ted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 01:12:15 executing program 0: r0 = memfd_create(&(0x7f0000000040)='H', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:12:15 executing program 1: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x1a1}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000300)) 01:12:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 01:12:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000001080)='./file0\x00', 0x40040, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:12:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 01:12:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) getpeername(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x80) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 01:12:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$nl_crypto(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 01:12:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) dup3(r0, r1, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) 01:12:16 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:12:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) 01:12:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:12:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000680)='comm\x00') write$P9_RMKNOD(r0, 0x0, 0x0) 01:12:16 executing program 5: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RCLUNK(r2, 0x0, 0x0) 01:12:17 executing program 3: mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/112) 01:12:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000080)='O', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) 01:12:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 01:12:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)=""/115, 0x73}], 0x1}}], 0x2, 0x0, 0x0) tkill(r1, 0x14) r2 = dup(r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 01:12:17 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 2147.825857][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:12:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xffffffcb}}, 0x0) [ 2147.929357][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:12:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x31, 0x0, &(0x7f0000000000)) 01:12:17 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) ioctl$EVIOCSREP(r0, 0x5450, 0x0) 01:12:17 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x890c, 0x404f07) 01:12:18 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 01:12:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x28004001) 01:12:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4090) 01:12:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20050001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @initdev}, &(0x7f0000000240)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) tkill(r2, 0x1000000000016) 01:12:18 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:12:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 01:12:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) 01:12:18 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000000c0)) 01:12:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = dup(r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) ioctl$TCSETX(r1, 0x5433, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup3(r2, r1, 0x0) 01:12:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:12:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$getown(r0, 0x9) sched_getscheduler(r1) 01:12:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x546) r2 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x890c, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) r3 = memfd_create(&(0x7f0000000200)='\x00\x00\x00\x00\x00\t\x00\x00\x00\x8as\xaa\xfe\xfa\x1bf\a^\"9\xdd\x8bTi\xe8\xc9\xfe8\xcf)\xff1\xdf5\xa80B\xb0\xda\x83\xf8\x10M\xab\xe1\x9c}i\xc2\xda\xdb\xf0\x97\xaf,}i{t\x904;_\x91_\xfd\x90\"\xff/`\x19q\xf4c5JC\xb0\xe2\x8c\x8a\xd3\xe3C\x02\x12\xf7+\x18\xb7\n\xa3K+\x98u#L\x92\xa0Hj\v\xaa(h\xe4\"\xeb\xc5Kv\xca4\xd1S\xe3\xe2\xa8\xafk\xfb\x11\x8f \xca\xb4\x88\",F/w\x19\xfd\x86}\x8f\xd1\xce\x89M \xd7\xffC\a.\x00\xe5\xa0MJ%\x15\xf2\xe5\xad\xe1\xa0', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r3, 0x0) 01:12:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080), 0x4) 01:12:19 executing program 0: r0 = epoll_create(0x40000acf) close(r0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 01:12:19 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40441, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x15, 0x0, &(0x7f0000000040)) 01:12:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 01:12:19 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x28700, 0x0) ioctl$GIO_UNIMAP(r0, 0x5427, 0x0) 01:12:19 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 01:12:20 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={0x0}}, 0x0) 01:12:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x7, 0x0, 0x0) 01:12:20 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 01:12:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000000)=""/11, 0x1049a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_pts(r0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)) 01:12:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS64(r0, 0x5421, &(0x7f0000004040)) 01:12:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r1) r2 = gettid() socket(0x11, 0xa, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) tkill(r2, 0x1000000000016) 01:12:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) 01:12:20 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 01:12:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) write$P9_RLERRORu(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:12:21 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 01:12:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8903, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:12:22 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) ioctl$FITRIM(r1, 0x5452, &(0x7f0000000080)) 01:12:22 executing program 3: r0 = socket(0x11, 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x0) 01:12:22 executing program 0: r0 = timerfd_create(0x0, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup3(r0, r1, 0x0) timerfd_gettime(r1, &(0x7f00000006c0)) 01:12:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) write$P9_RLERRORu(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:12:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:22 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, &(0x7f0000002000)={'batadv_slave_0\x00'}) 01:12:22 executing program 5: r0 = gettid() r1 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, r2/1000+30000}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = dup(r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f00000007c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 01:12:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20008000) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4804) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:12:23 executing program 3: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:12:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:23 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087ef, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) timer_settime(r0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 01:12:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 01:12:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$EVIOCGUNIQ(r1, 0x5451, 0x0) 01:12:24 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$CHAR_RAW_GETSIZE(r2, 0x1260, 0x0) 01:12:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_RELDISP(r1, 0x5605) mprotect(&(0x7f0000298000/0x3000)=nil, 0x3000, 0x0) 01:12:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:12:25 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x4c80, 0x0) 01:12:26 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000b00)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 01:12:26 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) dup2(r0, r1) getsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, &(0x7f0000000280)) 01:12:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:12:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 01:12:26 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:27 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000c00)='./file0\x00', 0x0) dup3(r0, r1, 0x0) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) 01:12:27 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$notify(r2, 0x402, 0x0) 01:12:27 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x841, 0x50) 01:12:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 01:12:27 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x560d, &(0x7f0000000000)={0xb}) 01:12:27 executing program 5: lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 01:12:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$unix(0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 01:12:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0) 01:12:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:28 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5421, &(0x7f0000000040)) 01:12:28 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1934c2, 0x0) write$binfmt_script(r0, 0x0, 0x0) 01:12:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x560d, &(0x7f0000000000)={0xb}) 01:12:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x18, &(0x7f0000000180)={'filter\x00', 0x2, [{}, {}]}, 0x48) 01:12:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x18000) 01:12:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x560d, &(0x7f0000000000)={0xb}) 01:12:28 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='comm\x00') exit(0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 01:12:29 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:12:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:29 executing program 4: r0 = inotify_init() r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:12:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x18000) 01:12:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20000004) dup3(r0, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20000004) dup3(r0, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:29 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000240)) 01:12:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4008084) 01:12:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:12:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20000004) dup3(r0, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup3(r0, r1, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 01:12:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') write$P9_RMKDIR(r0, 0x0, 0x0) 01:12:30 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40002062, 0x0, 0xfffffffffffffe72) 01:12:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) gettid() 01:12:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x8901, &(0x7f0000000000)) 01:12:30 executing program 3: fstat(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x12}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8}]}, 0x4c}}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x3) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffff81}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000001c0)) 01:12:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:31 executing program 5: creat(&(0x7f00000009c0)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 01:12:31 executing program 4: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 01:12:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x2, 0x4) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:12:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:31 executing program 5: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14}, 0xfffffeff) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0x14) 01:12:31 executing program 3: splice(0xffffffffffffff9c, &(0x7f0000000040), 0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0xd) 01:12:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(r0, 0x8953, &(0x7f0000000080)={0x2, {}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) 01:12:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 01:12:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) gettid() 01:12:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:12:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000080)={'team0\x00'}) 01:12:32 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 01:12:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80004508, 0x0) 01:12:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:12:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x17, 0x0, 0x0) 01:12:32 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) fcntl$F_GET_RW_HINT(r0, 0xf, &(0x7f0000000240)) 01:12:32 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:12:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) gettid() 01:12:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8901, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @dev}}) 01:12:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup(r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000180)={0x0}}, 0x20004011) 01:12:33 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 01:12:33 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) futimesat(r0, 0x0, 0x0) 01:12:33 executing program 3: mkdir(&(0x7f0000b0fff8)='./file0\x00', 0x101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) 01:12:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 01:12:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) dup2(r0, r2) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) 01:12:34 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 01:12:34 executing program 5: r0 = socket(0x10, 0x803, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0xe, 0x0, &(0x7f0000000000)) 01:12:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) tkill(0x0, 0x1000000000016) 01:12:34 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r1, 0x0, 0x6, 0x40012020, 0x0, 0x14) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 01:12:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20000004) dup3(r0, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 01:12:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x88, 0x64, 0x0, &(0x7f0000000080)) [ 2165.300149][T21890] sock: process `syz-executor.5' is using obsolete getsockopt SO_BSDCOMPAT 01:12:35 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup(r0) write$P9_RLCREATE(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 01:12:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x13) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 01:12:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20000004) dup3(r0, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x100000289) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$CHAR_RAW_SECDISCARD(r1, 0x127d, 0x0) tkill(r2, 0x401004000000014) 01:12:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 01:12:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 01:12:35 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:12:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) tkill(0x0, 0x1000000000016) 01:12:35 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:12:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20000004) dup3(r0, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5451, 0x0) 01:12:36 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x181041, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0xfffffcaa, 0x0) 01:12:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x0) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0xd, &(0x7f0000000100)=[@window], 0x1) 01:12:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffffffffffe8d}}, 0x0) 01:12:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffeda}}, 0x0) 01:12:36 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4) 01:12:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x0) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:12:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) tkill(0x0, 0x1000000000016) 01:12:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000100)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{}, "2f9ed168bcc9c083", "3ffa64c5db7dbecf8e4623cdde310bd7", "b68e6ea4", "af4952268a0cbc94"}, 0x28) 01:12:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={0x0}}, 0x20000040) 01:12:37 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x5450) 01:12:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x8000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 01:12:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x0) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup2(r1, r0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000240)={0x0, 0x1, 0x6, @local}, 0x10) 01:12:37 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)) 01:12:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:12:38 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:38 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 01:12:38 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RAUTH(r0, 0x0, 0x0) 01:12:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') r2 = gettid() tkill(r2, 0x1000000000016) 01:12:38 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x5421, &(0x7f0000000080)) 01:12:38 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 01:12:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 01:12:42 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x2e0) 01:12:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80) dup2(r0, r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:12:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') r2 = gettid() tkill(r2, 0x1000000000016) 01:12:42 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000000)={0xb}) 01:12:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) tkill(r1, 0x1000000000016) 01:12:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) 01:12:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:12:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') r2 = gettid() tkill(r2, 0x1000000000016) 01:12:43 executing program 5: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200000841, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000740)) 01:12:43 executing program 3: r0 = eventfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup2(r2, r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x98}}, 0x0) 01:12:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_FS_INFO(r0, 0x5450, 0x0) 01:12:43 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000440)=[{}], 0x1, 0x0) 01:12:43 executing program 0: r0 = epoll_create(0x9) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:12:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:43 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001340)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 01:12:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, &(0x7f0000000000)={0xb}) 01:12:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4c000) 01:12:44 executing program 3: r0 = socket(0x10, 0x802, 0x0) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 01:12:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x5450, 0x0) 01:12:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) connect$inet(r2, &(0x7f0000000000), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}}, 0x0) shutdown(r2, 0x0) 01:12:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x560d, &(0x7f0000000000)={0xb}) 01:12:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x14, 0x0, 0x300) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) 01:12:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:12:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x89a0, 0x0) 01:12:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 01:12:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x560d, &(0x7f0000000000)={0xb}) 01:12:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, &(0x7f0000000080)="1c50", 0x2, 0x10, &(0x7f0000000100)=@nl=@unspec, 0x80) 01:12:45 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$char_raw(r0, 0x0, 0x0) 01:12:45 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={0x0}}, 0x0) 01:12:46 executing program 3: r0 = socket(0x2, 0x803, 0xff) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0xd, 0x0, 0x0) 01:12:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x560d, &(0x7f0000000000)={0xb}) 01:12:46 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 01:12:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000500)) 01:12:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 01:12:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:12:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, 0x0) 01:12:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x5450, 0x0) 01:12:46 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 01:12:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5451, 0x0) 01:12:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r0, r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0) 01:12:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, 0x0) 01:12:47 executing program 3: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 01:12:47 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x5452, &(0x7f0000000080)) 01:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:12:47 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:12:47 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) 01:12:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x560d, 0x0) 01:12:47 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 01:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 01:12:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x14, 0x0, 0x0) 01:12:48 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 01:12:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_FS_INFO(r0, 0x5450, 0x0) 01:12:48 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:12:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') dup2(r0, r1) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x32, 0x0, &(0x7f0000000000)) 01:12:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x200000c5) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x60}}, 0x0) 01:12:48 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x5450, 0x0) 01:12:48 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:49 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000180)={0x0, ""/233}, 0xf1, 0x1, 0x1000) 01:12:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:12:49 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000140)) 01:12:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc61, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:49 executing program 1: socket(0x10, 0x802, 0x0) 01:12:49 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) 01:12:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000300)={'gre0\x00', 0x0}) 01:12:50 executing program 1: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000240)) 01:12:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x29, 0x46, 0x0, 0x0) 01:12:50 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:50 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5450, 0x0) 01:12:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) dup3(r3, r0, 0x0) tkill(r1, 0x1000000000016) 01:12:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 01:12:50 executing program 1: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) open(&(0x7f0000000080)='./file0\x00', 0x10840, 0x0) read$char_raw(r0, 0x0, 0x0) 01:12:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGABS20(r0, 0x5450, 0x0) 01:12:51 executing program 3: r0 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x10041, 0x0) write$evdev(r0, 0x0, 0x0) 01:12:51 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:12:51 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001340)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040), 0x4) 01:12:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x20040, 0x0) dup2(r0, r1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x31, 0x0, &(0x7f0000000000)) 01:12:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20000040) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:12:51 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:51 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000004c0)='memory.swap.current\x00', 0x26e1, 0x0) 01:12:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0xf, 0x0, &(0x7f0000000000)) 01:12:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) 01:12:52 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:12:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/exec\x00', 0x2, 0x0) dup2(r0, r1) write$binfmt_aout(r1, 0x0, 0x0) 01:12:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, @dev}) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:12:52 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:52 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:12:53 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x41, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000300)) 01:12:53 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:12:53 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 2183.800624][ T31] audit: type=1804 audit(1603933973.388:28): pid=22306 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir128246592/syzkaller.O6Mort/1647/file0" dev="sda1" ino=16305 res=1 errno=0 [ 2183.896553][ T31] audit: type=1804 audit(1603933973.438:29): pid=22306 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir128246592/syzkaller.O6Mort/1647/file0" dev="sda1" ino=16305 res=1 errno=0 01:12:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0) 01:12:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 01:12:54 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003d00)='/dev/vcs\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 01:12:54 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:12:54 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x20000000000001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:54 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x0) 01:12:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:54 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x20000000000001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:54 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000b00)='/dev/vcsa#\x00', 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) 01:12:54 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:12:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) 01:12:55 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x20000000000001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:58 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) tee(r0, 0xffffffffffffffff, 0x0, 0x0) 01:12:58 executing program 3: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 01:12:58 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:12:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:12:58 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 01:12:58 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sockstat6\x00') write$cgroup_subtree(r0, 0x0, 0xffffffffffffff8d) 01:12:58 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) uname(&(0x7f0000000000)=""/95) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 01:12:58 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:12:59 executing program 5: mknod(&(0x7f00000000c0)='./file1\x00', 0xc009, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 01:12:59 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:12:59 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x0) 01:12:59 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:12:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) flistxattr(r0, 0x0, 0x0) 01:13:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:01 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:01 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:01 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5450, r2) 01:13:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20008000) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:13:01 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) close(r0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcsa\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 01:13:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000480)) 01:13:02 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x5450, 0x0) 01:13:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000480)) 01:13:02 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:04 executing program 3: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 01:13:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0x8903, &(0x7f0000000440)) 01:13:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:04 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000480)) 01:13:05 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:05 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:13:05 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:05 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x5450, 0x0) 01:13:05 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:05 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132320) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x29, 0x4c, &(0x7f0000000040)=0x40000008, 0x4) 01:13:08 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:13:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:08 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:08 executing program 5: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:08 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:08 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:13:08 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x20442) write$P9_ROPEN(r0, 0x0, 0x0) 01:13:08 executing program 5: r0 = socket(0x0, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:09 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 01:13:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:11 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 01:13:11 executing program 5: r0 = socket(0x0, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:11 executing program 0: close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:11 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40004) 01:13:11 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 01:13:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd(0x0) dup2(r0, r1) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:13:12 executing program 5: r0 = socket(0x0, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:12 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000bc0)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast1}, 'syzkaller1\x00'}) 01:13:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:14 executing program 5: r0 = socket(0xa, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) 01:13:14 executing program 0: close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:14 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/zero\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 01:13:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:15 executing program 5: r0 = socket(0xa, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:15 executing program 3: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r0, 0x0, 0x0) 01:13:15 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0x5450, 0x0) 01:13:15 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:13:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(0xffffffffffffffff, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r1 = gettid() tkill(r1, 0x1000000000016) 01:13:18 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000001c00)) r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xb, 0x0) fstat(0xffffffffffffffff, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x110) r1 = open$dir(&(0x7f0000000180)='./file1\x00', 0x109441, 0x36) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r2) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000080)={0x0, 0x2, 0x4}) r3 = dup(r1) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) fchownat(r3, &(0x7f0000000000)='\x00', r4, 0x0, 0x1000) setresuid(0xffffffffffffffff, 0xee01, r4) 01:13:18 executing program 5: r0 = socket(0xa, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:18 executing program 0: close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)) 01:13:18 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) 01:13:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000480)) 01:13:18 executing program 5: socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000480)) 01:13:18 executing program 5: socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:19 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000480)) 01:13:19 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(0xffffffffffffffff, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r1 = gettid() tkill(r1, 0x1000000000016) 01:13:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000880) 01:13:19 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 01:13:19 executing program 5: socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 01:13:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:13:19 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 01:13:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, 0x0, 0x0) 01:13:19 executing program 3: pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x3, 0x0) dup3(r1, r0, 0x0) ioctl$CHAR_RAW_IOOPT(r0, 0x1279, &(0x7f0000000040)) 01:13:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20008081) 01:13:20 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 01:13:20 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000940)) 01:13:20 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(0xffffffffffffffff, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r1 = gettid() tkill(r1, 0x1000000000016) 01:13:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, 0x0, 0x0) 01:13:20 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x5451, 0x0) 01:13:20 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) memfd_create(&(0x7f0000000040)='{vmnet1posix_acl_access@mime_type\x00', 0x0) ftruncate(r0, 0x0) 01:13:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, 0x0, 0x0) 01:13:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8903, &(0x7f0000000300)) 01:13:21 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:13:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 01:13:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040084) 01:13:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 01:13:21 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 01:13:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:21 executing program 3: socketpair(0x1, 0x80803, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 01:13:22 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:13:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 01:13:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002680)={'gretap0\x00', 0x0}) 01:13:22 executing program 3: socketpair(0x1, 0x80803, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 01:13:22 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x5451, 0x0) 01:13:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:13:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) dup3(r0, r1, 0x0) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, &(0x7f00000000c0)) 01:13:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 01:13:23 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) 01:13:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) 01:13:23 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x181841) write$P9_RAUTH(r0, 0x0, 0x0) 01:13:23 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) creat(&(0x7f0000001400)='./file0\x00', 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 01:13:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0xc, &(0x7f0000000040)='tls\x00', 0x4) 01:13:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x2, &(0x7f0000000000)) 01:13:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 01:13:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={0x0}}, 0x0) 01:13:24 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f00000000c0)={0x16, 0x7, 0x0, {0xd, ')(&([W]#%)\x1f::'}}, 0xfffffe77) write$P9_RSTATu(r0, &(0x7f0000000100)={0x7c, 0x7d, 0x0, {{0x0, 0x5a, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, '', 0xd, ')(&([W]#%)\x1f::', 0xd, ')(&([W]#%)\x1f::', 0xd, ')(&([W]#%)\x1f::'}, 0xd, ')(&([W]#%)\x1f::', 0xee01, 0xffffffffffffffff, 0xee01}}, 0x7c) 01:13:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:24 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:24 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 01:13:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x5452, &(0x7f0000000140)=@add_del={0x2, 0x0}) 01:13:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:13:24 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x101202) write$cgroup_freezer_state(r0, 0x0, 0x0) 01:13:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) 01:13:25 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) getsockname$netlink(r1, 0x0, &(0x7f0000000200)) 01:13:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4008080, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 01:13:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x16) 01:13:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) getpeername$netlink(r0, 0x0, &(0x7f0000000080)) 01:13:25 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001a00), 0x8, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 01:13:25 executing program 2: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r0, &(0x7f0000000400)={""/5820}, 0x1800) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r1 = gettid() tkill(r1, 0x1000000000016) 01:13:25 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:25 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='attr/prev\x00') ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000900)) 01:13:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:13:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000900)="02", 0x1, 0x40004, 0x0, 0x15) 01:13:26 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x5451, 0x0) 01:13:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x5451, 0x0) 01:13:26 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) 01:13:26 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockname(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000000)=0x80) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) accept4$unix(r5, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 01:13:26 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 01:13:27 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:27 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x5450, 0x0) 01:13:27 executing program 2: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r0, &(0x7f0000000400)={""/5820}, 0x1800) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r1 = gettid() tkill(r1, 0x1000000000016) 01:13:27 executing program 4: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 01:13:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), 0x8) 01:13:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454ca, 0x400000) r1 = dup(r0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/191) 01:13:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:27 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 01:13:27 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:27 executing program 3: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) write$binfmt_elf32(r0, 0x0, 0x0) 01:13:27 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:13:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x2, 0xffffff7f}, 0x2000000c, &(0x7f0000000180)={0x0}}, 0x0) 01:13:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:13:28 executing program 2: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r0, &(0x7f0000000400)={""/5820}, 0x1800) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r1 = gettid() tkill(r1, 0x1000000000016) 01:13:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:13:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 01:13:28 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:28 executing program 4: ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) 01:13:29 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001640)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:13:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSND(r0, 0x5451, 0x0) 01:13:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 01:13:29 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x64) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:13:29 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:29 executing program 5: r0 = gettid() r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = dup(r1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) tkill(r0, 0x8001004000000016) 01:13:29 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0xa8f41, 0x1cb) 01:13:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:13:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) 01:13:30 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 01:13:30 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000300), 0x28, &(0x7f0000000280)={&(0x7f0000000340)={0x140, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x140}}, 0x0) 01:13:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000040)) 01:13:30 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:30 executing program 5: readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=""/253, 0xfd) 01:13:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 01:13:30 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 01:13:31 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:13:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:31 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 01:13:31 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 01:13:31 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:13:31 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getsockname$inet(r2, 0x0, &(0x7f0000000180)) 01:13:31 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x70, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@ssid={0x0, 0x1d, @random="cb382ec04d5863fd5f3fe2155da8c414b673dd2b2dec2bfc0e0cbfbda1"}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x3f, 0x3f, 0x401}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c001) 01:13:31 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x803e}, 0x0) 01:13:31 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 01:13:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$sock(r1, &(0x7f0000000140)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x8) tkill(r2, 0x1000000000016) 01:13:32 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r0) r3 = gettid() sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000016) 01:13:32 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)=@buf) 01:13:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:13:32 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:33 executing program 1: r0 = socket(0xa, 0x3, 0x1f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd51, &(0x7f00000000c0)={0x0, 0x3d}}, 0x0) 01:13:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r1, 0x1000000000016) 01:13:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 01:13:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc800) 01:13:33 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:33 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000) 01:13:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x14084) 01:13:33 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = dup(r0) ioctl$PIO_FONTX(r1, 0x4b6c, 0x0) 01:13:34 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) 01:13:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0x5450, 0x0) 01:13:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x2, &(0x7f0000000080)) 01:13:34 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:34 executing program 4: r0 = epoll_create(0x4) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x4, 0x0, 0x365}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xd) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r2, r1) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x50000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xd) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r4, r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 01:13:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:34 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x0) 01:13:34 executing program 5: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:13:34 executing program 3: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:13:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:35 executing program 5: r0 = eventfd(0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000080)) 01:13:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0xa99) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = dup2(r0, r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 01:13:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x4c000) 01:13:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, 0x0, 0x0) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:35 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xb, 0x0, 0x0) 01:13:35 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:35 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x2003, 0x0, 0xc4) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x17c}}, 0x0) 01:13:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 01:13:36 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 01:13:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x52, 0x10022, 0x0, 0x0) 01:13:36 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x2, 0x960000) 01:13:36 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x2003, 0x0, 0xc4) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x17c}}, 0x0) 01:13:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0xe, 0x0, &(0x7f0000000140)) 01:13:36 executing program 5: r0 = socket$nl_generic(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) 01:13:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:13:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, 0x0, 0x0) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 01:13:37 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) 01:13:37 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0) fchdir(r0) 01:13:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 01:13:37 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003d00)='/dev/vcs\x00', 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 01:13:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f00000002c0)) 01:13:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) read(r1, 0x0, 0x0) 01:13:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000040)={'gre0\x00', 0x0}) 01:13:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 01:13:38 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 01:13:38 executing program 4: r0 = inotify_init1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x520}}, 0x0) 01:13:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, 0x0, 0x0) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:38 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000600)) 01:13:38 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)) 01:13:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket(0x2, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:13:38 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)) 01:13:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) 01:13:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc8a5fafb) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:39 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xe8d, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:13:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xb, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000100)) 01:13:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:13:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_STATUS64(r0, 0x5450, 0x0) 01:13:39 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)) 01:13:39 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r1, 0x0, 0xffffffffffffff5c, 0x20, 0x0, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 01:13:40 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0xb, 0x0, &(0x7f0000000000)) 01:13:41 executing program 4: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) r0 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xfffffe59) write$P9_RSTATu(r1, &(0x7f00000017c0)={0xc9, 0x7d, 0x0, {{0x0, 0xab, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x66, 'vmnJt0secu|V\xdd\xd4\xbb2I?\x12X\xc1\xab\xc2rityvboxnet1\x00C?\xf4\x957\x98\xe1\x80\xde\xf3\xae\xa1op\xa0\x06\x8b\xf5\xa7\x82\xfcZ\xa0\r\x17\xa2\xce\xca\x85\xa6\xb4k\xd5\x1fA\x9d\x85\xaf\x18\x9ft+\xb4\xd0\xaf\xd4\x95\xf8vk\xcd\xad/\xfb\xbf\xfde\"\xf6\x7f\xa1Q\xd6\x90\xb2J', 0x0, '', 0x9, 'threaded\x00', 0x9, 'tOreaded\x00'}, 0x0, 'threaded\x00'}}, 0xc9) fcntl$setstatus(r1, 0x4, 0x800) tkill(r0, 0x800000015) 01:13:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) 01:13:41 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)) 01:13:44 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 01:13:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:44 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:13:44 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 01:13:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40004) 01:13:44 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, 0x0) 01:13:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x31, &(0x7f0000000080), 0x203964f2) 01:13:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x540d, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x5421, &(0x7f0000000000)) 01:13:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) getpeername$unix(r1, 0x0, &(0x7f00000000c0)) 01:13:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 01:13:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x0, 0x0) 01:13:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5450, 0x0) 01:13:45 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:13:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:46 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, 0x0) 01:13:46 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 01:13:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x3d, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RATTACH(r2, 0x0, 0x0) dup2(r3, r1) tkill(r0, 0x1000000000016) 01:13:46 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x12160, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:13:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) write$cgroup_type(r0, 0x0, 0x0) 01:13:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000140)=0x80) dup2(r0, r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 01:13:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 01:13:47 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x3d, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RATTACH(r2, 0x0, 0x0) dup2(r3, r1) tkill(r0, 0x1000000000016) 01:13:47 executing program 5: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000300)) 01:13:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x3e, 0x0, 0x0) 01:13:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(0xffffffffffffffff, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:47 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x20000000000001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x3d, &(0x7f0000001600)={{{@in=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, 0x0) 01:13:47 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 01:13:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x3) 01:13:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) dup3(r1, r0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:13:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup2(r1, r2) setsockopt$inet_tcp_int(r2, 0x6, 0x2000000000000013, &(0x7f0000000180), 0x4) 01:13:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 01:13:48 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8041, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x5421, &(0x7f0000000180)={'ip6gretap0\x00', {0x2, 0x0, @dev}}) 01:13:48 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000) 01:13:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) 01:13:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(0xffffffffffffffff, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) 01:13:48 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 01:13:48 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x2, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000280)=""/163) 01:13:49 executing program 4: r0 = getegid() setfsgid(r0) 01:13:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) close(r1) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100), 0x4) 01:13:49 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000001280)='/dev/vcsa#\x00', 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)) getsockname$unix(r0, 0x0, &(0x7f00000013c0)) 01:13:49 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:13:49 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000b00)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) 01:13:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 01:13:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x880) 01:13:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:13:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(0xffffffffffffffff, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, 0xffffff7f}, 0x2000000c, &(0x7f0000000040)={0x0}}, 0x3000c000) 01:13:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$GIO_UNISCRNMAP(r0, 0x5451, 0x0) 01:13:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) fcntl$getownex(r0, 0x409, 0x0) 01:13:50 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000040)) 01:13:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xa221edd65b70580c, 0x20010011, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x40480c0) 01:13:50 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4004000) 01:13:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 01:13:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x240007fd, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) dup3(r4, r3, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) tkill(r2, 0x1000000000016) 01:13:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) 01:13:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00'}) 01:13:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:51 executing program 3: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/147) 01:13:51 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 01:13:51 executing program 5: r0 = memfd_create(&(0x7f0000000280), 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x94) 01:13:51 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x29, 0x6, 0x0, 0x0) 01:13:51 executing program 4: r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = dup(r0) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x0) 01:13:52 executing program 0: r0 = creat(&(0x7f00000009c0)='./file0\x00', 0x0) connect$unix(r0, 0x0, 0x0) 01:13:52 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r1, r0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x61}}, 0x0) 01:13:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)) 01:13:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8940, 0x0) 01:13:52 executing program 4: r0 = inotify_init1(0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x2, &(0x7f0000000000)) 01:13:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c000000eaf97bf25c03d14358bddbf415e0e4400ca2", @ANYRES16, @ANYBLOB="000826bd7000fcdbdf250200000008000700ffffffff1400060024e87de2dc96399c2845723520d3e39814000500ff01000000000000000000000000000114000600fe80000000000000000000000000004108000700ac14140d14000500fe88000000000000000000000000000106000b001f000000"], 0x7c}, 0x1, 0x0, 0x0, 0x24000010}, 0x2000c000) 01:13:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = memfd_create(&(0x7f00000001c0)='/dev/zero\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$EVIOCGABS3F(r4, 0x8018457f, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:13:52 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:13:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x48, 0x0, 0x300) 01:13:52 executing program 4: r0 = eventfd(0x0) r1 = dup2(r0, r0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) read$char_raw(r1, &(0x7f0000000c00)={""/42899}, 0xa800) 01:13:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0xa, 0x0) dup3(r0, r1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000006dc0)={0x0}}, 0x0) 01:13:53 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$vga_arbiter(r0, 0x0, 0x0) [ 2244.279853][T23344] not chained 10000 origins [ 2244.284403][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2244.293072][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2244.303136][T23344] Call Trace: [ 2244.306437][T23344] dump_stack+0x21c/0x280 [ 2244.310774][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2244.316489][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2244.322555][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2244.327867][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2244.333496][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2244.339609][T23344] ? _copy_from_user+0x201/0x310 [ 2244.344542][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2244.349728][T23344] __msan_chain_origin+0x57/0xa0 [ 2244.354692][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2244.359800][T23344] get_compat_msghdr+0x108/0x2b0 [ 2244.364785][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2244.369302][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2244.374500][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2244.380125][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2244.385403][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2244.390157][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2244.394824][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2244.400650][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2244.405842][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.411909][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.418061][T23344] __do_fast_syscall_32+0x129/0x180 [ 2244.423251][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2244.428093][T23344] do_SYSENTER_32+0x73/0x90 [ 2244.432588][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.438899][T23344] RIP: 0023:0xf7f65549 [ 2244.442959][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2244.462571][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2244.471152][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2244.479109][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2244.487070][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2244.495030][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2244.502990][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2244.510949][T23344] Uninit was stored to memory at: [ 2244.515985][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2244.521694][T23344] __msan_chain_origin+0x57/0xa0 [ 2244.526639][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2244.531739][T23344] get_compat_msghdr+0x108/0x2b0 [ 2244.536666][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2244.541159][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2244.545828][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.551886][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.558047][T23344] __do_fast_syscall_32+0x129/0x180 [ 2244.563250][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2244.568112][T23344] do_SYSENTER_32+0x73/0x90 [ 2244.572643][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.578950][T23344] [ 2244.581266][T23344] Uninit was stored to memory at: [ 2244.586285][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2244.592019][T23344] __msan_chain_origin+0x57/0xa0 [ 2244.596948][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2244.602046][T23344] get_compat_msghdr+0x108/0x2b0 [ 2244.607002][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2244.611495][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2244.616165][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.622307][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.628457][T23344] __do_fast_syscall_32+0x129/0x180 [ 2244.633643][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2244.642476][T23344] do_SYSENTER_32+0x73/0x90 [ 2244.646975][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.653278][T23344] [ 2244.655586][T23344] Uninit was stored to memory at: [ 2244.660601][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2244.666307][T23344] __msan_chain_origin+0x57/0xa0 [ 2244.671467][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2244.676565][T23344] get_compat_msghdr+0x108/0x2b0 [ 2244.681502][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2244.685993][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2244.690681][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.696735][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.702964][T23344] __do_fast_syscall_32+0x129/0x180 [ 2244.708151][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2244.712989][T23344] do_SYSENTER_32+0x73/0x90 [ 2244.717497][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.723813][T23344] [ 2244.726132][T23344] Uninit was stored to memory at: [ 2244.731161][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2244.737052][T23344] __msan_chain_origin+0x57/0xa0 [ 2244.741978][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2244.747081][T23344] get_compat_msghdr+0x108/0x2b0 [ 2244.752038][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2244.756531][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2244.761196][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.767254][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.773424][T23344] __do_fast_syscall_32+0x129/0x180 [ 2244.778618][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2244.783456][T23344] do_SYSENTER_32+0x73/0x90 [ 2244.787949][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.794259][T23344] [ 2244.796569][T23344] Uninit was stored to memory at: [ 2244.801585][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2244.807311][T23344] __msan_chain_origin+0x57/0xa0 [ 2244.812244][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2244.817358][T23344] get_compat_msghdr+0x108/0x2b0 [ 2244.822303][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2244.826794][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2244.831460][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.837515][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.843677][T23344] __do_fast_syscall_32+0x129/0x180 [ 2244.848886][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2244.853726][T23344] do_SYSENTER_32+0x73/0x90 [ 2244.858217][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.864523][T23344] [ 2244.866832][T23344] Uninit was stored to memory at: [ 2244.871876][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2244.877587][T23344] __msan_chain_origin+0x57/0xa0 [ 2244.882537][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2244.887634][T23344] get_compat_msghdr+0x108/0x2b0 [ 2244.892561][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2244.897052][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2244.901718][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2244.907785][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.913929][T23344] __do_fast_syscall_32+0x129/0x180 [ 2244.919118][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2244.923962][T23344] do_SYSENTER_32+0x73/0x90 [ 2244.928452][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2244.934753][T23344] [ 2244.937062][T23344] Uninit was stored to memory at: [ 2244.942092][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2244.947806][T23344] __msan_chain_origin+0x57/0xa0 [ 2244.952736][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2244.957833][T23344] get_compat_msghdr+0x108/0x2b0 [ 2244.962760][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2244.967256][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2244.971920][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 01:13:54 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) [ 2244.978051][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2244.984195][T23344] __do_fast_syscall_32+0x129/0x180 [ 2244.989396][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2244.994245][T23344] do_SYSENTER_32+0x73/0x90 [ 2244.998738][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2245.005045][T23344] [ 2245.007357][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2245.014037][T23344] do_recvmmsg+0xc2/0x22e0 [ 2245.018444][T23344] do_recvmmsg+0xc2/0x22e0 01:13:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:13:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000007e80)={0x0, 0x0, &(0x7f0000007e40)={0x0}}, 0x20004084) [ 2245.514217][T23346] not chained 20000 origins [ 2245.518771][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2245.527445][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2245.537683][T23346] Call Trace: [ 2245.541152][T23346] dump_stack+0x21c/0x280 [ 2245.545503][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2245.551250][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2245.557339][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2245.562550][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2245.568891][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2245.574972][T23346] ? _copy_from_user+0x201/0x310 [ 2245.579914][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2245.585125][T23346] __msan_chain_origin+0x57/0xa0 [ 2245.590068][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2245.595387][T23346] get_compat_msghdr+0x108/0x2b0 [ 2245.600360][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2245.604916][T23346] ? kmsan_internal_set_origin+0x85/0xc0 01:13:55 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$sock_inet_SIOCDARP(r0, 0x541b, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {}, 0x0, {0x2, 0x0, @local}, 'syzkaller0\x00'}) [ 2245.610564][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2245.615859][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2245.620721][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2245.625411][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2245.631225][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2245.636435][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2245.642711][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2245.648884][T23346] __do_fast_syscall_32+0x129/0x180 [ 2245.654103][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2245.658968][T23346] do_SYSENTER_32+0x73/0x90 [ 2245.663481][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2245.669806][T23346] RIP: 0023:0xf7f65549 [ 2245.673880][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2245.693491][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2245.701939][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2245.709948][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2245.717930][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2245.725906][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2245.733885][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2245.741882][T23346] Uninit was stored to memory at: [ 2245.746916][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2245.752660][T23346] __msan_chain_origin+0x57/0xa0 [ 2245.757592][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2245.762694][T23346] get_compat_msghdr+0x108/0x2b0 [ 2245.767623][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2245.772114][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2245.776783][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2245.783276][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2245.789419][T23346] __do_fast_syscall_32+0x129/0x180 [ 2245.794608][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2245.799447][T23346] do_SYSENTER_32+0x73/0x90 [ 2245.803975][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2245.810275][T23346] [ 2245.812588][T23346] Uninit was stored to memory at: [ 2245.817607][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2245.823316][T23346] __msan_chain_origin+0x57/0xa0 [ 2245.828239][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2245.833336][T23346] get_compat_msghdr+0x108/0x2b0 [ 2245.838611][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2245.843121][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2245.847802][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2245.853858][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2245.860000][T23346] __do_fast_syscall_32+0x129/0x180 [ 2245.865191][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2245.870030][T23346] do_SYSENTER_32+0x73/0x90 [ 2245.874523][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2245.880828][T23346] [ 2245.883144][T23346] Uninit was stored to memory at: [ 2245.888276][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2245.893984][T23346] __msan_chain_origin+0x57/0xa0 [ 2245.898911][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2245.904034][T23346] get_compat_msghdr+0x108/0x2b0 [ 2245.908962][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2245.913455][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2245.918119][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2245.924177][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2245.930324][T23346] __do_fast_syscall_32+0x129/0x180 [ 2245.935510][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2245.940348][T23346] do_SYSENTER_32+0x73/0x90 [ 2245.944858][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2245.951160][T23346] [ 2245.953469][T23346] Uninit was stored to memory at: [ 2245.958485][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2245.964206][T23346] __msan_chain_origin+0x57/0xa0 [ 2245.969131][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2245.974234][T23346] get_compat_msghdr+0x108/0x2b0 [ 2245.979263][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2245.983756][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2245.988420][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2245.994473][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.000614][T23346] __do_fast_syscall_32+0x129/0x180 [ 2246.005801][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2246.010640][T23346] do_SYSENTER_32+0x73/0x90 [ 2246.015135][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.021443][T23346] [ 2246.023755][T23346] Uninit was stored to memory at: [ 2246.028769][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2246.034483][T23346] __msan_chain_origin+0x57/0xa0 [ 2246.039406][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2246.044503][T23346] get_compat_msghdr+0x108/0x2b0 [ 2246.049429][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2246.054008][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2246.058673][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.065249][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.071392][T23346] __do_fast_syscall_32+0x129/0x180 [ 2246.077192][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2246.083333][T23346] do_SYSENTER_32+0x73/0x90 [ 2246.087833][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.094135][T23346] [ 2246.096457][T23346] Uninit was stored to memory at: [ 2246.101476][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2246.107191][T23346] __msan_chain_origin+0x57/0xa0 [ 2246.112114][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2246.117217][T23346] get_compat_msghdr+0x108/0x2b0 [ 2246.122148][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2246.126666][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2246.131429][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.137491][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.143634][T23346] __do_fast_syscall_32+0x129/0x180 [ 2246.148909][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2246.153754][T23346] do_SYSENTER_32+0x73/0x90 [ 2246.158267][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.164575][T23346] [ 2246.166886][T23346] Uninit was stored to memory at: [ 2246.171902][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2246.177613][T23346] __msan_chain_origin+0x57/0xa0 [ 2246.182539][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2246.187637][T23346] get_compat_msghdr+0x108/0x2b0 [ 2246.192564][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2246.197058][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2246.201811][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.211339][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 01:13:55 executing program 0: setrlimit(0xf, &(0x7f0000000180)) [ 2246.217490][T23346] __do_fast_syscall_32+0x129/0x180 [ 2246.222677][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2246.227526][T23346] do_SYSENTER_32+0x73/0x90 [ 2246.232033][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.238337][T23346] [ 2246.240670][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2246.247333][T23346] do_recvmmsg+0xc2/0x22e0 [ 2246.251739][T23346] do_recvmmsg+0xc2/0x22e0 [ 2246.420439][T23344] not chained 30000 origins [ 2246.424982][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2246.433653][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2246.443738][T23344] Call Trace: [ 2246.447042][T23344] dump_stack+0x21c/0x280 [ 2246.451387][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2246.457117][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2246.462502][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2246.467752][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2246.473433][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2246.479511][T23344] ? _copy_from_user+0x201/0x310 [ 2246.484456][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2246.490708][T23344] __msan_chain_origin+0x57/0xa0 [ 2246.495655][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2246.500778][T23344] get_compat_msghdr+0x108/0x2b0 [ 2246.505727][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2246.510238][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2246.515453][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2246.521097][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2246.526396][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2246.531170][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2246.535946][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2246.541863][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2246.547103][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.553184][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.559349][T23344] __do_fast_syscall_32+0x129/0x180 [ 2246.564569][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2246.569431][T23344] do_SYSENTER_32+0x73/0x90 [ 2246.573944][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.580276][T23344] RIP: 0023:0xf7f65549 [ 2246.584350][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2246.603971][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2246.612398][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2246.620374][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2246.628437][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2246.636414][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2246.644395][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2246.652405][T23344] Uninit was stored to memory at: [ 2246.657448][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2246.663174][T23344] __msan_chain_origin+0x57/0xa0 [ 2246.668115][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2246.673230][T23344] get_compat_msghdr+0x108/0x2b0 [ 2246.678177][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2246.682690][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2246.687362][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.693423][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.699570][T23344] __do_fast_syscall_32+0x129/0x180 [ 2246.704770][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2246.709613][T23344] do_SYSENTER_32+0x73/0x90 [ 2246.714108][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.720424][T23344] [ 2246.722735][T23344] Uninit was stored to memory at: [ 2246.727865][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2246.733580][T23344] __msan_chain_origin+0x57/0xa0 [ 2246.738515][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2246.743646][T23344] get_compat_msghdr+0x108/0x2b0 [ 2246.748580][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2246.753167][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2246.757853][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.763910][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.770078][T23344] __do_fast_syscall_32+0x129/0x180 [ 2246.775371][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2246.780217][T23344] do_SYSENTER_32+0x73/0x90 [ 2246.784717][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.791022][T23344] [ 2246.793335][T23344] Uninit was stored to memory at: [ 2246.798351][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2246.804059][T23344] __msan_chain_origin+0x57/0xa0 [ 2246.808985][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2246.814083][T23344] get_compat_msghdr+0x108/0x2b0 [ 2246.819010][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2246.823502][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2246.828345][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.834400][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.840558][T23344] __do_fast_syscall_32+0x129/0x180 [ 2246.845745][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2246.850588][T23344] do_SYSENTER_32+0x73/0x90 [ 2246.855192][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.861495][T23344] [ 2246.863804][T23344] Uninit was stored to memory at: [ 2246.868835][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2246.874547][T23344] __msan_chain_origin+0x57/0xa0 [ 2246.879472][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2246.884886][T23344] get_compat_msghdr+0x108/0x2b0 [ 2246.890246][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2246.894742][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2246.899418][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.905474][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.911618][T23344] __do_fast_syscall_32+0x129/0x180 [ 2246.916803][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2246.921644][T23344] do_SYSENTER_32+0x73/0x90 [ 2246.926142][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2246.932451][T23344] [ 2246.934758][T23344] Uninit was stored to memory at: [ 2246.939773][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2246.945495][T23344] __msan_chain_origin+0x57/0xa0 [ 2246.950440][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2246.955539][T23344] get_compat_msghdr+0x108/0x2b0 [ 2246.960464][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2246.964961][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2246.969632][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2246.975709][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2246.981853][T23344] __do_fast_syscall_32+0x129/0x180 [ 2246.987038][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2246.991876][T23344] do_SYSENTER_32+0x73/0x90 [ 2246.996368][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2247.002764][T23344] [ 2247.005074][T23344] Uninit was stored to memory at: [ 2247.010106][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2247.015820][T23344] __msan_chain_origin+0x57/0xa0 [ 2247.020744][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2247.025845][T23344] get_compat_msghdr+0x108/0x2b0 [ 2247.030769][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2247.035260][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2247.039950][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2247.046178][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2247.052323][T23344] __do_fast_syscall_32+0x129/0x180 [ 2247.057522][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2247.062359][T23344] do_SYSENTER_32+0x73/0x90 [ 2247.066851][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2247.073152][T23344] [ 2247.075460][T23344] Uninit was stored to memory at: [ 2247.080476][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2247.086184][T23344] __msan_chain_origin+0x57/0xa0 [ 2247.091135][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2247.096233][T23344] get_compat_msghdr+0x108/0x2b0 [ 2247.101159][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2247.105651][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2247.110316][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2247.116544][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2247.122686][T23344] __do_fast_syscall_32+0x129/0x180 [ 2247.127873][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2247.132709][T23344] do_SYSENTER_32+0x73/0x90 [ 2247.137217][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2247.143520][T23344] [ 2247.145831][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2247.152494][T23344] do_recvmmsg+0xc2/0x22e0 [ 2247.156912][T23344] do_recvmmsg+0xc2/0x22e0 01:13:57 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl(r0, 0x2, &(0x7f00000000c0)) 01:13:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000020c0)={&(0x7f0000000280), 0xc, &(0x7f0000002080)={0x0}}, 0x24040001) 01:13:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$P9_RGETLOCK(r0, 0x0, 0x0) 01:13:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) [ 2248.768341][T23344] not chained 40000 origins [ 2248.772904][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2248.782949][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2248.793168][T23344] Call Trace: [ 2248.796478][T23344] dump_stack+0x21c/0x280 [ 2248.800806][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2248.807479][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2248.813632][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2248.818824][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2248.824476][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2248.830555][T23344] ? _copy_from_user+0x201/0x310 [ 2248.835888][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2248.841081][T23344] __msan_chain_origin+0x57/0xa0 [ 2248.846015][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2248.851146][T23344] get_compat_msghdr+0x108/0x2b0 [ 2248.856163][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2248.860659][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2248.865944][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2248.871574][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2248.877197][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2248.881954][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2248.886622][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2248.892764][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2248.898064][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2248.904475][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2248.910620][T23344] __do_fast_syscall_32+0x129/0x180 [ 2248.915810][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2248.920652][T23344] do_SYSENTER_32+0x73/0x90 [ 2248.925145][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2248.931458][T23344] RIP: 0023:0xf7f65549 [ 2248.936211][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2248.956063][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2248.964637][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2248.972621][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2248.980580][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2248.988544][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2248.996503][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2249.004463][T23344] Uninit was stored to memory at: [ 2249.009484][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2249.015193][T23344] __msan_chain_origin+0x57/0xa0 [ 2249.020208][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2249.025313][T23344] get_compat_msghdr+0x108/0x2b0 [ 2249.030238][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2249.034737][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2249.039404][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.045462][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.051606][T23344] __do_fast_syscall_32+0x129/0x180 [ 2249.056793][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2249.061643][T23344] do_SYSENTER_32+0x73/0x90 [ 2249.066140][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.072447][T23344] [ 2249.074758][T23344] Uninit was stored to memory at: [ 2249.079776][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2249.085484][T23344] __msan_chain_origin+0x57/0xa0 [ 2249.090412][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2249.095527][T23344] get_compat_msghdr+0x108/0x2b0 [ 2249.100458][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2249.104996][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2249.109682][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.115830][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.122059][T23344] __do_fast_syscall_32+0x129/0x180 [ 2249.127247][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2249.132091][T23344] do_SYSENTER_32+0x73/0x90 [ 2249.136586][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.142889][T23344] [ 2249.145199][T23344] Uninit was stored to memory at: [ 2249.150214][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2249.155923][T23344] __msan_chain_origin+0x57/0xa0 [ 2249.160856][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2249.165960][T23344] get_compat_msghdr+0x108/0x2b0 [ 2249.170889][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2249.175382][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2249.180047][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.186100][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.192242][T23344] __do_fast_syscall_32+0x129/0x180 [ 2249.197430][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2249.202271][T23344] do_SYSENTER_32+0x73/0x90 [ 2249.206764][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.213153][T23344] [ 2249.215463][T23344] Uninit was stored to memory at: [ 2249.220476][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2249.226185][T23344] __msan_chain_origin+0x57/0xa0 [ 2249.231111][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2249.236208][T23344] get_compat_msghdr+0x108/0x2b0 [ 2249.241133][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2249.245644][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2249.250309][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.256363][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.262508][T23344] __do_fast_syscall_32+0x129/0x180 [ 2249.267695][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2249.272531][T23344] do_SYSENTER_32+0x73/0x90 [ 2249.277043][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.283345][T23344] [ 2249.285653][T23344] Uninit was stored to memory at: [ 2249.290670][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2249.296378][T23344] __msan_chain_origin+0x57/0xa0 [ 2249.301352][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2249.306449][T23344] get_compat_msghdr+0x108/0x2b0 [ 2249.311377][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2249.315869][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2249.320534][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.326764][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.332907][T23344] __do_fast_syscall_32+0x129/0x180 [ 2249.338214][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2249.343068][T23344] do_SYSENTER_32+0x73/0x90 [ 2249.347560][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.353863][T23344] [ 2249.356173][T23344] Uninit was stored to memory at: [ 2249.361191][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2249.366897][T23344] __msan_chain_origin+0x57/0xa0 [ 2249.371822][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2249.376933][T23344] get_compat_msghdr+0x108/0x2b0 [ 2249.381860][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2249.386351][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2249.391013][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.397069][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.403213][T23344] __do_fast_syscall_32+0x129/0x180 [ 2249.408400][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2249.413236][T23344] do_SYSENTER_32+0x73/0x90 [ 2249.417732][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.424054][T23344] [ 2249.426365][T23344] Uninit was stored to memory at: [ 2249.431481][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2249.437190][T23344] __msan_chain_origin+0x57/0xa0 [ 2249.442116][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2249.447213][T23344] get_compat_msghdr+0x108/0x2b0 [ 2249.452141][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2249.456633][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2249.461299][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2249.467352][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2249.473614][T23344] __do_fast_syscall_32+0x129/0x180 [ 2249.478802][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2249.483752][T23344] do_SYSENTER_32+0x73/0x90 [ 2249.488260][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2249.494572][T23344] [ 2249.496902][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2249.503578][T23344] do_recvmmsg+0xc2/0x22e0 [ 2249.508010][T23344] do_recvmmsg+0xc2/0x22e0 [ 2249.876827][T23344] not chained 50000 origins [ 2249.881369][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2249.890037][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2249.900089][T23344] Call Trace: [ 2249.903387][T23344] dump_stack+0x21c/0x280 [ 2249.907820][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2249.913538][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2249.918913][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2249.924114][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2249.929920][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2249.935984][T23344] ? _copy_from_user+0x201/0x310 [ 2249.940919][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2249.946212][T23344] __msan_chain_origin+0x57/0xa0 [ 2249.951150][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2249.956355][T23344] get_compat_msghdr+0x108/0x2b0 [ 2249.961298][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2249.965804][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2249.971021][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2249.976704][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2249.981984][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2249.986739][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2249.991408][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2249.997201][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2250.002391][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.008452][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.014599][T23344] __do_fast_syscall_32+0x129/0x180 [ 2250.019789][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2250.024631][T23344] do_SYSENTER_32+0x73/0x90 [ 2250.029126][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2250.035441][T23344] RIP: 0023:0xf7f65549 [ 2250.039500][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2250.059131][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2250.067559][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2250.075539][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2250.083502][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2250.091461][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2250.099419][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2250.107380][T23344] Uninit was stored to memory at: [ 2250.112417][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2250.118126][T23344] __msan_chain_origin+0x57/0xa0 [ 2250.123065][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2250.128259][T23344] get_compat_msghdr+0x108/0x2b0 [ 2250.133185][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2250.137692][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2250.142531][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.148609][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.154769][T23344] __do_fast_syscall_32+0x129/0x180 [ 2250.159958][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2250.164799][T23344] do_SYSENTER_32+0x73/0x90 [ 2250.169304][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2250.175618][T23344] [ 2250.177926][T23344] Uninit was stored to memory at: [ 2250.182951][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2250.188674][T23344] __msan_chain_origin+0x57/0xa0 [ 2250.193598][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2250.198699][T23344] get_compat_msghdr+0x108/0x2b0 [ 2250.203711][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2250.208208][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2250.212873][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.218926][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.225069][T23344] __do_fast_syscall_32+0x129/0x180 [ 2250.230259][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2250.235096][T23344] do_SYSENTER_32+0x73/0x90 [ 2250.239589][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2250.245890][T23344] [ 2250.248216][T23344] Uninit was stored to memory at: [ 2250.253232][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2250.258941][T23344] __msan_chain_origin+0x57/0xa0 [ 2250.263870][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2250.268971][T23344] get_compat_msghdr+0x108/0x2b0 [ 2250.273896][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2250.278387][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2250.283051][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.289105][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.295247][T23344] __do_fast_syscall_32+0x129/0x180 [ 2250.300455][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2250.305292][T23344] do_SYSENTER_32+0x73/0x90 [ 2250.309785][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2250.316089][T23344] [ 2250.318416][T23344] Uninit was stored to memory at: [ 2250.323445][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2250.329174][T23344] __msan_chain_origin+0x57/0xa0 [ 2250.334099][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2250.339198][T23344] get_compat_msghdr+0x108/0x2b0 [ 2250.344124][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2250.348619][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2250.353285][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.359339][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.365481][T23344] __do_fast_syscall_32+0x129/0x180 [ 2250.370669][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2250.375509][T23344] do_SYSENTER_32+0x73/0x90 [ 2250.380001][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2250.386303][T23344] [ 2250.388612][T23344] Uninit was stored to memory at: [ 2250.393626][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2250.399332][T23344] __msan_chain_origin+0x57/0xa0 [ 2250.404265][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2250.409362][T23344] get_compat_msghdr+0x108/0x2b0 [ 2250.414289][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2250.418780][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2250.423445][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.429499][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.435645][T23344] __do_fast_syscall_32+0x129/0x180 [ 2250.440833][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2250.445674][T23344] do_SYSENTER_32+0x73/0x90 [ 2250.450165][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2250.456467][T23344] [ 2250.458778][T23344] Uninit was stored to memory at: [ 2250.463804][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2250.469516][T23344] __msan_chain_origin+0x57/0xa0 [ 2250.474442][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2250.479540][T23344] get_compat_msghdr+0x108/0x2b0 [ 2250.484469][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2250.488960][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2250.493642][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.499697][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.505842][T23344] __do_fast_syscall_32+0x129/0x180 [ 2250.511028][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2250.515869][T23344] do_SYSENTER_32+0x73/0x90 [ 2250.520362][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2250.526680][T23344] [ 2250.528992][T23344] Uninit was stored to memory at: [ 2250.534012][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2250.539721][T23344] __msan_chain_origin+0x57/0xa0 [ 2250.544647][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2250.549766][T23344] get_compat_msghdr+0x108/0x2b0 [ 2250.554699][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2250.559206][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2250.563883][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.569949][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.576096][T23344] __do_fast_syscall_32+0x129/0x180 [ 2250.581283][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2250.586125][T23344] do_SYSENTER_32+0x73/0x90 [ 2250.590616][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2250.596919][T23344] [ 2250.599238][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2250.605900][T23344] do_recvmmsg+0xc2/0x22e0 [ 2250.610304][T23344] do_recvmmsg+0xc2/0x22e0 [ 2250.716460][T23346] not chained 60000 origins [ 2250.721001][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2250.729681][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2250.739727][T23346] Call Trace: [ 2250.743027][T23346] dump_stack+0x21c/0x280 [ 2250.747356][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2250.753080][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2250.758531][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2250.763741][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2250.769371][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2250.775439][T23346] ? _copy_from_user+0x201/0x310 [ 2250.780383][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2250.786019][T23346] __msan_chain_origin+0x57/0xa0 [ 2250.790949][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2250.796053][T23346] get_compat_msghdr+0x108/0x2b0 [ 2250.800991][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2250.805697][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2250.811320][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2250.816607][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2250.821361][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2250.826039][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2250.831852][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2250.837040][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.843103][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.849251][T23346] __do_fast_syscall_32+0x129/0x180 [ 2250.854461][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2250.859592][T23346] do_SYSENTER_32+0x73/0x90 [ 2250.864087][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2250.870468][T23346] RIP: 0023:0xf7f65549 [ 2250.874526][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2250.894131][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2250.902528][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2250.910483][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2250.918439][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2250.927611][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2250.935569][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2250.943534][T23346] Uninit was stored to memory at: [ 2250.948552][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2250.954257][T23346] __msan_chain_origin+0x57/0xa0 [ 2250.959178][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2250.964273][T23346] get_compat_msghdr+0x108/0x2b0 [ 2250.969197][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2250.973689][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2250.978357][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2250.984414][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2250.990554][T23346] __do_fast_syscall_32+0x129/0x180 [ 2250.995740][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.000575][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.005075][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.011377][T23346] [ 2251.013685][T23346] Uninit was stored to memory at: [ 2251.018700][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2251.024407][T23346] __msan_chain_origin+0x57/0xa0 [ 2251.029341][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2251.034448][T23346] get_compat_msghdr+0x108/0x2b0 [ 2251.039375][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2251.043863][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2251.048526][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.054859][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.061014][T23346] __do_fast_syscall_32+0x129/0x180 [ 2251.066198][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.071038][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.075529][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.081829][T23346] [ 2251.084137][T23346] Uninit was stored to memory at: [ 2251.089148][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2251.094858][T23346] __msan_chain_origin+0x57/0xa0 [ 2251.099779][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2251.104876][T23346] get_compat_msghdr+0x108/0x2b0 [ 2251.109802][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2251.114292][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2251.118956][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.125012][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.131164][T23346] __do_fast_syscall_32+0x129/0x180 [ 2251.136347][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.141184][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.145681][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.151995][T23346] [ 2251.154303][T23346] Uninit was stored to memory at: [ 2251.159318][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2251.165023][T23346] __msan_chain_origin+0x57/0xa0 [ 2251.169944][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2251.175041][T23346] get_compat_msghdr+0x108/0x2b0 [ 2251.179975][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2251.184475][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2251.189138][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.195192][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.201331][T23346] __do_fast_syscall_32+0x129/0x180 [ 2251.206513][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.211355][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.215845][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.222144][T23346] [ 2251.224453][T23346] Uninit was stored to memory at: [ 2251.229482][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2251.235188][T23346] __msan_chain_origin+0x57/0xa0 [ 2251.240109][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2251.245208][T23346] get_compat_msghdr+0x108/0x2b0 [ 2251.250148][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2251.254655][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2251.259329][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.265380][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.271521][T23346] __do_fast_syscall_32+0x129/0x180 [ 2251.276706][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.281542][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.286032][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.292601][T23346] [ 2251.294908][T23346] Uninit was stored to memory at: [ 2251.299920][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2251.305638][T23346] __msan_chain_origin+0x57/0xa0 [ 2251.310566][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2251.315679][T23346] get_compat_msghdr+0x108/0x2b0 [ 2251.320602][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2251.325182][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2251.329844][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.335899][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.342045][T23346] __do_fast_syscall_32+0x129/0x180 [ 2251.347400][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.352236][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.356725][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.363027][T23346] [ 2251.365337][T23346] Uninit was stored to memory at: [ 2251.370348][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2251.376141][T23346] __msan_chain_origin+0x57/0xa0 [ 2251.381063][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2251.386160][T23346] get_compat_msghdr+0x108/0x2b0 [ 2251.391098][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2251.395587][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2251.400249][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.406302][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.412443][T23346] __do_fast_syscall_32+0x129/0x180 [ 2251.417626][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.422462][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.426952][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.433251][T23346] [ 2251.435565][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2251.442224][T23346] do_recvmmsg+0xc2/0x22e0 [ 2251.446624][T23346] do_recvmmsg+0xc2/0x22e0 [ 2251.637676][T23346] not chained 70000 origins [ 2251.642224][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2251.650889][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2251.660940][T23346] Call Trace: [ 2251.664236][T23346] dump_stack+0x21c/0x280 [ 2251.668574][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2251.674327][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2251.680412][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2251.685627][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2251.691254][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2251.697326][T23346] ? _copy_from_user+0x201/0x310 [ 2251.702256][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2251.707453][T23346] __msan_chain_origin+0x57/0xa0 [ 2251.712392][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2251.717516][T23346] get_compat_msghdr+0x108/0x2b0 [ 2251.722449][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2251.726955][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2251.732942][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2251.738223][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2251.742981][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2251.747654][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2251.753467][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2251.758666][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.764736][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.770882][T23346] __do_fast_syscall_32+0x129/0x180 [ 2251.776070][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.780909][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.785402][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.791711][T23346] RIP: 0023:0xf7f65549 [ 2251.795767][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2251.815357][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2251.823928][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2251.832145][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2251.840100][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2251.848059][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2251.856018][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2251.863986][T23346] Uninit was stored to memory at: [ 2251.869016][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2251.874724][T23346] __msan_chain_origin+0x57/0xa0 [ 2251.879646][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2251.884741][T23346] get_compat_msghdr+0x108/0x2b0 [ 2251.890284][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2251.894785][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2251.899448][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.905499][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.911651][T23346] __do_fast_syscall_32+0x129/0x180 [ 2251.916846][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.921692][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.926181][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2251.932842][T23346] [ 2251.935149][T23346] Uninit was stored to memory at: [ 2251.940160][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2251.945865][T23346] __msan_chain_origin+0x57/0xa0 [ 2251.950797][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2251.955896][T23346] get_compat_msghdr+0x108/0x2b0 [ 2251.960820][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2251.965314][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2251.969976][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2251.976031][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2251.982173][T23346] __do_fast_syscall_32+0x129/0x180 [ 2251.987359][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2251.992200][T23346] do_SYSENTER_32+0x73/0x90 [ 2251.996691][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.003092][T23346] [ 2252.005402][T23346] Uninit was stored to memory at: [ 2252.010413][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2252.016123][T23346] __msan_chain_origin+0x57/0xa0 [ 2252.021045][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2252.026141][T23346] get_compat_msghdr+0x108/0x2b0 [ 2252.031066][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2252.035568][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2252.040246][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.046300][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.052454][T23346] __do_fast_syscall_32+0x129/0x180 [ 2252.057640][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2252.062483][T23346] do_SYSENTER_32+0x73/0x90 [ 2252.066986][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.073289][T23346] [ 2252.075598][T23346] Uninit was stored to memory at: [ 2252.080620][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2252.086325][T23346] __msan_chain_origin+0x57/0xa0 [ 2252.091248][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2252.096350][T23346] get_compat_msghdr+0x108/0x2b0 [ 2252.101274][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2252.105766][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2252.110432][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.116486][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.122641][T23346] __do_fast_syscall_32+0x129/0x180 [ 2252.127824][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2252.132662][T23346] do_SYSENTER_32+0x73/0x90 [ 2252.137158][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.143472][T23346] [ 2252.145782][T23346] Uninit was stored to memory at: [ 2252.150794][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2252.156502][T23346] __msan_chain_origin+0x57/0xa0 [ 2252.161426][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2252.166521][T23346] get_compat_msghdr+0x108/0x2b0 [ 2252.171447][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2252.175939][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2252.180605][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.186659][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.192800][T23346] __do_fast_syscall_32+0x129/0x180 [ 2252.197987][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2252.202825][T23346] do_SYSENTER_32+0x73/0x90 [ 2252.207316][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.213617][T23346] [ 2252.215923][T23346] Uninit was stored to memory at: [ 2252.220954][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2252.226666][T23346] __msan_chain_origin+0x57/0xa0 [ 2252.231591][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2252.236688][T23346] get_compat_msghdr+0x108/0x2b0 [ 2252.241615][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2252.246126][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2252.250790][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.256844][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.262984][T23346] __do_fast_syscall_32+0x129/0x180 [ 2252.268169][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2252.273006][T23346] do_SYSENTER_32+0x73/0x90 [ 2252.277496][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.283796][T23346] [ 2252.286102][T23346] Uninit was stored to memory at: [ 2252.291123][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2252.296828][T23346] __msan_chain_origin+0x57/0xa0 [ 2252.301757][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2252.306854][T23346] get_compat_msghdr+0x108/0x2b0 [ 2252.311784][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2252.316274][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2252.320938][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.327002][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.333148][T23346] __do_fast_syscall_32+0x129/0x180 [ 2252.338334][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2252.343172][T23346] do_SYSENTER_32+0x73/0x90 [ 2252.347663][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.353983][T23346] [ 2252.356304][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2252.362965][T23346] do_recvmmsg+0xc2/0x22e0 [ 2252.367367][T23346] do_recvmmsg+0xc2/0x22e0 [ 2252.642466][T23346] not chained 80000 origins [ 2252.647011][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2252.655701][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2252.665764][T23346] Call Trace: [ 2252.669062][T23346] dump_stack+0x21c/0x280 [ 2252.673404][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2252.679126][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2252.684501][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2252.689707][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2252.695341][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2252.701410][T23346] ? _copy_from_user+0x201/0x310 [ 2252.706347][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2252.711552][T23346] __msan_chain_origin+0x57/0xa0 [ 2252.717014][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2252.722139][T23346] get_compat_msghdr+0x108/0x2b0 [ 2252.727086][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2252.731620][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2252.737258][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2252.742585][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2252.747352][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2252.752034][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2252.757836][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2252.763037][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.769108][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.775265][T23346] __do_fast_syscall_32+0x129/0x180 [ 2252.780464][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2252.785389][T23346] do_SYSENTER_32+0x73/0x90 [ 2252.789902][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.796225][T23346] RIP: 0023:0xf7f65549 [ 2252.800411][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2252.820020][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2252.828612][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2252.836760][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2252.844735][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2252.852709][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2252.860767][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2252.868756][T23346] Uninit was stored to memory at: [ 2252.873793][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2252.879632][T23346] __msan_chain_origin+0x57/0xa0 [ 2252.884571][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2252.889681][T23346] get_compat_msghdr+0x108/0x2b0 [ 2252.894622][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2252.899140][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2252.903820][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.909892][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.916075][T23346] __do_fast_syscall_32+0x129/0x180 [ 2252.921275][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2252.926129][T23346] do_SYSENTER_32+0x73/0x90 [ 2252.930637][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2252.936953][T23346] [ 2252.939270][T23346] Uninit was stored to memory at: [ 2252.944303][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2252.950027][T23346] __msan_chain_origin+0x57/0xa0 [ 2252.954992][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2252.960102][T23346] get_compat_msghdr+0x108/0x2b0 [ 2252.965040][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2252.969709][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2252.974393][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2252.980463][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2252.986626][T23346] __do_fast_syscall_32+0x129/0x180 [ 2252.991829][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2252.996682][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.001185][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.007495][T23346] [ 2253.009816][T23346] Uninit was stored to memory at: [ 2253.014909][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2253.020631][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.025570][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.030687][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.035628][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.040133][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.044811][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.050923][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.057105][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.062309][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.067161][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.071668][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.077981][T23346] [ 2253.080297][T23346] Uninit was stored to memory at: [ 2253.085328][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2253.091049][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.095987][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.101137][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.106073][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.110584][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.115257][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.121320][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.127477][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.132672][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.137519][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.142026][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.148333][T23346] [ 2253.150650][T23346] Uninit was stored to memory at: [ 2253.155673][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2253.161392][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.166327][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.171435][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.176368][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.180867][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.185541][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.191597][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.197741][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.203022][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.207860][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.212529][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.218831][T23346] [ 2253.221142][T23346] Uninit was stored to memory at: [ 2253.226176][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2253.231888][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.236814][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.241912][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.246837][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.251330][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.255994][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.262051][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.268196][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.273381][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.278220][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.282713][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.289019][T23346] [ 2253.291332][T23346] Uninit was stored to memory at: [ 2253.296345][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2253.302052][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.306976][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.312077][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.317006][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.321499][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.326165][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.332221][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.338364][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.343552][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.348391][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.352883][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.359185][T23346] [ 2253.361496][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2253.368178][T23346] do_recvmmsg+0xc2/0x22e0 [ 2253.372584][T23346] do_recvmmsg+0xc2/0x22e0 [ 2253.491793][T23346] not chained 90000 origins [ 2253.496331][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2253.505001][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2253.515059][T23346] Call Trace: [ 2253.518356][T23346] dump_stack+0x21c/0x280 [ 2253.522696][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2253.528503][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2253.533889][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2253.539098][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2253.544739][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2253.550811][T23346] ? _copy_from_user+0x201/0x310 [ 2253.555932][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2253.561137][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.566084][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.571206][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.576241][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.580770][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2253.586405][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2253.591687][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2253.596459][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.601217][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2253.607011][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2253.612206][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.618267][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.624412][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.629599][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.634440][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.639548][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.645871][T23346] RIP: 0023:0xf7f65549 [ 2253.649935][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2253.669545][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2253.677945][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2253.685905][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2253.693867][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2253.702000][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2253.709957][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2253.717917][T23346] Uninit was stored to memory at: [ 2253.722955][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2253.728671][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.733602][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.738705][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.743649][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.748149][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.752815][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.758957][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.765099][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.770999][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.775841][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.780441][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.786744][T23346] [ 2253.789146][T23346] Uninit was stored to memory at: [ 2253.794165][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2253.799873][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.805154][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.810539][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.815641][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.820138][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.824807][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.830865][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.837028][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.842225][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.847061][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.851555][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.857858][T23346] [ 2253.860182][T23346] Uninit was stored to memory at: [ 2253.865200][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2253.870910][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.875835][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.880979][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.885905][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.890418][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.895094][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.901155][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.907297][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.912487][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.917326][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.921824][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.928126][T23346] [ 2253.930440][T23346] Uninit was stored to memory at: [ 2253.935481][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2253.941207][T23346] __msan_chain_origin+0x57/0xa0 [ 2253.946391][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2253.951576][T23346] get_compat_msghdr+0x108/0x2b0 [ 2253.956502][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2253.961011][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2253.965792][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2253.971934][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2253.978077][T23346] __do_fast_syscall_32+0x129/0x180 [ 2253.983267][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2253.988104][T23346] do_SYSENTER_32+0x73/0x90 [ 2253.992600][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2253.998901][T23346] [ 2254.001209][T23346] Uninit was stored to memory at: [ 2254.006224][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2254.011953][T23346] __msan_chain_origin+0x57/0xa0 [ 2254.016878][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2254.021975][T23346] get_compat_msghdr+0x108/0x2b0 [ 2254.027100][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2254.031683][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2254.036354][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.042410][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.048552][T23346] __do_fast_syscall_32+0x129/0x180 [ 2254.053738][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2254.058590][T23346] do_SYSENTER_32+0x73/0x90 [ 2254.063083][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.069390][T23346] [ 2254.071710][T23346] Uninit was stored to memory at: [ 2254.076820][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2254.082528][T23346] __msan_chain_origin+0x57/0xa0 [ 2254.087452][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2254.092566][T23346] get_compat_msghdr+0x108/0x2b0 [ 2254.098448][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2254.102939][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2254.107602][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.113657][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.119799][T23346] __do_fast_syscall_32+0x129/0x180 [ 2254.125178][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2254.130017][T23346] do_SYSENTER_32+0x73/0x90 [ 2254.134510][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.140831][T23346] [ 2254.143159][T23346] Uninit was stored to memory at: [ 2254.148173][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2254.153881][T23346] __msan_chain_origin+0x57/0xa0 [ 2254.158806][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2254.163903][T23346] get_compat_msghdr+0x108/0x2b0 [ 2254.168924][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2254.173417][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2254.178082][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.184142][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.190291][T23346] __do_fast_syscall_32+0x129/0x180 [ 2254.195479][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2254.200316][T23346] do_SYSENTER_32+0x73/0x90 [ 2254.204810][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.211116][T23346] [ 2254.213445][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2254.220110][T23346] do_recvmmsg+0xc2/0x22e0 [ 2254.224515][T23346] do_recvmmsg+0xc2/0x22e0 [ 2254.423189][T23346] not chained 100000 origins [ 2254.427821][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2254.436494][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2254.447514][T23346] Call Trace: [ 2254.450814][T23346] dump_stack+0x21c/0x280 [ 2254.455151][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2254.460885][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2254.466269][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2254.471486][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2254.477126][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2254.483202][T23346] ? _copy_from_user+0x201/0x310 [ 2254.488145][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2254.493349][T23346] __msan_chain_origin+0x57/0xa0 [ 2254.498289][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2254.503408][T23346] get_compat_msghdr+0x108/0x2b0 [ 2254.508358][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2254.512890][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2254.518536][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2254.523844][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2254.528613][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2254.533332][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2254.539144][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2254.544354][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.550433][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.556605][T23346] __do_fast_syscall_32+0x129/0x180 [ 2254.561904][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2254.566765][T23346] do_SYSENTER_32+0x73/0x90 [ 2254.571278][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.580991][T23346] RIP: 0023:0xf7f65549 [ 2254.585065][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2254.604674][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2254.613090][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2254.621091][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2254.629064][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2254.637041][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2254.645007][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2254.652984][T23346] Uninit was stored to memory at: [ 2254.658016][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2254.663736][T23346] __msan_chain_origin+0x57/0xa0 [ 2254.668673][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2254.673783][T23346] get_compat_msghdr+0x108/0x2b0 [ 2254.678718][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2254.683219][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2254.687919][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.693982][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.700131][T23346] __do_fast_syscall_32+0x129/0x180 [ 2254.705317][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2254.710156][T23346] do_SYSENTER_32+0x73/0x90 [ 2254.714651][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.721063][T23346] [ 2254.723385][T23346] Uninit was stored to memory at: [ 2254.728614][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2254.734330][T23346] __msan_chain_origin+0x57/0xa0 [ 2254.739266][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2254.744373][T23346] get_compat_msghdr+0x108/0x2b0 [ 2254.749307][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2254.753806][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2254.758480][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.764557][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.770709][T23346] __do_fast_syscall_32+0x129/0x180 [ 2254.776018][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2254.780866][T23346] do_SYSENTER_32+0x73/0x90 [ 2254.785381][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.791692][T23346] [ 2254.794008][T23346] Uninit was stored to memory at: [ 2254.799031][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2254.804759][T23346] __msan_chain_origin+0x57/0xa0 [ 2254.809702][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2254.814812][T23346] get_compat_msghdr+0x108/0x2b0 [ 2254.819744][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2254.824243][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2254.828908][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.834962][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.841106][T23346] __do_fast_syscall_32+0x129/0x180 [ 2254.846294][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2254.852031][T23346] do_SYSENTER_32+0x73/0x90 [ 2254.856524][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.862827][T23346] [ 2254.865137][T23346] Uninit was stored to memory at: [ 2254.870155][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2254.875865][T23346] __msan_chain_origin+0x57/0xa0 [ 2254.880788][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2254.885885][T23346] get_compat_msghdr+0x108/0x2b0 [ 2254.890814][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2254.895319][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2254.899987][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.906048][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.912189][T23346] __do_fast_syscall_32+0x129/0x180 [ 2254.917375][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2254.922215][T23346] do_SYSENTER_32+0x73/0x90 [ 2254.926709][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2254.933110][T23346] [ 2254.935420][T23346] Uninit was stored to memory at: [ 2254.940437][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2254.946167][T23346] __msan_chain_origin+0x57/0xa0 [ 2254.951092][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2254.956190][T23346] get_compat_msghdr+0x108/0x2b0 [ 2254.961115][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2254.965622][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2254.970294][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2254.976352][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2254.982495][T23346] __do_fast_syscall_32+0x129/0x180 [ 2254.987682][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2254.992521][T23346] do_SYSENTER_32+0x73/0x90 [ 2254.997037][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.003341][T23346] [ 2255.005654][T23346] Uninit was stored to memory at: [ 2255.010777][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2255.016494][T23346] __msan_chain_origin+0x57/0xa0 [ 2255.021439][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2255.026538][T23346] get_compat_msghdr+0x108/0x2b0 [ 2255.031463][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2255.035956][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2255.041229][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.047292][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.053521][T23346] __do_fast_syscall_32+0x129/0x180 [ 2255.058719][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2255.063557][T23346] do_SYSENTER_32+0x73/0x90 [ 2255.068053][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.074364][T23346] [ 2255.076675][T23346] Uninit was stored to memory at: [ 2255.081804][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2255.087522][T23346] __msan_chain_origin+0x57/0xa0 [ 2255.092447][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2255.097560][T23346] get_compat_msghdr+0x108/0x2b0 [ 2255.102508][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2255.107000][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2255.112718][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.118772][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.124921][T23346] __do_fast_syscall_32+0x129/0x180 [ 2255.130109][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2255.134947][T23346] do_SYSENTER_32+0x73/0x90 [ 2255.139440][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.145744][T23346] [ 2255.148057][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2255.154717][T23346] do_recvmmsg+0xc2/0x22e0 [ 2255.159121][T23346] do_recvmmsg+0xc2/0x22e0 [ 2255.267828][T23344] not chained 110000 origins [ 2255.272447][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2255.281115][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2255.291158][T23344] Call Trace: [ 2255.294443][T23344] dump_stack+0x21c/0x280 [ 2255.298765][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2255.304478][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2255.310538][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2255.315725][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2255.321358][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2255.328367][T23344] ? _copy_from_user+0x201/0x310 [ 2255.333291][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2255.338490][T23344] __msan_chain_origin+0x57/0xa0 [ 2255.343420][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2255.348526][T23344] get_compat_msghdr+0x108/0x2b0 [ 2255.353455][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2255.357950][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2255.363246][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2255.368866][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2255.374140][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2255.378892][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2255.383558][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2255.389350][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2255.394543][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.401141][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.407287][T23344] __do_fast_syscall_32+0x129/0x180 [ 2255.412475][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2255.417400][T23344] do_SYSENTER_32+0x73/0x90 [ 2255.421893][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.428202][T23344] RIP: 0023:0xf7f65549 [ 2255.432261][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2255.451865][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2255.460264][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2255.468222][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2255.476181][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2255.484138][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2255.492094][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2255.500054][T23344] Uninit was stored to memory at: [ 2255.505086][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2255.510798][T23344] __msan_chain_origin+0x57/0xa0 [ 2255.515908][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2255.521006][T23344] get_compat_msghdr+0x108/0x2b0 [ 2255.525931][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2255.530419][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2255.535081][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.541135][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.547277][T23344] __do_fast_syscall_32+0x129/0x180 [ 2255.552463][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2255.557314][T23344] do_SYSENTER_32+0x73/0x90 [ 2255.561822][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.568135][T23344] [ 2255.570447][T23344] Uninit was stored to memory at: [ 2255.575465][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2255.581172][T23344] __msan_chain_origin+0x57/0xa0 [ 2255.586095][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2255.591193][T23344] get_compat_msghdr+0x108/0x2b0 [ 2255.596121][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2255.600611][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2255.605275][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.611328][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.617489][T23344] __do_fast_syscall_32+0x129/0x180 [ 2255.622675][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2255.627511][T23344] do_SYSENTER_32+0x73/0x90 [ 2255.632000][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.638303][T23344] [ 2255.640610][T23344] Uninit was stored to memory at: [ 2255.645624][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2255.651330][T23344] __msan_chain_origin+0x57/0xa0 [ 2255.656612][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2255.661775][T23344] get_compat_msghdr+0x108/0x2b0 [ 2255.666749][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2255.671254][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2255.675921][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.681994][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.688141][T23344] __do_fast_syscall_32+0x129/0x180 [ 2255.693332][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2255.698182][T23344] do_SYSENTER_32+0x73/0x90 [ 2255.702674][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.708989][T23344] [ 2255.711299][T23344] Uninit was stored to memory at: [ 2255.716316][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2255.722023][T23344] __msan_chain_origin+0x57/0xa0 [ 2255.726945][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2255.732057][T23344] get_compat_msghdr+0x108/0x2b0 [ 2255.736983][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2255.741474][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2255.746137][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.752207][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.758349][T23344] __do_fast_syscall_32+0x129/0x180 [ 2255.763532][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2255.768371][T23344] do_SYSENTER_32+0x73/0x90 [ 2255.772863][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.779165][T23344] [ 2255.781479][T23344] Uninit was stored to memory at: [ 2255.786495][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2255.792308][T23344] __msan_chain_origin+0x57/0xa0 [ 2255.797231][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2255.802331][T23344] get_compat_msghdr+0x108/0x2b0 [ 2255.807256][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2255.811748][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2255.816413][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.822467][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.828609][T23344] __do_fast_syscall_32+0x129/0x180 [ 2255.833793][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2255.838632][T23344] do_SYSENTER_32+0x73/0x90 [ 2255.843125][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.849425][T23344] [ 2255.851731][T23344] Uninit was stored to memory at: [ 2255.856746][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2255.862454][T23344] __msan_chain_origin+0x57/0xa0 [ 2255.867375][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2255.872471][T23344] get_compat_msghdr+0x108/0x2b0 [ 2255.877408][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2255.881898][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2255.886564][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.892631][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.898772][T23344] __do_fast_syscall_32+0x129/0x180 [ 2255.903973][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2255.908810][T23344] do_SYSENTER_32+0x73/0x90 [ 2255.913301][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.919599][T23344] [ 2255.921911][T23344] Uninit was stored to memory at: [ 2255.926923][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2255.932632][T23344] __msan_chain_origin+0x57/0xa0 [ 2255.937557][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2255.942654][T23344] get_compat_msghdr+0x108/0x2b0 [ 2255.947579][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2255.952071][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2255.956740][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2255.962798][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2255.968942][T23344] __do_fast_syscall_32+0x129/0x180 [ 2255.974131][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2255.978974][T23344] do_SYSENTER_32+0x73/0x90 [ 2255.983467][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2255.989768][T23344] [ 2255.992084][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2255.998744][T23344] do_recvmmsg+0xc2/0x22e0 [ 2256.003149][T23344] do_recvmmsg+0xc2/0x22e0 [ 2256.188991][T23346] not chained 120000 origins [ 2256.193616][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2256.202289][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2256.212342][T23346] Call Trace: [ 2256.215638][T23346] dump_stack+0x21c/0x280 [ 2256.219978][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2256.225705][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2256.231080][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2256.236278][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2256.241913][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2256.247986][T23346] ? _copy_from_user+0x201/0x310 [ 2256.252922][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2256.258131][T23346] __msan_chain_origin+0x57/0xa0 [ 2256.263084][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2256.268206][T23346] get_compat_msghdr+0x108/0x2b0 [ 2256.273153][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2256.277692][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2256.283349][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2256.288640][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2256.293409][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2256.298089][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2256.303897][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2256.309106][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.315185][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.321347][T23346] __do_fast_syscall_32+0x129/0x180 [ 2256.326549][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2256.331412][T23346] do_SYSENTER_32+0x73/0x90 [ 2256.335920][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.342242][T23346] RIP: 0023:0xf7f65549 [ 2256.346312][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2256.365923][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2256.374340][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2256.382314][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2256.390285][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2256.398281][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2256.406344][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2256.414315][T23346] Uninit was stored to memory at: [ 2256.419386][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2256.425138][T23346] __msan_chain_origin+0x57/0xa0 [ 2256.430098][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2256.435211][T23346] get_compat_msghdr+0x108/0x2b0 [ 2256.440149][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2256.444652][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2256.449334][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.455402][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.461578][T23346] __do_fast_syscall_32+0x129/0x180 [ 2256.466775][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2256.471627][T23346] do_SYSENTER_32+0x73/0x90 [ 2256.476137][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.482447][T23346] [ 2256.484767][T23346] Uninit was stored to memory at: [ 2256.489799][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2256.495544][T23346] __msan_chain_origin+0x57/0xa0 [ 2256.500489][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2256.505600][T23346] get_compat_msghdr+0x108/0x2b0 [ 2256.510544][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2256.515050][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2256.519736][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.525804][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.531966][T23346] __do_fast_syscall_32+0x129/0x180 [ 2256.537166][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2256.542017][T23346] do_SYSENTER_32+0x73/0x90 [ 2256.546531][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.552847][T23346] [ 2256.555169][T23346] Uninit was stored to memory at: [ 2256.560201][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2256.565925][T23346] __msan_chain_origin+0x57/0xa0 [ 2256.570867][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2256.576018][T23346] get_compat_msghdr+0x108/0x2b0 [ 2256.580958][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2256.585484][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2256.590159][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.596227][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.602383][T23346] __do_fast_syscall_32+0x129/0x180 [ 2256.607587][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2256.612490][T23346] do_SYSENTER_32+0x73/0x90 [ 2256.616999][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.623311][T23346] [ 2256.625627][T23346] Uninit was stored to memory at: [ 2256.630653][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2256.636376][T23346] __msan_chain_origin+0x57/0xa0 [ 2256.641308][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2256.646414][T23346] get_compat_msghdr+0x108/0x2b0 [ 2256.651349][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2256.655850][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2256.660524][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.666586][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.672739][T23346] __do_fast_syscall_32+0x129/0x180 [ 2256.677947][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2256.682800][T23346] do_SYSENTER_32+0x73/0x90 [ 2256.687312][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.693626][T23346] [ 2256.695947][T23346] Uninit was stored to memory at: [ 2256.700998][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2256.707418][T23346] __msan_chain_origin+0x57/0xa0 [ 2256.712359][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2256.717467][T23346] get_compat_msghdr+0x108/0x2b0 [ 2256.722399][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2256.727020][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2256.730640][T23344] not chained 130000 origins [ 2256.731705][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.736270][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2256.742319][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.750953][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2256.757107][T23346] __do_fast_syscall_32+0x129/0x180 [ 2256.767133][T23344] Call Trace: [ 2256.772315][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2256.775759][T23344] dump_stack+0x21c/0x280 [ 2256.780588][T23346] do_SYSENTER_32+0x73/0x90 [ 2256.784906][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2256.789380][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.795073][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2256.801353][T23346] [ 2256.807402][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2256.809696][T23346] Uninit was stored to memory at: [ 2256.814883][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2256.819890][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2256.825493][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2256.831182][T23346] __msan_chain_origin+0x57/0xa0 [ 2256.837232][T23344] ? _copy_from_user+0x201/0x310 [ 2256.842141][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2256.847050][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2256.852135][T23346] get_compat_msghdr+0x108/0x2b0 [ 2256.857309][T23344] __msan_chain_origin+0x57/0xa0 [ 2256.862219][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2256.867125][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2256.871609][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2256.876706][T23344] get_compat_msghdr+0x108/0x2b0 [ 2256.881355][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.886264][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2256.892299][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.896783][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2256.903444][T23346] __do_fast_syscall_32+0x129/0x180 [ 2256.908614][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2256.913782][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2256.919388][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2256.924213][T23346] do_SYSENTER_32+0x73/0x90 [ 2256.929479][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2256.933953][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2256.938687][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2256.944968][T23346] [ 2256.949628][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2256.951920][T23346] Uninit was stored to memory at: [ 2256.957714][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2256.962727][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2256.967907][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2256.973598][T23346] __msan_chain_origin+0x57/0xa0 [ 2256.979683][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2256.984601][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2256.990738][T23344] __do_fast_syscall_32+0x129/0x180 [ 2256.995819][T23346] get_compat_msghdr+0x108/0x2b0 [ 2257.001002][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2257.005920][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2257.010742][T23344] do_SYSENTER_32+0x73/0x90 [ 2257.015217][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2257.019695][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.024342][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.030633][T23344] RIP: 0023:0xf7f65549 [ 2257.036673][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.040711][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2257.046839][T23346] __do_fast_syscall_32+0x129/0x180 [ 2257.066410][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2257.071605][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2257.079990][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2257.084817][T23346] do_SYSENTER_32+0x73/0x90 [ 2257.092760][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2257.097241][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.105180][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2257.111473][T23346] [ 2257.119426][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2257.121731][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2257.129680][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2257.136332][T23346] do_recvmmsg+0xc2/0x22e0 [ 2257.144266][T23344] Uninit was stored to memory at: [ 2257.148671][T23346] do_recvmmsg+0xc2/0x22e0 [ 2257.153669][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2257.163751][T23344] __msan_chain_origin+0x57/0xa0 [ 2257.168689][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2257.173797][T23344] get_compat_msghdr+0x108/0x2b0 [ 2257.178833][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2257.183420][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2257.188138][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.194206][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.200366][T23344] __do_fast_syscall_32+0x129/0x180 [ 2257.205569][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2257.210419][T23344] do_SYSENTER_32+0x73/0x90 [ 2257.214914][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.221235][T23344] [ 2257.223545][T23344] Uninit was stored to memory at: [ 2257.228564][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2257.234273][T23344] __msan_chain_origin+0x57/0xa0 [ 2257.239199][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2257.244299][T23344] get_compat_msghdr+0x108/0x2b0 [ 2257.249224][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2257.253715][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2257.258376][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.264604][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.270749][T23344] __do_fast_syscall_32+0x129/0x180 [ 2257.275936][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2257.280773][T23344] do_SYSENTER_32+0x73/0x90 [ 2257.285264][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.291564][T23344] [ 2257.293873][T23344] Uninit was stored to memory at: [ 2257.298888][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2257.304593][T23344] __msan_chain_origin+0x57/0xa0 [ 2257.309517][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2257.314614][T23344] get_compat_msghdr+0x108/0x2b0 [ 2257.319540][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2257.324053][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2257.328718][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.334774][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.340916][T23344] __do_fast_syscall_32+0x129/0x180 [ 2257.346100][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2257.350937][T23344] do_SYSENTER_32+0x73/0x90 [ 2257.355427][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.361727][T23344] [ 2257.364038][T23344] Uninit was stored to memory at: [ 2257.369052][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2257.374757][T23344] __msan_chain_origin+0x57/0xa0 [ 2257.379678][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2257.384776][T23344] get_compat_msghdr+0x108/0x2b0 [ 2257.389700][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2257.394195][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2257.398860][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.404923][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.411067][T23344] __do_fast_syscall_32+0x129/0x180 [ 2257.416337][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2257.421197][T23344] do_SYSENTER_32+0x73/0x90 [ 2257.425691][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.432006][T23344] [ 2257.434318][T23344] Uninit was stored to memory at: [ 2257.439331][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2257.445040][T23344] __msan_chain_origin+0x57/0xa0 [ 2257.449962][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2257.455056][T23344] get_compat_msghdr+0x108/0x2b0 [ 2257.459981][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2257.464476][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2257.469154][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.475206][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.481346][T23344] __do_fast_syscall_32+0x129/0x180 [ 2257.486532][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2257.491375][T23344] do_SYSENTER_32+0x73/0x90 [ 2257.495886][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.502188][T23344] [ 2257.504495][T23344] Uninit was stored to memory at: [ 2257.509510][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2257.515232][T23344] __msan_chain_origin+0x57/0xa0 [ 2257.520184][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2257.525280][T23344] get_compat_msghdr+0x108/0x2b0 [ 2257.530203][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2257.534692][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2257.539357][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.545410][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.551550][T23344] __do_fast_syscall_32+0x129/0x180 [ 2257.556734][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2257.561684][T23344] do_SYSENTER_32+0x73/0x90 [ 2257.566182][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.572487][T23344] [ 2257.574803][T23344] Uninit was stored to memory at: [ 2257.579832][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2257.585548][T23344] __msan_chain_origin+0x57/0xa0 [ 2257.590474][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2257.595571][T23344] get_compat_msghdr+0x108/0x2b0 [ 2257.600493][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2257.604988][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2257.609653][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2257.615717][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2257.621988][T23344] __do_fast_syscall_32+0x129/0x180 [ 2257.627209][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2257.632227][T23344] do_SYSENTER_32+0x73/0x90 [ 2257.636729][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2257.643032][T23344] [ 2257.645342][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2257.652013][T23344] do_recvmmsg+0xc2/0x22e0 [ 2257.656416][T23344] do_recvmmsg+0xc2/0x22e0 [ 2257.920213][T23344] not chained 140000 origins [ 2257.924866][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2257.933531][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2257.943581][T23344] Call Trace: [ 2257.946877][T23344] dump_stack+0x21c/0x280 [ 2257.951213][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2257.956938][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2257.962336][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2257.967537][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2257.973177][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2257.979262][T23344] ? _copy_from_user+0x201/0x310 [ 2257.984197][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2257.989399][T23344] __msan_chain_origin+0x57/0xa0 [ 2257.994337][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2257.999484][T23344] get_compat_msghdr+0x108/0x2b0 [ 2258.004427][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2258.008934][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2258.014175][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2258.019818][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2258.025107][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2258.029873][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2258.034548][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2258.040349][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2258.045551][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.051624][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.058128][T23344] __do_fast_syscall_32+0x129/0x180 [ 2258.063326][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2258.068176][T23344] do_SYSENTER_32+0x73/0x90 [ 2258.072683][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.079002][T23344] RIP: 0023:0xf7f65549 [ 2258.083074][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2258.102679][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2258.111093][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2258.119063][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2258.127066][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2258.135038][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2258.143004][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2258.150975][T23344] Uninit was stored to memory at: [ 2258.156187][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2258.161911][T23344] __msan_chain_origin+0x57/0xa0 [ 2258.166847][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2258.171948][T23344] get_compat_msghdr+0x108/0x2b0 [ 2258.176929][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2258.181430][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2258.186104][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.192164][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.198316][T23344] __do_fast_syscall_32+0x129/0x180 [ 2258.203513][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2258.208357][T23344] do_SYSENTER_32+0x73/0x90 [ 2258.212856][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.219161][T23344] [ 2258.221476][T23344] Uninit was stored to memory at: [ 2258.226498][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2258.232212][T23344] __msan_chain_origin+0x57/0xa0 [ 2258.237240][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2258.242343][T23344] get_compat_msghdr+0x108/0x2b0 [ 2258.247280][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2258.251780][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2258.256450][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.262598][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.268747][T23344] __do_fast_syscall_32+0x129/0x180 [ 2258.273945][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2258.278781][T23344] do_SYSENTER_32+0x73/0x90 [ 2258.283273][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.289660][T23344] [ 2258.291991][T23344] Uninit was stored to memory at: [ 2258.297005][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2258.302714][T23344] __msan_chain_origin+0x57/0xa0 [ 2258.307636][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2258.312736][T23344] get_compat_msghdr+0x108/0x2b0 [ 2258.317661][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2258.322150][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2258.326815][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.332883][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.339024][T23344] __do_fast_syscall_32+0x129/0x180 [ 2258.344211][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2258.349057][T23344] do_SYSENTER_32+0x73/0x90 [ 2258.353553][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.359855][T23344] [ 2258.362162][T23344] Uninit was stored to memory at: [ 2258.367179][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2258.372887][T23344] __msan_chain_origin+0x57/0xa0 [ 2258.377810][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2258.382906][T23344] get_compat_msghdr+0x108/0x2b0 [ 2258.387830][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2258.392318][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2258.396992][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.403059][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.409202][T23344] __do_fast_syscall_32+0x129/0x180 [ 2258.414396][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2258.419232][T23344] do_SYSENTER_32+0x73/0x90 [ 2258.423724][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.430041][T23344] [ 2258.432354][T23344] Uninit was stored to memory at: [ 2258.437372][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2258.443685][T23344] __msan_chain_origin+0x57/0xa0 [ 2258.448606][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2258.453705][T23344] get_compat_msghdr+0x108/0x2b0 [ 2258.458629][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2258.463118][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2258.467790][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.473841][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.479983][T23344] __do_fast_syscall_32+0x129/0x180 [ 2258.485167][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2258.490003][T23344] do_SYSENTER_32+0x73/0x90 [ 2258.494496][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.500797][T23344] [ 2258.503106][T23344] Uninit was stored to memory at: [ 2258.508118][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2258.513823][T23344] __msan_chain_origin+0x57/0xa0 [ 2258.518746][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2258.523843][T23344] get_compat_msghdr+0x108/0x2b0 [ 2258.528854][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2258.533342][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2258.538005][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.544059][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.550199][T23344] __do_fast_syscall_32+0x129/0x180 [ 2258.555575][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2258.560503][T23344] do_SYSENTER_32+0x73/0x90 [ 2258.565004][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.571310][T23344] [ 2258.573623][T23344] Uninit was stored to memory at: [ 2258.578642][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2258.584349][T23344] __msan_chain_origin+0x57/0xa0 [ 2258.589273][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2258.594368][T23344] get_compat_msghdr+0x108/0x2b0 [ 2258.599305][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2258.603797][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2258.608461][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.614515][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.620655][T23344] __do_fast_syscall_32+0x129/0x180 [ 2258.625839][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2258.630677][T23344] do_SYSENTER_32+0x73/0x90 [ 2258.635239][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.641719][T23344] [ 2258.644044][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2258.650705][T23344] do_recvmmsg+0xc2/0x22e0 [ 2258.655120][T23344] do_recvmmsg+0xc2/0x22e0 [ 2258.694466][T23346] not chained 150000 origins [ 2258.699086][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2258.707768][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2258.717822][T23346] Call Trace: [ 2258.721113][T23346] dump_stack+0x21c/0x280 [ 2258.725435][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2258.731151][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2258.736521][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2258.741719][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2258.752901][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2258.758962][T23346] ? _copy_from_user+0x201/0x310 [ 2258.763895][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2258.769086][T23346] __msan_chain_origin+0x57/0xa0 [ 2258.774013][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2258.779114][T23346] get_compat_msghdr+0x108/0x2b0 [ 2258.784042][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2258.788549][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2258.794172][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2258.799530][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2258.804282][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2258.808946][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2258.814736][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2258.819925][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.826011][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.832158][T23346] __do_fast_syscall_32+0x129/0x180 [ 2258.837345][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2258.842194][T23346] do_SYSENTER_32+0x73/0x90 [ 2258.846686][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.852994][T23346] RIP: 0023:0xf7f65549 [ 2258.857050][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2258.876657][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2258.885055][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2258.893019][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2258.900974][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2258.908939][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2258.916896][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2258.924855][T23346] Uninit was stored to memory at: [ 2258.930006][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2258.935719][T23346] __msan_chain_origin+0x57/0xa0 [ 2258.940652][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2258.945754][T23346] get_compat_msghdr+0x108/0x2b0 [ 2258.950699][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2258.955204][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2258.959867][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2258.965921][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2258.972067][T23346] __do_fast_syscall_32+0x129/0x180 [ 2258.977253][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2258.982089][T23346] do_SYSENTER_32+0x73/0x90 [ 2258.986580][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2258.992894][T23346] [ 2258.995202][T23346] Uninit was stored to memory at: [ 2259.000215][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2259.005920][T23346] __msan_chain_origin+0x57/0xa0 [ 2259.010845][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2259.015944][T23346] get_compat_msghdr+0x108/0x2b0 [ 2259.020874][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2259.025364][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2259.030026][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2259.036080][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2259.042221][T23346] __do_fast_syscall_32+0x129/0x180 [ 2259.047404][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2259.052241][T23346] do_SYSENTER_32+0x73/0x90 [ 2259.056731][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2259.063032][T23346] [ 2259.065339][T23346] Uninit was stored to memory at: [ 2259.070349][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2259.076055][T23346] __msan_chain_origin+0x57/0xa0 [ 2259.080975][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2259.086072][T23346] get_compat_msghdr+0x108/0x2b0 [ 2259.090995][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2259.095482][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2259.100144][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2259.106198][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2259.112339][T23346] __do_fast_syscall_32+0x129/0x180 [ 2259.117527][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2259.122361][T23346] do_SYSENTER_32+0x73/0x90 [ 2259.126939][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2259.133246][T23346] [ 2259.135567][T23346] Uninit was stored to memory at: [ 2259.140580][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2259.146285][T23346] __msan_chain_origin+0x57/0xa0 [ 2259.151208][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2259.156307][T23346] get_compat_msghdr+0x108/0x2b0 [ 2259.161241][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2259.165730][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2259.170393][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2259.176449][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2259.182958][T23346] __do_fast_syscall_32+0x129/0x180 [ 2259.188140][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2259.192976][T23346] do_SYSENTER_32+0x73/0x90 [ 2259.197467][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2259.203766][T23346] [ 2259.206076][T23346] Uninit was stored to memory at: [ 2259.211089][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2259.216794][T23346] __msan_chain_origin+0x57/0xa0 [ 2259.221715][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2259.226812][T23346] get_compat_msghdr+0x108/0x2b0 [ 2259.231749][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2259.236249][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2259.240914][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2259.246966][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2259.253105][T23346] __do_fast_syscall_32+0x129/0x180 [ 2259.258287][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2259.263122][T23346] do_SYSENTER_32+0x73/0x90 [ 2259.267613][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2259.273913][T23346] [ 2259.276318][T23346] Uninit was stored to memory at: [ 2259.281332][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2259.287039][T23346] __msan_chain_origin+0x57/0xa0 [ 2259.291961][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2259.297057][T23346] get_compat_msghdr+0x108/0x2b0 [ 2259.301979][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2259.306468][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2259.311136][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2259.317187][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2259.323327][T23346] __do_fast_syscall_32+0x129/0x180 [ 2259.328508][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2259.333348][T23346] do_SYSENTER_32+0x73/0x90 [ 2259.337850][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2259.344161][T23346] [ 2259.346471][T23346] Uninit was stored to memory at: [ 2259.351484][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2259.357197][T23346] __msan_chain_origin+0x57/0xa0 [ 2259.362130][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2259.367226][T23346] get_compat_msghdr+0x108/0x2b0 [ 2259.372150][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2259.376640][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2259.381303][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2259.387356][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2259.393509][T23346] __do_fast_syscall_32+0x129/0x180 [ 2259.398695][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2259.403620][T23346] do_SYSENTER_32+0x73/0x90 [ 2259.408558][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2259.414871][T23346] [ 2259.417181][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2259.423847][T23346] do_recvmmsg+0xc2/0x22e0 [ 2259.428249][T23346] do_recvmmsg+0xc2/0x22e0 [ 2259.663894][T23344] not chained 160000 origins [ 2259.668532][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2259.677199][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2259.687277][T23344] Call Trace: [ 2259.690577][T23344] dump_stack+0x21c/0x280 [ 2259.694918][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2259.700648][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2259.706122][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2259.711333][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2259.716977][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2259.723071][T23344] ? _copy_from_user+0x201/0x310 [ 2259.728027][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2259.733236][T23344] __msan_chain_origin+0x57/0xa0 [ 2259.738180][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2259.743308][T23344] get_compat_msghdr+0x108/0x2b0 [ 2259.748258][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2259.752763][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2259.757970][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2259.763633][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2259.768927][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2259.773702][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2259.778398][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2259.784204][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2259.789497][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2259.795570][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2259.801737][T23344] __do_fast_syscall_32+0x129/0x180 [ 2259.806946][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2259.811801][T23344] do_SYSENTER_32+0x73/0x90 [ 2259.816309][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2259.822631][T23344] RIP: 0023:0xf7f65549 [ 2259.826700][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2259.846304][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2259.854720][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2259.862694][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2259.870722][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2259.878712][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2259.886684][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2259.894657][T23344] Uninit was stored to memory at: [ 2259.899692][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2259.905414][T23344] __msan_chain_origin+0x57/0xa0 [ 2259.910352][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2259.915486][T23344] get_compat_msghdr+0x108/0x2b0 [ 2259.920426][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2259.924929][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2259.929605][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2259.935672][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2259.941827][T23344] __do_fast_syscall_32+0x129/0x180 [ 2259.947030][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2259.951881][T23344] do_SYSENTER_32+0x73/0x90 [ 2259.956384][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2259.963041][T23344] [ 2259.965379][T23344] Uninit was stored to memory at: [ 2259.970405][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2259.976132][T23344] __msan_chain_origin+0x57/0xa0 [ 2259.981251][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2259.986360][T23344] get_compat_msghdr+0x108/0x2b0 [ 2259.991302][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2259.995805][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.000477][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.006538][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.012688][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.017892][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.022738][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.027240][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.033550][T23344] [ 2260.035868][T23344] Uninit was stored to memory at: [ 2260.040919][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2260.046916][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.051851][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.057045][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.061987][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.066491][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.071386][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.077464][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.083723][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.088941][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.093806][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.098356][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.104673][T23344] [ 2260.106993][T23344] Uninit was stored to memory at: [ 2260.112106][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2260.117850][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.122779][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.127886][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.132815][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.137307][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.141973][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.148029][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.154177][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.159379][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.164218][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.168727][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.175056][T23344] [ 2260.177365][T23344] Uninit was stored to memory at: [ 2260.182397][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2260.188107][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.193033][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.198310][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.203238][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.207729][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.212499][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.218551][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.224693][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.229878][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.234715][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.239224][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.245526][T23344] [ 2260.247844][T23344] Uninit was stored to memory at: [ 2260.252862][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2260.258569][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.263493][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.268590][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.273516][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.278006][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.282671][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.288726][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.294867][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.300057][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.304893][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.309385][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.315687][T23344] [ 2260.317995][T23344] Uninit was stored to memory at: [ 2260.323027][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2260.328737][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.333660][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.338757][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.343701][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.348191][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.352856][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.358910][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.365071][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.370258][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.375197][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.379690][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.385990][T23344] [ 2260.388300][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2260.394993][T23344] do_recvmmsg+0xc2/0x22e0 [ 2260.399398][T23344] do_recvmmsg+0xc2/0x22e0 [ 2260.478825][T23344] not chained 170000 origins [ 2260.483454][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2260.492154][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2260.502206][T23344] Call Trace: [ 2260.505500][T23344] dump_stack+0x21c/0x280 [ 2260.509855][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2260.515587][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2260.521656][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2260.526860][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2260.532517][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2260.538586][T23344] ? _copy_from_user+0x201/0x310 [ 2260.543525][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2260.548868][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.553816][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.558937][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.563884][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.568394][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2260.573603][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2260.579240][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2260.584527][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2260.589293][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.593975][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2260.599779][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2260.604985][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.611064][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.617213][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.622402][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.627243][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.631740][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.638055][T23344] RIP: 0023:0xf7f65549 [ 2260.642114][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2260.661706][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2260.670121][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2260.678079][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2260.686125][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2260.694084][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2260.702045][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2260.710010][T23344] Uninit was stored to memory at: [ 2260.715047][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2260.720787][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.725723][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.730829][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.735762][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.740256][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.744924][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.750995][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.757156][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.762354][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.767199][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.771788][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.778091][T23344] [ 2260.780402][T23344] Uninit was stored to memory at: [ 2260.785418][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2260.791143][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.796081][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.801179][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.806119][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.810647][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.815314][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.821369][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.827513][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.833047][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.837884][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.842725][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.849038][T23344] [ 2260.851349][T23344] Uninit was stored to memory at: [ 2260.856436][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2260.862149][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.867073][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.872175][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.877101][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.881592][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.886258][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.892314][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.898456][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.903643][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.908481][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.912973][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.919285][T23344] [ 2260.921595][T23344] Uninit was stored to memory at: [ 2260.926610][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2260.932319][T23344] __msan_chain_origin+0x57/0xa0 [ 2260.937242][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2260.942348][T23344] get_compat_msghdr+0x108/0x2b0 [ 2260.947274][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2260.951768][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2260.956433][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2260.962486][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2260.968628][T23344] __do_fast_syscall_32+0x129/0x180 [ 2260.973816][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2260.978657][T23344] do_SYSENTER_32+0x73/0x90 [ 2260.983153][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2260.989454][T23344] [ 2260.991792][T23344] Uninit was stored to memory at: [ 2260.996828][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2261.002711][T23344] __msan_chain_origin+0x57/0xa0 [ 2261.007652][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2261.012750][T23344] get_compat_msghdr+0x108/0x2b0 [ 2261.017777][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2261.022268][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2261.026935][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.032996][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.039139][T23344] __do_fast_syscall_32+0x129/0x180 [ 2261.044346][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2261.049183][T23344] do_SYSENTER_32+0x73/0x90 [ 2261.053677][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.059980][T23344] [ 2261.062289][T23344] Uninit was stored to memory at: [ 2261.067321][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2261.073028][T23344] __msan_chain_origin+0x57/0xa0 [ 2261.077952][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2261.083065][T23344] get_compat_msghdr+0x108/0x2b0 [ 2261.087992][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2261.092483][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2261.097153][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.103221][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.109363][T23344] __do_fast_syscall_32+0x129/0x180 [ 2261.114564][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2261.119490][T23344] do_SYSENTER_32+0x73/0x90 [ 2261.123996][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.130298][T23344] [ 2261.132607][T23344] Uninit was stored to memory at: [ 2261.137623][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2261.143330][T23344] __msan_chain_origin+0x57/0xa0 [ 2261.148270][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2261.153369][T23344] get_compat_msghdr+0x108/0x2b0 [ 2261.158310][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2261.162803][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2261.167467][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.173524][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.179665][T23344] __do_fast_syscall_32+0x129/0x180 [ 2261.184851][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2261.189690][T23344] do_SYSENTER_32+0x73/0x90 [ 2261.194182][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.200482][T23344] [ 2261.202791][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2261.209453][T23344] do_recvmmsg+0xc2/0x22e0 [ 2261.213856][T23344] do_recvmmsg+0xc2/0x22e0 [ 2261.493684][T23346] not chained 180000 origins [ 2261.498305][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2261.506966][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2261.517038][T23346] Call Trace: [ 2261.520333][T23346] dump_stack+0x21c/0x280 [ 2261.524676][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2261.530402][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2261.536472][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2261.541672][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2261.547297][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2261.553356][T23346] ? _copy_from_user+0x201/0x310 [ 2261.558280][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2261.563470][T23346] __msan_chain_origin+0x57/0xa0 [ 2261.568398][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2261.573511][T23346] get_compat_msghdr+0x108/0x2b0 [ 2261.578443][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2261.582956][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2261.588581][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2261.594055][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2261.598808][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2261.603476][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2261.609354][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2261.614553][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.622959][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.629195][T23346] __do_fast_syscall_32+0x129/0x180 [ 2261.634383][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2261.639246][T23346] do_SYSENTER_32+0x73/0x90 [ 2261.643832][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.650146][T23346] RIP: 0023:0xf7f65549 [ 2261.654206][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2261.673973][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2261.682389][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2261.690531][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2261.698517][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2261.706478][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2261.714439][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2261.722397][T23346] Uninit was stored to memory at: [ 2261.727416][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2261.733123][T23346] __msan_chain_origin+0x57/0xa0 [ 2261.738078][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2261.743178][T23346] get_compat_msghdr+0x108/0x2b0 [ 2261.748102][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2261.752606][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2261.757283][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.763336][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.769484][T23346] __do_fast_syscall_32+0x129/0x180 [ 2261.774668][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2261.779522][T23346] do_SYSENTER_32+0x73/0x90 [ 2261.784013][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.790313][T23346] [ 2261.792622][T23346] Uninit was stored to memory at: [ 2261.797634][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2261.803340][T23346] __msan_chain_origin+0x57/0xa0 [ 2261.808262][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2261.813359][T23346] get_compat_msghdr+0x108/0x2b0 [ 2261.818283][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2261.822782][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2261.827445][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.833497][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.839640][T23346] __do_fast_syscall_32+0x129/0x180 [ 2261.844823][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2261.849659][T23346] do_SYSENTER_32+0x73/0x90 [ 2261.854172][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.860473][T23346] [ 2261.862781][T23346] Uninit was stored to memory at: [ 2261.867803][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2261.873594][T23346] __msan_chain_origin+0x57/0xa0 [ 2261.878604][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2261.883703][T23346] get_compat_msghdr+0x108/0x2b0 [ 2261.888633][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2261.893122][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2261.897796][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.903849][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.909998][T23346] __do_fast_syscall_32+0x129/0x180 [ 2261.915181][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2261.920019][T23346] do_SYSENTER_32+0x73/0x90 [ 2261.924508][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2261.930809][T23346] [ 2261.933120][T23346] Uninit was stored to memory at: [ 2261.938133][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2261.943842][T23346] __msan_chain_origin+0x57/0xa0 [ 2261.948764][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2261.953860][T23346] get_compat_msghdr+0x108/0x2b0 [ 2261.958794][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2261.963284][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2261.967949][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2261.974002][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2261.980146][T23346] __do_fast_syscall_32+0x129/0x180 [ 2261.985329][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2261.990168][T23346] do_SYSENTER_32+0x73/0x90 [ 2261.994661][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.000963][T23346] [ 2262.003285][T23346] Uninit was stored to memory at: [ 2262.008297][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2262.014005][T23346] __msan_chain_origin+0x57/0xa0 [ 2262.018929][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2262.024025][T23346] get_compat_msghdr+0x108/0x2b0 [ 2262.028949][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2262.033439][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2262.038100][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.044164][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.050304][T23346] __do_fast_syscall_32+0x129/0x180 [ 2262.055489][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2262.060325][T23346] do_SYSENTER_32+0x73/0x90 [ 2262.064828][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.071129][T23346] [ 2262.073437][T23346] Uninit was stored to memory at: [ 2262.078448][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2262.084167][T23346] __msan_chain_origin+0x57/0xa0 [ 2262.089091][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2262.094192][T23346] get_compat_msghdr+0x108/0x2b0 [ 2262.099131][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2262.103622][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2262.108284][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.114338][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.120492][T23346] __do_fast_syscall_32+0x129/0x180 [ 2262.125681][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2262.130524][T23346] do_SYSENTER_32+0x73/0x90 [ 2262.135015][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.141313][T23346] [ 2262.143620][T23346] Uninit was stored to memory at: [ 2262.148633][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2262.154349][T23346] __msan_chain_origin+0x57/0xa0 [ 2262.159271][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2262.164367][T23346] get_compat_msghdr+0x108/0x2b0 [ 2262.169290][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2262.173783][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2262.178447][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.184514][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.190669][T23346] __do_fast_syscall_32+0x129/0x180 [ 2262.195856][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2262.200711][T23346] do_SYSENTER_32+0x73/0x90 [ 2262.205203][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.211503][T23346] [ 2262.213812][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2262.220469][T23346] do_recvmmsg+0xc2/0x22e0 [ 2262.224877][T23346] do_recvmmsg+0xc2/0x22e0 [ 2262.437405][T23346] not chained 190000 origins [ 2262.442119][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2262.450797][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2262.460846][T23346] Call Trace: [ 2262.464141][T23346] dump_stack+0x21c/0x280 [ 2262.468514][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2262.474244][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2262.480316][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2262.485517][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2262.491156][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2262.497302][T23346] ? _copy_from_user+0x201/0x310 [ 2262.502253][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2262.507453][T23346] __msan_chain_origin+0x57/0xa0 [ 2262.512397][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2262.517516][T23346] get_compat_msghdr+0x108/0x2b0 [ 2262.522462][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2262.526981][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2262.532621][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2262.538603][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2262.543378][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2262.548067][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2262.553877][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2262.559088][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.565158][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.571307][T23346] __do_fast_syscall_32+0x129/0x180 [ 2262.576496][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2262.581335][T23346] do_SYSENTER_32+0x73/0x90 [ 2262.585829][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.592139][T23346] RIP: 0023:0xf7f65549 [ 2262.596194][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2262.615811][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2262.624216][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2262.632180][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2262.640138][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2262.648096][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2262.656055][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2262.664016][T23346] Uninit was stored to memory at: [ 2262.669035][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2262.674766][T23346] __msan_chain_origin+0x57/0xa0 [ 2262.679694][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2262.684789][T23346] get_compat_msghdr+0x108/0x2b0 [ 2262.689716][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2262.694206][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2262.698881][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.704934][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.711088][T23346] __do_fast_syscall_32+0x129/0x180 [ 2262.716291][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2262.721138][T23346] do_SYSENTER_32+0x73/0x90 [ 2262.725633][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.731954][T23346] [ 2262.734267][T23346] Uninit was stored to memory at: [ 2262.739289][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2262.744998][T23346] __msan_chain_origin+0x57/0xa0 [ 2262.749923][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2262.755023][T23346] get_compat_msghdr+0x108/0x2b0 [ 2262.759946][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2262.764437][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2262.769103][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.775156][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.781298][T23346] __do_fast_syscall_32+0x129/0x180 [ 2262.786481][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2262.791317][T23346] do_SYSENTER_32+0x73/0x90 [ 2262.795808][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.802108][T23346] [ 2262.804416][T23346] Uninit was stored to memory at: [ 2262.809426][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2262.815136][T23346] __msan_chain_origin+0x57/0xa0 [ 2262.820057][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2262.825151][T23346] get_compat_msghdr+0x108/0x2b0 [ 2262.830075][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2262.834563][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2262.839225][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.845278][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.851418][T23346] __do_fast_syscall_32+0x129/0x180 [ 2262.856615][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2262.861461][T23346] do_SYSENTER_32+0x73/0x90 [ 2262.865953][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.872253][T23346] [ 2262.874561][T23346] Uninit was stored to memory at: [ 2262.879571][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2262.885280][T23346] __msan_chain_origin+0x57/0xa0 [ 2262.890204][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2262.895301][T23346] get_compat_msghdr+0x108/0x2b0 [ 2262.900229][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2262.904750][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2262.909413][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.915480][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.921621][T23346] __do_fast_syscall_32+0x129/0x180 [ 2262.926808][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2262.931649][T23346] do_SYSENTER_32+0x73/0x90 [ 2262.936139][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2262.942442][T23346] [ 2262.944748][T23346] Uninit was stored to memory at: [ 2262.949761][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2262.955479][T23346] __msan_chain_origin+0x57/0xa0 [ 2262.960401][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2262.965496][T23346] get_compat_msghdr+0x108/0x2b0 [ 2262.970418][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2262.974924][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2262.979588][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2262.985645][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2262.991789][T23346] __do_fast_syscall_32+0x129/0x180 [ 2262.996972][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2263.001816][T23346] do_SYSENTER_32+0x73/0x90 [ 2263.006306][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.012606][T23346] [ 2263.014937][T23346] Uninit was stored to memory at: [ 2263.019951][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2263.025658][T23346] __msan_chain_origin+0x57/0xa0 [ 2263.030580][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2263.035674][T23346] get_compat_msghdr+0x108/0x2b0 [ 2263.040596][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2263.045086][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2263.049749][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.055802][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.061942][T23346] __do_fast_syscall_32+0x129/0x180 [ 2263.067124][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2263.071961][T23346] do_SYSENTER_32+0x73/0x90 [ 2263.076453][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.082753][T23346] [ 2263.085059][T23346] Uninit was stored to memory at: [ 2263.090070][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2263.095778][T23346] __msan_chain_origin+0x57/0xa0 [ 2263.100711][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2263.105807][T23346] get_compat_msghdr+0x108/0x2b0 [ 2263.110731][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2263.115222][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2263.119889][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.125944][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.132084][T23346] __do_fast_syscall_32+0x129/0x180 [ 2263.137269][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2263.142126][T23346] do_SYSENTER_32+0x73/0x90 [ 2263.146617][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.152918][T23346] [ 2263.155227][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2263.161886][T23346] do_recvmmsg+0xc2/0x22e0 [ 2263.166287][T23346] do_recvmmsg+0xc2/0x22e0 [ 2263.640599][T23346] not chained 200000 origins [ 2263.645229][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2263.653895][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2263.663949][T23346] Call Trace: [ 2263.667255][T23346] dump_stack+0x21c/0x280 [ 2263.671601][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2263.677332][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2263.682714][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2263.687923][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2263.693593][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2263.699668][T23346] ? _copy_from_user+0x201/0x310 [ 2263.704615][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2263.709821][T23346] __msan_chain_origin+0x57/0xa0 [ 2263.714760][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2263.719883][T23346] get_compat_msghdr+0x108/0x2b0 [ 2263.724823][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2263.729344][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2263.735000][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2263.740291][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2263.745051][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2263.749724][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2263.755519][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2263.760708][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.766768][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.772910][T23346] __do_fast_syscall_32+0x129/0x180 [ 2263.778099][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2263.782940][T23346] do_SYSENTER_32+0x73/0x90 [ 2263.787432][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.793743][T23346] RIP: 0023:0xf7f65549 [ 2263.797800][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2263.817477][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2263.825874][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2263.833841][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2263.841799][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2263.849765][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2263.857724][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2263.865684][T23346] Uninit was stored to memory at: [ 2263.870706][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2263.876413][T23346] __msan_chain_origin+0x57/0xa0 [ 2263.881336][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2263.886440][T23346] get_compat_msghdr+0x108/0x2b0 [ 2263.891365][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2263.895856][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2263.900534][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.906603][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.912750][T23346] __do_fast_syscall_32+0x129/0x180 [ 2263.917935][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2263.922775][T23346] do_SYSENTER_32+0x73/0x90 [ 2263.927271][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2263.933570][T23346] [ 2263.935883][T23346] Uninit was stored to memory at: [ 2263.940901][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2263.946606][T23346] __msan_chain_origin+0x57/0xa0 [ 2263.951530][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2263.956636][T23346] get_compat_msghdr+0x108/0x2b0 [ 2263.961567][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2263.966059][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2263.970732][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2263.976804][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2263.982947][T23346] __do_fast_syscall_32+0x129/0x180 [ 2263.988132][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2263.992968][T23346] do_SYSENTER_32+0x73/0x90 [ 2263.997458][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.003760][T23346] [ 2264.006068][T23346] Uninit was stored to memory at: [ 2264.011082][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2264.016789][T23346] __msan_chain_origin+0x57/0xa0 [ 2264.021719][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2264.026814][T23346] get_compat_msghdr+0x108/0x2b0 [ 2264.031737][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2264.036226][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2264.040894][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.046945][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.053101][T23346] __do_fast_syscall_32+0x129/0x180 [ 2264.058285][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2264.063121][T23346] do_SYSENTER_32+0x73/0x90 [ 2264.067610][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.073913][T23346] [ 2264.076220][T23346] Uninit was stored to memory at: [ 2264.081235][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2264.086942][T23346] __msan_chain_origin+0x57/0xa0 [ 2264.091864][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2264.096965][T23346] get_compat_msghdr+0x108/0x2b0 [ 2264.101895][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2264.106387][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2264.111052][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.117103][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.123257][T23346] __do_fast_syscall_32+0x129/0x180 [ 2264.128442][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2264.133281][T23346] do_SYSENTER_32+0x73/0x90 [ 2264.137773][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.144083][T23346] [ 2264.146390][T23346] Uninit was stored to memory at: [ 2264.151415][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2264.157123][T23346] __msan_chain_origin+0x57/0xa0 [ 2264.162046][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2264.167140][T23346] get_compat_msghdr+0x108/0x2b0 [ 2264.172067][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2264.176554][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2264.181216][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.187270][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.193411][T23346] __do_fast_syscall_32+0x129/0x180 [ 2264.198607][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2264.203443][T23346] do_SYSENTER_32+0x73/0x90 [ 2264.207931][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.214229][T23346] [ 2264.216536][T23346] Uninit was stored to memory at: [ 2264.221566][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2264.227270][T23346] __msan_chain_origin+0x57/0xa0 [ 2264.232209][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2264.237303][T23346] get_compat_msghdr+0x108/0x2b0 [ 2264.242238][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2264.246729][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2264.251394][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.257445][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.263607][T23346] __do_fast_syscall_32+0x129/0x180 [ 2264.268790][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2264.273626][T23346] do_SYSENTER_32+0x73/0x90 [ 2264.278128][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.284426][T23346] [ 2264.286733][T23346] Uninit was stored to memory at: [ 2264.291746][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2264.297450][T23346] __msan_chain_origin+0x57/0xa0 [ 2264.302374][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2264.307469][T23346] get_compat_msghdr+0x108/0x2b0 [ 2264.312393][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2264.316883][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2264.321545][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.327597][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.333738][T23346] __do_fast_syscall_32+0x129/0x180 [ 2264.338933][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2264.343772][T23346] do_SYSENTER_32+0x73/0x90 [ 2264.348262][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.354561][T23346] [ 2264.356870][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2264.363530][T23346] do_recvmmsg+0xc2/0x22e0 [ 2264.367932][T23346] do_recvmmsg+0xc2/0x22e0 [ 2264.696574][T23344] not chained 210000 origins [ 2264.701199][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2264.709867][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2264.719923][T23344] Call Trace: [ 2264.723228][T23344] dump_stack+0x21c/0x280 [ 2264.727568][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2264.733291][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2264.738665][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2264.743866][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2264.749501][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2264.755571][T23344] ? _copy_from_user+0x201/0x310 [ 2264.760538][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2264.775124][T23344] __msan_chain_origin+0x57/0xa0 [ 2264.780069][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2264.785188][T23344] get_compat_msghdr+0x108/0x2b0 [ 2264.790138][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2264.794647][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2264.799863][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2264.805508][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2264.810805][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2264.815573][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2264.820284][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2264.826088][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2264.831294][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.837363][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.843522][T23344] __do_fast_syscall_32+0x129/0x180 [ 2264.848728][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2264.853577][T23344] do_SYSENTER_32+0x73/0x90 [ 2264.858084][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2264.864405][T23344] RIP: 0023:0xf7f65549 [ 2264.868506][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2264.888137][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2264.896547][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2264.904511][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2264.912482][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2264.920444][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2264.928406][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2264.936369][T23344] Uninit was stored to memory at: [ 2264.941396][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2264.947109][T23344] __msan_chain_origin+0x57/0xa0 [ 2264.952733][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2264.957836][T23344] get_compat_msghdr+0x108/0x2b0 [ 2264.962772][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2264.967269][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2264.971942][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2264.978021][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2264.984163][T23344] __do_fast_syscall_32+0x129/0x180 [ 2264.989345][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2264.994182][T23344] do_SYSENTER_32+0x73/0x90 [ 2264.998670][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.004973][T23344] [ 2265.007286][T23344] Uninit was stored to memory at: [ 2265.012301][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2265.018007][T23344] __msan_chain_origin+0x57/0xa0 [ 2265.022930][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2265.028042][T23344] get_compat_msghdr+0x108/0x2b0 [ 2265.032977][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2265.037467][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2265.042130][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.048181][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.054322][T23344] __do_fast_syscall_32+0x129/0x180 [ 2265.059503][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2265.064341][T23344] do_SYSENTER_32+0x73/0x90 [ 2265.068831][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.075130][T23344] [ 2265.077439][T23344] Uninit was stored to memory at: [ 2265.082450][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2265.088155][T23344] __msan_chain_origin+0x57/0xa0 [ 2265.093093][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2265.098199][T23344] get_compat_msghdr+0x108/0x2b0 [ 2265.103131][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2265.107650][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2265.112330][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.118386][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.124535][T23344] __do_fast_syscall_32+0x129/0x180 [ 2265.129724][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2265.134561][T23344] do_SYSENTER_32+0x73/0x90 [ 2265.139053][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.145371][T23344] [ 2265.147679][T23344] Uninit was stored to memory at: [ 2265.152696][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2265.158402][T23344] __msan_chain_origin+0x57/0xa0 [ 2265.163326][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2265.168425][T23344] get_compat_msghdr+0x108/0x2b0 [ 2265.173352][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2265.177842][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2265.182512][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.188568][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.194710][T23344] __do_fast_syscall_32+0x129/0x180 [ 2265.199894][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2265.204733][T23344] do_SYSENTER_32+0x73/0x90 [ 2265.209229][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.215531][T23344] [ 2265.217841][T23344] Uninit was stored to memory at: [ 2265.222862][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2265.228571][T23344] __msan_chain_origin+0x57/0xa0 [ 2265.233496][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2265.238610][T23344] get_compat_msghdr+0x108/0x2b0 [ 2265.243535][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2265.248026][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2265.252691][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.258744][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.264898][T23344] __do_fast_syscall_32+0x129/0x180 [ 2265.270084][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2265.274922][T23344] do_SYSENTER_32+0x73/0x90 [ 2265.279420][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.285722][T23344] [ 2265.288031][T23344] Uninit was stored to memory at: [ 2265.293045][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2265.298755][T23344] __msan_chain_origin+0x57/0xa0 [ 2265.303764][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2265.308863][T23344] get_compat_msghdr+0x108/0x2b0 [ 2265.313791][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2265.318283][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2265.322948][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.329093][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.335235][T23344] __do_fast_syscall_32+0x129/0x180 [ 2265.340426][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2265.345266][T23344] do_SYSENTER_32+0x73/0x90 [ 2265.349758][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.356059][T23344] [ 2265.358371][T23344] Uninit was stored to memory at: [ 2265.363385][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2265.369092][T23344] __msan_chain_origin+0x57/0xa0 [ 2265.374015][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2265.379115][T23344] get_compat_msghdr+0x108/0x2b0 [ 2265.384042][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2265.388533][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2265.393197][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.399250][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.405394][T23344] __do_fast_syscall_32+0x129/0x180 [ 2265.410585][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2265.415425][T23344] do_SYSENTER_32+0x73/0x90 [ 2265.420093][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.426395][T23344] [ 2265.428720][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2265.435385][T23344] do_recvmmsg+0xc2/0x22e0 [ 2265.439789][T23344] do_recvmmsg+0xc2/0x22e0 [ 2265.502877][T23346] not chained 220000 origins [ 2265.507510][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2265.516808][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2265.526873][T23346] Call Trace: [ 2265.530169][T23346] dump_stack+0x21c/0x280 [ 2265.534520][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2265.540230][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2265.545593][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2265.550783][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2265.556412][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2265.562598][T23346] ? _copy_from_user+0x201/0x310 [ 2265.567532][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2265.572746][T23346] __msan_chain_origin+0x57/0xa0 [ 2265.577680][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2265.582790][T23346] get_compat_msghdr+0x108/0x2b0 [ 2265.587720][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2265.592238][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2265.597859][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2265.603139][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2265.607903][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2265.612584][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2265.618379][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2265.623575][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.629640][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.635803][T23346] __do_fast_syscall_32+0x129/0x180 [ 2265.641000][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2265.645837][T23346] do_SYSENTER_32+0x73/0x90 [ 2265.650329][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.656638][T23346] RIP: 0023:0xf7f65549 [ 2265.660697][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2265.680288][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2265.688686][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2265.696656][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2265.704612][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2265.712626][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2265.720603][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2265.728569][T23346] Uninit was stored to memory at: [ 2265.733598][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2265.739305][T23346] __msan_chain_origin+0x57/0xa0 [ 2265.744240][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2265.749336][T23346] get_compat_msghdr+0x108/0x2b0 [ 2265.754257][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2265.758754][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2265.763523][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.769591][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.775747][T23346] __do_fast_syscall_32+0x129/0x180 [ 2265.780946][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2265.785804][T23346] do_SYSENTER_32+0x73/0x90 [ 2265.790316][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.796616][T23346] [ 2265.798925][T23346] Uninit was stored to memory at: [ 2265.804057][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2265.809777][T23346] __msan_chain_origin+0x57/0xa0 [ 2265.814718][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2265.819837][T23346] get_compat_msghdr+0x108/0x2b0 [ 2265.824764][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2265.829257][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2265.833923][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.839978][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.846119][T23346] __do_fast_syscall_32+0x129/0x180 [ 2265.851303][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2265.856145][T23346] do_SYSENTER_32+0x73/0x90 [ 2265.860646][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.866969][T23346] [ 2265.869277][T23346] Uninit was stored to memory at: [ 2265.874289][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2265.879994][T23346] __msan_chain_origin+0x57/0xa0 [ 2265.884915][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2265.890020][T23346] get_compat_msghdr+0x108/0x2b0 [ 2265.894943][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2265.899433][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2265.904095][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.910147][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.916289][T23346] __do_fast_syscall_32+0x129/0x180 [ 2265.921488][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2265.926322][T23346] do_SYSENTER_32+0x73/0x90 [ 2265.930813][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2265.937120][T23346] [ 2265.939430][T23346] Uninit was stored to memory at: [ 2265.944443][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2265.950148][T23346] __msan_chain_origin+0x57/0xa0 [ 2265.955071][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2265.960168][T23346] get_compat_msghdr+0x108/0x2b0 [ 2265.965093][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2265.969582][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2265.974245][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2265.980303][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2265.986451][T23346] __do_fast_syscall_32+0x129/0x180 [ 2265.991635][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2265.996475][T23346] do_SYSENTER_32+0x73/0x90 [ 2266.000965][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.007263][T23346] [ 2266.009571][T23346] Uninit was stored to memory at: [ 2266.014585][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2266.020294][T23346] __msan_chain_origin+0x57/0xa0 [ 2266.025214][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2266.030309][T23346] get_compat_msghdr+0x108/0x2b0 [ 2266.035236][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2266.039726][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2266.044403][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.050454][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.056595][T23346] __do_fast_syscall_32+0x129/0x180 [ 2266.061779][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2266.066616][T23346] do_SYSENTER_32+0x73/0x90 [ 2266.071106][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.077404][T23346] [ 2266.079709][T23346] Uninit was stored to memory at: [ 2266.084723][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2266.090428][T23346] __msan_chain_origin+0x57/0xa0 [ 2266.095348][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2266.100444][T23346] get_compat_msghdr+0x108/0x2b0 [ 2266.105467][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2266.109957][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2266.114630][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.120684][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.126838][T23346] __do_fast_syscall_32+0x129/0x180 [ 2266.132022][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2266.136859][T23346] do_SYSENTER_32+0x73/0x90 [ 2266.141351][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.147654][T23346] [ 2266.149959][T23346] Uninit was stored to memory at: [ 2266.154989][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2266.160703][T23346] __msan_chain_origin+0x57/0xa0 [ 2266.165632][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2266.170735][T23346] get_compat_msghdr+0x108/0x2b0 [ 2266.175667][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2266.180246][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2266.184912][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.190975][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.197119][T23346] __do_fast_syscall_32+0x129/0x180 [ 2266.202302][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2266.207140][T23346] do_SYSENTER_32+0x73/0x90 [ 2266.211629][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.217930][T23346] [ 2266.220239][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2266.226899][T23346] do_recvmmsg+0xc2/0x22e0 [ 2266.231306][T23346] do_recvmmsg+0xc2/0x22e0 [ 2266.399267][T23344] not chained 230000 origins [ 2266.403896][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2266.412646][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2266.422713][T23344] Call Trace: [ 2266.426007][T23344] dump_stack+0x21c/0x280 [ 2266.430342][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2266.436094][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2266.441459][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2266.446650][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2266.452272][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2266.458337][T23344] ? _copy_from_user+0x201/0x310 [ 2266.463261][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2266.468447][T23344] __msan_chain_origin+0x57/0xa0 [ 2266.473373][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2266.478472][T23344] get_compat_msghdr+0x108/0x2b0 [ 2266.483402][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2266.487893][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2266.493090][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2266.498719][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2266.503991][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2266.508747][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2266.513417][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2266.519231][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2266.524512][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.530583][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.536738][T23344] __do_fast_syscall_32+0x129/0x180 [ 2266.541941][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2266.546798][T23344] do_SYSENTER_32+0x73/0x90 [ 2266.551443][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.557763][T23344] RIP: 0023:0xf7f65549 [ 2266.561828][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2266.581424][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2266.589826][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2266.597782][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2266.605739][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2266.613695][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2266.621660][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2266.629616][T23344] Uninit was stored to memory at: [ 2266.634649][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2266.640369][T23344] __msan_chain_origin+0x57/0xa0 [ 2266.645293][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2266.650388][T23344] get_compat_msghdr+0x108/0x2b0 [ 2266.655315][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2266.659808][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2266.664471][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.670526][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.676676][T23344] __do_fast_syscall_32+0x129/0x180 [ 2266.681860][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2266.686697][T23344] do_SYSENTER_32+0x73/0x90 [ 2266.691189][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.697488][T23344] [ 2266.699796][T23344] Uninit was stored to memory at: [ 2266.704809][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2266.710531][T23344] __msan_chain_origin+0x57/0xa0 [ 2266.715488][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2266.720599][T23344] get_compat_msghdr+0x108/0x2b0 [ 2266.725536][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2266.730033][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2266.734697][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.740752][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.746920][T23344] __do_fast_syscall_32+0x129/0x180 [ 2266.752103][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2266.756940][T23344] do_SYSENTER_32+0x73/0x90 [ 2266.761433][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.768349][T23344] [ 2266.770663][T23344] Uninit was stored to memory at: [ 2266.775685][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2266.781396][T23344] __msan_chain_origin+0x57/0xa0 [ 2266.786326][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2266.791433][T23344] get_compat_msghdr+0x108/0x2b0 [ 2266.796360][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2266.800851][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2266.805515][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.811572][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.817714][T23344] __do_fast_syscall_32+0x129/0x180 [ 2266.822899][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2266.827736][T23344] do_SYSENTER_32+0x73/0x90 [ 2266.832233][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.838530][T23344] [ 2266.840844][T23344] Uninit was stored to memory at: [ 2266.845856][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2266.851562][T23344] __msan_chain_origin+0x57/0xa0 [ 2266.856486][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2266.861583][T23344] get_compat_msghdr+0x108/0x2b0 [ 2266.866506][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2266.870996][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2266.875662][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.881715][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.887855][T23344] __do_fast_syscall_32+0x129/0x180 [ 2266.893039][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2266.897875][T23344] do_SYSENTER_32+0x73/0x90 [ 2266.902367][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.908665][T23344] [ 2266.910971][T23344] Uninit was stored to memory at: [ 2266.915984][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2266.921692][T23344] __msan_chain_origin+0x57/0xa0 [ 2266.926617][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2266.931717][T23344] get_compat_msghdr+0x108/0x2b0 [ 2266.936663][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2266.941154][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2266.945817][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2266.951870][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2266.958191][T23344] __do_fast_syscall_32+0x129/0x180 [ 2266.963377][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2266.968212][T23344] do_SYSENTER_32+0x73/0x90 [ 2266.972704][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2266.979005][T23344] [ 2266.981336][T23344] Uninit was stored to memory at: [ 2266.986349][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2266.992096][T23344] __msan_chain_origin+0x57/0xa0 [ 2266.997020][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2267.002117][T23344] get_compat_msghdr+0x108/0x2b0 [ 2267.007053][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2267.011543][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2267.016206][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2267.022257][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2267.028398][T23344] __do_fast_syscall_32+0x129/0x180 [ 2267.034710][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2267.039544][T23344] do_SYSENTER_32+0x73/0x90 [ 2267.044039][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2267.050338][T23344] [ 2267.052645][T23344] Uninit was stored to memory at: [ 2267.057660][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2267.063366][T23344] __msan_chain_origin+0x57/0xa0 [ 2267.068289][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2267.073384][T23344] get_compat_msghdr+0x108/0x2b0 [ 2267.078567][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2267.083057][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2267.087719][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2267.093780][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2267.099918][T23344] __do_fast_syscall_32+0x129/0x180 [ 2267.105100][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2267.109935][T23344] do_SYSENTER_32+0x73/0x90 [ 2267.114424][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2267.120726][T23344] [ 2267.123035][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2267.129702][T23344] do_recvmmsg+0xc2/0x22e0 [ 2267.134105][T23344] do_recvmmsg+0xc2/0x22e0 [ 2267.390535][T23346] not chained 240000 origins [ 2267.395164][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2267.403831][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2267.413973][T23346] Call Trace: [ 2267.417305][T23346] dump_stack+0x21c/0x280 [ 2267.421648][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2267.427371][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2267.432749][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2267.437951][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2267.443589][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2267.449660][T23346] ? _copy_from_user+0x201/0x310 [ 2267.454603][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2267.459815][T23346] __msan_chain_origin+0x57/0xa0 [ 2267.464761][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2267.469878][T23346] get_compat_msghdr+0x108/0x2b0 [ 2267.475009][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2267.479528][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2267.485171][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2267.490461][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2267.495227][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2267.499907][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2267.505712][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2267.510911][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2267.516982][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2267.523143][T23346] __do_fast_syscall_32+0x129/0x180 [ 2267.528346][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2267.533200][T23346] do_SYSENTER_32+0x73/0x90 [ 2267.537703][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2267.544026][T23346] RIP: 0023:0xf7f65549 [ 2267.548104][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2267.567714][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2267.576142][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2267.584114][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2267.592120][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2267.600090][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2267.608060][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2267.616033][T23346] Uninit was stored to memory at: [ 2267.621072][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2267.626797][T23346] __msan_chain_origin+0x57/0xa0 [ 2267.631735][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2267.636846][T23346] get_compat_msghdr+0x108/0x2b0 [ 2267.641785][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2267.646289][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2267.651058][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2267.657124][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2267.663280][T23346] __do_fast_syscall_32+0x129/0x180 [ 2267.668477][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2267.673328][T23346] do_SYSENTER_32+0x73/0x90 [ 2267.677831][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2267.684143][T23346] [ 2267.686463][T23346] Uninit was stored to memory at: [ 2267.691491][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2267.697213][T23346] __msan_chain_origin+0x57/0xa0 [ 2267.702156][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2267.707262][T23346] get_compat_msghdr+0x108/0x2b0 [ 2267.712252][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2267.716755][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2267.721434][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2267.727503][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2267.733661][T23346] __do_fast_syscall_32+0x129/0x180 [ 2267.738883][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2267.743773][T23346] do_SYSENTER_32+0x73/0x90 [ 2267.748315][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2267.754626][T23346] [ 2267.756945][T23346] Uninit was stored to memory at: [ 2267.761980][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2267.767700][T23346] __msan_chain_origin+0x57/0xa0 [ 2267.772642][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2267.777755][T23346] get_compat_msghdr+0x108/0x2b0 [ 2267.782696][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2267.787198][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2267.791875][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2267.797946][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2267.804126][T23346] __do_fast_syscall_32+0x129/0x180 [ 2267.809323][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2267.814173][T23346] do_SYSENTER_32+0x73/0x90 [ 2267.818674][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2267.824982][T23346] [ 2267.827299][T23346] Uninit was stored to memory at: [ 2267.832327][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2267.838050][T23346] __msan_chain_origin+0x57/0xa0 [ 2267.842990][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2267.848103][T23346] get_compat_msghdr+0x108/0x2b0 [ 2267.853041][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2267.857547][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2267.862244][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2267.868314][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2267.874472][T23346] __do_fast_syscall_32+0x129/0x180 [ 2267.879693][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2267.884544][T23346] do_SYSENTER_32+0x73/0x90 [ 2267.889047][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2267.895360][T23346] [ 2267.897687][T23346] Uninit was stored to memory at: [ 2267.902716][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2267.908432][T23346] __msan_chain_origin+0x57/0xa0 [ 2267.913369][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2267.918475][T23346] get_compat_msghdr+0x108/0x2b0 [ 2267.923415][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2267.927922][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2267.932597][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2267.938665][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2267.944820][T23346] __do_fast_syscall_32+0x129/0x180 [ 2267.950014][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2267.954905][T23346] do_SYSENTER_32+0x73/0x90 [ 2267.959406][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2267.965714][T23346] [ 2267.968030][T23346] Uninit was stored to memory at: [ 2267.973075][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2267.978832][T23346] __msan_chain_origin+0x57/0xa0 [ 2267.983768][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2267.988876][T23346] get_compat_msghdr+0x108/0x2b0 [ 2267.993815][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2267.998318][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.003109][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.009176][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.015330][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.020526][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.025370][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.029872][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.036181][T23346] [ 2268.038495][T23346] Uninit was stored to memory at: [ 2268.043523][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2268.049244][T23346] __msan_chain_origin+0x57/0xa0 [ 2268.054176][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2268.059280][T23346] get_compat_msghdr+0x108/0x2b0 [ 2268.064218][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2268.068717][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.073393][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.079458][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.085608][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.090808][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.095655][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.100157][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.106466][T23346] [ 2268.108784][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2268.115461][T23346] do_recvmmsg+0xc2/0x22e0 [ 2268.119872][T23346] do_recvmmsg+0xc2/0x22e0 [ 2268.226434][T23346] not chained 250000 origins [ 2268.231061][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2268.239730][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2268.249868][T23346] Call Trace: [ 2268.253167][T23346] dump_stack+0x21c/0x280 [ 2268.257507][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2268.263234][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2268.268610][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2268.273814][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2268.279452][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2268.285521][T23346] ? _copy_from_user+0x201/0x310 [ 2268.290471][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2268.295658][T23346] __msan_chain_origin+0x57/0xa0 [ 2268.300587][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2268.305690][T23346] get_compat_msghdr+0x108/0x2b0 [ 2268.310619][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2268.315124][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2268.320767][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2268.326041][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2268.330795][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.335464][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2268.341254][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2268.346441][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.352500][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.358644][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.363834][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.368672][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.373188][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.379512][T23346] RIP: 0023:0xf7f65549 [ 2268.383568][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2268.403185][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2268.411686][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2268.419642][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2268.427600][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2268.435559][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2268.443517][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2268.451477][T23346] Uninit was stored to memory at: [ 2268.456497][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2268.462205][T23346] __msan_chain_origin+0x57/0xa0 [ 2268.467126][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2268.472221][T23346] get_compat_msghdr+0x108/0x2b0 [ 2268.477145][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2268.481650][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.486313][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.492368][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.498524][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.503709][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.508547][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.513131][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.519444][T23346] [ 2268.521753][T23346] Uninit was stored to memory at: [ 2268.526764][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2268.532470][T23346] __msan_chain_origin+0x57/0xa0 [ 2268.537410][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2268.542511][T23346] get_compat_msghdr+0x108/0x2b0 [ 2268.547442][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2268.551944][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.556632][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.562691][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.568849][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.574042][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.578880][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.583373][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.589680][T23346] [ 2268.591990][T23346] Uninit was stored to memory at: [ 2268.597004][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2268.602710][T23346] __msan_chain_origin+0x57/0xa0 [ 2268.607647][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2268.612743][T23346] get_compat_msghdr+0x108/0x2b0 [ 2268.617672][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2268.622165][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.626828][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.632879][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.639021][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.644209][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.649046][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.653538][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.659843][T23346] [ 2268.662151][T23346] Uninit was stored to memory at: [ 2268.667178][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2268.672892][T23346] __msan_chain_origin+0x57/0xa0 [ 2268.677814][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2268.682910][T23346] get_compat_msghdr+0x108/0x2b0 [ 2268.687846][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2268.692338][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.697000][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.703051][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.709192][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.714389][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.719244][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.724268][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.730572][T23346] [ 2268.732880][T23346] Uninit was stored to memory at: [ 2268.737896][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2268.743602][T23346] __msan_chain_origin+0x57/0xa0 [ 2268.748527][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2268.753621][T23346] get_compat_msghdr+0x108/0x2b0 [ 2268.758544][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2268.763035][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.767698][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.773752][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.779892][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.785079][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.789916][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.794412][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.800718][T23346] [ 2268.803028][T23346] Uninit was stored to memory at: [ 2268.808042][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2268.813761][T23346] __msan_chain_origin+0x57/0xa0 [ 2268.818702][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2268.823806][T23346] get_compat_msghdr+0x108/0x2b0 [ 2268.828736][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2268.833234][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.837905][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.843962][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.850107][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.855291][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.860128][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.864618][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.870920][T23346] [ 2268.873230][T23346] Uninit was stored to memory at: [ 2268.878245][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2268.883954][T23346] __msan_chain_origin+0x57/0xa0 [ 2268.888875][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2268.893970][T23346] get_compat_msghdr+0x108/0x2b0 [ 2268.898893][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2268.903383][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2268.908046][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2268.914098][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2268.920261][T23346] __do_fast_syscall_32+0x129/0x180 [ 2268.925443][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2268.930278][T23346] do_SYSENTER_32+0x73/0x90 [ 2268.934768][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2268.941074][T23346] [ 2268.943384][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2268.950042][T23346] do_recvmmsg+0xc2/0x22e0 [ 2268.954443][T23346] do_recvmmsg+0xc2/0x22e0 [ 2269.134881][T23346] not chained 260000 origins [ 2269.139588][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2269.148253][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2269.158397][T23346] Call Trace: [ 2269.161697][T23346] dump_stack+0x21c/0x280 [ 2269.166039][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2269.171763][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2269.177831][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2269.183037][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2269.188778][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2269.194847][T23346] ? _copy_from_user+0x201/0x310 [ 2269.199780][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2269.204981][T23346] __msan_chain_origin+0x57/0xa0 [ 2269.209923][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2269.215041][T23346] get_compat_msghdr+0x108/0x2b0 [ 2269.219983][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2269.224504][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2269.230137][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2269.235423][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2269.240186][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2269.244866][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2269.250665][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2269.255866][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.261937][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.268091][T23346] __do_fast_syscall_32+0x129/0x180 [ 2269.273288][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2269.278140][T23346] do_SYSENTER_32+0x73/0x90 [ 2269.282673][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.288990][T23346] RIP: 0023:0xf7f65549 [ 2269.293061][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2269.312669][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2269.321113][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2269.329081][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2269.337048][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2269.345025][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2269.352993][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2269.360966][T23346] Uninit was stored to memory at: [ 2269.365994][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2269.371705][T23346] __msan_chain_origin+0x57/0xa0 [ 2269.376629][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2269.381724][T23346] get_compat_msghdr+0x108/0x2b0 [ 2269.386667][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2269.391158][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2269.395821][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.401874][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.408024][T23346] __do_fast_syscall_32+0x129/0x180 [ 2269.413215][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2269.418055][T23346] do_SYSENTER_32+0x73/0x90 [ 2269.422547][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.428848][T23346] [ 2269.431157][T23346] Uninit was stored to memory at: [ 2269.436172][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2269.441889][T23346] __msan_chain_origin+0x57/0xa0 [ 2269.446812][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2269.451909][T23346] get_compat_msghdr+0x108/0x2b0 [ 2269.456832][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2269.461323][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2269.465986][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.472044][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.478184][T23346] __do_fast_syscall_32+0x129/0x180 [ 2269.483368][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2269.488206][T23346] do_SYSENTER_32+0x73/0x90 [ 2269.492698][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.498998][T23346] [ 2269.501309][T23346] Uninit was stored to memory at: [ 2269.506321][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2269.512034][T23346] __msan_chain_origin+0x57/0xa0 [ 2269.516958][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2269.522055][T23346] get_compat_msghdr+0x108/0x2b0 [ 2269.526978][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2269.531471][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2269.536141][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.542197][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.548353][T23346] __do_fast_syscall_32+0x129/0x180 [ 2269.553536][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2269.558389][T23346] do_SYSENTER_32+0x73/0x90 [ 2269.562928][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.569238][T23346] [ 2269.571551][T23346] Uninit was stored to memory at: [ 2269.576570][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2269.582275][T23346] __msan_chain_origin+0x57/0xa0 [ 2269.587200][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2269.592299][T23346] get_compat_msghdr+0x108/0x2b0 [ 2269.597224][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2269.601715][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2269.606380][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.612434][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.618577][T23346] __do_fast_syscall_32+0x129/0x180 [ 2269.623774][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2269.628612][T23346] do_SYSENTER_32+0x73/0x90 [ 2269.633105][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.639403][T23346] [ 2269.641712][T23346] Uninit was stored to memory at: [ 2269.646731][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2269.652439][T23346] __msan_chain_origin+0x57/0xa0 [ 2269.659445][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2269.664544][T23346] get_compat_msghdr+0x108/0x2b0 [ 2269.669486][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2269.673984][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2269.678648][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.684874][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.691015][T23346] __do_fast_syscall_32+0x129/0x180 [ 2269.696198][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2269.701035][T23346] do_SYSENTER_32+0x73/0x90 [ 2269.705533][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.711835][T23346] [ 2269.714144][T23346] Uninit was stored to memory at: [ 2269.719157][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2269.724979][T23346] __msan_chain_origin+0x57/0xa0 [ 2269.730095][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2269.735192][T23346] get_compat_msghdr+0x108/0x2b0 [ 2269.740118][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2269.744611][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2269.749274][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.755348][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.761488][T23346] __do_fast_syscall_32+0x129/0x180 [ 2269.766681][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2269.771519][T23346] do_SYSENTER_32+0x73/0x90 [ 2269.776016][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.782316][T23346] [ 2269.784623][T23346] Uninit was stored to memory at: [ 2269.789637][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2269.795343][T23346] __msan_chain_origin+0x57/0xa0 [ 2269.800267][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2269.805363][T23346] get_compat_msghdr+0x108/0x2b0 [ 2269.810293][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2269.814786][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2269.819452][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2269.825505][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2269.831652][T23346] __do_fast_syscall_32+0x129/0x180 [ 2269.836836][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2269.841672][T23346] do_SYSENTER_32+0x73/0x90 [ 2269.846163][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2269.852462][T23346] [ 2269.854781][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2269.861447][T23346] do_recvmmsg+0xc2/0x22e0 [ 2269.865865][T23346] do_recvmmsg+0xc2/0x22e0 [ 2269.942651][T23346] not chained 270000 origins [ 2269.947269][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2269.955961][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2269.966028][T23346] Call Trace: [ 2269.969324][T23346] dump_stack+0x21c/0x280 [ 2269.973684][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2269.979447][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2269.984831][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2269.990048][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2269.995693][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2270.001762][T23346] ? _copy_from_user+0x201/0x310 [ 2270.006700][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2270.012425][T23346] __msan_chain_origin+0x57/0xa0 [ 2270.017367][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2270.022484][T23346] get_compat_msghdr+0x108/0x2b0 [ 2270.027437][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2270.031964][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2270.037600][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2270.042892][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2270.047662][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2270.052343][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2270.058144][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2270.063436][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.069508][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.075666][T23346] __do_fast_syscall_32+0x129/0x180 [ 2270.080885][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2270.085741][T23346] do_SYSENTER_32+0x73/0x90 [ 2270.090246][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.096564][T23346] RIP: 0023:0xf7f65549 [ 2270.100634][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2270.120288][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2270.128707][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2270.136702][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2270.144679][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2270.152650][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2270.160615][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2270.168583][T23346] Uninit was stored to memory at: [ 2270.173627][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2270.179382][T23346] __msan_chain_origin+0x57/0xa0 [ 2270.184315][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2270.189420][T23346] get_compat_msghdr+0x108/0x2b0 [ 2270.194357][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2270.198896][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2270.203570][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.209635][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.215785][T23346] __do_fast_syscall_32+0x129/0x180 [ 2270.220979][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2270.225825][T23346] do_SYSENTER_32+0x73/0x90 [ 2270.230328][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.236639][T23346] [ 2270.238954][T23346] Uninit was stored to memory at: [ 2270.243982][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2270.249701][T23346] __msan_chain_origin+0x57/0xa0 [ 2270.254638][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2270.259749][T23346] get_compat_msghdr+0x108/0x2b0 [ 2270.264688][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2270.269194][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2270.273868][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.279931][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.286082][T23346] __do_fast_syscall_32+0x129/0x180 [ 2270.291277][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2270.296128][T23346] do_SYSENTER_32+0x73/0x90 [ 2270.300625][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.306926][T23346] [ 2270.309239][T23346] Uninit was stored to memory at: [ 2270.314255][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2270.319960][T23346] __msan_chain_origin+0x57/0xa0 [ 2270.324899][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2270.329997][T23346] get_compat_msghdr+0x108/0x2b0 [ 2270.334929][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2270.339418][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2270.344081][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.350132][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.356274][T23346] __do_fast_syscall_32+0x129/0x180 [ 2270.361458][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2270.366294][T23346] do_SYSENTER_32+0x73/0x90 [ 2270.370785][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.377100][T23346] [ 2270.379408][T23346] Uninit was stored to memory at: [ 2270.384419][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2270.390137][T23346] __msan_chain_origin+0x57/0xa0 [ 2270.395059][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2270.400155][T23346] get_compat_msghdr+0x108/0x2b0 [ 2270.405082][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2270.409572][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2270.414237][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.420289][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.426430][T23346] __do_fast_syscall_32+0x129/0x180 [ 2270.431613][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2270.436466][T23346] do_SYSENTER_32+0x73/0x90 [ 2270.440968][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.447270][T23346] [ 2270.449600][T23346] Uninit was stored to memory at: [ 2270.454615][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2270.460321][T23346] __msan_chain_origin+0x57/0xa0 [ 2270.465247][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2270.470347][T23346] get_compat_msghdr+0x108/0x2b0 [ 2270.475272][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2270.480195][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2270.484861][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.490930][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.497096][T23346] __do_fast_syscall_32+0x129/0x180 [ 2270.502293][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2270.507136][T23346] do_SYSENTER_32+0x73/0x90 [ 2270.511628][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.517929][T23346] [ 2270.520238][T23346] Uninit was stored to memory at: [ 2270.526209][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2270.531917][T23346] __msan_chain_origin+0x57/0xa0 [ 2270.536982][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2270.542091][T23346] get_compat_msghdr+0x108/0x2b0 [ 2270.547026][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2270.551536][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2270.556231][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.562302][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.568449][T23346] __do_fast_syscall_32+0x129/0x180 [ 2270.573639][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2270.579523][T23346] do_SYSENTER_32+0x73/0x90 [ 2270.584015][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.590491][T23346] [ 2270.592802][T23346] Uninit was stored to memory at: [ 2270.597825][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2270.603533][T23346] __msan_chain_origin+0x57/0xa0 [ 2270.608457][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2270.614078][T23346] get_compat_msghdr+0x108/0x2b0 [ 2270.619021][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2270.623724][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2270.628392][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2270.634468][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2270.640614][T23346] __do_fast_syscall_32+0x129/0x180 [ 2270.645821][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2270.650660][T23346] do_SYSENTER_32+0x73/0x90 [ 2270.655175][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2270.661580][T23346] [ 2270.663993][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2270.670682][T23346] do_recvmmsg+0xc2/0x22e0 [ 2270.675101][T23346] do_recvmmsg+0xc2/0x22e0 [ 2270.906870][T23346] not chained 280000 origins [ 2270.911501][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2270.920163][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2270.930207][T23346] Call Trace: [ 2270.933502][T23346] dump_stack+0x21c/0x280 [ 2270.937835][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2270.943556][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2270.948935][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2270.954140][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2270.959773][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2270.965838][T23346] ? _copy_from_user+0x201/0x310 [ 2270.970769][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2270.975961][T23346] __msan_chain_origin+0x57/0xa0 [ 2270.980974][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2270.987032][T23346] get_compat_msghdr+0x108/0x2b0 [ 2270.991963][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2270.996469][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2271.002094][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2271.007375][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2271.012135][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2271.016807][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2271.022602][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2271.027790][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.033853][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.040013][T23346] __do_fast_syscall_32+0x129/0x180 [ 2271.045202][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2271.050050][T23346] do_SYSENTER_32+0x73/0x90 [ 2271.054547][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.060861][T23346] RIP: 0023:0xf7f65549 [ 2271.064920][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2271.084608][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2271.093211][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2271.101177][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2271.109598][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2271.117559][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2271.125519][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2271.133480][T23346] Uninit was stored to memory at: [ 2271.138503][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2271.144215][T23346] __msan_chain_origin+0x57/0xa0 [ 2271.149145][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2271.154251][T23346] get_compat_msghdr+0x108/0x2b0 [ 2271.159180][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2271.163674][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2271.168340][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.174396][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.180541][T23346] __do_fast_syscall_32+0x129/0x180 [ 2271.185728][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2271.190653][T23346] do_SYSENTER_32+0x73/0x90 [ 2271.195147][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.201450][T23346] [ 2271.203773][T23346] Uninit was stored to memory at: [ 2271.208791][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2271.214500][T23346] __msan_chain_origin+0x57/0xa0 [ 2271.219426][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2271.224536][T23346] get_compat_msghdr+0x108/0x2b0 [ 2271.229469][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2271.233974][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2271.238665][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.244728][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.250876][T23346] __do_fast_syscall_32+0x129/0x180 [ 2271.256065][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2271.260904][T23346] do_SYSENTER_32+0x73/0x90 [ 2271.265400][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.271725][T23346] [ 2271.274039][T23346] Uninit was stored to memory at: [ 2271.279163][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2271.284874][T23346] __msan_chain_origin+0x57/0xa0 [ 2271.289798][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2271.294897][T23346] get_compat_msghdr+0x108/0x2b0 [ 2271.299824][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2271.304320][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2271.308988][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.315049][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.321192][T23346] __do_fast_syscall_32+0x129/0x180 [ 2271.326383][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2271.331224][T23346] do_SYSENTER_32+0x73/0x90 [ 2271.335717][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.342018][T23346] [ 2271.344336][T23346] Uninit was stored to memory at: [ 2271.349355][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2271.355086][T23346] __msan_chain_origin+0x57/0xa0 [ 2271.360012][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2271.365111][T23346] get_compat_msghdr+0x108/0x2b0 [ 2271.370039][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2271.374533][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2271.379199][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.385255][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.391416][T23346] __do_fast_syscall_32+0x129/0x180 [ 2271.396602][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2271.401442][T23346] do_SYSENTER_32+0x73/0x90 [ 2271.405934][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.412237][T23346] [ 2271.414549][T23346] Uninit was stored to memory at: [ 2271.419564][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2271.425275][T23346] __msan_chain_origin+0x57/0xa0 [ 2271.430209][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2271.435308][T23346] get_compat_msghdr+0x108/0x2b0 [ 2271.440234][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2271.444814][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2271.449482][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.455538][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.461691][T23346] __do_fast_syscall_32+0x129/0x180 [ 2271.466877][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2271.471718][T23346] do_SYSENTER_32+0x73/0x90 [ 2271.476221][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.482524][T23346] [ 2271.484832][T23346] Uninit was stored to memory at: [ 2271.489850][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2271.495561][T23346] __msan_chain_origin+0x57/0xa0 [ 2271.500488][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2271.505587][T23346] get_compat_msghdr+0x108/0x2b0 [ 2271.510531][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2271.515040][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2271.519719][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.525788][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.531936][T23346] __do_fast_syscall_32+0x129/0x180 [ 2271.537132][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2271.541970][T23346] do_SYSENTER_32+0x73/0x90 [ 2271.546462][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.552782][T23346] [ 2271.555103][T23346] Uninit was stored to memory at: [ 2271.560140][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2271.565863][T23346] __msan_chain_origin+0x57/0xa0 [ 2271.570792][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2271.575895][T23346] get_compat_msghdr+0x108/0x2b0 [ 2271.580825][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2271.585322][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2271.589988][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.596044][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.602190][T23346] __do_fast_syscall_32+0x129/0x180 [ 2271.607378][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2271.612232][T23346] do_SYSENTER_32+0x73/0x90 [ 2271.616725][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.623028][T23346] [ 2271.625356][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2271.632019][T23346] do_recvmmsg+0xc2/0x22e0 [ 2271.636426][T23346] do_recvmmsg+0xc2/0x22e0 [ 2271.821424][T23346] not chained 290000 origins [ 2271.826320][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2271.834988][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2271.845041][T23346] Call Trace: [ 2271.848339][T23346] dump_stack+0x21c/0x280 [ 2271.852680][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2271.858400][T23346] ? irqentry_exit+0x12/0x50 [ 2271.862997][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2271.868203][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2271.873846][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2271.879914][T23346] ? _copy_from_user+0x201/0x310 [ 2271.884876][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2271.890085][T23346] __msan_chain_origin+0x57/0xa0 [ 2271.895031][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2271.900152][T23346] get_compat_msghdr+0x108/0x2b0 [ 2271.905139][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2271.909668][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2271.915311][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2271.920607][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2271.925378][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2271.930060][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2271.935869][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2271.941074][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2271.947148][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2271.953309][T23346] __do_fast_syscall_32+0x129/0x180 [ 2271.958510][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2271.963362][T23346] do_SYSENTER_32+0x73/0x90 [ 2271.967868][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2271.974192][T23346] RIP: 0023:0xf7f65549 [ 2271.978262][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2271.997867][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2272.006282][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2272.014255][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2272.022223][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2272.030186][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2272.038153][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2272.046206][T23346] Uninit was stored to memory at: [ 2272.051235][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2272.056953][T23346] __msan_chain_origin+0x57/0xa0 [ 2272.061883][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2272.066980][T23346] get_compat_msghdr+0x108/0x2b0 [ 2272.071909][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2272.076485][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2272.081166][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.087220][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.093359][T23346] __do_fast_syscall_32+0x129/0x180 [ 2272.098544][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2272.103378][T23346] do_SYSENTER_32+0x73/0x90 [ 2272.107869][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.114168][T23346] [ 2272.116484][T23346] Uninit was stored to memory at: [ 2272.121521][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2272.127236][T23346] __msan_chain_origin+0x57/0xa0 [ 2272.132171][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2272.137275][T23346] get_compat_msghdr+0x108/0x2b0 [ 2272.142206][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2272.146698][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2272.151361][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.159585][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.165727][T23346] __do_fast_syscall_32+0x129/0x180 [ 2272.170912][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2272.175748][T23346] do_SYSENTER_32+0x73/0x90 [ 2272.180237][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.188269][T23346] [ 2272.190586][T23346] Uninit was stored to memory at: [ 2272.195611][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2272.201331][T23346] __msan_chain_origin+0x57/0xa0 [ 2272.206264][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2272.211363][T23346] get_compat_msghdr+0x108/0x2b0 [ 2272.216290][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2272.220781][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2272.225450][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.231601][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.237881][T23346] __do_fast_syscall_32+0x129/0x180 [ 2272.243091][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2272.247933][T23346] do_SYSENTER_32+0x73/0x90 [ 2272.252464][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.258866][T23346] [ 2272.261182][T23346] Uninit was stored to memory at: [ 2272.266201][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2272.271913][T23346] __msan_chain_origin+0x57/0xa0 [ 2272.276840][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2272.281938][T23346] get_compat_msghdr+0x108/0x2b0 [ 2272.286875][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2272.291369][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2272.296059][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.302127][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.308275][T23346] __do_fast_syscall_32+0x129/0x180 [ 2272.313460][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2272.318299][T23346] do_SYSENTER_32+0x73/0x90 [ 2272.322793][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.329097][T23346] [ 2272.331407][T23346] Uninit was stored to memory at: [ 2272.336421][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2272.342130][T23346] __msan_chain_origin+0x57/0xa0 [ 2272.347055][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2272.352175][T23346] get_compat_msghdr+0x108/0x2b0 [ 2272.357099][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2272.361591][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2272.366255][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.372347][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.378500][T23346] __do_fast_syscall_32+0x129/0x180 [ 2272.383694][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2272.388538][T23346] do_SYSENTER_32+0x73/0x90 [ 2272.393034][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.399337][T23346] [ 2272.401659][T23346] Uninit was stored to memory at: [ 2272.406708][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2272.412418][T23346] __msan_chain_origin+0x57/0xa0 [ 2272.417342][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2272.422438][T23346] get_compat_msghdr+0x108/0x2b0 [ 2272.427362][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2272.431852][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2272.436516][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.442582][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.448723][T23346] __do_fast_syscall_32+0x129/0x180 [ 2272.453908][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2272.458745][T23346] do_SYSENTER_32+0x73/0x90 [ 2272.463238][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.469540][T23346] [ 2272.471852][T23346] Uninit was stored to memory at: [ 2272.476866][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2272.482587][T23346] __msan_chain_origin+0x57/0xa0 [ 2272.487511][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2272.492609][T23346] get_compat_msghdr+0x108/0x2b0 [ 2272.497550][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2272.502066][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2272.506746][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.512899][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.519048][T23346] __do_fast_syscall_32+0x129/0x180 [ 2272.524237][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2272.529078][T23346] do_SYSENTER_32+0x73/0x90 [ 2272.533572][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.539874][T23346] [ 2272.542186][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2272.548869][T23346] do_recvmmsg+0xc2/0x22e0 [ 2272.553296][T23346] do_recvmmsg+0xc2/0x22e0 [ 2272.696452][T23346] not chained 300000 origins [ 2272.701094][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2272.709766][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2272.719823][T23346] Call Trace: [ 2272.723128][T23346] dump_stack+0x21c/0x280 [ 2272.727469][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2272.733287][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2272.738678][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2272.743896][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2272.749543][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2272.755622][T23346] ? _copy_from_user+0x201/0x310 [ 2272.760564][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2272.765763][T23346] __msan_chain_origin+0x57/0xa0 [ 2272.770737][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2272.775891][T23346] get_compat_msghdr+0x108/0x2b0 [ 2272.780836][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2272.785360][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2272.791096][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2272.796394][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2272.801368][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2272.806082][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2272.811891][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2272.817094][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.823174][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.829333][T23346] __do_fast_syscall_32+0x129/0x180 [ 2272.834539][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2272.839394][T23346] do_SYSENTER_32+0x73/0x90 [ 2272.843993][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.850342][T23346] RIP: 0023:0xf7f65549 [ 2272.854444][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2272.874055][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2272.882472][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2272.890444][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2272.898414][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2272.906383][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2272.914355][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2272.922323][T23346] Uninit was stored to memory at: [ 2272.927357][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2272.933066][T23346] __msan_chain_origin+0x57/0xa0 [ 2272.938079][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2272.943174][T23346] get_compat_msghdr+0x108/0x2b0 [ 2272.948102][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2272.952594][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2272.957271][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2272.963343][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2272.969496][T23346] __do_fast_syscall_32+0x129/0x180 [ 2272.974691][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2272.979553][T23346] do_SYSENTER_32+0x73/0x90 [ 2272.984068][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2272.990373][T23346] [ 2272.992684][T23346] Uninit was stored to memory at: [ 2272.997704][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2273.003412][T23346] __msan_chain_origin+0x57/0xa0 [ 2273.008359][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2273.013456][T23346] get_compat_msghdr+0x108/0x2b0 [ 2273.018383][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2273.022875][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2273.027541][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.033595][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.039740][T23346] __do_fast_syscall_32+0x129/0x180 [ 2273.044930][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2273.049769][T23346] do_SYSENTER_32+0x73/0x90 [ 2273.054263][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.060564][T23346] [ 2273.062876][T23346] Uninit was stored to memory at: [ 2273.067909][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2273.073618][T23346] __msan_chain_origin+0x57/0xa0 [ 2273.078542][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2273.083666][T23346] get_compat_msghdr+0x108/0x2b0 [ 2273.088598][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2273.093090][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2273.097757][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.103832][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.109974][T23346] __do_fast_syscall_32+0x129/0x180 [ 2273.115163][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2273.120012][T23346] do_SYSENTER_32+0x73/0x90 [ 2273.124508][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.130815][T23346] [ 2273.133127][T23346] Uninit was stored to memory at: [ 2273.138142][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2273.143850][T23346] __msan_chain_origin+0x57/0xa0 [ 2273.148778][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2273.154571][T23346] get_compat_msghdr+0x108/0x2b0 [ 2273.159495][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2273.163984][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2273.168646][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.174699][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.180843][T23346] __do_fast_syscall_32+0x129/0x180 [ 2273.186052][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2273.190903][T23346] do_SYSENTER_32+0x73/0x90 [ 2273.195395][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.201696][T23346] [ 2273.204006][T23346] Uninit was stored to memory at: [ 2273.209034][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2273.214747][T23346] __msan_chain_origin+0x57/0xa0 [ 2273.219670][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2273.224766][T23346] get_compat_msghdr+0x108/0x2b0 [ 2273.229690][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2273.234179][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2273.238845][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.244916][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.251061][T23346] __do_fast_syscall_32+0x129/0x180 [ 2273.256251][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2273.261106][T23346] do_SYSENTER_32+0x73/0x90 [ 2273.265600][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.271912][T23346] [ 2273.274218][T23346] Uninit was stored to memory at: [ 2273.279232][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2273.284940][T23346] __msan_chain_origin+0x57/0xa0 [ 2273.289864][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2273.294959][T23346] get_compat_msghdr+0x108/0x2b0 [ 2273.299883][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2273.304374][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2273.309041][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.315096][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.321237][T23346] __do_fast_syscall_32+0x129/0x180 [ 2273.326422][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2273.331260][T23346] do_SYSENTER_32+0x73/0x90 [ 2273.335750][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.342058][T23346] [ 2273.344365][T23346] Uninit was stored to memory at: [ 2273.349378][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2273.355086][T23346] __msan_chain_origin+0x57/0xa0 [ 2273.360010][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2273.365109][T23346] get_compat_msghdr+0x108/0x2b0 [ 2273.370051][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2273.374540][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2273.379202][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.385254][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.391394][T23346] __do_fast_syscall_32+0x129/0x180 [ 2273.396577][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2273.401414][T23346] do_SYSENTER_32+0x73/0x90 [ 2273.405907][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.412313][T23346] [ 2273.414637][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2273.421298][T23346] do_recvmmsg+0xc2/0x22e0 [ 2273.425702][T23346] do_recvmmsg+0xc2/0x22e0 [ 2273.563211][T23344] not chained 310000 origins [ 2273.567835][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2273.576517][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2273.586586][T23344] Call Trace: [ 2273.589883][T23344] dump_stack+0x21c/0x280 [ 2273.594239][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2273.599959][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2273.605331][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2273.610537][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2273.616171][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2273.622237][T23344] ? _copy_from_user+0x201/0x310 [ 2273.627168][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2273.632356][T23344] __msan_chain_origin+0x57/0xa0 [ 2273.637279][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2273.642380][T23344] get_compat_msghdr+0x108/0x2b0 [ 2273.647307][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2273.652409][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2273.657620][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2273.663239][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2273.668511][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2273.673265][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2273.677941][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2273.683742][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2273.688943][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.695017][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.701191][T23344] __do_fast_syscall_32+0x129/0x180 [ 2273.706382][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2273.711223][T23344] do_SYSENTER_32+0x73/0x90 [ 2273.715732][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.722054][T23344] RIP: 0023:0xf7f65549 [ 2273.726116][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2273.745731][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2273.754147][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2273.762103][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2273.770059][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2273.778015][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2273.786002][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2273.793960][T23344] Uninit was stored to memory at: [ 2273.798980][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2273.804684][T23344] __msan_chain_origin+0x57/0xa0 [ 2273.809621][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2273.814718][T23344] get_compat_msghdr+0x108/0x2b0 [ 2273.819648][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2273.824139][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2273.828802][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.834852][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.840992][T23344] __do_fast_syscall_32+0x129/0x180 [ 2273.846173][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2273.851040][T23344] do_SYSENTER_32+0x73/0x90 [ 2273.855531][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.861832][T23344] [ 2273.864139][T23344] Uninit was stored to memory at: [ 2273.869151][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2273.874858][T23344] __msan_chain_origin+0x57/0xa0 [ 2273.879780][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2273.884874][T23344] get_compat_msghdr+0x108/0x2b0 [ 2273.889796][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2273.894288][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2273.898950][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.905000][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.911148][T23344] __do_fast_syscall_32+0x129/0x180 [ 2273.916333][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2273.921171][T23344] do_SYSENTER_32+0x73/0x90 [ 2273.925662][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2273.931962][T23344] [ 2273.934270][T23344] Uninit was stored to memory at: [ 2273.939280][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2273.944985][T23344] __msan_chain_origin+0x57/0xa0 [ 2273.949908][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2273.955003][T23344] get_compat_msghdr+0x108/0x2b0 [ 2273.959941][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2273.964432][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2273.969094][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2273.975148][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2273.981289][T23344] __do_fast_syscall_32+0x129/0x180 [ 2273.986473][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2273.991309][T23344] do_SYSENTER_32+0x73/0x90 [ 2273.995799][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.002097][T23344] [ 2274.004404][T23344] Uninit was stored to memory at: [ 2274.009416][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2274.015136][T23344] __msan_chain_origin+0x57/0xa0 [ 2274.020056][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2274.025153][T23344] get_compat_msghdr+0x108/0x2b0 [ 2274.030088][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2274.034577][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2274.039240][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.045293][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.051432][T23344] __do_fast_syscall_32+0x129/0x180 [ 2274.056613][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2274.061449][T23344] do_SYSENTER_32+0x73/0x90 [ 2274.065944][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.072244][T23344] [ 2274.074552][T23344] Uninit was stored to memory at: [ 2274.079565][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2274.085272][T23344] __msan_chain_origin+0x57/0xa0 [ 2274.090199][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2274.095294][T23344] get_compat_msghdr+0x108/0x2b0 [ 2274.100217][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2274.104706][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2274.109369][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.115423][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.121563][T23344] __do_fast_syscall_32+0x129/0x180 [ 2274.126748][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2274.131671][T23344] do_SYSENTER_32+0x73/0x90 [ 2274.136160][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.142464][T23344] [ 2274.144770][T23344] Uninit was stored to memory at: [ 2274.149793][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2274.155501][T23344] __msan_chain_origin+0x57/0xa0 [ 2274.160423][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2274.165534][T23344] get_compat_msghdr+0x108/0x2b0 [ 2274.170456][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2274.174944][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2274.179607][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.185660][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.191801][T23344] __do_fast_syscall_32+0x129/0x180 [ 2274.196984][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2274.201820][T23344] do_SYSENTER_32+0x73/0x90 [ 2274.206324][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.212624][T23344] [ 2274.214943][T23344] Uninit was stored to memory at: [ 2274.219953][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2274.225658][T23344] __msan_chain_origin+0x57/0xa0 [ 2274.230596][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2274.235691][T23344] get_compat_msghdr+0x108/0x2b0 [ 2274.240615][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2274.245107][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2274.249771][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.255824][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.261977][T23344] __do_fast_syscall_32+0x129/0x180 [ 2274.267161][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2274.272009][T23344] do_SYSENTER_32+0x73/0x90 [ 2274.276497][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.282795][T23344] [ 2274.285106][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2274.291764][T23344] do_recvmmsg+0xc2/0x22e0 [ 2274.296165][T23344] do_recvmmsg+0xc2/0x22e0 [ 2274.419340][T23346] not chained 320000 origins [ 2274.423969][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2274.432640][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2274.442695][T23346] Call Trace: [ 2274.445989][T23346] dump_stack+0x21c/0x280 [ 2274.450325][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2274.456060][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2274.461440][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2274.466640][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2274.472278][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2274.478345][T23346] ? _copy_from_user+0x201/0x310 [ 2274.483287][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2274.488495][T23346] __msan_chain_origin+0x57/0xa0 [ 2274.493537][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2274.498655][T23346] get_compat_msghdr+0x108/0x2b0 [ 2274.503597][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2274.508159][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2274.513797][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2274.519081][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2274.523850][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2274.528558][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2274.534364][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2274.539564][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.545640][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.551814][T23346] __do_fast_syscall_32+0x129/0x180 [ 2274.557021][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2274.561880][T23346] do_SYSENTER_32+0x73/0x90 [ 2274.566394][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.572714][T23346] RIP: 0023:0xf7f65549 [ 2274.576786][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2274.596650][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2274.605065][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2274.613038][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2274.621012][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2274.629008][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2274.636981][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2274.644984][T23346] Uninit was stored to memory at: [ 2274.650017][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2274.655741][T23346] __msan_chain_origin+0x57/0xa0 [ 2274.660675][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2274.665788][T23346] get_compat_msghdr+0x108/0x2b0 [ 2274.670727][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2274.675236][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2274.679913][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.685989][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.692156][T23346] __do_fast_syscall_32+0x129/0x180 [ 2274.697358][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2274.702237][T23346] do_SYSENTER_32+0x73/0x90 [ 2274.706743][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.713051][T23346] [ 2274.715378][T23346] Uninit was stored to memory at: [ 2274.720406][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2274.726134][T23346] __msan_chain_origin+0x57/0xa0 [ 2274.731081][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2274.736200][T23346] get_compat_msghdr+0x108/0x2b0 [ 2274.741140][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2274.745646][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2274.750325][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.756395][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.762554][T23346] __do_fast_syscall_32+0x129/0x180 [ 2274.767772][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2274.772625][T23346] do_SYSENTER_32+0x73/0x90 [ 2274.777129][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.783440][T23346] [ 2274.785761][T23346] Uninit was stored to memory at: [ 2274.790793][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2274.796514][T23346] __msan_chain_origin+0x57/0xa0 [ 2274.801448][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2274.806554][T23346] get_compat_msghdr+0x108/0x2b0 [ 2274.811492][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2274.816008][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2274.820684][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.826759][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.832914][T23346] __do_fast_syscall_32+0x129/0x180 [ 2274.838109][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2274.842958][T23346] do_SYSENTER_32+0x73/0x90 [ 2274.847494][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.853806][T23346] [ 2274.856125][T23346] Uninit was stored to memory at: [ 2274.861153][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2274.866879][T23346] __msan_chain_origin+0x57/0xa0 [ 2274.871821][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2274.876929][T23346] get_compat_msghdr+0x108/0x2b0 [ 2274.881865][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2274.886367][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2274.891044][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.897113][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.903264][T23346] __do_fast_syscall_32+0x129/0x180 [ 2274.908460][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2274.913309][T23346] do_SYSENTER_32+0x73/0x90 [ 2274.917815][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.924126][T23346] [ 2274.926441][T23346] Uninit was stored to memory at: [ 2274.931470][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2274.937208][T23346] __msan_chain_origin+0x57/0xa0 [ 2274.942147][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2274.947259][T23346] get_compat_msghdr+0x108/0x2b0 [ 2274.952201][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2274.956704][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2274.961418][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2274.967498][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2274.973653][T23346] __do_fast_syscall_32+0x129/0x180 [ 2274.978885][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2274.983735][T23346] do_SYSENTER_32+0x73/0x90 [ 2274.988247][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2274.994556][T23346] [ 2274.996873][T23346] Uninit was stored to memory at: [ 2275.001902][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2275.007622][T23346] __msan_chain_origin+0x57/0xa0 [ 2275.012558][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2275.017668][T23346] get_compat_msghdr+0x108/0x2b0 [ 2275.022610][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2275.027113][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2275.031791][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.037860][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.044018][T23346] __do_fast_syscall_32+0x129/0x180 [ 2275.049222][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2275.054071][T23346] do_SYSENTER_32+0x73/0x90 [ 2275.058599][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.064911][T23346] [ 2275.067228][T23346] Uninit was stored to memory at: [ 2275.072258][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2275.077981][T23346] __msan_chain_origin+0x57/0xa0 [ 2275.082914][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2275.088029][T23346] get_compat_msghdr+0x108/0x2b0 [ 2275.092968][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2275.097468][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2275.102163][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.108232][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.114390][T23346] __do_fast_syscall_32+0x129/0x180 [ 2275.119589][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2275.124437][T23346] do_SYSENTER_32+0x73/0x90 [ 2275.128942][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.135252][T23346] [ 2275.137570][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2275.144250][T23346] do_recvmmsg+0xc2/0x22e0 [ 2275.148670][T23346] do_recvmmsg+0xc2/0x22e0 [ 2275.252931][T23344] not chained 330000 origins [ 2275.257558][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2275.266221][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2275.276249][T23344] Call Trace: [ 2275.279523][T23344] dump_stack+0x21c/0x280 [ 2275.283834][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2275.289528][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2275.294877][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2275.300499][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2275.306109][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2275.312173][T23344] ? _copy_from_user+0x201/0x310 [ 2275.317087][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2275.322264][T23344] __msan_chain_origin+0x57/0xa0 [ 2275.327180][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2275.332273][T23344] get_compat_msghdr+0x108/0x2b0 [ 2275.337190][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2275.341669][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2275.346869][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2275.352487][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2275.357750][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2275.362492][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2275.367159][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2275.372937][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2275.378127][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.384186][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.390315][T23344] __do_fast_syscall_32+0x129/0x180 [ 2275.395493][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2275.400320][T23344] do_SYSENTER_32+0x73/0x90 [ 2275.405062][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.411376][T23344] RIP: 0023:0xf7f65549 [ 2275.415419][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2275.434999][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2275.443471][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2275.451429][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2275.459391][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2275.467357][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2275.475323][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2275.483286][T23344] Uninit was stored to memory at: [ 2275.488294][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2275.494053][T23344] __msan_chain_origin+0x57/0xa0 [ 2275.498984][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2275.504127][T23344] get_compat_msghdr+0x108/0x2b0 [ 2275.509045][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2275.513550][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2275.518203][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.524250][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.530389][T23344] __do_fast_syscall_32+0x129/0x180 [ 2275.535580][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2275.540413][T23344] do_SYSENTER_32+0x73/0x90 [ 2275.544904][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.551205][T23344] [ 2275.553517][T23344] Uninit was stored to memory at: [ 2275.558537][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2275.564268][T23344] __msan_chain_origin+0x57/0xa0 [ 2275.569184][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2275.574270][T23344] get_compat_msghdr+0x108/0x2b0 [ 2275.579183][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2275.583664][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2275.588315][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.594356][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.600498][T23344] __do_fast_syscall_32+0x129/0x180 [ 2275.605671][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2275.610495][T23344] do_SYSENTER_32+0x73/0x90 [ 2275.614973][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.621279][T23344] [ 2275.623586][T23344] Uninit was stored to memory at: [ 2275.628587][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2275.634283][T23344] __msan_chain_origin+0x57/0xa0 [ 2275.639215][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2275.644301][T23344] get_compat_msghdr+0x108/0x2b0 [ 2275.649228][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2275.653794][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2275.658456][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.664500][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.672231][T23344] __do_fast_syscall_32+0x129/0x180 [ 2275.677418][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2275.682242][T23344] do_SYSENTER_32+0x73/0x90 [ 2275.686721][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.693024][T23344] [ 2275.695342][T23344] Uninit was stored to memory at: [ 2275.700359][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2275.706072][T23344] __msan_chain_origin+0x57/0xa0 [ 2275.710991][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2275.716196][T23344] get_compat_msghdr+0x108/0x2b0 [ 2275.721162][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2275.725655][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2275.730319][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.736368][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.742502][T23344] __do_fast_syscall_32+0x129/0x180 [ 2275.747676][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2275.752503][T23344] do_SYSENTER_32+0x73/0x90 [ 2275.757023][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.763331][T23344] [ 2275.765706][T23344] Uninit was stored to memory at: [ 2275.770729][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2275.776445][T23344] __msan_chain_origin+0x57/0xa0 [ 2275.781379][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2275.786463][T23344] get_compat_msghdr+0x108/0x2b0 [ 2275.791375][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2275.795853][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2275.800503][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.806544][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.812676][T23344] __do_fast_syscall_32+0x129/0x180 [ 2275.817846][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2275.822735][T23344] do_SYSENTER_32+0x73/0x90 [ 2275.827243][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.833542][T23344] [ 2275.835843][T23344] Uninit was stored to memory at: [ 2275.840859][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2275.846562][T23344] __msan_chain_origin+0x57/0xa0 [ 2275.851474][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2275.856557][T23344] get_compat_msghdr+0x108/0x2b0 [ 2275.861514][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2275.866006][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2275.870657][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.876699][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.883002][T23344] __do_fast_syscall_32+0x129/0x180 [ 2275.888175][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2275.893013][T23344] do_SYSENTER_32+0x73/0x90 [ 2275.897491][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.903782][T23344] [ 2275.906080][T23344] Uninit was stored to memory at: [ 2275.911085][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2275.916779][T23344] __msan_chain_origin+0x57/0xa0 [ 2275.921691][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2275.926774][T23344] get_compat_msghdr+0x108/0x2b0 [ 2275.931686][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2275.936162][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2275.940823][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2275.946874][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2275.953004][T23344] __do_fast_syscall_32+0x129/0x180 [ 2275.958173][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2275.963013][T23344] do_SYSENTER_32+0x73/0x90 [ 2275.967513][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2275.973808][T23344] [ 2275.976111][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2275.982765][T23344] do_recvmmsg+0xc2/0x22e0 [ 2275.987166][T23344] do_recvmmsg+0xc2/0x22e0 [ 2276.178594][T23346] not chained 340000 origins [ 2276.183217][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2276.191876][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2276.201915][T23346] Call Trace: [ 2276.205201][T23346] dump_stack+0x21c/0x280 [ 2276.209525][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2276.215237][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2276.220686][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2276.225875][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2276.231499][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2276.237559][T23346] ? _copy_from_user+0x201/0x310 [ 2276.242483][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2276.247671][T23346] __msan_chain_origin+0x57/0xa0 [ 2276.252597][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2276.257698][T23346] get_compat_msghdr+0x108/0x2b0 [ 2276.262626][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2276.267134][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2276.272779][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2276.278054][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2276.282807][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2276.287474][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2276.293264][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2276.298453][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.304512][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.310654][T23346] __do_fast_syscall_32+0x129/0x180 [ 2276.315847][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2276.320687][T23346] do_SYSENTER_32+0x73/0x90 [ 2276.325195][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.331506][T23346] RIP: 0023:0xf7f65549 [ 2276.335565][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2276.355158][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2276.363562][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2276.371519][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2276.379481][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2276.387437][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2276.395396][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2276.403354][T23346] Uninit was stored to memory at: [ 2276.408373][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2276.414099][T23346] __msan_chain_origin+0x57/0xa0 [ 2276.419024][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2276.424119][T23346] get_compat_msghdr+0x108/0x2b0 [ 2276.429043][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2276.433551][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2276.438215][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.444271][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.450427][T23346] __do_fast_syscall_32+0x129/0x180 [ 2276.455959][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2276.460816][T23346] do_SYSENTER_32+0x73/0x90 [ 2276.465316][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.471616][T23346] [ 2276.473924][T23346] Uninit was stored to memory at: [ 2276.478937][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2276.484645][T23346] __msan_chain_origin+0x57/0xa0 [ 2276.489571][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2276.494669][T23346] get_compat_msghdr+0x108/0x2b0 [ 2276.499601][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2276.504100][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2276.508763][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.514817][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.520959][T23346] __do_fast_syscall_32+0x129/0x180 [ 2276.526143][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2276.531010][T23346] do_SYSENTER_32+0x73/0x90 [ 2276.535515][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.541817][T23346] [ 2276.544136][T23346] Uninit was stored to memory at: [ 2276.549170][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2276.554895][T23346] __msan_chain_origin+0x57/0xa0 [ 2276.559824][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2276.564923][T23346] get_compat_msghdr+0x108/0x2b0 [ 2276.569850][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2276.574341][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2276.579006][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.585059][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.591218][T23346] __do_fast_syscall_32+0x129/0x180 [ 2276.596402][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2276.601241][T23346] do_SYSENTER_32+0x73/0x90 [ 2276.606440][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.612750][T23346] [ 2276.615058][T23346] Uninit was stored to memory at: [ 2276.620073][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2276.625781][T23346] __msan_chain_origin+0x57/0xa0 [ 2276.630703][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2276.635799][T23346] get_compat_msghdr+0x108/0x2b0 [ 2276.640745][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2276.645239][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2276.650031][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.656093][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.662247][T23346] __do_fast_syscall_32+0x129/0x180 [ 2276.667436][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2276.672274][T23346] do_SYSENTER_32+0x73/0x90 [ 2276.676765][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.683065][T23346] [ 2276.685372][T23346] Uninit was stored to memory at: [ 2276.690384][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2276.696101][T23346] __msan_chain_origin+0x57/0xa0 [ 2276.701027][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2276.706122][T23346] get_compat_msghdr+0x108/0x2b0 [ 2276.711061][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2276.715549][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2276.720216][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.726287][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.732438][T23346] __do_fast_syscall_32+0x129/0x180 [ 2276.737646][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2276.742485][T23346] do_SYSENTER_32+0x73/0x90 [ 2276.746977][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.753277][T23346] [ 2276.755588][T23346] Uninit was stored to memory at: [ 2276.760603][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2276.766311][T23346] __msan_chain_origin+0x57/0xa0 [ 2276.771234][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2276.776330][T23346] get_compat_msghdr+0x108/0x2b0 [ 2276.781262][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2276.785751][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2276.790412][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.796465][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.802605][T23346] __do_fast_syscall_32+0x129/0x180 [ 2276.807796][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2276.812634][T23346] do_SYSENTER_32+0x73/0x90 [ 2276.817122][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.823431][T23346] [ 2276.825739][T23346] Uninit was stored to memory at: [ 2276.830751][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2276.836455][T23346] __msan_chain_origin+0x57/0xa0 [ 2276.841378][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2276.846495][T23346] get_compat_msghdr+0x108/0x2b0 [ 2276.851423][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2276.855923][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2276.860587][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2276.866642][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2276.872798][T23346] __do_fast_syscall_32+0x129/0x180 [ 2276.877994][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2276.882845][T23346] do_SYSENTER_32+0x73/0x90 [ 2276.887344][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2276.893648][T23346] [ 2276.895963][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2276.902626][T23346] do_recvmmsg+0xc2/0x22e0 [ 2276.907043][T23346] do_recvmmsg+0xc2/0x22e0 [ 2277.097427][T23346] not chained 350000 origins [ 2277.102049][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2277.110704][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2277.120742][T23346] Call Trace: [ 2277.124030][T23346] dump_stack+0x21c/0x280 [ 2277.128354][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2277.134069][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2277.140124][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2277.145311][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2277.150935][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2277.156991][T23346] ? _copy_from_user+0x201/0x310 [ 2277.161922][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2277.167108][T23346] __msan_chain_origin+0x57/0xa0 [ 2277.172039][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2277.177140][T23346] get_compat_msghdr+0x108/0x2b0 [ 2277.182070][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2277.186574][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2277.192219][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2277.197493][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2277.202250][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2277.206915][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2277.212706][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2277.217892][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.223950][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.230091][T23346] __do_fast_syscall_32+0x129/0x180 [ 2277.235280][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2277.240291][T23346] do_SYSENTER_32+0x73/0x90 [ 2277.244786][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.251093][T23346] RIP: 0023:0xf7f65549 [ 2277.255151][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2277.274741][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2277.283137][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2277.291094][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2277.299233][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2277.307189][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2277.315161][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2277.323120][T23346] Uninit was stored to memory at: [ 2277.328139][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2277.333859][T23346] __msan_chain_origin+0x57/0xa0 [ 2277.338784][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2277.343901][T23346] get_compat_msghdr+0x108/0x2b0 [ 2277.348826][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2277.353317][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2277.357979][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.364034][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.370183][T23346] __do_fast_syscall_32+0x129/0x180 [ 2277.375367][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2277.380202][T23346] do_SYSENTER_32+0x73/0x90 [ 2277.384692][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.391017][T23346] [ 2277.393343][T23346] Uninit was stored to memory at: [ 2277.398355][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2277.404061][T23346] __msan_chain_origin+0x57/0xa0 [ 2277.408985][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2277.414083][T23346] get_compat_msghdr+0x108/0x2b0 [ 2277.419014][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2277.423505][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2277.428344][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.434396][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.440536][T23346] __do_fast_syscall_32+0x129/0x180 [ 2277.445731][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2277.450570][T23346] do_SYSENTER_32+0x73/0x90 [ 2277.455062][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.461364][T23346] [ 2277.463690][T23346] Uninit was stored to memory at: [ 2277.468702][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2277.474421][T23346] __msan_chain_origin+0x57/0xa0 [ 2277.479346][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2277.484443][T23346] get_compat_msghdr+0x108/0x2b0 [ 2277.489385][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2277.493877][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2277.498539][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.504595][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.510736][T23346] __do_fast_syscall_32+0x129/0x180 [ 2277.515930][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2277.520766][T23346] do_SYSENTER_32+0x73/0x90 [ 2277.525257][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.531559][T23346] [ 2277.533864][T23346] Uninit was stored to memory at: [ 2277.538879][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2277.544584][T23346] __msan_chain_origin+0x57/0xa0 [ 2277.549507][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2277.554617][T23346] get_compat_msghdr+0x108/0x2b0 [ 2277.559562][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2277.564062][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2277.568730][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.574785][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.580926][T23346] __do_fast_syscall_32+0x129/0x180 [ 2277.586110][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2277.590947][T23346] do_SYSENTER_32+0x73/0x90 [ 2277.595437][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.601735][T23346] [ 2277.604043][T23346] Uninit was stored to memory at: [ 2277.609071][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2277.614779][T23346] __msan_chain_origin+0x57/0xa0 [ 2277.619702][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2277.624800][T23346] get_compat_msghdr+0x108/0x2b0 [ 2277.629727][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2277.634219][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2277.638888][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.644940][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.651084][T23346] __do_fast_syscall_32+0x129/0x180 [ 2277.656271][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2277.661126][T23346] do_SYSENTER_32+0x73/0x90 [ 2277.665618][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.671919][T23346] [ 2277.674226][T23346] Uninit was stored to memory at: [ 2277.679241][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2277.684948][T23346] __msan_chain_origin+0x57/0xa0 [ 2277.689869][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2277.694963][T23346] get_compat_msghdr+0x108/0x2b0 [ 2277.699892][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2277.704385][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2277.709049][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.715102][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.721245][T23346] __do_fast_syscall_32+0x129/0x180 [ 2277.726452][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2277.731294][T23346] do_SYSENTER_32+0x73/0x90 [ 2277.735788][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.742090][T23346] [ 2277.744421][T23346] Uninit was stored to memory at: [ 2277.749435][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2277.755157][T23346] __msan_chain_origin+0x57/0xa0 [ 2277.760094][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2277.765206][T23346] get_compat_msghdr+0x108/0x2b0 [ 2277.770135][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2277.774631][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2277.779297][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2277.785365][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2277.791507][T23346] __do_fast_syscall_32+0x129/0x180 [ 2277.796690][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2277.801527][T23346] do_SYSENTER_32+0x73/0x90 [ 2277.806018][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2277.812318][T23346] [ 2277.814630][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2277.821292][T23346] do_recvmmsg+0xc2/0x22e0 [ 2277.825709][T23346] do_recvmmsg+0xc2/0x22e0 [ 2278.078788][T23346] not chained 360000 origins [ 2278.083447][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2278.092110][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2278.102180][T23346] Call Trace: [ 2278.105481][T23346] dump_stack+0x21c/0x280 [ 2278.109841][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2278.115567][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2278.120944][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2278.126145][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2278.131780][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2278.137849][T23346] ? _copy_from_user+0x201/0x310 [ 2278.142787][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2278.147985][T23346] __msan_chain_origin+0x57/0xa0 [ 2278.152922][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2278.158036][T23346] get_compat_msghdr+0x108/0x2b0 [ 2278.162977][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2278.167496][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2278.173135][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2278.178419][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2278.183183][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2278.187862][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2278.193704][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2278.198900][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.204971][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.211125][T23346] __do_fast_syscall_32+0x129/0x180 [ 2278.216350][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2278.221202][T23346] do_SYSENTER_32+0x73/0x90 [ 2278.225704][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.232025][T23346] RIP: 0023:0xf7f65549 [ 2278.236092][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2278.255695][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2278.264133][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2278.272103][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2278.280077][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2278.288044][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2278.296022][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2278.304076][T23346] Uninit was stored to memory at: [ 2278.309107][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2278.314854][T23346] __msan_chain_origin+0x57/0xa0 [ 2278.319823][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2278.324933][T23346] get_compat_msghdr+0x108/0x2b0 [ 2278.329872][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2278.334374][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2278.339077][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.345146][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.351300][T23346] __do_fast_syscall_32+0x129/0x180 [ 2278.356511][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2278.361385][T23346] do_SYSENTER_32+0x73/0x90 [ 2278.365889][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.372201][T23346] [ 2278.374519][T23346] Uninit was stored to memory at: [ 2278.379545][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2278.385270][T23346] __msan_chain_origin+0x57/0xa0 [ 2278.390205][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2278.395312][T23346] get_compat_msghdr+0x108/0x2b0 [ 2278.400248][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2278.404751][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2278.409436][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.415530][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.421693][T23346] __do_fast_syscall_32+0x129/0x180 [ 2278.426906][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2278.431755][T23346] do_SYSENTER_32+0x73/0x90 [ 2278.436258][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.442564][T23346] [ 2278.444880][T23346] Uninit was stored to memory at: [ 2278.449933][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2278.455659][T23346] __msan_chain_origin+0x57/0xa0 [ 2278.460596][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2278.465710][T23346] get_compat_msghdr+0x108/0x2b0 [ 2278.470647][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2278.475162][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2278.479861][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.486017][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.492177][T23346] __do_fast_syscall_32+0x129/0x180 [ 2278.497376][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2278.502232][T23346] do_SYSENTER_32+0x73/0x90 [ 2278.506736][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.513076][T23346] [ 2278.515391][T23346] Uninit was stored to memory at: [ 2278.520418][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2278.526148][T23346] __msan_chain_origin+0x57/0xa0 [ 2278.531101][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2278.536251][T23346] get_compat_msghdr+0x108/0x2b0 [ 2278.541211][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2278.545714][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2278.550400][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.556475][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.562661][T23346] __do_fast_syscall_32+0x129/0x180 [ 2278.567860][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2278.572713][T23346] do_SYSENTER_32+0x73/0x90 [ 2278.577247][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.583555][T23346] [ 2278.585899][T23346] Uninit was stored to memory at: [ 2278.590952][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2278.596698][T23346] __msan_chain_origin+0x57/0xa0 [ 2278.601635][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2278.606743][T23346] get_compat_msghdr+0x108/0x2b0 [ 2278.611683][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2278.616183][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2278.620860][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.627014][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.633173][T23346] __do_fast_syscall_32+0x129/0x180 [ 2278.638372][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2278.643219][T23346] do_SYSENTER_32+0x73/0x90 [ 2278.647719][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.654055][T23346] [ 2278.656371][T23346] Uninit was stored to memory at: [ 2278.661402][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2278.667123][T23346] __msan_chain_origin+0x57/0xa0 [ 2278.672066][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2278.677177][T23346] get_compat_msghdr+0x108/0x2b0 [ 2278.682116][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2278.686619][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2278.691296][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.697359][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.703508][T23346] __do_fast_syscall_32+0x129/0x180 [ 2278.708703][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2278.713562][T23346] do_SYSENTER_32+0x73/0x90 [ 2278.718071][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.724384][T23346] [ 2278.726705][T23346] Uninit was stored to memory at: [ 2278.731742][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2278.737460][T23346] __msan_chain_origin+0x57/0xa0 [ 2278.742396][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2278.747525][T23346] get_compat_msghdr+0x108/0x2b0 [ 2278.752461][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2278.756952][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2278.761614][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2278.767667][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2278.773820][T23346] __do_fast_syscall_32+0x129/0x180 [ 2278.779003][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2278.783839][T23346] do_SYSENTER_32+0x73/0x90 [ 2278.788333][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2278.794632][T23346] [ 2278.796942][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2278.803605][T23346] do_recvmmsg+0xc2/0x22e0 [ 2278.808008][T23346] do_recvmmsg+0xc2/0x22e0 [ 2278.944495][T23346] not chained 370000 origins [ 2278.949143][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2278.957825][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2278.967864][T23346] Call Trace: [ 2278.971146][T23346] dump_stack+0x21c/0x280 [ 2278.975471][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2278.981187][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2278.986634][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2278.991820][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2278.997440][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2279.003494][T23346] ? _copy_from_user+0x201/0x310 [ 2279.008416][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2279.013622][T23346] __msan_chain_origin+0x57/0xa0 [ 2279.018549][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2279.023653][T23346] get_compat_msghdr+0x108/0x2b0 [ 2279.028582][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2279.033085][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2279.038722][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2279.043994][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2279.048748][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2279.053413][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2279.059204][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2279.064390][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.070449][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.076591][T23346] __do_fast_syscall_32+0x129/0x180 [ 2279.081783][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2279.086620][T23346] do_SYSENTER_32+0x73/0x90 [ 2279.091117][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.097426][T23346] RIP: 0023:0xf7f65549 [ 2279.101483][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2279.121094][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2279.129496][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2279.137454][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2279.145430][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2279.153387][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2279.161346][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2279.169405][T23346] Uninit was stored to memory at: [ 2279.174442][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2279.180163][T23346] __msan_chain_origin+0x57/0xa0 [ 2279.185086][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2279.190197][T23346] get_compat_msghdr+0x108/0x2b0 [ 2279.195127][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2279.199633][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2279.204298][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.210365][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.216518][T23346] __do_fast_syscall_32+0x129/0x180 [ 2279.221706][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2279.226630][T23346] do_SYSENTER_32+0x73/0x90 [ 2279.231125][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.237703][T23346] [ 2279.240010][T23346] Uninit was stored to memory at: [ 2279.245023][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2279.250730][T23346] __msan_chain_origin+0x57/0xa0 [ 2279.255669][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2279.260769][T23346] get_compat_msghdr+0x108/0x2b0 [ 2279.265708][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2279.270199][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2279.274865][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.280918][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.287059][T23346] __do_fast_syscall_32+0x129/0x180 [ 2279.292243][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2279.297081][T23346] do_SYSENTER_32+0x73/0x90 [ 2279.301571][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.307982][T23346] [ 2279.310297][T23346] Uninit was stored to memory at: [ 2279.315310][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2279.321021][T23346] __msan_chain_origin+0x57/0xa0 [ 2279.325944][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2279.331041][T23346] get_compat_msghdr+0x108/0x2b0 [ 2279.335976][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2279.340493][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2279.345158][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.351210][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.357440][T23346] __do_fast_syscall_32+0x129/0x180 [ 2279.362623][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2279.367458][T23346] do_SYSENTER_32+0x73/0x90 [ 2279.371949][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.378251][T23346] [ 2279.380561][T23346] Uninit was stored to memory at: [ 2279.385575][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2279.391281][T23346] __msan_chain_origin+0x57/0xa0 [ 2279.396203][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2279.401302][T23346] get_compat_msghdr+0x108/0x2b0 [ 2279.406246][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2279.410740][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2279.415403][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.421466][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.427608][T23346] __do_fast_syscall_32+0x129/0x180 [ 2279.432799][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2279.437635][T23346] do_SYSENTER_32+0x73/0x90 [ 2279.442129][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.448428][T23346] [ 2279.450736][T23346] Uninit was stored to memory at: [ 2279.455757][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2279.461467][T23346] __msan_chain_origin+0x57/0xa0 [ 2279.466388][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2279.471482][T23346] get_compat_msghdr+0x108/0x2b0 [ 2279.476404][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2279.480903][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2279.485567][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.491625][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.497868][T23346] __do_fast_syscall_32+0x129/0x180 [ 2279.503053][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2279.507904][T23346] do_SYSENTER_32+0x73/0x90 [ 2279.512412][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.519146][T23346] [ 2279.521462][T23346] Uninit was stored to memory at: [ 2279.526511][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2279.532230][T23346] __msan_chain_origin+0x57/0xa0 [ 2279.537170][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2279.542280][T23346] get_compat_msghdr+0x108/0x2b0 [ 2279.547216][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2279.551718][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2279.556383][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.562450][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.568592][T23346] __do_fast_syscall_32+0x129/0x180 [ 2279.573778][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2279.578617][T23346] do_SYSENTER_32+0x73/0x90 [ 2279.583113][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.589420][T23346] [ 2279.591727][T23346] Uninit was stored to memory at: [ 2279.596743][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2279.602449][T23346] __msan_chain_origin+0x57/0xa0 [ 2279.607371][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2279.612464][T23346] get_compat_msghdr+0x108/0x2b0 [ 2279.617390][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2279.621878][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2279.626556][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.632608][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.638750][T23346] __do_fast_syscall_32+0x129/0x180 [ 2279.643934][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2279.648773][T23346] do_SYSENTER_32+0x73/0x90 [ 2279.653263][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2279.659562][T23346] [ 2279.661881][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2279.668575][T23346] do_recvmmsg+0xc2/0x22e0 [ 2279.672987][T23346] do_recvmmsg+0xc2/0x22e0 [ 2279.862661][T23346] not chained 380000 origins [ 2279.867293][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2279.875956][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2279.886004][T23346] Call Trace: [ 2279.889300][T23346] dump_stack+0x21c/0x280 [ 2279.893636][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2279.899384][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2279.904760][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2279.909963][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2279.915598][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2279.921671][T23346] ? _copy_from_user+0x201/0x310 [ 2279.926606][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2279.931807][T23346] __msan_chain_origin+0x57/0xa0 [ 2279.936745][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2279.941862][T23346] get_compat_msghdr+0x108/0x2b0 [ 2279.946834][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2279.951355][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2279.957166][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2279.962455][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2279.967221][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2279.971988][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2279.977790][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2279.982990][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2279.989058][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2279.995213][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.000410][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.005263][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.009765][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.016085][T23346] RIP: 0023:0xf7f65549 [ 2280.020157][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2280.039762][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2280.048175][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2280.056144][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2280.064119][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2280.072110][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2280.080078][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2280.088052][T23346] Uninit was stored to memory at: [ 2280.093084][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2280.098822][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.103774][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.108874][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.113806][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.118319][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.122992][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.129058][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.135207][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.140399][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.145246][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.149745][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.156051][T23346] [ 2280.158387][T23346] Uninit was stored to memory at: [ 2280.163417][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2280.169142][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.174079][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.179192][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.184130][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.188631][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.193299][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.199352][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.205492][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.210691][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.215529][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.220020][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.226320][T23346] [ 2280.228628][T23346] Uninit was stored to memory at: [ 2280.233652][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2280.239374][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.244299][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.249395][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.254318][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.258808][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.263538][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.269593][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.275735][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.280925][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.285760][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.290252][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.296552][T23346] [ 2280.299639][T23346] Uninit was stored to memory at: [ 2280.304653][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2280.310380][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.315309][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.320405][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.325333][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.329824][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.334489][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.340543][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.346684][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.351868][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.356706][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.361215][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.367517][T23346] [ 2280.369825][T23346] Uninit was stored to memory at: [ 2280.374842][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2280.380559][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.385482][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.390578][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.395503][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.399992][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.404657][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.410709][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.416850][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.422034][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.426871][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.431365][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.437665][T23346] [ 2280.439971][T23346] Uninit was stored to memory at: [ 2280.444983][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2280.450689][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.455611][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.460714][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.465637][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.470128][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.474791][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.480843][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.486982][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.492167][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.497005][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.501497][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.507799][T23346] [ 2280.510112][T23346] Uninit was stored to memory at: [ 2280.515130][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2280.520842][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.525786][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.530903][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.535847][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.540341][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.545010][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.551067][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.557211][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.562399][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.567237][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.571736][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.578039][T23346] [ 2280.580349][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2280.587125][T23346] do_recvmmsg+0xc2/0x22e0 [ 2280.591531][T23346] do_recvmmsg+0xc2/0x22e0 [ 2280.657037][T23346] not chained 390000 origins [ 2280.661647][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2280.670316][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2280.680446][T23346] Call Trace: [ 2280.683724][T23346] dump_stack+0x21c/0x280 [ 2280.688061][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2280.693761][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2280.699111][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2280.704309][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2280.709920][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2280.715981][T23346] ? _copy_from_user+0x201/0x310 [ 2280.720918][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2280.726116][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.731105][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.736481][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.741405][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.745896][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2280.751507][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2280.756921][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2280.761686][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.766378][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2280.772166][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2280.777362][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.783435][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.789674][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.794866][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.799708][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.804201][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.810510][T23346] RIP: 0023:0xf7f65549 [ 2280.814576][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2280.835387][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2280.843788][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2280.851755][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2280.859814][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2280.867795][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2280.876553][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2280.884516][T23346] Uninit was stored to memory at: [ 2280.889566][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2280.895365][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.900289][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.905407][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.910346][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.914837][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.919522][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.925589][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2280.931752][T23346] __do_fast_syscall_32+0x129/0x180 [ 2280.936944][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2280.941789][T23346] do_SYSENTER_32+0x73/0x90 [ 2280.946285][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2280.952620][T23346] [ 2280.954931][T23346] Uninit was stored to memory at: [ 2280.959952][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2280.965663][T23346] __msan_chain_origin+0x57/0xa0 [ 2280.970590][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2280.975699][T23346] get_compat_msghdr+0x108/0x2b0 [ 2280.980628][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2280.985121][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2280.989788][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2280.995843][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.001985][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.007174][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.012015][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.016683][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.022987][T23346] [ 2281.025321][T23346] Uninit was stored to memory at: [ 2281.030339][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2281.036153][T23346] __msan_chain_origin+0x57/0xa0 [ 2281.041081][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2281.046179][T23346] get_compat_msghdr+0x108/0x2b0 [ 2281.051105][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2281.055598][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2281.060264][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.066317][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.072459][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.077646][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.082482][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.086993][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.093307][T23346] [ 2281.095972][T23346] Uninit was stored to memory at: [ 2281.100999][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2281.106721][T23346] __msan_chain_origin+0x57/0xa0 [ 2281.111675][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2281.116785][T23346] get_compat_msghdr+0x108/0x2b0 [ 2281.121716][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2281.126209][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2281.130874][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.136985][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.143133][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.148321][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.153159][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.157738][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.164125][T23346] [ 2281.166438][T23346] Uninit was stored to memory at: [ 2281.171455][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2281.177184][T23346] __msan_chain_origin+0x57/0xa0 [ 2281.182108][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2281.187209][T23346] get_compat_msghdr+0x108/0x2b0 [ 2281.192135][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2281.196627][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2281.201295][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.207353][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.213530][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.218715][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.223551][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.228042][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.234340][T23346] [ 2281.236650][T23346] Uninit was stored to memory at: [ 2281.241662][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2281.247381][T23346] __msan_chain_origin+0x57/0xa0 [ 2281.252310][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2281.257405][T23346] get_compat_msghdr+0x108/0x2b0 [ 2281.262329][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2281.266837][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2281.271520][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.277593][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.283737][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.288926][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.293764][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.298257][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.304559][T23346] [ 2281.306867][T23346] Uninit was stored to memory at: [ 2281.311881][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2281.317589][T23346] __msan_chain_origin+0x57/0xa0 [ 2281.322539][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2281.327636][T23346] get_compat_msghdr+0x108/0x2b0 [ 2281.332563][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2281.337054][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2281.341722][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.347790][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.353932][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.359117][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.363953][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.368444][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.374744][T23346] [ 2281.377053][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2281.383734][T23346] do_recvmmsg+0xc2/0x22e0 [ 2281.388137][T23346] do_recvmmsg+0xc2/0x22e0 [ 2281.548894][T23346] not chained 400000 origins [ 2281.553526][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2281.562334][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2281.572391][T23346] Call Trace: [ 2281.575688][T23346] dump_stack+0x21c/0x280 [ 2281.580024][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2281.585752][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2281.591131][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2281.596338][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2281.602006][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2281.608168][T23346] ? _copy_from_user+0x201/0x310 [ 2281.613106][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2281.618344][T23346] __msan_chain_origin+0x57/0xa0 [ 2281.623294][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2281.628532][T23346] get_compat_msghdr+0x108/0x2b0 [ 2281.633504][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2281.638028][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2281.643672][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2281.648967][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2281.653824][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2281.658518][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2281.664324][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2281.669622][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.675700][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.681876][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.687080][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.691969][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.696486][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.702908][T23346] RIP: 0023:0xf7f65549 [ 2281.706978][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2281.726810][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2281.735238][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2281.743215][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2281.751191][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2281.759163][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2281.767149][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2281.775121][T23346] Uninit was stored to memory at: [ 2281.780157][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2281.785884][T23346] __msan_chain_origin+0x57/0xa0 [ 2281.790823][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2281.795994][T23346] get_compat_msghdr+0x108/0x2b0 [ 2281.800943][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2281.805462][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2281.810177][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.816246][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.822404][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.827607][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.832460][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.836969][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.843285][T23346] [ 2281.845602][T23346] Uninit was stored to memory at: [ 2281.850813][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2281.856546][T23346] __msan_chain_origin+0x57/0xa0 [ 2281.861501][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2281.866669][T23346] get_compat_msghdr+0x108/0x2b0 [ 2281.871611][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2281.876760][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2281.881440][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.887536][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.893698][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.898986][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.903841][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.908374][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.914687][T23346] [ 2281.917006][T23346] Uninit was stored to memory at: [ 2281.922128][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2281.927858][T23346] __msan_chain_origin+0x57/0xa0 [ 2281.932799][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2281.937913][T23346] get_compat_msghdr+0x108/0x2b0 [ 2281.942943][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2281.947447][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2281.952129][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2281.958289][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2281.964446][T23346] __do_fast_syscall_32+0x129/0x180 [ 2281.969645][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2281.974504][T23346] do_SYSENTER_32+0x73/0x90 [ 2281.979099][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2281.985412][T23346] [ 2281.987730][T23346] Uninit was stored to memory at: [ 2281.992778][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2281.998499][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.003442][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.008647][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.013587][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.018223][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.022907][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.028972][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.035134][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.040333][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.045188][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.049692][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.056000][T23346] [ 2282.058313][T23346] Uninit was stored to memory at: [ 2282.063341][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.069754][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.074691][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.079798][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.084749][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.089249][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.093925][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.099993][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.106174][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.111384][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.116234][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.120732][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.127055][T23346] [ 2282.129364][T23346] Uninit was stored to memory at: [ 2282.134381][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.140087][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.145013][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.150118][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.155044][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.159534][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.164201][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.170255][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.176398][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.181589][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.186425][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.190919][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.197223][T23346] [ 2282.199534][T23346] Uninit was stored to memory at: [ 2282.204558][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.210269][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.215199][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.220296][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.225223][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.229713][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.234380][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.240434][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.246576][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.251782][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.256620][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.261111][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.267509][T23346] [ 2282.269820][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2282.276482][T23346] do_recvmmsg+0xc2/0x22e0 [ 2282.280884][T23346] do_recvmmsg+0xc2/0x22e0 [ 2282.337951][T23346] not chained 410000 origins [ 2282.342582][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2282.351251][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2282.361394][T23346] Call Trace: [ 2282.364689][T23346] dump_stack+0x21c/0x280 [ 2282.369029][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2282.374756][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2282.380135][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2282.385367][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2282.391003][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2282.397074][T23346] ? _copy_from_user+0x201/0x310 [ 2282.402014][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2282.407217][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.412168][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.417295][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.422247][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.426772][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2282.432414][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2282.437700][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2282.442465][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.447142][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2282.452951][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2282.458162][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.464229][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.470375][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.475564][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.480405][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.484899][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.491210][T23346] RIP: 0023:0xf7f65549 [ 2282.495285][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2282.515236][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2282.523658][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2282.531627][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2282.539592][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2282.547559][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2282.555520][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2282.563490][T23346] Uninit was stored to memory at: [ 2282.568524][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.574245][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.579177][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.584276][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.589204][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.593696][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.598364][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.604419][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.610561][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.615750][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.620675][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.625167][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.631470][T23346] [ 2282.633780][T23346] Uninit was stored to memory at: [ 2282.638795][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.644504][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.649428][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.654528][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.659455][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.663947][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.668619][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.674761][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.680903][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.686113][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.690951][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.695481][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.701927][T23346] [ 2282.704245][T23346] Uninit was stored to memory at: [ 2282.709720][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.715470][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.720418][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.725534][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.730470][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.734978][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.739650][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.745709][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.751853][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.757040][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.761885][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.766384][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.772687][T23346] [ 2282.774996][T23346] Uninit was stored to memory at: [ 2282.780008][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.785726][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.790651][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.795748][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.800690][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.805202][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.810057][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.816209][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.822355][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.827541][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.832381][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.836900][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.843202][T23346] [ 2282.845514][T23346] Uninit was stored to memory at: [ 2282.850530][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.856255][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.861231][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.866328][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.871256][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.875747][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.880412][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.886467][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.892632][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.897817][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.902655][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.907156][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.913461][T23346] [ 2282.915771][T23346] Uninit was stored to memory at: [ 2282.920787][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.926500][T23346] __msan_chain_origin+0x57/0xa0 [ 2282.931428][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2282.936526][T23346] get_compat_msghdr+0x108/0x2b0 [ 2282.941453][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2282.945948][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2282.950615][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2282.956672][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2282.962817][T23346] __do_fast_syscall_32+0x129/0x180 [ 2282.968003][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2282.972842][T23346] do_SYSENTER_32+0x73/0x90 [ 2282.977340][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2282.983652][T23346] [ 2282.985963][T23346] Uninit was stored to memory at: [ 2282.990979][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2282.996709][T23346] __msan_chain_origin+0x57/0xa0 [ 2283.001634][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2283.006749][T23346] get_compat_msghdr+0x108/0x2b0 [ 2283.011677][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2283.016169][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2283.020842][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.026896][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.033039][T23346] __do_fast_syscall_32+0x129/0x180 [ 2283.038225][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2283.043062][T23346] do_SYSENTER_32+0x73/0x90 [ 2283.047555][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.053857][T23346] [ 2283.056170][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2283.062835][T23346] do_recvmmsg+0xc2/0x22e0 [ 2283.067676][T23346] do_recvmmsg+0xc2/0x22e0 [ 2283.366870][T23344] not chained 420000 origins [ 2283.371527][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2283.380195][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2283.390250][T23344] Call Trace: [ 2283.393550][T23344] dump_stack+0x21c/0x280 [ 2283.397887][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2283.403642][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2283.409046][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2283.414257][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2283.420003][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2283.426073][T23344] ? _copy_from_user+0x201/0x310 [ 2283.431009][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2283.436206][T23344] __msan_chain_origin+0x57/0xa0 [ 2283.441147][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2283.446264][T23344] get_compat_msghdr+0x108/0x2b0 [ 2283.451206][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2283.455716][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2283.460958][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2283.466591][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2283.471879][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2283.476643][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2283.481839][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2283.487640][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2283.492838][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.498923][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.505085][T23344] __do_fast_syscall_32+0x129/0x180 [ 2283.510295][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2283.515251][T23344] do_SYSENTER_32+0x73/0x90 [ 2283.519766][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.526086][T23344] RIP: 0023:0xf7f65549 [ 2283.530324][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2283.549942][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2283.558438][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2283.566527][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2283.574486][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2283.582442][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2283.590398][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2283.598445][T23344] Uninit was stored to memory at: [ 2283.603478][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2283.609186][T23344] __msan_chain_origin+0x57/0xa0 [ 2283.614118][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2283.619254][T23344] get_compat_msghdr+0x108/0x2b0 [ 2283.624177][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2283.628677][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2283.633339][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.639395][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.645539][T23344] __do_fast_syscall_32+0x129/0x180 [ 2283.650723][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2283.655560][T23344] do_SYSENTER_32+0x73/0x90 [ 2283.660054][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.666354][T23344] [ 2283.668665][T23344] Uninit was stored to memory at: [ 2283.673679][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2283.679385][T23344] __msan_chain_origin+0x57/0xa0 [ 2283.684310][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2283.689406][T23344] get_compat_msghdr+0x108/0x2b0 [ 2283.694332][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2283.698822][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2283.703487][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.709555][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.715713][T23344] __do_fast_syscall_32+0x129/0x180 [ 2283.720927][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2283.725775][T23344] do_SYSENTER_32+0x73/0x90 [ 2283.730288][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.736597][T23344] [ 2283.738908][T23344] Uninit was stored to memory at: [ 2283.743930][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2283.749641][T23344] __msan_chain_origin+0x57/0xa0 [ 2283.754568][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2283.759664][T23344] get_compat_msghdr+0x108/0x2b0 [ 2283.764593][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2283.769099][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2283.773771][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.779827][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.785968][T23344] __do_fast_syscall_32+0x129/0x180 [ 2283.791160][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2283.796011][T23344] do_SYSENTER_32+0x73/0x90 [ 2283.800500][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.806808][T23344] [ 2283.809117][T23344] Uninit was stored to memory at: [ 2283.814129][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2283.819836][T23344] __msan_chain_origin+0x57/0xa0 [ 2283.824762][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2283.829856][T23344] get_compat_msghdr+0x108/0x2b0 [ 2283.834782][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2283.839271][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2283.843936][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.849991][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.859084][T23344] __do_fast_syscall_32+0x129/0x180 [ 2283.864285][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2283.869125][T23344] do_SYSENTER_32+0x73/0x90 [ 2283.873616][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.880024][T23344] [ 2283.882334][T23344] Uninit was stored to memory at: [ 2283.887351][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2283.893071][T23344] __msan_chain_origin+0x57/0xa0 [ 2283.897992][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2283.903086][T23344] get_compat_msghdr+0x108/0x2b0 [ 2283.908017][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2283.912513][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2283.917201][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.923257][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2283.929396][T23344] __do_fast_syscall_32+0x129/0x180 [ 2283.934581][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2283.939416][T23344] do_SYSENTER_32+0x73/0x90 [ 2283.943908][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2283.950208][T23344] [ 2283.952523][T23344] Uninit was stored to memory at: [ 2283.957534][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2283.963241][T23344] __msan_chain_origin+0x57/0xa0 [ 2283.968170][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2283.975265][T23344] get_compat_msghdr+0x108/0x2b0 [ 2283.980194][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2283.984684][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2283.989348][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2283.995401][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.001540][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.006726][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.011564][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.016074][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.022374][T23344] [ 2284.024696][T23344] Uninit was stored to memory at: [ 2284.029844][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2284.035549][T23344] __msan_chain_origin+0x57/0xa0 [ 2284.040486][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2284.045582][T23344] get_compat_msghdr+0x108/0x2b0 [ 2284.050523][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2284.055017][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2284.059681][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.065735][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.071875][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.077059][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.081893][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.086382][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.092681][T23344] [ 2284.094991][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2284.101651][T23344] do_recvmmsg+0xc2/0x22e0 [ 2284.106052][T23344] do_recvmmsg+0xc2/0x22e0 [ 2284.205466][T23344] not chained 430000 origins [ 2284.210092][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2284.218756][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2284.228832][T23344] Call Trace: [ 2284.232131][T23344] dump_stack+0x21c/0x280 [ 2284.236468][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2284.242191][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2284.247567][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2284.252769][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2284.258408][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2284.264478][T23344] ? _copy_from_user+0x201/0x310 [ 2284.269419][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2284.274620][T23344] __msan_chain_origin+0x57/0xa0 [ 2284.279597][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2284.284730][T23344] get_compat_msghdr+0x108/0x2b0 [ 2284.289671][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2284.294180][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2284.299386][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2284.305054][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2284.310342][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2284.315112][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2284.319792][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2284.325596][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2284.330797][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.336873][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.343031][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.348237][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.353700][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.358205][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.364534][T23344] RIP: 0023:0xf7f65549 [ 2284.368604][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2284.388205][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2284.396615][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2284.404610][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2284.412581][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2284.420553][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2284.428619][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2284.436583][T23344] Uninit was stored to memory at: [ 2284.441605][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2284.447312][T23344] __msan_chain_origin+0x57/0xa0 [ 2284.453800][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2284.458895][T23344] get_compat_msghdr+0x108/0x2b0 [ 2284.463823][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2284.468315][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2284.472988][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.479044][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.485185][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.490372][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.495216][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.499726][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.506039][T23344] [ 2284.508445][T23344] Uninit was stored to memory at: [ 2284.513476][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2284.519361][T23344] __msan_chain_origin+0x57/0xa0 [ 2284.524285][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2284.529394][T23344] get_compat_msghdr+0x108/0x2b0 [ 2284.534319][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2284.538810][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2284.543473][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.549543][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.555708][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.560914][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.565763][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.570272][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.576586][T23344] [ 2284.578895][T23344] Uninit was stored to memory at: [ 2284.583912][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2284.589618][T23344] __msan_chain_origin+0x57/0xa0 [ 2284.594543][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2284.599638][T23344] get_compat_msghdr+0x108/0x2b0 [ 2284.604565][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2284.609057][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2284.613723][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.619884][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.626030][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.631219][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.636060][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.640639][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.646951][T23344] [ 2284.649272][T23344] Uninit was stored to memory at: [ 2284.654286][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2284.659996][T23344] __msan_chain_origin+0x57/0xa0 [ 2284.664925][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2284.670029][T23344] get_compat_msghdr+0x108/0x2b0 [ 2284.674958][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2284.679447][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2284.684116][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.690171][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.696311][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.701515][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.706352][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.710845][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.717143][T23344] [ 2284.719452][T23344] Uninit was stored to memory at: [ 2284.725972][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2284.731705][T23344] __msan_chain_origin+0x57/0xa0 [ 2284.736636][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2284.741740][T23344] get_compat_msghdr+0x108/0x2b0 [ 2284.746666][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2284.751158][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2284.755822][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.761889][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.768035][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.773234][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.778074][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.782655][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.788961][T23344] [ 2284.791275][T23344] Uninit was stored to memory at: [ 2284.796292][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2284.802115][T23344] __msan_chain_origin+0x57/0xa0 [ 2284.807046][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2284.812145][T23344] get_compat_msghdr+0x108/0x2b0 [ 2284.817073][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2284.821568][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2284.826262][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.832321][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.838465][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.843655][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.848499][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.852995][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.859320][T23344] [ 2284.861631][T23344] Uninit was stored to memory at: [ 2284.866651][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2284.872362][T23344] __msan_chain_origin+0x57/0xa0 [ 2284.877296][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2284.882393][T23344] get_compat_msghdr+0x108/0x2b0 [ 2284.887320][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2284.891907][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2284.896571][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2284.902624][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2284.908767][T23344] __do_fast_syscall_32+0x129/0x180 [ 2284.913955][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2284.918791][T23344] do_SYSENTER_32+0x73/0x90 [ 2284.923283][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2284.929590][T23344] [ 2284.931904][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2284.938568][T23344] do_recvmmsg+0xc2/0x22e0 [ 2284.942978][T23344] do_recvmmsg+0xc2/0x22e0 [ 2285.107596][T23346] not chained 440000 origins [ 2285.112220][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2285.120877][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2285.130924][T23346] Call Trace: [ 2285.134214][T23346] dump_stack+0x21c/0x280 [ 2285.138540][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2285.144247][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2285.149457][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2285.154669][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2285.160292][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2285.166365][T23346] ? _copy_from_user+0x201/0x310 [ 2285.171291][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2285.176481][T23346] __msan_chain_origin+0x57/0xa0 [ 2285.181420][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2285.186551][T23346] get_compat_msghdr+0x108/0x2b0 [ 2285.191485][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2285.195997][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2285.201619][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2285.206895][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2285.211649][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2285.216316][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2285.222111][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2285.227299][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2285.233357][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2285.239508][T23346] __do_fast_syscall_32+0x129/0x180 [ 2285.244697][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2285.249554][T23346] do_SYSENTER_32+0x73/0x90 [ 2285.254050][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2285.260448][T23346] RIP: 0023:0xf7f65549 [ 2285.264511][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2285.284106][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2285.292510][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2285.300468][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2285.308428][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2285.316829][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2285.324795][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2285.332756][T23346] Uninit was stored to memory at: [ 2285.337780][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2285.343487][T23346] __msan_chain_origin+0x57/0xa0 [ 2285.348415][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2285.353516][T23346] get_compat_msghdr+0x108/0x2b0 [ 2285.358442][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2285.362934][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2285.367610][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2285.373667][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2285.379812][T23346] __do_fast_syscall_32+0x129/0x180 [ 2285.385034][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2285.389874][T23346] do_SYSENTER_32+0x73/0x90 [ 2285.394368][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2285.400671][T23346] [ 2285.402981][T23346] Uninit was stored to memory at: [ 2285.408175][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2285.413884][T23346] __msan_chain_origin+0x57/0xa0 [ 2285.418810][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2285.423906][T23346] get_compat_msghdr+0x108/0x2b0 [ 2285.428838][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2285.433332][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2285.437998][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2285.444052][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2285.450279][T23346] __do_fast_syscall_32+0x129/0x180 [ 2285.455463][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2285.460298][T23346] do_SYSENTER_32+0x73/0x90 [ 2285.464789][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2285.471091][T23346] [ 2285.473409][T23346] Uninit was stored to memory at: [ 2285.478419][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2285.484126][T23346] __msan_chain_origin+0x57/0xa0 [ 2285.489057][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2285.494152][T23346] get_compat_msghdr+0x108/0x2b0 [ 2285.499078][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2285.503581][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2285.508248][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2285.514305][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2285.520458][T23346] __do_fast_syscall_32+0x129/0x180 [ 2285.525642][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2285.530479][T23346] do_SYSENTER_32+0x73/0x90 [ 2285.534974][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2285.541537][T23346] [ 2285.543849][T23346] Uninit was stored to memory at: [ 2285.548863][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2285.554584][T23346] __msan_chain_origin+0x57/0xa0 [ 2285.559527][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2285.564635][T23346] get_compat_msghdr+0x108/0x2b0 [ 2285.569562][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2285.574053][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2285.578716][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2285.584780][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2285.590922][T23346] __do_fast_syscall_32+0x129/0x180 [ 2285.596110][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2285.600948][T23346] do_SYSENTER_32+0x73/0x90 [ 2285.605438][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2285.611735][T23346] [ 2285.614063][T23346] Uninit was stored to memory at: [ 2285.619081][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2285.624803][T23346] __msan_chain_origin+0x57/0xa0 [ 2285.629728][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2285.634825][T23346] get_compat_msghdr+0x108/0x2b0 [ 2285.639763][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2285.644253][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2285.649116][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2285.655171][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2285.661313][T23346] __do_fast_syscall_32+0x129/0x180 [ 2285.666498][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2285.671336][T23346] do_SYSENTER_32+0x73/0x90 [ 2285.675827][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2285.682478][T23346] [ 2285.684785][T23346] Uninit was stored to memory at: [ 2285.689799][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2285.695536][T23346] __msan_chain_origin+0x57/0xa0 [ 2285.700478][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2285.705578][T23346] get_compat_msghdr+0x108/0x2b0 [ 2285.711128][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2285.715643][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2285.720316][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2285.726377][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2285.732526][T23346] __do_fast_syscall_32+0x129/0x180 [ 2285.737712][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2285.742548][T23346] do_SYSENTER_32+0x73/0x90 [ 2285.747038][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2285.753336][T23346] [ 2285.755642][T23346] Uninit was stored to memory at: [ 2285.760669][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2285.766376][T23346] __msan_chain_origin+0x57/0xa0 [ 2285.771385][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2285.776479][T23346] get_compat_msghdr+0x108/0x2b0 [ 2285.781403][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2285.785891][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2285.790552][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2285.796607][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2285.802749][T23346] __do_fast_syscall_32+0x129/0x180 [ 2285.807948][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2285.812786][T23346] do_SYSENTER_32+0x73/0x90 [ 2285.817278][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2285.824367][T23346] [ 2285.826675][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2285.833345][T23346] do_recvmmsg+0xc2/0x22e0 [ 2285.837757][T23346] do_recvmmsg+0xc2/0x22e0 [ 2286.031894][T23346] not chained 450000 origins [ 2286.036519][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2286.045176][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2286.055214][T23346] Call Trace: [ 2286.058496][T23346] dump_stack+0x21c/0x280 [ 2286.062820][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2286.068534][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2286.074588][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2286.079777][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2286.085418][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2286.091647][T23346] ? _copy_from_user+0x201/0x310 [ 2286.096574][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2286.101765][T23346] __msan_chain_origin+0x57/0xa0 [ 2286.106691][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2286.111794][T23346] get_compat_msghdr+0x108/0x2b0 [ 2286.116725][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2286.121233][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2286.126854][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2286.132128][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2286.136880][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2286.141546][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2286.147338][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2286.152524][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.158582][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.164833][T23346] __do_fast_syscall_32+0x129/0x180 [ 2286.170021][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2286.174860][T23346] do_SYSENTER_32+0x73/0x90 [ 2286.179351][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.185658][T23346] RIP: 0023:0xf7f65549 [ 2286.189713][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2286.209303][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2286.217722][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2286.225697][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2286.233653][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2286.241617][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2286.249574][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2286.257616][T23346] Uninit was stored to memory at: [ 2286.262633][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2286.268340][T23346] __msan_chain_origin+0x57/0xa0 [ 2286.273262][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2286.278356][T23346] get_compat_msghdr+0x108/0x2b0 [ 2286.283285][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2286.288225][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2286.292911][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.298962][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.305102][T23346] __do_fast_syscall_32+0x129/0x180 [ 2286.310286][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2286.315124][T23346] do_SYSENTER_32+0x73/0x90 [ 2286.319616][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.326449][T23346] [ 2286.328759][T23346] Uninit was stored to memory at: [ 2286.333794][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2286.339501][T23346] __msan_chain_origin+0x57/0xa0 [ 2286.344445][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2286.349540][T23346] get_compat_msghdr+0x108/0x2b0 [ 2286.354465][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2286.358960][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2286.363627][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.369679][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.375820][T23346] __do_fast_syscall_32+0x129/0x180 [ 2286.381004][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2286.385840][T23346] do_SYSENTER_32+0x73/0x90 [ 2286.390330][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.396629][T23346] [ 2286.399197][T23346] Uninit was stored to memory at: [ 2286.404213][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2286.409921][T23346] __msan_chain_origin+0x57/0xa0 [ 2286.414852][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2286.419949][T23346] get_compat_msghdr+0x108/0x2b0 [ 2286.424875][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2286.429887][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2286.434552][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.440622][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.446859][T23346] __do_fast_syscall_32+0x129/0x180 [ 2286.452046][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2286.456883][T23346] do_SYSENTER_32+0x73/0x90 [ 2286.461377][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.467680][T23346] [ 2286.469989][T23346] Uninit was stored to memory at: [ 2286.475006][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2286.480714][T23346] __msan_chain_origin+0x57/0xa0 [ 2286.485638][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2286.490734][T23346] get_compat_msghdr+0x108/0x2b0 [ 2286.495661][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2286.500277][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2286.504954][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.511009][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.517164][T23346] __do_fast_syscall_32+0x129/0x180 [ 2286.522369][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2286.527223][T23346] do_SYSENTER_32+0x73/0x90 [ 2286.531726][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.538033][T23346] [ 2286.540345][T23346] Uninit was stored to memory at: [ 2286.545385][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2286.551093][T23346] __msan_chain_origin+0x57/0xa0 [ 2286.556033][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2286.561165][T23346] get_compat_msghdr+0x108/0x2b0 [ 2286.566107][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2286.570608][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2286.575278][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.581340][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.587488][T23346] __do_fast_syscall_32+0x129/0x180 [ 2286.592680][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2286.597522][T23346] do_SYSENTER_32+0x73/0x90 [ 2286.602017][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.608321][T23346] [ 2286.610633][T23346] Uninit was stored to memory at: [ 2286.615651][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2286.621371][T23346] __msan_chain_origin+0x57/0xa0 [ 2286.626298][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2286.631397][T23346] get_compat_msghdr+0x108/0x2b0 [ 2286.636325][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2286.640824][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2286.645495][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.651552][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.657696][T23346] __do_fast_syscall_32+0x129/0x180 [ 2286.662881][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2286.667721][T23346] do_SYSENTER_32+0x73/0x90 [ 2286.672226][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.678530][T23346] [ 2286.680840][T23346] Uninit was stored to memory at: [ 2286.685868][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2286.691583][T23346] __msan_chain_origin+0x57/0xa0 [ 2286.697202][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2286.702404][T23346] get_compat_msghdr+0x108/0x2b0 [ 2286.707331][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2286.711912][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2286.716580][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2286.722674][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2286.728823][T23346] __do_fast_syscall_32+0x129/0x180 [ 2286.734015][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2286.738860][T23346] do_SYSENTER_32+0x73/0x90 [ 2286.743356][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2286.749659][T23346] [ 2286.751970][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2286.758631][T23346] do_recvmmsg+0xc2/0x22e0 [ 2286.763036][T23346] do_recvmmsg+0xc2/0x22e0 [ 2286.943901][T23344] not chained 460000 origins [ 2286.948527][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2286.957198][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2286.967250][T23344] Call Trace: [ 2286.970548][T23344] dump_stack+0x21c/0x280 [ 2286.974892][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2286.980623][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2286.986006][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2286.991215][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2286.996856][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2287.002930][T23344] ? _copy_from_user+0x201/0x310 [ 2287.007871][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2287.013071][T23344] __msan_chain_origin+0x57/0xa0 [ 2287.018015][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2287.023137][T23344] get_compat_msghdr+0x108/0x2b0 [ 2287.028084][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2287.032594][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2287.037808][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2287.044226][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2287.049518][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2287.054287][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2287.058998][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2287.064807][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2287.070012][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.076085][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.082361][T23344] __do_fast_syscall_32+0x129/0x180 [ 2287.087574][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2287.092518][T23344] do_SYSENTER_32+0x73/0x90 [ 2287.097026][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.103611][T23344] RIP: 0023:0xf7f65549 [ 2287.107682][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2287.127284][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2287.135703][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2287.143673][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2287.151630][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2287.159586][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2287.167544][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2287.175529][T23344] Uninit was stored to memory at: [ 2287.180551][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2287.186262][T23344] __msan_chain_origin+0x57/0xa0 [ 2287.191190][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2287.196295][T23344] get_compat_msghdr+0x108/0x2b0 [ 2287.201223][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2287.205716][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2287.210474][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.216529][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.222670][T23344] __do_fast_syscall_32+0x129/0x180 [ 2287.227856][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2287.232694][T23344] do_SYSENTER_32+0x73/0x90 [ 2287.237185][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.243489][T23344] [ 2287.245796][T23344] Uninit was stored to memory at: [ 2287.250815][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2287.256525][T23344] __msan_chain_origin+0x57/0xa0 [ 2287.261450][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2287.266546][T23344] get_compat_msghdr+0x108/0x2b0 [ 2287.271476][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2287.275966][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2287.280631][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.286684][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.292826][T23344] __do_fast_syscall_32+0x129/0x180 [ 2287.298022][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2287.302862][T23344] do_SYSENTER_32+0x73/0x90 [ 2287.307354][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.314697][T23344] [ 2287.317005][T23344] Uninit was stored to memory at: [ 2287.322025][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2287.327730][T23344] __msan_chain_origin+0x57/0xa0 [ 2287.332693][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2287.337790][T23344] get_compat_msghdr+0x108/0x2b0 [ 2287.342717][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2287.347210][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2287.351876][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.357932][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.364074][T23344] __do_fast_syscall_32+0x129/0x180 [ 2287.369259][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2287.374098][T23344] do_SYSENTER_32+0x73/0x90 [ 2287.378591][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.384892][T23344] [ 2287.387201][T23344] Uninit was stored to memory at: [ 2287.392216][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2287.397924][T23344] __msan_chain_origin+0x57/0xa0 [ 2287.402857][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2287.407969][T23344] get_compat_msghdr+0x108/0x2b0 [ 2287.412897][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2287.417390][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2287.422054][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.428106][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.434250][T23344] __do_fast_syscall_32+0x129/0x180 [ 2287.439434][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2287.444271][T23344] do_SYSENTER_32+0x73/0x90 [ 2287.448764][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.455064][T23344] [ 2287.457396][T23344] Uninit was stored to memory at: [ 2287.462416][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2287.468142][T23344] __msan_chain_origin+0x57/0xa0 [ 2287.473066][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2287.478164][T23344] get_compat_msghdr+0x108/0x2b0 [ 2287.483089][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2287.487588][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2287.492251][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.498306][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.504450][T23344] __do_fast_syscall_32+0x129/0x180 [ 2287.509635][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2287.514472][T23344] do_SYSENTER_32+0x73/0x90 [ 2287.518963][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.525266][T23344] [ 2287.527584][T23344] Uninit was stored to memory at: [ 2287.532694][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2287.538433][T23344] __msan_chain_origin+0x57/0xa0 [ 2287.543364][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2287.548487][T23344] get_compat_msghdr+0x108/0x2b0 [ 2287.553439][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2287.557938][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2287.562609][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.568672][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.574829][T23344] __do_fast_syscall_32+0x129/0x180 [ 2287.580024][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2287.584866][T23344] do_SYSENTER_32+0x73/0x90 [ 2287.589399][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.595702][T23344] [ 2287.598009][T23344] Uninit was stored to memory at: [ 2287.603035][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2287.608744][T23344] __msan_chain_origin+0x57/0xa0 [ 2287.613670][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2287.618785][T23344] get_compat_msghdr+0x108/0x2b0 [ 2287.623710][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2287.628202][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2287.632867][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.638923][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.645067][T23344] __do_fast_syscall_32+0x129/0x180 [ 2287.650256][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2287.655094][T23344] do_SYSENTER_32+0x73/0x90 [ 2287.659585][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.665885][T23344] [ 2287.668196][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2287.674863][T23344] do_recvmmsg+0xc2/0x22e0 [ 2287.679267][T23344] do_recvmmsg+0xc2/0x22e0 [ 2287.836862][T23346] not chained 470000 origins [ 2287.841534][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2287.850205][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2287.860257][T23346] Call Trace: [ 2287.863557][T23346] dump_stack+0x21c/0x280 [ 2287.867919][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2287.873647][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2287.879050][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2287.884254][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2287.889895][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2287.895986][T23346] ? _copy_from_user+0x201/0x310 [ 2287.900940][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2287.906151][T23346] __msan_chain_origin+0x57/0xa0 [ 2287.911093][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2287.916214][T23346] get_compat_msghdr+0x108/0x2b0 [ 2287.921201][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2287.925722][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2287.931533][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2287.936825][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2287.942034][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2287.946721][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2287.952527][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2287.957741][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2287.963818][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2287.969976][T23346] __do_fast_syscall_32+0x129/0x180 [ 2287.975180][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2287.980035][T23346] do_SYSENTER_32+0x73/0x90 [ 2287.984556][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2287.990885][T23346] RIP: 0023:0xf7f65549 [ 2287.994962][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2288.014573][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2288.022987][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2288.030958][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2288.038928][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2288.046901][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2288.054871][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2288.062842][T23346] Uninit was stored to memory at: [ 2288.067882][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2288.073610][T23346] __msan_chain_origin+0x57/0xa0 [ 2288.078552][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2288.084363][T23346] get_compat_msghdr+0x108/0x2b0 [ 2288.089300][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2288.093804][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2288.098479][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.104550][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.110702][T23346] __do_fast_syscall_32+0x129/0x180 [ 2288.115903][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2288.120754][T23346] do_SYSENTER_32+0x73/0x90 [ 2288.125291][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.131601][T23346] [ 2288.133922][T23346] Uninit was stored to memory at: [ 2288.138948][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2288.144674][T23346] __msan_chain_origin+0x57/0xa0 [ 2288.149625][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2288.154737][T23346] get_compat_msghdr+0x108/0x2b0 [ 2288.159675][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2288.164181][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2288.169123][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.175193][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.181345][T23346] __do_fast_syscall_32+0x129/0x180 [ 2288.186541][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2288.191395][T23346] do_SYSENTER_32+0x73/0x90 [ 2288.195899][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.202210][T23346] [ 2288.204543][T23346] Uninit was stored to memory at: [ 2288.209581][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2288.215303][T23346] __msan_chain_origin+0x57/0xa0 [ 2288.220244][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2288.225354][T23346] get_compat_msghdr+0x108/0x2b0 [ 2288.230378][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2288.234883][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2288.239573][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.245639][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.251792][T23346] __do_fast_syscall_32+0x129/0x180 [ 2288.256988][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2288.261838][T23346] do_SYSENTER_32+0x73/0x90 [ 2288.266358][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.272667][T23346] [ 2288.274986][T23346] Uninit was stored to memory at: [ 2288.280014][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2288.285733][T23346] __msan_chain_origin+0x57/0xa0 [ 2288.290669][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2288.295778][T23346] get_compat_msghdr+0x108/0x2b0 [ 2288.300717][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2288.305221][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2288.309900][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.315972][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.322131][T23346] __do_fast_syscall_32+0x129/0x180 [ 2288.327333][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2288.332185][T23346] do_SYSENTER_32+0x73/0x90 [ 2288.336689][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.343010][T23346] [ 2288.345329][T23346] Uninit was stored to memory at: [ 2288.350361][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2288.356085][T23346] __msan_chain_origin+0x57/0xa0 [ 2288.361022][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2288.366131][T23346] get_compat_msghdr+0x108/0x2b0 [ 2288.371067][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2288.375574][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2288.380249][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.386316][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.392471][T23346] __do_fast_syscall_32+0x129/0x180 [ 2288.397673][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2288.402529][T23346] do_SYSENTER_32+0x73/0x90 [ 2288.407042][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.413358][T23346] [ 2288.415677][T23346] Uninit was stored to memory at: [ 2288.420712][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2288.426435][T23346] __msan_chain_origin+0x57/0xa0 [ 2288.431378][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2288.436489][T23346] get_compat_msghdr+0x108/0x2b0 [ 2288.441428][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2288.445931][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2288.450609][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.456681][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.462844][T23346] __do_fast_syscall_32+0x129/0x180 [ 2288.468045][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2288.472896][T23346] do_SYSENTER_32+0x73/0x90 [ 2288.477400][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.483709][T23346] [ 2288.486055][T23346] Uninit was stored to memory at: [ 2288.491084][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2288.496804][T23346] __msan_chain_origin+0x57/0xa0 [ 2288.501742][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2288.507283][T23346] get_compat_msghdr+0x108/0x2b0 [ 2288.512221][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2288.516725][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2288.521402][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.527465][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.533622][T23346] __do_fast_syscall_32+0x129/0x180 [ 2288.538821][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2288.543681][T23346] do_SYSENTER_32+0x73/0x90 [ 2288.548189][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.554533][T23346] [ 2288.556858][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2288.563680][T23346] do_recvmmsg+0xc2/0x22e0 [ 2288.568102][T23346] do_recvmmsg+0xc2/0x22e0 [ 2288.696986][T23346] not chained 480000 origins [ 2288.701619][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2288.710280][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.720326][T23346] Call Trace: [ 2288.723616][T23346] dump_stack+0x21c/0x280 [ 2288.727947][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2288.733658][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2288.739022][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2288.744232][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2288.749870][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2288.755929][T23346] ? _copy_from_user+0x201/0x310 [ 2288.760856][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2288.766068][T23346] __msan_chain_origin+0x57/0xa0 [ 2288.771000][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2288.776104][T23346] get_compat_msghdr+0x108/0x2b0 [ 2288.781038][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2288.785544][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2288.791168][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2288.796449][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2288.801205][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2288.805873][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2288.811664][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2288.816859][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.823091][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.829243][T23346] __do_fast_syscall_32+0x129/0x180 [ 2288.834446][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2288.839302][T23346] do_SYSENTER_32+0x73/0x90 [ 2288.843808][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.850145][T23346] RIP: 0023:0xf7f65549 [ 2288.854302][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2288.873986][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2288.882385][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2288.890348][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2288.898306][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2288.906264][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2288.914309][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2288.922279][T23346] Uninit was stored to memory at: [ 2288.927300][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2288.933006][T23346] __msan_chain_origin+0x57/0xa0 [ 2288.937928][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2288.943023][T23346] get_compat_msghdr+0x108/0x2b0 [ 2288.947949][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2288.952451][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2288.957115][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2288.963166][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2288.969311][T23346] __do_fast_syscall_32+0x129/0x180 [ 2288.974511][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2288.979347][T23346] do_SYSENTER_32+0x73/0x90 [ 2288.983855][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2288.990159][T23346] [ 2288.992471][T23346] Uninit was stored to memory at: [ 2288.997483][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2289.003191][T23346] __msan_chain_origin+0x57/0xa0 [ 2289.008137][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2289.013232][T23346] get_compat_msghdr+0x108/0x2b0 [ 2289.018159][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2289.022653][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2289.027317][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.033472][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.039612][T23346] __do_fast_syscall_32+0x129/0x180 [ 2289.044798][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2289.049634][T23346] do_SYSENTER_32+0x73/0x90 [ 2289.054124][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.060424][T23346] [ 2289.062732][T23346] Uninit was stored to memory at: [ 2289.067760][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2289.073470][T23346] __msan_chain_origin+0x57/0xa0 [ 2289.078570][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2289.083755][T23346] get_compat_msghdr+0x108/0x2b0 [ 2289.088684][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2289.094491][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2289.099156][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.105216][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.111359][T23346] __do_fast_syscall_32+0x129/0x180 [ 2289.116596][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2289.121430][T23346] do_SYSENTER_32+0x73/0x90 [ 2289.125922][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.132222][T23346] [ 2289.134530][T23346] Uninit was stored to memory at: [ 2289.139546][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2289.145255][T23346] __msan_chain_origin+0x57/0xa0 [ 2289.150206][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2289.155305][T23346] get_compat_msghdr+0x108/0x2b0 [ 2289.160232][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2289.164727][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2289.169910][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.175973][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.182122][T23346] __do_fast_syscall_32+0x129/0x180 [ 2289.187308][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2289.192144][T23346] do_SYSENTER_32+0x73/0x90 [ 2289.196917][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.203219][T23346] [ 2289.205528][T23346] Uninit was stored to memory at: [ 2289.210541][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2289.216250][T23346] __msan_chain_origin+0x57/0xa0 [ 2289.221178][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2289.226275][T23346] get_compat_msghdr+0x108/0x2b0 [ 2289.231203][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2289.235692][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2289.240356][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.246410][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.252551][T23346] __do_fast_syscall_32+0x129/0x180 [ 2289.257734][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2289.262572][T23346] do_SYSENTER_32+0x73/0x90 [ 2289.267062][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.273363][T23346] [ 2289.275674][T23346] Uninit was stored to memory at: [ 2289.280706][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2289.286413][T23346] __msan_chain_origin+0x57/0xa0 [ 2289.291336][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2289.296432][T23346] get_compat_msghdr+0x108/0x2b0 [ 2289.301358][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2289.305851][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2289.310516][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.316569][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.322710][T23346] __do_fast_syscall_32+0x129/0x180 [ 2289.327893][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2289.332747][T23346] do_SYSENTER_32+0x73/0x90 [ 2289.337252][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.343554][T23346] [ 2289.345860][T23346] Uninit was stored to memory at: [ 2289.350874][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2289.356580][T23346] __msan_chain_origin+0x57/0xa0 [ 2289.361505][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2289.366614][T23346] get_compat_msghdr+0x108/0x2b0 [ 2289.371539][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2289.376056][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2289.380723][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.386783][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.392924][T23346] __do_fast_syscall_32+0x129/0x180 [ 2289.398108][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2289.402951][T23346] do_SYSENTER_32+0x73/0x90 [ 2289.407724][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.414034][T23346] [ 2289.416345][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2289.423092][T23346] do_recvmmsg+0xc2/0x22e0 [ 2289.427495][T23346] do_recvmmsg+0xc2/0x22e0 [ 2289.587386][T23344] not chained 490000 origins [ 2289.592017][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2289.600683][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2289.610741][T23344] Call Trace: [ 2289.614042][T23344] dump_stack+0x21c/0x280 [ 2289.618383][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2289.624111][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2289.629488][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2289.634695][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2289.640336][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2289.646420][T23344] ? _copy_from_user+0x201/0x310 [ 2289.651359][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2289.656559][T23344] __msan_chain_origin+0x57/0xa0 [ 2289.661500][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2289.666620][T23344] get_compat_msghdr+0x108/0x2b0 [ 2289.671572][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2289.676085][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2289.681294][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2289.686938][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2289.692228][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2289.697001][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2289.701691][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2289.707501][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2289.712713][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.718803][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.724991][T23344] __do_fast_syscall_32+0x129/0x180 [ 2289.730194][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2289.735049][T23344] do_SYSENTER_32+0x73/0x90 [ 2289.739554][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.745874][T23344] RIP: 0023:0xf7f65549 [ 2289.749942][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2289.769550][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2289.777966][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2289.785938][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2289.793920][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2289.801892][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2289.809861][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2289.817830][T23344] Uninit was stored to memory at: [ 2289.822866][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2289.829889][T23344] __msan_chain_origin+0x57/0xa0 [ 2289.834829][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2289.839937][T23344] get_compat_msghdr+0x108/0x2b0 [ 2289.844878][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2289.849377][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2289.854054][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.860121][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.866281][T23344] __do_fast_syscall_32+0x129/0x180 [ 2289.871479][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2289.876327][T23344] do_SYSENTER_32+0x73/0x90 [ 2289.880829][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.887142][T23344] [ 2289.889460][T23344] Uninit was stored to memory at: [ 2289.894494][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2289.900215][T23344] __msan_chain_origin+0x57/0xa0 [ 2289.905165][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2289.910276][T23344] get_compat_msghdr+0x108/0x2b0 [ 2289.915216][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2289.919717][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2289.924393][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2289.930545][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2289.936698][T23344] __do_fast_syscall_32+0x129/0x180 [ 2289.941893][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2289.946738][T23344] do_SYSENTER_32+0x73/0x90 [ 2289.951240][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2289.957570][T23344] [ 2289.959888][T23344] Uninit was stored to memory at: [ 2289.964915][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2289.970635][T23344] __msan_chain_origin+0x57/0xa0 [ 2289.975592][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2289.980700][T23344] get_compat_msghdr+0x108/0x2b0 [ 2289.985637][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2289.990141][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2289.994814][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.000877][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.007026][T23344] __do_fast_syscall_32+0x129/0x180 [ 2290.012240][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2290.017085][T23344] do_SYSENTER_32+0x73/0x90 [ 2290.021583][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.027890][T23344] [ 2290.030204][T23344] Uninit was stored to memory at: [ 2290.035228][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2290.040944][T23344] __msan_chain_origin+0x57/0xa0 [ 2290.045876][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2290.050983][T23344] get_compat_msghdr+0x108/0x2b0 [ 2290.055916][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2290.060417][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2290.065104][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.071169][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.077334][T23344] __do_fast_syscall_32+0x129/0x180 [ 2290.082523][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2290.087360][T23344] do_SYSENTER_32+0x73/0x90 [ 2290.091852][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.106499][T23344] [ 2290.108809][T23344] Uninit was stored to memory at: [ 2290.113831][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2290.119539][T23344] __msan_chain_origin+0x57/0xa0 [ 2290.124462][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2290.129559][T23344] get_compat_msghdr+0x108/0x2b0 [ 2290.134487][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2290.138976][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2290.143641][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.149708][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.155850][T23344] __do_fast_syscall_32+0x129/0x180 [ 2290.161038][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2290.165875][T23344] do_SYSENTER_32+0x73/0x90 [ 2290.170366][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.176681][T23344] [ 2290.178988][T23344] Uninit was stored to memory at: [ 2290.184003][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2290.189720][T23344] __msan_chain_origin+0x57/0xa0 [ 2290.194737][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2290.199837][T23344] get_compat_msghdr+0x108/0x2b0 [ 2290.204764][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2290.210384][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2290.215050][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.221125][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.227274][T23344] __do_fast_syscall_32+0x129/0x180 [ 2290.232463][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2290.237298][T23344] do_SYSENTER_32+0x73/0x90 [ 2290.241797][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.248096][T23344] [ 2290.250412][T23344] Uninit was stored to memory at: [ 2290.255427][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2290.261138][T23344] __msan_chain_origin+0x57/0xa0 [ 2290.266063][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2290.271421][T23344] get_compat_msghdr+0x108/0x2b0 [ 2290.276344][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2290.281049][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2290.285726][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.291778][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.297921][T23344] __do_fast_syscall_32+0x129/0x180 [ 2290.303105][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2290.308377][T23344] do_SYSENTER_32+0x73/0x90 [ 2290.312867][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.319174][T23344] [ 2290.321482][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2290.328147][T23344] do_recvmmsg+0xc2/0x22e0 [ 2290.332551][T23344] do_recvmmsg+0xc2/0x22e0 [ 2290.447642][T23346] not chained 500000 origins [ 2290.452274][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2290.460973][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2290.471023][T23346] Call Trace: [ 2290.474319][T23346] dump_stack+0x21c/0x280 [ 2290.478672][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2290.484405][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2290.489781][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2290.494981][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2290.500614][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2290.506686][T23346] ? _copy_from_user+0x201/0x310 [ 2290.511806][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2290.517019][T23346] __msan_chain_origin+0x57/0xa0 [ 2290.522143][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2290.527265][T23346] get_compat_msghdr+0x108/0x2b0 [ 2290.532208][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2290.536903][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2290.542570][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2290.547854][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2290.552616][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2290.557296][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2290.563104][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2290.568297][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.574531][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.580853][T23346] __do_fast_syscall_32+0x129/0x180 [ 2290.586053][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2290.590893][T23346] do_SYSENTER_32+0x73/0x90 [ 2290.595385][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.601693][T23346] RIP: 0023:0xf7f65549 [ 2290.605754][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2290.625356][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2290.633843][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2290.641801][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2290.649760][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2290.657727][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2290.665686][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2290.673643][T23346] Uninit was stored to memory at: [ 2290.678663][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2290.684385][T23346] __msan_chain_origin+0x57/0xa0 [ 2290.689308][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2290.694402][T23346] get_compat_msghdr+0x108/0x2b0 [ 2290.699325][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2290.703813][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2290.708507][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.714578][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.720725][T23346] __do_fast_syscall_32+0x129/0x180 [ 2290.726031][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2290.730879][T23346] do_SYSENTER_32+0x73/0x90 [ 2290.735378][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.741685][T23346] [ 2290.743996][T23346] Uninit was stored to memory at: [ 2290.749031][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2290.754738][T23346] __msan_chain_origin+0x57/0xa0 [ 2290.759663][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2290.764764][T23346] get_compat_msghdr+0x108/0x2b0 [ 2290.769691][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2290.774180][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2290.778851][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.784903][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.791045][T23346] __do_fast_syscall_32+0x129/0x180 [ 2290.796237][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2290.801072][T23346] do_SYSENTER_32+0x73/0x90 [ 2290.805564][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.811866][T23346] [ 2290.814179][T23346] Uninit was stored to memory at: [ 2290.819634][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2290.825348][T23346] __msan_chain_origin+0x57/0xa0 [ 2290.830270][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2290.835365][T23346] get_compat_msghdr+0x108/0x2b0 [ 2290.840425][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2290.844915][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2290.849582][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.855635][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.861778][T23346] __do_fast_syscall_32+0x129/0x180 [ 2290.866960][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2290.871796][T23346] do_SYSENTER_32+0x73/0x90 [ 2290.876286][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.882585][T23346] [ 2290.884893][T23346] Uninit was stored to memory at: [ 2290.889910][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2290.895614][T23346] __msan_chain_origin+0x57/0xa0 [ 2290.900536][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2290.905630][T23346] get_compat_msghdr+0x108/0x2b0 [ 2290.910566][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2290.915055][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2290.919722][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.925775][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2290.931916][T23346] __do_fast_syscall_32+0x129/0x180 [ 2290.937101][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2290.941938][T23346] do_SYSENTER_32+0x73/0x90 [ 2290.946427][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2290.952725][T23346] [ 2290.955032][T23346] Uninit was stored to memory at: [ 2290.960045][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2290.965751][T23346] __msan_chain_origin+0x57/0xa0 [ 2290.970683][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2290.975794][T23346] get_compat_msghdr+0x108/0x2b0 [ 2290.981677][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2290.986171][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2290.990837][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2290.996890][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.003031][T23346] __do_fast_syscall_32+0x129/0x180 [ 2291.008215][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2291.013051][T23346] do_SYSENTER_32+0x73/0x90 [ 2291.017541][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.023851][T23346] [ 2291.026162][T23346] Uninit was stored to memory at: [ 2291.031194][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2291.036899][T23346] __msan_chain_origin+0x57/0xa0 [ 2291.041821][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2291.046924][T23346] get_compat_msghdr+0x108/0x2b0 [ 2291.051850][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2291.056342][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2291.061004][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.067054][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.073196][T23346] __do_fast_syscall_32+0x129/0x180 [ 2291.078378][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2291.083225][T23346] do_SYSENTER_32+0x73/0x90 [ 2291.087715][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.094021][T23346] [ 2291.096331][T23346] Uninit was stored to memory at: [ 2291.101346][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2291.107052][T23346] __msan_chain_origin+0x57/0xa0 [ 2291.111983][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2291.117084][T23346] get_compat_msghdr+0x108/0x2b0 [ 2291.122010][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2291.126606][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2291.131271][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.137325][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.143464][T23346] __do_fast_syscall_32+0x129/0x180 [ 2291.148648][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2291.153487][T23346] do_SYSENTER_32+0x73/0x90 [ 2291.157977][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.164277][T23346] [ 2291.166587][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2291.173247][T23346] do_recvmmsg+0xc2/0x22e0 [ 2291.177651][T23346] do_recvmmsg+0xc2/0x22e0 [ 2291.310237][T23344] not chained 510000 origins [ 2291.314863][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2291.323532][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2291.333756][T23344] Call Trace: [ 2291.337050][T23344] dump_stack+0x21c/0x280 [ 2291.341384][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2291.347097][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2291.352462][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2291.357650][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2291.363276][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2291.369329][T23344] ? _copy_from_user+0x201/0x310 [ 2291.374253][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2291.379438][T23344] __msan_chain_origin+0x57/0xa0 [ 2291.384362][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2291.389488][T23344] get_compat_msghdr+0x108/0x2b0 [ 2291.394418][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2291.398910][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2291.404116][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2291.409737][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2291.415011][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2291.419763][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2291.425832][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2291.431625][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2291.436812][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.442871][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.449015][T23344] __do_fast_syscall_32+0x129/0x180 [ 2291.454201][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2291.459038][T23344] do_SYSENTER_32+0x73/0x90 [ 2291.463531][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.469842][T23344] RIP: 0023:0xf7f65549 [ 2291.473898][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2291.493488][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2291.501898][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2291.509875][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2291.517840][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2291.525799][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2291.534061][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2291.542020][T23344] Uninit was stored to memory at: [ 2291.547041][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2291.552749][T23344] __msan_chain_origin+0x57/0xa0 [ 2291.557671][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2291.562764][T23344] get_compat_msghdr+0x108/0x2b0 [ 2291.567687][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2291.572180][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2291.576848][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.582900][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.589061][T23344] __do_fast_syscall_32+0x129/0x180 [ 2291.594244][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2291.599082][T23344] do_SYSENTER_32+0x73/0x90 [ 2291.603573][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.609870][T23344] [ 2291.612179][T23344] Uninit was stored to memory at: [ 2291.617201][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2291.622918][T23344] __msan_chain_origin+0x57/0xa0 [ 2291.627841][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2291.632937][T23344] get_compat_msghdr+0x108/0x2b0 [ 2291.637861][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2291.642352][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2291.647015][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.653081][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.659235][T23344] __do_fast_syscall_32+0x129/0x180 [ 2291.664429][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2291.669289][T23344] do_SYSENTER_32+0x73/0x90 [ 2291.673804][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.680121][T23344] [ 2291.682432][T23344] Uninit was stored to memory at: [ 2291.687447][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2291.693152][T23344] __msan_chain_origin+0x57/0xa0 [ 2291.698075][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2291.703169][T23344] get_compat_msghdr+0x108/0x2b0 [ 2291.708093][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2291.712602][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2291.717284][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.723347][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.729498][T23344] __do_fast_syscall_32+0x129/0x180 [ 2291.734695][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2291.739534][T23344] do_SYSENTER_32+0x73/0x90 [ 2291.744033][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.750335][T23344] [ 2291.752644][T23344] Uninit was stored to memory at: [ 2291.757660][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2291.763367][T23344] __msan_chain_origin+0x57/0xa0 [ 2291.768287][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2291.773381][T23344] get_compat_msghdr+0x108/0x2b0 [ 2291.778408][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2291.782919][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2291.787595][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.793646][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.799785][T23344] __do_fast_syscall_32+0x129/0x180 [ 2291.805316][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2291.810151][T23344] do_SYSENTER_32+0x73/0x90 [ 2291.815161][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.821462][T23344] [ 2291.823779][T23344] Uninit was stored to memory at: [ 2291.828792][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2291.834498][T23344] __msan_chain_origin+0x57/0xa0 [ 2291.839432][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2291.844527][T23344] get_compat_msghdr+0x108/0x2b0 [ 2291.849449][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2291.853939][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2291.858612][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.864664][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.870807][T23344] __do_fast_syscall_32+0x129/0x180 [ 2291.875992][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2291.880829][T23344] do_SYSENTER_32+0x73/0x90 [ 2291.885318][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.891619][T23344] [ 2291.893926][T23344] Uninit was stored to memory at: [ 2291.898938][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2291.904662][T23344] __msan_chain_origin+0x57/0xa0 [ 2291.909584][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2291.914679][T23344] get_compat_msghdr+0x108/0x2b0 [ 2291.920298][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2291.924787][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2291.929449][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2291.935510][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2291.941651][T23344] __do_fast_syscall_32+0x129/0x180 [ 2291.946833][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2291.951691][T23344] do_SYSENTER_32+0x73/0x90 [ 2291.956181][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2291.962482][T23344] [ 2291.964802][T23344] Uninit was stored to memory at: [ 2291.969815][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2291.975522][T23344] __msan_chain_origin+0x57/0xa0 [ 2291.980449][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2291.985543][T23344] get_compat_msghdr+0x108/0x2b0 [ 2291.990467][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2291.994958][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2291.999621][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.005674][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.011816][T23344] __do_fast_syscall_32+0x129/0x180 [ 2292.017002][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2292.021837][T23344] do_SYSENTER_32+0x73/0x90 [ 2292.026326][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.032625][T23344] [ 2292.034934][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2292.041594][T23344] do_recvmmsg+0xc2/0x22e0 [ 2292.045996][T23344] do_recvmmsg+0xc2/0x22e0 [ 2292.249651][T23346] not chained 520000 origins [ 2292.254283][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2292.262947][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2292.272996][T23346] Call Trace: [ 2292.276295][T23346] dump_stack+0x21c/0x280 [ 2292.280630][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2292.286362][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2292.291740][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2292.296941][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2292.302576][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2292.308643][T23346] ? _copy_from_user+0x201/0x310 [ 2292.313671][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2292.318874][T23346] __msan_chain_origin+0x57/0xa0 [ 2292.323812][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2292.328927][T23346] get_compat_msghdr+0x108/0x2b0 [ 2292.333873][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2292.338391][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2292.344027][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2292.349323][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2292.354123][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2292.358827][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2292.364631][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2292.369832][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.375904][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.382066][T23346] __do_fast_syscall_32+0x129/0x180 [ 2292.387264][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2292.392115][T23346] do_SYSENTER_32+0x73/0x90 [ 2292.396619][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.402940][T23346] RIP: 0023:0xf7f65549 [ 2292.407014][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2292.426666][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2292.435083][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2292.443053][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2292.451027][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2292.459015][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2292.466986][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2292.474955][T23346] Uninit was stored to memory at: [ 2292.479988][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2292.485710][T23346] __msan_chain_origin+0x57/0xa0 [ 2292.490643][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2292.495750][T23346] get_compat_msghdr+0x108/0x2b0 [ 2292.500690][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2292.505194][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2292.509872][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.515939][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.522097][T23346] __do_fast_syscall_32+0x129/0x180 [ 2292.527297][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2292.532158][T23346] do_SYSENTER_32+0x73/0x90 [ 2292.536789][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.543102][T23346] [ 2292.545530][T23346] Uninit was stored to memory at: [ 2292.550588][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2292.556322][T23346] __msan_chain_origin+0x57/0xa0 [ 2292.561296][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2292.566409][T23346] get_compat_msghdr+0x108/0x2b0 [ 2292.571360][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2292.575879][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2292.580581][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.586648][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.592822][T23346] __do_fast_syscall_32+0x129/0x180 [ 2292.598020][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2292.602870][T23346] do_SYSENTER_32+0x73/0x90 [ 2292.607379][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.613689][T23346] [ 2292.616004][T23346] Uninit was stored to memory at: [ 2292.621032][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2292.626751][T23346] __msan_chain_origin+0x57/0xa0 [ 2292.631684][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2292.636792][T23346] get_compat_msghdr+0x108/0x2b0 [ 2292.641730][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2292.646232][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2292.650921][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.656992][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.663156][T23346] __do_fast_syscall_32+0x129/0x180 [ 2292.668350][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2292.673193][T23346] do_SYSENTER_32+0x73/0x90 [ 2292.677694][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.684026][T23346] [ 2292.686339][T23346] Uninit was stored to memory at: [ 2292.691363][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2292.697097][T23346] __msan_chain_origin+0x57/0xa0 [ 2292.702027][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2292.707145][T23346] get_compat_msghdr+0x108/0x2b0 [ 2292.712090][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2292.716592][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2292.721271][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.727371][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.733535][T23346] __do_fast_syscall_32+0x129/0x180 [ 2292.738900][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2292.743739][T23346] do_SYSENTER_32+0x73/0x90 [ 2292.748230][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.754530][T23346] [ 2292.756841][T23346] Uninit was stored to memory at: [ 2292.761870][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2292.767577][T23346] __msan_chain_origin+0x57/0xa0 [ 2292.772500][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2292.777612][T23346] get_compat_msghdr+0x108/0x2b0 [ 2292.782535][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2292.787023][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2292.791686][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.797747][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.803890][T23346] __do_fast_syscall_32+0x129/0x180 [ 2292.809073][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2292.813917][T23346] do_SYSENTER_32+0x73/0x90 [ 2292.818408][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.824724][T23346] [ 2292.827032][T23346] Uninit was stored to memory at: [ 2292.832047][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2292.837753][T23346] __msan_chain_origin+0x57/0xa0 [ 2292.842675][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2292.847772][T23346] get_compat_msghdr+0x108/0x2b0 [ 2292.852693][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2292.857188][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2292.861856][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.867910][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.874050][T23346] __do_fast_syscall_32+0x129/0x180 [ 2292.879244][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2292.884081][T23346] do_SYSENTER_32+0x73/0x90 [ 2292.888581][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.894882][T23346] [ 2292.897188][T23346] Uninit was stored to memory at: [ 2292.902209][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2292.907915][T23346] __msan_chain_origin+0x57/0xa0 [ 2292.912842][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2292.917937][T23346] get_compat_msghdr+0x108/0x2b0 [ 2292.922861][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2292.927362][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2292.932026][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2292.938080][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2292.944222][T23346] __do_fast_syscall_32+0x129/0x180 [ 2292.949404][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2292.954239][T23346] do_SYSENTER_32+0x73/0x90 [ 2292.958734][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2292.965047][T23346] [ 2292.967356][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2292.974031][T23346] do_recvmmsg+0xc2/0x22e0 [ 2292.978435][T23346] do_recvmmsg+0xc2/0x22e0 [ 2293.055431][T23344] not chained 530000 origins [ 2293.060056][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2293.068726][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2293.078775][T23344] Call Trace: [ 2293.082070][T23344] dump_stack+0x21c/0x280 [ 2293.086437][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2293.092161][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2293.097540][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2293.102747][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2293.108391][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2293.114463][T23344] ? _copy_from_user+0x201/0x310 [ 2293.119397][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2293.124598][T23344] __msan_chain_origin+0x57/0xa0 [ 2293.129538][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2293.135088][T23344] get_compat_msghdr+0x108/0x2b0 [ 2293.140059][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2293.144566][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2293.149779][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2293.155417][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2293.160708][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2293.165472][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2293.170153][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2293.175956][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2293.181157][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.187230][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.193385][T23344] __do_fast_syscall_32+0x129/0x180 [ 2293.198596][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2293.203444][T23344] do_SYSENTER_32+0x73/0x90 [ 2293.207946][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.214272][T23344] RIP: 0023:0xf7f65549 [ 2293.218334][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2293.237925][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2293.246327][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2293.255151][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2293.263110][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2293.271245][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2293.279202][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2293.287161][T23344] Uninit was stored to memory at: [ 2293.292179][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2293.297885][T23344] __msan_chain_origin+0x57/0xa0 [ 2293.302810][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2293.307905][T23344] get_compat_msghdr+0x108/0x2b0 [ 2293.312838][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2293.317328][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2293.321992][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.328052][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.334207][T23344] __do_fast_syscall_32+0x129/0x180 [ 2293.339390][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2293.344226][T23344] do_SYSENTER_32+0x73/0x90 [ 2293.348720][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.355020][T23344] [ 2293.357328][T23344] Uninit was stored to memory at: [ 2293.362342][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2293.368063][T23344] __msan_chain_origin+0x57/0xa0 [ 2293.372991][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2293.378101][T23344] get_compat_msghdr+0x108/0x2b0 [ 2293.383048][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2293.387549][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2293.392217][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.398271][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.404417][T23344] __do_fast_syscall_32+0x129/0x180 [ 2293.409600][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2293.414436][T23344] do_SYSENTER_32+0x73/0x90 [ 2293.419192][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.425496][T23344] [ 2293.427823][T23344] Uninit was stored to memory at: [ 2293.432880][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2293.438587][T23344] __msan_chain_origin+0x57/0xa0 [ 2293.443511][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2293.448607][T23344] get_compat_msghdr+0x108/0x2b0 [ 2293.453531][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2293.458019][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2293.462683][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.468752][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.474903][T23344] __do_fast_syscall_32+0x129/0x180 [ 2293.480086][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2293.484922][T23344] do_SYSENTER_32+0x73/0x90 [ 2293.489432][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.495745][T23344] [ 2293.498068][T23344] Uninit was stored to memory at: [ 2293.503107][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2293.508817][T23344] __msan_chain_origin+0x57/0xa0 [ 2293.513747][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2293.518847][T23344] get_compat_msghdr+0x108/0x2b0 [ 2293.523774][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2293.528267][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2293.532932][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.538990][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.545136][T23344] __do_fast_syscall_32+0x129/0x180 [ 2293.550324][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2293.555167][T23344] do_SYSENTER_32+0x73/0x90 [ 2293.559659][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.566230][T23344] [ 2293.568552][T23344] Uninit was stored to memory at: [ 2293.573575][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2293.579286][T23344] __msan_chain_origin+0x57/0xa0 [ 2293.584212][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2293.589311][T23344] get_compat_msghdr+0x108/0x2b0 [ 2293.594238][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2293.598740][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2293.603402][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.609456][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.615599][T23344] __do_fast_syscall_32+0x129/0x180 [ 2293.620793][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2293.625633][T23344] do_SYSENTER_32+0x73/0x90 [ 2293.630122][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.636421][T23344] [ 2293.638755][T23344] Uninit was stored to memory at: [ 2293.643779][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2293.649490][T23344] __msan_chain_origin+0x57/0xa0 [ 2293.654430][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2293.659531][T23344] get_compat_msghdr+0x108/0x2b0 [ 2293.664456][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2293.668948][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2293.673613][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.679665][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.685805][T23344] __do_fast_syscall_32+0x129/0x180 [ 2293.690990][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2293.695829][T23344] do_SYSENTER_32+0x73/0x90 [ 2293.700319][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.706620][T23344] [ 2293.708926][T23344] Uninit was stored to memory at: [ 2293.713942][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2293.719670][T23344] __msan_chain_origin+0x57/0xa0 [ 2293.724604][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2293.729705][T23344] get_compat_msghdr+0x108/0x2b0 [ 2293.734647][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2293.739141][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2293.743807][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2293.749872][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2293.756012][T23344] __do_fast_syscall_32+0x129/0x180 [ 2293.761194][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2293.766028][T23344] do_SYSENTER_32+0x73/0x90 [ 2293.770518][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2293.776822][T23344] [ 2293.779142][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2293.785801][T23344] do_recvmmsg+0xc2/0x22e0 [ 2293.790202][T23344] do_recvmmsg+0xc2/0x22e0 [ 2294.048879][T23344] not chained 540000 origins [ 2294.053505][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2294.062161][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2294.072207][T23344] Call Trace: [ 2294.075489][T23344] dump_stack+0x21c/0x280 [ 2294.079812][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2294.085607][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2294.091401][T23344] ? idle_cpu+0x9a/0x1d0 [ 2294.095658][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2294.100846][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2294.106466][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2294.112520][T23344] ? _copy_from_user+0x201/0x310 [ 2294.117450][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2294.122638][T23344] __msan_chain_origin+0x57/0xa0 [ 2294.127564][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2294.132668][T23344] get_compat_msghdr+0x108/0x2b0 [ 2294.137611][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2294.142104][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2294.147299][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2294.152921][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2294.158195][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2294.162953][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2294.167617][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2294.173417][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2294.178606][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.184661][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.190814][T23344] __do_fast_syscall_32+0x129/0x180 [ 2294.196000][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2294.200842][T23344] do_SYSENTER_32+0x73/0x90 [ 2294.205334][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.211658][T23344] RIP: 0023:0xf7f65549 [ 2294.215727][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2294.236271][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2294.244671][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2294.252641][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2294.260596][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2294.268554][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2294.276509][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2294.284468][T23344] Uninit was stored to memory at: [ 2294.289484][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2294.295191][T23344] __msan_chain_origin+0x57/0xa0 [ 2294.300113][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2294.305215][T23344] get_compat_msghdr+0x108/0x2b0 [ 2294.310142][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2294.314634][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2294.319298][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.325349][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.331491][T23344] __do_fast_syscall_32+0x129/0x180 [ 2294.336676][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2294.341511][T23344] do_SYSENTER_32+0x73/0x90 [ 2294.346004][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.352304][T23344] [ 2294.354610][T23344] Uninit was stored to memory at: [ 2294.359624][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2294.365344][T23344] __msan_chain_origin+0x57/0xa0 [ 2294.370268][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2294.375367][T23344] get_compat_msghdr+0x108/0x2b0 [ 2294.380291][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2294.384793][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2294.389458][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.395513][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.401661][T23344] __do_fast_syscall_32+0x129/0x180 [ 2294.406846][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2294.411695][T23344] do_SYSENTER_32+0x73/0x90 [ 2294.416185][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.422485][T23344] [ 2294.424794][T23344] Uninit was stored to memory at: [ 2294.429805][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2294.435513][T23344] __msan_chain_origin+0x57/0xa0 [ 2294.440463][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2294.445560][T23344] get_compat_msghdr+0x108/0x2b0 [ 2294.450483][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2294.454975][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2294.459640][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.465693][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.471847][T23344] __do_fast_syscall_32+0x129/0x180 [ 2294.477031][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2294.481869][T23344] do_SYSENTER_32+0x73/0x90 [ 2294.486459][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.492770][T23344] [ 2294.495077][T23344] Uninit was stored to memory at: [ 2294.500103][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2294.505809][T23344] __msan_chain_origin+0x57/0xa0 [ 2294.510729][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2294.515824][T23344] get_compat_msghdr+0x108/0x2b0 [ 2294.520747][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2294.525254][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2294.529916][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.535968][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.542125][T23344] __do_fast_syscall_32+0x129/0x180 [ 2294.547325][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2294.552168][T23344] do_SYSENTER_32+0x73/0x90 [ 2294.556683][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.562991][T23344] [ 2294.565303][T23344] Uninit was stored to memory at: [ 2294.570326][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2294.576035][T23344] __msan_chain_origin+0x57/0xa0 [ 2294.580961][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2294.586059][T23344] get_compat_msghdr+0x108/0x2b0 [ 2294.590983][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2294.595473][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2294.600140][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.606193][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.612354][T23344] __do_fast_syscall_32+0x129/0x180 [ 2294.617542][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2294.622379][T23344] do_SYSENTER_32+0x73/0x90 [ 2294.626869][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.633173][T23344] [ 2294.635480][T23344] Uninit was stored to memory at: [ 2294.640494][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2294.646217][T23344] __msan_chain_origin+0x57/0xa0 [ 2294.651315][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2294.656432][T23344] get_compat_msghdr+0x108/0x2b0 [ 2294.661355][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2294.665844][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2294.670508][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.676560][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.682720][T23344] __do_fast_syscall_32+0x129/0x180 [ 2294.687920][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2294.692762][T23344] do_SYSENTER_32+0x73/0x90 [ 2294.697520][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.703825][T23344] [ 2294.706132][T23344] Uninit was stored to memory at: [ 2294.711145][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2294.716854][T23344] __msan_chain_origin+0x57/0xa0 [ 2294.721776][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2294.726870][T23344] get_compat_msghdr+0x108/0x2b0 [ 2294.731812][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2294.736301][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2294.740964][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2294.747019][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2294.753160][T23344] __do_fast_syscall_32+0x129/0x180 [ 2294.758344][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2294.763180][T23344] do_SYSENTER_32+0x73/0x90 [ 2294.767687][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2294.773987][T23344] [ 2294.776299][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2294.782960][T23344] do_recvmmsg+0xc2/0x22e0 [ 2294.787363][T23344] do_recvmmsg+0xc2/0x22e0 [ 2295.026081][T23344] not chained 550000 origins [ 2295.030714][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2295.039658][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2295.050216][T23344] Call Trace: [ 2295.053505][T23344] dump_stack+0x21c/0x280 [ 2295.057827][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2295.063538][T23344] ? sched_clock_cpu+0x5e/0x950 [ 2295.068384][T23344] ? sched_clock_cpu+0x5e/0x950 [ 2295.073224][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2295.078409][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2295.084046][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2295.090121][T23344] ? _copy_from_user+0x201/0x310 [ 2295.095057][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2295.100242][T23344] __msan_chain_origin+0x57/0xa0 [ 2295.105167][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2295.110274][T23344] get_compat_msghdr+0x108/0x2b0 [ 2295.115214][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2295.119707][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2295.124903][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2295.130523][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2295.135794][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2295.140545][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2295.145208][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2295.151000][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2295.156189][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.162247][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.168389][T23344] __do_fast_syscall_32+0x129/0x180 [ 2295.173576][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2295.178415][T23344] do_SYSENTER_32+0x73/0x90 [ 2295.182908][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.189219][T23344] RIP: 0023:0xf7f65549 [ 2295.193284][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2295.212879][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2295.221459][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2295.229419][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2295.237376][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2295.245344][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2295.253299][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2295.261255][T23344] Uninit was stored to memory at: [ 2295.266273][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2295.271982][T23344] __msan_chain_origin+0x57/0xa0 [ 2295.276904][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2295.281999][T23344] get_compat_msghdr+0x108/0x2b0 [ 2295.286922][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2295.291413][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2295.296077][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.302144][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.308286][T23344] __do_fast_syscall_32+0x129/0x180 [ 2295.313471][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2295.318309][T23344] do_SYSENTER_32+0x73/0x90 [ 2295.322801][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.329100][T23344] [ 2295.331406][T23344] Uninit was stored to memory at: [ 2295.336417][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2295.342146][T23344] __msan_chain_origin+0x57/0xa0 [ 2295.347069][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2295.352165][T23344] get_compat_msghdr+0x108/0x2b0 [ 2295.357091][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2295.361595][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2295.366257][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.372311][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.378449][T23344] __do_fast_syscall_32+0x129/0x180 [ 2295.383633][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2295.388468][T23344] do_SYSENTER_32+0x73/0x90 [ 2295.392980][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.399295][T23344] [ 2295.401613][T23344] Uninit was stored to memory at: [ 2295.406628][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2295.412336][T23344] __msan_chain_origin+0x57/0xa0 [ 2295.417262][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2295.422367][T23344] get_compat_msghdr+0x108/0x2b0 [ 2295.427293][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2295.431799][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2295.436465][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.442528][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.448673][T23344] __do_fast_syscall_32+0x129/0x180 [ 2295.454033][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2295.458885][T23344] do_SYSENTER_32+0x73/0x90 [ 2295.463378][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.469680][T23344] [ 2295.471989][T23344] Uninit was stored to memory at: [ 2295.477006][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2295.482717][T23344] __msan_chain_origin+0x57/0xa0 [ 2295.487649][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2295.492749][T23344] get_compat_msghdr+0x108/0x2b0 [ 2295.497675][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2295.502170][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2295.506847][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.512903][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.519047][T23344] __do_fast_syscall_32+0x129/0x180 [ 2295.524235][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2295.529075][T23344] do_SYSENTER_32+0x73/0x90 [ 2295.533584][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.539887][T23344] [ 2295.542197][T23344] Uninit was stored to memory at: [ 2295.547211][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2295.552920][T23344] __msan_chain_origin+0x57/0xa0 [ 2295.557859][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2295.562980][T23344] get_compat_msghdr+0x108/0x2b0 [ 2295.567919][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2295.572415][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2295.577079][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.583135][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.589277][T23344] __do_fast_syscall_32+0x129/0x180 [ 2295.594460][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2295.599300][T23344] do_SYSENTER_32+0x73/0x90 [ 2295.603794][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.610108][T23344] [ 2295.612416][T23344] Uninit was stored to memory at: [ 2295.617433][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2295.623153][T23344] __msan_chain_origin+0x57/0xa0 [ 2295.628076][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2295.633172][T23344] get_compat_msghdr+0x108/0x2b0 [ 2295.638094][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2295.642585][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2295.647251][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.653317][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.659458][T23344] __do_fast_syscall_32+0x129/0x180 [ 2295.664654][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2295.669490][T23344] do_SYSENTER_32+0x73/0x90 [ 2295.673980][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.680280][T23344] [ 2295.682587][T23344] Uninit was stored to memory at: [ 2295.687614][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2295.693327][T23344] __msan_chain_origin+0x57/0xa0 [ 2295.698250][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2295.703344][T23344] get_compat_msghdr+0x108/0x2b0 [ 2295.708279][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2295.712769][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2295.717450][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2295.723512][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2295.729664][T23344] __do_fast_syscall_32+0x129/0x180 [ 2295.734855][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2295.739693][T23344] do_SYSENTER_32+0x73/0x90 [ 2295.744184][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2295.750484][T23344] [ 2295.752803][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2295.759466][T23344] do_recvmmsg+0xc2/0x22e0 [ 2295.763867][T23344] do_recvmmsg+0xc2/0x22e0 [ 2295.952947][T23344] not chained 560000 origins [ 2295.957585][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2295.966253][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2295.976506][T23344] Call Trace: [ 2295.979802][T23344] dump_stack+0x21c/0x280 [ 2295.984149][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2295.989878][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2295.995948][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2296.001149][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2296.006788][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2296.012862][T23344] ? _copy_from_user+0x201/0x310 [ 2296.017800][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2296.023005][T23344] __msan_chain_origin+0x57/0xa0 [ 2296.027945][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2296.033062][T23344] get_compat_msghdr+0x108/0x2b0 [ 2296.038014][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2296.042523][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2296.047751][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2296.053392][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2296.058709][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2296.063502][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2296.068182][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2296.074000][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2296.079200][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2296.085705][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2296.091867][T23344] __do_fast_syscall_32+0x129/0x180 [ 2296.097102][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2296.101955][T23344] do_SYSENTER_32+0x73/0x90 [ 2296.106463][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.112809][T23344] RIP: 0023:0xf7f65549 [ 2296.116878][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2296.136490][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2296.144911][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2296.152882][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2296.160875][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2296.169200][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2296.177179][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2296.185179][T23344] Uninit was stored to memory at: [ 2296.190216][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2296.195941][T23344] __msan_chain_origin+0x57/0xa0 [ 2296.200969][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2296.206082][T23344] get_compat_msghdr+0x108/0x2b0 [ 2296.211018][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2296.215525][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2296.220207][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2296.226306][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2296.232465][T23344] __do_fast_syscall_32+0x129/0x180 [ 2296.237706][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2296.242559][T23344] do_SYSENTER_32+0x73/0x90 [ 2296.247063][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.253371][T23344] [ 2296.255688][T23344] Uninit was stored to memory at: [ 2296.260718][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2296.266441][T23344] __msan_chain_origin+0x57/0xa0 [ 2296.271377][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2296.276488][T23344] get_compat_msghdr+0x108/0x2b0 [ 2296.281429][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2296.285932][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2296.290615][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2296.296769][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2296.302923][T23344] __do_fast_syscall_32+0x129/0x180 [ 2296.308126][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2296.312980][T23344] do_SYSENTER_32+0x73/0x90 [ 2296.317484][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.323803][T23344] [ 2296.326120][T23344] Uninit was stored to memory at: [ 2296.331148][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2296.336871][T23344] __msan_chain_origin+0x57/0xa0 [ 2296.341811][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2296.346933][T23344] get_compat_msghdr+0x108/0x2b0 [ 2296.351872][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2296.356376][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2296.361052][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2296.367141][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2296.373301][T23344] __do_fast_syscall_32+0x129/0x180 [ 2296.378532][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2296.383385][T23344] do_SYSENTER_32+0x73/0x90 [ 2296.387893][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.394205][T23344] [ 2296.396531][T23344] Uninit was stored to memory at: [ 2296.401566][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2296.407320][T23344] __msan_chain_origin+0x57/0xa0 [ 2296.412356][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2296.417466][T23344] get_compat_msghdr+0x108/0x2b0 [ 2296.422400][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2296.426907][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2296.431766][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2296.437819][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2296.443964][T23344] __do_fast_syscall_32+0x129/0x180 [ 2296.449150][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2296.453988][T23344] do_SYSENTER_32+0x73/0x90 [ 2296.458491][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.464796][T23344] [ 2296.467118][T23344] Uninit was stored to memory at: [ 2296.472147][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2296.477854][T23344] __msan_chain_origin+0x57/0xa0 [ 2296.482789][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2296.487896][T23344] get_compat_msghdr+0x108/0x2b0 [ 2296.492824][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2296.497311][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2296.501978][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2296.508029][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2296.514173][T23344] __do_fast_syscall_32+0x129/0x180 [ 2296.519357][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2296.524191][T23344] do_SYSENTER_32+0x73/0x90 [ 2296.528681][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.534983][T23344] [ 2296.537307][T23344] Uninit was stored to memory at: [ 2296.542320][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2296.548048][T23344] __msan_chain_origin+0x57/0xa0 [ 2296.552985][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2296.558127][T23344] get_compat_msghdr+0x108/0x2b0 [ 2296.563069][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2296.567567][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2296.572234][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2296.578304][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2296.584446][T23344] __do_fast_syscall_32+0x129/0x180 [ 2296.589630][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2296.594482][T23344] do_SYSENTER_32+0x73/0x90 [ 2296.598973][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.605284][T23344] [ 2296.607591][T23344] Uninit was stored to memory at: [ 2296.612626][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2296.618335][T23344] __msan_chain_origin+0x57/0xa0 [ 2296.623276][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2296.628373][T23344] get_compat_msghdr+0x108/0x2b0 [ 2296.633301][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2296.637793][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2296.642462][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2296.648603][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2296.654746][T23344] __do_fast_syscall_32+0x129/0x180 [ 2296.659932][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2296.664771][T23344] do_SYSENTER_32+0x73/0x90 [ 2296.669259][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2296.675579][T23344] [ 2296.677887][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2296.684548][T23344] do_recvmmsg+0xc2/0x22e0 [ 2296.688952][T23344] do_recvmmsg+0xc2/0x22e0 [ 2296.877003][T23344] not chained 570000 origins [ 2296.881628][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2296.890279][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2296.900316][T23344] Call Trace: [ 2296.903597][T23344] dump_stack+0x21c/0x280 [ 2296.907919][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2296.913642][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2296.919436][T23344] ? idle_cpu+0x9a/0x1d0 [ 2296.923679][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2296.928864][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2296.934483][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2296.940538][T23344] ? _copy_from_user+0x201/0x310 [ 2296.945460][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2296.950656][T23344] __msan_chain_origin+0x57/0xa0 [ 2296.955587][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2296.960690][T23344] get_compat_msghdr+0x108/0x2b0 [ 2296.965618][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2296.970300][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2296.975495][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2296.981118][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2296.986398][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2296.991153][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2296.995821][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2297.001612][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2297.006799][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.012858][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.019001][T23344] __do_fast_syscall_32+0x129/0x180 [ 2297.024190][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2297.029029][T23344] do_SYSENTER_32+0x73/0x90 [ 2297.033526][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.039836][T23344] RIP: 0023:0xf7f65549 [ 2297.043894][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2297.063487][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2297.071890][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2297.079848][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2297.087819][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2297.095791][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2297.103750][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2297.111799][T23344] Uninit was stored to memory at: [ 2297.116821][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2297.122547][T23344] __msan_chain_origin+0x57/0xa0 [ 2297.127473][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2297.132570][T23344] get_compat_msghdr+0x108/0x2b0 [ 2297.137494][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2297.141983][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2297.146648][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.152701][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.158843][T23344] __do_fast_syscall_32+0x129/0x180 [ 2297.164038][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2297.168874][T23344] do_SYSENTER_32+0x73/0x90 [ 2297.173365][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.179667][T23344] [ 2297.181974][T23344] Uninit was stored to memory at: [ 2297.186988][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2297.192692][T23344] __msan_chain_origin+0x57/0xa0 [ 2297.197615][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2297.202712][T23344] get_compat_msghdr+0x108/0x2b0 [ 2297.207636][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2297.212131][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2297.216802][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.222855][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.229003][T23344] __do_fast_syscall_32+0x129/0x180 [ 2297.234204][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2297.239051][T23344] do_SYSENTER_32+0x73/0x90 [ 2297.243561][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.249861][T23344] [ 2297.252169][T23344] Uninit was stored to memory at: [ 2297.257185][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2297.262902][T23344] __msan_chain_origin+0x57/0xa0 [ 2297.267825][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2297.272921][T23344] get_compat_msghdr+0x108/0x2b0 [ 2297.277847][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2297.282338][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2297.287002][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.293060][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.299200][T23344] __do_fast_syscall_32+0x129/0x180 [ 2297.304386][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2297.309223][T23344] do_SYSENTER_32+0x73/0x90 [ 2297.313715][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.320013][T23344] [ 2297.322320][T23344] Uninit was stored to memory at: [ 2297.327333][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2297.333038][T23344] __msan_chain_origin+0x57/0xa0 [ 2297.337962][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2297.343057][T23344] get_compat_msghdr+0x108/0x2b0 [ 2297.347982][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2297.352470][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2297.357132][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.363189][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.369340][T23344] __do_fast_syscall_32+0x129/0x180 [ 2297.374525][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2297.379362][T23344] do_SYSENTER_32+0x73/0x90 [ 2297.383850][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.390152][T23344] [ 2297.392458][T23344] Uninit was stored to memory at: [ 2297.397472][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2297.403180][T23344] __msan_chain_origin+0x57/0xa0 [ 2297.408106][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2297.413212][T23344] get_compat_msghdr+0x108/0x2b0 [ 2297.418142][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2297.422633][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2297.427312][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.433363][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.439849][T23344] __do_fast_syscall_32+0x129/0x180 [ 2297.445032][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2297.449866][T23344] do_SYSENTER_32+0x73/0x90 [ 2297.454357][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.460657][T23344] [ 2297.462967][T23344] Uninit was stored to memory at: [ 2297.467981][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2297.473686][T23344] __msan_chain_origin+0x57/0xa0 [ 2297.478609][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2297.483705][T23344] get_compat_msghdr+0x108/0x2b0 [ 2297.488630][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2297.493121][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2297.497790][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.503843][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.510100][T23344] __do_fast_syscall_32+0x129/0x180 [ 2297.515303][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2297.520147][T23344] do_SYSENTER_32+0x73/0x90 [ 2297.524641][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.530946][T23344] [ 2297.533263][T23344] Uninit was stored to memory at: [ 2297.538279][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2297.543987][T23344] __msan_chain_origin+0x57/0xa0 [ 2297.548917][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2297.554031][T23344] get_compat_msghdr+0x108/0x2b0 [ 2297.558963][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2297.563461][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2297.568140][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.574198][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.580339][T23344] __do_fast_syscall_32+0x129/0x180 [ 2297.585528][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2297.590364][T23344] do_SYSENTER_32+0x73/0x90 [ 2297.594854][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.601153][T23344] [ 2297.603463][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2297.610124][T23344] do_recvmmsg+0xc2/0x22e0 [ 2297.614534][T23344] do_recvmmsg+0xc2/0x22e0 [ 2297.817098][T23344] not chained 580000 origins [ 2297.821726][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2297.830382][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.840425][T23344] Call Trace: [ 2297.843711][T23344] dump_stack+0x21c/0x280 [ 2297.848048][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2297.853763][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2297.859824][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2297.865024][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2297.870647][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2297.876710][T23344] ? _copy_from_user+0x201/0x310 [ 2297.881641][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2297.886832][T23344] __msan_chain_origin+0x57/0xa0 [ 2297.891760][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2297.896862][T23344] get_compat_msghdr+0x108/0x2b0 [ 2297.901792][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2297.906286][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2297.911482][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2297.917106][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2297.922390][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2297.927141][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2297.931807][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2297.937598][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2297.942787][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2297.948868][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2297.955013][T23344] __do_fast_syscall_32+0x129/0x180 [ 2297.960213][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2297.965055][T23344] do_SYSENTER_32+0x73/0x90 [ 2297.969549][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2297.975880][T23344] RIP: 0023:0xf7f65549 [ 2297.979940][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2298.000495][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2298.008897][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2298.016872][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2298.024839][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2298.032815][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2298.040777][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2298.048743][T23344] Uninit was stored to memory at: [ 2298.053767][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2298.059475][T23344] __msan_chain_origin+0x57/0xa0 [ 2298.064400][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2298.069495][T23344] get_compat_msghdr+0x108/0x2b0 [ 2298.074421][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2298.078924][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2298.083590][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.089646][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.095793][T23344] __do_fast_syscall_32+0x129/0x180 [ 2298.100983][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2298.105824][T23344] do_SYSENTER_32+0x73/0x90 [ 2298.110318][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.116808][T23344] [ 2298.119119][T23344] Uninit was stored to memory at: [ 2298.124135][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2298.129844][T23344] __msan_chain_origin+0x57/0xa0 [ 2298.134784][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2298.139884][T23344] get_compat_msghdr+0x108/0x2b0 [ 2298.144987][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2298.149484][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2298.154153][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.160210][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.166353][T23344] __do_fast_syscall_32+0x129/0x180 [ 2298.171537][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2298.176375][T23344] do_SYSENTER_32+0x73/0x90 [ 2298.180864][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.187164][T23344] [ 2298.189471][T23344] Uninit was stored to memory at: [ 2298.194486][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2298.200193][T23344] __msan_chain_origin+0x57/0xa0 [ 2298.205119][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2298.210218][T23344] get_compat_msghdr+0x108/0x2b0 [ 2298.215159][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2298.219649][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2298.224313][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.230367][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.236506][T23344] __do_fast_syscall_32+0x129/0x180 [ 2298.241692][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2298.246531][T23344] do_SYSENTER_32+0x73/0x90 [ 2298.251022][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.257326][T23344] [ 2298.259633][T23344] Uninit was stored to memory at: [ 2298.264647][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2298.270352][T23344] __msan_chain_origin+0x57/0xa0 [ 2298.275275][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2298.280369][T23344] get_compat_msghdr+0x108/0x2b0 [ 2298.285293][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2298.289786][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2298.294450][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.300503][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.306655][T23344] __do_fast_syscall_32+0x129/0x180 [ 2298.311838][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2298.316674][T23344] do_SYSENTER_32+0x73/0x90 [ 2298.321165][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.327466][T23344] [ 2298.329772][T23344] Uninit was stored to memory at: [ 2298.334800][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2298.340505][T23344] __msan_chain_origin+0x57/0xa0 [ 2298.345427][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2298.350524][T23344] get_compat_msghdr+0x108/0x2b0 [ 2298.355450][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2298.359939][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2298.365817][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.371870][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.378011][T23344] __do_fast_syscall_32+0x129/0x180 [ 2298.383202][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2298.388481][T23344] do_SYSENTER_32+0x73/0x90 [ 2298.393007][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.399312][T23344] [ 2298.401619][T23344] Uninit was stored to memory at: [ 2298.407243][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2298.412960][T23344] __msan_chain_origin+0x57/0xa0 [ 2298.417894][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2298.423017][T23344] get_compat_msghdr+0x108/0x2b0 [ 2298.427948][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2298.433128][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2298.437793][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.443850][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.450009][T23344] __do_fast_syscall_32+0x129/0x180 [ 2298.455202][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2298.460048][T23344] do_SYSENTER_32+0x73/0x90 [ 2298.464541][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.470846][T23344] [ 2298.473158][T23344] Uninit was stored to memory at: [ 2298.478176][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2298.483916][T23344] __msan_chain_origin+0x57/0xa0 [ 2298.488839][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2298.493939][T23344] get_compat_msghdr+0x108/0x2b0 [ 2298.498866][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2298.503376][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2298.508046][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.514104][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.520249][T23344] __do_fast_syscall_32+0x129/0x180 [ 2298.525440][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2298.530455][T23344] do_SYSENTER_32+0x73/0x90 [ 2298.534948][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2298.541252][T23344] [ 2298.543573][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2298.550432][T23344] do_recvmmsg+0xc2/0x22e0 [ 2298.554871][T23344] do_recvmmsg+0xc2/0x22e0 [ 2298.847607][T23344] not chained 590000 origins [ 2298.852324][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2298.861018][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.871246][T23344] Call Trace: [ 2298.874543][T23344] dump_stack+0x21c/0x280 [ 2298.878882][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2298.884604][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2298.889995][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2298.895213][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2298.900854][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2298.906945][T23344] ? _copy_from_user+0x201/0x310 [ 2298.911886][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2298.917288][T23344] __msan_chain_origin+0x57/0xa0 [ 2298.922232][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2298.927350][T23344] get_compat_msghdr+0x108/0x2b0 [ 2298.932296][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2298.936834][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2298.942139][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2298.947807][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2298.953186][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2298.958224][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2298.962906][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2298.968711][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2298.973915][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2298.979990][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2298.986262][T23344] __do_fast_syscall_32+0x129/0x180 [ 2298.991466][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2298.996317][T23344] do_SYSENTER_32+0x73/0x90 [ 2299.000823][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.007236][T23344] RIP: 0023:0xf7f65549 [ 2299.011312][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2299.030923][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2299.039339][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2299.047401][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2299.055373][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2299.063347][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2299.071320][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2299.079468][T23344] Uninit was stored to memory at: [ 2299.084853][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2299.091085][T23344] __msan_chain_origin+0x57/0xa0 [ 2299.096013][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2299.101112][T23344] get_compat_msghdr+0x108/0x2b0 [ 2299.106048][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2299.110542][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2299.115212][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.121268][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.127413][T23344] __do_fast_syscall_32+0x129/0x180 [ 2299.132598][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2299.137436][T23344] do_SYSENTER_32+0x73/0x90 [ 2299.141929][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.148235][T23344] [ 2299.150549][T23344] Uninit was stored to memory at: [ 2299.155583][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2299.161291][T23344] __msan_chain_origin+0x57/0xa0 [ 2299.166216][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2299.171316][T23344] get_compat_msghdr+0x108/0x2b0 [ 2299.176246][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2299.180751][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2299.185426][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.191506][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.197649][T23344] __do_fast_syscall_32+0x129/0x180 [ 2299.202834][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2299.207677][T23344] do_SYSENTER_32+0x73/0x90 [ 2299.212173][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.218500][T23344] [ 2299.220811][T23344] Uninit was stored to memory at: [ 2299.225845][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2299.231556][T23344] __msan_chain_origin+0x57/0xa0 [ 2299.236483][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2299.241581][T23344] get_compat_msghdr+0x108/0x2b0 [ 2299.246508][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2299.251003][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2299.255688][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.261764][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.267907][T23344] __do_fast_syscall_32+0x129/0x180 [ 2299.273093][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2299.277932][T23344] do_SYSENTER_32+0x73/0x90 [ 2299.282424][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.288729][T23344] [ 2299.291054][T23344] Uninit was stored to memory at: [ 2299.296071][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2299.301781][T23344] __msan_chain_origin+0x57/0xa0 [ 2299.306717][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2299.311824][T23344] get_compat_msghdr+0x108/0x2b0 [ 2299.316755][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2299.321248][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2299.325923][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.331978][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.338121][T23344] __do_fast_syscall_32+0x129/0x180 [ 2299.343314][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2299.348156][T23344] do_SYSENTER_32+0x73/0x90 [ 2299.352649][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.358952][T23344] [ 2299.361264][T23344] Uninit was stored to memory at: [ 2299.366281][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2299.371996][T23344] __msan_chain_origin+0x57/0xa0 [ 2299.376920][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2299.382017][T23344] get_compat_msghdr+0x108/0x2b0 [ 2299.386942][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2299.391432][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2299.396118][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.402247][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.408392][T23344] __do_fast_syscall_32+0x129/0x180 [ 2299.413582][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2299.418423][T23344] do_SYSENTER_32+0x73/0x90 [ 2299.422918][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.429222][T23344] [ 2299.431556][T23344] Uninit was stored to memory at: [ 2299.436572][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2299.442279][T23344] __msan_chain_origin+0x57/0xa0 [ 2299.447222][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2299.452320][T23344] get_compat_msghdr+0x108/0x2b0 [ 2299.457248][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2299.466797][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2299.471464][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.477522][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.483679][T23344] __do_fast_syscall_32+0x129/0x180 [ 2299.488868][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2299.493709][T23344] do_SYSENTER_32+0x73/0x90 [ 2299.498203][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.504505][T23344] [ 2299.506815][T23344] Uninit was stored to memory at: [ 2299.511850][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2299.517575][T23344] __msan_chain_origin+0x57/0xa0 [ 2299.522511][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2299.527617][T23344] get_compat_msghdr+0x108/0x2b0 [ 2299.532550][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2299.537046][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2299.541714][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.547859][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.554005][T23344] __do_fast_syscall_32+0x129/0x180 [ 2299.559196][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2299.564063][T23344] do_SYSENTER_32+0x73/0x90 [ 2299.568564][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.574870][T23344] [ 2299.577184][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2299.583850][T23344] do_recvmmsg+0xc2/0x22e0 [ 2299.588255][T23344] do_recvmmsg+0xc2/0x22e0 [ 2299.759018][T23346] not chained 600000 origins [ 2299.763675][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2299.772339][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2299.782390][T23346] Call Trace: [ 2299.785687][T23346] dump_stack+0x21c/0x280 [ 2299.790029][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2299.795765][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2299.801835][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2299.807040][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2299.812680][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2299.818756][T23346] ? _copy_from_user+0x201/0x310 [ 2299.823740][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2299.828945][T23346] __msan_chain_origin+0x57/0xa0 [ 2299.833889][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2299.839008][T23346] get_compat_msghdr+0x108/0x2b0 [ 2299.843954][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2299.848475][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2299.854117][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2299.859403][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2299.864171][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2299.868854][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2299.874683][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2299.879884][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2299.885965][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2299.892127][T23346] __do_fast_syscall_32+0x129/0x180 [ 2299.897334][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2299.902182][T23346] do_SYSENTER_32+0x73/0x90 [ 2299.906677][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2299.912990][T23346] RIP: 0023:0xf7f65549 [ 2299.917049][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2299.936650][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2299.945052][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2299.953015][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2299.960975][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2299.968932][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2299.976891][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2299.984850][T23346] Uninit was stored to memory at: [ 2299.989872][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2299.995581][T23346] __msan_chain_origin+0x57/0xa0 [ 2300.000506][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2300.005605][T23346] get_compat_msghdr+0x108/0x2b0 [ 2300.010531][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2300.015024][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2300.019890][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.025950][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.032105][T23346] __do_fast_syscall_32+0x129/0x180 [ 2300.037291][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2300.042130][T23346] do_SYSENTER_32+0x73/0x90 [ 2300.046625][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.052927][T23346] [ 2300.055237][T23346] Uninit was stored to memory at: [ 2300.060262][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2300.065973][T23346] __msan_chain_origin+0x57/0xa0 [ 2300.070901][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2300.076001][T23346] get_compat_msghdr+0x108/0x2b0 [ 2300.080939][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2300.085449][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2300.090137][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.096193][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.102337][T23346] __do_fast_syscall_32+0x129/0x180 [ 2300.107526][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2300.112366][T23346] do_SYSENTER_32+0x73/0x90 [ 2300.116894][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.123195][T23346] [ 2300.125518][T23346] Uninit was stored to memory at: [ 2300.130535][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2300.136271][T23346] __msan_chain_origin+0x57/0xa0 [ 2300.141198][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2300.146297][T23346] get_compat_msghdr+0x108/0x2b0 [ 2300.151314][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2300.155807][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2300.160473][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.166530][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.172672][T23346] __do_fast_syscall_32+0x129/0x180 [ 2300.177859][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2300.182697][T23346] do_SYSENTER_32+0x73/0x90 [ 2300.187191][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.193679][T23346] [ 2300.195991][T23346] Uninit was stored to memory at: [ 2300.201005][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2300.206713][T23346] __msan_chain_origin+0x57/0xa0 [ 2300.211636][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2300.216735][T23346] get_compat_msghdr+0x108/0x2b0 [ 2300.221667][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2300.226160][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2300.230829][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.236897][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.243043][T23346] __do_fast_syscall_32+0x129/0x180 [ 2300.248250][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2300.253092][T23346] do_SYSENTER_32+0x73/0x90 [ 2300.257585][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.263887][T23346] [ 2300.266198][T23346] Uninit was stored to memory at: [ 2300.271215][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2300.276924][T23346] __msan_chain_origin+0x57/0xa0 [ 2300.281848][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2300.286944][T23346] get_compat_msghdr+0x108/0x2b0 [ 2300.291870][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2300.296363][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2300.301045][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.307102][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.313274][T23346] __do_fast_syscall_32+0x129/0x180 [ 2300.318460][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2300.323389][T23346] do_SYSENTER_32+0x73/0x90 [ 2300.327883][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.334186][T23346] [ 2300.336497][T23346] Uninit was stored to memory at: [ 2300.341515][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2300.347231][T23346] __msan_chain_origin+0x57/0xa0 [ 2300.352157][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2300.357254][T23346] get_compat_msghdr+0x108/0x2b0 [ 2300.362181][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2300.366672][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2300.371337][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.377392][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.383534][T23346] __do_fast_syscall_32+0x129/0x180 [ 2300.388718][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2300.393564][T23346] do_SYSENTER_32+0x73/0x90 [ 2300.398065][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.404370][T23346] [ 2300.406682][T23346] Uninit was stored to memory at: [ 2300.411698][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2300.417406][T23346] __msan_chain_origin+0x57/0xa0 [ 2300.422330][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2300.427429][T23346] get_compat_msghdr+0x108/0x2b0 [ 2300.432358][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2300.436853][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2300.441520][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.447575][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.453809][T23346] __do_fast_syscall_32+0x129/0x180 [ 2300.458995][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2300.463834][T23346] do_SYSENTER_32+0x73/0x90 [ 2300.468325][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.474626][T23346] [ 2300.476937][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2300.483774][T23346] do_recvmmsg+0xc2/0x22e0 [ 2300.488194][T23346] do_recvmmsg+0xc2/0x22e0 [ 2300.687533][T23344] not chained 610000 origins [ 2300.692164][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2300.700857][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2300.710909][T23344] Call Trace: [ 2300.714209][T23344] dump_stack+0x21c/0x280 [ 2300.718548][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2300.724277][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2300.730155][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2300.735372][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2300.741179][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2300.747258][T23344] ? _copy_from_user+0x201/0x310 [ 2300.752200][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2300.757426][T23344] __msan_chain_origin+0x57/0xa0 [ 2300.762367][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2300.767486][T23344] get_compat_msghdr+0x108/0x2b0 [ 2300.772439][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2300.776970][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2300.782179][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2300.787818][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2300.793109][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2300.797877][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2300.802568][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2300.808379][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2300.813606][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.819683][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.825929][T23344] __do_fast_syscall_32+0x129/0x180 [ 2300.831163][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2300.836104][T23344] do_SYSENTER_32+0x73/0x90 [ 2300.840618][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2300.846942][T23344] RIP: 0023:0xf7f65549 [ 2300.851211][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2300.870817][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2300.879239][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2300.887211][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2300.895212][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2300.903212][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2300.911186][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2300.919243][T23344] Uninit was stored to memory at: [ 2300.924286][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2300.930091][T23344] __msan_chain_origin+0x57/0xa0 [ 2300.935289][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2300.940396][T23344] get_compat_msghdr+0x108/0x2b0 [ 2300.945341][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2300.949863][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2300.954559][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2300.954588][T23346] not chained 620000 origins [ 2300.960624][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2300.965196][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2300.971333][T23344] __do_fast_syscall_32+0x129/0x180 [ 2300.979992][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2300.985173][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2300.995205][T23346] Call Trace: [ 2301.000043][T23344] do_SYSENTER_32+0x73/0x90 [ 2301.003308][T23346] dump_stack+0x21c/0x280 [ 2301.007786][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.012099][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2301.018485][T23344] [ 2301.024194][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2301.026487][T23344] Uninit was stored to memory at: [ 2301.032539][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2301.037564][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2301.042750][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2301.048533][T23344] __msan_chain_origin+0x57/0xa0 [ 2301.054140][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2301.059046][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2301.065274][T23346] ? _copy_from_user+0x201/0x310 [ 2301.070358][T23344] get_compat_msghdr+0x108/0x2b0 [ 2301.075268][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2301.080183][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2301.085357][T23346] __msan_chain_origin+0x57/0xa0 [ 2301.089833][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2301.095224][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2301.100408][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.105494][T23346] get_compat_msghdr+0x108/0x2b0 [ 2301.111525][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.111549][T23344] __do_fast_syscall_32+0x129/0x180 [ 2301.116464][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2301.122590][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2301.127774][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2301.132246][T23344] do_SYSENTER_32+0x73/0x90 [ 2301.137092][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2301.142697][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.147172][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2301.152418][T23344] [ 2301.158731][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2301.163460][T23344] Uninit was stored to memory at: [ 2301.165778][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2301.170433][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2301.175430][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2301.181213][T23344] __msan_chain_origin+0x57/0xa0 [ 2301.186922][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.192091][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2301.197019][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.203058][T23344] get_compat_msghdr+0x108/0x2b0 [ 2301.208150][T23346] __do_fast_syscall_32+0x129/0x180 [ 2301.214275][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2301.219211][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2301.224383][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2301.228871][T23346] do_SYSENTER_32+0x73/0x90 [ 2301.234047][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.238787][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.243280][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.249416][T23346] RIP: 0023:0xf7f65549 [ 2301.255719][T23344] __do_fast_syscall_32+0x129/0x180 [ 2301.261842][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2301.265887][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2301.271054][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2301.290643][T23344] do_SYSENTER_32+0x73/0x90 [ 2301.295564][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2301.303954][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.308432][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2301.316460][T23344] [ 2301.322765][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2301.330709][T23344] Uninit was stored to memory at: [ 2301.333304][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2301.341279][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2301.346265][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2301.354221][T23344] __msan_chain_origin+0x57/0xa0 [ 2301.359899][T23346] Uninit was stored to memory at: [ 2301.367858][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2301.372771][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2301.377789][T23344] get_compat_msghdr+0x108/0x2b0 [ 2301.382876][T23346] __msan_chain_origin+0x57/0xa0 [ 2301.388570][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2301.393910][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2301.398840][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2301.403317][T23346] get_compat_msghdr+0x108/0x2b0 [ 2301.408438][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.413090][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2301.418001][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.424039][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2301.428517][T23344] __do_fast_syscall_32+0x129/0x180 [ 2301.434733][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.439399][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2301.444574][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.450612][T23344] do_SYSENTER_32+0x73/0x90 [ 2301.455439][T23346] __do_fast_syscall_32+0x129/0x180 [ 2301.461665][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.466232][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2301.471389][T23344] [ 2301.477700][T23346] do_SYSENTER_32+0x73/0x90 [ 2301.482515][T23344] Uninit was stored to memory at: [ 2301.484832][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.489312][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2301.494295][T23346] [ 2301.501738][T23344] __msan_chain_origin+0x57/0xa0 [ 2301.507416][T23346] Uninit was stored to memory at: [ 2301.509732][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2301.514658][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2301.519652][T23344] get_compat_msghdr+0x108/0x2b0 [ 2301.524739][T23346] __msan_chain_origin+0x57/0xa0 [ 2301.530430][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2301.535339][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2301.540252][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2301.544744][T23346] get_compat_msghdr+0x108/0x2b0 [ 2301.549849][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.554506][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2301.559510][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.565560][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2301.570035][T23344] __do_fast_syscall_32+0x129/0x180 [ 2301.576161][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.580809][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2301.585982][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.592037][T23344] do_SYSENTER_32+0x73/0x90 [ 2301.596863][T23346] __do_fast_syscall_32+0x129/0x180 [ 2301.603007][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.607482][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2301.612641][T23344] [ 2301.618953][T23346] do_SYSENTER_32+0x73/0x90 [ 2301.623778][T23344] Uninit was stored to memory at: [ 2301.626116][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.630707][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2301.635703][T23346] [ 2301.642025][T23344] __msan_chain_origin+0x57/0xa0 [ 2301.647700][T23346] Uninit was stored to memory at: [ 2301.650036][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2301.654954][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2301.659948][T23344] get_compat_msghdr+0x108/0x2b0 [ 2301.665036][T23346] __msan_chain_origin+0x57/0xa0 [ 2301.670730][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2301.675645][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2301.680558][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2301.685033][T23346] get_compat_msghdr+0x108/0x2b0 [ 2301.690124][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.694775][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2301.699687][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.705730][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2301.710225][T23344] __do_fast_syscall_32+0x129/0x180 [ 2301.716370][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.721028][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2301.726222][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.732261][T23344] do_SYSENTER_32+0x73/0x90 [ 2301.737089][T23346] __do_fast_syscall_32+0x129/0x180 [ 2301.743222][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.747785][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2301.752955][T23344] [ 2301.759268][T23346] do_SYSENTER_32+0x73/0x90 [ 2301.764083][T23344] Uninit was stored to memory at: [ 2301.766400][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.770887][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2301.775868][T23346] [ 2301.782181][T23344] __msan_chain_origin+0x57/0xa0 [ 2301.787860][T23346] Uninit was stored to memory at: [ 2301.790178][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2301.795114][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2301.800108][T23344] get_compat_msghdr+0x108/0x2b0 [ 2301.805225][T23346] __msan_chain_origin+0x57/0xa0 [ 2301.810933][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2301.815855][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2301.820773][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2301.825262][T23346] get_compat_msghdr+0x108/0x2b0 [ 2301.830348][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.835013][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2301.839923][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.845963][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2301.850456][T23344] __do_fast_syscall_32+0x129/0x180 [ 2301.856581][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.861233][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2301.866419][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.872459][T23344] do_SYSENTER_32+0x73/0x90 [ 2301.877291][T23346] __do_fast_syscall_32+0x129/0x180 [ 2301.883776][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.888529][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2301.893860][T23344] [ 2301.900171][T23346] do_SYSENTER_32+0x73/0x90 [ 2301.904983][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2301.907300][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2301.911777][T23344] do_recvmmsg+0xc2/0x22e0 [ 2301.918414][T23346] [ 2301.924726][T23344] do_recvmmsg+0xc2/0x22e0 [ 2301.929111][T23346] Uninit was stored to memory at: [ 2301.940847][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2301.946575][T23346] __msan_chain_origin+0x57/0xa0 [ 2301.951541][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2301.956724][T23346] get_compat_msghdr+0x108/0x2b0 [ 2301.961758][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2301.966467][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2301.971148][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2301.977227][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2301.983395][T23346] __do_fast_syscall_32+0x129/0x180 [ 2301.989111][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2301.993951][T23346] do_SYSENTER_32+0x73/0x90 [ 2301.998446][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.004749][T23346] [ 2302.007057][T23346] Uninit was stored to memory at: [ 2302.012081][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2302.017794][T23346] __msan_chain_origin+0x57/0xa0 [ 2302.022723][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2302.028777][T23346] get_compat_msghdr+0x108/0x2b0 [ 2302.033707][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2302.038285][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2302.042949][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.049005][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.055152][T23346] __do_fast_syscall_32+0x129/0x180 [ 2302.060339][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2302.065177][T23346] do_SYSENTER_32+0x73/0x90 [ 2302.069670][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.075976][T23346] [ 2302.078287][T23346] Uninit was stored to memory at: [ 2302.083310][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2302.089019][T23346] __msan_chain_origin+0x57/0xa0 [ 2302.093943][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2302.099041][T23346] get_compat_msghdr+0x108/0x2b0 [ 2302.103968][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2302.108547][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2302.113214][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.119270][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.125411][T23346] __do_fast_syscall_32+0x129/0x180 [ 2302.130596][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2302.135434][T23346] do_SYSENTER_32+0x73/0x90 [ 2302.139926][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.146229][T23346] [ 2302.148541][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2302.155209][T23346] do_recvmmsg+0xc2/0x22e0 [ 2302.159630][T23346] do_recvmmsg+0xc2/0x22e0 [ 2302.349930][T23344] not chained 630000 origins [ 2302.354581][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2302.363249][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2302.373306][T23344] Call Trace: [ 2302.376608][T23344] dump_stack+0x21c/0x280 [ 2302.380950][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2302.386678][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2302.393362][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2302.398565][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2302.404220][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2302.410438][T23344] ? _copy_from_user+0x201/0x310 [ 2302.415401][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2302.420604][T23344] __msan_chain_origin+0x57/0xa0 [ 2302.425545][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2302.430664][T23344] get_compat_msghdr+0x108/0x2b0 [ 2302.435619][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2302.440125][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2302.445350][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2302.450994][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2302.456281][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2302.461047][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2302.466427][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2302.472227][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2302.477454][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.483528][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.489694][T23344] __do_fast_syscall_32+0x129/0x180 [ 2302.494898][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2302.499752][T23344] do_SYSENTER_32+0x73/0x90 [ 2302.504260][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.510584][T23344] RIP: 0023:0xf7f65549 [ 2302.514655][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2302.534259][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2302.542674][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2302.550646][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2302.558622][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2302.566693][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2302.574671][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2302.582641][T23344] Uninit was stored to memory at: [ 2302.587700][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2302.593439][T23344] __msan_chain_origin+0x57/0xa0 [ 2302.598376][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2302.603488][T23344] get_compat_msghdr+0x108/0x2b0 [ 2302.608425][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2302.612927][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2302.617604][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.623677][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.629835][T23344] __do_fast_syscall_32+0x129/0x180 [ 2302.635034][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2302.639906][T23344] do_SYSENTER_32+0x73/0x90 [ 2302.644413][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.650754][T23344] [ 2302.653070][T23344] Uninit was stored to memory at: [ 2302.658102][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2302.663860][T23344] __msan_chain_origin+0x57/0xa0 [ 2302.668928][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2302.674049][T23344] get_compat_msghdr+0x108/0x2b0 [ 2302.678992][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2302.683500][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2302.693921][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.700010][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.706172][T23344] __do_fast_syscall_32+0x129/0x180 [ 2302.711505][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2302.716453][T23344] do_SYSENTER_32+0x73/0x90 [ 2302.721035][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.727351][T23344] [ 2302.729671][T23344] Uninit was stored to memory at: [ 2302.734705][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2302.740431][T23344] __msan_chain_origin+0x57/0xa0 [ 2302.745403][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2302.750540][T23344] get_compat_msghdr+0x108/0x2b0 [ 2302.755517][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2302.760121][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2302.764824][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.770893][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.777052][T23344] __do_fast_syscall_32+0x129/0x180 [ 2302.782256][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2302.787114][T23344] do_SYSENTER_32+0x73/0x90 [ 2302.791622][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.797949][T23344] [ 2302.800271][T23344] Uninit was stored to memory at: [ 2302.805306][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2302.811127][T23344] __msan_chain_origin+0x57/0xa0 [ 2302.816066][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2302.821176][T23344] get_compat_msghdr+0x108/0x2b0 [ 2302.826113][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2302.830612][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2302.835301][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.841395][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.847549][T23344] __do_fast_syscall_32+0x129/0x180 [ 2302.852743][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2302.857590][T23344] do_SYSENTER_32+0x73/0x90 [ 2302.862091][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.868397][T23344] [ 2302.870713][T23344] Uninit was stored to memory at: [ 2302.875736][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2302.881453][T23344] __msan_chain_origin+0x57/0xa0 [ 2302.886387][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2302.891511][T23344] get_compat_msghdr+0x108/0x2b0 [ 2302.896453][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2302.900957][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2302.905630][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2302.911692][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2302.917845][T23344] __do_fast_syscall_32+0x129/0x180 [ 2302.923041][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2302.927889][T23344] do_SYSENTER_32+0x73/0x90 [ 2302.932241][T23346] not chained 640000 origins [ 2302.932391][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2302.936981][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2302.943274][T23344] [ 2302.951920][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2302.954234][T23344] Uninit was stored to memory at: [ 2302.964266][T23346] Call Trace: [ 2302.969289][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2302.972550][T23346] dump_stack+0x21c/0x280 [ 2302.978243][T23344] __msan_chain_origin+0x57/0xa0 [ 2302.982552][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2302.987552][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2302.993247][T23346] ? sched_clock_cpu+0x5e/0x950 [ 2302.998334][T23344] get_compat_msghdr+0x108/0x2b0 [ 2303.003178][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2303.008090][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2303.013279][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2303.017770][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2303.023379][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2303.028030][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.034066][T23346] ? _copy_from_user+0x201/0x310 [ 2303.040107][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.045016][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2303.051148][T23344] __do_fast_syscall_32+0x129/0x180 [ 2303.056406][T23346] __msan_chain_origin+0x57/0xa0 [ 2303.061578][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2303.066490][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2303.071315][T23344] do_SYSENTER_32+0x73/0x90 [ 2303.076401][T23346] get_compat_msghdr+0x108/0x2b0 [ 2303.080903][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.085815][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2303.092100][T23344] [ 2303.096596][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2303.098885][T23344] Uninit was stored to memory at: [ 2303.104504][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2303.109501][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2303.114759][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2303.120451][T23344] __msan_chain_origin+0x57/0xa0 [ 2303.125211][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2303.130207][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2303.135118][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2303.140212][T23344] get_compat_msghdr+0x108/0x2b0 [ 2303.146006][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2303.150933][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2303.156125][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.160603][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2303.166731][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.171382][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.177536][T23346] __do_fast_syscall_32+0x129/0x180 [ 2303.183572][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.188744][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2303.194868][T23344] __do_fast_syscall_32+0x129/0x180 [ 2303.199692][T23346] do_SYSENTER_32+0x73/0x90 [ 2303.204866][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2303.209344][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.214166][T23344] do_SYSENTER_32+0x73/0x90 [ 2303.220460][T23346] RIP: 0023:0xf7f65549 [ 2303.224943][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.228985][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2303.235287][T23344] [ 2303.254870][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2303.257174][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2303.265561][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2303.272214][T23344] do_recvmmsg+0xc2/0x22e0 [ 2303.280160][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2303.284555][T23344] do_recvmmsg+0xc2/0x22e0 [ 2303.292496][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2303.304880][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2303.312851][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2303.321064][T23346] Uninit was stored to memory at: [ 2303.326127][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2303.331851][T23346] __msan_chain_origin+0x57/0xa0 [ 2303.336786][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2303.341896][T23346] get_compat_msghdr+0x108/0x2b0 [ 2303.346826][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2303.351317][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2303.355982][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.362062][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.368206][T23346] __do_fast_syscall_32+0x129/0x180 [ 2303.373393][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2303.378256][T23346] do_SYSENTER_32+0x73/0x90 [ 2303.382752][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.389069][T23346] [ 2303.391380][T23346] Uninit was stored to memory at: [ 2303.396403][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2303.402115][T23346] __msan_chain_origin+0x57/0xa0 [ 2303.407084][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2303.412190][T23346] get_compat_msghdr+0x108/0x2b0 [ 2303.417116][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2303.421608][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2303.426271][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.432326][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.438492][T23346] __do_fast_syscall_32+0x129/0x180 [ 2303.443684][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2303.448526][T23346] do_SYSENTER_32+0x73/0x90 [ 2303.453019][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.459321][T23346] [ 2303.461630][T23346] Uninit was stored to memory at: [ 2303.466647][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2303.472353][T23346] __msan_chain_origin+0x57/0xa0 [ 2303.477277][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2303.482375][T23346] get_compat_msghdr+0x108/0x2b0 [ 2303.487308][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2303.491818][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2303.496486][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.502549][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.509061][T23346] __do_fast_syscall_32+0x129/0x180 [ 2303.514249][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2303.519089][T23346] do_SYSENTER_32+0x73/0x90 [ 2303.523582][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.529885][T23346] [ 2303.532200][T23346] Uninit was stored to memory at: [ 2303.537215][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2303.542922][T23346] __msan_chain_origin+0x57/0xa0 [ 2303.547948][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2303.553076][T23346] get_compat_msghdr+0x108/0x2b0 [ 2303.558015][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2303.562519][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2303.567222][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.573280][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.579425][T23346] __do_fast_syscall_32+0x129/0x180 [ 2303.584628][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2303.589470][T23346] do_SYSENTER_32+0x73/0x90 [ 2303.593965][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.600271][T23346] [ 2303.602584][T23346] Uninit was stored to memory at: [ 2303.607600][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2303.613309][T23346] __msan_chain_origin+0x57/0xa0 [ 2303.618235][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2303.623334][T23346] get_compat_msghdr+0x108/0x2b0 [ 2303.628261][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2303.633362][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2303.638027][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.644081][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.650224][T23346] __do_fast_syscall_32+0x129/0x180 [ 2303.655409][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2303.660353][T23346] do_SYSENTER_32+0x73/0x90 [ 2303.664856][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.671167][T23346] [ 2303.673484][T23346] Uninit was stored to memory at: [ 2303.678513][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2303.684237][T23346] __msan_chain_origin+0x57/0xa0 [ 2303.689178][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2303.694285][T23346] get_compat_msghdr+0x108/0x2b0 [ 2303.699239][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2303.703750][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2303.709826][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.715892][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.722052][T23346] __do_fast_syscall_32+0x129/0x180 [ 2303.727357][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2303.732203][T23346] do_SYSENTER_32+0x73/0x90 [ 2303.736706][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.743015][T23346] [ 2303.745326][T23346] Uninit was stored to memory at: [ 2303.750347][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2303.756057][T23346] __msan_chain_origin+0x57/0xa0 [ 2303.761159][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2303.766257][T23346] get_compat_msghdr+0x108/0x2b0 [ 2303.771184][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2303.775687][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2303.780375][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2303.786429][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2303.792571][T23346] __do_fast_syscall_32+0x129/0x180 [ 2303.797759][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2303.802597][T23346] do_SYSENTER_32+0x73/0x90 [ 2303.807090][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2303.813418][T23346] [ 2303.815729][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2303.822392][T23346] do_recvmmsg+0xc2/0x22e0 [ 2303.826796][T23346] do_recvmmsg+0xc2/0x22e0 [ 2304.431082][ T8892] tipc: TX() has been purged, node left! [ 2305.973798][T23344] not chained 650000 origins [ 2305.978442][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2305.987113][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2305.997191][T23344] Call Trace: [ 2306.000525][T23344] dump_stack+0x21c/0x280 [ 2306.004874][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2306.010600][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2306.015984][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2306.021187][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2306.026958][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2306.033040][T23344] ? _copy_from_user+0x201/0x310 [ 2306.038015][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2306.043228][T23344] __msan_chain_origin+0x57/0xa0 [ 2306.048171][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2306.053291][T23344] get_compat_msghdr+0x108/0x2b0 [ 2306.058238][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2306.062781][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2306.067996][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2306.073651][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2306.078948][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2306.083714][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2306.088401][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2306.094226][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2306.099433][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.105602][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.111937][T23344] __do_fast_syscall_32+0x129/0x180 [ 2306.117134][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2306.121988][T23344] do_SYSENTER_32+0x73/0x90 [ 2306.126503][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.132832][T23344] RIP: 0023:0xf7f65549 [ 2306.136945][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2306.156554][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2306.164958][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2306.172921][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2306.180886][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2306.188847][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2306.196808][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2306.204778][T23344] Uninit was stored to memory at: [ 2306.209806][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2306.215514][T23344] __msan_chain_origin+0x57/0xa0 [ 2306.220437][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2306.225535][T23344] get_compat_msghdr+0x108/0x2b0 [ 2306.230462][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2306.234956][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2306.239626][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.245699][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.251842][T23344] __do_fast_syscall_32+0x129/0x180 [ 2306.257027][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2306.261866][T23344] do_SYSENTER_32+0x73/0x90 [ 2306.266379][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.272681][T23344] [ 2306.274989][T23344] Uninit was stored to memory at: [ 2306.280004][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2306.285715][T23344] __msan_chain_origin+0x57/0xa0 [ 2306.290642][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2306.295756][T23344] get_compat_msghdr+0x108/0x2b0 [ 2306.300700][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2306.305193][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2306.309858][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.315914][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.322061][T23344] __do_fast_syscall_32+0x129/0x180 [ 2306.327253][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2306.332107][T23344] do_SYSENTER_32+0x73/0x90 [ 2306.336603][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.342910][T23344] [ 2306.345222][T23344] Uninit was stored to memory at: [ 2306.350242][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2306.355964][T23344] __msan_chain_origin+0x57/0xa0 [ 2306.360906][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2306.366003][T23344] get_compat_msghdr+0x108/0x2b0 [ 2306.370957][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2306.375464][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2306.380129][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.386183][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.392324][T23344] __do_fast_syscall_32+0x129/0x180 [ 2306.397509][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2306.402357][T23344] do_SYSENTER_32+0x73/0x90 [ 2306.406874][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.413177][T23344] [ 2306.415487][T23344] Uninit was stored to memory at: [ 2306.420502][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2306.426294][T23344] __msan_chain_origin+0x57/0xa0 [ 2306.431238][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2306.436345][T23344] get_compat_msghdr+0x108/0x2b0 [ 2306.441278][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2306.445772][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2306.450438][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.456494][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.462644][T23344] __do_fast_syscall_32+0x129/0x180 [ 2306.467946][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2306.472785][T23344] do_SYSENTER_32+0x73/0x90 [ 2306.477278][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.483579][T23344] [ 2306.485899][T23344] Uninit was stored to memory at: [ 2306.490917][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2306.496632][T23344] __msan_chain_origin+0x57/0xa0 [ 2306.501558][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2306.506664][T23344] get_compat_msghdr+0x108/0x2b0 [ 2306.511611][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2306.516132][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2306.520827][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.526908][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.533057][T23344] __do_fast_syscall_32+0x129/0x180 [ 2306.538379][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2306.543228][T23344] do_SYSENTER_32+0x73/0x90 [ 2306.547738][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.554043][T23344] [ 2306.556382][T23344] Uninit was stored to memory at: [ 2306.561400][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2306.567131][T23344] __msan_chain_origin+0x57/0xa0 [ 2306.572059][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2306.577158][T23344] get_compat_msghdr+0x108/0x2b0 [ 2306.582107][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2306.586599][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2306.591265][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.597322][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.603465][T23344] __do_fast_syscall_32+0x129/0x180 [ 2306.608654][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2306.613492][T23344] do_SYSENTER_32+0x73/0x90 [ 2306.617985][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.624323][T23344] [ 2306.626643][T23344] Uninit was stored to memory at: [ 2306.631659][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2306.637376][T23344] __msan_chain_origin+0x57/0xa0 [ 2306.642389][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2306.647506][T23344] get_compat_msghdr+0x108/0x2b0 [ 2306.652435][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2306.656929][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2306.661594][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2306.667648][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2306.673791][T23344] __do_fast_syscall_32+0x129/0x180 [ 2306.678977][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2306.683817][T23344] do_SYSENTER_32+0x73/0x90 [ 2306.688309][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2306.694613][T23344] [ 2306.697011][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2306.703693][T23344] do_recvmmsg+0xc2/0x22e0 [ 2306.708103][T23344] do_recvmmsg+0xc2/0x22e0 [ 2306.877083][T23346] not chained 660000 origins [ 2306.881736][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2306.890433][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2306.900510][T23346] Call Trace: [ 2306.903810][T23346] dump_stack+0x21c/0x280 [ 2306.908152][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2306.913877][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2306.919266][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2306.924478][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2306.930128][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2306.936206][T23346] ? _copy_from_user+0x201/0x310 [ 2306.941145][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2306.946348][T23346] __msan_chain_origin+0x57/0xa0 [ 2306.951288][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2306.956420][T23346] get_compat_msghdr+0x108/0x2b0 [ 2306.961366][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2306.965886][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2306.971531][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2306.976819][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2306.981641][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2306.986321][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2306.992300][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2306.997508][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2307.003586][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2307.010962][T23346] __do_fast_syscall_32+0x129/0x180 [ 2307.016171][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2307.021028][T23346] do_SYSENTER_32+0x73/0x90 [ 2307.025544][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.031867][T23346] RIP: 0023:0xf7f65549 [ 2307.035939][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2307.055546][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2307.063963][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2307.071933][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2307.079902][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2307.087896][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2307.095894][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2307.103864][T23346] Uninit was stored to memory at: [ 2307.108904][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2307.114628][T23346] __msan_chain_origin+0x57/0xa0 [ 2307.119567][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2307.124681][T23346] get_compat_msghdr+0x108/0x2b0 [ 2307.129661][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2307.134167][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2307.138847][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2307.144914][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2307.151073][T23346] __do_fast_syscall_32+0x129/0x180 [ 2307.156270][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2307.161117][T23346] do_SYSENTER_32+0x73/0x90 [ 2307.165627][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.171935][T23346] [ 2307.174249][T23346] Uninit was stored to memory at: [ 2307.179271][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2307.184990][T23346] __msan_chain_origin+0x57/0xa0 [ 2307.189941][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2307.195058][T23346] get_compat_msghdr+0x108/0x2b0 [ 2307.199994][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2307.204487][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2307.209155][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2307.215209][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2307.221378][T23346] __do_fast_syscall_32+0x129/0x180 [ 2307.226566][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2307.231406][T23346] do_SYSENTER_32+0x73/0x90 [ 2307.235898][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.242199][T23346] [ 2307.244510][T23346] Uninit was stored to memory at: [ 2307.249530][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2307.255239][T23346] __msan_chain_origin+0x57/0xa0 [ 2307.260164][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2307.265261][T23346] get_compat_msghdr+0x108/0x2b0 [ 2307.270189][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2307.274680][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2307.279345][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2307.285398][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2307.291539][T23346] __do_fast_syscall_32+0x129/0x180 [ 2307.296731][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2307.301577][T23346] do_SYSENTER_32+0x73/0x90 [ 2307.306072][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.312373][T23346] [ 2307.314683][T23346] Uninit was stored to memory at: [ 2307.319696][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2307.325403][T23346] __msan_chain_origin+0x57/0xa0 [ 2307.330329][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2307.335427][T23346] get_compat_msghdr+0x108/0x2b0 [ 2307.340352][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2307.344843][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2307.349511][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2307.355567][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2307.361711][T23346] __do_fast_syscall_32+0x129/0x180 [ 2307.366902][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2307.371741][T23346] do_SYSENTER_32+0x73/0x90 [ 2307.376249][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.382549][T23346] [ 2307.384857][T23346] Uninit was stored to memory at: [ 2307.389872][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2307.395580][T23346] __msan_chain_origin+0x57/0xa0 [ 2307.400511][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2307.405613][T23346] get_compat_msghdr+0x108/0x2b0 [ 2307.410544][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2307.415052][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2307.419718][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2307.425775][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2307.431917][T23346] __do_fast_syscall_32+0x129/0x180 [ 2307.437138][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2307.441977][T23346] do_SYSENTER_32+0x73/0x90 [ 2307.446492][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.452808][T23346] [ 2307.455118][T23346] Uninit was stored to memory at: [ 2307.460133][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2307.465843][T23346] __msan_chain_origin+0x57/0xa0 [ 2307.470771][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2307.475872][T23346] get_compat_msghdr+0x108/0x2b0 [ 2307.480800][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2307.485293][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2307.489960][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2307.496016][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2307.502159][T23346] __do_fast_syscall_32+0x129/0x180 [ 2307.507345][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2307.512186][T23346] do_SYSENTER_32+0x73/0x90 [ 2307.516694][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.522996][T23346] [ 2307.525307][T23346] Uninit was stored to memory at: [ 2307.530322][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2307.536031][T23346] __msan_chain_origin+0x57/0xa0 [ 2307.540960][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2307.546058][T23346] get_compat_msghdr+0x108/0x2b0 [ 2307.550999][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2307.555503][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2307.560180][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2307.566242][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2307.572395][T23346] __do_fast_syscall_32+0x129/0x180 [ 2307.577666][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2307.582501][T23346] do_SYSENTER_32+0x73/0x90 [ 2307.587005][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.593305][T23346] [ 2307.595614][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2307.602275][T23346] do_recvmmsg+0xc2/0x22e0 [ 2307.606691][T23346] do_recvmmsg+0xc2/0x22e0 [ 2307.797671][T23344] not chained 670000 origins [ 2307.802312][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2307.810979][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2307.821028][T23344] Call Trace: [ 2307.824325][T23344] dump_stack+0x21c/0x280 [ 2307.828663][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2307.834389][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2307.839765][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2307.844962][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2307.850597][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2307.856666][T23344] ? _copy_from_user+0x201/0x310 [ 2307.861608][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2307.867330][T23344] __msan_chain_origin+0x57/0xa0 [ 2307.872270][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2307.877386][T23344] get_compat_msghdr+0x108/0x2b0 [ 2307.883026][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2307.887530][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2307.892738][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2307.898379][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2307.903672][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2307.908448][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2307.913138][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2307.918947][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2307.924239][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2307.930316][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2307.936476][T23344] __do_fast_syscall_32+0x129/0x180 [ 2307.941682][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2307.946535][T23344] do_SYSENTER_32+0x73/0x90 [ 2307.951041][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2307.957361][T23344] RIP: 0023:0xf7f65549 [ 2307.961524][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2307.981136][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2307.989899][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2307.997877][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2308.005857][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2308.013832][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2308.021810][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2308.029782][T23344] Uninit was stored to memory at: [ 2308.034826][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2308.040557][T23344] __msan_chain_origin+0x57/0xa0 [ 2308.045647][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2308.050756][T23344] get_compat_msghdr+0x108/0x2b0 [ 2308.055693][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2308.060215][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2308.064922][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.071114][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.077273][T23344] __do_fast_syscall_32+0x129/0x180 [ 2308.082487][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2308.087344][T23344] do_SYSENTER_32+0x73/0x90 [ 2308.091968][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.098280][T23344] [ 2308.100597][T23344] Uninit was stored to memory at: [ 2308.105630][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2308.111439][T23344] __msan_chain_origin+0x57/0xa0 [ 2308.116377][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2308.121484][T23344] get_compat_msghdr+0x108/0x2b0 [ 2308.126442][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2308.130940][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2308.135612][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.141672][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.147820][T23344] __do_fast_syscall_32+0x129/0x180 [ 2308.153012][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2308.157862][T23344] do_SYSENTER_32+0x73/0x90 [ 2308.162375][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.168681][T23344] [ 2308.170994][T23344] Uninit was stored to memory at: [ 2308.176013][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2308.181720][T23344] __msan_chain_origin+0x57/0xa0 [ 2308.186642][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2308.191738][T23344] get_compat_msghdr+0x108/0x2b0 [ 2308.196663][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2308.201155][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2308.205835][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.211888][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.218036][T23344] __do_fast_syscall_32+0x129/0x180 [ 2308.223231][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2308.228074][T23344] do_SYSENTER_32+0x73/0x90 [ 2308.232568][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.238872][T23344] [ 2308.241180][T23344] Uninit was stored to memory at: [ 2308.246196][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2308.251901][T23344] __msan_chain_origin+0x57/0xa0 [ 2308.256822][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2308.261917][T23344] get_compat_msghdr+0x108/0x2b0 [ 2308.266842][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2308.271331][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2308.276087][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.282141][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.288295][T23344] __do_fast_syscall_32+0x129/0x180 [ 2308.293493][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2308.298343][T23344] do_SYSENTER_32+0x73/0x90 [ 2308.302847][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.309146][T23344] [ 2308.311455][T23344] Uninit was stored to memory at: [ 2308.316468][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2308.322181][T23344] __msan_chain_origin+0x57/0xa0 [ 2308.327106][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2308.332203][T23344] get_compat_msghdr+0x108/0x2b0 [ 2308.337125][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2308.341617][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2308.346279][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.352331][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.358472][T23344] __do_fast_syscall_32+0x129/0x180 [ 2308.363656][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2308.368506][T23344] do_SYSENTER_32+0x73/0x90 [ 2308.372995][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.379295][T23344] [ 2308.381618][T23344] Uninit was stored to memory at: [ 2308.386632][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2308.392338][T23344] __msan_chain_origin+0x57/0xa0 [ 2308.397261][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2308.402358][T23344] get_compat_msghdr+0x108/0x2b0 [ 2308.407283][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2308.411779][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2308.416443][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.422499][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.429086][T23344] __do_fast_syscall_32+0x129/0x180 [ 2308.434269][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2308.439105][T23344] do_SYSENTER_32+0x73/0x90 [ 2308.443607][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.449913][T23344] [ 2308.452219][T23344] Uninit was stored to memory at: [ 2308.457231][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2308.462959][T23344] __msan_chain_origin+0x57/0xa0 [ 2308.467883][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2308.472994][T23344] get_compat_msghdr+0x108/0x2b0 [ 2308.477924][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2308.482429][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2308.487092][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.493145][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.499286][T23344] __do_fast_syscall_32+0x129/0x180 [ 2308.504471][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2308.509308][T23344] do_SYSENTER_32+0x73/0x90 [ 2308.513797][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.520095][T23344] [ 2308.522405][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2308.529067][T23344] do_recvmmsg+0xc2/0x22e0 [ 2308.533488][T23344] do_recvmmsg+0xc2/0x22e0 [ 2308.632116][T23346] not chained 680000 origins [ 2308.636749][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2308.645692][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2308.655747][T23346] Call Trace: [ 2308.659044][T23346] dump_stack+0x21c/0x280 [ 2308.663382][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2308.669107][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2308.674483][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2308.679683][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2308.685360][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2308.691430][T23346] ? _copy_from_user+0x201/0x310 [ 2308.696371][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2308.701825][T23346] __msan_chain_origin+0x57/0xa0 [ 2308.706773][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2308.711895][T23346] get_compat_msghdr+0x108/0x2b0 [ 2308.716840][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2308.721365][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2308.727037][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2308.732333][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2308.737105][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2308.741797][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2308.756731][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2308.761936][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.768008][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.774167][T23346] __do_fast_syscall_32+0x129/0x180 [ 2308.779370][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2308.784226][T23346] do_SYSENTER_32+0x73/0x90 [ 2308.788734][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.795057][T23346] RIP: 0023:0xf7f65549 [ 2308.799125][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2308.818728][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2308.827147][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2308.835121][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2308.843091][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2308.851061][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2308.859116][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2308.867085][T23346] Uninit was stored to memory at: [ 2308.872117][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2308.877839][T23346] __msan_chain_origin+0x57/0xa0 [ 2308.882797][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2308.887908][T23346] get_compat_msghdr+0x108/0x2b0 [ 2308.893034][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2308.897540][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2308.902220][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.908285][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.914444][T23346] __do_fast_syscall_32+0x129/0x180 [ 2308.919643][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2308.924493][T23346] do_SYSENTER_32+0x73/0x90 [ 2308.928994][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2308.936259][T23346] [ 2308.938585][T23346] Uninit was stored to memory at: [ 2308.943615][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2308.949337][T23346] __msan_chain_origin+0x57/0xa0 [ 2308.954308][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2308.959418][T23346] get_compat_msghdr+0x108/0x2b0 [ 2308.964353][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2308.968858][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2308.973541][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2308.979613][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2308.985770][T23346] __do_fast_syscall_32+0x129/0x180 [ 2308.990966][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2308.995814][T23346] do_SYSENTER_32+0x73/0x90 [ 2309.000317][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.006624][T23346] [ 2309.008946][T23346] Uninit was stored to memory at: [ 2309.013978][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2309.019696][T23346] __msan_chain_origin+0x57/0xa0 [ 2309.024637][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2309.029749][T23346] get_compat_msghdr+0x108/0x2b0 [ 2309.034688][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2309.039194][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2309.043873][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.049942][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.056101][T23346] __do_fast_syscall_32+0x129/0x180 [ 2309.061298][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2309.066145][T23346] do_SYSENTER_32+0x73/0x90 [ 2309.070648][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.076962][T23346] [ 2309.079279][T23346] Uninit was stored to memory at: [ 2309.084306][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2309.090023][T23346] __msan_chain_origin+0x57/0xa0 [ 2309.094956][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2309.100058][T23346] get_compat_msghdr+0x108/0x2b0 [ 2309.105000][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2309.109497][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2309.114177][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.120234][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.126376][T23346] __do_fast_syscall_32+0x129/0x180 [ 2309.131559][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2309.136407][T23346] do_SYSENTER_32+0x73/0x90 [ 2309.140913][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.147214][T23346] [ 2309.149531][T23346] Uninit was stored to memory at: [ 2309.154557][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2309.160275][T23346] __msan_chain_origin+0x57/0xa0 [ 2309.165199][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2309.170295][T23346] get_compat_msghdr+0x108/0x2b0 [ 2309.175220][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2309.179708][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2309.184371][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.190424][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.196564][T23346] __do_fast_syscall_32+0x129/0x180 [ 2309.201752][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2309.206611][T23346] do_SYSENTER_32+0x73/0x90 [ 2309.211105][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.217406][T23346] [ 2309.219712][T23346] Uninit was stored to memory at: [ 2309.224730][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2309.230436][T23346] __msan_chain_origin+0x57/0xa0 [ 2309.235363][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2309.240458][T23346] get_compat_msghdr+0x108/0x2b0 [ 2309.245387][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2309.249875][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2309.254541][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.260594][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.266736][T23346] __do_fast_syscall_32+0x129/0x180 [ 2309.271919][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2309.276758][T23346] do_SYSENTER_32+0x73/0x90 [ 2309.281248][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.287557][T23346] [ 2309.289887][T23346] Uninit was stored to memory at: [ 2309.294900][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2309.300619][T23346] __msan_chain_origin+0x57/0xa0 [ 2309.305542][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2309.310650][T23346] get_compat_msghdr+0x108/0x2b0 [ 2309.315580][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2309.320070][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2309.324735][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.330793][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.336932][T23346] __do_fast_syscall_32+0x129/0x180 [ 2309.342118][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2309.346955][T23346] do_SYSENTER_32+0x73/0x90 [ 2309.351446][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.357746][T23346] [ 2309.360053][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2309.366712][T23346] do_recvmmsg+0xc2/0x22e0 [ 2309.371113][T23346] do_recvmmsg+0xc2/0x22e0 [ 2309.578044][T23346] not chained 690000 origins [ 2309.582669][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2309.591331][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2309.601905][T23346] Call Trace: [ 2309.605199][T23346] dump_stack+0x21c/0x280 [ 2309.609532][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2309.615258][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2309.620633][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2309.625836][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2309.631474][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2309.637540][T23346] ? _copy_from_user+0x201/0x310 [ 2309.642508][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2309.647706][T23346] __msan_chain_origin+0x57/0xa0 [ 2309.652663][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2309.657786][T23346] get_compat_msghdr+0x108/0x2b0 [ 2309.662739][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2309.667260][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2309.672981][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2309.678263][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2309.683023][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2309.687697][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2309.693511][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2309.699144][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.705227][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.711392][T23346] __do_fast_syscall_32+0x129/0x180 [ 2309.716609][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2309.721461][T23346] do_SYSENTER_32+0x73/0x90 [ 2309.725967][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.732283][T23346] RIP: 0023:0xf7f65549 [ 2309.736345][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2309.755961][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2309.764362][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2309.772331][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2309.780287][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2309.788418][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2309.796390][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2309.804347][T23346] Uninit was stored to memory at: [ 2309.809366][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2309.815074][T23346] __msan_chain_origin+0x57/0xa0 [ 2309.820001][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2309.825096][T23346] get_compat_msghdr+0x108/0x2b0 [ 2309.830022][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2309.834539][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2309.839202][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.845255][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.851396][T23346] __do_fast_syscall_32+0x129/0x180 [ 2309.856585][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2309.861430][T23346] do_SYSENTER_32+0x73/0x90 [ 2309.865933][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.872233][T23346] [ 2309.874541][T23346] Uninit was stored to memory at: [ 2309.879555][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2309.885262][T23346] __msan_chain_origin+0x57/0xa0 [ 2309.890185][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2309.895280][T23346] get_compat_msghdr+0x108/0x2b0 [ 2309.900202][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2309.904690][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2309.909355][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.915406][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.921560][T23346] __do_fast_syscall_32+0x129/0x180 [ 2309.926743][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2309.931579][T23346] do_SYSENTER_32+0x73/0x90 [ 2309.936072][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2309.942370][T23346] [ 2309.944678][T23346] Uninit was stored to memory at: [ 2309.949693][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2309.955400][T23346] __msan_chain_origin+0x57/0xa0 [ 2309.960322][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2309.965418][T23346] get_compat_msghdr+0x108/0x2b0 [ 2309.970343][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2309.974833][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2309.979497][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2309.985551][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2309.991692][T23346] __do_fast_syscall_32+0x129/0x180 [ 2309.996881][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.001716][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.006205][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.012510][T23346] [ 2310.014818][T23346] Uninit was stored to memory at: [ 2310.019832][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2310.025539][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.030460][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.035559][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.040493][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.044983][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.049646][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.055698][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.061850][T23346] __do_fast_syscall_32+0x129/0x180 [ 2310.067034][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.071875][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.076366][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.082665][T23346] [ 2310.084971][T23346] Uninit was stored to memory at: [ 2310.089982][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2310.095689][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.100614][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.105709][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.110644][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.115134][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.119797][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.125859][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.132000][T23346] __do_fast_syscall_32+0x129/0x180 [ 2310.137185][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.142022][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.146516][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.152818][T23346] [ 2310.155150][T23346] Uninit was stored to memory at: [ 2310.160163][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2310.165870][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.170880][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.175977][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.180900][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.185388][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.190055][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.196119][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.202258][T23346] __do_fast_syscall_32+0x129/0x180 [ 2310.207443][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.212633][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.217123][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.223426][T23346] [ 2310.225734][T23346] Uninit was stored to memory at: [ 2310.230750][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2310.236462][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.241389][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.246484][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.251409][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.255898][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.260573][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.266624][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.272765][T23346] __do_fast_syscall_32+0x129/0x180 [ 2310.277952][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.282787][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.287278][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.293577][T23346] [ 2310.295885][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2310.302544][T23346] do_recvmmsg+0xc2/0x22e0 [ 2310.306945][T23346] do_recvmmsg+0xc2/0x22e0 [ 2310.445419][T23346] not chained 700000 origins [ 2310.450064][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2310.458721][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2310.468783][T23346] Call Trace: [ 2310.472080][T23346] dump_stack+0x21c/0x280 [ 2310.476414][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2310.482135][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2310.487509][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2310.492717][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2310.498349][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2310.504411][T23346] ? _copy_from_user+0x201/0x310 [ 2310.509341][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2310.514538][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.519470][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.524576][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.529505][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.534026][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2310.539655][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2310.545381][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2310.550156][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.554831][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2310.560634][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2310.565831][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.571890][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.578056][T23346] __do_fast_syscall_32+0x129/0x180 [ 2310.583244][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.588083][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.592576][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.598887][T23346] RIP: 0023:0xf7f65549 [ 2310.602942][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2310.622559][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2310.630957][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2310.638915][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2310.646874][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2310.654832][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2310.662790][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2310.670764][T23346] Uninit was stored to memory at: [ 2310.675792][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2310.681504][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.686431][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.691534][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.696470][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.700962][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.705634][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.711688][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.717849][T23346] __do_fast_syscall_32+0x129/0x180 [ 2310.723044][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.727912][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.733365][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.739669][T23346] [ 2310.741979][T23346] Uninit was stored to memory at: [ 2310.747171][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2310.752878][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.757910][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.763005][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.767931][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.772425][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.777400][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.783470][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.789642][T23346] __do_fast_syscall_32+0x129/0x180 [ 2310.794832][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.799669][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.804161][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.810459][T23346] [ 2310.812768][T23346] Uninit was stored to memory at: [ 2310.817781][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2310.823507][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.828429][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.833531][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.838454][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.842979][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.847643][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.853867][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.860007][T23346] __do_fast_syscall_32+0x129/0x180 [ 2310.865191][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.870027][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.874522][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.880835][T23346] [ 2310.883143][T23346] Uninit was stored to memory at: [ 2310.888155][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2310.893859][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.898779][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.903874][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.908998][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.913491][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.918171][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.924224][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2310.930378][T23346] __do_fast_syscall_32+0x129/0x180 [ 2310.935562][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2310.940409][T23346] do_SYSENTER_32+0x73/0x90 [ 2310.944898][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2310.951198][T23346] [ 2310.953508][T23346] Uninit was stored to memory at: [ 2310.958524][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2310.964232][T23346] __msan_chain_origin+0x57/0xa0 [ 2310.969159][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2310.974255][T23346] get_compat_msghdr+0x108/0x2b0 [ 2310.979183][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2310.983674][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2310.988336][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2310.994388][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.000550][T23346] __do_fast_syscall_32+0x129/0x180 [ 2311.005733][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2311.010569][T23346] do_SYSENTER_32+0x73/0x90 [ 2311.015061][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.021362][T23346] [ 2311.023667][T23346] Uninit was stored to memory at: [ 2311.028681][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2311.034385][T23346] __msan_chain_origin+0x57/0xa0 [ 2311.039317][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2311.044412][T23346] get_compat_msghdr+0x108/0x2b0 [ 2311.049335][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2311.053824][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2311.058486][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.064552][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.070695][T23346] __do_fast_syscall_32+0x129/0x180 [ 2311.075877][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2311.080714][T23346] do_SYSENTER_32+0x73/0x90 [ 2311.085210][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.091525][T23346] [ 2311.093833][T23346] Uninit was stored to memory at: [ 2311.098844][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2311.104550][T23346] __msan_chain_origin+0x57/0xa0 [ 2311.109471][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2311.114566][T23346] get_compat_msghdr+0x108/0x2b0 [ 2311.119505][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2311.124006][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2311.128671][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.134722][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.140873][T23346] __do_fast_syscall_32+0x129/0x180 [ 2311.146058][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2311.150896][T23346] do_SYSENTER_32+0x73/0x90 [ 2311.155400][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.161699][T23346] [ 2311.164007][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2311.170682][T23346] do_recvmmsg+0xc2/0x22e0 [ 2311.175086][T23346] do_recvmmsg+0xc2/0x22e0 [ 2311.260499][ T8892] tipc: TX() has been purged, node left! [ 2311.274872][ T8892] tipc: TX() has been purged, node left! [ 2311.312884][ T8892] tipc: TX() has been purged, node left! [ 2311.324329][ T8892] tipc: TX() has been purged, node left! [ 2311.345302][ T8892] tipc: TX() has been purged, node left! [ 2311.359134][ T8892] tipc: TX() has been purged, node left! [ 2311.370212][ T8892] tipc: TX() has been purged, node left! [ 2311.391280][ T8892] tipc: TX() has been purged, node left! [ 2311.412052][ T8892] tipc: TX() has been purged, node left! [ 2311.423021][ T8892] tipc: TX() has been purged, node left! [ 2311.443010][ T8892] tipc: TX() has been purged, node left! [ 2311.456149][ T8892] tipc: TX() has been purged, node left! [ 2311.480383][T23346] not chained 710000 origins [ 2311.485009][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2311.493669][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2311.503712][T23346] Call Trace: [ 2311.507013][T23346] dump_stack+0x21c/0x280 [ 2311.511358][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2311.517079][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2311.523229][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2311.528417][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2311.534043][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2311.540103][T23346] ? _copy_from_user+0x201/0x310 [ 2311.545027][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2311.550214][T23346] __msan_chain_origin+0x57/0xa0 [ 2311.555150][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2311.560253][T23346] get_compat_msghdr+0x108/0x2b0 [ 2311.565183][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2311.569688][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2311.575315][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2311.580595][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2311.585357][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2311.590037][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2311.595828][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2311.601016][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.607076][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.613226][T23346] __do_fast_syscall_32+0x129/0x180 [ 2311.618411][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2311.623253][T23346] do_SYSENTER_32+0x73/0x90 [ 2311.627757][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.634080][T23346] RIP: 0023:0xf7f65549 [ 2311.638399][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2311.658106][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2311.666512][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2311.674470][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2311.682425][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2311.690381][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2311.698356][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2311.706322][T23346] Uninit was stored to memory at: [ 2311.711346][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2311.717054][T23346] __msan_chain_origin+0x57/0xa0 [ 2311.721979][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2311.727075][T23346] get_compat_msghdr+0x108/0x2b0 [ 2311.731999][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2311.736489][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2311.741151][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.747206][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.753364][T23346] __do_fast_syscall_32+0x129/0x180 [ 2311.758582][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2311.763419][T23346] do_SYSENTER_32+0x73/0x90 [ 2311.767910][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.774212][T23346] [ 2311.776523][T23346] Uninit was stored to memory at: [ 2311.781565][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2311.787273][T23346] __msan_chain_origin+0x57/0xa0 [ 2311.792198][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2311.797297][T23346] get_compat_msghdr+0x108/0x2b0 [ 2311.802223][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2311.806713][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2311.811379][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.817432][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.823586][T23346] __do_fast_syscall_32+0x129/0x180 [ 2311.828769][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2311.833620][T23346] do_SYSENTER_32+0x73/0x90 [ 2311.838109][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.844411][T23346] [ 2311.846722][T23346] Uninit was stored to memory at: [ 2311.851737][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2311.857463][T23346] __msan_chain_origin+0x57/0xa0 [ 2311.862401][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2311.867511][T23346] get_compat_msghdr+0x108/0x2b0 [ 2311.872438][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2311.876929][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2311.881596][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.887650][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.893795][T23346] __do_fast_syscall_32+0x129/0x180 [ 2311.898979][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2311.903814][T23346] do_SYSENTER_32+0x73/0x90 [ 2311.908329][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.914630][T23346] [ 2311.916937][T23346] Uninit was stored to memory at: [ 2311.921951][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2311.927932][T23346] __msan_chain_origin+0x57/0xa0 [ 2311.932868][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2311.937980][T23346] get_compat_msghdr+0x108/0x2b0 [ 2311.942966][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2311.947455][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2311.952119][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2311.958176][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2311.964319][T23346] __do_fast_syscall_32+0x129/0x180 [ 2311.969692][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2311.974534][T23346] do_SYSENTER_32+0x73/0x90 [ 2311.979028][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2311.985329][T23346] [ 2311.987640][T23346] Uninit was stored to memory at: [ 2311.992657][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2311.998365][T23346] __msan_chain_origin+0x57/0xa0 [ 2312.003289][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2312.008385][T23346] get_compat_msghdr+0x108/0x2b0 [ 2312.013312][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2312.017802][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2312.022484][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.028638][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.034780][T23346] __do_fast_syscall_32+0x129/0x180 [ 2312.039964][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2312.044800][T23346] do_SYSENTER_32+0x73/0x90 [ 2312.049291][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.055590][T23346] [ 2312.057911][T23346] Uninit was stored to memory at: [ 2312.062930][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2312.068636][T23346] __msan_chain_origin+0x57/0xa0 [ 2312.073561][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2312.078665][T23346] get_compat_msghdr+0x108/0x2b0 [ 2312.083592][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2312.088083][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2312.092749][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.098802][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.104943][T23346] __do_fast_syscall_32+0x129/0x180 [ 2312.110127][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2312.114964][T23346] do_SYSENTER_32+0x73/0x90 [ 2312.119476][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.125780][T23346] [ 2312.128089][T23346] Uninit was stored to memory at: [ 2312.133104][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2312.138825][T23346] __msan_chain_origin+0x57/0xa0 [ 2312.143755][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2312.148858][T23346] get_compat_msghdr+0x108/0x2b0 [ 2312.153792][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2312.158292][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2312.162957][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.169012][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.175154][T23346] __do_fast_syscall_32+0x129/0x180 [ 2312.180343][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2312.185208][T23346] do_SYSENTER_32+0x73/0x90 [ 2312.189702][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.196004][T23346] [ 2312.198318][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2312.204982][T23346] do_recvmmsg+0xc2/0x22e0 [ 2312.209390][T23346] do_recvmmsg+0xc2/0x22e0 [ 2312.246453][ T8892] tipc: TX() has been purged, node left! [ 2312.260575][ T8892] tipc: TX() has been purged, node left! [ 2312.282220][ T8892] tipc: TX() has been purged, node left! [ 2312.302568][ T8892] tipc: TX() has been purged, node left! [ 2312.312990][ T8892] tipc: TX() has been purged, node left! [ 2312.333226][ T8892] tipc: TX() has been purged, node left! [ 2312.354526][ T8892] tipc: TX() has been purged, node left! [ 2312.363883][ T8892] tipc: TX() has been purged, node left! [ 2312.382346][ T8892] tipc: TX() has been purged, node left! [ 2312.393477][ T8892] tipc: TX() has been purged, node left! [ 2312.412448][ T8892] tipc: TX() has been purged, node left! [ 2312.423943][ T8892] tipc: TX() has been purged, node left! [ 2312.443066][ T8892] tipc: TX() has been purged, node left! [ 2312.457600][ T8892] tipc: TX() has been purged, node left! [ 2312.461359][T23346] not chained 720000 origins [ 2312.467893][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2312.476570][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2312.486830][T23346] Call Trace: [ 2312.490158][T23346] dump_stack+0x21c/0x280 [ 2312.494527][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2312.500266][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2312.505744][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2312.510965][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2312.516606][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2312.522681][T23346] ? _copy_from_user+0x201/0x310 [ 2312.527621][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2312.532840][T23346] __msan_chain_origin+0x57/0xa0 [ 2312.537782][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2312.542905][T23346] get_compat_msghdr+0x108/0x2b0 [ 2312.547944][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2312.552483][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2312.558129][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2312.563443][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2312.568219][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2312.572904][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2312.578710][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2312.583917][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.589993][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.596175][T23346] __do_fast_syscall_32+0x129/0x180 [ 2312.601381][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2312.606238][T23346] do_SYSENTER_32+0x73/0x90 [ 2312.610747][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.617070][T23346] RIP: 0023:0xf7f65549 [ 2312.621145][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2312.640754][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2312.649181][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2312.657158][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2312.665134][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2312.673147][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2312.681294][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2312.689354][T23346] Uninit was stored to memory at: [ 2312.694481][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2312.700209][T23346] __msan_chain_origin+0x57/0xa0 [ 2312.705151][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2312.710273][T23346] get_compat_msghdr+0x108/0x2b0 [ 2312.715223][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2312.719733][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2312.724435][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.730517][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.736713][T23346] __do_fast_syscall_32+0x129/0x180 [ 2312.742446][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2312.747303][T23346] do_SYSENTER_32+0x73/0x90 [ 2312.751820][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.758136][T23346] [ 2312.760462][T23346] Uninit was stored to memory at: [ 2312.765629][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2312.771453][T23346] __msan_chain_origin+0x57/0xa0 [ 2312.776483][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2312.781684][T23346] get_compat_msghdr+0x108/0x2b0 [ 2312.786891][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2312.791401][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2312.796865][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.803997][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.810250][T23346] __do_fast_syscall_32+0x129/0x180 [ 2312.815454][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2312.820743][T23346] do_SYSENTER_32+0x73/0x90 [ 2312.825260][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.831581][T23346] [ 2312.833912][T23346] Uninit was stored to memory at: [ 2312.839380][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2312.845122][T23346] __msan_chain_origin+0x57/0xa0 [ 2312.850060][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2312.855173][T23346] get_compat_msghdr+0x108/0x2b0 [ 2312.860117][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2312.864713][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2312.869396][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.875481][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.881666][T23346] __do_fast_syscall_32+0x129/0x180 [ 2312.886866][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2312.891719][T23346] do_SYSENTER_32+0x73/0x90 [ 2312.896223][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.902536][T23346] [ 2312.904870][T23346] Uninit was stored to memory at: [ 2312.910079][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2312.915805][T23346] __msan_chain_origin+0x57/0xa0 [ 2312.920783][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2312.925901][T23346] get_compat_msghdr+0x108/0x2b0 [ 2312.930841][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2312.935353][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2312.940035][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2312.946125][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2312.952309][T23346] __do_fast_syscall_32+0x129/0x180 [ 2312.957522][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2312.962378][T23346] do_SYSENTER_32+0x73/0x90 [ 2312.966883][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2312.973194][T23346] [ 2312.975513][T23346] Uninit was stored to memory at: [ 2312.980579][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2312.986430][T23346] __msan_chain_origin+0x57/0xa0 [ 2312.991377][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2312.996489][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.001436][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.005946][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.010632][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.016701][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.022999][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.028197][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.033050][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.037558][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.043872][T23346] [ 2313.046190][T23346] Uninit was stored to memory at: [ 2313.051223][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2313.056944][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.061883][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.066995][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.071938][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.077225][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.081906][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.087998][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.094155][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.099365][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.104217][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.108721][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.115033][T23346] [ 2313.117354][T23346] Uninit was stored to memory at: [ 2313.122385][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2313.128106][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.133046][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.138157][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.143122][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.147623][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.152298][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.158361][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.164514][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.169709][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.174566][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.179072][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.185414][T23346] [ 2313.187745][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2313.194452][T23346] do_recvmmsg+0xc2/0x22e0 [ 2313.198884][T23346] do_recvmmsg+0xc2/0x22e0 [ 2313.239935][ T8892] tipc: TX() has been purged, node left! [ 2313.272267][ T8892] tipc: TX() has been purged, node left! [ 2313.290598][T23346] not chained 730000 origins [ 2313.295223][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2313.303893][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2313.313945][T23346] Call Trace: [ 2313.317242][T23346] dump_stack+0x21c/0x280 [ 2313.321584][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2313.327403][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2313.332782][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2313.337987][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2313.343632][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2313.349710][T23346] ? _copy_from_user+0x201/0x310 [ 2313.354639][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2313.359830][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.364761][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.369865][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.374798][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.379303][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2313.384931][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2313.390209][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2313.394966][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.399637][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2313.405490][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2313.410773][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.416854][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.422999][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.428187][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.433028][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.437524][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.443840][T23346] RIP: 0023:0xf7f65549 [ 2313.447901][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2313.467527][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2313.475928][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2313.483886][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2313.491846][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2313.499803][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2313.507765][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2313.515727][T23346] Uninit was stored to memory at: [ 2313.520785][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2313.526503][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.531453][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.536560][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.541491][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.546072][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.550752][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.556827][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.562980][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.568171][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.573014][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.577524][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.583827][T23346] [ 2313.586138][T23346] Uninit was stored to memory at: [ 2313.591168][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2313.596877][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.601804][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.606904][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.611829][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.616321][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.620987][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.627043][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.633187][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.638404][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.643243][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.647749][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.654052][T23346] [ 2313.656363][T23346] Uninit was stored to memory at: [ 2313.661379][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2313.667098][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.672022][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.677122][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.682067][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.686721][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.691397][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.697456][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.703632][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.708857][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.713797][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.718310][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.724632][T23346] [ 2313.726942][T23346] Uninit was stored to memory at: [ 2313.731977][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2313.737866][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.742794][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.747896][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.752827][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.757330][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.761998][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.768056][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.774214][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.779407][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.784256][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.788924][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.795227][T23346] [ 2313.797538][T23346] Uninit was stored to memory at: [ 2313.802553][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2313.808261][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.813187][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.818285][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.823213][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.827704][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.832398][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.838461][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.844866][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.850051][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.854889][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.859381][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.865687][T23346] [ 2313.867996][T23346] Uninit was stored to memory at: [ 2313.873026][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2313.878737][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.883662][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.888761][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.893688][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.898188][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.902855][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.908910][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.915060][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.920245][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.925173][T23346] do_SYSENTER_32+0x73/0x90 [ 2313.929814][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2313.936203][T23346] [ 2313.938516][T23346] Uninit was stored to memory at: [ 2313.943532][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2313.949414][T23346] __msan_chain_origin+0x57/0xa0 [ 2313.954340][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2313.959438][T23346] get_compat_msghdr+0x108/0x2b0 [ 2313.964366][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2313.969206][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2313.973880][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2313.979938][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2313.986082][T23346] __do_fast_syscall_32+0x129/0x180 [ 2313.991267][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2313.996106][T23346] do_SYSENTER_32+0x73/0x90 [ 2314.000601][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.006925][T23346] [ 2314.009245][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2314.015955][T23346] do_recvmmsg+0xc2/0x22e0 [ 2314.020375][T23346] do_recvmmsg+0xc2/0x22e0 [ 2314.063263][ T8892] tipc: TX() has been purged, node left! [ 2314.191414][ T8892] tipc: TX() has been purged, node left! [ 2314.198972][ T8892] tipc: TX() has been purged, node left! [ 2314.206578][ T8892] tipc: TX() has been purged, node left! [ 2314.222286][ T8892] tipc: TX() has been purged, node left! [ 2314.243026][ T8892] tipc: TX() has been purged, node left! [ 2314.250321][ T8892] tipc: TX() has been purged, node left! [ 2314.275468][ T8892] tipc: TX() has been purged, node left! [ 2314.297686][ T8892] tipc: TX() has been purged, node left! [ 2314.315756][ T8892] tipc: TX() has been purged, node left! [ 2314.342194][ T8892] tipc: TX() has been purged, node left! [ 2314.349637][ T8892] tipc: TX() has been purged, node left! [ 2314.383795][ T8892] tipc: TX() has been purged, node left! [ 2314.403817][ T8892] tipc: TX() has been purged, node left! [ 2314.413171][ T8892] tipc: TX() has been purged, node left! [ 2314.432242][ T8892] tipc: TX() has been purged, node left! [ 2314.443472][ T8892] tipc: TX() has been purged, node left! [ 2314.462572][ T8892] tipc: TX() has been purged, node left! [ 2314.484376][ T8892] tipc: TX() has been purged, node left! [ 2314.492647][T23344] not chained 740000 origins [ 2314.497348][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2314.506275][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2314.516501][T23344] Call Trace: [ 2314.519801][T23344] dump_stack+0x21c/0x280 [ 2314.524137][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2314.529884][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2314.535953][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2314.541168][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2314.546803][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2314.552889][T23344] ? _copy_from_user+0x201/0x310 [ 2314.557845][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2314.563053][T23344] __msan_chain_origin+0x57/0xa0 [ 2314.568022][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2314.573146][T23344] get_compat_msghdr+0x108/0x2b0 [ 2314.578091][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2314.582597][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2314.587803][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2314.593530][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2314.598815][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2314.603580][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2314.608252][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2314.614153][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2314.619432][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.625594][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.631740][T23344] __do_fast_syscall_32+0x129/0x180 [ 2314.636930][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2314.647346][T23344] do_SYSENTER_32+0x73/0x90 [ 2314.651847][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.658249][T23344] RIP: 0023:0xf7f65549 [ 2314.662311][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2314.682544][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2314.690948][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2314.698907][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2314.706869][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2314.714837][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2314.722967][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2314.730939][T23344] Uninit was stored to memory at: [ 2314.735968][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2314.741764][T23344] __msan_chain_origin+0x57/0xa0 [ 2314.746693][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2314.751792][T23344] get_compat_msghdr+0x108/0x2b0 [ 2314.756721][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2314.761233][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2314.765912][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.771994][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.778235][T23344] __do_fast_syscall_32+0x129/0x180 [ 2314.783441][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2314.788308][T23344] do_SYSENTER_32+0x73/0x90 [ 2314.792802][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.799129][T23344] [ 2314.801527][T23344] Uninit was stored to memory at: [ 2314.806738][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2314.812450][T23344] __msan_chain_origin+0x57/0xa0 [ 2314.817398][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2314.822512][T23344] get_compat_msghdr+0x108/0x2b0 [ 2314.827448][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2314.831944][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2314.836612][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.842953][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.849190][T23344] __do_fast_syscall_32+0x129/0x180 [ 2314.854387][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2314.859365][T23344] do_SYSENTER_32+0x73/0x90 [ 2314.864032][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.870343][T23344] [ 2314.872655][T23344] Uninit was stored to memory at: [ 2314.877693][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2314.883420][T23344] __msan_chain_origin+0x57/0xa0 [ 2314.888354][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2314.893630][T23344] get_compat_msghdr+0x108/0x2b0 [ 2314.898556][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2314.903331][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2314.908018][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.914078][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.920223][T23344] __do_fast_syscall_32+0x129/0x180 [ 2314.925410][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2314.930247][T23344] do_SYSENTER_32+0x73/0x90 [ 2314.934739][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2314.941041][T23344] [ 2314.943353][T23344] Uninit was stored to memory at: [ 2314.948370][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2314.954079][T23344] __msan_chain_origin+0x57/0xa0 [ 2314.959003][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2314.964101][T23344] get_compat_msghdr+0x108/0x2b0 [ 2314.969029][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2314.973540][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2314.978208][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2314.984438][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2314.990671][T23344] __do_fast_syscall_32+0x129/0x180 [ 2314.995885][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2315.000725][T23344] do_SYSENTER_32+0x73/0x90 [ 2315.005223][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.011526][T23344] [ 2315.013837][T23344] Uninit was stored to memory at: [ 2315.018862][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2315.024572][T23344] __msan_chain_origin+0x57/0xa0 [ 2315.029502][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2315.034611][T23344] get_compat_msghdr+0x108/0x2b0 [ 2315.039583][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2315.044077][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2315.048744][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.054806][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.060953][T23344] __do_fast_syscall_32+0x129/0x180 [ 2315.066229][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2315.071076][T23344] do_SYSENTER_32+0x73/0x90 [ 2315.075568][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.081872][T23344] [ 2315.084184][T23344] Uninit was stored to memory at: [ 2315.089200][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2315.094923][T23344] __msan_chain_origin+0x57/0xa0 [ 2315.099849][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2315.104990][T23344] get_compat_msghdr+0x108/0x2b0 [ 2315.109918][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2315.114412][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2315.119080][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.125165][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.131328][T23344] __do_fast_syscall_32+0x129/0x180 [ 2315.136522][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2315.141359][T23344] do_SYSENTER_32+0x73/0x90 [ 2315.145853][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.152154][T23344] [ 2315.154472][T23344] Uninit was stored to memory at: [ 2315.159488][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2315.165196][T23344] __msan_chain_origin+0x57/0xa0 [ 2315.170155][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2315.175255][T23344] get_compat_msghdr+0x108/0x2b0 [ 2315.180181][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2315.184677][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2315.189342][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.195399][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.201543][T23344] __do_fast_syscall_32+0x129/0x180 [ 2315.206732][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2315.211659][T23344] do_SYSENTER_32+0x73/0x90 [ 2315.216152][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.222454][T23344] [ 2315.224765][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2315.231429][T23344] do_recvmmsg+0xc2/0x22e0 [ 2315.235834][T23344] do_recvmmsg+0xc2/0x22e0 [ 2315.301426][ T8892] tipc: TX() has been purged, node left! [ 2315.305202][T23346] not chained 750000 origins [ 2315.312506][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2315.321175][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2315.331230][T23346] Call Trace: [ 2315.334790][T23346] dump_stack+0x21c/0x280 [ 2315.339137][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2315.344869][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2315.350252][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2315.355470][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2315.361109][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2315.367194][T23346] ? _copy_from_user+0x201/0x310 [ 2315.372140][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2315.377348][T23346] __msan_chain_origin+0x57/0xa0 [ 2315.382294][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2315.387419][T23346] get_compat_msghdr+0x108/0x2b0 [ 2315.392374][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2315.396902][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2315.402544][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2315.407839][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2315.412625][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2315.417309][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2315.423119][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2315.428328][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.434405][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.440566][T23346] __do_fast_syscall_32+0x129/0x180 [ 2315.445777][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2315.450639][T23346] do_SYSENTER_32+0x73/0x90 [ 2315.455158][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.461520][T23346] RIP: 0023:0xf7f65549 [ 2315.465678][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2315.485286][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2315.493706][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2315.501682][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2315.509660][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2315.517638][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2315.525653][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2315.533634][T23346] Uninit was stored to memory at: [ 2315.538671][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2315.544405][T23346] __msan_chain_origin+0x57/0xa0 [ 2315.549362][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2315.554486][T23346] get_compat_msghdr+0x108/0x2b0 [ 2315.559432][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2315.563967][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2315.568675][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.574752][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.580923][T23346] __do_fast_syscall_32+0x129/0x180 [ 2315.586127][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2315.590985][T23346] do_SYSENTER_32+0x73/0x90 [ 2315.595492][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.601811][T23346] [ 2315.604132][T23346] Uninit was stored to memory at: [ 2315.609172][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2315.614905][T23346] __msan_chain_origin+0x57/0xa0 [ 2315.619847][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2315.624959][T23346] get_compat_msghdr+0x108/0x2b0 [ 2315.629902][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2315.634442][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2315.639123][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.645195][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.651357][T23346] __do_fast_syscall_32+0x129/0x180 [ 2315.656559][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2315.661413][T23346] do_SYSENTER_32+0x73/0x90 [ 2315.665922][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.672235][T23346] [ 2315.674559][T23346] Uninit was stored to memory at: [ 2315.679598][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2315.685354][T23346] __msan_chain_origin+0x57/0xa0 [ 2315.690299][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2315.695480][T23346] get_compat_msghdr+0x108/0x2b0 [ 2315.700430][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2315.705122][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2315.709812][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.715890][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.722082][T23346] __do_fast_syscall_32+0x129/0x180 [ 2315.727286][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2315.732140][T23346] do_SYSENTER_32+0x73/0x90 [ 2315.736646][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.742959][T23346] [ 2315.745280][T23346] Uninit was stored to memory at: [ 2315.750321][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2315.756045][T23346] __msan_chain_origin+0x57/0xa0 [ 2315.761005][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2315.766117][T23346] get_compat_msghdr+0x108/0x2b0 [ 2315.771058][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2315.775562][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2315.780253][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.786324][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.792486][T23346] __do_fast_syscall_32+0x129/0x180 [ 2315.797688][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2315.802541][T23346] do_SYSENTER_32+0x73/0x90 [ 2315.807046][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.813356][T23346] [ 2315.815670][T23346] Uninit was stored to memory at: [ 2315.820798][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2315.826511][T23346] __msan_chain_origin+0x57/0xa0 [ 2315.831436][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2315.836532][T23346] get_compat_msghdr+0x108/0x2b0 [ 2315.841990][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2315.846486][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2315.851152][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.857207][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.863351][T23346] __do_fast_syscall_32+0x129/0x180 [ 2315.868538][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2315.873381][T23346] do_SYSENTER_32+0x73/0x90 [ 2315.877874][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.884193][T23346] [ 2315.886520][T23346] Uninit was stored to memory at: [ 2315.891535][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2315.897259][T23346] __msan_chain_origin+0x57/0xa0 [ 2315.902190][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2315.907293][T23346] get_compat_msghdr+0x108/0x2b0 [ 2315.912224][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2315.916737][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2315.921407][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.927467][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2315.933630][T23346] __do_fast_syscall_32+0x129/0x180 [ 2315.938821][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2315.943664][T23346] do_SYSENTER_32+0x73/0x90 [ 2315.948158][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2315.954461][T23346] [ 2315.956774][T23346] Uninit was stored to memory at: [ 2315.961791][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2315.967772][T23346] __msan_chain_origin+0x57/0xa0 [ 2315.972700][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2315.977802][T23346] get_compat_msghdr+0x108/0x2b0 [ 2315.982733][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2315.987225][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2315.991894][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2315.997953][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.004096][T23346] __do_fast_syscall_32+0x129/0x180 [ 2316.009283][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2316.014126][T23346] do_SYSENTER_32+0x73/0x90 [ 2316.018646][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.024950][T23346] [ 2316.027263][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2316.033926][T23346] do_recvmmsg+0xc2/0x22e0 [ 2316.038332][T23346] do_recvmmsg+0xc2/0x22e0 [ 2316.072174][ T8892] tipc: TX() has been purged, node left! [ 2316.093636][ T8892] tipc: TX() has been purged, node left! [ 2316.114200][ T8892] tipc: TX() has been purged, node left! [ 2316.134433][ T8892] tipc: TX() has been purged, node left! [ 2316.156679][ T8892] tipc: TX() has been purged, node left! [ 2316.178664][ T8892] tipc: TX() has been purged, node left! [ 2316.194442][ T8892] tipc: TX() has been purged, node left! [ 2316.197979][T23344] not chained 760000 origins [ 2316.204720][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2316.213390][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2316.223445][T23344] Call Trace: [ 2316.226752][T23344] dump_stack+0x21c/0x280 [ 2316.231093][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2316.236822][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2316.242203][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2316.247405][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2316.253044][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2316.259146][T23344] ? _copy_from_user+0x201/0x310 [ 2316.264086][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2316.269295][T23344] __msan_chain_origin+0x57/0xa0 [ 2316.274239][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2316.279356][T23344] get_compat_msghdr+0x108/0x2b0 [ 2316.284302][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2316.288817][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2316.294031][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2316.299706][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2316.304995][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2316.309771][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2316.314460][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2316.320269][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2316.325474][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.331547][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.337716][T23344] __do_fast_syscall_32+0x129/0x180 [ 2316.342922][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2316.347779][T23344] do_SYSENTER_32+0x73/0x90 [ 2316.352291][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.358612][T23344] RIP: 0023:0xf7f65549 [ 2316.362710][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2316.382324][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2316.390738][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2316.398713][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2316.406689][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2316.414667][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2316.422643][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2316.430614][T23344] Uninit was stored to memory at: [ 2316.435657][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2316.441382][T23344] __msan_chain_origin+0x57/0xa0 [ 2316.446329][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2316.451453][T23344] get_compat_msghdr+0x108/0x2b0 [ 2316.456400][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2316.460905][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2316.465594][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.471745][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.477892][T23344] __do_fast_syscall_32+0x129/0x180 [ 2316.483080][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2316.487927][T23344] do_SYSENTER_32+0x73/0x90 [ 2316.492534][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.498836][T23344] [ 2316.501147][T23344] Uninit was stored to memory at: [ 2316.506165][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2316.511880][T23344] __msan_chain_origin+0x57/0xa0 [ 2316.516828][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2316.521932][T23344] get_compat_msghdr+0x108/0x2b0 [ 2316.526858][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2316.531362][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2316.536027][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.542084][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.548228][T23344] __do_fast_syscall_32+0x129/0x180 [ 2316.553430][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2316.558284][T23344] do_SYSENTER_32+0x73/0x90 [ 2316.562790][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.569097][T23344] [ 2316.571411][T23344] Uninit was stored to memory at: [ 2316.576429][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2316.582233][T23344] __msan_chain_origin+0x57/0xa0 [ 2316.587161][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2316.592288][T23344] get_compat_msghdr+0x108/0x2b0 [ 2316.597213][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2316.601706][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2316.606373][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.612429][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.618592][T23344] __do_fast_syscall_32+0x129/0x180 [ 2316.623777][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2316.628616][T23344] do_SYSENTER_32+0x73/0x90 [ 2316.633109][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.639416][T23344] [ 2316.641728][T23344] Uninit was stored to memory at: [ 2316.646760][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2316.652471][T23344] __msan_chain_origin+0x57/0xa0 [ 2316.657395][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2316.662512][T23344] get_compat_msghdr+0x108/0x2b0 [ 2316.667440][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2316.671954][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2316.676640][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.682714][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.688988][T23344] __do_fast_syscall_32+0x129/0x180 [ 2316.694185][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2316.699031][T23344] do_SYSENTER_32+0x73/0x90 [ 2316.703532][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.709864][T23344] [ 2316.712180][T23344] Uninit was stored to memory at: [ 2316.717205][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2316.722931][T23344] __msan_chain_origin+0x57/0xa0 [ 2316.727866][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2316.732974][T23344] get_compat_msghdr+0x108/0x2b0 [ 2316.737915][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2316.742412][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2316.747110][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.753167][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.759398][T23344] __do_fast_syscall_32+0x129/0x180 [ 2316.764586][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2316.769427][T23344] do_SYSENTER_32+0x73/0x90 [ 2316.773952][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.780265][T23344] [ 2316.782575][T23344] Uninit was stored to memory at: [ 2316.787592][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2316.793304][T23344] __msan_chain_origin+0x57/0xa0 [ 2316.798418][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2316.803865][T23344] get_compat_msghdr+0x108/0x2b0 [ 2316.808799][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2316.813482][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2316.818152][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.824216][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.830365][T23344] __do_fast_syscall_32+0x129/0x180 [ 2316.835551][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2316.840390][T23344] do_SYSENTER_32+0x73/0x90 [ 2316.844886][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.851191][T23344] [ 2316.853538][T23344] Uninit was stored to memory at: [ 2316.858554][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2316.864627][T23344] __msan_chain_origin+0x57/0xa0 [ 2316.869642][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2316.874749][T23344] get_compat_msghdr+0x108/0x2b0 [ 2316.879702][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2316.884199][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2316.888867][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2316.895531][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2316.901677][T23344] __do_fast_syscall_32+0x129/0x180 [ 2316.906864][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2316.911705][T23344] do_SYSENTER_32+0x73/0x90 [ 2316.916373][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2316.922676][T23344] [ 2316.924988][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2316.931673][T23344] do_recvmmsg+0xc2/0x22e0 [ 2316.936077][T23344] do_recvmmsg+0xc2/0x22e0 [ 2316.964063][ T8892] tipc: TX() has been purged, node left! [ 2316.979963][ T8892] tipc: TX() has been purged, node left! [ 2317.020211][T23346] not chained 770000 origins [ 2317.024853][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2317.033513][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2317.043570][T23346] Call Trace: [ 2317.046855][T23346] dump_stack+0x21c/0x280 [ 2317.051180][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2317.056891][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2317.062273][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2317.067463][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2317.073089][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2317.079161][T23346] ? _copy_from_user+0x201/0x310 [ 2317.084280][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2317.089484][T23346] __msan_chain_origin+0x57/0xa0 [ 2317.094421][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2317.099532][T23346] get_compat_msghdr+0x108/0x2b0 [ 2317.104464][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2317.108979][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2317.114613][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2317.119889][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2317.124654][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2317.129322][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2317.135115][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2317.140306][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.146365][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.152511][T23346] __do_fast_syscall_32+0x129/0x180 [ 2317.157699][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2317.162541][T23346] do_SYSENTER_32+0x73/0x90 [ 2317.167039][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.173350][T23346] RIP: 0023:0xf7f65549 [ 2317.177409][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2317.197003][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2317.205404][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2317.213376][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2317.221337][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2317.229296][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2317.237255][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2317.246004][T23346] Uninit was stored to memory at: [ 2317.251030][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2317.256825][T23346] __msan_chain_origin+0x57/0xa0 [ 2317.261751][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2317.266883][T23346] get_compat_msghdr+0x108/0x2b0 [ 2317.271811][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2317.276303][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2317.280967][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.287022][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.293168][T23346] __do_fast_syscall_32+0x129/0x180 [ 2317.298356][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2317.303282][T23346] do_SYSENTER_32+0x73/0x90 [ 2317.307795][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.314103][T23346] [ 2317.316413][T23346] Uninit was stored to memory at: [ 2317.321455][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2317.327167][T23346] __msan_chain_origin+0x57/0xa0 [ 2317.332094][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2317.337192][T23346] get_compat_msghdr+0x108/0x2b0 [ 2317.342135][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2317.346626][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2317.351292][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.357345][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.363510][T23346] __do_fast_syscall_32+0x129/0x180 [ 2317.368698][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2317.373537][T23346] do_SYSENTER_32+0x73/0x90 [ 2317.378028][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.384330][T23346] [ 2317.386642][T23346] Uninit was stored to memory at: [ 2317.391659][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2317.397368][T23346] __msan_chain_origin+0x57/0xa0 [ 2317.402294][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2317.407397][T23346] get_compat_msghdr+0x108/0x2b0 [ 2317.412327][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2317.416820][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2317.421491][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.427547][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.433689][T23346] __do_fast_syscall_32+0x129/0x180 [ 2317.438874][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2317.443713][T23346] do_SYSENTER_32+0x73/0x90 [ 2317.448204][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.454506][T23346] [ 2317.456817][T23346] Uninit was stored to memory at: [ 2317.461837][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2317.467546][T23346] __msan_chain_origin+0x57/0xa0 [ 2317.472475][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2317.477573][T23346] get_compat_msghdr+0x108/0x2b0 [ 2317.482500][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2317.486995][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2317.491662][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.497714][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.503856][T23346] __do_fast_syscall_32+0x129/0x180 [ 2317.509042][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2317.513880][T23346] do_SYSENTER_32+0x73/0x90 [ 2317.518373][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.524675][T23346] [ 2317.526984][T23346] Uninit was stored to memory at: [ 2317.532001][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2317.537710][T23346] __msan_chain_origin+0x57/0xa0 [ 2317.542636][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2317.547739][T23346] get_compat_msghdr+0x108/0x2b0 [ 2317.552710][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2317.557224][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2317.561906][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.567974][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.574122][T23346] __do_fast_syscall_32+0x129/0x180 [ 2317.579309][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2317.584150][T23346] do_SYSENTER_32+0x73/0x90 [ 2317.588645][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.594946][T23346] [ 2317.597259][T23346] Uninit was stored to memory at: [ 2317.602275][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2317.607983][T23346] __msan_chain_origin+0x57/0xa0 [ 2317.612907][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2317.618006][T23346] get_compat_msghdr+0x108/0x2b0 [ 2317.622934][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2317.627427][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2317.632110][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.638168][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.644310][T23346] __do_fast_syscall_32+0x129/0x180 [ 2317.649495][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2317.654348][T23346] do_SYSENTER_32+0x73/0x90 [ 2317.658841][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.665161][T23346] [ 2317.667471][T23346] Uninit was stored to memory at: [ 2317.672489][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2317.678196][T23346] __msan_chain_origin+0x57/0xa0 [ 2317.683120][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2317.688218][T23346] get_compat_msghdr+0x108/0x2b0 [ 2317.693145][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2317.697637][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2317.702315][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2317.708392][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2317.714543][T23346] __do_fast_syscall_32+0x129/0x180 [ 2317.719750][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2317.724596][T23346] do_SYSENTER_32+0x73/0x90 [ 2317.729095][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2317.735415][T23346] [ 2317.738421][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2317.745084][T23346] do_recvmmsg+0xc2/0x22e0 [ 2317.749489][T23346] do_recvmmsg+0xc2/0x22e0 [ 2317.959951][T23346] not chained 780000 origins [ 2317.964580][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2317.973244][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2317.983321][T23346] Call Trace: [ 2317.986619][T23346] dump_stack+0x21c/0x280 [ 2317.990996][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2317.996728][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2318.002199][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2318.007402][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2318.013042][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2318.019118][T23346] ? _copy_from_user+0x201/0x310 [ 2318.024057][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2318.029265][T23346] __msan_chain_origin+0x57/0xa0 [ 2318.034210][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2318.039330][T23346] get_compat_msghdr+0x108/0x2b0 [ 2318.044277][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2318.048799][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2318.054442][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2318.059731][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2318.064501][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2318.069182][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2318.075014][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2318.080218][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.086395][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.092555][T23346] __do_fast_syscall_32+0x129/0x180 [ 2318.097760][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2318.102615][T23346] do_SYSENTER_32+0x73/0x90 [ 2318.107126][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.113449][T23346] RIP: 0023:0xf7f65549 [ 2318.117527][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2318.137135][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2318.145548][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2318.153518][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2318.161490][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2318.169462][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2318.177437][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2318.185408][T23346] Uninit was stored to memory at: [ 2318.190442][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2318.196168][T23346] __msan_chain_origin+0x57/0xa0 [ 2318.201146][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2318.206258][T23346] get_compat_msghdr+0x108/0x2b0 [ 2318.211197][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2318.215700][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2318.220375][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.226438][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.232605][T23346] __do_fast_syscall_32+0x129/0x180 [ 2318.237803][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2318.242686][T23346] do_SYSENTER_32+0x73/0x90 [ 2318.247189][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.253500][T23346] [ 2318.255821][T23346] Uninit was stored to memory at: [ 2318.260851][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2318.266574][T23346] __msan_chain_origin+0x57/0xa0 [ 2318.271514][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2318.276626][T23346] get_compat_msghdr+0x108/0x2b0 [ 2318.281563][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2318.286064][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2318.290745][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.296815][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.302972][T23346] __do_fast_syscall_32+0x129/0x180 [ 2318.308174][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2318.313032][T23346] do_SYSENTER_32+0x73/0x90 [ 2318.317538][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.323953][T23346] [ 2318.326272][T23346] Uninit was stored to memory at: [ 2318.331306][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2318.337144][T23346] __msan_chain_origin+0x57/0xa0 [ 2318.342083][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2318.347196][T23346] get_compat_msghdr+0x108/0x2b0 [ 2318.352243][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2318.356750][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2318.361432][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.367501][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.374096][T23346] __do_fast_syscall_32+0x129/0x180 [ 2318.379335][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2318.384187][T23346] do_SYSENTER_32+0x73/0x90 [ 2318.388688][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.394997][T23346] [ 2318.397315][T23346] Uninit was stored to memory at: [ 2318.402383][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2318.408103][T23346] __msan_chain_origin+0x57/0xa0 [ 2318.413210][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2318.418316][T23346] get_compat_msghdr+0x108/0x2b0 [ 2318.423249][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2318.427753][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2318.432427][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.438491][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.444642][T23346] __do_fast_syscall_32+0x129/0x180 [ 2318.449836][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2318.454686][T23346] do_SYSENTER_32+0x73/0x90 [ 2318.459197][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.465505][T23346] [ 2318.467821][T23346] Uninit was stored to memory at: [ 2318.472847][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2318.478564][T23346] __msan_chain_origin+0x57/0xa0 [ 2318.483762][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2318.488868][T23346] get_compat_msghdr+0x108/0x2b0 [ 2318.488913][T23344] not chained 790000 origins [ 2318.493808][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2318.498383][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2318.502866][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2318.511506][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2318.516168][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.526200][T23344] Call Trace: [ 2318.532266][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.535529][T23344] dump_stack+0x21c/0x280 [ 2318.541658][T23346] __do_fast_syscall_32+0x129/0x180 [ 2318.545960][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2318.551145][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2318.556840][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2318.561669][T23346] do_SYSENTER_32+0x73/0x90 [ 2318.566845][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2318.571318][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.576920][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2318.583203][T23346] [ 2318.589255][T23344] ? _copy_from_user+0x201/0x310 [ 2318.591545][T23346] Uninit was stored to memory at: [ 2318.596462][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2318.601460][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2318.606620][T23344] __msan_chain_origin+0x57/0xa0 [ 2318.606644][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2318.613821][T23346] __msan_chain_origin+0x57/0xa0 [ 2318.618728][T23344] get_compat_msghdr+0x108/0x2b0 [ 2318.623819][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2318.628733][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2318.633637][T23346] get_compat_msghdr+0x108/0x2b0 [ 2318.638719][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2318.643196][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2318.643221][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2318.648148][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2318.653341][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.657817][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2318.662464][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.668067][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2318.674115][T23346] __do_fast_syscall_32+0x129/0x180 [ 2318.679460][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2318.685662][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2318.690391][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2318.695568][T23346] do_SYSENTER_32+0x73/0x90 [ 2318.700217][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2318.705043][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.710822][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.715297][T23346] [ 2318.720479][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.726784][T23346] Uninit was stored to memory at: [ 2318.732846][T23344] __do_fast_syscall_32+0x129/0x180 [ 2318.735148][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2318.741270][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2318.746268][T23346] __msan_chain_origin+0x57/0xa0 [ 2318.751439][T23344] do_SYSENTER_32+0x73/0x90 [ 2318.757130][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2318.761964][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.766868][T23346] get_compat_msghdr+0x108/0x2b0 [ 2318.771337][T23344] RIP: 0023:0xf7f65549 [ 2318.776424][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2318.782723][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2318.787631][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2318.791677][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2318.796162][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.815738][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2318.820394][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.828769][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2318.834824][T23346] __do_fast_syscall_32+0x129/0x180 [ 2318.842764][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2318.848906][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2318.856847][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2318.862022][T23346] do_SYSENTER_32+0x73/0x90 [ 2318.869974][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2318.874802][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.882747][T23344] Uninit was stored to memory at: [ 2318.887221][T23346] [ 2318.895185][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2318.901481][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2318.906488][T23344] __msan_chain_origin+0x57/0xa0 [ 2318.908790][T23346] do_recvmmsg+0xc2/0x22e0 [ 2318.914477][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2318.921124][T23346] do_recvmmsg+0xc2/0x22e0 [ 2318.926041][T23344] get_compat_msghdr+0x108/0x2b0 [ 2318.944841][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2318.949349][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2318.954027][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2318.960094][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2318.966248][T23344] __do_fast_syscall_32+0x129/0x180 [ 2318.971443][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2318.976299][T23344] do_SYSENTER_32+0x73/0x90 [ 2318.980804][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2318.987112][T23344] [ 2318.989423][T23344] Uninit was stored to memory at: [ 2318.994442][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2319.000151][T23344] __msan_chain_origin+0x57/0xa0 [ 2319.005077][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2319.010176][T23344] get_compat_msghdr+0x108/0x2b0 [ 2319.015101][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2319.019592][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2319.024255][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.030338][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.036479][T23344] __do_fast_syscall_32+0x129/0x180 [ 2319.041663][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2319.046500][T23344] do_SYSENTER_32+0x73/0x90 [ 2319.050991][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.057302][T23344] [ 2319.059613][T23344] Uninit was stored to memory at: [ 2319.064629][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2319.070334][T23344] __msan_chain_origin+0x57/0xa0 [ 2319.075259][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2319.080358][T23344] get_compat_msghdr+0x108/0x2b0 [ 2319.086324][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2319.090815][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2319.095490][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.101565][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.107739][T23344] __do_fast_syscall_32+0x129/0x180 [ 2319.112934][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2319.117773][T23344] do_SYSENTER_32+0x73/0x90 [ 2319.122266][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.128565][T23344] [ 2319.130875][T23344] Uninit was stored to memory at: [ 2319.135889][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2319.141616][T23344] __msan_chain_origin+0x57/0xa0 [ 2319.146540][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2319.151639][T23344] get_compat_msghdr+0x108/0x2b0 [ 2319.156561][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2319.161053][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2319.165714][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.171778][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.177924][T23344] __do_fast_syscall_32+0x129/0x180 [ 2319.183107][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2319.187956][T23344] do_SYSENTER_32+0x73/0x90 [ 2319.192449][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.198751][T23344] [ 2319.201057][T23344] Uninit was stored to memory at: [ 2319.206071][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2319.211777][T23344] __msan_chain_origin+0x57/0xa0 [ 2319.216698][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2319.221793][T23344] get_compat_msghdr+0x108/0x2b0 [ 2319.226717][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2319.231207][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2319.235868][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.241922][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.248062][T23344] __do_fast_syscall_32+0x129/0x180 [ 2319.253245][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2319.258081][T23344] do_SYSENTER_32+0x73/0x90 [ 2319.262571][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.268871][T23344] [ 2319.271178][T23344] Uninit was stored to memory at: [ 2319.276205][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2319.281930][T23344] __msan_chain_origin+0x57/0xa0 [ 2319.286851][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2319.291945][T23344] get_compat_msghdr+0x108/0x2b0 [ 2319.296868][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2319.301359][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2319.306020][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.312092][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.318233][T23344] __do_fast_syscall_32+0x129/0x180 [ 2319.323417][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2319.328254][T23344] do_SYSENTER_32+0x73/0x90 [ 2319.332758][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.339068][T23344] [ 2319.341379][T23344] Uninit was stored to memory at: [ 2319.346393][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2319.352099][T23344] __msan_chain_origin+0x57/0xa0 [ 2319.357021][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2319.362118][T23344] get_compat_msghdr+0x108/0x2b0 [ 2319.367042][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2319.371534][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2319.376211][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.382263][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.388403][T23344] __do_fast_syscall_32+0x129/0x180 [ 2319.393585][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2319.398425][T23344] do_SYSENTER_32+0x73/0x90 [ 2319.402932][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.409243][T23344] [ 2319.411552][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2319.418213][T23344] do_recvmmsg+0xc2/0x22e0 [ 2319.422615][T23344] do_recvmmsg+0xc2/0x22e0 [ 2319.647156][T23346] not chained 800000 origins [ 2319.651788][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2319.660454][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2319.670508][T23346] Call Trace: [ 2319.673810][T23346] dump_stack+0x21c/0x280 [ 2319.678154][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2319.683881][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2319.689265][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2319.694473][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2319.700118][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2319.706188][T23346] ? _copy_from_user+0x201/0x310 [ 2319.711124][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2319.716437][T23346] __msan_chain_origin+0x57/0xa0 [ 2319.721380][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2319.726500][T23346] get_compat_msghdr+0x108/0x2b0 [ 2319.731453][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2319.735979][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2319.741615][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2319.746906][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2319.751675][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2319.756356][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2319.762162][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2319.767543][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.773618][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.779776][T23346] __do_fast_syscall_32+0x129/0x180 [ 2319.784980][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2319.789839][T23346] do_SYSENTER_32+0x73/0x90 [ 2319.794345][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.800665][T23346] RIP: 0023:0xf7f65549 [ 2319.804734][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2319.824340][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2319.832756][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2319.840733][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2319.848703][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2319.856676][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2319.864650][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2319.872622][T23346] Uninit was stored to memory at: [ 2319.877675][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2319.883419][T23346] __msan_chain_origin+0x57/0xa0 [ 2319.888358][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2319.893469][T23346] get_compat_msghdr+0x108/0x2b0 [ 2319.898411][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2319.902917][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2319.907594][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.913662][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.919818][T23346] __do_fast_syscall_32+0x129/0x180 [ 2319.925023][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2319.929873][T23346] do_SYSENTER_32+0x73/0x90 [ 2319.934379][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2319.940701][T23346] [ 2319.943017][T23346] Uninit was stored to memory at: [ 2319.948053][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2319.953775][T23346] __msan_chain_origin+0x57/0xa0 [ 2319.958714][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2319.963847][T23346] get_compat_msghdr+0x108/0x2b0 [ 2319.968782][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2319.973309][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2319.977991][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2319.984060][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2319.990221][T23346] __do_fast_syscall_32+0x129/0x180 [ 2319.995425][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2320.000278][T23346] do_SYSENTER_32+0x73/0x90 [ 2320.004784][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.011093][T23346] [ 2320.013410][T23346] Uninit was stored to memory at: [ 2320.018704][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2320.024427][T23346] __msan_chain_origin+0x57/0xa0 [ 2320.029368][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2320.034481][T23346] get_compat_msghdr+0x108/0x2b0 [ 2320.039459][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2320.043964][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2320.048643][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.054711][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.060864][T23346] __do_fast_syscall_32+0x129/0x180 [ 2320.066059][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2320.070910][T23346] do_SYSENTER_32+0x73/0x90 [ 2320.075410][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.081718][T23346] [ 2320.084041][T23346] Uninit was stored to memory at: [ 2320.089067][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2320.094790][T23346] __msan_chain_origin+0x57/0xa0 [ 2320.099730][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2320.104845][T23346] get_compat_msghdr+0x108/0x2b0 [ 2320.109793][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2320.114472][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2320.119188][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.125256][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.131412][T23346] __do_fast_syscall_32+0x129/0x180 [ 2320.136616][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2320.141462][T23346] do_SYSENTER_32+0x73/0x90 [ 2320.145962][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.152269][T23346] [ 2320.154583][T23346] Uninit was stored to memory at: [ 2320.159612][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2320.165333][T23346] __msan_chain_origin+0x57/0xa0 [ 2320.170265][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2320.175382][T23346] get_compat_msghdr+0x108/0x2b0 [ 2320.180315][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2320.184815][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2320.189488][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.195555][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.201710][T23346] __do_fast_syscall_32+0x129/0x180 [ 2320.206905][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2320.211935][T23346] do_SYSENTER_32+0x73/0x90 [ 2320.216436][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.222745][T23346] [ 2320.225060][T23346] Uninit was stored to memory at: [ 2320.230091][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2320.235806][T23346] __msan_chain_origin+0x57/0xa0 [ 2320.240772][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2320.245879][T23346] get_compat_msghdr+0x108/0x2b0 [ 2320.250813][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2320.255317][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2320.259990][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.266052][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.272202][T23346] __do_fast_syscall_32+0x129/0x180 [ 2320.272272][T23344] not chained 810000 origins [ 2320.277398][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2320.281965][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2320.286787][T23346] do_SYSENTER_32+0x73/0x90 [ 2320.295421][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2320.299915][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.309943][T23344] Call Trace: [ 2320.316253][T23346] [ 2320.319527][T23344] dump_stack+0x21c/0x280 [ 2320.321819][T23346] Uninit was stored to memory at: [ 2320.326135][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2320.331130][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2320.336821][T23344] ? __msan_get_context_state+0x9/0x20 [ 2320.342523][T23346] __msan_chain_origin+0x57/0xa0 [ 2320.347952][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2320.352860][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2320.358034][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2320.363120][T23346] get_compat_msghdr+0x108/0x2b0 [ 2320.368742][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2320.373649][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2320.379688][T23344] ? _copy_from_user+0x201/0x310 [ 2320.384175][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2320.389084][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2320.393733][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.398904][T23344] __msan_chain_origin+0x57/0xa0 [ 2320.404943][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.409851][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2320.415993][T23346] __do_fast_syscall_32+0x129/0x180 [ 2320.421075][T23344] get_compat_msghdr+0x108/0x2b0 [ 2320.426247][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2320.431162][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2320.435991][T23346] do_SYSENTER_32+0x73/0x90 [ 2320.440463][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2320.444941][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.450114][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2320.456482][T23346] [ 2320.462110][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2320.464402][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2320.469669][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2320.476398][T23346] do_recvmmsg+0xc2/0x22e0 [ 2320.481134][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2320.485522][T23346] do_recvmmsg+0xc2/0x22e0 [ 2320.490170][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2320.500335][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2320.505537][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.511612][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.517853][T23344] __do_fast_syscall_32+0x129/0x180 [ 2320.523127][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2320.527980][T23344] do_SYSENTER_32+0x73/0x90 [ 2320.532480][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.538789][T23344] RIP: 0023:0xf7f65549 [ 2320.542848][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2320.562469][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2320.570962][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2320.578919][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2320.587013][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2320.594969][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2320.602926][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2320.610888][T23344] Uninit was stored to memory at: [ 2320.615914][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2320.621628][T23344] __msan_chain_origin+0x57/0xa0 [ 2320.626568][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2320.631680][T23344] get_compat_msghdr+0x108/0x2b0 [ 2320.636605][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2320.641096][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2320.645769][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.651836][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.657977][T23344] __do_fast_syscall_32+0x129/0x180 [ 2320.663161][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2320.667997][T23344] do_SYSENTER_32+0x73/0x90 [ 2320.672503][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.678807][T23344] [ 2320.681115][T23344] Uninit was stored to memory at: [ 2320.686130][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2320.691837][T23344] __msan_chain_origin+0x57/0xa0 [ 2320.696763][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2320.701862][T23344] get_compat_msghdr+0x108/0x2b0 [ 2320.706801][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2320.711309][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2320.715992][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.722063][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.728218][T23344] __do_fast_syscall_32+0x129/0x180 [ 2320.733425][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2320.738262][T23344] do_SYSENTER_32+0x73/0x90 [ 2320.742757][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.749063][T23344] [ 2320.751385][T23344] Uninit was stored to memory at: [ 2320.756402][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2320.762110][T23344] __msan_chain_origin+0x57/0xa0 [ 2320.767033][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2320.772129][T23344] get_compat_msghdr+0x108/0x2b0 [ 2320.777056][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2320.781552][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2320.786214][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.792266][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.798405][T23344] __do_fast_syscall_32+0x129/0x180 [ 2320.803935][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2320.808772][T23344] do_SYSENTER_32+0x73/0x90 [ 2320.813265][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.819566][T23344] [ 2320.821880][T23344] Uninit was stored to memory at: [ 2320.826892][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2320.832598][T23344] __msan_chain_origin+0x57/0xa0 [ 2320.837531][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2320.843759][T23344] get_compat_msghdr+0x108/0x2b0 [ 2320.848682][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2320.853172][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2320.857848][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.863903][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.870041][T23344] __do_fast_syscall_32+0x129/0x180 [ 2320.875225][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2320.880062][T23344] do_SYSENTER_32+0x73/0x90 [ 2320.884559][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.890860][T23344] [ 2320.893167][T23344] Uninit was stored to memory at: [ 2320.898191][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2320.903903][T23344] __msan_chain_origin+0x57/0xa0 [ 2320.908825][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2320.913920][T23344] get_compat_msghdr+0x108/0x2b0 [ 2320.918843][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2320.923332][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2320.927995][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2320.934047][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2320.940187][T23344] __do_fast_syscall_32+0x129/0x180 [ 2320.945370][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2320.950206][T23344] do_SYSENTER_32+0x73/0x90 [ 2320.954696][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2320.961001][T23344] [ 2320.963307][T23344] Uninit was stored to memory at: [ 2320.968320][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2320.974030][T23344] __msan_chain_origin+0x57/0xa0 [ 2320.978953][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2320.984069][T23344] get_compat_msghdr+0x108/0x2b0 [ 2320.988993][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2320.993481][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2320.998144][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.004197][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.010336][T23344] __do_fast_syscall_32+0x129/0x180 [ 2321.015532][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2321.020372][T23344] do_SYSENTER_32+0x73/0x90 [ 2321.024861][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.031164][T23344] [ 2321.033470][T23344] Uninit was stored to memory at: [ 2321.038481][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2321.044188][T23344] __msan_chain_origin+0x57/0xa0 [ 2321.049125][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2321.054220][T23344] get_compat_msghdr+0x108/0x2b0 [ 2321.059405][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2321.063899][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2321.068565][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.074619][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.080765][T23344] __do_fast_syscall_32+0x129/0x180 [ 2321.085955][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2321.090792][T23344] do_SYSENTER_32+0x73/0x90 [ 2321.095281][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.101582][T23344] [ 2321.103888][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2321.110553][T23344] do_recvmmsg+0xc2/0x22e0 [ 2321.114955][T23344] do_recvmmsg+0xc2/0x22e0 [ 2321.341225][T23346] not chained 820000 origins [ 2321.345850][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2321.354514][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.364565][T23346] Call Trace: [ 2321.367860][T23346] dump_stack+0x21c/0x280 [ 2321.372202][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2321.377925][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2321.383301][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2321.388505][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2321.394143][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2321.400828][T23346] ? _copy_from_user+0x201/0x310 [ 2321.405776][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2321.410975][T23346] __msan_chain_origin+0x57/0xa0 [ 2321.415915][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2321.421117][T23346] get_compat_msghdr+0x108/0x2b0 [ 2321.426064][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2321.430586][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2321.436225][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2321.441515][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2321.446280][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2321.451017][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2321.456846][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2321.462053][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.468126][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.474286][T23346] __do_fast_syscall_32+0x129/0x180 [ 2321.479495][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2321.484346][T23346] do_SYSENTER_32+0x73/0x90 [ 2321.488852][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.495176][T23346] RIP: 0023:0xf7f65549 [ 2321.499243][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2321.518850][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2321.527265][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2321.535242][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2321.543217][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2321.551451][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2321.559430][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2321.567487][T23346] Uninit was stored to memory at: [ 2321.572533][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2321.578258][T23346] __msan_chain_origin+0x57/0xa0 [ 2321.583285][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2321.588395][T23346] get_compat_msghdr+0x108/0x2b0 [ 2321.593335][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2321.597842][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2321.602613][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.608681][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.614837][T23346] __do_fast_syscall_32+0x129/0x180 [ 2321.620034][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2321.624905][T23346] do_SYSENTER_32+0x73/0x90 [ 2321.629408][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.635720][T23346] [ 2321.638041][T23346] Uninit was stored to memory at: [ 2321.643073][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2321.648793][T23346] __msan_chain_origin+0x57/0xa0 [ 2321.653729][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2321.658924][T23346] get_compat_msghdr+0x108/0x2b0 [ 2321.663867][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2321.668370][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2321.673571][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.679637][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.685797][T23346] __do_fast_syscall_32+0x129/0x180 [ 2321.690995][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2321.695845][T23346] do_SYSENTER_32+0x73/0x90 [ 2321.700345][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.706662][T23346] [ 2321.708981][T23346] Uninit was stored to memory at: [ 2321.714030][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2321.719758][T23346] __msan_chain_origin+0x57/0xa0 [ 2321.724700][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2321.729810][T23346] get_compat_msghdr+0x108/0x2b0 [ 2321.734753][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2321.739262][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2321.743940][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.750005][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.756160][T23346] __do_fast_syscall_32+0x129/0x180 [ 2321.761357][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2321.766210][T23346] do_SYSENTER_32+0x73/0x90 [ 2321.770735][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.777042][T23346] [ 2321.779358][T23346] Uninit was stored to memory at: [ 2321.784382][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2321.790140][T23346] __msan_chain_origin+0x57/0xa0 [ 2321.795074][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2321.800179][T23346] get_compat_msghdr+0x108/0x2b0 [ 2321.805114][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2321.809631][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2321.814305][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.820368][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.826523][T23346] __do_fast_syscall_32+0x129/0x180 [ 2321.831720][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2321.836574][T23346] do_SYSENTER_32+0x73/0x90 [ 2321.841081][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.847408][T23346] [ 2321.849722][T23346] Uninit was stored to memory at: [ 2321.854751][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2321.860469][T23346] __msan_chain_origin+0x57/0xa0 [ 2321.865402][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2321.870506][T23346] get_compat_msghdr+0x108/0x2b0 [ 2321.875880][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2321.880399][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2321.885074][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2321.891138][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2321.897378][T23346] __do_fast_syscall_32+0x129/0x180 [ 2321.902570][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2321.906808][T23344] not chained 830000 origins [ 2321.907417][T23346] do_SYSENTER_32+0x73/0x90 [ 2321.911987][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2321.916465][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2321.925441][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.931733][T23346] [ 2321.941762][T23344] Call Trace: [ 2321.944064][T23346] Uninit was stored to memory at: [ 2321.947335][T23344] dump_stack+0x21c/0x280 [ 2321.952334][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2321.956645][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2321.962337][T23346] __msan_chain_origin+0x57/0xa0 [ 2321.968028][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2321.972936][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2321.978887][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2321.983982][T23346] get_compat_msghdr+0x108/0x2b0 [ 2321.989155][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2321.994062][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2321.999666][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2322.004141][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2322.010190][T23344] ? _copy_from_user+0x201/0x310 [ 2322.014839][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.019761][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2322.025803][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.030976][T23344] __msan_chain_origin+0x57/0xa0 [ 2322.037100][T23346] __do_fast_syscall_32+0x129/0x180 [ 2322.042006][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2322.047186][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2322.052280][T23344] get_compat_msghdr+0x108/0x2b0 [ 2322.057113][T23346] do_SYSENTER_32+0x73/0x90 [ 2322.062039][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2322.066519][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.071004][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2322.077298][T23346] [ 2322.082568][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2322.084859][T23346] Uninit was stored to memory at: [ 2322.090490][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2322.095485][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2322.100739][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2322.106429][T23346] __msan_chain_origin+0x57/0xa0 [ 2322.111178][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2322.116088][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2322.120736][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2322.125829][T23346] get_compat_msghdr+0x108/0x2b0 [ 2322.131618][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2322.136530][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2322.141696][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.146171][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2322.152216][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.156862][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.163087][T23344] __do_fast_syscall_32+0x129/0x180 [ 2322.169122][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.174382][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2322.180522][T23346] __do_fast_syscall_32+0x129/0x180 [ 2322.185349][T23344] do_SYSENTER_32+0x73/0x90 [ 2322.190522][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2322.195004][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.199824][T23346] do_SYSENTER_32+0x73/0x90 [ 2322.206116][T23344] RIP: 0023:0xf7f65549 [ 2322.210595][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.214633][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2322.220918][T23346] [ 2322.240518][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2322.242914][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2322.251310][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2322.257959][T23346] do_recvmmsg+0xc2/0x22e0 [ 2322.265899][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2322.270306][T23346] do_recvmmsg+0xc2/0x22e0 [ 2322.278246][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2322.290578][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2322.298610][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2322.306612][T23344] Uninit was stored to memory at: [ 2322.311644][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2322.317470][T23344] __msan_chain_origin+0x57/0xa0 [ 2322.322411][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2322.328047][T23344] get_compat_msghdr+0x108/0x2b0 [ 2322.332975][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2322.337465][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2322.342127][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.348179][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.354325][T23344] __do_fast_syscall_32+0x129/0x180 [ 2322.359511][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2322.364350][T23344] do_SYSENTER_32+0x73/0x90 [ 2322.368843][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.375145][T23344] [ 2322.377455][T23344] Uninit was stored to memory at: [ 2322.382468][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2322.388173][T23344] __msan_chain_origin+0x57/0xa0 [ 2322.393095][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2322.398192][T23344] get_compat_msghdr+0x108/0x2b0 [ 2322.403119][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2322.407609][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2322.412276][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.418331][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.428818][T23344] __do_fast_syscall_32+0x129/0x180 [ 2322.434019][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2322.438855][T23344] do_SYSENTER_32+0x73/0x90 [ 2322.443357][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.449656][T23344] [ 2322.451969][T23344] Uninit was stored to memory at: [ 2322.456987][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2322.462699][T23344] __msan_chain_origin+0x57/0xa0 [ 2322.467623][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2322.472718][T23344] get_compat_msghdr+0x108/0x2b0 [ 2322.477642][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2322.482134][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2322.486804][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.492855][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.499006][T23344] __do_fast_syscall_32+0x129/0x180 [ 2322.504467][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2322.509317][T23344] do_SYSENTER_32+0x73/0x90 [ 2322.513807][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.520119][T23344] [ 2322.522431][T23344] Uninit was stored to memory at: [ 2322.527444][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2322.533150][T23344] __msan_chain_origin+0x57/0xa0 [ 2322.538073][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2322.543292][T23344] get_compat_msghdr+0x108/0x2b0 [ 2322.548221][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2322.552721][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2322.557395][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.563473][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.569617][T23344] __do_fast_syscall_32+0x129/0x180 [ 2322.574805][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2322.579642][T23344] do_SYSENTER_32+0x73/0x90 [ 2322.584232][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.590531][T23344] [ 2322.592868][T23344] Uninit was stored to memory at: [ 2322.597882][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2322.603586][T23344] __msan_chain_origin+0x57/0xa0 [ 2322.608508][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2322.613605][T23344] get_compat_msghdr+0x108/0x2b0 [ 2322.618528][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2322.623015][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2322.627682][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.633745][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.639971][T23344] __do_fast_syscall_32+0x129/0x180 [ 2322.645155][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2322.649993][T23344] do_SYSENTER_32+0x73/0x90 [ 2322.654501][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.660810][T23344] [ 2322.663124][T23344] Uninit was stored to memory at: [ 2322.668182][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2322.673896][T23344] __msan_chain_origin+0x57/0xa0 [ 2322.678825][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2322.683925][T23344] get_compat_msghdr+0x108/0x2b0 [ 2322.688854][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2322.693345][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2322.698009][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.704171][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.710312][T23344] __do_fast_syscall_32+0x129/0x180 [ 2322.715500][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2322.720359][T23344] do_SYSENTER_32+0x73/0x90 [ 2322.724862][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.731304][T23344] [ 2322.733621][T23344] Uninit was stored to memory at: [ 2322.738651][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2322.744360][T23344] __msan_chain_origin+0x57/0xa0 [ 2322.749298][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2322.754396][T23344] get_compat_msghdr+0x108/0x2b0 [ 2322.759334][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2322.763824][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2322.768488][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2322.774541][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2322.780696][T23344] __do_fast_syscall_32+0x129/0x180 [ 2322.785881][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2322.790716][T23344] do_SYSENTER_32+0x73/0x90 [ 2322.795209][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2322.801508][T23344] [ 2322.803830][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2322.810491][T23344] do_recvmmsg+0xc2/0x22e0 [ 2322.814895][T23344] do_recvmmsg+0xc2/0x22e0 [ 2323.020445][T23346] not chained 840000 origins [ 2323.025069][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2323.033734][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2323.045607][T23346] Call Trace: [ 2323.048902][T23346] dump_stack+0x21c/0x280 [ 2323.053255][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2323.058976][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2323.064350][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2323.069552][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2323.075190][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2323.081278][T23346] ? _copy_from_user+0x201/0x310 [ 2323.086215][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2323.091415][T23346] __msan_chain_origin+0x57/0xa0 [ 2323.096377][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2323.101493][T23346] get_compat_msghdr+0x108/0x2b0 [ 2323.106523][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2323.111045][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2323.116682][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2323.121975][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2323.126832][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2323.131514][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2323.137319][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2323.142519][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.148633][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.154818][T23346] __do_fast_syscall_32+0x129/0x180 [ 2323.160019][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2323.164875][T23346] do_SYSENTER_32+0x73/0x90 [ 2323.169382][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.175702][T23346] RIP: 0023:0xf7f65549 [ 2323.179771][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2323.199379][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2323.207801][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2323.215776][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2323.223748][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2323.231744][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2323.239718][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2323.247687][T23346] Uninit was stored to memory at: [ 2323.252766][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2323.258489][T23346] __msan_chain_origin+0x57/0xa0 [ 2323.263435][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2323.268544][T23346] get_compat_msghdr+0x108/0x2b0 [ 2323.273488][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2323.277999][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2323.282676][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.288761][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.294918][T23346] __do_fast_syscall_32+0x129/0x180 [ 2323.300119][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2323.304970][T23346] do_SYSENTER_32+0x73/0x90 [ 2323.309478][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.315791][T23346] [ 2323.318108][T23346] Uninit was stored to memory at: [ 2323.323139][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2323.328862][T23346] __msan_chain_origin+0x57/0xa0 [ 2323.333806][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2323.338918][T23346] get_compat_msghdr+0x108/0x2b0 [ 2323.343857][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2323.348362][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2323.353052][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.359123][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.365282][T23346] __do_fast_syscall_32+0x129/0x180 [ 2323.370486][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2323.375341][T23346] do_SYSENTER_32+0x73/0x90 [ 2323.379848][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.386162][T23346] [ 2323.388482][T23346] Uninit was stored to memory at: [ 2323.393512][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2323.399231][T23346] __msan_chain_origin+0x57/0xa0 [ 2323.404170][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2323.409282][T23346] get_compat_msghdr+0x108/0x2b0 [ 2323.414223][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2323.418726][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2323.423406][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.429471][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.435624][T23346] __do_fast_syscall_32+0x129/0x180 [ 2323.440819][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2323.445665][T23346] do_SYSENTER_32+0x73/0x90 [ 2323.450186][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.456495][T23346] [ 2323.458811][T23346] Uninit was stored to memory at: [ 2323.463847][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2323.469571][T23346] __msan_chain_origin+0x57/0xa0 [ 2323.474505][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2323.479618][T23346] get_compat_msghdr+0x108/0x2b0 [ 2323.484562][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2323.489069][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2323.493752][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.499818][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.505979][T23346] __do_fast_syscall_32+0x129/0x180 [ 2323.511179][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2323.516028][T23346] do_SYSENTER_32+0x73/0x90 [ 2323.520529][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.526839][T23346] [ 2323.529157][T23346] Uninit was stored to memory at: [ 2323.534189][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2323.539917][T23346] __msan_chain_origin+0x57/0xa0 [ 2323.544852][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2323.549960][T23346] get_compat_msghdr+0x108/0x2b0 [ 2323.555019][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2323.559527][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2323.564209][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.570279][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.576470][T23346] __do_fast_syscall_32+0x129/0x180 [ 2323.581710][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2323.586558][T23346] do_SYSENTER_32+0x73/0x90 [ 2323.591080][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.597386][T23346] [ 2323.599699][T23346] Uninit was stored to memory at: [ 2323.604726][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2323.610461][T23346] __msan_chain_origin+0x57/0xa0 [ 2323.615402][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2323.620522][T23346] get_compat_msghdr+0x108/0x2b0 [ 2323.625454][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2323.629970][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2323.634644][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.640730][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.646886][T23346] __do_fast_syscall_32+0x129/0x180 [ 2323.652102][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2323.656970][T23346] do_SYSENTER_32+0x73/0x90 [ 2323.661936][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.668253][T23346] [ 2323.670579][T23346] Uninit was stored to memory at: [ 2323.675612][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2323.678734][T23344] not chained 850000 origins [ 2323.681467][T23346] __msan_chain_origin+0x57/0xa0 [ 2323.686045][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2323.691102][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2323.699775][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2323.704871][T23346] get_compat_msghdr+0x108/0x2b0 [ 2323.714906][T23344] Call Trace: [ 2323.719834][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2323.723108][T23344] dump_stack+0x21c/0x280 [ 2323.727586][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2323.731896][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2323.736558][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.742267][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2323.748365][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.754403][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2323.760535][T23346] __do_fast_syscall_32+0x129/0x180 [ 2323.765707][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2323.770879][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2323.776491][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2323.781311][T23346] do_SYSENTER_32+0x73/0x90 [ 2323.787354][T23344] ? _copy_from_user+0x201/0x310 [ 2323.791836][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.796747][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2323.803121][T23346] [ 2323.809176][T23344] __msan_chain_origin+0x57/0xa0 [ 2323.811471][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2323.816405][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2323.823075][T23346] do_recvmmsg+0xc2/0x22e0 [ 2323.828173][T23344] get_compat_msghdr+0x108/0x2b0 [ 2323.832570][T23346] do_recvmmsg+0xc2/0x22e0 [ 2323.837498][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2323.846809][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2323.852103][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2323.857851][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2323.863180][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2323.867971][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2323.872680][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2323.878478][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2323.883673][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2323.889736][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2323.897017][T23344] __do_fast_syscall_32+0x129/0x180 [ 2323.902570][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2323.907411][T23344] do_SYSENTER_32+0x73/0x90 [ 2323.911906][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2323.918230][T23344] RIP: 0023:0xf7f65549 [ 2323.922289][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2323.942232][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2323.950634][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2323.958594][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2323.966553][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2323.974534][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2323.982496][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2323.990458][T23344] Uninit was stored to memory at: [ 2323.995484][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2324.001194][T23344] __msan_chain_origin+0x57/0xa0 [ 2324.006120][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2324.011218][T23344] get_compat_msghdr+0x108/0x2b0 [ 2324.016145][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2324.020645][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2324.025310][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.031366][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.037511][T23344] __do_fast_syscall_32+0x129/0x180 [ 2324.042700][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2324.047540][T23344] do_SYSENTER_32+0x73/0x90 [ 2324.052034][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.058335][T23344] [ 2324.060653][T23344] Uninit was stored to memory at: [ 2324.065670][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2324.071378][T23344] __msan_chain_origin+0x57/0xa0 [ 2324.076303][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2324.081400][T23344] get_compat_msghdr+0x108/0x2b0 [ 2324.086324][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2324.090818][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2324.095485][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.101540][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.107683][T23344] __do_fast_syscall_32+0x129/0x180 [ 2324.112905][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2324.117831][T23344] do_SYSENTER_32+0x73/0x90 [ 2324.122323][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.128627][T23344] [ 2324.130939][T23344] Uninit was stored to memory at: [ 2324.135957][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2324.141667][T23344] __msan_chain_origin+0x57/0xa0 [ 2324.146594][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2324.151694][T23344] get_compat_msghdr+0x108/0x2b0 [ 2324.156639][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2324.161134][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2324.165803][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.171859][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.177999][T23344] __do_fast_syscall_32+0x129/0x180 [ 2324.183188][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2324.188033][T23344] do_SYSENTER_32+0x73/0x90 [ 2324.192532][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.198840][T23344] [ 2324.201151][T23344] Uninit was stored to memory at: [ 2324.206177][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2324.211884][T23344] __msan_chain_origin+0x57/0xa0 [ 2324.216826][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2324.221923][T23344] get_compat_msghdr+0x108/0x2b0 [ 2324.226849][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2324.231357][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2324.236024][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.242081][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.248226][T23344] __do_fast_syscall_32+0x129/0x180 [ 2324.253411][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2324.258250][T23344] do_SYSENTER_32+0x73/0x90 [ 2324.262747][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.269048][T23344] [ 2324.271358][T23344] Uninit was stored to memory at: [ 2324.276376][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2324.282084][T23344] __msan_chain_origin+0x57/0xa0 [ 2324.287009][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2324.292125][T23344] get_compat_msghdr+0x108/0x2b0 [ 2324.297059][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2324.301580][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2324.306244][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.312300][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.318443][T23344] __do_fast_syscall_32+0x129/0x180 [ 2324.324150][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2324.328993][T23344] do_SYSENTER_32+0x73/0x90 [ 2324.333487][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.339788][T23344] [ 2324.342099][T23344] Uninit was stored to memory at: [ 2324.347120][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2324.352830][T23344] __msan_chain_origin+0x57/0xa0 [ 2324.357760][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2324.362861][T23344] get_compat_msghdr+0x108/0x2b0 [ 2324.367788][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2324.372280][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2324.376943][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.383175][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.389318][T23344] __do_fast_syscall_32+0x129/0x180 [ 2324.394505][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2324.399344][T23344] do_SYSENTER_32+0x73/0x90 [ 2324.403856][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.410174][T23344] [ 2324.412492][T23344] Uninit was stored to memory at: [ 2324.417507][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2324.423213][T23344] __msan_chain_origin+0x57/0xa0 [ 2324.428137][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2324.433238][T23344] get_compat_msghdr+0x108/0x2b0 [ 2324.438179][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2324.442672][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2324.447338][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.453393][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.459539][T23344] __do_fast_syscall_32+0x129/0x180 [ 2324.465507][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2324.470344][T23344] do_SYSENTER_32+0x73/0x90 [ 2324.474841][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.481142][T23344] [ 2324.483460][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2324.490122][T23344] do_recvmmsg+0xc2/0x22e0 [ 2324.494546][T23344] do_recvmmsg+0xc2/0x22e0 [ 2324.739567][T23346] not chained 860000 origins [ 2324.744224][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2324.752911][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2324.763238][T23346] Call Trace: [ 2324.766550][T23346] dump_stack+0x21c/0x280 [ 2324.770901][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2324.776725][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2324.782129][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2324.787342][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2324.792984][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2324.799060][T23346] ? _copy_from_user+0x201/0x310 [ 2324.804006][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2324.809209][T23346] __msan_chain_origin+0x57/0xa0 [ 2324.814154][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2324.819315][T23346] get_compat_msghdr+0x108/0x2b0 [ 2324.824261][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2324.828782][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2324.834423][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2324.839714][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2324.844485][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2324.849168][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2324.854974][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2324.860353][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2324.866522][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2324.872684][T23346] __do_fast_syscall_32+0x129/0x180 [ 2324.877894][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2324.882756][T23346] do_SYSENTER_32+0x73/0x90 [ 2324.887322][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2324.893683][T23346] RIP: 0023:0xf7f65549 [ 2324.897764][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2324.917477][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2324.926014][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2324.933990][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2324.941964][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2324.949935][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2324.957938][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2324.965915][T23346] Uninit was stored to memory at: [ 2324.970957][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2324.976775][T23346] __msan_chain_origin+0x57/0xa0 [ 2324.982325][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2324.987471][T23346] get_compat_msghdr+0x108/0x2b0 [ 2324.993547][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2324.998055][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2325.002822][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.008901][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.015068][T23346] __do_fast_syscall_32+0x129/0x180 [ 2325.020275][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2325.025140][T23346] do_SYSENTER_32+0x73/0x90 [ 2325.029655][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.035974][T23346] [ 2325.038320][T23346] Uninit was stored to memory at: [ 2325.043372][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2325.049124][T23346] __msan_chain_origin+0x57/0xa0 [ 2325.054098][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2325.059226][T23346] get_compat_msghdr+0x108/0x2b0 [ 2325.064217][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2325.068733][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2325.073421][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.079498][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.085657][T23346] __do_fast_syscall_32+0x129/0x180 [ 2325.090866][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2325.095727][T23346] do_SYSENTER_32+0x73/0x90 [ 2325.100251][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.106620][T23346] [ 2325.108941][T23346] Uninit was stored to memory at: [ 2325.113985][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2325.119715][T23346] __msan_chain_origin+0x57/0xa0 [ 2325.124653][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2325.129856][T23346] get_compat_msghdr+0x108/0x2b0 [ 2325.134801][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2325.139304][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2325.143981][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.150045][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.156199][T23346] __do_fast_syscall_32+0x129/0x180 [ 2325.161404][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2325.166248][T23346] do_SYSENTER_32+0x73/0x90 [ 2325.170747][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.177058][T23346] [ 2325.179376][T23346] Uninit was stored to memory at: [ 2325.184404][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2325.190141][T23346] __msan_chain_origin+0x57/0xa0 [ 2325.195081][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2325.200192][T23346] get_compat_msghdr+0x108/0x2b0 [ 2325.205131][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2325.209632][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2325.214307][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.220376][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.221986][T23344] not chained 870000 origins [ 2325.226531][T23346] __do_fast_syscall_32+0x129/0x180 [ 2325.231104][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2325.236459][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2325.245095][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2325.249928][T23346] do_SYSENTER_32+0x73/0x90 [ 2325.259971][T23344] Call Trace: [ 2325.264464][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.267736][T23344] dump_stack+0x21c/0x280 [ 2325.274036][T23346] [ 2325.278356][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2325.280645][T23346] Uninit was stored to memory at: [ 2325.286353][T23344] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2325.291346][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2325.297384][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2325.303079][T23346] __msan_chain_origin+0x57/0xa0 [ 2325.308266][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2325.313173][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2325.318784][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2325.323864][T23346] get_compat_msghdr+0x108/0x2b0 [ 2325.329904][T23344] ? _copy_from_user+0x201/0x310 [ 2325.334816][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2325.339723][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2325.344203][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2325.349371][T23344] __msan_chain_origin+0x57/0xa0 [ 2325.354019][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.358930][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2325.364969][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.370053][T23344] get_compat_msghdr+0x108/0x2b0 [ 2325.376181][T23346] __do_fast_syscall_32+0x129/0x180 [ 2325.381093][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2325.386266][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2325.390743][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2325.395567][T23346] do_SYSENTER_32+0x73/0x90 [ 2325.400759][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2325.405235][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.410849][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2325.417142][T23346] [ 2325.422427][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2325.424720][T23346] Uninit was stored to memory at: [ 2325.429476][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2325.434472][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2325.439145][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2325.444839][T23346] __msan_chain_origin+0x57/0xa0 [ 2325.450631][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2325.455547][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2325.460719][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.465807][T23346] get_compat_msghdr+0x108/0x2b0 [ 2325.471874][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.476794][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2325.482923][T23344] __do_fast_syscall_32+0x129/0x180 [ 2325.487397][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2325.492572][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2325.497228][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.502052][T23344] do_SYSENTER_32+0x73/0x90 [ 2325.508195][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.512675][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.518814][T23346] __do_fast_syscall_32+0x129/0x180 [ 2325.525108][T23344] RIP: 0023:0xf7f65549 [ 2325.530283][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2325.534352][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2325.539265][T23346] do_SYSENTER_32+0x73/0x90 [ 2325.558851][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2325.563359][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.571840][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2325.578151][T23346] [ 2325.586108][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2325.588409][T23346] Uninit was stored to memory at: [ 2325.596538][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2325.601557][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2325.609490][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2325.615191][T23346] __msan_chain_origin+0x57/0xa0 [ 2325.623148][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2325.628085][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2325.636050][T23344] Uninit was stored to memory at: [ 2325.641155][T23346] get_compat_msghdr+0x108/0x2b0 [ 2325.646175][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2325.651140][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2325.656848][T23344] __msan_chain_origin+0x57/0xa0 [ 2325.661332][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2325.666240][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2325.670898][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.675978][T23344] get_compat_msghdr+0x108/0x2b0 [ 2325.682017][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.686927][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2325.693050][T23346] __do_fast_syscall_32+0x129/0x180 [ 2325.697527][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2325.702716][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2325.707367][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.712201][T23346] do_SYSENTER_32+0x73/0x90 [ 2325.718248][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.722724][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.728864][T23344] __do_fast_syscall_32+0x129/0x180 [ 2325.736125][T23346] [ 2325.741313][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2325.743607][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2325.748442][T23344] do_SYSENTER_32+0x73/0x90 [ 2325.755105][T23346] do_recvmmsg+0xc2/0x22e0 [ 2325.759581][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.763965][T23346] do_recvmmsg+0xc2/0x22e0 [ 2325.770249][T23344] [ 2325.776938][T23344] Uninit was stored to memory at: [ 2325.781982][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2325.787700][T23344] __msan_chain_origin+0x57/0xa0 [ 2325.792653][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2325.797767][T23344] get_compat_msghdr+0x108/0x2b0 [ 2325.802705][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2325.807212][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2325.811886][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.817943][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.824098][T23344] __do_fast_syscall_32+0x129/0x180 [ 2325.829282][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2325.834124][T23344] do_SYSENTER_32+0x73/0x90 [ 2325.838628][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.844943][T23344] [ 2325.847249][T23344] Uninit was stored to memory at: [ 2325.852266][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2325.857976][T23344] __msan_chain_origin+0x57/0xa0 [ 2325.862901][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2325.868002][T23344] get_compat_msghdr+0x108/0x2b0 [ 2325.872929][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2325.877423][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2325.882089][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.888144][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.898021][T23344] __do_fast_syscall_32+0x129/0x180 [ 2325.903209][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2325.908048][T23344] do_SYSENTER_32+0x73/0x90 [ 2325.912542][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.918843][T23344] [ 2325.921153][T23344] Uninit was stored to memory at: [ 2325.926187][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2325.931895][T23344] __msan_chain_origin+0x57/0xa0 [ 2325.936819][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2325.941918][T23344] get_compat_msghdr+0x108/0x2b0 [ 2325.946844][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2325.951356][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2325.956041][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2325.962095][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2325.968239][T23344] __do_fast_syscall_32+0x129/0x180 [ 2325.973426][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2325.978266][T23344] do_SYSENTER_32+0x73/0x90 [ 2325.982759][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2325.989062][T23344] [ 2325.991389][T23344] Uninit was stored to memory at: [ 2325.996405][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2326.002112][T23344] __msan_chain_origin+0x57/0xa0 [ 2326.007045][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2326.012148][T23344] get_compat_msghdr+0x108/0x2b0 [ 2326.017092][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2326.021591][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2326.026269][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.032341][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.038506][T23344] __do_fast_syscall_32+0x129/0x180 [ 2326.043780][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2326.048620][T23344] do_SYSENTER_32+0x73/0x90 [ 2326.053111][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.059413][T23344] [ 2326.061732][T23344] Uninit was stored to memory at: [ 2326.066747][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2326.072482][T23344] __msan_chain_origin+0x57/0xa0 [ 2326.077414][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2326.082513][T23344] get_compat_msghdr+0x108/0x2b0 [ 2326.087438][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2326.091930][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2326.096595][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.102649][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.108796][T23344] __do_fast_syscall_32+0x129/0x180 [ 2326.113992][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2326.118830][T23344] do_SYSENTER_32+0x73/0x90 [ 2326.123324][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.129628][T23344] [ 2326.131942][T23344] Uninit was stored to memory at: [ 2326.136967][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2326.142678][T23344] __msan_chain_origin+0x57/0xa0 [ 2326.147604][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2326.152702][T23344] get_compat_msghdr+0x108/0x2b0 [ 2326.157629][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2326.162136][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2326.166805][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.172859][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.179004][T23344] __do_fast_syscall_32+0x129/0x180 [ 2326.184208][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2326.189049][T23344] do_SYSENTER_32+0x73/0x90 [ 2326.193741][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.200058][T23344] [ 2326.202368][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2326.209048][T23344] do_recvmmsg+0xc2/0x22e0 [ 2326.213470][T23344] do_recvmmsg+0xc2/0x22e0 [ 2326.438788][T23344] not chained 880000 origins [ 2326.443414][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2326.452082][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2326.462133][T23344] Call Trace: [ 2326.465428][T23344] dump_stack+0x21c/0x280 [ 2326.469768][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2326.475494][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2326.480871][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2326.486107][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2326.491744][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2326.497816][T23344] ? _copy_from_user+0x201/0x310 [ 2326.502758][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2326.507981][T23344] __msan_chain_origin+0x57/0xa0 [ 2326.512922][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2326.518040][T23344] get_compat_msghdr+0x108/0x2b0 [ 2326.522988][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2326.527492][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2326.532704][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2326.538352][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2326.543645][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2326.548417][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2326.553102][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2326.558917][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2326.564199][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.570278][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.576441][T23344] __do_fast_syscall_32+0x129/0x180 [ 2326.581648][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2326.586509][T23344] do_SYSENTER_32+0x73/0x90 [ 2326.591022][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.597385][T23344] RIP: 0023:0xf7f65549 [ 2326.601458][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2326.621364][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2326.629868][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2326.637843][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2326.645815][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2326.653790][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2326.661763][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2326.669735][T23344] Uninit was stored to memory at: [ 2326.674774][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2326.680505][T23344] __msan_chain_origin+0x57/0xa0 [ 2326.685447][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2326.690714][T23344] get_compat_msghdr+0x108/0x2b0 [ 2326.695658][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2326.700171][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2326.704857][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.710929][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.717179][T23344] __do_fast_syscall_32+0x129/0x180 [ 2326.722378][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2326.727247][T23344] do_SYSENTER_32+0x73/0x90 [ 2326.731766][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.738079][T23344] [ 2326.740396][T23344] Uninit was stored to memory at: [ 2326.745437][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2326.751173][T23344] __msan_chain_origin+0x57/0xa0 [ 2326.756127][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2326.761251][T23344] get_compat_msghdr+0x108/0x2b0 [ 2326.766315][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2326.770847][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2326.775525][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.781606][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.787767][T23344] __do_fast_syscall_32+0x129/0x180 [ 2326.792970][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2326.797824][T23344] do_SYSENTER_32+0x73/0x90 [ 2326.802345][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.808678][T23344] [ 2326.811004][T23344] Uninit was stored to memory at: [ 2326.816026][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2326.821740][T23344] __msan_chain_origin+0x57/0xa0 [ 2326.826674][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2326.831788][T23344] get_compat_msghdr+0x108/0x2b0 [ 2326.837678][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2326.842185][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2326.846880][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.852951][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.859111][T23344] __do_fast_syscall_32+0x129/0x180 [ 2326.864335][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2326.869205][T23344] do_SYSENTER_32+0x73/0x90 [ 2326.873714][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.880025][T23344] [ 2326.882696][T23344] Uninit was stored to memory at: [ 2326.887739][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2326.893466][T23344] __msan_chain_origin+0x57/0xa0 [ 2326.898408][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2326.903519][T23344] get_compat_msghdr+0x108/0x2b0 [ 2326.908458][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2326.912988][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2326.917670][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.923741][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2326.929884][T23344] __do_fast_syscall_32+0x129/0x180 [ 2326.935075][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2326.939917][T23344] do_SYSENTER_32+0x73/0x90 [ 2326.944413][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2326.950717][T23344] [ 2326.953030][T23344] Uninit was stored to memory at: [ 2326.958052][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2326.963765][T23344] __msan_chain_origin+0x57/0xa0 [ 2326.968703][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2326.973801][T23344] get_compat_msghdr+0x108/0x2b0 [ 2326.978729][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2326.983225][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2326.987893][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2326.993948][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.000093][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.005390][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.010229][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.014723][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.021031][T23344] [ 2327.023341][T23344] Uninit was stored to memory at: [ 2327.028358][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2327.034068][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.038993][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.044092][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.049018][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.053511][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.058177][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.064241][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.070391][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.075578][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.080418][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.084913][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.091216][T23344] [ 2327.093528][T23344] Uninit was stored to memory at: [ 2327.098544][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2327.104262][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.109216][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.114318][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.119245][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.123743][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.128410][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.134489][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.140636][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.145837][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.150679][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.155177][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.161484][T23344] [ 2327.163797][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2327.170460][T23344] do_recvmmsg+0xc2/0x22e0 [ 2327.175221][T23344] do_recvmmsg+0xc2/0x22e0 [ 2327.227785][T23344] not chained 890000 origins [ 2327.232422][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2327.241101][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2327.251154][T23344] Call Trace: [ 2327.254450][T23344] dump_stack+0x21c/0x280 [ 2327.258821][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2327.264547][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2327.269933][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2327.275311][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2327.280948][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2327.287021][T23344] ? _copy_from_user+0x201/0x310 [ 2327.291960][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2327.297161][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.302104][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.307223][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.312169][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.316676][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2327.321892][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2327.327526][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2327.332816][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2327.337582][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.342281][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2327.348087][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2327.353290][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.359365][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.365522][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.370727][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.375582][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.380094][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.386445][T23344] RIP: 0023:0xf7f65549 [ 2327.390512][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2327.410106][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2327.418504][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2327.426461][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2327.434434][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2327.442404][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2327.450392][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2327.458358][T23344] Uninit was stored to memory at: [ 2327.463381][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2327.469092][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.474021][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.479120][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.484043][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.488533][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.493196][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.499261][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.508186][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.513383][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.518220][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.522715][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.529017][T23344] [ 2327.531325][T23344] Uninit was stored to memory at: [ 2327.536341][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2327.542046][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.546966][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.552075][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.557002][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.561499][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.566171][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.572233][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.578377][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.583572][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.588410][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.592900][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.599214][T23344] [ 2327.601525][T23344] Uninit was stored to memory at: [ 2327.606539][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2327.615978][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.620905][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.626025][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.630949][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.635439][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.640101][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.646153][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.652296][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.657477][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.662314][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.666816][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.673118][T23344] [ 2327.675427][T23344] Uninit was stored to memory at: [ 2327.680438][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2327.686144][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.691084][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.696191][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.701134][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.705622][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.710315][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.716392][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.722642][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.727866][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.732718][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.737218][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.743521][T23344] [ 2327.745840][T23344] Uninit was stored to memory at: [ 2327.751311][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2327.757015][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.761938][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.767037][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.771960][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.776452][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.781114][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.787166][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.793308][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.798493][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.803330][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.807833][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.814133][T23344] [ 2327.816439][T23344] Uninit was stored to memory at: [ 2327.821451][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2327.827156][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.832078][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.837173][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.842123][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.846612][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.851274][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.857328][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.863477][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.868664][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.873499][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.877994][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.884295][T23344] [ 2327.886601][T23344] Uninit was stored to memory at: [ 2327.891626][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2327.897331][T23344] __msan_chain_origin+0x57/0xa0 [ 2327.902256][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2327.907352][T23344] get_compat_msghdr+0x108/0x2b0 [ 2327.912274][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2327.916766][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2327.921429][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2327.927483][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2327.933624][T23344] __do_fast_syscall_32+0x129/0x180 [ 2327.938807][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2327.943644][T23344] do_SYSENTER_32+0x73/0x90 [ 2327.948133][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2327.954432][T23344] [ 2327.956739][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2327.963399][T23344] do_recvmmsg+0xc2/0x22e0 [ 2327.967818][T23344] do_recvmmsg+0xc2/0x22e0 [ 2328.217703][T23344] not chained 900000 origins [ 2328.222323][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2328.230986][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2328.241110][T23344] Call Trace: [ 2328.244393][T23344] dump_stack+0x21c/0x280 [ 2328.248715][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2328.254424][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2328.259786][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2328.265320][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2328.270941][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2328.276998][T23344] ? _copy_from_user+0x201/0x310 [ 2328.281921][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2328.287105][T23344] __msan_chain_origin+0x57/0xa0 [ 2328.292035][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2328.297136][T23344] get_compat_msghdr+0x108/0x2b0 [ 2328.302066][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2328.306559][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2328.311752][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2328.317372][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2328.322645][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2328.327396][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2328.332064][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2328.337854][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2328.343056][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.349112][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.355253][T23344] __do_fast_syscall_32+0x129/0x180 [ 2328.360440][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2328.365280][T23344] do_SYSENTER_32+0x73/0x90 [ 2328.369771][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.376079][T23344] RIP: 0023:0xf7f65549 [ 2328.380136][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2328.399726][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2328.408127][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2328.416083][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2328.424038][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2328.431993][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2328.439947][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2328.447905][T23344] Uninit was stored to memory at: [ 2328.452929][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2328.458636][T23344] __msan_chain_origin+0x57/0xa0 [ 2328.463560][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2328.468656][T23344] get_compat_msghdr+0x108/0x2b0 [ 2328.473579][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2328.478067][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2328.482743][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.488804][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.494943][T23344] __do_fast_syscall_32+0x129/0x180 [ 2328.500159][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2328.505009][T23344] do_SYSENTER_32+0x73/0x90 [ 2328.509502][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.515801][T23344] [ 2328.518106][T23344] Uninit was stored to memory at: [ 2328.523120][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2328.528825][T23344] __msan_chain_origin+0x57/0xa0 [ 2328.533748][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2328.538845][T23344] get_compat_msghdr+0x108/0x2b0 [ 2328.543806][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2328.548297][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2328.552966][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.559065][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.565230][T23344] __do_fast_syscall_32+0x129/0x180 [ 2328.570423][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2328.575264][T23344] do_SYSENTER_32+0x73/0x90 [ 2328.579759][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.586058][T23344] [ 2328.588366][T23344] Uninit was stored to memory at: [ 2328.593380][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2328.599099][T23344] __msan_chain_origin+0x57/0xa0 [ 2328.604025][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2328.609121][T23344] get_compat_msghdr+0x108/0x2b0 [ 2328.614047][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2328.618536][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2328.623198][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.629252][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.635397][T23344] __do_fast_syscall_32+0x129/0x180 [ 2328.640580][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2328.645417][T23344] do_SYSENTER_32+0x73/0x90 [ 2328.649908][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.656209][T23344] [ 2328.658516][T23344] Uninit was stored to memory at: [ 2328.663529][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2328.669236][T23344] __msan_chain_origin+0x57/0xa0 [ 2328.674158][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2328.679266][T23344] get_compat_msghdr+0x108/0x2b0 [ 2328.684189][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2328.688686][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2328.693348][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.699399][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.705540][T23344] __do_fast_syscall_32+0x129/0x180 [ 2328.710726][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2328.715692][T23344] do_SYSENTER_32+0x73/0x90 [ 2328.720202][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.726510][T23344] [ 2328.728822][T23344] Uninit was stored to memory at: [ 2328.733842][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2328.739549][T23344] __msan_chain_origin+0x57/0xa0 [ 2328.744471][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2328.749566][T23344] get_compat_msghdr+0x108/0x2b0 [ 2328.754501][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2328.758990][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2328.763668][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.769722][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.775866][T23344] __do_fast_syscall_32+0x129/0x180 [ 2328.781052][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2328.785887][T23344] do_SYSENTER_32+0x73/0x90 [ 2328.796398][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.802715][T23344] [ 2328.805037][T23344] Uninit was stored to memory at: [ 2328.810062][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2328.815771][T23344] __msan_chain_origin+0x57/0xa0 [ 2328.820694][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2328.825801][T23344] get_compat_msghdr+0x108/0x2b0 [ 2328.830725][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2328.835217][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2328.839879][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.845930][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.852072][T23344] __do_fast_syscall_32+0x129/0x180 [ 2328.857256][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2328.862103][T23344] do_SYSENTER_32+0x73/0x90 [ 2328.866592][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.872891][T23344] [ 2328.875200][T23344] Uninit was stored to memory at: [ 2328.880212][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2328.885920][T23344] __msan_chain_origin+0x57/0xa0 [ 2328.890844][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2328.895938][T23344] get_compat_msghdr+0x108/0x2b0 [ 2328.900865][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2328.905355][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2328.910017][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2328.916448][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2328.922596][T23344] __do_fast_syscall_32+0x129/0x180 [ 2328.927783][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2328.932621][T23344] do_SYSENTER_32+0x73/0x90 [ 2328.937121][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2328.943426][T23344] [ 2328.945736][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2328.952399][T23344] do_recvmmsg+0xc2/0x22e0 [ 2328.956813][T23344] do_recvmmsg+0xc2/0x22e0 [ 2329.145308][T23346] not chained 910000 origins [ 2329.149933][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2329.158777][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2329.168831][T23346] Call Trace: [ 2329.172132][T23346] dump_stack+0x21c/0x280 [ 2329.176479][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2329.182213][T23346] ? do_user_addr_fault+0x1045/0x16d0 [ 2329.187587][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2329.192789][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2329.198429][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2329.204499][T23346] ? _copy_from_user+0x201/0x310 [ 2329.209438][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2329.214820][T23346] __msan_chain_origin+0x57/0xa0 [ 2329.219774][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2329.224895][T23346] get_compat_msghdr+0x108/0x2b0 [ 2329.229844][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2329.234369][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2329.240008][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2329.245297][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2329.250063][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2329.254744][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2329.260548][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2329.265756][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.271833][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.277993][T23346] __do_fast_syscall_32+0x129/0x180 [ 2329.283202][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2329.288055][T23346] do_SYSENTER_32+0x73/0x90 [ 2329.292564][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.298889][T23346] RIP: 0023:0xf7f65549 [ 2329.302960][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2329.322568][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2329.330986][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2329.338960][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2329.346931][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2329.355252][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2329.363312][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2329.371282][T23346] Uninit was stored to memory at: [ 2329.376319][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2329.382068][T23346] __msan_chain_origin+0x57/0xa0 [ 2329.387006][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2329.392117][T23346] get_compat_msghdr+0x108/0x2b0 [ 2329.397060][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2329.401575][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2329.406259][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.412337][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.418498][T23346] __do_fast_syscall_32+0x129/0x180 [ 2329.423703][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2329.428557][T23346] do_SYSENTER_32+0x73/0x90 [ 2329.433066][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.439379][T23346] [ 2329.441700][T23346] Uninit was stored to memory at: [ 2329.446730][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2329.452456][T23346] __msan_chain_origin+0x57/0xa0 [ 2329.457393][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2329.462543][T23346] get_compat_msghdr+0x108/0x2b0 [ 2329.467485][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2329.472003][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2329.476684][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.482754][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.488911][T23346] __do_fast_syscall_32+0x129/0x180 [ 2329.494112][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2329.498969][T23346] do_SYSENTER_32+0x73/0x90 [ 2329.503485][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.509802][T23346] [ 2329.512125][T23346] Uninit was stored to memory at: [ 2329.517158][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2329.522916][T23346] __msan_chain_origin+0x57/0xa0 [ 2329.527858][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2329.532973][T23346] get_compat_msghdr+0x108/0x2b0 [ 2329.537915][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2329.542422][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2329.547105][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.553177][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.559335][T23346] __do_fast_syscall_32+0x129/0x180 [ 2329.564562][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2329.569414][T23346] do_SYSENTER_32+0x73/0x90 [ 2329.573920][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.580224][T23346] [ 2329.582537][T23346] Uninit was stored to memory at: [ 2329.587560][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2329.593269][T23346] __msan_chain_origin+0x57/0xa0 [ 2329.598190][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2329.603373][T23346] get_compat_msghdr+0x108/0x2b0 [ 2329.608295][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2329.612785][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2329.617451][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.623508][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.629655][T23346] __do_fast_syscall_32+0x129/0x180 [ 2329.634842][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2329.640372][T23346] do_SYSENTER_32+0x73/0x90 [ 2329.644865][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.651166][T23346] [ 2329.653502][T23346] Uninit was stored to memory at: [ 2329.658605][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2329.664312][T23346] __msan_chain_origin+0x57/0xa0 [ 2329.669251][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2329.674364][T23346] get_compat_msghdr+0x108/0x2b0 [ 2329.679288][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2329.683780][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2329.688447][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.694514][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.708054][T23346] __do_fast_syscall_32+0x129/0x180 [ 2329.714203][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2329.719062][T23346] do_SYSENTER_32+0x73/0x90 [ 2329.723575][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.729880][T23346] [ 2329.732196][T23346] Uninit was stored to memory at: [ 2329.737220][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2329.742932][T23346] __msan_chain_origin+0x57/0xa0 [ 2329.747861][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2329.752959][T23346] get_compat_msghdr+0x108/0x2b0 [ 2329.757885][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2329.762375][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2329.767066][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.773122][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.781435][T23346] __do_fast_syscall_32+0x129/0x180 [ 2329.786620][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2329.791458][T23346] do_SYSENTER_32+0x73/0x90 [ 2329.795949][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.802250][T23346] [ 2329.804557][T23346] Uninit was stored to memory at: [ 2329.809606][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2329.815330][T23346] __msan_chain_origin+0x57/0xa0 [ 2329.820349][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2329.825443][T23346] get_compat_msghdr+0x108/0x2b0 [ 2329.830367][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2329.834866][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2329.839530][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2329.845584][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2329.851743][T23346] __do_fast_syscall_32+0x129/0x180 [ 2329.856939][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2329.861775][T23346] do_SYSENTER_32+0x73/0x90 [ 2329.866265][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2329.873608][T23346] [ 2329.875920][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2329.882581][T23346] do_recvmmsg+0xc2/0x22e0 [ 2329.886993][T23346] do_recvmmsg+0xc2/0x22e0 [ 2330.045974][T23346] not chained 920000 origins [ 2330.050595][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2330.059257][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2330.069296][T23346] Call Trace: [ 2330.072580][T23346] dump_stack+0x21c/0x280 [ 2330.076905][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2330.082619][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2330.088671][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2330.093856][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2330.099477][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2330.105535][T23346] ? _copy_from_user+0x201/0x310 [ 2330.110456][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2330.115641][T23346] __msan_chain_origin+0x57/0xa0 [ 2330.120566][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2330.125668][T23346] get_compat_msghdr+0x108/0x2b0 [ 2330.135458][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2330.139985][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2330.145630][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2330.150990][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2330.155743][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2330.160515][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2330.166308][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2330.171500][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.177559][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.183702][T23346] __do_fast_syscall_32+0x129/0x180 [ 2330.188888][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2330.193725][T23346] do_SYSENTER_32+0x73/0x90 [ 2330.198216][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.204524][T23346] RIP: 0023:0xf7f65549 [ 2330.208589][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2330.228189][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2330.236598][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2330.244554][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2330.252515][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2330.260471][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2330.268430][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2330.276389][T23346] Uninit was stored to memory at: [ 2330.281405][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2330.287111][T23346] __msan_chain_origin+0x57/0xa0 [ 2330.292033][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2330.297129][T23346] get_compat_msghdr+0x108/0x2b0 [ 2330.302057][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2330.306545][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2330.311223][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.317276][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.323427][T23346] __do_fast_syscall_32+0x129/0x180 [ 2330.328612][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2330.333450][T23346] do_SYSENTER_32+0x73/0x90 [ 2330.337939][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.344239][T23346] [ 2330.346548][T23346] Uninit was stored to memory at: [ 2330.351560][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2330.357266][T23346] __msan_chain_origin+0x57/0xa0 [ 2330.362190][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2330.367295][T23346] get_compat_msghdr+0x108/0x2b0 [ 2330.372220][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2330.377168][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2330.381830][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.387881][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.394021][T23346] __do_fast_syscall_32+0x129/0x180 [ 2330.399203][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2330.404039][T23346] do_SYSENTER_32+0x73/0x90 [ 2330.408538][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.414850][T23346] [ 2330.417159][T23346] Uninit was stored to memory at: [ 2330.422617][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2330.428326][T23346] __msan_chain_origin+0x57/0xa0 [ 2330.433247][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2330.438342][T23346] get_compat_msghdr+0x108/0x2b0 [ 2330.443268][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2330.447757][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2330.452422][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.458476][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.464622][T23346] __do_fast_syscall_32+0x129/0x180 [ 2330.469809][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2330.474646][T23346] do_SYSENTER_32+0x73/0x90 [ 2330.479135][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.485437][T23346] [ 2330.487757][T23346] Uninit was stored to memory at: [ 2330.492771][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2330.498485][T23346] __msan_chain_origin+0x57/0xa0 [ 2330.503416][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2330.508518][T23346] get_compat_msghdr+0x108/0x2b0 [ 2330.513462][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2330.517956][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2330.522619][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.528673][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.534816][T23346] __do_fast_syscall_32+0x129/0x180 [ 2330.540008][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2330.544843][T23346] do_SYSENTER_32+0x73/0x90 [ 2330.549360][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.555687][T23346] [ 2330.558007][T23346] Uninit was stored to memory at: [ 2330.563035][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2330.568832][T23346] __msan_chain_origin+0x57/0xa0 [ 2330.573756][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2330.578851][T23346] get_compat_msghdr+0x108/0x2b0 [ 2330.583777][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2330.588266][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2330.592927][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.598983][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.605123][T23346] __do_fast_syscall_32+0x129/0x180 [ 2330.610307][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2330.615165][T23346] do_SYSENTER_32+0x73/0x90 [ 2330.619663][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.626402][T23346] [ 2330.628733][T23346] Uninit was stored to memory at: [ 2330.633754][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2330.639474][T23346] __msan_chain_origin+0x57/0xa0 [ 2330.644398][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2330.649494][T23346] get_compat_msghdr+0x108/0x2b0 [ 2330.654420][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2330.658911][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2330.663575][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.669628][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.675769][T23346] __do_fast_syscall_32+0x129/0x180 [ 2330.680976][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2330.685823][T23346] do_SYSENTER_32+0x73/0x90 [ 2330.690325][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.696625][T23346] [ 2330.698933][T23346] Uninit was stored to memory at: [ 2330.703953][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2330.709667][T23346] __msan_chain_origin+0x57/0xa0 [ 2330.714599][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2330.719712][T23346] get_compat_msghdr+0x108/0x2b0 [ 2330.724642][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2330.729144][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2330.733815][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2330.739870][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2330.746018][T23346] __do_fast_syscall_32+0x129/0x180 [ 2330.751202][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2330.756039][T23346] do_SYSENTER_32+0x73/0x90 [ 2330.760539][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2330.766841][T23346] [ 2330.769148][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2330.775809][T23346] do_recvmmsg+0xc2/0x22e0 [ 2330.780210][T23346] do_recvmmsg+0xc2/0x22e0 [ 2330.978310][T23344] not chained 930000 origins [ 2330.982935][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2330.991602][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2331.001653][T23344] Call Trace: [ 2331.004950][T23344] dump_stack+0x21c/0x280 [ 2331.009293][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2331.015029][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2331.020492][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2331.025703][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2331.031344][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2331.037423][T23344] ? _copy_from_user+0x201/0x310 [ 2331.042362][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2331.047565][T23344] __msan_chain_origin+0x57/0xa0 [ 2331.052507][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2331.057632][T23344] get_compat_msghdr+0x108/0x2b0 [ 2331.062579][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2331.067088][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2331.072300][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2331.077936][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2331.083224][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2331.087990][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2331.092671][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2331.098474][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2331.103681][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.109759][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.115921][T23344] __do_fast_syscall_32+0x129/0x180 [ 2331.121132][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2331.125991][T23344] do_SYSENTER_32+0x73/0x90 [ 2331.130505][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.136829][T23344] RIP: 0023:0xf7f65549 [ 2331.140897][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2331.160506][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2331.168940][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2331.176924][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2331.185071][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2331.193047][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2331.201017][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2331.208985][T23344] Uninit was stored to memory at: [ 2331.214023][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2331.219751][T23344] __msan_chain_origin+0x57/0xa0 [ 2331.224687][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2331.229794][T23344] get_compat_msghdr+0x108/0x2b0 [ 2331.234732][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2331.239235][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2331.243911][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.249977][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.256136][T23344] __do_fast_syscall_32+0x129/0x180 [ 2331.261338][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2331.266189][T23344] do_SYSENTER_32+0x73/0x90 [ 2331.270694][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.277090][T23344] [ 2331.279422][T23344] Uninit was stored to memory at: [ 2331.284452][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2331.290192][T23344] __msan_chain_origin+0x57/0xa0 [ 2331.295135][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2331.300246][T23344] get_compat_msghdr+0x108/0x2b0 [ 2331.305186][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2331.309706][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2331.314385][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.320452][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.326626][T23344] __do_fast_syscall_32+0x129/0x180 [ 2331.331836][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2331.336683][T23344] do_SYSENTER_32+0x73/0x90 [ 2331.341187][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.347501][T23344] [ 2331.349817][T23344] Uninit was stored to memory at: [ 2331.354882][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2331.360600][T23344] __msan_chain_origin+0x57/0xa0 [ 2331.365537][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2331.370647][T23344] get_compat_msghdr+0x108/0x2b0 [ 2331.375762][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2331.380262][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2331.384938][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.391000][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.397163][T23344] __do_fast_syscall_32+0x129/0x180 [ 2331.402358][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2331.407207][T23344] do_SYSENTER_32+0x73/0x90 [ 2331.412501][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.418809][T23344] [ 2331.421127][T23344] Uninit was stored to memory at: [ 2331.426172][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2331.431888][T23344] __msan_chain_origin+0x57/0xa0 [ 2331.436992][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2331.442099][T23344] get_compat_msghdr+0x108/0x2b0 [ 2331.447032][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2331.451532][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2331.456214][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.462274][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.468427][T23344] __do_fast_syscall_32+0x129/0x180 [ 2331.475378][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2331.480226][T23344] do_SYSENTER_32+0x73/0x90 [ 2331.484746][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.491052][T23344] [ 2331.493387][T23344] Uninit was stored to memory at: [ 2331.498415][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2331.504131][T23344] __msan_chain_origin+0x57/0xa0 [ 2331.509063][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2331.514169][T23344] get_compat_msghdr+0x108/0x2b0 [ 2331.517219][T23346] not chained 940000 origins [ 2331.519104][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2331.523674][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2331.528159][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2331.536791][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2331.541462][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.551492][T23346] Call Trace: [ 2331.557559][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.560833][T23346] dump_stack+0x21c/0x280 [ 2331.566966][T23344] __do_fast_syscall_32+0x129/0x180 [ 2331.571285][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2331.576451][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2331.582169][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2331.586999][T23344] do_SYSENTER_32+0x73/0x90 [ 2331.593037][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2331.597513][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.602686][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2331.608980][T23344] [ 2331.614615][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2331.616902][T23344] Uninit was stored to memory at: [ 2331.622950][T23346] ? _copy_from_user+0x201/0x310 [ 2331.627966][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2331.632882][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2331.638595][T23344] __msan_chain_origin+0x57/0xa0 [ 2331.643778][T23346] __msan_chain_origin+0x57/0xa0 [ 2331.648685][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2331.653606][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2331.658686][T23344] get_compat_msghdr+0x108/0x2b0 [ 2331.663776][T23346] get_compat_msghdr+0x108/0x2b0 [ 2331.668687][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2331.673703][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2331.678204][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2331.682687][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2331.687345][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.692979][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2331.699025][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.704283][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2331.710406][T23344] __do_fast_syscall_32+0x129/0x180 [ 2331.715143][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2331.720326][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2331.724992][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2331.729835][T23344] do_SYSENTER_32+0x73/0x90 [ 2331.736224][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2331.740700][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.745868][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.752152][T23344] [ 2331.758214][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.760505][T23344] Uninit was stored to memory at: [ 2331.766645][T23346] __do_fast_syscall_32+0x129/0x180 [ 2331.771639][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2331.776808][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2331.782500][T23344] __msan_chain_origin+0x57/0xa0 [ 2331.787325][T23346] do_SYSENTER_32+0x73/0x90 [ 2331.792230][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2331.796707][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.801797][T23344] get_compat_msghdr+0x108/0x2b0 [ 2331.808092][T23346] RIP: 0023:0xf7f65549 [ 2331.813018][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2331.817071][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2331.821569][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2331.842444][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2331.847118][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.855503][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2331.861546][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.869485][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2331.875627][T23344] __do_fast_syscall_32+0x129/0x180 [ 2331.883570][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2331.888747][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2331.896689][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2331.901610][T23344] do_SYSENTER_32+0x73/0x90 [ 2331.909565][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2331.914068][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2331.922003][T23346] Uninit was stored to memory at: [ 2331.928298][T23344] [ 2331.933309][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2331.935597][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2331.941297][T23346] __msan_chain_origin+0x57/0xa0 [ 2331.952802][T23344] do_recvmmsg+0xc2/0x22e0 [ 2331.957722][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2331.962141][T23344] do_recvmmsg+0xc2/0x22e0 [ 2331.967222][T23346] get_compat_msghdr+0x108/0x2b0 [ 2331.976529][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2331.981042][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2331.985806][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2331.991907][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2331.998063][T23346] __do_fast_syscall_32+0x129/0x180 [ 2332.003267][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2332.008115][T23346] do_SYSENTER_32+0x73/0x90 [ 2332.012608][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.018909][T23346] [ 2332.021218][T23346] Uninit was stored to memory at: [ 2332.026236][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2332.031942][T23346] __msan_chain_origin+0x57/0xa0 [ 2332.036863][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2332.041958][T23346] get_compat_msghdr+0x108/0x2b0 [ 2332.046881][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2332.051371][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2332.056049][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.062118][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.068262][T23346] __do_fast_syscall_32+0x129/0x180 [ 2332.073446][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2332.078285][T23346] do_SYSENTER_32+0x73/0x90 [ 2332.082778][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.089098][T23346] [ 2332.091408][T23346] Uninit was stored to memory at: [ 2332.096429][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2332.102138][T23346] __msan_chain_origin+0x57/0xa0 [ 2332.107064][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2332.112168][T23346] get_compat_msghdr+0x108/0x2b0 [ 2332.117093][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2332.121581][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2332.126259][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.132320][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.138460][T23346] __do_fast_syscall_32+0x129/0x180 [ 2332.143643][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2332.148483][T23346] do_SYSENTER_32+0x73/0x90 [ 2332.152976][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.159276][T23346] [ 2332.161582][T23346] Uninit was stored to memory at: [ 2332.166598][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2332.172304][T23346] __msan_chain_origin+0x57/0xa0 [ 2332.177225][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2332.182323][T23346] get_compat_msghdr+0x108/0x2b0 [ 2332.187251][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2332.191743][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2332.196407][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.202460][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.208603][T23346] __do_fast_syscall_32+0x129/0x180 [ 2332.213786][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2332.218622][T23346] do_SYSENTER_32+0x73/0x90 [ 2332.224591][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.230891][T23346] [ 2332.233199][T23346] Uninit was stored to memory at: [ 2332.238211][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2332.243920][T23346] __msan_chain_origin+0x57/0xa0 [ 2332.248846][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2332.253944][T23346] get_compat_msghdr+0x108/0x2b0 [ 2332.258868][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2332.263359][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2332.268023][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.274075][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.280219][T23346] __do_fast_syscall_32+0x129/0x180 [ 2332.285414][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2332.290264][T23346] do_SYSENTER_32+0x73/0x90 [ 2332.294771][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.301072][T23346] [ 2332.303379][T23346] Uninit was stored to memory at: [ 2332.308392][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2332.314097][T23346] __msan_chain_origin+0x57/0xa0 [ 2332.319020][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2332.324116][T23346] get_compat_msghdr+0x108/0x2b0 [ 2332.329043][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2332.333535][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2332.338199][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.344274][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.350413][T23346] __do_fast_syscall_32+0x129/0x180 [ 2332.355600][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2332.360436][T23346] do_SYSENTER_32+0x73/0x90 [ 2332.364929][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.371244][T23346] [ 2332.373553][T23346] Uninit was stored to memory at: [ 2332.378565][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2332.384295][T23346] __msan_chain_origin+0x57/0xa0 [ 2332.389225][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2332.394335][T23346] get_compat_msghdr+0x108/0x2b0 [ 2332.399260][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2332.403753][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2332.408417][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.414818][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.420959][T23346] __do_fast_syscall_32+0x129/0x180 [ 2332.426143][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2332.430979][T23346] do_SYSENTER_32+0x73/0x90 [ 2332.435645][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.441949][T23346] [ 2332.444260][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2332.450920][T23346] do_recvmmsg+0xc2/0x22e0 [ 2332.455324][T23346] do_recvmmsg+0xc2/0x22e0 [ 2332.663502][T23344] not chained 950000 origins [ 2332.668129][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2332.676880][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2332.686935][T23344] Call Trace: [ 2332.690235][T23344] dump_stack+0x21c/0x280 [ 2332.694578][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2332.700306][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2332.705688][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2332.710893][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2332.716530][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2332.722603][T23344] ? _copy_from_user+0x201/0x310 [ 2332.727539][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2332.732741][T23344] __msan_chain_origin+0x57/0xa0 [ 2332.737684][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2332.742801][T23344] get_compat_msghdr+0x108/0x2b0 [ 2332.747754][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2332.752259][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2332.757467][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2332.763112][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2332.768398][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2332.773163][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2332.777845][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2332.783647][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2332.788848][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.794923][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.801081][T23344] __do_fast_syscall_32+0x129/0x180 [ 2332.806282][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2332.811136][T23344] do_SYSENTER_32+0x73/0x90 [ 2332.815644][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.821981][T23344] RIP: 0023:0xf7f65549 [ 2332.826048][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2332.845655][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2332.854076][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2332.862173][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2332.870186][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2332.878154][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2332.886128][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2332.894097][T23344] Uninit was stored to memory at: [ 2332.899134][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2332.904858][T23344] __msan_chain_origin+0x57/0xa0 [ 2332.909794][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2332.914903][T23344] get_compat_msghdr+0x108/0x2b0 [ 2332.919844][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2332.924349][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2332.929023][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2332.935090][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2332.941243][T23344] __do_fast_syscall_32+0x129/0x180 [ 2332.946458][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2332.951306][T23344] do_SYSENTER_32+0x73/0x90 [ 2332.955812][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2332.962120][T23344] [ 2332.964434][T23344] Uninit was stored to memory at: [ 2332.969834][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2332.975557][T23344] __msan_chain_origin+0x57/0xa0 [ 2332.980581][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2332.985695][T23344] get_compat_msghdr+0x108/0x2b0 [ 2332.990634][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2332.995747][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2333.000429][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.006506][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.012663][T23344] __do_fast_syscall_32+0x129/0x180 [ 2333.017864][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2333.022714][T23344] do_SYSENTER_32+0x73/0x90 [ 2333.027217][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.033540][T23344] [ 2333.035858][T23344] Uninit was stored to memory at: [ 2333.040884][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2333.046604][T23344] __msan_chain_origin+0x57/0xa0 [ 2333.051541][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2333.056650][T23344] get_compat_msghdr+0x108/0x2b0 [ 2333.061588][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2333.066091][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2333.070769][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.076832][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.082986][T23344] __do_fast_syscall_32+0x129/0x180 [ 2333.088180][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2333.093026][T23344] do_SYSENTER_32+0x73/0x90 [ 2333.097535][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.103843][T23344] [ 2333.106161][T23344] Uninit was stored to memory at: [ 2333.111190][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2333.116998][T23344] __msan_chain_origin+0x57/0xa0 [ 2333.121934][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2333.127043][T23344] get_compat_msghdr+0x108/0x2b0 [ 2333.131981][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2333.136482][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2333.141192][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.147256][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.153413][T23344] __do_fast_syscall_32+0x129/0x180 [ 2333.158629][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2333.163482][T23344] do_SYSENTER_32+0x73/0x90 [ 2333.167989][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.174296][T23344] [ 2333.176612][T23344] Uninit was stored to memory at: [ 2333.181650][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2333.187368][T23344] __msan_chain_origin+0x57/0xa0 [ 2333.192479][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2333.197588][T23344] get_compat_msghdr+0x108/0x2b0 [ 2333.202525][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2333.207060][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2333.211743][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.217806][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.223968][T23344] __do_fast_syscall_32+0x129/0x180 [ 2333.229170][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2333.234021][T23344] do_SYSENTER_32+0x73/0x90 [ 2333.238870][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.245180][T23344] [ 2333.247502][T23344] Uninit was stored to memory at: [ 2333.252535][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2333.258256][T23344] __msan_chain_origin+0x57/0xa0 [ 2333.263201][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2333.268311][T23344] get_compat_msghdr+0x108/0x2b0 [ 2333.273252][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2333.277756][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2333.282429][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.288499][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.294652][T23344] __do_fast_syscall_32+0x129/0x180 [ 2333.299843][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2333.304822][T23344] do_SYSENTER_32+0x73/0x90 [ 2333.309327][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.315635][T23344] [ 2333.317950][T23344] Uninit was stored to memory at: [ 2333.322978][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2333.328700][T23344] __msan_chain_origin+0x57/0xa0 [ 2333.333635][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2333.338740][T23344] get_compat_msghdr+0x108/0x2b0 [ 2333.343677][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2333.348176][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2333.352851][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.358914][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.365068][T23344] __do_fast_syscall_32+0x129/0x180 [ 2333.370265][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2333.375125][T23344] do_SYSENTER_32+0x73/0x90 [ 2333.379629][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.385935][T23344] [ 2333.388338][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2333.395008][T23344] do_recvmmsg+0xc2/0x22e0 [ 2333.399418][T23344] do_recvmmsg+0xc2/0x22e0 [ 2333.440108][T23346] not chained 960000 origins [ 2333.444719][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2333.453368][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2333.463412][T23346] Call Trace: [ 2333.466694][T23346] dump_stack+0x21c/0x280 [ 2333.471020][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2333.476755][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2333.483506][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2333.488693][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2333.494315][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2333.500379][T23346] ? _copy_from_user+0x201/0x310 [ 2333.505319][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2333.510509][T23346] __msan_chain_origin+0x57/0xa0 [ 2333.515464][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2333.520567][T23346] get_compat_msghdr+0x108/0x2b0 [ 2333.525498][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2333.530040][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2333.535662][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2333.540934][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2333.545702][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2333.550382][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2333.557155][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2333.562349][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.568408][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.574555][T23346] __do_fast_syscall_32+0x129/0x180 [ 2333.579761][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2333.584610][T23346] do_SYSENTER_32+0x73/0x90 [ 2333.589101][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.595410][T23346] RIP: 0023:0xf7f65549 [ 2333.599468][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2333.619081][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2333.627492][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2333.635455][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2333.643413][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2333.651368][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2333.659336][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2333.667292][T23346] Uninit was stored to memory at: [ 2333.672312][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2333.678019][T23346] __msan_chain_origin+0x57/0xa0 [ 2333.682945][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2333.688041][T23346] get_compat_msghdr+0x108/0x2b0 [ 2333.692969][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2333.697478][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2333.702180][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.708242][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.714386][T23346] __do_fast_syscall_32+0x129/0x180 [ 2333.719577][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2333.724417][T23346] do_SYSENTER_32+0x73/0x90 [ 2333.728944][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.735276][T23346] [ 2333.737591][T23346] Uninit was stored to memory at: [ 2333.742617][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2333.748326][T23346] __msan_chain_origin+0x57/0xa0 [ 2333.753253][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2333.758349][T23346] get_compat_msghdr+0x108/0x2b0 [ 2333.763278][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2333.767789][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2333.772452][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.778502][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.784658][T23346] __do_fast_syscall_32+0x129/0x180 [ 2333.789871][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2333.796272][T23346] do_SYSENTER_32+0x73/0x90 [ 2333.800765][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.807064][T23346] [ 2333.809372][T23346] Uninit was stored to memory at: [ 2333.814397][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2333.820107][T23346] __msan_chain_origin+0x57/0xa0 [ 2333.825038][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2333.830135][T23346] get_compat_msghdr+0x108/0x2b0 [ 2333.835059][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2333.839548][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2333.844212][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.850265][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.856405][T23346] __do_fast_syscall_32+0x129/0x180 [ 2333.861586][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2333.866423][T23346] do_SYSENTER_32+0x73/0x90 [ 2333.870916][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.877215][T23346] [ 2333.879521][T23346] Uninit was stored to memory at: [ 2333.884535][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2333.890241][T23346] __msan_chain_origin+0x57/0xa0 [ 2333.895163][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2333.900259][T23346] get_compat_msghdr+0x108/0x2b0 [ 2333.905183][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2333.909672][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2333.914351][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.920408][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.926552][T23346] __do_fast_syscall_32+0x129/0x180 [ 2333.931743][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2333.936594][T23346] do_SYSENTER_32+0x73/0x90 [ 2333.941085][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2333.947398][T23346] [ 2333.949710][T23346] Uninit was stored to memory at: [ 2333.954724][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2333.960431][T23346] __msan_chain_origin+0x57/0xa0 [ 2333.965353][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2333.970457][T23346] get_compat_msghdr+0x108/0x2b0 [ 2333.975384][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2333.979875][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2333.984543][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2333.990607][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2333.996749][T23346] __do_fast_syscall_32+0x129/0x180 [ 2334.001933][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2334.006769][T23346] do_SYSENTER_32+0x73/0x90 [ 2334.011260][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.017559][T23346] [ 2334.019867][T23346] Uninit was stored to memory at: [ 2334.024903][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2334.030619][T23346] __msan_chain_origin+0x57/0xa0 [ 2334.035543][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2334.040637][T23346] get_compat_msghdr+0x108/0x2b0 [ 2334.045561][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2334.050054][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2334.054732][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.060786][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.066940][T23346] __do_fast_syscall_32+0x129/0x180 [ 2334.072124][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2334.076961][T23346] do_SYSENTER_32+0x73/0x90 [ 2334.081451][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.087753][T23346] [ 2334.090076][T23346] Uninit was stored to memory at: [ 2334.095092][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2334.100814][T23346] __msan_chain_origin+0x57/0xa0 [ 2334.105749][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2334.110845][T23346] get_compat_msghdr+0x108/0x2b0 [ 2334.115769][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2334.120348][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2334.125016][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.131078][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.137218][T23346] __do_fast_syscall_32+0x129/0x180 [ 2334.142402][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2334.147253][T23346] do_SYSENTER_32+0x73/0x90 [ 2334.151768][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.158068][T23346] [ 2334.160390][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2334.167098][T23346] do_recvmmsg+0xc2/0x22e0 [ 2334.171503][T23346] do_recvmmsg+0xc2/0x22e0 [ 2334.515377][T23344] not chained 970000 origins [ 2334.520001][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2334.528676][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2334.538741][T23344] Call Trace: [ 2334.542088][T23344] dump_stack+0x21c/0x280 [ 2334.546451][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2334.552183][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2334.557571][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2334.562785][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2334.568437][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2334.574534][T23344] ? _copy_from_user+0x201/0x310 [ 2334.579474][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2334.584689][T23344] __msan_chain_origin+0x57/0xa0 [ 2334.589635][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2334.594762][T23344] get_compat_msghdr+0x108/0x2b0 [ 2334.599714][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2334.604228][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2334.609477][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2334.615124][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2334.620416][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2334.625183][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2334.629862][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2334.635685][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2334.641004][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.647083][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.653250][T23344] __do_fast_syscall_32+0x129/0x180 [ 2334.658450][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2334.663333][T23344] do_SYSENTER_32+0x73/0x90 [ 2334.667858][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.674188][T23344] RIP: 0023:0xf7f65549 [ 2334.678254][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2334.697950][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2334.706376][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2334.714346][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2334.722313][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2334.730283][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2334.738245][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2334.746211][T23344] Uninit was stored to memory at: [ 2334.751265][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2334.756975][T23344] __msan_chain_origin+0x57/0xa0 [ 2334.761921][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2334.767021][T23344] get_compat_msghdr+0x108/0x2b0 [ 2334.771953][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2334.776447][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2334.781115][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.787171][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.793348][T23344] __do_fast_syscall_32+0x129/0x180 [ 2334.798557][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2334.803410][T23344] do_SYSENTER_32+0x73/0x90 [ 2334.807920][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.814236][T23344] [ 2334.816557][T23344] Uninit was stored to memory at: [ 2334.821602][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2334.827321][T23344] __msan_chain_origin+0x57/0xa0 [ 2334.832247][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2334.837353][T23344] get_compat_msghdr+0x108/0x2b0 [ 2334.842284][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2334.846795][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2334.851462][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.857519][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.863687][T23344] __do_fast_syscall_32+0x129/0x180 [ 2334.868903][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2334.873832][T23344] do_SYSENTER_32+0x73/0x90 [ 2334.878426][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.884817][T23344] [ 2334.887145][T23344] Uninit was stored to memory at: [ 2334.892163][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2334.897874][T23344] __msan_chain_origin+0x57/0xa0 [ 2334.902801][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2334.908161][T23344] get_compat_msghdr+0x108/0x2b0 [ 2334.913091][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2334.917587][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2334.922256][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.928318][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2334.934479][T23344] __do_fast_syscall_32+0x129/0x180 [ 2334.939754][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2334.944595][T23344] do_SYSENTER_32+0x73/0x90 [ 2334.949089][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2334.955394][T23344] [ 2334.957707][T23344] Uninit was stored to memory at: [ 2334.962726][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2334.968445][T23344] __msan_chain_origin+0x57/0xa0 [ 2334.973373][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2334.978476][T23344] get_compat_msghdr+0x108/0x2b0 [ 2334.983426][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2334.988030][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2334.992700][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2334.998756][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.004901][T23344] __do_fast_syscall_32+0x129/0x180 [ 2335.010094][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2335.014935][T23344] do_SYSENTER_32+0x73/0x90 [ 2335.019435][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.026090][T23344] [ 2335.028408][T23344] Uninit was stored to memory at: [ 2335.033426][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2335.039162][T23344] __msan_chain_origin+0x57/0xa0 [ 2335.044089][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2335.049189][T23344] get_compat_msghdr+0x108/0x2b0 [ 2335.054124][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2335.058620][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2335.063288][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.069345][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.075490][T23344] __do_fast_syscall_32+0x129/0x180 [ 2335.080677][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2335.085520][T23344] do_SYSENTER_32+0x73/0x90 [ 2335.090013][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.096317][T23344] [ 2335.098628][T23344] Uninit was stored to memory at: [ 2335.103647][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2335.109357][T23344] __msan_chain_origin+0x57/0xa0 [ 2335.114284][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2335.119384][T23344] get_compat_msghdr+0x108/0x2b0 [ 2335.124313][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2335.128824][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2335.133492][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.139549][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.145870][T23344] __do_fast_syscall_32+0x129/0x180 [ 2335.151059][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2335.155920][T23344] do_SYSENTER_32+0x73/0x90 [ 2335.160417][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.166722][T23344] [ 2335.169036][T23344] Uninit was stored to memory at: [ 2335.174068][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2335.179786][T23344] __msan_chain_origin+0x57/0xa0 [ 2335.184712][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2335.189812][T23344] get_compat_msghdr+0x108/0x2b0 [ 2335.194741][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2335.199237][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2335.203907][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.209972][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.216118][T23344] __do_fast_syscall_32+0x129/0x180 [ 2335.221307][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2335.226236][T23344] do_SYSENTER_32+0x73/0x90 [ 2335.230733][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.237046][T23344] [ 2335.239359][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2335.246024][T23344] do_recvmmsg+0xc2/0x22e0 [ 2335.250432][T23344] do_recvmmsg+0xc2/0x22e0 [ 2335.448559][T23344] not chained 980000 origins [ 2335.453192][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2335.461863][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2335.471921][T23344] Call Trace: [ 2335.475220][T23344] dump_stack+0x21c/0x280 [ 2335.479563][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2335.485287][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2335.490756][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2335.495960][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2335.501600][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2335.507673][T23344] ? _copy_from_user+0x201/0x310 [ 2335.512629][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2335.517956][T23344] __msan_chain_origin+0x57/0xa0 [ 2335.522899][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2335.528026][T23344] get_compat_msghdr+0x108/0x2b0 [ 2335.532972][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2335.537506][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2335.542727][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2335.548367][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2335.553658][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2335.558427][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2335.563122][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2335.569020][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2335.574226][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.580302][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.586465][T23344] __do_fast_syscall_32+0x129/0x180 [ 2335.591672][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2335.596529][T23344] do_SYSENTER_32+0x73/0x90 [ 2335.601038][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.607446][T23344] RIP: 0023:0xf7f65549 [ 2335.611520][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2335.631161][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2335.639580][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2335.647554][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2335.655526][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2335.663502][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2335.671473][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2335.679442][T23344] Uninit was stored to memory at: [ 2335.684492][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2335.690422][T23344] __msan_chain_origin+0x57/0xa0 [ 2335.695363][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2335.700470][T23344] get_compat_msghdr+0x108/0x2b0 [ 2335.705412][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2335.709920][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2335.714620][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.720708][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.726871][T23344] __do_fast_syscall_32+0x129/0x180 [ 2335.732082][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2335.736940][T23344] do_SYSENTER_32+0x73/0x90 [ 2335.741452][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.747766][T23344] [ 2335.750086][T23344] Uninit was stored to memory at: [ 2335.755122][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2335.760845][T23344] __msan_chain_origin+0x57/0xa0 [ 2335.765784][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2335.770897][T23344] get_compat_msghdr+0x108/0x2b0 [ 2335.775837][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2335.780364][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2335.785044][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.791115][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.797336][T23344] __do_fast_syscall_32+0x129/0x180 [ 2335.802535][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2335.807386][T23344] do_SYSENTER_32+0x73/0x90 [ 2335.811943][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.818279][T23344] [ 2335.820596][T23344] Uninit was stored to memory at: [ 2335.826581][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2335.832313][T23344] __msan_chain_origin+0x57/0xa0 [ 2335.837249][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2335.842359][T23344] get_compat_msghdr+0x108/0x2b0 [ 2335.847308][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2335.851823][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2335.856589][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.862659][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.868821][T23344] __do_fast_syscall_32+0x129/0x180 [ 2335.874025][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2335.878917][T23344] do_SYSENTER_32+0x73/0x90 [ 2335.883421][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.889741][T23344] [ 2335.892058][T23344] Uninit was stored to memory at: [ 2335.897723][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2335.903449][T23344] __msan_chain_origin+0x57/0xa0 [ 2335.908391][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2335.913498][T23344] get_compat_msghdr+0x108/0x2b0 [ 2335.918435][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2335.922943][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2335.927629][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2335.933690][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2335.939920][T23344] __do_fast_syscall_32+0x129/0x180 [ 2335.945106][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2335.949944][T23344] do_SYSENTER_32+0x73/0x90 [ 2335.954441][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2335.960745][T23344] [ 2335.963059][T23344] Uninit was stored to memory at: [ 2335.968079][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2335.973795][T23344] __msan_chain_origin+0x57/0xa0 [ 2335.978724][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2335.983822][T23344] get_compat_msghdr+0x108/0x2b0 [ 2335.988844][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2335.993339][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2335.998004][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.004065][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.010236][T23344] __do_fast_syscall_32+0x129/0x180 [ 2336.015424][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2336.020281][T23344] do_SYSENTER_32+0x73/0x90 [ 2336.024775][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.031076][T23344] [ 2336.033385][T23344] Uninit was stored to memory at: [ 2336.038403][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2336.044112][T23344] __msan_chain_origin+0x57/0xa0 [ 2336.049040][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2336.054140][T23344] get_compat_msghdr+0x108/0x2b0 [ 2336.059084][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2336.063585][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2336.068250][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.074335][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.080482][T23344] __do_fast_syscall_32+0x129/0x180 [ 2336.085774][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2336.090614][T23344] do_SYSENTER_32+0x73/0x90 [ 2336.095108][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.101410][T23344] [ 2336.103722][T23344] Uninit was stored to memory at: [ 2336.108738][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2336.114621][T23344] __msan_chain_origin+0x57/0xa0 [ 2336.119549][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2336.124649][T23344] get_compat_msghdr+0x108/0x2b0 [ 2336.129579][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2336.134072][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2336.138760][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.144817][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.150963][T23344] __do_fast_syscall_32+0x129/0x180 [ 2336.156152][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2336.161008][T23344] do_SYSENTER_32+0x73/0x90 [ 2336.165506][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.171810][T23344] [ 2336.174123][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2336.180784][T23344] do_recvmmsg+0xc2/0x22e0 [ 2336.185188][T23344] do_recvmmsg+0xc2/0x22e0 [ 2336.402768][T23346] not chained 990000 origins [ 2336.407405][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2336.416080][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2336.426149][T23346] Call Trace: [ 2336.429452][T23346] dump_stack+0x21c/0x280 [ 2336.438757][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2336.444588][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2336.450678][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2336.455893][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2336.461538][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2336.467620][T23346] ? _copy_from_user+0x201/0x310 [ 2336.472566][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2336.477773][T23346] __msan_chain_origin+0x57/0xa0 [ 2336.482718][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2336.487861][T23346] get_compat_msghdr+0x108/0x2b0 [ 2336.492810][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2336.497770][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2336.503417][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2336.508723][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2336.513496][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2336.518176][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2336.523987][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2336.529191][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.535287][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.541450][T23346] __do_fast_syscall_32+0x129/0x180 [ 2336.546665][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2336.551557][T23346] do_SYSENTER_32+0x73/0x90 [ 2336.556086][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.562690][T23346] RIP: 0023:0xf7f65549 [ 2336.566766][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2336.586379][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2336.594811][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2336.602828][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2336.610815][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2336.618798][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2336.626780][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2336.634971][T23346] Uninit was stored to memory at: [ 2336.640108][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2336.645845][T23346] __msan_chain_origin+0x57/0xa0 [ 2336.650790][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2336.655949][T23346] get_compat_msghdr+0x108/0x2b0 [ 2336.661154][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2336.665667][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2336.670350][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.676410][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.682560][T23346] __do_fast_syscall_32+0x129/0x180 [ 2336.687750][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2336.692590][T23346] do_SYSENTER_32+0x73/0x90 [ 2336.697084][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.703393][T23346] [ 2336.705715][T23346] Uninit was stored to memory at: [ 2336.711008][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2336.716745][T23346] __msan_chain_origin+0x57/0xa0 [ 2336.723071][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2336.728182][T23346] get_compat_msghdr+0x108/0x2b0 [ 2336.733129][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2336.737642][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2336.742308][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.748364][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.754527][T23346] __do_fast_syscall_32+0x129/0x180 [ 2336.759727][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2336.764581][T23346] do_SYSENTER_32+0x73/0x90 [ 2336.769104][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.775407][T23346] [ 2336.777718][T23346] Uninit was stored to memory at: [ 2336.782750][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2336.788465][T23346] __msan_chain_origin+0x57/0xa0 [ 2336.793398][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2336.798497][T23346] get_compat_msghdr+0x108/0x2b0 [ 2336.803444][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2336.807936][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2336.812606][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.818778][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.824939][T23346] __do_fast_syscall_32+0x129/0x180 [ 2336.830124][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2336.834965][T23346] do_SYSENTER_32+0x73/0x90 [ 2336.839457][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.845774][T23346] [ 2336.848088][T23346] Uninit was stored to memory at: [ 2336.853128][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2336.858835][T23346] __msan_chain_origin+0x57/0xa0 [ 2336.863763][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2336.868862][T23346] get_compat_msghdr+0x108/0x2b0 [ 2336.873787][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2336.878277][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2336.882943][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.888997][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.895139][T23346] __do_fast_syscall_32+0x129/0x180 [ 2336.900341][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2336.905182][T23346] do_SYSENTER_32+0x73/0x90 [ 2336.909693][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.915996][T23346] [ 2336.918305][T23346] Uninit was stored to memory at: [ 2336.923321][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2336.929033][T23346] __msan_chain_origin+0x57/0xa0 [ 2336.933957][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2336.939055][T23346] get_compat_msghdr+0x108/0x2b0 [ 2336.944156][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2336.948652][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2336.953320][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2336.959376][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2336.965520][T23346] __do_fast_syscall_32+0x129/0x180 [ 2336.970709][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2336.975554][T23346] do_SYSENTER_32+0x73/0x90 [ 2336.980052][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2336.986355][T23346] [ 2336.988673][T23346] Uninit was stored to memory at: [ 2336.993690][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2336.999399][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.004322][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.009419][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.014346][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.018837][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.023517][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.029576][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.035724][T23346] __do_fast_syscall_32+0x129/0x180 [ 2337.040910][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2337.045750][T23346] do_SYSENTER_32+0x73/0x90 [ 2337.050244][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.056553][T23346] [ 2337.058865][T23346] Uninit was stored to memory at: [ 2337.063914][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2337.069630][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.074555][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.079657][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.084583][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.089078][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.093748][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.099805][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.105950][T23346] __do_fast_syscall_32+0x129/0x180 [ 2337.111138][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2337.116002][T23346] do_SYSENTER_32+0x73/0x90 [ 2337.120496][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.126811][T23346] [ 2337.129126][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2337.135792][T23346] do_recvmmsg+0xc2/0x22e0 [ 2337.140199][T23346] do_recvmmsg+0xc2/0x22e0 [ 2337.307068][T23346] not chained 1000000 origins [ 2337.311782][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2337.320435][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2337.330473][T23346] Call Trace: [ 2337.333764][T23346] dump_stack+0x21c/0x280 [ 2337.338089][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2337.343807][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2337.349868][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2337.355057][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2337.360682][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2337.366739][T23346] ? _copy_from_user+0x201/0x310 [ 2337.371666][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2337.376866][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.381796][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.386899][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.391831][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.396340][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2337.401973][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2337.407257][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2337.412015][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.416684][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2337.422493][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2337.427686][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.433754][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.439898][T23346] __do_fast_syscall_32+0x129/0x180 [ 2337.445088][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2337.449932][T23346] do_SYSENTER_32+0x73/0x90 [ 2337.454447][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.460760][T23346] RIP: 0023:0xf7f65549 [ 2337.464821][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2337.484424][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2337.492821][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2337.500778][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2337.508736][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2337.516705][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2337.524678][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2337.532660][T23346] Uninit was stored to memory at: [ 2337.537701][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2337.543415][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.548342][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.553452][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.558377][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.562886][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.567557][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.573615][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.579935][T23346] __do_fast_syscall_32+0x129/0x180 [ 2337.585120][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2337.589956][T23346] do_SYSENTER_32+0x73/0x90 [ 2337.594449][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.600751][T23346] [ 2337.603060][T23346] Uninit was stored to memory at: [ 2337.608076][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2337.613781][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.618702][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.623797][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.628721][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.633214][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.637875][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.643928][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.650155][T23346] __do_fast_syscall_32+0x129/0x180 [ 2337.655349][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2337.660192][T23346] do_SYSENTER_32+0x73/0x90 [ 2337.664680][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.670982][T23346] [ 2337.673288][T23346] Uninit was stored to memory at: [ 2337.678302][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2337.691476][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.696709][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.701837][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.706778][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.711277][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.715944][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.722012][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.728158][T23346] __do_fast_syscall_32+0x129/0x180 [ 2337.733341][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2337.738177][T23346] do_SYSENTER_32+0x73/0x90 [ 2337.742671][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.748972][T23346] [ 2337.751279][T23346] Uninit was stored to memory at: [ 2337.756292][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2337.761999][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.766919][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.772027][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.776951][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.781442][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.786106][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.792168][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.798308][T23346] __do_fast_syscall_32+0x129/0x180 [ 2337.803492][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2337.808327][T23346] do_SYSENTER_32+0x73/0x90 [ 2337.812815][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.819113][T23346] [ 2337.821423][T23346] Uninit was stored to memory at: [ 2337.826437][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2337.832148][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.837069][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.842165][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.847087][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.851577][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.856239][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.862291][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.868432][T23346] __do_fast_syscall_32+0x129/0x180 [ 2337.873617][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2337.878456][T23346] do_SYSENTER_32+0x73/0x90 [ 2337.882945][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.889246][T23346] [ 2337.891552][T23346] Uninit was stored to memory at: [ 2337.896564][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2337.902273][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.907205][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.912301][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.917226][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.921717][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.926380][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2337.932433][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2337.938573][T23346] __do_fast_syscall_32+0x129/0x180 [ 2337.943760][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2337.948595][T23346] do_SYSENTER_32+0x73/0x90 [ 2337.953094][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2337.959392][T23346] [ 2337.961697][T23346] Uninit was stored to memory at: [ 2337.966710][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2337.972417][T23346] __msan_chain_origin+0x57/0xa0 [ 2337.977339][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2337.982435][T23346] get_compat_msghdr+0x108/0x2b0 [ 2337.987358][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2337.991854][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2337.996515][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.002569][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.008708][T23346] __do_fast_syscall_32+0x129/0x180 [ 2338.013892][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2338.018742][T23346] do_SYSENTER_32+0x73/0x90 [ 2338.023234][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.029533][T23346] [ 2338.031840][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2338.038502][T23346] do_recvmmsg+0xc2/0x22e0 [ 2338.042905][T23346] do_recvmmsg+0xc2/0x22e0 [ 2338.245161][T23344] not chained 1010000 origins [ 2338.249875][T23344] CPU: 0 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2338.258552][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2338.268605][T23344] Call Trace: [ 2338.271903][T23344] dump_stack+0x21c/0x280 [ 2338.276288][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2338.282013][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2338.287392][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2338.292628][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2338.298268][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2338.304343][T23344] ? _copy_from_user+0x201/0x310 [ 2338.309286][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2338.314494][T23344] __msan_chain_origin+0x57/0xa0 [ 2338.319440][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2338.324571][T23344] get_compat_msghdr+0x108/0x2b0 [ 2338.329525][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2338.334038][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2338.339246][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2338.344887][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2338.350179][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2338.354955][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2338.359639][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2338.365445][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2338.370649][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.376726][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.382888][T23344] __do_fast_syscall_32+0x129/0x180 [ 2338.388093][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2338.392948][T23344] do_SYSENTER_32+0x73/0x90 [ 2338.397455][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.403804][T23344] RIP: 0023:0xf7f65549 [ 2338.407899][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2338.427514][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2338.435931][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2338.443912][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2338.451885][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2338.459855][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2338.467830][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2338.475802][T23344] Uninit was stored to memory at: [ 2338.480834][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2338.486741][T23344] __msan_chain_origin+0x57/0xa0 [ 2338.491686][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2338.496802][T23344] get_compat_msghdr+0x108/0x2b0 [ 2338.501742][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2338.506247][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2338.510945][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.517016][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.523173][T23344] __do_fast_syscall_32+0x129/0x180 [ 2338.528375][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2338.533251][T23344] do_SYSENTER_32+0x73/0x90 [ 2338.537758][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.544104][T23344] [ 2338.546430][T23344] Uninit was stored to memory at: [ 2338.551465][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2338.557190][T23344] __msan_chain_origin+0x57/0xa0 [ 2338.562130][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2338.567352][T23344] get_compat_msghdr+0x108/0x2b0 [ 2338.572293][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2338.576796][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2338.581472][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.587563][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.593719][T23344] __do_fast_syscall_32+0x129/0x180 [ 2338.598916][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2338.603770][T23344] do_SYSENTER_32+0x73/0x90 [ 2338.608360][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.614784][T23344] [ 2338.617102][T23344] Uninit was stored to memory at: [ 2338.622139][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2338.627863][T23344] __msan_chain_origin+0x57/0xa0 [ 2338.632805][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2338.637918][T23344] get_compat_msghdr+0x108/0x2b0 [ 2338.642862][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2338.647364][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2338.652158][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.658227][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.664384][T23344] __do_fast_syscall_32+0x129/0x180 [ 2338.669583][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2338.674439][T23344] do_SYSENTER_32+0x73/0x90 [ 2338.678950][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.685260][T23344] [ 2338.687576][T23344] Uninit was stored to memory at: [ 2338.692605][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2338.698330][T23344] __msan_chain_origin+0x57/0xa0 [ 2338.703272][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2338.708383][T23344] get_compat_msghdr+0x108/0x2b0 [ 2338.713322][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2338.717826][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2338.722643][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.728727][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.735011][T23344] __do_fast_syscall_32+0x129/0x180 [ 2338.740210][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2338.745065][T23344] do_SYSENTER_32+0x73/0x90 [ 2338.749565][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.755894][T23344] [ 2338.758209][T23344] Uninit was stored to memory at: [ 2338.763234][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2338.768964][T23344] __msan_chain_origin+0x57/0xa0 [ 2338.773898][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2338.779003][T23344] get_compat_msghdr+0x108/0x2b0 [ 2338.783939][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2338.788440][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2338.793112][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.799174][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.805323][T23344] __do_fast_syscall_32+0x129/0x180 [ 2338.810518][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2338.815362][T23344] do_SYSENTER_32+0x73/0x90 [ 2338.819862][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.826169][T23344] [ 2338.828482][T23344] Uninit was stored to memory at: [ 2338.833514][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2338.839236][T23344] __msan_chain_origin+0x57/0xa0 [ 2338.842296][T23346] not chained 1020000 origins [ 2338.844179][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2338.848862][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2338.853947][T23344] get_compat_msghdr+0x108/0x2b0 [ 2338.862755][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2338.867760][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2338.877785][T23346] Call Trace: [ 2338.882282][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2338.885541][T23346] dump_stack+0x21c/0x280 [ 2338.890201][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2338.894518][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2338.900553][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2338.906256][T23346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2338.912391][T23344] __do_fast_syscall_32+0x129/0x180 [ 2338.918426][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2338.929326][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2338.934508][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2338.939338][T23344] do_SYSENTER_32+0x73/0x90 [ 2338.944942][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2338.949418][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2338.955803][T23346] ? _copy_from_user+0x201/0x310 [ 2338.962349][T23344] [ 2338.967267][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2338.969573][T23344] Uninit was stored to memory at: [ 2338.974756][T23346] __msan_chain_origin+0x57/0xa0 [ 2338.979755][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2338.984666][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2338.990359][T23344] __msan_chain_origin+0x57/0xa0 [ 2338.995452][T23346] get_compat_msghdr+0x108/0x2b0 [ 2339.000361][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2339.005279][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2339.010359][T23344] get_compat_msghdr+0x108/0x2b0 [ 2339.014844][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2339.019757][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2339.026501][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2339.030975][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2339.036233][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2339.040880][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.045616][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2339.051664][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.056572][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2339.062704][T23344] __do_fast_syscall_32+0x129/0x180 [ 2339.068478][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2339.073676][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2339.078843][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.083663][T23344] do_SYSENTER_32+0x73/0x90 [ 2339.089714][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.094202][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.100329][T23346] __do_fast_syscall_32+0x129/0x180 [ 2339.106611][T23344] [ 2339.111804][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2339.114098][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2339.118929][T23346] do_SYSENTER_32+0x73/0x90 [ 2339.125574][T23344] do_recvmmsg+0xc2/0x22e0 [ 2339.130050][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.134436][T23344] do_recvmmsg+0xc2/0x22e0 [ 2339.140729][T23346] RIP: 0023:0xf7f65549 [ 2339.149164][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2339.168780][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2339.177272][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2339.185244][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2339.193222][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2339.201184][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2339.209149][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2339.217111][T23346] Uninit was stored to memory at: [ 2339.222145][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2339.227863][T23346] __msan_chain_origin+0x57/0xa0 [ 2339.232800][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2339.237912][T23346] get_compat_msghdr+0x108/0x2b0 [ 2339.242836][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2339.247327][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2339.251995][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.258049][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.264193][T23346] __do_fast_syscall_32+0x129/0x180 [ 2339.269377][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2339.274212][T23346] do_SYSENTER_32+0x73/0x90 [ 2339.278701][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.285003][T23346] [ 2339.287312][T23346] Uninit was stored to memory at: [ 2339.292332][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2339.298142][T23346] __msan_chain_origin+0x57/0xa0 [ 2339.303068][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2339.308164][T23346] get_compat_msghdr+0x108/0x2b0 [ 2339.313091][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2339.317580][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2339.322256][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.328312][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.334465][T23346] __do_fast_syscall_32+0x129/0x180 [ 2339.339650][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2339.344499][T23346] do_SYSENTER_32+0x73/0x90 [ 2339.348989][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.355290][T23346] [ 2339.357600][T23346] Uninit was stored to memory at: [ 2339.362616][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2339.368329][T23346] __msan_chain_origin+0x57/0xa0 [ 2339.373254][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2339.378352][T23346] get_compat_msghdr+0x108/0x2b0 [ 2339.383289][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2339.387790][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2339.392454][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.398506][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.404646][T23346] __do_fast_syscall_32+0x129/0x180 [ 2339.409831][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2339.414666][T23346] do_SYSENTER_32+0x73/0x90 [ 2339.419157][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.425461][T23346] [ 2339.427770][T23346] Uninit was stored to memory at: [ 2339.432797][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2339.438502][T23346] __msan_chain_origin+0x57/0xa0 [ 2339.443423][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2339.448868][T23346] get_compat_msghdr+0x108/0x2b0 [ 2339.453791][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2339.458290][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2339.462955][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.469012][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.475151][T23346] __do_fast_syscall_32+0x129/0x180 [ 2339.480339][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2339.485278][T23346] do_SYSENTER_32+0x73/0x90 [ 2339.489817][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.496131][T23346] [ 2339.498448][T23346] Uninit was stored to memory at: [ 2339.503473][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2339.509184][T23346] __msan_chain_origin+0x57/0xa0 [ 2339.514108][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2339.519207][T23346] get_compat_msghdr+0x108/0x2b0 [ 2339.524138][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2339.528656][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2339.533326][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.539396][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.545560][T23346] __do_fast_syscall_32+0x129/0x180 [ 2339.550769][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2339.555607][T23346] do_SYSENTER_32+0x73/0x90 [ 2339.560098][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.566400][T23346] [ 2339.568711][T23346] Uninit was stored to memory at: [ 2339.573726][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2339.579435][T23346] __msan_chain_origin+0x57/0xa0 [ 2339.584358][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2339.589888][T23346] get_compat_msghdr+0x108/0x2b0 [ 2339.594811][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2339.599300][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2339.603965][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.610024][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.616167][T23346] __do_fast_syscall_32+0x129/0x180 [ 2339.621352][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2339.626191][T23346] do_SYSENTER_32+0x73/0x90 [ 2339.630698][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.637019][T23346] [ 2339.639327][T23346] Uninit was stored to memory at: [ 2339.644344][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2339.650085][T23346] __msan_chain_origin+0x57/0xa0 [ 2339.655009][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2339.660108][T23346] get_compat_msghdr+0x108/0x2b0 [ 2339.665038][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2339.669529][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2339.674193][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2339.680246][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2339.686386][T23346] __do_fast_syscall_32+0x129/0x180 [ 2339.691571][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2339.696408][T23346] do_SYSENTER_32+0x73/0x90 [ 2339.700899][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2339.707213][T23346] [ 2339.709532][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2339.716203][T23346] do_recvmmsg+0xc2/0x22e0 [ 2339.720616][T23346] do_recvmmsg+0xc2/0x22e0 [ 2340.117427][T23344] not chained 1030000 origins [ 2340.122144][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2340.130902][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2340.140962][T23344] Call Trace: [ 2340.144262][T23344] dump_stack+0x21c/0x280 [ 2340.148601][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2340.154324][T23344] ? do_user_addr_fault+0x1045/0x16d0 [ 2340.159701][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2340.164909][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.170549][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2340.176618][T23344] ? _copy_from_user+0x201/0x310 [ 2340.181559][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2340.186765][T23344] __msan_chain_origin+0x57/0xa0 [ 2340.191710][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2340.196846][T23344] get_compat_msghdr+0x108/0x2b0 [ 2340.201791][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2340.206302][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2340.211510][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.217141][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2340.222428][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2340.227195][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2340.231871][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2340.237666][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2340.242863][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.248929][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.255079][T23344] __do_fast_syscall_32+0x129/0x180 [ 2340.260276][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2340.265123][T23344] do_SYSENTER_32+0x73/0x90 [ 2340.269644][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.275965][T23344] RIP: 0023:0xf7f65549 [ 2340.280034][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2340.299633][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2340.308039][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2340.316004][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2340.321819][T23346] not chained 1040000 origins [ 2340.324491][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2340.337110][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2340.345061][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2340.353012][T23344] Uninit was stored to memory at: [ 2340.353025][T23346] CPU: 0 PID: 23346 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2340.353041][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2340.358051][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2340.366676][T23346] Call Trace: [ 2340.376739][T23344] __msan_chain_origin+0x57/0xa0 [ 2340.382427][T23346] dump_stack+0x21c/0x280 [ 2340.385674][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2340.385695][T23344] get_compat_msghdr+0x108/0x2b0 [ 2340.390619][T23346] kmsan_internal_chain_origin+0x6f/0x130 [ 2340.394919][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2340.400007][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2340.404920][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2340.411487][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2340.415963][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.421131][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.425779][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.430970][T23346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2340.437008][T23344] __do_fast_syscall_32+0x129/0x180 [ 2340.442611][T23346] ? _copy_from_user+0x201/0x310 [ 2340.448735][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2340.454780][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2340.459962][T23344] do_SYSENTER_32+0x73/0x90 [ 2340.464876][T23346] __msan_chain_origin+0x57/0xa0 [ 2340.469699][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.474869][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2340.481413][T23344] [ 2340.486333][T23346] get_compat_msghdr+0x108/0x2b0 [ 2340.492631][T23344] Uninit was stored to memory at: [ 2340.497760][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2340.500071][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2340.505004][T23346] ? kmsan_internal_set_origin+0x85/0xc0 [ 2340.510010][T23344] __msan_chain_origin+0x57/0xa0 [ 2340.514484][T23346] ? __msan_poison_alloca+0xe9/0x110 [ 2340.520173][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2340.525779][T23346] ? __sys_recvmmsg+0xb5/0x5f0 [ 2340.530685][T23344] get_compat_msghdr+0x108/0x2b0 [ 2340.536033][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2340.541115][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2340.545862][T23346] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2340.550783][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2340.555447][T23346] ? kmsan_get_metadata+0x116/0x180 [ 2340.559932][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.565717][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.570365][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.575538][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.581577][T23344] __do_fast_syscall_32+0x129/0x180 [ 2340.587614][T23346] __do_fast_syscall_32+0x129/0x180 [ 2340.593761][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2340.599989][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2340.605179][T23344] do_SYSENTER_32+0x73/0x90 [ 2340.610363][T23346] do_SYSENTER_32+0x73/0x90 [ 2340.615200][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.620015][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.620033][T23346] RIP: 0023:0xf7f65549 [ 2340.624521][T23344] [ 2340.629013][T23346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2340.629030][T23346] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2340.635326][T23344] Uninit was stored to memory at: [ 2340.641631][T23346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2340.645702][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2340.647998][T23346] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2340.667601][T23344] __msan_chain_origin+0x57/0xa0 [ 2340.675978][T23346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2340.680981][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2340.688938][T23346] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2340.694633][T23344] get_compat_msghdr+0x108/0x2b0 [ 2340.702573][T23346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2340.707486][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2340.715600][T23346] Uninit was stored to memory at: [ 2340.720736][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2340.728700][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2340.733607][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.741559][T23346] __msan_chain_origin+0x57/0xa0 [ 2340.746031][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.751037][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2340.755684][T23344] __do_fast_syscall_32+0x129/0x180 [ 2340.761372][T23346] get_compat_msghdr+0x108/0x2b0 [ 2340.767421][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2340.772333][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2340.780469][T23344] do_SYSENTER_32+0x73/0x90 [ 2340.785555][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2340.790737][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.795663][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.800471][T23344] [ 2340.804957][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.809432][T23344] Uninit was stored to memory at: [ 2340.814092][T23346] __do_fast_syscall_32+0x129/0x180 [ 2340.820392][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2340.826426][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2340.828731][T23344] __msan_chain_origin+0x57/0xa0 [ 2340.834853][T23346] do_SYSENTER_32+0x73/0x90 [ 2340.839849][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2340.845018][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.850705][T23344] get_compat_msghdr+0x108/0x2b0 [ 2340.855528][T23346] [ 2340.860453][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2340.864913][T23346] Uninit was stored to memory at: [ 2340.870008][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2340.876305][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2340.881211][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.883526][T23346] __msan_chain_origin+0x57/0xa0 [ 2340.888000][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.892993][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2340.897644][T23344] __do_fast_syscall_32+0x129/0x180 [ 2340.903333][T23346] get_compat_msghdr+0x108/0x2b0 [ 2340.909374][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2340.914283][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2340.920406][T23344] do_SYSENTER_32+0x73/0x90 [ 2340.925512][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2340.930682][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.935590][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2340.940398][T23344] [ 2340.944886][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2340.949347][T23344] Uninit was stored to memory at: [ 2340.954005][T23346] __do_fast_syscall_32+0x129/0x180 [ 2340.960305][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2340.966339][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2340.968645][T23344] __msan_chain_origin+0x57/0xa0 [ 2340.974768][T23346] do_SYSENTER_32+0x73/0x90 [ 2340.979764][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2340.984951][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2340.990662][T23344] get_compat_msghdr+0x108/0x2b0 [ 2340.995482][T23346] [ 2341.000402][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2341.004865][T23346] Uninit was stored to memory at: [ 2341.009958][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2341.016267][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2341.021183][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.023498][T23346] __msan_chain_origin+0x57/0xa0 [ 2341.028145][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.033160][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2341.037821][T23344] __do_fast_syscall_32+0x129/0x180 [ 2341.043507][T23346] get_compat_msghdr+0x108/0x2b0 [ 2341.049559][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2341.054469][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2341.060592][T23344] do_SYSENTER_32+0x73/0x90 [ 2341.065681][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2341.070851][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.075760][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.080580][T23344] [ 2341.085068][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.089530][T23344] Uninit was stored to memory at: [ 2341.094193][T23346] __do_fast_syscall_32+0x129/0x180 [ 2341.100523][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2341.106576][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2341.108886][T23344] __msan_chain_origin+0x57/0xa0 [ 2341.115030][T23346] do_SYSENTER_32+0x73/0x90 [ 2341.120029][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2341.125221][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.130925][T23344] get_compat_msghdr+0x108/0x2b0 [ 2341.135741][T23346] [ 2341.140665][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2341.145130][T23346] Uninit was stored to memory at: [ 2341.150235][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2341.156533][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2341.161446][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.163770][T23346] __msan_chain_origin+0x57/0xa0 [ 2341.168248][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.173246][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2341.177899][T23344] __do_fast_syscall_32+0x129/0x180 [ 2341.183604][T23346] get_compat_msghdr+0x108/0x2b0 [ 2341.189769][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2341.194694][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2341.200820][T23344] do_SYSENTER_32+0x73/0x90 [ 2341.205906][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2341.211079][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.216031][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.220843][T23344] [ 2341.225325][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.225348][T23346] __do_fast_syscall_32+0x129/0x180 [ 2341.229813][T23344] Uninit was stored to memory at: [ 2341.234473][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2341.240775][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2341.246817][T23346] do_SYSENTER_32+0x73/0x90 [ 2341.249139][T23344] __msan_chain_origin+0x57/0xa0 [ 2341.255268][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.260440][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2341.265426][T23346] [ 2341.270277][T23344] get_compat_msghdr+0x108/0x2b0 [ 2341.275966][T23346] Uninit was stored to memory at: [ 2341.280454][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2341.285366][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2341.291676][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2341.296764][T23346] __msan_chain_origin+0x57/0xa0 [ 2341.299070][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.303981][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2341.308980][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.313474][T23346] get_compat_msghdr+0x108/0x2b0 [ 2341.319174][T23344] __do_fast_syscall_32+0x129/0x180 [ 2341.323824][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2341.328733][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2341.334773][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2341.339881][T23344] do_SYSENTER_32+0x73/0x90 [ 2341.346006][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.350940][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.356112][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.360576][T23344] [ 2341.365414][T23346] __do_fast_syscall_32+0x129/0x180 [ 2341.370054][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2341.374541][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2341.380585][T23344] do_recvmmsg+0xc2/0x22e0 [ 2341.386884][T23346] do_SYSENTER_32+0x73/0x90 [ 2341.393012][T23344] do_recvmmsg+0xc2/0x22e0 [ 2341.395320][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.431645][T23346] [ 2341.433967][T23346] Uninit was stored to memory at: [ 2341.439003][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2341.444802][T23346] __msan_chain_origin+0x57/0xa0 [ 2341.449776][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2341.454889][T23346] get_compat_msghdr+0x108/0x2b0 [ 2341.459835][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2341.464346][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2341.469031][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.475202][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.481394][T23346] __do_fast_syscall_32+0x129/0x180 [ 2341.486603][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2341.491460][T23346] do_SYSENTER_32+0x73/0x90 [ 2341.495970][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.502289][T23346] [ 2341.504608][T23346] Uninit was stored to memory at: [ 2341.509643][T23346] kmsan_internal_chain_origin+0xad/0x130 [ 2341.515373][T23346] __msan_chain_origin+0x57/0xa0 [ 2341.520314][T23346] __get_compat_msghdr+0x6db/0x9d0 [ 2341.525433][T23346] get_compat_msghdr+0x108/0x2b0 [ 2341.530382][T23346] do_recvmmsg+0xdc7/0x22e0 [ 2341.534896][T23346] __sys_recvmmsg+0x340/0x5f0 [ 2341.539577][T23346] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2341.545654][T23346] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2341.551821][T23346] __do_fast_syscall_32+0x129/0x180 [ 2341.557033][T23346] do_fast_syscall_32+0x6a/0xc0 [ 2341.561893][T23346] do_SYSENTER_32+0x73/0x90 [ 2341.566406][T23346] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2341.572731][T23346] [ 2341.575056][T23346] Local variable ----msg_sys@do_recvmmsg created at: [ 2341.581735][T23346] do_recvmmsg+0xc2/0x22e0 [ 2341.586154][T23346] do_recvmmsg+0xc2/0x22e0 [ 2342.154919][T23344] not chained 1050000 origins [ 2342.159670][T23344] CPU: 1 PID: 23344 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 2342.168340][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2342.178457][T23344] Call Trace: [ 2342.181757][T23344] dump_stack+0x21c/0x280 [ 2342.186099][T23344] kmsan_internal_chain_origin+0x6f/0x130 [ 2342.191829][T23344] ? __msan_get_context_state+0x9/0x20 [ 2342.197292][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2342.202498][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2342.208139][T23344] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2342.214211][T23344] ? _copy_from_user+0x201/0x310 [ 2342.219153][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2342.224359][T23344] __msan_chain_origin+0x57/0xa0 [ 2342.229301][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2342.234425][T23344] get_compat_msghdr+0x108/0x2b0 [ 2342.239376][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2342.243891][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2342.249104][T23344] ? kmsan_internal_set_origin+0x85/0xc0 [ 2342.254774][T23344] ? __msan_poison_alloca+0xe9/0x110 [ 2342.260067][T23344] ? __sys_recvmmsg+0xb5/0x5f0 [ 2342.264835][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2342.269557][T23344] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2342.275378][T23344] ? kmsan_get_metadata+0x116/0x180 [ 2342.280580][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.286658][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.292818][T23344] __do_fast_syscall_32+0x129/0x180 [ 2342.298021][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2342.302877][T23344] do_SYSENTER_32+0x73/0x90 [ 2342.307388][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.313714][T23344] RIP: 0023:0xf7f65549 [ 2342.317789][T23344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2342.337835][T23344] RSP: 002b:00000000f555f0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2342.346253][T23344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 2342.354229][T23344] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2342.362205][T23344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2342.370177][T23344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2342.378149][T23344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2342.386125][T23344] Uninit was stored to memory at: [ 2342.391161][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2342.396923][T23344] __msan_chain_origin+0x57/0xa0 [ 2342.401865][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2342.407067][T23344] get_compat_msghdr+0x108/0x2b0 [ 2342.412190][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2342.416885][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2342.421575][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.427644][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.433800][T23344] __do_fast_syscall_32+0x129/0x180 [ 2342.439004][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2342.443856][T23344] do_SYSENTER_32+0x73/0x90 [ 2342.448363][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.454699][T23344] [ 2342.457019][T23344] Uninit was stored to memory at: [ 2342.462048][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2342.467771][T23344] __msan_chain_origin+0x57/0xa0 [ 2342.472709][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2342.477821][T23344] get_compat_msghdr+0x108/0x2b0 [ 2342.482760][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2342.487292][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2342.491972][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.498043][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.504199][T23344] __do_fast_syscall_32+0x129/0x180 [ 2342.509404][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2342.514264][T23344] do_SYSENTER_32+0x73/0x90 [ 2342.518770][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.525080][T23344] [ 2342.527400][T23344] Uninit was stored to memory at: [ 2342.532464][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2342.538193][T23344] __msan_chain_origin+0x57/0xa0 [ 2342.543130][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2342.548240][T23344] get_compat_msghdr+0x108/0x2b0 [ 2342.553183][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2342.557688][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2342.562375][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.568446][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.574609][T23344] __do_fast_syscall_32+0x129/0x180 [ 2342.579816][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2342.584676][T23344] do_SYSENTER_32+0x73/0x90 [ 2342.589194][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.595507][T23344] [ 2342.597834][T23344] Uninit was stored to memory at: [ 2342.602855][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2342.608552][T23344] __msan_chain_origin+0x57/0xa0 [ 2342.613471][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2342.618573][T23344] get_compat_msghdr+0x108/0x2b0 [ 2342.623554][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2342.628124][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2342.632815][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.638858][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.645008][T23344] __do_fast_syscall_32+0x129/0x180 [ 2342.650185][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2342.655030][T23344] do_SYSENTER_32+0x73/0x90 [ 2342.659512][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.665807][T23344] [ 2342.668127][T23344] Uninit was stored to memory at: [ 2342.673139][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2342.679103][T23344] __msan_chain_origin+0x57/0xa0 [ 2342.684021][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2342.689119][T23344] get_compat_msghdr+0x108/0x2b0 [ 2342.694072][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2342.698555][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2342.703917][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.709969][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.716145][T23344] __do_fast_syscall_32+0x129/0x180 [ 2342.721441][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2342.726297][T23344] do_SYSENTER_32+0x73/0x90 [ 2342.730812][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.737152][T23344] [ 2342.739455][T23344] Uninit was stored to memory at: [ 2342.744461][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2342.750156][T23344] __msan_chain_origin+0x57/0xa0 [ 2342.755172][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2342.760261][T23344] get_compat_msghdr+0x108/0x2b0 [ 2342.765193][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2342.769673][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2342.774347][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.780390][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.786625][T23344] __do_fast_syscall_32+0x129/0x180 [ 2342.791817][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2342.796667][T23344] do_SYSENTER_32+0x73/0x90 [ 2342.801147][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.807528][T23344] [ 2342.809830][T23344] Uninit was stored to memory at: [ 2342.814835][T23344] kmsan_internal_chain_origin+0xad/0x130 [ 2342.820531][T23344] __msan_chain_origin+0x57/0xa0 [ 2342.825481][T23344] __get_compat_msghdr+0x6db/0x9d0 [ 2342.830586][T23344] get_compat_msghdr+0x108/0x2b0 [ 2342.835599][T23344] do_recvmmsg+0xdc7/0x22e0 [ 2342.840094][T23344] __sys_recvmmsg+0x340/0x5f0 [ 2342.844757][T23344] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2342.850901][T23344] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2342.857032][T23344] __do_fast_syscall_32+0x129/0x180 [ 2342.862207][T23344] do_fast_syscall_32+0x6a/0xc0 [ 2342.867058][T23344] do_SYSENTER_32+0x73/0x90 [ 2342.871641][T23344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2342.878890][T23344] [ 2342.881195][T23344] Local variable ----msg_sys@do_recvmmsg created at: [ 2342.887863][T23344] do_recvmmsg+0xc2/0x22e0 [ 2342.892271][T23344] do_recvmmsg+0xc2/0x22e0 01:15:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) dup2(r0, r2) getsockopt$inet6_tcp_int(r2, 0x6, 0x1, 0x0, &(0x7f0000000300)) 01:15:33 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000140)={0x46}, 0x7) 01:15:33 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 01:15:33 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 01:15:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:15:33 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:15:34 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) 01:15:34 executing program 5: r0 = epoll_create1(0x0) ioctl$int_out(r0, 0x2, &(0x7f0000005880)) 01:15:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$packet(0x11, 0x2, 0x300) read$char_raw(r1, &(0x7f0000000400)={""/5820}, 0x1800) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 01:15:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) 01:15:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = dup(r0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x70) 01:15:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x890b, &(0x7f0000000300)={'syzkaller1\x00', {0x2, 0x0, @empty}}) [ 2347.672647][T23456] Kernel panic - not syncing: kmsan_in_runtime: -1 [ 2347.679313][T23456] CPU: 0 PID: 23456 Comm: kworker/1:35 Not tainted 5.9.0-rc8-syzkaller #0 [ 2347.687817][T23456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2347.697879][T23456] Call Trace: [ 2347.701169][T23456] dump_stack+0x21c/0x280 [ 2347.705496][T23456] panic+0x4c8/0xea7 [ 2347.709381][T23456] ? kmsan_report+0x1e0/0x1e0 [ 2347.714077][T23456] ? detach_tasks+0x713/0x1db0 [ 2347.718944][T23456] ? kmsan_internal_memset_shadow+0x4e/0xb0 [ 2347.724838][T23456] __msan_poison_alloca+0x106/0x110 [ 2347.730034][T23456] ? kmsan_get_metadata+0x116/0x180 [ 2347.735241][T23456] ? detach_tasks+0x713/0x1db0 [ 2347.740205][T23456] ? detach_tasks+0x713/0x1db0 [ 2347.744961][T23456] detach_tasks+0x713/0x1db0 [ 2347.749559][T23456] ? kmsan_get_metadata+0x116/0x180 [ 2347.754841][T23456] load_balance+0x244d/0x5030 [ 2347.759537][T23456] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2347.765449][T23456] newidle_balance+0x477/0x12e0 [ 2347.770726][T23456] pick_next_task_fair+0x49d/0x1250 [ 2347.775935][T23456] pick_next_task+0x18e/0x6b0 [ 2347.780609][T23456] __schedule+0x24b/0x590 [ 2347.784954][T23456] schedule+0x260/0x330 [ 2347.789102][T23456] schedule_preempt_disabled+0xe/0x10 [ 2347.794460][T23456] kthread+0x421/0x560 [ 2347.798524][T23456] ? process_one_work+0x20a0/0x20a0 [ 2347.803712][T23456] ? kthread_blkcg+0x110/0x110 [ 2347.808464][T23456] ret_from_fork+0x1f/0x30 [ 2348.899336][T23456] Shutting down cpus with NMI [ 2348.915600][T23456] Kernel Offset: disabled [ 2348.919943][T23456] Rebooting in 86400 seconds..