[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. syzkaller login: [ 145.161669][ T8225] IPVS: ftp: loaded support on port[0] = 21 [ 145.347569][ T8225] chnl_net:caif_netlink_parms(): no params data found [ 145.439064][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.446568][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.456235][ T8225] device bridge_slave_0 entered promiscuous mode [ 145.466793][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.474513][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.484924][ T8225] device bridge_slave_1 entered promiscuous mode [ 145.521765][ T8225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.537468][ T8225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.575119][ T8225] team0: Port device team_slave_0 added [ 145.586099][ T8225] team0: Port device team_slave_1 added [ 145.617258][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.624631][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.651001][ T8225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.665290][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.672467][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.698810][ T8225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.742595][ T8225] device hsr_slave_0 entered promiscuous mode [ 145.750287][ T8225] device hsr_slave_1 entered promiscuous mode [ 145.943511][ T8225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.958477][ T8225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.977015][ T8225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.996054][ T8225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.087730][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.095807][ T8225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.103978][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.111241][ T8225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.199770][ T8225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.221654][ T1978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.235117][ T1978] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.244167][ T1978] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.256902][ T1978] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 146.276240][ T8225] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.294326][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.303678][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.310860][ T8433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.329156][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.339382][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.349807][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.357389][ T8433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.382835][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.420278][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.454846][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.465601][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.515898][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.526188][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.536873][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.547847][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.557750][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.567486][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.577589][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.598560][ T8225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.638032][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.646373][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.668090][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.704858][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.716067][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.750832][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.760649][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.775929][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.786047][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.800608][ T8225] device veth0_vlan entered promiscuous mode [ 146.820846][ T8225] device veth1_vlan entered promiscuous mode [ 146.863881][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.873340][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.883151][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.893710][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.911086][ T8225] device veth0_macvtap entered promiscuous mode [ 146.929336][ T8225] device veth1_macvtap entered promiscuous mode [ 146.966069][ T8225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.974281][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.985577][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.995140][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.005125][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.024368][ T8225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.032330][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.042625][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.058945][ T8225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.068106][ T8225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.077410][ T8225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.086506][ T8225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 147.248339][ C0] ===================================================== [ 147.252245][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 147.252245][ C0] CPU: 0 PID: 8438 Comm: syz-executor637 Not tainted 5.12.0-rc6-syzkaller #0 [ 147.263515][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.263515][ C0] Call Trace: [ 147.263515][ C0] [ 147.263515][ C0] dump_stack+0x24c/0x2e0 [ 147.263515][ C0] kmsan_report+0xfb/0x1e0 [ 147.263515][ C0] __msan_warning+0x5c/0xa0 [ 147.263515][ C0] ip_rcv_core+0xf4c/0x1480 [ 147.263515][ C0] ip_rcv+0xc7/0x820 [ 147.263515][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.263515][ C0] __netif_receive_skb+0x1ec/0x640 [ 147.263515][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.263515][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 147.263515][ C0] process_backlog+0x517/0xbd0 [ 147.335635][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 147.340540][ C0] __napi_poll+0x13e/0xca0 [ 147.345529][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.351570][ C0] net_rx_action+0x726/0x14a0 [ 147.356455][ C0] ? net_tx_action+0xd30/0xd30 [ 147.361440][ C0] __do_softirq+0x1b9/0x715 [ 147.366363][ C0] ? idle_cpu+0x9a/0x1d0 [ 147.370032][ C0] ? __irq_exit_rcu+0x83/0x280 [ 147.375022][ C0] do_softirq+0x123/0x1c0 [ 147.378667][ C0] [ 147.382471][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 147.387339][ C0] local_bh_enable+0x36/0x40 [ 147.391001][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 147.397450][ C0] dev_queue_xmit+0x4b/0x60 [ 147.401101][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 147.406963][ C0] packet_sendmsg+0x86ee/0x99d0 [ 147.412305][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.416989][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.421910][ C0] ? process_slab+0x13a8/0x1b70 [ 147.427467][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.433104][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.439238][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 147.444267][ C0] ? packet_getsockopt+0x1120/0x1120 [ 147.449171][ C0] __sys_sendmsg+0x714/0x830 [ 147.454090][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.460216][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 147.466318][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 147.472543][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.477423][ C0] __se_sys_sendmsg+0x97/0xb0 [ 147.482584][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 147.486253][ C0] do_syscall_64+0x9f/0x140 [ 147.491118][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.497774][ C0] RIP: 0033:0x443de9 [ 147.501425][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 147.520494][ C0] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.529767][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 147.537321][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 147.544835][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 147.553195][ C0] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 00007ffe9e915d50 [ 147.561762][ C0] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 0000000000000003 [ 147.569084][ C0] [ 147.571515][ C0] Uninit was stored to memory at: [ 147.577349][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 147.582455][ C0] __msan_chain_origin+0x54/0xa0 [ 147.587348][ C0] iptunnel_xmit+0xbd6/0xf20 [ 147.592436][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 147.597333][ C0] geneve_xmit+0x2139/0x3c40 [ 147.601006][ C0] xmit_one+0x2b6/0x760 [ 147.606256][ C0] __dev_queue_xmit+0x3432/0x4600 [ 147.611209][ C0] dev_queue_xmit+0x4b/0x60 [ 147.616212][ C0] packet_sendmsg+0x86ee/0x99d0 [ 147.621082][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 147.625719][ C0] __sys_sendmsg+0x714/0x830 [ 147.630651][ C0] __se_sys_sendmsg+0x97/0xb0 [ 147.634303][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 147.639193][ C0] do_syscall_64+0x9f/0x140 [ 147.644126][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.650225][ C0] [ 147.652644][ C0] Uninit was created at: [ 147.656342][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.661212][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 147.666886][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.672972][ C0] __alloc_skb+0x4dd/0xe90 [ 147.677868][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 147.682747][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 147.687628][ C0] packet_sendmsg+0x6a12/0x99d0 [ 147.692722][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 147.697597][ C0] __sys_sendmsg+0x714/0x830 [ 147.701253][ C0] __se_sys_sendmsg+0x97/0xb0 [ 147.707259][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 147.710980][ C0] do_syscall_64+0x9f/0x140 [ 147.716091][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.722621][ C0] ===================================================== [ 147.728774][ C0] Disabling lock debugging due to kernel taint [ 147.736088][ C0] ===================================================== [ 147.743082][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 147.746023][ C0] CPU: 0 PID: 8438 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.750385][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.762673][ C0] Call Trace: [ 147.762673][ C0] [ 147.762673][ C0] dump_stack+0x24c/0x2e0 [ 147.762673][ C0] kmsan_report+0xfb/0x1e0 [ 147.762673][ C0] __msan_warning+0x5c/0xa0 [ 147.762673][ C0] ip_rcv_core+0xf5d/0x1480 [ 147.792259][ C0] ip_rcv+0xc7/0x820 [ 147.792259][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.792259][ C0] __netif_receive_skb+0x1ec/0x640 [ 147.792259][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.792259][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 147.792259][ C0] process_backlog+0x517/0xbd0 [ 147.822739][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 147.822739][ C0] __napi_poll+0x13e/0xca0 [ 147.822739][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.822739][ C0] net_rx_action+0x726/0x14a0 [ 147.822739][ C0] ? net_tx_action+0xd30/0xd30 [ 147.822739][ C0] __do_softirq+0x1b9/0x715 [ 147.822739][ C0] ? idle_cpu+0x9a/0x1d0 [ 147.822739][ C0] ? __irq_exit_rcu+0x83/0x280 [ 147.822739][ C0] do_softirq+0x123/0x1c0 [ 147.822739][ C0] [ 147.822739][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 147.822739][ C0] local_bh_enable+0x36/0x40 [ 147.822739][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 147.822739][ C0] dev_queue_xmit+0x4b/0x60 [ 147.822739][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 147.822739][ C0] packet_sendmsg+0x86ee/0x99d0 [ 147.902559][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.907414][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.913779][ C0] ? process_slab+0x13a8/0x1b70 [ 147.918678][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.921102][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.931116][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 147.934981][ C0] ? packet_getsockopt+0x1120/0x1120 [ 147.941099][ C0] __sys_sendmsg+0x714/0x830 [ 147.945180][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.951268][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 147.956965][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 147.963583][ C0] ? kmsan_get_metadata+0x116/0x180 [ 147.968556][ C0] __se_sys_sendmsg+0x97/0xb0 [ 147.973715][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 147.978579][ C0] do_syscall_64+0x9f/0x140 [ 147.982471][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.988578][ C0] RIP: 0033:0x443de9 [ 147.992380][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 148.012216][ C0] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.020413][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 148.029000][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 148.036370][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 148.045003][ C0] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 00007ffe9e915d50 [ 148.052458][ C0] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 0000000000000003 [ 148.061042][ C0] [ 148.061042][ C0] Uninit was stored to memory at: [ 148.068397][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 148.074502][ C0] __msan_chain_origin+0x54/0xa0 [ 148.079376][ C0] iptunnel_xmit+0xbd6/0xf20 [ 148.081808][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 148.089285][ C0] geneve_xmit+0x2139/0x3c40 [ 148.094177][ C0] xmit_one+0x2b6/0x760 [ 148.097837][ C0] __dev_queue_xmit+0x3432/0x4600 [ 148.103947][ C0] dev_queue_xmit+0x4b/0x60 [ 148.108837][ C0] packet_sendmsg+0x86ee/0x99d0 [ 148.113643][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 148.118539][ C0] __sys_sendmsg+0x714/0x830 [ 148.122625][ C0] __se_sys_sendmsg+0x97/0xb0 [ 148.127534][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 148.132448][ C0] do_syscall_64+0x9f/0x140 [ 148.137404][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.143844][ C0] [ 148.146275][ C0] Uninit was created at: [ 148.149949][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.156365][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 148.161248][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.161248][ C0] __alloc_skb+0x4dd/0xe90 [ 148.170793][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 148.175880][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 148.181982][ C0] packet_sendmsg+0x6a12/0x99d0 [ 148.186871][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 148.191740][ C0] __sys_sendmsg+0x714/0x830 [ 148.196673][ C0] __se_sys_sendmsg+0x97/0xb0 [ 148.201517][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 148.206427][ C0] do_syscall_64+0x9f/0x140 [ 148.210128][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.216267][ C0] ===================================================== [ 148.224663][ C0] ===================================================== [ 148.231975][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 148.234499][ C0] CPU: 0 PID: 8438 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.234499][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.252256][ C0] Call Trace: [ 148.252256][ C0] [ 148.252256][ C0] dump_stack+0x24c/0x2e0 [ 148.252256][ C0] kmsan_report+0xfb/0x1e0 [ 148.252256][ C0] __msan_warning+0x5c/0xa0 [ 148.252256][ C0] ip_rcv_core+0x1068/0x1480 [ 148.252256][ C0] ip_rcv+0xc7/0x820 [ 148.252256][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.252256][ C0] __netif_receive_skb+0x1ec/0x640 [ 148.252256][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.252256][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 148.252256][ C0] process_backlog+0x517/0xbd0 [ 148.252256][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 148.252256][ C0] __napi_poll+0x13e/0xca0 [ 148.252256][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.252256][ C0] net_rx_action+0x726/0x14a0 [ 148.252256][ C0] ? net_tx_action+0xd30/0xd30 [ 148.339305][ C0] __do_softirq+0x1b9/0x715 [ 148.344268][ C0] ? idle_cpu+0x9a/0x1d0 [ 148.347914][ C0] ? __irq_exit_rcu+0x83/0x280 [ 148.352901][ C0] do_softirq+0x123/0x1c0 [ 148.357827][ C0] [ 148.360344][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 148.366413][ C0] local_bh_enable+0x36/0x40 [ 148.370122][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 148.376212][ C0] dev_queue_xmit+0x4b/0x60 [ 148.381088][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 148.386352][ C0] packet_sendmsg+0x86ee/0x99d0 [ 148.391300][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.395895][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.403038][ C0] ? process_slab+0x13a8/0x1b70 [ 148.407934][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.412891][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.419007][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 148.423969][ C0] ? packet_getsockopt+0x1120/0x1120 [ 148.430163][ C0] __sys_sendmsg+0x714/0x830 [ 148.433849][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.439980][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 148.446302][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 148.452592][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.457500][ C0] __se_sys_sendmsg+0x97/0xb0 [ 148.462561][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 148.467462][ C0] do_syscall_64+0x9f/0x140 [ 148.471105][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.477394][ C0] RIP: 0033:0x443de9 [ 148.481064][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 148.501149][ C0] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.512574][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 148.521248][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 148.528805][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 148.536900][ C0] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 00007ffe9e915d50 [ 148.545518][ C0] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 0000000000000003 [ 148.554336][ C0] [ 148.556845][ C0] Uninit was stored to memory at: [ 148.561737][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 148.567542][ C0] __msan_chain_origin+0x54/0xa0 [ 148.572731][ C0] __ip_local_out+0x479/0x840 [ 148.577688][ C0] ip_local_out+0xa1/0x1e0 [ 148.581342][ C0] iptunnel_xmit+0x931/0xf20 [ 148.586413][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 148.591290][ C0] geneve_xmit+0x2139/0x3c40 [ 148.596180][ C0] xmit_one+0x2b6/0x760 [ 148.601094][ C0] __dev_queue_xmit+0x3432/0x4600 [ 148.606394][ C0] dev_queue_xmit+0x4b/0x60 [ 148.610065][ C0] packet_sendmsg+0x86ee/0x99d0 [ 148.616095][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 148.621033][ C0] __sys_sendmsg+0x714/0x830 [ 148.625655][ C0] __se_sys_sendmsg+0x97/0xb0 [ 148.630596][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 148.635568][ C0] do_syscall_64+0x9f/0x140 [ 148.639334][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.645949][ C0] [ 148.648478][ C0] Uninit was stored to memory at: [ 148.653525][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 148.658420][ C0] __msan_chain_origin+0x54/0xa0 [ 148.664518][ C0] iptunnel_xmit+0xbd6/0xf20 [ 148.669450][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 148.674433][ C0] geneve_xmit+0x2139/0x3c40 [ 148.678116][ C0] xmit_one+0x2b6/0x760 [ 148.683012][ C0] __dev_queue_xmit+0x3432/0x4600 [ 148.687903][ C0] dev_queue_xmit+0x4b/0x60 [ 148.692828][ C0] packet_sendmsg+0x86ee/0x99d0 [ 148.697744][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 148.702659][ C0] __sys_sendmsg+0x714/0x830 [ 148.706351][ C0] __se_sys_sendmsg+0x97/0xb0 [ 148.711385][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 148.716309][ C0] do_syscall_64+0x9f/0x140 [ 148.721203][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.726492][ C0] [ 148.729005][ C0] Uninit was created at: [ 148.733955][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.740134][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 148.744172][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.750329][ C0] __alloc_skb+0x4dd/0xe90 [ 148.755193][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 148.760066][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 148.765027][ C0] packet_sendmsg+0x6a12/0x99d0 [ 148.769970][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 148.775001][ C0] __sys_sendmsg+0x714/0x830 [ 148.779894][ C0] __se_sys_sendmsg+0x97/0xb0 [ 148.783968][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 148.788838][ C0] do_syscall_64+0x9f/0x140 [ 148.793702][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae executing program [ 148.799801][ C0] ===================================================== [ 148.880133][ C0] ===================================================== [ 148.882115][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 148.882115][ C0] CPU: 0 PID: 8439 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.882115][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.912344][ C0] Call Trace: [ 148.912344][ C0] [ 148.912344][ C0] dump_stack+0x24c/0x2e0 [ 148.912344][ C0] kmsan_report+0xfb/0x1e0 [ 148.912344][ C0] __msan_warning+0x5c/0xa0 [ 148.912344][ C0] ip_rcv_core+0xf4c/0x1480 [ 148.912344][ C0] ip_rcv+0xc7/0x820 [ 148.912344][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.912344][ C0] __netif_receive_skb+0x1ec/0x640 [ 148.912344][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.912344][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 148.912344][ C0] process_backlog+0x517/0xbd0 [ 148.912344][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 148.912344][ C0] __napi_poll+0x13e/0xca0 [ 148.912344][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.912344][ C0] net_rx_action+0x726/0x14a0 [ 148.912344][ C0] ? net_tx_action+0xd30/0xd30 [ 148.912344][ C0] __do_softirq+0x1b9/0x715 [ 148.912344][ C0] ? idle_cpu+0x9a/0x1d0 [ 148.912344][ C0] ? __irq_exit_rcu+0x83/0x280 [ 148.912344][ C0] do_softirq+0x123/0x1c0 [ 148.912344][ C0] [ 148.912344][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 148.912344][ C0] local_bh_enable+0x36/0x40 [ 148.912344][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 148.912344][ C0] dev_queue_xmit+0x4b/0x60 [ 148.912344][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 148.912344][ C0] packet_sendmsg+0x86ee/0x99d0 [ 148.912344][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.912344][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.912344][ C0] ? process_slab+0x13a8/0x1b70 [ 148.912344][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.912344][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.912344][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 148.912344][ C0] ? packet_getsockopt+0x1120/0x1120 [ 148.912344][ C0] __sys_sendmsg+0x714/0x830 [ 148.912344][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.912344][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 148.912344][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 148.912344][ C0] ? kmsan_get_metadata+0x116/0x180 [ 148.912344][ C0] __se_sys_sendmsg+0x97/0xb0 [ 148.912344][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 148.912344][ C0] do_syscall_64+0x9f/0x140 [ 148.912344][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.912344][ C0] RIP: 0033:0x443de9 [ 148.912344][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 148.912344][ C0] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.912344][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 148.912344][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 148.912344][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 148.912344][ C0] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000023f5e [ 148.912344][ C0] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 148.912344][ C0] [ 148.912344][ C0] Uninit was stored to memory at: [ 148.912344][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 148.912344][ C0] __msan_chain_origin+0x54/0xa0 [ 148.912344][ C0] iptunnel_xmit+0xbd6/0xf20 [ 148.912344][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 148.912344][ C0] geneve_xmit+0x2139/0x3c40 [ 148.912344][ C0] xmit_one+0x2b6/0x760 [ 148.912344][ C0] __dev_queue_xmit+0x3432/0x4600 [ 148.912344][ C0] dev_queue_xmit+0x4b/0x60 [ 148.912344][ C0] packet_sendmsg+0x86ee/0x99d0 [ 148.912344][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 148.912344][ C0] __sys_sendmsg+0x714/0x830 [ 148.912344][ C0] __se_sys_sendmsg+0x97/0xb0 [ 148.912344][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 148.912344][ C0] do_syscall_64+0x9f/0x140 [ 148.912344][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.912344][ C0] [ 148.912344][ C0] Uninit was created at: [ 148.912344][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.912344][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 148.912344][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.912344][ C0] __alloc_skb+0x4dd/0xe90 [ 148.912344][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 148.912344][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 148.912344][ C0] packet_sendmsg+0x6a12/0x99d0 [ 148.912344][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 148.912344][ C0] __sys_sendmsg+0x714/0x830 [ 148.912344][ C0] __se_sys_sendmsg+0x97/0xb0 [ 148.912344][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 148.912344][ C0] do_syscall_64+0x9f/0x140 [ 148.912344][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.912344][ C0] ===================================================== [ 149.372569][ C0] ===================================================== [ 149.379558][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 149.382355][ C0] CPU: 0 PID: 8439 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.382355][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.382355][ C0] Call Trace: [ 149.382355][ C0] [ 149.382355][ C0] dump_stack+0x24c/0x2e0 [ 149.382355][ C0] kmsan_report+0xfb/0x1e0 [ 149.382355][ C0] __msan_warning+0x5c/0xa0 [ 149.382355][ C0] ip_rcv_core+0xf5d/0x1480 [ 149.382355][ C0] ip_rcv+0xc7/0x820 [ 149.382355][ C0] ? kmsan_get_metadata+0x116/0x180 [ 149.382355][ C0] __netif_receive_skb+0x1ec/0x640 [ 149.382355][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.382355][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 149.382355][ C0] process_backlog+0x517/0xbd0 [ 149.382355][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 149.382355][ C0] __napi_poll+0x13e/0xca0 [ 149.382355][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.382355][ C0] net_rx_action+0x726/0x14a0 [ 149.382355][ C0] ? net_tx_action+0xd30/0xd30 [ 149.382355][ C0] __do_softirq+0x1b9/0x715 [ 149.382355][ C0] ? idle_cpu+0x9a/0x1d0 [ 149.382355][ C0] ? __irq_exit_rcu+0x83/0x280 [ 149.382355][ C0] do_softirq+0x123/0x1c0 [ 149.382355][ C0] [ 149.509561][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 149.514363][ C0] local_bh_enable+0x36/0x40 [ 149.519254][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 149.524315][ C0] dev_queue_xmit+0x4b/0x60 [ 149.527974][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 149.534142][ C0] packet_sendmsg+0x86ee/0x99d0 [ 149.539015][ C0] ? kmsan_get_metadata+0x116/0x180 [ 149.543241][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.549351][ C0] ? process_slab+0x13a8/0x1b70 [ 149.555452][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.561547][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.567978][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 149.572851][ C0] ? packet_getsockopt+0x1120/0x1120 [ 149.577748][ C0] __sys_sendmsg+0x714/0x830 [ 149.581410][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.587996][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 149.594132][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 149.601436][ C0] ? kmsan_get_metadata+0x116/0x180 [ 149.606531][ C0] __se_sys_sendmsg+0x97/0xb0 [ 149.611407][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 149.615118][ C0] do_syscall_64+0x9f/0x140 [ 149.620004][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.626769][ C0] RIP: 0033:0x443de9 [ 149.630452][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 149.650562][ C0] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.659198][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 149.666083][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 149.674890][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 149.683085][ C0] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000023f5e [ 149.691620][ C0] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 149.700225][ C0] [ 149.701471][ C0] Uninit was stored to memory at: [ 149.706828][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 149.711683][ C0] __msan_chain_origin+0x54/0xa0 [ 149.718284][ C0] iptunnel_xmit+0xbd6/0xf20 [ 149.721933][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 149.726930][ C0] geneve_xmit+0x2139/0x3c40 [ 149.732391][ C0] xmit_one+0x2b6/0x760 [ 149.736768][ C0] __dev_queue_xmit+0x3432/0x4600 [ 149.741644][ C0] dev_queue_xmit+0x4b/0x60 [ 149.746051][ C0] packet_sendmsg+0x86ee/0x99d0 [ 149.750903][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 149.756021][ C0] __sys_sendmsg+0x714/0x830 [ 149.759680][ C0] __se_sys_sendmsg+0x97/0xb0 [ 149.764588][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 149.769465][ C0] do_syscall_64+0x9f/0x140 [ 149.774408][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.780501][ C0] [ 149.783239][ C0] Uninit was created at: [ 149.786901][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.793011][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 149.797898][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.804307][ C0] __alloc_skb+0x4dd/0xe90 [ 149.807975][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 149.814078][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 149.818945][ C0] packet_sendmsg+0x6a12/0x99d0 [ 149.821424][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 149.828836][ C0] __sys_sendmsg+0x714/0x830 [ 149.832917][ C0] __se_sys_sendmsg+0x97/0xb0 [ 149.837800][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 149.841442][ C0] do_syscall_64+0x9f/0x140 [ 149.847799][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.853880][ C0] ===================================================== [ 149.861507][ C0] ===================================================== [ 149.868502][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 149.871452][ C0] CPU: 0 PID: 8439 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.882266][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.882266][ C0] Call Trace: [ 149.882266][ C0] [ 149.882266][ C0] dump_stack+0x24c/0x2e0 [ 149.882266][ C0] kmsan_report+0xfb/0x1e0 [ 149.882266][ C0] __msan_warning+0x5c/0xa0 [ 149.912331][ C0] ip_rcv_core+0x1068/0x1480 [ 149.912331][ C0] ip_rcv+0xc7/0x820 [ 149.912331][ C0] ? kmsan_get_metadata+0x116/0x180 [ 149.912331][ C0] __netif_receive_skb+0x1ec/0x640 [ 149.912331][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.912331][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 149.942245][ C0] process_backlog+0x517/0xbd0 [ 149.942245][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 149.942245][ C0] __napi_poll+0x13e/0xca0 [ 149.942245][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.942245][ C0] net_rx_action+0x726/0x14a0 [ 149.942245][ C0] ? net_tx_action+0xd30/0xd30 [ 149.975828][ C0] __do_softirq+0x1b9/0x715 [ 149.980609][ C0] ? idle_cpu+0x9a/0x1d0 [ 149.984268][ C0] ? __irq_exit_rcu+0x83/0x280 [ 149.989143][ C0] do_softirq+0x123/0x1c0 [ 149.993280][ C0] [ 149.996933][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 150.001955][ C0] local_bh_enable+0x36/0x40 [ 150.005619][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 150.011756][ C0] dev_queue_xmit+0x4b/0x60 [ 150.015585][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 150.020481][ C0] packet_sendmsg+0x86ee/0x99d0 [ 150.025454][ C0] ? kmsan_get_metadata+0x116/0x180 [ 150.031568][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.036923][ C0] ? process_slab+0x13a8/0x1b70 [ 150.042277][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.046982][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.053273][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 150.058167][ C0] ? packet_getsockopt+0x1120/0x1120 [ 150.064282][ C0] __sys_sendmsg+0x714/0x830 [ 150.067944][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.074764][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 150.079654][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 150.085765][ C0] ? kmsan_get_metadata+0x116/0x180 [ 150.091858][ C0] __se_sys_sendmsg+0x97/0xb0 [ 150.095604][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 150.100499][ C0] do_syscall_64+0x9f/0x140 [ 150.105383][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.111489][ C0] RIP: 0033:0x443de9 [ 150.115725][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 150.134846][ C0] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.143729][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 150.151142][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 150.160070][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 150.167376][ C0] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000023f5e [ 150.175628][ C0] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 150.184158][ C0] [ 150.185375][ C0] Uninit was stored to memory at: [ 150.191445][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 150.196788][ C0] __msan_chain_origin+0x54/0xa0 [ 150.201627][ C0] __ip_local_out+0x479/0x840 [ 150.206651][ C0] ip_local_out+0xa1/0x1e0 [ 150.210306][ C0] iptunnel_xmit+0x931/0xf20 [ 150.215572][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 150.220436][ C0] geneve_xmit+0x2139/0x3c40 [ 150.225301][ C0] xmit_one+0x2b6/0x760 [ 150.228958][ C0] __dev_queue_xmit+0x3432/0x4600 [ 150.234514][ C0] dev_queue_xmit+0x4b/0x60 [ 150.238184][ C0] packet_sendmsg+0x86ee/0x99d0 [ 150.243125][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 150.248000][ C0] __sys_sendmsg+0x714/0x830 [ 150.253136][ C0] __se_sys_sendmsg+0x97/0xb0 [ 150.257990][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 150.261627][ C0] do_syscall_64+0x9f/0x140 [ 150.267140][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.273268][ C0] [ 150.275708][ C0] Uninit was stored to memory at: [ 150.280581][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 150.286742][ C0] __msan_chain_origin+0x54/0xa0 [ 150.291618][ C0] iptunnel_xmit+0xbd6/0xf20 [ 150.295736][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 150.300629][ C0] geneve_xmit+0x2139/0x3c40 [ 150.305540][ C0] xmit_one+0x2b6/0x760 [ 150.309211][ C0] __dev_queue_xmit+0x3432/0x4600 [ 150.315563][ C0] dev_queue_xmit+0x4b/0x60 [ 150.319215][ C0] packet_sendmsg+0x86ee/0x99d0 [ 150.324139][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 150.330302][ C0] __sys_sendmsg+0x714/0x830 [ 150.334362][ C0] __se_sys_sendmsg+0x97/0xb0 [ 150.339288][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 150.344159][ C0] do_syscall_64+0x9f/0x140 [ 150.349039][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.354697][ C0] [ 150.357135][ C0] Uninit was created at: [ 150.360804][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 150.366957][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 150.371820][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 150.377890][ C0] __alloc_skb+0x4dd/0xe90 executing program [ 150.382460][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 150.387631][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 150.391285][ C0] packet_sendmsg+0x6a12/0x99d0 [ 150.398027][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 150.402281][ C0] __sys_sendmsg+0x714/0x830 [ 150.406434][ C0] __se_sys_sendmsg+0x97/0xb0 [ 150.411311][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 150.416973][ C0] do_syscall_64+0x9f/0x140 [ 150.421928][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.428026][ C0] ===================================================== [ 150.498963][ C0] ===================================================== [ 150.502281][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 150.502281][ C0] CPU: 0 PID: 8440 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 150.502281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.502281][ C0] Call Trace: [ 150.502281][ C0] [ 150.502281][ C0] dump_stack+0x24c/0x2e0 [ 150.502281][ C0] kmsan_report+0xfb/0x1e0 [ 150.502281][ C0] __msan_warning+0x5c/0xa0 [ 150.502281][ C0] ip_rcv_core+0xf4c/0x1480 [ 150.502281][ C0] ip_rcv+0xc7/0x820 [ 150.502281][ C0] ? kmsan_get_metadata+0x116/0x180 [ 150.502281][ C0] __netif_receive_skb+0x1ec/0x640 [ 150.502281][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.502281][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 150.502281][ C0] process_backlog+0x517/0xbd0 [ 150.502281][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 150.502281][ C0] __napi_poll+0x13e/0xca0 [ 150.502281][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.502281][ C0] net_rx_action+0x726/0x14a0 [ 150.502281][ C0] ? net_tx_action+0xd30/0xd30 [ 150.502281][ C0] __do_softirq+0x1b9/0x715 [ 150.502281][ C0] ? idle_cpu+0x9a/0x1d0 [ 150.502281][ C0] ? __irq_exit_rcu+0x83/0x280 [ 150.502281][ C0] do_softirq+0x123/0x1c0 [ 150.502281][ C0] [ 150.502281][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 150.502281][ C0] local_bh_enable+0x36/0x40 [ 150.502281][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 150.502281][ C0] dev_queue_xmit+0x4b/0x60 [ 150.502281][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 150.502281][ C0] packet_sendmsg+0x86ee/0x99d0 [ 150.502281][ C0] ? kmsan_get_metadata+0x116/0x180 [ 150.502281][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.502281][ C0] ? process_slab+0x13a8/0x1b70 [ 150.502281][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.502281][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.502281][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 150.502281][ C0] ? packet_getsockopt+0x1120/0x1120 [ 150.502281][ C0] __sys_sendmsg+0x714/0x830 [ 150.502281][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.502281][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 150.502281][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 150.502281][ C0] ? kmsan_get_metadata+0x116/0x180 [ 150.502281][ C0] __se_sys_sendmsg+0x97/0xb0 [ 150.502281][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 150.502281][ C0] do_syscall_64+0x9f/0x140 [ 150.502281][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.502281][ C0] RIP: 0033:0x443de9 [ 150.502281][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 150.502281][ C0] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.502281][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 150.502281][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 150.502281][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 150.502281][ C0] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 00000000000245d5 [ 150.502281][ C0] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 150.502281][ C0] [ 150.502281][ C0] Uninit was stored to memory at: [ 150.502281][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 150.502281][ C0] __msan_chain_origin+0x54/0xa0 [ 150.502281][ C0] iptunnel_xmit+0xbd6/0xf20 [ 150.502281][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 150.502281][ C0] geneve_xmit+0x2139/0x3c40 [ 150.502281][ C0] xmit_one+0x2b6/0x760 [ 150.502281][ C0] __dev_queue_xmit+0x3432/0x4600 [ 150.502281][ C0] dev_queue_xmit+0x4b/0x60 [ 150.502281][ C0] packet_sendmsg+0x86ee/0x99d0 [ 150.502281][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 150.502281][ C0] __sys_sendmsg+0x714/0x830 [ 150.882293][ C0] __se_sys_sendmsg+0x97/0xb0 [ 150.887230][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 150.890902][ C0] do_syscall_64+0x9f/0x140 [ 150.895778][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.902462][ C0] [ 150.904323][ C0] Uninit was created at: [ 150.909198][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 150.914062][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 150.918986][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 150.925761][ C0] __alloc_skb+0x4dd/0xe90 [ 150.929431][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 150.935532][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 150.940406][ C0] packet_sendmsg+0x6a12/0x99d0 [ 150.945277][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 150.950144][ C0] __sys_sendmsg+0x714/0x830 [ 150.955041][ C0] __se_sys_sendmsg+0x97/0xb0 [ 150.959912][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 150.965025][ C0] do_syscall_64+0x9f/0x140 [ 150.969941][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.974953][ C0] ===================================================== [ 150.983059][ C0] ===================================================== [ 150.990065][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 150.993007][ C0] CPU: 0 PID: 8440 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.002266][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.002266][ C0] Call Trace: [ 151.002266][ C0] [ 151.002266][ C0] dump_stack+0x24c/0x2e0 [ 151.002266][ C0] kmsan_report+0xfb/0x1e0 [ 151.032390][ C0] __msan_warning+0x5c/0xa0 [ 151.032390][ C0] ip_rcv_core+0xf5d/0x1480 [ 151.032390][ C0] ip_rcv+0xc7/0x820 [ 151.032390][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.032390][ C0] __netif_receive_skb+0x1ec/0x640 [ 151.032390][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.062259][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 151.062259][ C0] process_backlog+0x517/0xbd0 [ 151.062259][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 151.062259][ C0] __napi_poll+0x13e/0xca0 [ 151.062259][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.062259][ C0] net_rx_action+0x726/0x14a0 [ 151.092318][ C0] ? net_tx_action+0xd30/0xd30 [ 151.092318][ C0] __do_softirq+0x1b9/0x715 [ 151.092318][ C0] ? idle_cpu+0x9a/0x1d0 [ 151.109050][ C0] ? __irq_exit_rcu+0x83/0x280 [ 151.113934][ C0] do_softirq+0x123/0x1c0 [ 151.118858][ C0] [ 151.121298][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 151.126925][ C0] local_bh_enable+0x36/0x40 [ 151.132258][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 151.136687][ C0] dev_queue_xmit+0x4b/0x60 [ 151.141554][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 151.147139][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.151995][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.156897][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.162269][ C0] ? process_slab+0x13a8/0x1b70 [ 151.166662][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.172769][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.178872][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.183733][ C0] ? packet_getsockopt+0x1120/0x1120 [ 151.189876][ C0] __sys_sendmsg+0x714/0x830 [ 151.193770][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.199980][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 151.206288][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 151.212561][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.217444][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.222836][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.226509][ C0] do_syscall_64+0x9f/0x140 [ 151.231380][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.237578][ C0] RIP: 0033:0x443de9 [ 151.241227][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 151.260673][ C0] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.269207][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 151.277749][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 151.284984][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 151.294008][ C0] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 00000000000245d5 [ 151.301328][ C0] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 151.309856][ C0] [ 151.311067][ C0] Uninit was stored to memory at: [ 151.317378][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 151.322543][ C0] __msan_chain_origin+0x54/0xa0 [ 151.327423][ C0] iptunnel_xmit+0xbd6/0xf20 [ 151.332511][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 151.337457][ C0] geneve_xmit+0x2139/0x3c40 [ 151.342495][ C0] xmit_one+0x2b6/0x760 [ 151.346182][ C0] __dev_queue_xmit+0x3432/0x4600 [ 151.351076][ C0] dev_queue_xmit+0x4b/0x60 [ 151.355463][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.360382][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.365803][ C0] __sys_sendmsg+0x714/0x830 [ 151.370696][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.375571][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.379234][ C0] do_syscall_64+0x9f/0x140 [ 151.384120][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.390263][ C0] [ 151.392673][ C0] Uninit was created at: [ 151.396342][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.402498][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 151.407384][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.413838][ C0] __alloc_skb+0x4dd/0xe90 [ 151.417503][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 151.423698][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 151.428576][ C0] packet_sendmsg+0x6a12/0x99d0 [ 151.433696][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.438566][ C0] __sys_sendmsg+0x714/0x830 [ 151.441009][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.447170][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.452376][ C0] do_syscall_64+0x9f/0x140 [ 151.456916][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.463004][ C0] ===================================================== [ 151.470574][ C0] ===================================================== [ 151.477541][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 151.480443][ C0] CPU: 0 PID: 8440 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.480443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.480443][ C0] Call Trace: [ 151.480443][ C0] [ 151.480443][ C0] dump_stack+0x24c/0x2e0 [ 151.480443][ C0] kmsan_report+0xfb/0x1e0 [ 151.480443][ C0] __msan_warning+0x5c/0xa0 [ 151.480443][ C0] ip_rcv_core+0x1068/0x1480 [ 151.480443][ C0] ip_rcv+0xc7/0x820 [ 151.480443][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.480443][ C0] __netif_receive_skb+0x1ec/0x640 [ 151.480443][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.480443][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 151.552224][ C0] process_backlog+0x517/0xbd0 [ 151.552224][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 151.552224][ C0] __napi_poll+0x13e/0xca0 [ 151.552224][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.552224][ C0] net_rx_action+0x726/0x14a0 [ 151.579885][ C0] ? net_tx_action+0xd30/0xd30 [ 151.585011][ C0] __do_softirq+0x1b9/0x715 [ 151.589896][ C0] ? idle_cpu+0x9a/0x1d0 [ 151.591103][ C0] ? __irq_exit_rcu+0x83/0x280 [ 151.598153][ C0] do_softirq+0x123/0x1c0 [ 151.601801][ C0] [ 151.605522][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 151.611628][ C0] local_bh_enable+0x36/0x40 [ 151.615308][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 151.621395][ C0] dev_queue_xmit+0x4b/0x60 [ 151.625098][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 151.631239][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.636168][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.641024][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.646294][ C0] ? process_slab+0x13a8/0x1b70 [ 151.651172][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.657357][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.663716][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.668686][ C0] ? packet_getsockopt+0x1120/0x1120 [ 151.673655][ C0] __sys_sendmsg+0x714/0x830 [ 151.678524][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.683688][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 151.689784][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 151.695990][ C0] ? kmsan_get_metadata+0x116/0x180 [ 151.700865][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.705949][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.710877][ C0] do_syscall_64+0x9f/0x140 [ 151.715770][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.722294][ C0] RIP: 0033:0x443de9 [ 151.725774][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 151.745494][ C0] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.754049][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 151.761381][ C0] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 151.769570][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 151.778241][ C0] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 00000000000245d5 [ 151.785554][ C0] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 151.794109][ C0] [ 151.796555][ C0] Uninit was stored to memory at: [ 151.801477][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 151.807609][ C0] __msan_chain_origin+0x54/0xa0 [ 151.811249][ C0] __ip_local_out+0x479/0x840 [ 151.817070][ C0] ip_local_out+0xa1/0x1e0 [ 151.820803][ C0] iptunnel_xmit+0x931/0xf20 [ 151.825744][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 151.830659][ C0] geneve_xmit+0x2139/0x3c40 [ 151.835534][ C0] xmit_one+0x2b6/0x760 [ 151.840423][ C0] __dev_queue_xmit+0x3432/0x4600 [ 151.844662][ C0] dev_queue_xmit+0x4b/0x60 [ 151.849550][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.854458][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.859354][ C0] __sys_sendmsg+0x714/0x830 [ 151.864239][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.869137][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.874075][ C0] do_syscall_64+0x9f/0x140 [ 151.878963][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.884061][ C0] [ 151.886575][ C0] Uninit was stored to memory at: [ 151.892232][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 151.897595][ C0] __msan_chain_origin+0x54/0xa0 [ 151.902585][ C0] iptunnel_xmit+0xbd6/0xf20 [ 151.907478][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 151.912429][ C0] geneve_xmit+0x2139/0x3c40 [ 151.917430][ C0] xmit_one+0x2b6/0x760 [ 151.921079][ C0] __dev_queue_xmit+0x3432/0x4600 [ 151.927091][ C0] dev_queue_xmit+0x4b/0x60 [ 151.931899][ C0] packet_sendmsg+0x86ee/0x99d0 [ 151.935738][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 151.940715][ C0] __sys_sendmsg+0x714/0x830 [ 151.945590][ C0] __se_sys_sendmsg+0x97/0xb0 [ 151.950462][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 151.955368][ C0] do_syscall_64+0x9f/0x140 [ 151.960247][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.966429][ C0] [ 151.967642][ C0] Uninit was created at: [ 151.972684][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.978786][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 151.982604][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.988712][ C0] __alloc_skb+0x4dd/0xe90 [ 151.993710][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 151.998604][ C0] sock_alloc_send_pskb+0xdc1/0xf90 executing program [ 152.004358][ C0] packet_sendmsg+0x6a12/0x99d0 [ 152.009355][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 152.014213][ C0] __sys_sendmsg+0x714/0x830 [ 152.017859][ C0] __se_sys_sendmsg+0x97/0xb0 [ 152.022711][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 152.027582][ C0] do_syscall_64+0x9f/0x140 [ 152.031221][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.039420][ C0] ===================================================== [ 152.092040][ C1] ===================================================== [ 152.092139][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 152.092139][ C1] CPU: 1 PID: 8441 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 152.092139][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.092139][ C1] Call Trace: [ 152.092139][ C1] [ 152.092139][ C1] dump_stack+0x24c/0x2e0 [ 152.092139][ C1] kmsan_report+0xfb/0x1e0 [ 152.092139][ C1] __msan_warning+0x5c/0xa0 [ 152.092139][ C1] ip_rcv_core+0xf4c/0x1480 [ 152.092139][ C1] ip_rcv+0xc7/0x820 [ 152.092139][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.092139][ C1] __netif_receive_skb+0x1ec/0x640 [ 152.092139][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.092139][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 152.092139][ C1] process_backlog+0x517/0xbd0 [ 152.092139][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 152.092139][ C1] __napi_poll+0x13e/0xca0 [ 152.092139][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.092139][ C1] net_rx_action+0x726/0x14a0 [ 152.092139][ C1] ? net_tx_action+0xd30/0xd30 [ 152.092139][ C1] __do_softirq+0x1b9/0x715 [ 152.092139][ C1] ? idle_cpu+0x9a/0x1d0 [ 152.092139][ C1] ? __irq_exit_rcu+0x83/0x280 [ 152.092139][ C1] do_softirq+0x123/0x1c0 [ 152.092139][ C1] [ 152.092139][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 152.092139][ C1] local_bh_enable+0x36/0x40 [ 152.092139][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 152.092139][ C1] dev_queue_xmit+0x4b/0x60 [ 152.092139][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 152.092139][ C1] packet_sendmsg+0x86ee/0x99d0 [ 152.092139][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.092139][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.092139][ C1] ? process_slab+0x13a8/0x1b70 [ 152.092139][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.092139][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.092139][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.092139][ C1] ? packet_getsockopt+0x1120/0x1120 [ 152.092139][ C1] __sys_sendmsg+0x714/0x830 [ 152.092139][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.092139][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 152.092139][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 152.092139][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.092139][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.092139][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.092139][ C1] do_syscall_64+0x9f/0x140 [ 152.092139][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.092139][ C1] RIP: 0033:0x443de9 [ 152.092139][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 152.092139][ C1] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.092139][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 152.092139][ C1] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 152.092139][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 152.092139][ C1] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000024c20 [ 152.092139][ C1] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 152.092139][ C1] [ 152.092139][ C1] Uninit was stored to memory at: [ 152.092139][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 152.092139][ C1] __msan_chain_origin+0x54/0xa0 [ 152.092139][ C1] iptunnel_xmit+0xbd6/0xf20 [ 152.092139][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 152.092139][ C1] geneve_xmit+0x2139/0x3c40 [ 152.092139][ C1] xmit_one+0x2b6/0x760 [ 152.092139][ C1] __dev_queue_xmit+0x3432/0x4600 [ 152.092139][ C1] dev_queue_xmit+0x4b/0x60 [ 152.092139][ C1] packet_sendmsg+0x86ee/0x99d0 [ 152.092139][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.092139][ C1] __sys_sendmsg+0x714/0x830 [ 152.092139][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.092139][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.092139][ C1] do_syscall_64+0x9f/0x140 [ 152.092139][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.092139][ C1] [ 152.092139][ C1] Uninit was created at: [ 152.092139][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 152.092139][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 152.092139][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 152.092139][ C1] __alloc_skb+0x4dd/0xe90 [ 152.092139][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 152.531003][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 152.531792][ C1] packet_sendmsg+0x6a12/0x99d0 [ 152.531792][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.531792][ C1] __sys_sendmsg+0x714/0x830 [ 152.531792][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.531792][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.531792][ C1] do_syscall_64+0x9f/0x140 [ 152.531792][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.531792][ C1] ===================================================== [ 152.578657][ C1] ===================================================== [ 152.585639][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 152.588533][ C1] CPU: 1 PID: 8441 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 152.593569][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.593569][ C1] Call Trace: [ 152.593569][ C1] [ 152.593569][ C1] dump_stack+0x24c/0x2e0 [ 152.593569][ C1] kmsan_report+0xfb/0x1e0 [ 152.593569][ C1] __msan_warning+0x5c/0xa0 [ 152.593569][ C1] ip_rcv_core+0xf5d/0x1480 [ 152.593569][ C1] ip_rcv+0xc7/0x820 [ 152.593569][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.593569][ C1] __netif_receive_skb+0x1ec/0x640 [ 152.593569][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.593569][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 152.593569][ C1] process_backlog+0x517/0xbd0 [ 152.593569][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 152.593569][ C1] __napi_poll+0x13e/0xca0 [ 152.593569][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.593569][ C1] net_rx_action+0x726/0x14a0 [ 152.593569][ C1] ? net_tx_action+0xd30/0xd30 [ 152.693620][ C1] __do_softirq+0x1b9/0x715 [ 152.693620][ C1] ? idle_cpu+0x9a/0x1d0 [ 152.693620][ C1] ? __irq_exit_rcu+0x83/0x280 [ 152.693620][ C1] do_softirq+0x123/0x1c0 [ 152.693620][ C1] [ 152.693620][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 152.693620][ C1] local_bh_enable+0x36/0x40 [ 152.693620][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 152.693620][ C1] dev_queue_xmit+0x4b/0x60 [ 152.693620][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 152.693620][ C1] packet_sendmsg+0x86ee/0x99d0 [ 152.693620][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.693620][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.693620][ C1] ? process_slab+0x13a8/0x1b70 [ 152.693620][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.693620][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.693620][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.693620][ C1] ? packet_getsockopt+0x1120/0x1120 [ 152.693620][ C1] __sys_sendmsg+0x714/0x830 [ 152.693620][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.693620][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 152.693620][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 152.693620][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.693620][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.693620][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.693620][ C1] do_syscall_64+0x9f/0x140 [ 152.693620][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.693620][ C1] RIP: 0033:0x443de9 [ 152.693620][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 152.693620][ C1] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.693620][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 152.693620][ C1] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 152.693620][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 152.693620][ C1] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000024c20 [ 152.693620][ C1] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 152.693620][ C1] [ 152.693620][ C1] Uninit was stored to memory at: [ 152.693620][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 152.693620][ C1] __msan_chain_origin+0x54/0xa0 [ 152.693620][ C1] iptunnel_xmit+0xbd6/0xf20 [ 152.693620][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 152.693620][ C1] geneve_xmit+0x2139/0x3c40 [ 152.693620][ C1] xmit_one+0x2b6/0x760 [ 152.693620][ C1] __dev_queue_xmit+0x3432/0x4600 [ 152.693620][ C1] dev_queue_xmit+0x4b/0x60 [ 152.693620][ C1] packet_sendmsg+0x86ee/0x99d0 [ 152.693620][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.693620][ C1] __sys_sendmsg+0x714/0x830 [ 152.693620][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.693620][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.693620][ C1] do_syscall_64+0x9f/0x140 [ 152.693620][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.693620][ C1] [ 152.693620][ C1] Uninit was created at: [ 152.693620][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 152.693620][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 152.693620][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 152.693620][ C1] __alloc_skb+0x4dd/0xe90 [ 152.693620][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 152.693620][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 152.693620][ C1] packet_sendmsg+0x6a12/0x99d0 [ 152.693620][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.693620][ C1] __sys_sendmsg+0x714/0x830 [ 152.693620][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.693620][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.693620][ C1] do_syscall_64+0x9f/0x140 [ 152.693620][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.693620][ C1] ===================================================== [ 153.069727][ C1] ===================================================== [ 153.076729][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 153.083101][ C1] CPU: 1 PID: 8441 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.083101][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.083101][ C1] Call Trace: [ 153.083101][ C1] [ 153.083101][ C1] dump_stack+0x24c/0x2e0 [ 153.083101][ C1] kmsan_report+0xfb/0x1e0 [ 153.083101][ C1] __msan_warning+0x5c/0xa0 [ 153.083101][ C1] ip_rcv_core+0x1068/0x1480 [ 153.083101][ C1] ip_rcv+0xc7/0x820 [ 153.083101][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.083101][ C1] __netif_receive_skb+0x1ec/0x640 [ 153.083101][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.083101][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 153.083101][ C1] process_backlog+0x517/0xbd0 [ 153.083101][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 153.083101][ C1] __napi_poll+0x13e/0xca0 [ 153.083101][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.083101][ C1] net_rx_action+0x726/0x14a0 [ 153.083101][ C1] ? net_tx_action+0xd30/0xd30 [ 153.083101][ C1] __do_softirq+0x1b9/0x715 [ 153.083101][ C1] ? idle_cpu+0x9a/0x1d0 [ 153.083101][ C1] ? __irq_exit_rcu+0x83/0x280 [ 153.083101][ C1] do_softirq+0x123/0x1c0 [ 153.083101][ C1] [ 153.083101][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 153.083101][ C1] local_bh_enable+0x36/0x40 [ 153.083101][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 153.083101][ C1] dev_queue_xmit+0x4b/0x60 [ 153.083101][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 153.083101][ C1] packet_sendmsg+0x86ee/0x99d0 [ 153.083101][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.083101][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.083101][ C1] ? process_slab+0x13a8/0x1b70 [ 153.083101][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.083101][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.083101][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.083101][ C1] ? packet_getsockopt+0x1120/0x1120 [ 153.083101][ C1] __sys_sendmsg+0x714/0x830 [ 153.083101][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.083101][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 153.083101][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 153.083101][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.083101][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.083101][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.083101][ C1] do_syscall_64+0x9f/0x140 [ 153.083101][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.083101][ C1] RIP: 0033:0x443de9 [ 153.083101][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 153.083101][ C1] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.083101][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 153.083101][ C1] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 153.083101][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 153.083101][ C1] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000024c20 [ 153.083101][ C1] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 153.083101][ C1] [ 153.083101][ C1] Uninit was stored to memory at: [ 153.083101][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 153.083101][ C1] __msan_chain_origin+0x54/0xa0 [ 153.083101][ C1] __ip_local_out+0x479/0x840 [ 153.083101][ C1] ip_local_out+0xa1/0x1e0 [ 153.083101][ C1] iptunnel_xmit+0x931/0xf20 [ 153.083101][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 153.083101][ C1] geneve_xmit+0x2139/0x3c40 [ 153.083101][ C1] xmit_one+0x2b6/0x760 [ 153.083101][ C1] __dev_queue_xmit+0x3432/0x4600 [ 153.083101][ C1] dev_queue_xmit+0x4b/0x60 [ 153.083101][ C1] packet_sendmsg+0x86ee/0x99d0 [ 153.083101][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.083101][ C1] __sys_sendmsg+0x714/0x830 [ 153.083101][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.083101][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.083101][ C1] do_syscall_64+0x9f/0x140 [ 153.083101][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.083101][ C1] [ 153.083101][ C1] Uninit was stored to memory at: [ 153.083101][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 153.083101][ C1] __msan_chain_origin+0x54/0xa0 [ 153.083101][ C1] iptunnel_xmit+0xbd6/0xf20 [ 153.083101][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 153.083101][ C1] geneve_xmit+0x2139/0x3c40 [ 153.083101][ C1] xmit_one+0x2b6/0x760 [ 153.083101][ C1] __dev_queue_xmit+0x3432/0x4600 [ 153.083101][ C1] dev_queue_xmit+0x4b/0x60 [ 153.083101][ C1] packet_sendmsg+0x86ee/0x99d0 [ 153.083101][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.083101][ C1] __sys_sendmsg+0x714/0x830 [ 153.083101][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.083101][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.083101][ C1] do_syscall_64+0x9f/0x140 [ 153.083101][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.083101][ C1] [ 153.083101][ C1] Uninit was created at: [ 153.083101][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.083101][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 153.083101][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.083101][ C1] __alloc_skb+0x4dd/0xe90 executing program [ 153.083101][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 153.083101][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 153.083101][ C1] packet_sendmsg+0x6a12/0x99d0 [ 153.083101][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.083101][ C1] __sys_sendmsg+0x714/0x830 [ 153.083101][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.083101][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.083101][ C1] do_syscall_64+0x9f/0x140 [ 153.083101][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.083101][ C1] ===================================================== [ 153.695951][ C1] ===================================================== [ 153.702128][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 153.702128][ C1] CPU: 1 PID: 8442 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.702128][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.702128][ C1] Call Trace: [ 153.702128][ C1] [ 153.702128][ C1] dump_stack+0x24c/0x2e0 [ 153.702128][ C1] kmsan_report+0xfb/0x1e0 [ 153.702128][ C1] __msan_warning+0x5c/0xa0 [ 153.702128][ C1] ip_rcv_core+0xf4c/0x1480 [ 153.702128][ C1] ip_rcv+0xc7/0x820 [ 153.702128][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.702128][ C1] __netif_receive_skb+0x1ec/0x640 [ 153.702128][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.702128][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 153.702128][ C1] process_backlog+0x517/0xbd0 [ 153.702128][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 153.702128][ C1] __napi_poll+0x13e/0xca0 [ 153.702128][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.702128][ C1] net_rx_action+0x726/0x14a0 [ 153.702128][ C1] ? net_tx_action+0xd30/0xd30 [ 153.702128][ C1] __do_softirq+0x1b9/0x715 [ 153.702128][ C1] ? idle_cpu+0x9a/0x1d0 [ 153.702128][ C1] ? __irq_exit_rcu+0x83/0x280 [ 153.702128][ C1] do_softirq+0x123/0x1c0 [ 153.702128][ C1] [ 153.702128][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 153.702128][ C1] local_bh_enable+0x36/0x40 [ 153.702128][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 153.702128][ C1] dev_queue_xmit+0x4b/0x60 [ 153.702128][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 153.702128][ C1] packet_sendmsg+0x86ee/0x99d0 [ 153.702128][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.702128][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.702128][ C1] ? process_slab+0x13a8/0x1b70 [ 153.702128][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.702128][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.702128][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.702128][ C1] ? packet_getsockopt+0x1120/0x1120 [ 153.702128][ C1] __sys_sendmsg+0x714/0x830 [ 153.702128][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.702128][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 153.702128][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 153.702128][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.702128][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.702128][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.702128][ C1] do_syscall_64+0x9f/0x140 [ 153.702128][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.702128][ C1] RIP: 0033:0x443de9 [ 153.702128][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 153.702128][ C1] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.702128][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 153.702128][ C1] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 153.702128][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 153.702128][ C1] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000025256 [ 153.702128][ C1] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 153.702128][ C1] [ 153.702128][ C1] Uninit was stored to memory at: [ 153.702128][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 153.702128][ C1] __msan_chain_origin+0x54/0xa0 [ 153.702128][ C1] iptunnel_xmit+0xbd6/0xf20 [ 153.702128][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 153.702128][ C1] geneve_xmit+0x2139/0x3c40 [ 153.702128][ C1] xmit_one+0x2b6/0x760 [ 153.702128][ C1] __dev_queue_xmit+0x3432/0x4600 [ 153.702128][ C1] dev_queue_xmit+0x4b/0x60 [ 153.702128][ C1] packet_sendmsg+0x86ee/0x99d0 [ 153.702128][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.702128][ C1] __sys_sendmsg+0x714/0x830 [ 153.702128][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.702128][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.702128][ C1] do_syscall_64+0x9f/0x140 [ 153.702128][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.702128][ C1] [ 153.702128][ C1] Uninit was created at: [ 153.702128][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.702128][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 153.702128][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.702128][ C1] __alloc_skb+0x4dd/0xe90 [ 153.702128][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 153.702128][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 153.702128][ C1] packet_sendmsg+0x6a12/0x99d0 [ 153.702128][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.702128][ C1] __sys_sendmsg+0x714/0x830 [ 153.702128][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.702128][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.702128][ C1] do_syscall_64+0x9f/0x140 [ 153.702128][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.702128][ C1] ===================================================== [ 154.191496][ C1] ===================================================== [ 154.198548][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 154.201444][ C1] CPU: 1 PID: 8442 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 154.201444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.201444][ C1] Call Trace: [ 154.201444][ C1] [ 154.201444][ C1] dump_stack+0x24c/0x2e0 [ 154.201444][ C1] kmsan_report+0xfb/0x1e0 [ 154.201444][ C1] __msan_warning+0x5c/0xa0 [ 154.201444][ C1] ip_rcv_core+0xf5d/0x1480 [ 154.201444][ C1] ip_rcv+0xc7/0x820 [ 154.201444][ C1] ? kmsan_get_metadata+0x116/0x180 [ 154.201444][ C1] __netif_receive_skb+0x1ec/0x640 [ 154.201444][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.201444][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 154.201444][ C1] process_backlog+0x517/0xbd0 [ 154.201444][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 154.201444][ C1] __napi_poll+0x13e/0xca0 [ 154.201444][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.201444][ C1] net_rx_action+0x726/0x14a0 [ 154.201444][ C1] ? net_tx_action+0xd30/0xd30 [ 154.201444][ C1] __do_softirq+0x1b9/0x715 [ 154.201444][ C1] ? idle_cpu+0x9a/0x1d0 [ 154.201444][ C1] ? __irq_exit_rcu+0x83/0x280 [ 154.201444][ C1] do_softirq+0x123/0x1c0 [ 154.201444][ C1] [ 154.201444][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 154.201444][ C1] local_bh_enable+0x36/0x40 [ 154.201444][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 154.201444][ C1] dev_queue_xmit+0x4b/0x60 [ 154.201444][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 154.201444][ C1] packet_sendmsg+0x86ee/0x99d0 [ 154.201444][ C1] ? kmsan_get_metadata+0x116/0x180 [ 154.201444][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.201444][ C1] ? process_slab+0x13a8/0x1b70 [ 154.201444][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.201444][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.201444][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 154.201444][ C1] ? packet_getsockopt+0x1120/0x1120 [ 154.201444][ C1] __sys_sendmsg+0x714/0x830 [ 154.201444][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.201444][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 154.201444][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 154.201444][ C1] ? kmsan_get_metadata+0x116/0x180 [ 154.201444][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.201444][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.201444][ C1] do_syscall_64+0x9f/0x140 [ 154.201444][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.201444][ C1] RIP: 0033:0x443de9 [ 154.201444][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 154.201444][ C1] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.201444][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 154.201444][ C1] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 154.201444][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 154.201444][ C1] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000025256 [ 154.201444][ C1] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 154.201444][ C1] [ 154.201444][ C1] Uninit was stored to memory at: [ 154.201444][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 154.201444][ C1] __msan_chain_origin+0x54/0xa0 [ 154.201444][ C1] iptunnel_xmit+0xbd6/0xf20 [ 154.201444][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 154.201444][ C1] geneve_xmit+0x2139/0x3c40 [ 154.201444][ C1] xmit_one+0x2b6/0x760 [ 154.201444][ C1] __dev_queue_xmit+0x3432/0x4600 [ 154.201444][ C1] dev_queue_xmit+0x4b/0x60 [ 154.201444][ C1] packet_sendmsg+0x86ee/0x99d0 [ 154.201444][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 154.201444][ C1] __sys_sendmsg+0x714/0x830 [ 154.201444][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.201444][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.201444][ C1] do_syscall_64+0x9f/0x140 [ 154.201444][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.201444][ C1] [ 154.201444][ C1] Uninit was created at: [ 154.201444][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 154.201444][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 154.201444][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 154.201444][ C1] __alloc_skb+0x4dd/0xe90 [ 154.201444][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 154.201444][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 154.201444][ C1] packet_sendmsg+0x6a12/0x99d0 [ 154.201444][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 154.201444][ C1] __sys_sendmsg+0x714/0x830 [ 154.201444][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.201444][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.201444][ C1] do_syscall_64+0x9f/0x140 [ 154.201444][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.201444][ C1] ===================================================== [ 154.678445][ C1] ===================================================== [ 154.685448][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 154.688395][ C1] CPU: 1 PID: 8442 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 154.688395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.688395][ C1] Call Trace: [ 154.688395][ C1] [ 154.688395][ C1] dump_stack+0x24c/0x2e0 [ 154.688395][ C1] kmsan_report+0xfb/0x1e0 [ 154.688395][ C1] __msan_warning+0x5c/0xa0 [ 154.688395][ C1] ip_rcv_core+0x1068/0x1480 [ 154.688395][ C1] ip_rcv+0xc7/0x820 [ 154.688395][ C1] ? kmsan_get_metadata+0x116/0x180 [ 154.688395][ C1] __netif_receive_skb+0x1ec/0x640 [ 154.688395][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.688395][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 154.688395][ C1] process_backlog+0x517/0xbd0 [ 154.688395][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 154.688395][ C1] __napi_poll+0x13e/0xca0 [ 154.688395][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.688395][ C1] net_rx_action+0x726/0x14a0 [ 154.688395][ C1] ? net_tx_action+0xd30/0xd30 [ 154.688395][ C1] __do_softirq+0x1b9/0x715 [ 154.688395][ C1] ? idle_cpu+0x9a/0x1d0 [ 154.688395][ C1] ? __irq_exit_rcu+0x83/0x280 [ 154.688395][ C1] do_softirq+0x123/0x1c0 [ 154.688395][ C1] [ 154.688395][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 154.688395][ C1] local_bh_enable+0x36/0x40 [ 154.688395][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 154.688395][ C1] dev_queue_xmit+0x4b/0x60 [ 154.688395][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 154.688395][ C1] packet_sendmsg+0x86ee/0x99d0 [ 154.688395][ C1] ? kmsan_get_metadata+0x116/0x180 [ 154.688395][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.688395][ C1] ? process_slab+0x13a8/0x1b70 [ 154.688395][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.688395][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.688395][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 154.688395][ C1] ? packet_getsockopt+0x1120/0x1120 [ 154.688395][ C1] __sys_sendmsg+0x714/0x830 [ 154.688395][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.688395][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 154.688395][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 154.688395][ C1] ? kmsan_get_metadata+0x116/0x180 [ 154.688395][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.688395][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.688395][ C1] do_syscall_64+0x9f/0x140 [ 154.688395][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.688395][ C1] RIP: 0033:0x443de9 [ 154.688395][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 154.688395][ C1] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.688395][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 154.688395][ C1] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 154.688395][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 154.688395][ C1] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000025256 [ 154.688395][ C1] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 154.688395][ C1] [ 154.688395][ C1] Uninit was stored to memory at: [ 154.688395][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 154.688395][ C1] __msan_chain_origin+0x54/0xa0 [ 154.688395][ C1] __ip_local_out+0x479/0x840 [ 154.688395][ C1] ip_local_out+0xa1/0x1e0 [ 154.688395][ C1] iptunnel_xmit+0x931/0xf20 [ 154.688395][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 154.688395][ C1] geneve_xmit+0x2139/0x3c40 [ 154.688395][ C1] xmit_one+0x2b6/0x760 [ 154.688395][ C1] __dev_queue_xmit+0x3432/0x4600 [ 154.688395][ C1] dev_queue_xmit+0x4b/0x60 [ 154.688395][ C1] packet_sendmsg+0x86ee/0x99d0 [ 154.688395][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 154.688395][ C1] __sys_sendmsg+0x714/0x830 [ 154.688395][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.688395][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.688395][ C1] do_syscall_64+0x9f/0x140 [ 154.688395][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.688395][ C1] [ 154.688395][ C1] Uninit was stored to memory at: [ 154.688395][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 154.688395][ C1] __msan_chain_origin+0x54/0xa0 [ 154.688395][ C1] iptunnel_xmit+0xbd6/0xf20 [ 154.688395][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 154.688395][ C1] geneve_xmit+0x2139/0x3c40 [ 154.688395][ C1] xmit_one+0x2b6/0x760 [ 154.688395][ C1] __dev_queue_xmit+0x3432/0x4600 [ 154.688395][ C1] dev_queue_xmit+0x4b/0x60 [ 154.688395][ C1] packet_sendmsg+0x86ee/0x99d0 [ 154.688395][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 154.688395][ C1] __sys_sendmsg+0x714/0x830 [ 154.688395][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.688395][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.688395][ C1] do_syscall_64+0x9f/0x140 [ 154.688395][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.688395][ C1] [ 154.688395][ C1] Uninit was created at: [ 154.688395][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 154.688395][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 154.688395][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 154.688395][ C1] __alloc_skb+0x4dd/0xe90 [ 154.688395][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 154.688395][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 154.688395][ C1] packet_sendmsg+0x6a12/0x99d0 [ 154.688395][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 154.688395][ C1] __sys_sendmsg+0x714/0x830 [ 154.688395][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.688395][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.688395][ C1] do_syscall_64+0x9f/0x140 executing program [ 154.688395][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.688395][ C1] ===================================================== [ 155.317327][ C0] ===================================================== [ 155.322112][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 155.322112][ C0] CPU: 0 PID: 11 Comm: ksoftirqd/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.322112][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.322112][ C0] Call Trace: [ 155.352278][ C0] dump_stack+0x24c/0x2e0 [ 155.352278][ C0] kmsan_report+0xfb/0x1e0 executing program [ 155.352278][ C0] __msan_warning+0x5c/0xa0 [ 155.352278][ C0] ip_rcv_core+0xf4c/0x1480 [ 155.352278][ C0] ip_rcv+0xc7/0x820 [ 155.352278][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.382248][ C0] __netif_receive_skb+0x1ec/0x640 [ 155.382248][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.382248][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 155.397264][ C0] process_backlog+0x517/0xbd0 [ 155.397264][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 155.397264][ C0] __napi_poll+0x13e/0xca0 [ 155.397264][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.397264][ C0] net_rx_action+0x726/0x14a0 [ 155.397264][ C0] ? net_tx_action+0xd30/0xd30 [ 155.397264][ C0] __do_softirq+0x1b9/0x715 [ 155.397264][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 155.397264][ C0] run_ksoftirqd+0x20/0x40 [ 155.397264][ C0] smpboot_thread_fn+0x5f5/0xa90 [ 155.397264][ C0] kthread+0x521/0x560 [ 155.397264][ C0] ? cpu_report_death+0x1a0/0x1a0 [ 155.397264][ C0] ? kthread_blkcg+0x110/0x110 [ 155.397264][ C0] ret_from_fork+0x1f/0x30 [ 155.397264][ C0] [ 155.397264][ C0] Uninit was stored to memory at: [ 155.397264][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 155.397264][ C0] __msan_chain_origin+0x54/0xa0 [ 155.397264][ C0] iptunnel_xmit+0xbd6/0xf20 [ 155.397264][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 155.397264][ C0] geneve_xmit+0x2139/0x3c40 [ 155.397264][ C0] xmit_one+0x2b6/0x760 [ 155.397264][ C0] __dev_queue_xmit+0x3432/0x4600 [ 155.397264][ C0] dev_queue_xmit+0x4b/0x60 [ 155.397264][ C0] packet_sendmsg+0x86ee/0x99d0 [ 155.397264][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.397264][ C0] __sys_sendmsg+0x714/0x830 [ 155.397264][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.397264][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.397264][ C0] do_syscall_64+0x9f/0x140 [ 155.397264][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.397264][ C0] [ 155.397264][ C0] Uninit was created at: [ 155.397264][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.397264][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 155.397264][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.397264][ C0] __alloc_skb+0x4dd/0xe90 [ 155.397264][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 155.397264][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 155.397264][ C0] packet_sendmsg+0x6a12/0x99d0 [ 155.397264][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.397264][ C0] __sys_sendmsg+0x714/0x830 [ 155.397264][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.397264][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.397264][ C0] do_syscall_64+0x9f/0x140 [ 155.397264][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.397264][ C0] ===================================================== [ 155.412126][ C1] ===================================================== [ 155.412126][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 155.412126][ C1] CPU: 1 PID: 8445 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.412126][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.412126][ C1] Call Trace: [ 155.412126][ C1] [ 155.412126][ C1] dump_stack+0x24c/0x2e0 [ 155.412126][ C1] kmsan_report+0xfb/0x1e0 [ 155.412126][ C1] __msan_warning+0x5c/0xa0 [ 155.412126][ C1] ip_rcv_core+0xf4c/0x1480 [ 155.412126][ C1] ip_rcv+0xc7/0x820 [ 155.412126][ C1] ? kmsan_get_metadata+0x116/0x180 [ 155.412126][ C1] __netif_receive_skb+0x1ec/0x640 [ 155.412126][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.412126][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 155.412126][ C1] process_backlog+0x517/0xbd0 [ 155.412126][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 155.412126][ C1] __napi_poll+0x13e/0xca0 [ 155.412126][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.412126][ C1] net_rx_action+0x726/0x14a0 [ 155.412126][ C1] ? net_tx_action+0xd30/0xd30 [ 155.412126][ C1] __do_softirq+0x1b9/0x715 [ 155.412126][ C1] ? idle_cpu+0x9a/0x1d0 [ 155.412126][ C1] ? __irq_exit_rcu+0x83/0x280 [ 155.412126][ C1] do_softirq+0x123/0x1c0 [ 155.412126][ C1] [ 155.412126][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 155.412126][ C1] local_bh_enable+0x36/0x40 [ 155.412126][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 155.412126][ C1] dev_queue_xmit+0x4b/0x60 [ 155.412126][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 155.412126][ C1] packet_sendmsg+0x86ee/0x99d0 [ 155.412126][ C1] ? kmsan_get_metadata+0x116/0x180 [ 155.412126][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.412126][ C1] ? process_slab+0x13a8/0x1b70 [ 155.412126][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.412126][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.412126][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 155.412126][ C1] ? packet_getsockopt+0x1120/0x1120 [ 155.412126][ C1] __sys_sendmsg+0x714/0x830 [ 155.412126][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.412126][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 155.412126][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 155.412126][ C1] ? kmsan_get_metadata+0x116/0x180 [ 155.412126][ C1] __se_sys_sendmsg+0x97/0xb0 [ 155.412126][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 155.412126][ C1] do_syscall_64+0x9f/0x140 [ 155.412126][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.412126][ C1] RIP: 0033:0x443de9 [ 155.412126][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 155.412126][ C1] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.412126][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 155.412126][ C1] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 155.412126][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 155.412126][ C1] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000025ee4 [ 155.412126][ C1] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 155.412126][ C1] [ 155.412126][ C1] Uninit was stored to memory at: [ 155.412126][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 155.412126][ C1] __msan_chain_origin+0x54/0xa0 [ 155.412126][ C1] iptunnel_xmit+0xbd6/0xf20 [ 155.412126][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 155.412126][ C1] geneve_xmit+0x2139/0x3c40 [ 155.412126][ C1] xmit_one+0x2b6/0x760 [ 155.412126][ C1] __dev_queue_xmit+0x3432/0x4600 [ 155.412126][ C1] dev_queue_xmit+0x4b/0x60 [ 155.412126][ C1] packet_sendmsg+0x86ee/0x99d0 [ 155.412126][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 155.412126][ C1] __sys_sendmsg+0x714/0x830 [ 155.412126][ C1] __se_sys_sendmsg+0x97/0xb0 [ 155.412126][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 155.412126][ C1] do_syscall_64+0x9f/0x140 [ 155.412126][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.412126][ C1] [ 155.412126][ C1] Uninit was created at: [ 155.412126][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.412126][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 155.412126][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.412126][ C1] __alloc_skb+0x4dd/0xe90 [ 155.412126][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 155.412126][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 155.412126][ C1] packet_sendmsg+0x6a12/0x99d0 [ 155.412126][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 155.412126][ C1] __sys_sendmsg+0x714/0x830 [ 155.412126][ C1] __se_sys_sendmsg+0x97/0xb0 [ 155.412126][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 155.412126][ C1] do_syscall_64+0x9f/0x140 [ 155.412126][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.412126][ C1] ===================================================== [ 155.639578][ C0] ===================================================== [ 155.639578][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 155.639578][ C0] CPU: 0 PID: 11 Comm: ksoftirqd/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.639578][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.639578][ C0] Call Trace: [ 155.639578][ C0] dump_stack+0x24c/0x2e0 [ 155.639578][ C0] kmsan_report+0xfb/0x1e0 [ 155.639578][ C0] __msan_warning+0x5c/0xa0 [ 155.639578][ C0] ip_rcv_core+0xf5d/0x1480 [ 155.639578][ C0] ip_rcv+0xc7/0x820 [ 155.639578][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.639578][ C0] __netif_receive_skb+0x1ec/0x640 [ 155.639578][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.639578][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 155.639578][ C0] process_backlog+0x517/0xbd0 [ 155.639578][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 155.639578][ C0] __napi_poll+0x13e/0xca0 [ 155.639578][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.639578][ C0] net_rx_action+0x726/0x14a0 [ 155.639578][ C0] ? net_tx_action+0xd30/0xd30 [ 155.639578][ C0] __do_softirq+0x1b9/0x715 [ 155.639578][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 155.639578][ C0] run_ksoftirqd+0x20/0x40 [ 155.639578][ C0] smpboot_thread_fn+0x5f5/0xa90 [ 155.639578][ C0] kthread+0x521/0x560 [ 155.639578][ C0] ? cpu_report_death+0x1a0/0x1a0 [ 155.639578][ C0] ? kthread_blkcg+0x110/0x110 [ 155.639578][ C0] ret_from_fork+0x1f/0x30 [ 155.639578][ C0] [ 155.639578][ C0] Uninit was stored to memory at: [ 155.639578][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 155.639578][ C0] __msan_chain_origin+0x54/0xa0 [ 155.639578][ C0] iptunnel_xmit+0xbd6/0xf20 [ 155.639578][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 155.639578][ C0] geneve_xmit+0x2139/0x3c40 [ 155.639578][ C0] xmit_one+0x2b6/0x760 [ 155.639578][ C0] __dev_queue_xmit+0x3432/0x4600 [ 155.639578][ C0] dev_queue_xmit+0x4b/0x60 [ 155.639578][ C0] packet_sendmsg+0x86ee/0x99d0 [ 155.639578][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.639578][ C0] __sys_sendmsg+0x714/0x830 [ 155.639578][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.639578][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.639578][ C0] do_syscall_64+0x9f/0x140 [ 155.639578][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.639578][ C0] [ 155.639578][ C0] Uninit was created at: [ 155.639578][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.639578][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 155.639578][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.639578][ C0] __alloc_skb+0x4dd/0xe90 [ 155.639578][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 155.639578][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 155.639578][ C0] packet_sendmsg+0x6a12/0x99d0 [ 155.639578][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.639578][ C0] __sys_sendmsg+0x714/0x830 [ 155.639578][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.639578][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.639578][ C0] do_syscall_64+0x9f/0x140 [ 155.639578][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.639578][ C0] ===================================================== [ 156.125485][ C1] ===================================================== [ 156.125485][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 156.125485][ C1] CPU: 1 PID: 8445 Comm: syz-executor637 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 156.125485][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.125485][ C1] Call Trace: [ 156.125485][ C1] [ 156.125485][ C1] dump_stack+0x24c/0x2e0 [ 156.125485][ C1] kmsan_report+0xfb/0x1e0 [ 156.125485][ C1] __msan_warning+0x5c/0xa0 [ 156.125485][ C1] ip_rcv_core+0xf5d/0x1480 [ 156.125485][ C1] ip_rcv+0xc7/0x820 [ 156.125485][ C1] ? kmsan_get_metadata+0x116/0x180 [ 156.125485][ C1] __netif_receive_skb+0x1ec/0x640 [ 156.125485][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 156.125485][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 156.125485][ C1] process_backlog+0x517/0xbd0 [ 156.125485][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 156.125485][ C1] __napi_poll+0x13e/0xca0 [ 156.125485][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.125485][ C1] net_rx_action+0x726/0x14a0 [ 156.125485][ C1] ? net_tx_action+0xd30/0xd30 [ 156.125485][ C1] __do_softirq+0x1b9/0x715 [ 156.125485][ C1] ? idle_cpu+0x9a/0x1d0 [ 156.125485][ C1] ? __irq_exit_rcu+0x83/0x280 [ 156.125485][ C1] do_softirq+0x123/0x1c0 [ 156.125485][ C1] [ 156.125485][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 156.125485][ C1] local_bh_enable+0x36/0x40 [ 156.125485][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 156.125485][ C1] dev_queue_xmit+0x4b/0x60 [ 156.125485][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 156.125485][ C1] packet_sendmsg+0x86ee/0x99d0 [ 156.125485][ C1] ? kmsan_get_metadata+0x116/0x180 [ 156.125485][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 156.125485][ C1] ? process_slab+0x13a8/0x1b70 [ 156.125485][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 156.125485][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.125485][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 156.125485][ C1] ? packet_getsockopt+0x1120/0x1120 [ 156.125485][ C1] __sys_sendmsg+0x714/0x830 [ 156.125485][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 156.125485][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 156.125485][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 156.125485][ C1] ? kmsan_get_metadata+0x116/0x180 [ 156.125485][ C1] __se_sys_sendmsg+0x97/0xb0 [ 156.125485][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 156.125485][ C1] do_syscall_64+0x9f/0x140 [ 156.125485][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 156.125485][ C1] RIP: 0033:0x443de9 [ 156.125485][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 156.125485][ C1] RSP: 002b:00007ffe9e915d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.125485][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443de9 [ 156.125485][ C1] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 156.125485][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 156.125485][ C1] R10: 00007ffe9e915790 R11: 0000000000000246 R12: 0000000000025ee4 [ 156.125485][ C1] R13: 00007ffe9e915d40 R14: 00007ffe9e915d30 R15: 00007ffe9e915d24 [ 156.125485][ C1] [ 156.125485][ C1] Uninit was stored to memory at: [ 156.125485][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 156.125485][ C1] __msan_chain_origin+0x54/0xa0 [ 156.125485][ C1] iptunnel_xmit+0xbd6/0xf20 [ 156.125485][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 156.125485][ C1] geneve_xmit+0x2139/0x3c40 [ 156.125485][ C1] xmit_one+0x2b6/0x760 [ 156.125485][ C1] __dev_queue_xmit+0x3432/0x4600 [ 156.125485][ C1] dev_queue_xmit+0x4b/0x60 [ 156.125485][ C1] packet_sendmsg+0x86ee/0x99d0 [ 156.125485][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 156.125485][ C1] __sys_sendmsg+0x714/0x830 [ 156.125485][ C1] __se_sys_sendmsg+0x97/0xb0 [ 156.125485][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 156.125485][ C1] do_syscall_64+0x9f/0x140 [ 156.125485][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 156.125485][ C1] [ 156.125485][ C1] Uninit was created at: [ 156.125485][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 156.125485][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 156.125485][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 156.125485][ C1] __alloc_skb+0x4dd/0xe90 [ 156.125485][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 156.125485][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 156.125485][ C1] packet_sendmsg+0x6a12/0x99d0 [ 156.125485][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 156.125485][ C1] __sys_sendmsg+0x714/0x830 [ 156.125485][ C1] __se_sys_sendmsg+0x97/0xb0 [ 156.125485][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 156.125485][ C1] do_syscall_64+0x9f/0x140 [ 156.125485][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 156.125485][ C1] ===================================================== [ 156.437438][ C0] ===================================================== [ 156.437438][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 156.437438][ C0] CPU: 0 PID: 11 Comm: ksoftirqd/0 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 156.437438][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.437438][ C0] Call Trace: [ 156.437438][ C0] dump_stack+0x24c/0x2e0 [ 156.437438][ C0] kmsan_report+0xfb/0x1e0 [ 156.437438][ C0] __msan_warning+0x5c/0xa0 [ 156.437438][ C0] ip_rcv_core+0x1068/0x1480 [ 156.437438][ C0] ip_rcv+0xc7/0x820 [ 156.437438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 156.437438][ C0] __netif_receive_skb+0x1ec/0x640 [ 156.437438][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 156.437438][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 156.437438][ C0] process_backlog+0x517/0xbd0 [ 156.437438][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 156.437438][ C0] __napi_poll+0x13e/0xca0 [ 156.437438][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.437438][ C0] net_rx_action+0x726/0x14a0 [ 156.437438][ C0] ? net_tx_action+0xd30/0xd30 [ 156.437438][ C0] __do_softirq+0x1b9/0x715 [ 156.437438][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 156.437438][ C0] run_ksoftirqd+0x20/0x40 [ 156.437438][ C0] smpboot_thread_fn+0x5f5/0xa90 [ 156.437438][ C0] kthread+0x521/0x560 [ 156.437438][ C0] ? cpu_report_death+0x1a0/0x1a0 [ 156.437438][ C0] ? kthread_blkcg+0x110/0x110 [ 156.437438][ C0] ret_from_fork+0x1f/0x30 [ 156.437438][ C0] [ 156.437438][ C0] Uninit was stored to memory at: [ 156.437438][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 156.437438][ C0] __msan_chain_origin+0x54/0xa0 [ 156.437438][ C0] __ip_local_out+0x479/0x840 [ 156.437438][ C0] ip_local_out+0xa1/0x1e0 [ 156.437438][ C0] iptunnel_xmit+0x931/0xf20 [ 156.437438][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 156.437438][ C0] geneve_xmit+0x2139/0x3c40 [ 156.437438][ C0] xmit_one+0x2b6/0x760 [ 156.437438][ C0] __dev_queue_xmit+0x3432/0x4600 [ 156.437438][ C0] dev_queue_xmit+0x4b/0x60 [ 156.437438][ C0] packet_sendmsg+0x86ee/0x99d0 [ 156.437438][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 156.437438][ C0] __sys_sendmsg+0x714/0x830 [ 156.437438][ C0] __se_sys_sendmsg+0x97/0xb0 [ 156.437438][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 156.437438][ C0] do_syscall_64+0x9f/0x140 [ 156.437438][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 156.437438][ C0] [ 156.437438][ C0] Uninit was stored to memory at: [ 156.437438][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 156.437438][ C0] __msan_chain_origin+0x54/0xa0 [ 156.437438][ C0] iptunnel_xmit+0xbd6/0xf20 [ 156.437438][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 156.437438][ C0] geneve_xmit+0x2139/0x3c40 [ 156.437438][ C0] xmit_one+0x2b6/0x760 [ 156.437438][ C0] __dev_queue_xmit+0x3432/0x4600 [ 156.437438][ C0] dev_queue_xmit+0x4b/0x60 [ 156.437438][ C0] packet_sendmsg+0x86ee/0x99d0 [ 156.437438][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 156.437438][ C0] __sys_sendmsg+0x714/0x830 [ 156.437438][ C0] __se_sys_sendmsg+0x97/0xb0 [ 156.437438][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 156.437438][ C0] do_syscall_64+0x9f/0x140 [ 156.437438][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 156.437438][ C0] [ 156.437438][ C0] Uninit was created at: [ 156.437438][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 156.437438][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 156.437438][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 156.437438][ C0] __alloc_skb+0x4dd/0xe90