 [ 2078.252641][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2078.258959][ T868] [ 2078.261301][ T868] Local variable ----msg_sys@do_recvmmsg created at: [ 2078.267983][ T868] do_recvmmsg+0xc2/0x22c0 [ 2078.272406][ T868] do_recvmmsg+0xc2/0x22c0 09:36:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x7ffff000}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4400ae8f, &(0x7f0000000100)) 09:36:08 executing program 2: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000130004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 09:36:08 executing program 4: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000840)="e4", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000880)="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", 0x119, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r2}, &(0x7f0000000600)=""/206, 0xce, &(0x7f0000000740)={&(0x7f0000000540)={'poly1305\x00'}, &(0x7f0000000700)="b72626fd32ab7483c72634ed4adac8e1e3793fc21b2684dac9a33cb339", 0x1d}) 09:36:08 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x64, 0x0, 0x0, 0xfb00}]}) 09:36:08 executing program 5: set_mempolicy(0x2, &(0x7f0000000140)=0x1, 0x7) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) [ 2078.890199][ T894] ===================================================== [ 2078.898022][ T894] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 2078.905513][ T894] CPU: 1 PID: 894 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 2078.914022][ T894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.924109][ T894] Call Trace: [ 2078.927445][ T894] dump_stack+0x21c/0x280 [ 2078.931812][ T894] kmsan_report+0xf7/0x1e0 [ 2078.936264][ T894] kmsan_internal_check_memory+0x358/0x3d0 [ 2078.942097][ T894] ? should_fail+0x72/0x9e0 [ 2078.946716][ T894] ? crypto_shash_final+0x3cd/0x480 [ 2078.951975][ T894] kmsan_copy_to_user+0x81/0x90 [ 2078.956886][ T894] _copy_to_user+0x1d2/0x2b0 [ 2078.961659][ T894] __keyctl_dh_compute+0x24ea/0x2fa0 [ 2078.967050][ T894] compat_keyctl_dh_compute+0x34b/0x3e0 [ 2078.972645][ T894] __se_compat_sys_keyctl+0xb35/0xd90 [ 2078.978083][ T894] ? kmsan_get_metadata+0x116/0x180 [ 2078.983328][ T894] ? kmsan_get_metadata+0x116/0x180 [ 2078.988555][ T894] ? kmsan_get_metadata+0x116/0x180 [ 2078.993783][ T894] ? kmsan_set_origin_checked+0x95/0xf0 [ 2078.999790][ T894] ? kmsan_get_metadata+0x116/0x180 [ 2079.005019][ T894] __ia32_compat_sys_keyctl+0x62/0x80 [ 2079.010444][ T894] __do_fast_syscall_32+0x2af/0x480 [ 2079.015788][ T894] do_fast_syscall_32+0x6b/0xd0 [ 2079.020706][ T894] do_SYSENTER_32+0x73/0x90 [ 2079.025248][ T894] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2079.028980][ T868] not chained 7970000 origins [ 2079.031616][ T894] RIP: 0023:0xf7f96549 [ 2079.040319][ T894] Code: Bad RIP value. [ 2079.044390][ T894] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000120 [ 2079.052813][ T894] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000400 [ 2079.060789][ T894] RDX: 0000000020000600 RSI: 00000000000000ce RDI: 0000000020000740 [ 2079.068779][ T894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2079.076751][ T894] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2079.084730][ T894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2079.092718][ T894] [ 2079.092741][ T868] CPU: 0 PID: 868 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 2079.092764][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2079.095082][ T894] Uninit was created at: [ 2079.103570][ T868] Call Trace: [ 2079.113745][ T894] kmsan_internal_poison_shadow+0x66/0xd0 [ 2079.117981][ T868] dump_stack+0x21c/0x280 [ 2079.121247][ T894] kmsan_slab_alloc+0x8a/0xe0 [ 2079.126959][ T868] kmsan_internal_chain_origin+0x6f/0x130 [ 2079.131283][ T894] __kmalloc+0x312/0x410 [ 2079.135937][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2079.141650][ T894] __keyctl_dh_compute+0x1f82/0x2fa0 [ 2079.145874][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2079.151141][ T894] compat_keyctl_dh_compute+0x34b/0x3e0 [ 2079.156418][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2079.162212][ T894] __se_compat_sys_keyctl+0xb35/0xd90 [ 2079.167744][ T868] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2079.172936][ T894] __ia32_compat_sys_keyctl+0x62/0x80 [ 2079.178301][ T868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2079.184354][ T894] __do_fast_syscall_32+0x2af/0x480 [ 2079.189717][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2079.195797][ T894] do_fast_syscall_32+0x6b/0xd0 [ 2079.200975][ T868] ? kmsan_set_origin_checked+0x95/0xf0 [ 2079.208704][ T894] do_SYSENTER_32+0x73/0x90 [ 2079.213539][ T868] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 2079.219071][ T894] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2079.223557][ T868] ? _copy_from_user+0x221/0x330 [ 2079.229587][ T894] [ 2079.235914][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2079.240825][ T894] Bytes 0-205 of 206 are uninitialized [ 2079.243151][ T868] __msan_chain_origin+0x50/0x90 [ 2079.248324][ T894] Memory access of size 206 starts at ffff8881cad6b700 [ 2079.253797][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2079.258702][ T894] Data copied to user address 0000000020000600 [ 2079.265565][ T868] get_compat_msghdr+0x108/0x2b0 [ 2079.270626][ T894] ===================================================== [ 2079.276800][ T868] do_recvmmsg+0xdba/0x22c0 [ 2079.281708][ T894] Disabling lock debugging due to kernel taint [ 2079.288667][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2079.293119][ T894] Kernel panic - not syncing: panic_on_warn set ... [ 2079.299272][ T868] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 2079.317336][ T868] ? kmsan_get_metadata+0x116/0x180 [ 2079.322556][ T868] ? __msan_poison_alloca+0xf0/0x120 [ 2079.328119][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2079.332887][ T868] ? __sys_recvmmsg+0xbb/0x610 [ 2079.337664][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2079.342405][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2079.348496][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2079.354660][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2079.359896][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2079.364764][ T868] do_SYSENTER_32+0x73/0x90 [ 2079.369302][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2079.375980][ T868] RIP: 0023:0xf7f40549 [ 2079.380044][ T868] Code: Bad RIP value. [ 2079.384117][ T868] RSP: 002b:00000000f55190cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2079.394729][ T868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2079.402702][ T868] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2079.410673][ T868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2079.418657][ T868] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2079.426642][ T868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2079.434632][ T868] Uninit was stored to memory at: [ 2079.434656][ T894] CPU: 1 PID: 894 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 2079.434680][ T894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2079.439703][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2079.449584][ T894] Call Trace: [ 2079.459646][ T868] __msan_chain_origin+0x50/0x90 [ 2079.465351][ T894] dump_stack+0x21c/0x280 [ 2079.468624][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2079.473610][ T894] panic+0x4d7/0xef7 [ 2079.478549][ T868] get_compat_msghdr+0x108/0x2b0 [ 2079.483670][ T894] ? add_taint+0x17c/0x210 [ 2079.487535][ T868] do_recvmmsg+0xdba/0x22c0 [ 2079.492461][ T894] kmsan_report+0x1df/0x1e0 [ 2079.496853][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2079.501359][ T894] kmsan_internal_check_memory+0x358/0x3d0 [ 2079.505845][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2079.510507][ T894] ? should_fail+0x72/0x9e0 [ 2079.516470][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2079.522545][ T894] ? crypto_shash_final+0x3cd/0x480 [ 2079.527028][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2079.533191][ T894] kmsan_copy_to_user+0x81/0x90 [ 2079.538368][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2079.543982][ T894] _copy_to_user+0x1d2/0x2b0 [ 2079.548812][ T868] do_SYSENTER_32+0x73/0x90 [ 2079.553661][ T894] __keyctl_dh_compute+0x24ea/0x2fa0 [ 2079.558224][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2079.562768][ T894] compat_keyctl_dh_compute+0x34b/0x3e0 [ 2079.567961][ T868] [ 2079.574305][ T894] __se_compat_sys_keyctl+0xb35/0xd90 [ 2079.579802][ T868] Uninit was stored to memory at: [ 2079.582138][ T894] ? kmsan_get_metadata+0x116/0x180 [ 2079.587493][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2079.592501][ T894] ? kmsan_get_metadata+0x116/0x180 [ 2079.597685][ T868] __msan_chain_origin+0x50/0x90 [ 2079.603400][ T894] ? kmsan_get_metadata+0x116/0x180 [ 2079.608584][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2079.613502][ T894] ? kmsan_set_origin_checked+0x95/0xf0 [ 2079.618698][ T868] get_compat_msghdr+0x108/0x2b0 [ 2079.623798][ T894] ? kmsan_get_metadata+0x116/0x180 [ 2079.629323][ T868] do_recvmmsg+0xdba/0x22c0 [ 2079.634251][ T894] __ia32_compat_sys_keyctl+0x62/0x80 [ 2079.639426][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2079.643924][ T894] __do_fast_syscall_32+0x2af/0x480 [ 2079.649284][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2079.653967][ T894] do_fast_syscall_32+0x6b/0xd0 [ 2079.659148][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2079.665200][ T894] do_SYSENTER_32+0x73/0x90 [ 2079.670034][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2079.676174][ T894] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2079.680662][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2079.685840][ T894] RIP: 0023:0xf7f96549 [ 2079.692153][ T868] do_SYSENTER_32+0x73/0x90 [ 2079.697596][ T894] Code: Bad RIP value. [ 2079.701673][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2079.706152][ T894] RSP: 002b:00000000f55900cc EFLAGS: 00000296 ORIG_RAX: 0000000000000120 [ 2079.710196][ T868] [ 2079.716610][ T894] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000400 [ 2079.729422][ T868] Uninit was stored to memory at: [ 2079.731749][ T894] RDX: 0000000020000600 RSI: 00000000000000ce RDI: 0000000020000740 [ 2079.739718][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2079.744703][ T894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2079.752665][ T868] __msan_chain_origin+0x50/0x90 [ 2079.758357][ T894] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2079.766329][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2079.771239][ T894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2079.779223][ T868] get_compat_msghdr+0x108/0x2b0 [ 2079.797200][ T868] do_recvmmsg+0xdba/0x22c0 [ 2079.801704][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2079.806381][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2079.812447][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2079.818602][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2079.823799][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2079.828648][ T868] do_SYSENTER_32+0x73/0x90 [ 2079.833152][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2079.839477][ T868] [ 2079.841798][ T868] Uninit was stored to memory at: [ 2079.846824][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2079.852542][ T868] __msan_chain_origin+0x50/0x90 [ 2079.857492][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2079.862622][ T868] get_compat_msghdr+0x108/0x2b0 [ 2079.867559][ T868] do_recvmmsg+0xdba/0x22c0 [ 2079.872061][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2079.876736][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2079.882803][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2079.888960][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2079.894163][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2079.899028][ T868] do_SYSENTER_32+0x73/0x90 [ 2079.903535][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2079.909847][ T868] [ 2079.912169][ T868] Uninit was stored to memory at: [ 2079.917210][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2079.923537][ T868] __msan_chain_origin+0x50/0x90 [ 2079.928477][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2079.933591][ T868] get_compat_msghdr+0x108/0x2b0 [ 2079.938552][ T868] do_recvmmsg+0xdba/0x22c0 [ 2079.943079][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2079.947765][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2079.954270][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2079.960447][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2079.965659][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2079.970510][ T868] do_SYSENTER_32+0x73/0x90 [ 2079.975034][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2079.981349][ T868] [ 2079.983674][ T868] Uninit was stored to memory at: [ 2079.988720][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2079.994439][ T868] __msan_chain_origin+0x50/0x90 [ 2079.999396][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2080.004529][ T868] get_compat_msghdr+0x108/0x2b0 [ 2080.009468][ T868] do_recvmmsg+0xdba/0x22c0 [ 2080.013972][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2080.018649][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2080.024714][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2080.030867][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2080.036068][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2080.040931][ T868] do_SYSENTER_32+0x73/0x90 [ 2080.045443][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2080.051760][ T868] [ 2080.054082][ T868] Uninit was stored to memory at: [ 2080.059111][ T868] kmsan_internal_chain_origin+0xad/0x130 [ 2080.064834][ T868] __msan_chain_origin+0x50/0x90 [ 2080.069771][ T868] __get_compat_msghdr+0x6db/0x9d0 [ 2080.074882][ T868] get_compat_msghdr+0x108/0x2b0 [ 2080.079838][ T868] do_recvmmsg+0xdba/0x22c0 [ 2080.084343][ T868] __sys_recvmmsg+0x5dd/0x610 [ 2080.089044][ T868] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2080.095121][ T868] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2080.101275][ T868] __do_fast_syscall_32+0x2af/0x480 [ 2080.106480][ T868] do_fast_syscall_32+0x6b/0xd0 [ 2080.111330][ T868] do_SYSENTER_32+0x73/0x90 [ 2080.115929][ T868] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2080.122247][ T868] [ 2080.124572][ T868] Local variable ----msg_sys@do_recvmmsg created at: [ 2080.131270][ T868] do_recvmmsg+0xc2/0x22c0 [ 2080.135687][ T868] do_recvmmsg+0xc2/0x22c0 [ 2080.141264][ T894] Kernel Offset: disabled [ 2080.145859][ T894] Rebooting in 86400 seconds..