[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.67' (ECDSA) to the list of known hosts. syzkaller login: [ 143.815020][ T8221] IPVS: ftp: loaded support on port[0] = 21 [ 143.998063][ T8221] chnl_net:caif_netlink_parms(): no params data found [ 144.087270][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.095076][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.104485][ T8221] device bridge_slave_0 entered promiscuous mode [ 144.115309][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.122761][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.131350][ T8221] device bridge_slave_1 entered promiscuous mode [ 144.166929][ T8221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.180289][ T8221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.216544][ T8221] team0: Port device team_slave_0 added [ 144.228317][ T8221] team0: Port device team_slave_1 added [ 144.259435][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.267264][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.293811][ T8221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.307255][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.314523][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.341990][ T8221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.385164][ T8221] device hsr_slave_0 entered promiscuous mode [ 144.403772][ T8221] device hsr_slave_1 entered promiscuous mode [ 144.604096][ T8221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.619603][ T8221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.639028][ T8221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.656032][ T8221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.745331][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.753348][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.761258][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.768793][ T8221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.848616][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.869853][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.881621][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.892691][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.902366][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 144.922835][ T8221] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.941366][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.951499][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.959420][ T8429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.976469][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.986633][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.996735][ T1982] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.004670][ T1982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.033096][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.045215][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.056389][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.066415][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.079275][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.094360][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.105208][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.129392][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.138980][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.157271][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.166909][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.183939][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.214590][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.222294][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.243894][ T8221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.281613][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.291854][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.346107][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.356442][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.379569][ T8221] device veth0_vlan entered promiscuous mode [ 145.391497][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.401283][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.432270][ T8221] device veth1_vlan entered promiscuous mode [ 145.507532][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.517553][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.527695][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.537982][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.556843][ T8221] device veth0_macvtap entered promiscuous mode [ 145.570150][ T8221] device veth1_macvtap entered promiscuous mode [ 145.605911][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.613921][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.623906][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.633347][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.643082][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.660594][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.668727][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.679421][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.698159][ T8221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.707515][ T8221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.717136][ T8221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.726290][ T8221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 145.944351][ C1] ===================================================== [ 145.951545][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 145.958434][ C1] CPU: 1 PID: 8434 Comm: syz-executor873 Not tainted 5.12.0-rc6-syzkaller #0 [ 145.967772][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.978266][ C1] Call Trace: [ 145.981576][ C1] [ 145.984440][ C1] dump_stack+0x24c/0x2e0 [ 145.988813][ C1] kmsan_report+0xfb/0x1e0 [ 145.993331][ C1] __msan_warning+0x5c/0xa0 [ 145.997860][ C1] ip_rcv_core+0xf4c/0x1480 [ 146.002465][ C1] ip_rcv+0xc7/0x820 [ 146.006557][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.011794][ C1] __netif_receive_skb+0x1ec/0x640 [ 146.017326][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.022980][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 146.028631][ C1] process_backlog+0x517/0xbd0 [ 146.033508][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 146.038874][ C1] __napi_poll+0x13e/0xca0 [ 146.043302][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.049413][ C1] net_rx_action+0x726/0x14a0 [ 146.054097][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.059958][ C1] ? net_tx_action+0xd30/0xd30 [ 146.064725][ C1] __do_softirq+0x1b9/0x715 [ 146.069417][ C1] ? idle_cpu+0x9a/0x1d0 [ 146.073950][ C1] ? __irq_exit_rcu+0x83/0x280 [ 146.079172][ C1] do_softirq+0x123/0x1c0 [ 146.083510][ C1] [ 146.086456][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 146.091683][ C1] local_bh_enable+0x36/0x40 [ 146.096320][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 146.101481][ C1] dev_queue_xmit+0x4b/0x60 [ 146.106072][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 146.111467][ C1] packet_sendmsg+0x86ee/0x99d0 [ 146.116338][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.122816][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.128387][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.134022][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.139681][ C1] ? process_slab+0x13a8/0x1b70 [ 146.144706][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.151027][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.157160][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 146.162144][ C1] ? packet_getsockopt+0x1120/0x1120 [ 146.167801][ C1] __sys_sendmsg+0x714/0x830 [ 146.172512][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.178286][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 146.184362][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.189970][ C1] __se_sys_sendmsg+0x97/0xb0 [ 146.194799][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 146.199583][ C1] do_syscall_64+0x9f/0x140 [ 146.204092][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.210096][ C1] RIP: 0033:0x443e29 [ 146.214178][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 146.234369][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.243133][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 146.251112][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 146.259263][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 146.267445][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 00007ffe4a926ed0 [ 146.275671][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 0000000000000003 [ 146.283676][ C1] [ 146.286026][ C1] Uninit was stored to memory at: [ 146.291027][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 146.296763][ C1] __msan_chain_origin+0x54/0xa0 [ 146.301809][ C1] iptunnel_xmit+0xbd6/0xf20 [ 146.306435][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 146.311769][ C1] geneve_xmit+0x2139/0x3c40 [ 146.316403][ C1] xmit_one+0x2b6/0x760 [ 146.320738][ C1] __dev_queue_xmit+0x3432/0x4600 [ 146.326032][ C1] dev_queue_xmit+0x4b/0x60 [ 146.330554][ C1] packet_sendmsg+0x86ee/0x99d0 [ 146.335405][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 146.340280][ C1] __sys_sendmsg+0x714/0x830 [ 146.344913][ C1] __se_sys_sendmsg+0x97/0xb0 [ 146.349828][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 146.354605][ C1] do_syscall_64+0x9f/0x140 [ 146.359397][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.365585][ C1] [ 146.367959][ C1] Uninit was created at: [ 146.372202][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.378010][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.382777][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.388833][ C1] __alloc_skb+0x4dd/0xe90 [ 146.393272][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 146.398525][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 146.403845][ C1] packet_sendmsg+0x6a12/0x99d0 [ 146.408702][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 146.413586][ C1] __sys_sendmsg+0x714/0x830 [ 146.418276][ C1] __se_sys_sendmsg+0x97/0xb0 [ 146.423202][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 146.428048][ C1] do_syscall_64+0x9f/0x140 [ 146.432554][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.438465][ C1] ===================================================== [ 146.445504][ C1] Disabling lock debugging due to kernel taint [ 146.451815][ C1] ===================================================== [ 146.458827][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 146.465709][ C1] CPU: 1 PID: 8434 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.475952][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.486045][ C1] Call Trace: [ 146.489614][ C1] [ 146.492470][ C1] dump_stack+0x24c/0x2e0 [ 146.497127][ C1] kmsan_report+0xfb/0x1e0 [ 146.501581][ C1] __msan_warning+0x5c/0xa0 [ 146.506406][ C1] ip_rcv_core+0xf5d/0x1480 [ 146.510966][ C1] ip_rcv+0xc7/0x820 [ 146.514915][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.520152][ C1] __netif_receive_skb+0x1ec/0x640 [ 146.525288][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.530951][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 146.536646][ C1] process_backlog+0x517/0xbd0 [ 146.541522][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 146.546837][ C1] __napi_poll+0x13e/0xca0 [ 146.551366][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.558215][ C1] net_rx_action+0x726/0x14a0 [ 146.562924][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.568786][ C1] ? net_tx_action+0xd30/0xd30 [ 146.573670][ C1] __do_softirq+0x1b9/0x715 [ 146.578550][ C1] ? idle_cpu+0x9a/0x1d0 [ 146.582837][ C1] ? __irq_exit_rcu+0x83/0x280 [ 146.587630][ C1] do_softirq+0x123/0x1c0 [ 146.591994][ C1] [ 146.594933][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 146.599988][ C1] local_bh_enable+0x36/0x40 [ 146.604707][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 146.609979][ C1] dev_queue_xmit+0x4b/0x60 [ 146.614802][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 146.620091][ C1] packet_sendmsg+0x86ee/0x99d0 [ 146.624951][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.632457][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.637770][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.643053][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.648696][ C1] ? process_slab+0x13a8/0x1b70 [ 146.653839][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.659662][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.665739][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 146.670873][ C1] ? packet_getsockopt+0x1120/0x1120 [ 146.676204][ C1] __sys_sendmsg+0x714/0x830 [ 146.681111][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.686946][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 146.693066][ C1] ? kmsan_get_metadata+0x116/0x180 [ 146.698674][ C1] __se_sys_sendmsg+0x97/0xb0 [ 146.703366][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 146.708270][ C1] do_syscall_64+0x9f/0x140 [ 146.712896][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.718916][ C1] RIP: 0033:0x443e29 [ 146.722997][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 146.744051][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.752669][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 146.760784][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 146.768961][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 146.777155][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 00007ffe4a926ed0 [ 146.785406][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 0000000000000003 [ 146.793728][ C1] [ 146.796078][ C1] Uninit was stored to memory at: [ 146.801230][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 146.806967][ C1] __msan_chain_origin+0x54/0xa0 [ 146.811969][ C1] iptunnel_xmit+0xbd6/0xf20 [ 146.816620][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 146.821729][ C1] geneve_xmit+0x2139/0x3c40 [ 146.826937][ C1] xmit_one+0x2b6/0x760 [ 146.831383][ C1] __dev_queue_xmit+0x3432/0x4600 [ 146.836564][ C1] dev_queue_xmit+0x4b/0x60 [ 146.841106][ C1] packet_sendmsg+0x86ee/0x99d0 [ 146.846112][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 146.850967][ C1] __sys_sendmsg+0x714/0x830 [ 146.855770][ C1] __se_sys_sendmsg+0x97/0xb0 [ 146.860659][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 146.865533][ C1] do_syscall_64+0x9f/0x140 [ 146.870138][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.876414][ C1] [ 146.878733][ C1] Uninit was created at: [ 146.883248][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 146.889056][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 146.893737][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 146.899631][ C1] __alloc_skb+0x4dd/0xe90 [ 146.904042][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 146.909280][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 146.914500][ C1] packet_sendmsg+0x6a12/0x99d0 [ 146.919348][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 146.924235][ C1] __sys_sendmsg+0x714/0x830 [ 146.928915][ C1] __se_sys_sendmsg+0x97/0xb0 [ 146.933622][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 146.938418][ C1] do_syscall_64+0x9f/0x140 [ 146.943048][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.949141][ C1] ===================================================== [ 146.956252][ C1] ===================================================== [ 146.963328][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 146.970478][ C1] CPU: 1 PID: 8434 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 146.981199][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.991278][ C1] Call Trace: [ 146.994661][ C1] [ 146.997514][ C1] dump_stack+0x24c/0x2e0 [ 147.001880][ C1] kmsan_report+0xfb/0x1e0 [ 147.006329][ C1] __msan_warning+0x5c/0xa0 [ 147.010858][ C1] ip_rcv_core+0x1068/0x1480 [ 147.015484][ C1] ip_rcv+0xc7/0x820 [ 147.019467][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.024691][ C1] __netif_receive_skb+0x1ec/0x640 [ 147.029928][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.035614][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 147.041287][ C1] process_backlog+0x517/0xbd0 [ 147.046102][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 147.051414][ C1] __napi_poll+0x13e/0xca0 [ 147.055873][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.062023][ C1] net_rx_action+0x726/0x14a0 [ 147.066719][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.072757][ C1] ? net_tx_action+0xd30/0xd30 [ 147.077724][ C1] __do_softirq+0x1b9/0x715 [ 147.082336][ C1] ? idle_cpu+0x9a/0x1d0 [ 147.086776][ C1] ? __irq_exit_rcu+0x83/0x280 [ 147.091746][ C1] do_softirq+0x123/0x1c0 [ 147.096100][ C1] [ 147.099039][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 147.104090][ C1] local_bh_enable+0x36/0x40 [ 147.108796][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 147.114007][ C1] dev_queue_xmit+0x4b/0x60 [ 147.118643][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 147.123950][ C1] packet_sendmsg+0x86ee/0x99d0 [ 147.128838][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.134920][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.140108][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.145305][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.150929][ C1] ? process_slab+0x13a8/0x1b70 [ 147.155796][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.161597][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.167768][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.174446][ C1] ? packet_getsockopt+0x1120/0x1120 [ 147.179742][ C1] __sys_sendmsg+0x714/0x830 [ 147.184375][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.190124][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 147.196160][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.201431][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.206102][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.210858][ C1] do_syscall_64+0x9f/0x140 [ 147.215515][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.221494][ C1] RIP: 0033:0x443e29 [ 147.225854][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 147.245739][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.255542][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 147.263605][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 147.271706][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 147.279695][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 00007ffe4a926ed0 [ 147.287667][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 0000000000000003 [ 147.296006][ C1] [ 147.298321][ C1] Uninit was stored to memory at: [ 147.303418][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 147.309178][ C1] __msan_chain_origin+0x54/0xa0 [ 147.314119][ C1] __ip_local_out+0x479/0x840 [ 147.318962][ C1] ip_local_out+0xa1/0x1e0 [ 147.323662][ C1] iptunnel_xmit+0x931/0xf20 [ 147.328728][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 147.333848][ C1] geneve_xmit+0x2139/0x3c40 [ 147.338447][ C1] xmit_one+0x2b6/0x760 [ 147.342623][ C1] __dev_queue_xmit+0x3432/0x4600 [ 147.347686][ C1] dev_queue_xmit+0x4b/0x60 [ 147.352185][ C1] packet_sendmsg+0x86ee/0x99d0 [ 147.357149][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.362023][ C1] __sys_sendmsg+0x714/0x830 [ 147.366618][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.371304][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.376085][ C1] do_syscall_64+0x9f/0x140 [ 147.380634][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.386529][ C1] [ 147.388949][ C1] Uninit was stored to memory at: [ 147.394304][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 147.400033][ C1] __msan_chain_origin+0x54/0xa0 [ 147.405011][ C1] iptunnel_xmit+0xbd6/0xf20 [ 147.409600][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 147.414721][ C1] geneve_xmit+0x2139/0x3c40 [ 147.419497][ C1] xmit_one+0x2b6/0x760 [ 147.423669][ C1] __dev_queue_xmit+0x3432/0x4600 [ 147.430906][ C1] dev_queue_xmit+0x4b/0x60 [ 147.435522][ C1] packet_sendmsg+0x86ee/0x99d0 [ 147.440829][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.445757][ C1] __sys_sendmsg+0x714/0x830 [ 147.450908][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.455590][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.460385][ C1] do_syscall_64+0x9f/0x140 [ 147.465388][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.471304][ C1] [ 147.473752][ C1] Uninit was created at: [ 147.477989][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 147.483833][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 147.488550][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 147.494535][ C1] __alloc_skb+0x4dd/0xe90 [ 147.498946][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 147.504173][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 147.509409][ C1] packet_sendmsg+0x6a12/0x99d0 [ 147.514258][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.519244][ C1] __sys_sendmsg+0x714/0x830 [ 147.524085][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.528990][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.533866][ C1] do_syscall_64+0x9f/0x140 [ 147.538669][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.544570][ C1] ===================================================== executing program [ 147.627380][ C1] ===================================================== [ 147.634514][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 147.641427][ C1] CPU: 1 PID: 8435 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 147.651608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.661709][ C1] Call Trace: [ 147.665085][ C1] [ 147.667969][ C1] dump_stack+0x24c/0x2e0 [ 147.672421][ C1] kmsan_report+0xfb/0x1e0 [ 147.676987][ C1] __msan_warning+0x5c/0xa0 [ 147.681830][ C1] ip_rcv_core+0xf4c/0x1480 [ 147.686445][ C1] ip_rcv+0xc7/0x820 [ 147.690347][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.695543][ C1] __netif_receive_skb+0x1ec/0x640 [ 147.700651][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.706279][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 147.711926][ C1] process_backlog+0x517/0xbd0 [ 147.716692][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 147.722060][ C1] __napi_poll+0x13e/0xca0 [ 147.726472][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.732642][ C1] net_rx_action+0x726/0x14a0 [ 147.737345][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.743390][ C1] ? net_tx_action+0xd30/0xd30 [ 147.748216][ C1] __do_softirq+0x1b9/0x715 [ 147.752893][ C1] ? idle_cpu+0x9a/0x1d0 [ 147.757313][ C1] ? __irq_exit_rcu+0x83/0x280 [ 147.762151][ C1] do_softirq+0x123/0x1c0 [ 147.766621][ C1] [ 147.769546][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 147.774590][ C1] local_bh_enable+0x36/0x40 [ 147.779707][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 147.785005][ C1] dev_queue_xmit+0x4b/0x60 [ 147.789889][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 147.795274][ C1] packet_sendmsg+0x86ee/0x99d0 [ 147.800309][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.806938][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.812254][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.817547][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.823282][ C1] ? process_slab+0x13a8/0x1b70 [ 147.828253][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.834289][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.840734][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 147.845604][ C1] ? packet_getsockopt+0x1120/0x1120 [ 147.851035][ C1] __sys_sendmsg+0x714/0x830 [ 147.856026][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 147.861806][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 147.868110][ C1] ? kmsan_get_metadata+0x116/0x180 [ 147.873611][ C1] __se_sys_sendmsg+0x97/0xb0 [ 147.878419][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 147.883374][ C1] do_syscall_64+0x9f/0x140 [ 147.887984][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 147.893880][ C1] RIP: 0033:0x443e29 [ 147.897770][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 147.917486][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.925921][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 147.933924][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 147.942175][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 147.950287][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 0000000000023ac2 [ 147.958279][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 147.966284][ C1] [ 147.968636][ C1] Uninit was stored to memory at: [ 147.974000][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 147.980389][ C1] __msan_chain_origin+0x54/0xa0 [ 147.985875][ C1] iptunnel_xmit+0xbd6/0xf20 [ 147.990474][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 147.995596][ C1] geneve_xmit+0x2139/0x3c40 [ 148.000278][ C1] xmit_one+0x2b6/0x760 [ 148.004457][ C1] __dev_queue_xmit+0x3432/0x4600 [ 148.009488][ C1] dev_queue_xmit+0x4b/0x60 [ 148.014012][ C1] packet_sendmsg+0x86ee/0x99d0 [ 148.018906][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 148.023878][ C1] __sys_sendmsg+0x714/0x830 [ 148.028913][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.033598][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.038401][ C1] do_syscall_64+0x9f/0x140 [ 148.042920][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.048992][ C1] [ 148.051308][ C1] Uninit was created at: [ 148.055621][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.061365][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 148.066209][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.072208][ C1] __alloc_skb+0x4dd/0xe90 [ 148.076851][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 148.082070][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 148.087553][ C1] packet_sendmsg+0x6a12/0x99d0 [ 148.092609][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 148.097484][ C1] __sys_sendmsg+0x714/0x830 [ 148.102080][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.106871][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.111646][ C1] do_syscall_64+0x9f/0x140 [ 148.116146][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.122298][ C1] ===================================================== [ 148.129537][ C1] ===================================================== [ 148.136611][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 148.143757][ C1] CPU: 1 PID: 8435 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.154311][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.164396][ C1] Call Trace: [ 148.167704][ C1] [ 148.170562][ C1] dump_stack+0x24c/0x2e0 [ 148.175026][ C1] kmsan_report+0xfb/0x1e0 [ 148.179650][ C1] __msan_warning+0x5c/0xa0 [ 148.184184][ C1] ip_rcv_core+0xf5d/0x1480 [ 148.188723][ C1] ip_rcv+0xc7/0x820 [ 148.192841][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.198071][ C1] __netif_receive_skb+0x1ec/0x640 [ 148.203266][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.209207][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 148.214974][ C1] process_backlog+0x517/0xbd0 [ 148.220326][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 148.225723][ C1] __napi_poll+0x13e/0xca0 [ 148.230198][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.236316][ C1] net_rx_action+0x726/0x14a0 [ 148.241022][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.247103][ C1] ? net_tx_action+0xd30/0xd30 [ 148.251887][ C1] __do_softirq+0x1b9/0x715 [ 148.256390][ C1] ? idle_cpu+0x9a/0x1d0 [ 148.260655][ C1] ? __irq_exit_rcu+0x83/0x280 [ 148.265591][ C1] do_softirq+0x123/0x1c0 [ 148.270043][ C1] [ 148.273039][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 148.278245][ C1] local_bh_enable+0x36/0x40 [ 148.282993][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 148.288066][ C1] dev_queue_xmit+0x4b/0x60 [ 148.292577][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 148.297920][ C1] packet_sendmsg+0x86ee/0x99d0 [ 148.302779][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.309089][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.314295][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.319625][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.325472][ C1] ? process_slab+0x13a8/0x1b70 [ 148.331022][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.336824][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.342910][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 148.347799][ C1] ? packet_getsockopt+0x1120/0x1120 [ 148.353106][ C1] __sys_sendmsg+0x714/0x830 [ 148.357748][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.363394][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 148.369672][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.375207][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.380196][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.385088][ C1] do_syscall_64+0x9f/0x140 [ 148.389608][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.395586][ C1] RIP: 0033:0x443e29 [ 148.400183][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 148.420093][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.428577][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 148.437330][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 148.445624][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 148.453625][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 0000000000023ac2 [ 148.461723][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 148.469796][ C1] [ 148.472127][ C1] Uninit was stored to memory at: [ 148.477157][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 148.483120][ C1] __msan_chain_origin+0x54/0xa0 [ 148.488234][ C1] iptunnel_xmit+0xbd6/0xf20 [ 148.492835][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 148.498411][ C1] geneve_xmit+0x2139/0x3c40 [ 148.503010][ C1] xmit_one+0x2b6/0x760 [ 148.507222][ C1] __dev_queue_xmit+0x3432/0x4600 [ 148.512456][ C1] dev_queue_xmit+0x4b/0x60 [ 148.516987][ C1] packet_sendmsg+0x86ee/0x99d0 [ 148.521942][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 148.526798][ C1] __sys_sendmsg+0x714/0x830 [ 148.531592][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.536289][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.541181][ C1] do_syscall_64+0x9f/0x140 [ 148.545743][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.551834][ C1] [ 148.554508][ C1] Uninit was created at: [ 148.558746][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 148.564569][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 148.569553][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 148.575462][ C1] __alloc_skb+0x4dd/0xe90 [ 148.579901][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 148.585650][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 148.590908][ C1] packet_sendmsg+0x6a12/0x99d0 [ 148.595876][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 148.600737][ C1] __sys_sendmsg+0x714/0x830 [ 148.605353][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.610125][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.615046][ C1] do_syscall_64+0x9f/0x140 [ 148.619887][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.625816][ C1] ===================================================== [ 148.632927][ C1] ===================================================== [ 148.639947][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 148.647007][ C1] CPU: 1 PID: 8435 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 148.657411][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.667489][ C1] Call Trace: [ 148.670817][ C1] [ 148.673759][ C1] dump_stack+0x24c/0x2e0 [ 148.678318][ C1] kmsan_report+0xfb/0x1e0 [ 148.682761][ C1] __msan_warning+0x5c/0xa0 [ 148.687313][ C1] ip_rcv_core+0x1068/0x1480 [ 148.691931][ C1] ip_rcv+0xc7/0x820 [ 148.695855][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.701107][ C1] __netif_receive_skb+0x1ec/0x640 [ 148.706343][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.712001][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 148.717664][ C1] process_backlog+0x517/0xbd0 [ 148.722553][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 148.727975][ C1] __napi_poll+0x13e/0xca0 [ 148.732637][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.738733][ C1] net_rx_action+0x726/0x14a0 [ 148.743647][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.749467][ C1] ? net_tx_action+0xd30/0xd30 [ 148.754416][ C1] __do_softirq+0x1b9/0x715 [ 148.758915][ C1] ? idle_cpu+0x9a/0x1d0 [ 148.763176][ C1] ? __irq_exit_rcu+0x83/0x280 [ 148.768119][ C1] do_softirq+0x123/0x1c0 [ 148.772634][ C1] [ 148.775592][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 148.780803][ C1] local_bh_enable+0x36/0x40 [ 148.785400][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 148.790523][ C1] dev_queue_xmit+0x4b/0x60 [ 148.795053][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 148.800370][ C1] packet_sendmsg+0x86ee/0x99d0 [ 148.805290][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.811666][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.816971][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.822294][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.827942][ C1] ? process_slab+0x13a8/0x1b70 [ 148.832959][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 148.833006][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.833125][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 148.833163][ C1] ? packet_getsockopt+0x1120/0x1120 [ 148.833199][ C1] __sys_sendmsg+0x714/0x830 [ 148.833258][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 148.833305][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 148.833357][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.877157][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.881880][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.886649][ C1] do_syscall_64+0x9f/0x140 [ 148.891256][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 148.897153][ C1] RIP: 0033:0x443e29 [ 148.901102][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 148.921095][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.929623][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 148.937616][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 148.945591][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 148.953583][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 0000000000023ac2 [ 148.961562][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 148.969962][ C1] [ 148.972301][ C1] Uninit was stored to memory at: [ 148.977313][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 148.983043][ C1] __msan_chain_origin+0x54/0xa0 [ 148.988036][ C1] __ip_local_out+0x479/0x840 [ 148.992768][ C1] ip_local_out+0xa1/0x1e0 [ 148.997184][ C1] iptunnel_xmit+0x931/0xf20 [ 149.001862][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 149.007237][ C1] geneve_xmit+0x2139/0x3c40 [ 149.011936][ C1] xmit_one+0x2b6/0x760 [ 149.016155][ C1] __dev_queue_xmit+0x3432/0x4600 [ 149.021188][ C1] dev_queue_xmit+0x4b/0x60 [ 149.025729][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.030612][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.035569][ C1] __sys_sendmsg+0x714/0x830 [ 149.040353][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.045353][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.050721][ C1] do_syscall_64+0x9f/0x140 [ 149.055499][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.061619][ C1] [ 149.064021][ C1] Uninit was stored to memory at: [ 149.069112][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 149.075390][ C1] __msan_chain_origin+0x54/0xa0 [ 149.080434][ C1] iptunnel_xmit+0xbd6/0xf20 [ 149.085695][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 149.091546][ C1] geneve_xmit+0x2139/0x3c40 [ 149.096281][ C1] xmit_one+0x2b6/0x760 [ 149.100931][ C1] __dev_queue_xmit+0x3432/0x4600 [ 149.106578][ C1] dev_queue_xmit+0x4b/0x60 [ 149.111108][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.116451][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.121314][ C1] __sys_sendmsg+0x714/0x830 [ 149.125915][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.130591][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.135358][ C1] do_syscall_64+0x9f/0x140 [ 149.139932][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.145964][ C1] [ 149.148296][ C1] Uninit was created at: [ 149.152546][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.158401][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 149.163272][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.169224][ C1] __alloc_skb+0x4dd/0xe90 [ 149.173910][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 149.179645][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 149.184943][ C1] packet_sendmsg+0x6a12/0x99d0 [ 149.189812][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.194743][ C1] __sys_sendmsg+0x714/0x830 [ 149.199419][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.204103][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.208870][ C1] do_syscall_64+0x9f/0x140 [ 149.213381][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.219276][ C1] ===================================================== executing program [ 149.286277][ C1] ===================================================== [ 149.293262][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 149.300343][ C1] CPU: 1 PID: 8436 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.310532][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.320856][ C1] Call Trace: [ 149.324193][ C1] [ 149.327059][ C1] dump_stack+0x24c/0x2e0 [ 149.331437][ C1] kmsan_report+0xfb/0x1e0 [ 149.335881][ C1] __msan_warning+0x5c/0xa0 [ 149.340497][ C1] ip_rcv_core+0xf4c/0x1480 [ 149.345032][ C1] ip_rcv+0xc7/0x820 [ 149.348957][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.354183][ C1] __netif_receive_skb+0x1ec/0x640 [ 149.359338][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.364990][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 149.370618][ C1] process_backlog+0x517/0xbd0 [ 149.375390][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.381394][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 149.386848][ C1] __napi_poll+0x13e/0xca0 [ 149.391485][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.397691][ C1] net_rx_action+0x726/0x14a0 [ 149.402417][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.408248][ C1] ? net_tx_action+0xd30/0xd30 [ 149.413090][ C1] __do_softirq+0x1b9/0x715 [ 149.417588][ C1] ? idle_cpu+0x9a/0x1d0 [ 149.421914][ C1] ? __irq_exit_rcu+0x83/0x280 [ 149.426897][ C1] do_softirq+0x123/0x1c0 [ 149.431244][ C1] [ 149.434215][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 149.439238][ C1] local_bh_enable+0x36/0x40 [ 149.443940][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 149.448962][ C1] dev_queue_xmit+0x4b/0x60 [ 149.453528][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 149.458981][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.464282][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.470380][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.475575][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.480865][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.486773][ C1] ? process_slab+0x13a8/0x1b70 [ 149.491835][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.497637][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.503815][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.508788][ C1] ? packet_getsockopt+0x1120/0x1120 [ 149.514281][ C1] __sys_sendmsg+0x714/0x830 [ 149.519021][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.524712][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 149.530877][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.536141][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.540830][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.545683][ C1] do_syscall_64+0x9f/0x140 [ 149.550699][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.556703][ C1] RIP: 0033:0x443e29 [ 149.560604][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 149.580430][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.589089][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 149.597059][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 149.605228][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 149.613265][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 0000000000024155 [ 149.621414][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 149.629508][ C1] [ 149.631935][ C1] Uninit was stored to memory at: [ 149.636955][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 149.642696][ C1] __msan_chain_origin+0x54/0xa0 [ 149.647668][ C1] iptunnel_xmit+0xbd6/0xf20 [ 149.652326][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 149.657439][ C1] geneve_xmit+0x2139/0x3c40 [ 149.662026][ C1] xmit_one+0x2b6/0x760 [ 149.666174][ C1] __dev_queue_xmit+0x3432/0x4600 [ 149.671230][ C1] dev_queue_xmit+0x4b/0x60 [ 149.675724][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.680832][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.685685][ C1] __sys_sendmsg+0x714/0x830 [ 149.690279][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.694951][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.699872][ C1] do_syscall_64+0x9f/0x140 [ 149.704771][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.710669][ C1] [ 149.712999][ C1] Uninit was created at: [ 149.717253][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 149.724456][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 149.729186][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 149.735491][ C1] __alloc_skb+0x4dd/0xe90 [ 149.739988][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 149.745293][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 149.750535][ C1] packet_sendmsg+0x6a12/0x99d0 [ 149.755469][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 149.760578][ C1] __sys_sendmsg+0x714/0x830 [ 149.765167][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.769927][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.774949][ C1] do_syscall_64+0x9f/0x140 [ 149.779536][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 149.785444][ C1] ===================================================== [ 149.792635][ C1] ===================================================== [ 149.799672][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 149.806738][ C1] CPU: 1 PID: 8436 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 149.817116][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.827457][ C1] Call Trace: [ 149.830754][ C1] [ 149.833610][ C1] dump_stack+0x24c/0x2e0 [ 149.837987][ C1] kmsan_report+0xfb/0x1e0 [ 149.842439][ C1] __msan_warning+0x5c/0xa0 [ 149.846997][ C1] ip_rcv_core+0xf5d/0x1480 [ 149.851556][ C1] ip_rcv+0xc7/0x820 [ 149.855593][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.860859][ C1] __netif_receive_skb+0x1ec/0x640 [ 149.865998][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.871655][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 149.877514][ C1] process_backlog+0x517/0xbd0 [ 149.882305][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.888143][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 149.893459][ C1] __napi_poll+0x13e/0xca0 [ 149.897993][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.904143][ C1] net_rx_action+0x726/0x14a0 [ 149.908869][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 149.914768][ C1] ? net_tx_action+0xd30/0xd30 [ 149.920323][ C1] __do_softirq+0x1b9/0x715 [ 149.924888][ C1] ? idle_cpu+0x9a/0x1d0 [ 149.929620][ C1] ? __irq_exit_rcu+0x83/0x280 [ 149.934394][ C1] do_softirq+0x123/0x1c0 [ 149.938735][ C1] [ 149.941698][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 149.946828][ C1] local_bh_enable+0x36/0x40 [ 149.951580][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 149.956645][ C1] dev_queue_xmit+0x4b/0x60 [ 149.961158][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 149.966709][ C1] packet_sendmsg+0x86ee/0x99d0 [ 149.971579][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 149.977724][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.983122][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.988361][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 149.994188][ C1] ? process_slab+0x13a8/0x1b70 [ 149.999157][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.004974][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.011063][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 150.015919][ C1] ? packet_getsockopt+0x1120/0x1120 [ 150.021355][ C1] __sys_sendmsg+0x714/0x830 [ 150.025949][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.031584][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 150.037587][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.042904][ C1] __se_sys_sendmsg+0x97/0xb0 [ 150.047620][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 150.052388][ C1] do_syscall_64+0x9f/0x140 [ 150.057224][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.063587][ C1] RIP: 0033:0x443e29 [ 150.067608][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 150.087413][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.096022][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 150.104135][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 150.112551][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 150.120905][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 0000000000024155 [ 150.129366][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 150.137553][ C1] [ 150.139894][ C1] Uninit was stored to memory at: [ 150.144911][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 150.150850][ C1] __msan_chain_origin+0x54/0xa0 [ 150.156082][ C1] iptunnel_xmit+0xbd6/0xf20 [ 150.160724][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 150.165850][ C1] geneve_xmit+0x2139/0x3c40 [ 150.170441][ C1] xmit_one+0x2b6/0x760 [ 150.174621][ C1] __dev_queue_xmit+0x3432/0x4600 [ 150.179654][ C1] dev_queue_xmit+0x4b/0x60 [ 150.184152][ C1] packet_sendmsg+0x86ee/0x99d0 [ 150.189006][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 150.193943][ C1] __sys_sendmsg+0x714/0x830 [ 150.198687][ C1] __se_sys_sendmsg+0x97/0xb0 [ 150.203390][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 150.208269][ C1] do_syscall_64+0x9f/0x140 [ 150.212795][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.219058][ C1] [ 150.221425][ C1] Uninit was created at: [ 150.225669][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 150.231422][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 150.236104][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 150.242120][ C1] __alloc_skb+0x4dd/0xe90 [ 150.246635][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 150.251840][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 150.257035][ C1] packet_sendmsg+0x6a12/0x99d0 [ 150.262002][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 150.267338][ C1] __sys_sendmsg+0x714/0x830 [ 150.271919][ C1] __se_sys_sendmsg+0x97/0xb0 [ 150.276584][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 150.281603][ C1] do_syscall_64+0x9f/0x140 [ 150.286291][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.292274][ C1] ===================================================== [ 150.299355][ C1] ===================================================== [ 150.306299][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 150.313396][ C1] CPU: 1 PID: 8436 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 150.323575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.333918][ C1] Call Trace: [ 150.337220][ C1] [ 150.340140][ C1] dump_stack+0x24c/0x2e0 [ 150.344534][ C1] kmsan_report+0xfb/0x1e0 [ 150.348975][ C1] __msan_warning+0x5c/0xa0 [ 150.353770][ C1] ip_rcv_core+0x1068/0x1480 [ 150.358499][ C1] ip_rcv+0xc7/0x820 [ 150.362417][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.367666][ C1] __netif_receive_skb+0x1ec/0x640 [ 150.372804][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.378551][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 150.384305][ C1] process_backlog+0x517/0xbd0 [ 150.389129][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.395089][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 150.400402][ C1] __napi_poll+0x13e/0xca0 [ 150.404842][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.410928][ C1] net_rx_action+0x726/0x14a0 [ 150.415599][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.421510][ C1] ? net_tx_action+0xd30/0xd30 [ 150.426375][ C1] __do_softirq+0x1b9/0x715 [ 150.430907][ C1] ? idle_cpu+0x9a/0x1d0 [ 150.435271][ C1] ? __irq_exit_rcu+0x83/0x280 [ 150.440216][ C1] do_softirq+0x123/0x1c0 [ 150.444574][ C1] [ 150.447525][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 150.452613][ C1] local_bh_enable+0x36/0x40 [ 150.457228][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 150.462265][ C1] dev_queue_xmit+0x4b/0x60 [ 150.466809][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 150.472193][ C1] packet_sendmsg+0x86ee/0x99d0 [ 150.477199][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.483559][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.488758][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.493994][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.499796][ C1] ? process_slab+0x13a8/0x1b70 [ 150.504640][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 150.510559][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 150.517345][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 150.522284][ C1] ? packet_getsockopt+0x1120/0x1120 [ 150.527572][ C1] __sys_sendmsg+0x714/0x830 [ 150.532350][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 150.538300][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 150.544283][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.549509][ C1] __se_sys_sendmsg+0x97/0xb0 [ 150.554188][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 150.558956][ C1] do_syscall_64+0x9f/0x140 [ 150.563553][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.569584][ C1] RIP: 0033:0x443e29 [ 150.573654][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 150.593728][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.602317][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 150.610307][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 150.618286][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 150.626468][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 0000000000024155 [ 150.634535][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 150.642785][ C1] [ 150.645102][ C1] Uninit was stored to memory at: [ 150.650171][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 150.656066][ C1] __msan_chain_origin+0x54/0xa0 [ 150.661010][ C1] __ip_local_out+0x479/0x840 [ 150.665680][ C1] ip_local_out+0xa1/0x1e0 [ 150.670132][ C1] iptunnel_xmit+0x931/0xf20 [ 150.674816][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 150.680046][ C1] geneve_xmit+0x2139/0x3c40 [ 150.684750][ C1] xmit_one+0x2b6/0x760 [ 150.688899][ C1] __dev_queue_xmit+0x3432/0x4600 [ 150.693954][ C1] dev_queue_xmit+0x4b/0x60 [ 150.698448][ C1] packet_sendmsg+0x86ee/0x99d0 [ 150.703407][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 150.708435][ C1] __sys_sendmsg+0x714/0x830 [ 150.713346][ C1] __se_sys_sendmsg+0x97/0xb0 [ 150.718203][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 150.722977][ C1] do_syscall_64+0x9f/0x140 [ 150.727597][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.733506][ C1] [ 150.735861][ C1] Uninit was stored to memory at: [ 150.741226][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 150.747078][ C1] __msan_chain_origin+0x54/0xa0 [ 150.752236][ C1] iptunnel_xmit+0xbd6/0xf20 [ 150.756929][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 150.762045][ C1] geneve_xmit+0x2139/0x3c40 [ 150.766687][ C1] xmit_one+0x2b6/0x760 [ 150.770978][ C1] __dev_queue_xmit+0x3432/0x4600 [ 150.776036][ C1] dev_queue_xmit+0x4b/0x60 [ 150.780642][ C1] packet_sendmsg+0x86ee/0x99d0 [ 150.785526][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 150.790405][ C1] __sys_sendmsg+0x714/0x830 [ 150.795039][ C1] __se_sys_sendmsg+0x97/0xb0 [ 150.799727][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 150.804725][ C1] do_syscall_64+0x9f/0x140 [ 150.809240][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.815124][ C1] [ 150.817474][ C1] Uninit was created at: [ 150.821711][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 150.827459][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 150.832155][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 150.838154][ C1] __alloc_skb+0x4dd/0xe90 [ 150.842577][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 150.847911][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 150.853116][ C1] packet_sendmsg+0x6a12/0x99d0 [ 150.857995][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 150.862844][ C1] __sys_sendmsg+0x714/0x830 [ 150.867451][ C1] __se_sys_sendmsg+0x97/0xb0 [ 150.872244][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 150.877007][ C1] do_syscall_64+0x9f/0x140 [ 150.881782][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 150.887930][ C1] ===================================================== executing program [ 150.999851][ C1] ===================================================== [ 151.007108][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 151.014079][ C1] CPU: 1 PID: 8437 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.024372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.034763][ C1] Call Trace: [ 151.038186][ C1] [ 151.041250][ C1] dump_stack+0x24c/0x2e0 [ 151.045597][ C1] kmsan_report+0xfb/0x1e0 [ 151.050030][ C1] __msan_warning+0x5c/0xa0 [ 151.054572][ C1] ip_rcv_core+0xf4c/0x1480 [ 151.059073][ C1] ip_rcv+0xc7/0x820 [ 151.062978][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.068213][ C1] __netif_receive_skb+0x1ec/0x640 [ 151.073426][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.079447][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 151.085110][ C1] process_backlog+0x517/0xbd0 [ 151.089874][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 151.095166][ C1] __napi_poll+0x13e/0xca0 [ 151.099650][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.105714][ C1] net_rx_action+0x726/0x14a0 [ 151.110494][ C1] ? net_tx_action+0xd30/0xd30 [ 151.115355][ C1] __do_softirq+0x1b9/0x715 [ 151.119866][ C1] ? idle_cpu+0x9a/0x1d0 [ 151.124120][ C1] ? __irq_exit_rcu+0x83/0x280 [ 151.128883][ C1] do_softirq+0x123/0x1c0 [ 151.133240][ C1] [ 151.136167][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 151.141234][ C1] local_bh_enable+0x36/0x40 [ 151.145925][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 151.150973][ C1] dev_queue_xmit+0x4b/0x60 [ 151.155788][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 151.161103][ C1] packet_sendmsg+0x86ee/0x99d0 [ 151.165955][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.172047][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.177331][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.182790][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.188554][ C1] ? process_slab+0x13a8/0x1b70 [ 151.193419][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.199219][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.205283][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 151.210130][ C1] ? packet_getsockopt+0x1120/0x1120 [ 151.215414][ C1] __sys_sendmsg+0x714/0x830 [ 151.220267][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.226010][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 151.231987][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.237303][ C1] __se_sys_sendmsg+0x97/0xb0 [ 151.242067][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 151.246911][ C1] do_syscall_64+0x9f/0x140 [ 151.251410][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.257503][ C1] RIP: 0033:0x443e29 [ 151.261405][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 151.282345][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.290853][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 151.298828][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 151.306815][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 151.314902][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 00000000000247d0 [ 151.322957][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 151.330944][ C1] [ 151.333288][ C1] Uninit was stored to memory at: [ 151.338425][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 151.344164][ C1] __msan_chain_origin+0x54/0xa0 [ 151.349237][ C1] iptunnel_xmit+0xbd6/0xf20 [ 151.353986][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 151.359110][ C1] geneve_xmit+0x2139/0x3c40 [ 151.363716][ C1] xmit_one+0x2b6/0x760 [ 151.367882][ C1] __dev_queue_xmit+0x3432/0x4600 [ 151.372898][ C1] dev_queue_xmit+0x4b/0x60 [ 151.377451][ C1] packet_sendmsg+0x86ee/0x99d0 [ 151.382427][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 151.387303][ C1] __sys_sendmsg+0x714/0x830 [ 151.391976][ C1] __se_sys_sendmsg+0x97/0xb0 [ 151.396648][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 151.401421][ C1] do_syscall_64+0x9f/0x140 [ 151.406032][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.412022][ C1] [ 151.414336][ C1] Uninit was created at: [ 151.418801][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.424579][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 151.429372][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.435263][ C1] __alloc_skb+0x4dd/0xe90 [ 151.439673][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 151.444984][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 151.450317][ C1] packet_sendmsg+0x6a12/0x99d0 [ 151.455417][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 151.460818][ C1] __sys_sendmsg+0x714/0x830 [ 151.465418][ C1] __se_sys_sendmsg+0x97/0xb0 [ 151.470103][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 151.475160][ C1] do_syscall_64+0x9f/0x140 [ 151.479666][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.485643][ C1] ===================================================== [ 151.492774][ C1] ===================================================== [ 151.499857][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 151.507637][ C1] CPU: 1 PID: 8437 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 151.518807][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.529012][ C1] Call Trace: [ 151.532545][ C1] [ 151.535503][ C1] dump_stack+0x24c/0x2e0 [ 151.540134][ C1] kmsan_report+0xfb/0x1e0 [ 151.544768][ C1] __msan_warning+0x5c/0xa0 [ 151.549395][ C1] ip_rcv_core+0xf5d/0x1480 [ 151.553959][ C1] ip_rcv+0xc7/0x820 [ 151.557910][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.563297][ C1] __netif_receive_skb+0x1ec/0x640 [ 151.568720][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.574397][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 151.580506][ C1] process_backlog+0x517/0xbd0 [ 151.585485][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 151.590914][ C1] __napi_poll+0x13e/0xca0 [ 151.595362][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.601749][ C1] net_rx_action+0x726/0x14a0 [ 151.606671][ C1] ? net_tx_action+0xd30/0xd30 [ 151.611462][ C1] __do_softirq+0x1b9/0x715 [ 151.616108][ C1] ? idle_cpu+0x9a/0x1d0 [ 151.621840][ C1] ? __irq_exit_rcu+0x83/0x280 [ 151.626727][ C1] do_softirq+0x123/0x1c0 [ 151.631080][ C1] [ 151.634089][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 151.639132][ C1] local_bh_enable+0x36/0x40 [ 151.643719][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 151.648747][ C1] dev_queue_xmit+0x4b/0x60 [ 151.653263][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 151.659115][ C1] packet_sendmsg+0x86ee/0x99d0 [ 151.664953][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.672155][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.677409][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.682633][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.688732][ C1] ? process_slab+0x13a8/0x1b70 [ 151.693809][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 151.699769][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 151.707614][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 151.712997][ C1] ? packet_getsockopt+0x1120/0x1120 [ 151.718385][ C1] __sys_sendmsg+0x714/0x830 [ 151.723050][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 151.728881][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 151.735150][ C1] ? kmsan_get_metadata+0x116/0x180 [ 151.740368][ C1] __se_sys_sendmsg+0x97/0xb0 [ 151.745074][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 151.749878][ C1] do_syscall_64+0x9f/0x140 [ 151.754469][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.760401][ C1] RIP: 0033:0x443e29 [ 151.764430][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 151.784746][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.793521][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 151.801604][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 151.809617][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 151.817781][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 00000000000247d0 [ 151.826093][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 151.834107][ C1] [ 151.836453][ C1] Uninit was stored to memory at: [ 151.841834][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 151.847700][ C1] __msan_chain_origin+0x54/0xa0 [ 151.852942][ C1] iptunnel_xmit+0xbd6/0xf20 [ 151.857528][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 151.862641][ C1] geneve_xmit+0x2139/0x3c40 [ 151.867274][ C1] xmit_one+0x2b6/0x760 [ 151.871462][ C1] __dev_queue_xmit+0x3432/0x4600 [ 151.876579][ C1] dev_queue_xmit+0x4b/0x60 [ 151.881094][ C1] packet_sendmsg+0x86ee/0x99d0 [ 151.885944][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 151.891057][ C1] __sys_sendmsg+0x714/0x830 [ 151.895667][ C1] __se_sys_sendmsg+0x97/0xb0 [ 151.900722][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 151.905495][ C1] do_syscall_64+0x9f/0x140 [ 151.910098][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.916001][ C1] [ 151.918407][ C1] Uninit was created at: [ 151.922925][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 151.929148][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 151.934074][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 151.939971][ C1] __alloc_skb+0x4dd/0xe90 [ 151.944469][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 151.949955][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 151.955568][ C1] packet_sendmsg+0x6a12/0x99d0 [ 151.960443][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 151.965436][ C1] __sys_sendmsg+0x714/0x830 [ 151.970034][ C1] __se_sys_sendmsg+0x97/0xb0 [ 151.975178][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 151.980079][ C1] do_syscall_64+0x9f/0x140 [ 151.985216][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.991224][ C1] ===================================================== [ 151.998289][ C1] ===================================================== [ 152.005308][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 152.012370][ C1] CPU: 1 PID: 8437 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 152.022816][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.033513][ C1] Call Trace: [ 152.036817][ C1] [ 152.039762][ C1] dump_stack+0x24c/0x2e0 [ 152.044143][ C1] kmsan_report+0xfb/0x1e0 [ 152.048724][ C1] __msan_warning+0x5c/0xa0 [ 152.053691][ C1] ip_rcv_core+0x1068/0x1480 [ 152.058346][ C1] ip_rcv+0xc7/0x820 [ 152.062467][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.067848][ C1] __netif_receive_skb+0x1ec/0x640 [ 152.073220][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.079317][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 152.085000][ C1] process_backlog+0x517/0xbd0 [ 152.089801][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 152.096037][ C1] __napi_poll+0x13e/0xca0 [ 152.100485][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.106659][ C1] net_rx_action+0x726/0x14a0 [ 152.111440][ C1] ? net_tx_action+0xd30/0xd30 [ 152.116653][ C1] __do_softirq+0x1b9/0x715 [ 152.121166][ C1] ? idle_cpu+0x9a/0x1d0 [ 152.125598][ C1] ? __irq_exit_rcu+0x83/0x280 [ 152.130544][ C1] do_softirq+0x123/0x1c0 [ 152.134919][ C1] [ 152.137861][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 152.143128][ C1] local_bh_enable+0x36/0x40 [ 152.147722][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 152.152767][ C1] dev_queue_xmit+0x4b/0x60 [ 152.157321][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 152.162716][ C1] packet_sendmsg+0x86ee/0x99d0 [ 152.167595][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.173670][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.178870][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.184228][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.189881][ C1] ? process_slab+0x13a8/0x1b70 [ 152.194751][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.200554][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.206622][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.211473][ C1] ? packet_getsockopt+0x1120/0x1120 [ 152.216754][ C1] __sys_sendmsg+0x714/0x830 [ 152.221361][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.227165][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 152.233175][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.238521][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.243231][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.248014][ C1] do_syscall_64+0x9f/0x140 [ 152.252527][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.258529][ C1] RIP: 0033:0x443e29 [ 152.262417][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 152.282067][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.290566][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 152.298545][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 152.306534][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 152.314616][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 00000000000247d0 [ 152.322861][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 152.330937][ C1] [ 152.333257][ C1] Uninit was stored to memory at: [ 152.338393][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 152.344238][ C1] __msan_chain_origin+0x54/0xa0 [ 152.349183][ C1] __ip_local_out+0x479/0x840 [ 152.353896][ C1] ip_local_out+0xa1/0x1e0 [ 152.358305][ C1] iptunnel_xmit+0x931/0xf20 [ 152.363063][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 152.368366][ C1] geneve_xmit+0x2139/0x3c40 [ 152.373093][ C1] xmit_one+0x2b6/0x760 [ 152.377285][ C1] __dev_queue_xmit+0x3432/0x4600 [ 152.382302][ C1] dev_queue_xmit+0x4b/0x60 [ 152.386839][ C1] packet_sendmsg+0x86ee/0x99d0 [ 152.392049][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.396915][ C1] __sys_sendmsg+0x714/0x830 [ 152.401586][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.406256][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.411102][ C1] do_syscall_64+0x9f/0x140 [ 152.415618][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.421784][ C1] [ 152.424093][ C1] Uninit was stored to memory at: [ 152.429275][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 152.435084][ C1] __msan_chain_origin+0x54/0xa0 [ 152.440051][ C1] iptunnel_xmit+0xbd6/0xf20 [ 152.444999][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 152.450111][ C1] geneve_xmit+0x2139/0x3c40 [ 152.455261][ C1] xmit_one+0x2b6/0x760 [ 152.459417][ C1] __dev_queue_xmit+0x3432/0x4600 [ 152.464560][ C1] dev_queue_xmit+0x4b/0x60 [ 152.469731][ C1] packet_sendmsg+0x86ee/0x99d0 [ 152.474680][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.479529][ C1] __sys_sendmsg+0x714/0x830 [ 152.484415][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.489330][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.494215][ C1] do_syscall_64+0x9f/0x140 [ 152.498808][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.505000][ C1] [ 152.507317][ C1] Uninit was created at: [ 152.512254][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 152.518178][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 152.523171][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 152.529254][ C1] __alloc_skb+0x4dd/0xe90 [ 152.533773][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 152.539716][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 152.545972][ C1] packet_sendmsg+0x6a12/0x99d0 [ 152.551013][ C1] ____sys_sendmsg+0xcfc/0x12f0 executing program [ 152.555864][ C1] __sys_sendmsg+0x714/0x830 [ 152.561115][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.566068][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.570872][ C1] do_syscall_64+0x9f/0x140 [ 152.575406][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.581509][ C1] ===================================================== [ 152.616425][ C1] ===================================================== [ 152.623402][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 152.630386][ C1] CPU: 1 PID: 8438 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 152.640667][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.650740][ C1] Call Trace: [ 152.654060][ C1] [ 152.657010][ C1] dump_stack+0x24c/0x2e0 [ 152.661491][ C1] kmsan_report+0xfb/0x1e0 [ 152.666121][ C1] __msan_warning+0x5c/0xa0 [ 152.670686][ C1] ip_rcv_core+0xf4c/0x1480 [ 152.675331][ C1] ip_rcv+0xc7/0x820 [ 152.679352][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.684597][ C1] __netif_receive_skb+0x1ec/0x640 [ 152.689806][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.695506][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 152.701259][ C1] process_backlog+0x517/0xbd0 [ 152.706064][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 152.711465][ C1] __napi_poll+0x13e/0xca0 [ 152.716128][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.723133][ C1] net_rx_action+0x726/0x14a0 [ 152.729591][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.735577][ C1] ? net_tx_action+0xd30/0xd30 [ 152.740646][ C1] __do_softirq+0x1b9/0x715 [ 152.745553][ C1] ? idle_cpu+0x9a/0x1d0 [ 152.749813][ C1] ? __irq_exit_rcu+0x83/0x280 [ 152.754670][ C1] do_softirq+0x123/0x1c0 [ 152.758999][ C1] [ 152.762008][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 152.767093][ C1] local_bh_enable+0x36/0x40 [ 152.772086][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 152.777115][ C1] dev_queue_xmit+0x4b/0x60 [ 152.781617][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 152.786920][ C1] packet_sendmsg+0x86ee/0x99d0 [ 152.792155][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.798615][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.804440][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.809820][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.815593][ C1] ? process_slab+0x13a8/0x1b70 [ 152.821360][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.828319][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.835283][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 152.840311][ C1] ? packet_getsockopt+0x1120/0x1120 [ 152.845854][ C1] __sys_sendmsg+0x714/0x830 [ 152.850585][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 152.856953][ C1] ? up_read+0x40/0x2b0 [ 152.861230][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.866574][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.872588][ C1] ? kmsan_get_metadata+0x116/0x180 [ 152.878047][ C1] __se_sys_sendmsg+0x97/0xb0 [ 152.882889][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 152.888397][ C1] do_syscall_64+0x9f/0x140 [ 152.892912][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.899101][ C1] RIP: 0033:0x443e29 [ 152.903355][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 152.924701][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.933388][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 152.941380][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 152.949525][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 152.958403][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 0000000000024e7b [ 152.966528][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 152.975076][ C1] [ 152.977430][ C1] Uninit was stored to memory at: [ 152.982619][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 152.988603][ C1] __msan_chain_origin+0x54/0xa0 [ 152.993789][ C1] iptunnel_xmit+0xbd6/0xf20 [ 152.998484][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 153.003764][ C1] geneve_xmit+0x2139/0x3c40 [ 153.008378][ C1] xmit_one+0x2b6/0x760 [ 153.012622][ C1] __dev_queue_xmit+0x3432/0x4600 [ 153.017948][ C1] dev_queue_xmit+0x4b/0x60 [ 153.022753][ C1] packet_sendmsg+0x86ee/0x99d0 [ 153.027742][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.032594][ C1] __sys_sendmsg+0x714/0x830 [ 153.037393][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.042183][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.047056][ C1] do_syscall_64+0x9f/0x140 [ 153.052234][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.058233][ C1] [ 153.060668][ C1] Uninit was created at: [ 153.064895][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.070713][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 153.075386][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.081303][ C1] __alloc_skb+0x4dd/0xe90 [ 153.085713][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 153.091094][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 153.096297][ C1] packet_sendmsg+0x6a12/0x99d0 [ 153.101150][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.106030][ C1] __sys_sendmsg+0x714/0x830 [ 153.110657][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.115328][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.120185][ C1] do_syscall_64+0x9f/0x140 [ 153.124820][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.130724][ C1] ===================================================== [ 153.137836][ C1] ===================================================== [ 153.144807][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 153.151715][ C1] CPU: 1 PID: 8438 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.161987][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.172347][ C1] Call Trace: [ 153.175756][ C1] [ 153.178621][ C1] dump_stack+0x24c/0x2e0 [ 153.183135][ C1] kmsan_report+0xfb/0x1e0 [ 153.187594][ C1] __msan_warning+0x5c/0xa0 [ 153.192167][ C1] ip_rcv_core+0xf5d/0x1480 [ 153.196823][ C1] ip_rcv+0xc7/0x820 [ 153.200744][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.205986][ C1] __netif_receive_skb+0x1ec/0x640 [ 153.211189][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.216857][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 153.222576][ C1] process_backlog+0x517/0xbd0 [ 153.227380][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 153.232696][ C1] __napi_poll+0x13e/0xca0 [ 153.237160][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.243362][ C1] net_rx_action+0x726/0x14a0 [ 153.248091][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.253936][ C1] ? net_tx_action+0xd30/0xd30 [ 153.258734][ C1] __do_softirq+0x1b9/0x715 [ 153.263268][ C1] ? idle_cpu+0x9a/0x1d0 [ 153.267697][ C1] ? __irq_exit_rcu+0x83/0x280 [ 153.272718][ C1] do_softirq+0x123/0x1c0 [ 153.277075][ C1] [ 153.279999][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 153.285037][ C1] local_bh_enable+0x36/0x40 [ 153.289692][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 153.294782][ C1] dev_queue_xmit+0x4b/0x60 [ 153.299342][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 153.304830][ C1] packet_sendmsg+0x86ee/0x99d0 [ 153.309773][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.315891][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.321408][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.326953][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.332597][ C1] ? process_slab+0x13a8/0x1b70 [ 153.337478][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.343293][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.349765][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.354657][ C1] ? packet_getsockopt+0x1120/0x1120 [ 153.360437][ C1] __sys_sendmsg+0x714/0x830 [ 153.365694][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 153.371779][ C1] ? up_read+0x40/0x2b0 [ 153.375937][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.381218][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.387249][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.392493][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.397203][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.402336][ C1] do_syscall_64+0x9f/0x140 [ 153.406913][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.412817][ C1] RIP: 0033:0x443e29 [ 153.416746][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 153.436552][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.445062][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 153.453054][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 153.461241][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 153.469227][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 0000000000024e7b [ 153.477289][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 153.485614][ C1] [ 153.487931][ C1] Uninit was stored to memory at: [ 153.493114][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 153.498970][ C1] __msan_chain_origin+0x54/0xa0 [ 153.503907][ C1] iptunnel_xmit+0xbd6/0xf20 [ 153.508785][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 153.513897][ C1] geneve_xmit+0x2139/0x3c40 [ 153.518498][ C1] xmit_one+0x2b6/0x760 [ 153.522964][ C1] __dev_queue_xmit+0x3432/0x4600 [ 153.528119][ C1] dev_queue_xmit+0x4b/0x60 [ 153.532722][ C1] packet_sendmsg+0x86ee/0x99d0 [ 153.537878][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.543169][ C1] __sys_sendmsg+0x714/0x830 [ 153.548074][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.552862][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.557910][ C1] do_syscall_64+0x9f/0x140 [ 153.562509][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.568974][ C1] [ 153.571423][ C1] Uninit was created at: [ 153.576102][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 153.582644][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 153.587853][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 153.593937][ C1] __alloc_skb+0x4dd/0xe90 [ 153.598555][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 153.603781][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 153.609354][ C1] packet_sendmsg+0x6a12/0x99d0 [ 153.614537][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.619528][ C1] __sys_sendmsg+0x714/0x830 [ 153.624127][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.628864][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.633909][ C1] do_syscall_64+0x9f/0x140 [ 153.638438][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.644679][ C1] ===================================================== [ 153.651970][ C1] ===================================================== [ 153.659268][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 153.666464][ C1] CPU: 1 PID: 8438 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 153.676933][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.687082][ C1] Call Trace: [ 153.690395][ C1] [ 153.693347][ C1] dump_stack+0x24c/0x2e0 [ 153.697804][ C1] kmsan_report+0xfb/0x1e0 [ 153.702257][ C1] __msan_warning+0x5c/0xa0 [ 153.706824][ C1] ip_rcv_core+0x1068/0x1480 [ 153.711917][ C1] ip_rcv+0xc7/0x820 [ 153.715873][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.721196][ C1] __netif_receive_skb+0x1ec/0x640 [ 153.726372][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.732035][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 153.737714][ C1] process_backlog+0x517/0xbd0 [ 153.742514][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 153.747838][ C1] __napi_poll+0x13e/0xca0 [ 153.752285][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.758767][ C1] net_rx_action+0x726/0x14a0 [ 153.763440][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.769748][ C1] ? net_tx_action+0xd30/0xd30 [ 153.774613][ C1] __do_softirq+0x1b9/0x715 [ 153.779138][ C1] ? idle_cpu+0x9a/0x1d0 [ 153.783386][ C1] ? __irq_exit_rcu+0x83/0x280 [ 153.788153][ C1] do_softirq+0x123/0x1c0 [ 153.792599][ C1] [ 153.795548][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 153.800694][ C1] local_bh_enable+0x36/0x40 [ 153.805383][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 153.810514][ C1] dev_queue_xmit+0x4b/0x60 [ 153.815130][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 153.820433][ C1] packet_sendmsg+0x86ee/0x99d0 [ 153.825311][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.831376][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.836757][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.841959][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 153.847781][ C1] ? process_slab+0x13a8/0x1b70 [ 153.852684][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.858812][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 153.864902][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 153.869788][ C1] ? packet_getsockopt+0x1120/0x1120 [ 153.875300][ C1] __sys_sendmsg+0x714/0x830 [ 153.879914][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 153.885919][ C1] ? up_read+0x40/0x2b0 [ 153.890386][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.895633][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 153.901445][ C1] ? kmsan_get_metadata+0x116/0x180 [ 153.906828][ C1] __se_sys_sendmsg+0x97/0xb0 [ 153.911696][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 153.916555][ C1] do_syscall_64+0x9f/0x140 [ 153.921056][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.927327][ C1] RIP: 0033:0x443e29 [ 153.931229][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 153.951160][ C1] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.959680][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 153.967772][ C1] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 153.975960][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 153.984257][ C1] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 0000000000024e7b [ 153.992323][ C1] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 154.000494][ C1] [ 154.002814][ C1] Uninit was stored to memory at: [ 154.007840][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 154.013559][ C1] __msan_chain_origin+0x54/0xa0 [ 154.018492][ C1] __ip_local_out+0x479/0x840 [ 154.023430][ C1] ip_local_out+0xa1/0x1e0 [ 154.027917][ C1] iptunnel_xmit+0x931/0xf20 [ 154.032618][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 154.037862][ C1] geneve_xmit+0x2139/0x3c40 [ 154.042457][ C1] xmit_one+0x2b6/0x760 [ 154.046633][ C1] __dev_queue_xmit+0x3432/0x4600 [ 154.051745][ C1] dev_queue_xmit+0x4b/0x60 [ 154.056879][ C1] packet_sendmsg+0x86ee/0x99d0 [ 154.062011][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 154.067125][ C1] __sys_sendmsg+0x714/0x830 [ 154.072181][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.076959][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.081719][ C1] do_syscall_64+0x9f/0x140 [ 154.086235][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.092122][ C1] [ 154.094456][ C1] Uninit was stored to memory at: [ 154.099489][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 154.105370][ C1] __msan_chain_origin+0x54/0xa0 [ 154.110449][ C1] iptunnel_xmit+0xbd6/0xf20 [ 154.116045][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 154.121263][ C1] geneve_xmit+0x2139/0x3c40 [ 154.125851][ C1] xmit_one+0x2b6/0x760 [ 154.130089][ C1] __dev_queue_xmit+0x3432/0x4600 [ 154.135135][ C1] dev_queue_xmit+0x4b/0x60 [ 154.139663][ C1] packet_sendmsg+0x86ee/0x99d0 [ 154.144785][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 154.149801][ C1] __sys_sendmsg+0x714/0x830 [ 154.154410][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.159085][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.163868][ C1] do_syscall_64+0x9f/0x140 [ 154.168365][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.174355][ C1] [ 154.176678][ C1] Uninit was created at: [ 154.180901][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 154.186783][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 154.191594][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 154.197514][ C1] __alloc_skb+0x4dd/0xe90 [ 154.202268][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 154.207668][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 154.212983][ C1] packet_sendmsg+0x6a12/0x99d0 [ 154.217845][ C1] ____sys_sendmsg+0xcfc/0x12f0 executing program [ 154.222836][ C1] __sys_sendmsg+0x714/0x830 [ 154.227458][ C1] __se_sys_sendmsg+0x97/0xb0 [ 154.232129][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 154.236901][ C1] do_syscall_64+0x9f/0x140 [ 154.241401][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.247405][ C1] ===================================================== [ 154.292022][ C0] ===================================================== [ 154.299034][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 154.305917][ C0] CPU: 0 PID: 8439 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 154.316091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.326254][ C0] Call Trace: [ 154.329548][ C0] [ 154.332410][ C0] dump_stack+0x24c/0x2e0 [ 154.336807][ C0] kmsan_report+0xfb/0x1e0 [ 154.341251][ C0] __msan_warning+0x5c/0xa0 [ 154.345813][ C0] ip_rcv_core+0xf4c/0x1480 [ 154.350360][ C0] ip_rcv+0xc7/0x820 [ 154.354336][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.359529][ C0] __netif_receive_skb+0x1ec/0x640 [ 154.364775][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.370404][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 154.376343][ C0] process_backlog+0x517/0xbd0 [ 154.381193][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 154.386580][ C0] __napi_poll+0x13e/0xca0 [ 154.391103][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.397173][ C0] net_rx_action+0x726/0x14a0 [ 154.401848][ C0] ? net_tx_action+0xd30/0xd30 [ 154.406617][ C0] __do_softirq+0x1b9/0x715 [ 154.411157][ C0] ? idle_cpu+0x9a/0x1d0 [ 154.415844][ C0] ? __irq_exit_rcu+0x83/0x280 [ 154.420626][ C0] do_softirq+0x123/0x1c0 [ 154.424960][ C0] [ 154.428142][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 154.433544][ C0] local_bh_enable+0x36/0x40 [ 154.438264][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 154.443729][ C0] dev_queue_xmit+0x4b/0x60 [ 154.448551][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 154.454036][ C0] packet_sendmsg+0x86ee/0x99d0 [ 154.459145][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.465217][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.470449][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.475672][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.481393][ C0] ? process_slab+0x13a8/0x1b70 [ 154.486286][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.492199][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.498408][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 154.503304][ C0] ? packet_getsockopt+0x1120/0x1120 [ 154.508715][ C0] __sys_sendmsg+0x714/0x830 [ 154.513669][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.519616][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 154.525913][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.531238][ C0] __se_sys_sendmsg+0x97/0xb0 [ 154.536184][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 154.541543][ C0] do_syscall_64+0x9f/0x140 [ 154.546514][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.552515][ C0] RIP: 0033:0x443e29 [ 154.556514][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 154.576762][ C0] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.585293][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 154.593767][ C0] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 154.601751][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 154.609817][ C0] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 00000000000254d4 [ 154.617979][ C0] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 154.625977][ C0] [ 154.628338][ C0] Uninit was stored to memory at: [ 154.633543][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 154.639387][ C0] __msan_chain_origin+0x54/0xa0 [ 154.644427][ C0] iptunnel_xmit+0xbd6/0xf20 [ 154.649114][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 154.654235][ C0] geneve_xmit+0x2139/0x3c40 [ 154.658960][ C0] xmit_one+0x2b6/0x760 [ 154.663302][ C0] __dev_queue_xmit+0x3432/0x4600 [ 154.668369][ C0] dev_queue_xmit+0x4b/0x60 [ 154.673548][ C0] packet_sendmsg+0x86ee/0x99d0 [ 154.678397][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 154.683379][ C0] __sys_sendmsg+0x714/0x830 [ 154.688248][ C0] __se_sys_sendmsg+0x97/0xb0 [ 154.693093][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 154.697941][ C0] do_syscall_64+0x9f/0x140 [ 154.702623][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.708534][ C0] [ 154.711047][ C0] Uninit was created at: [ 154.715306][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 154.721212][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 154.725956][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 154.731977][ C0] __alloc_skb+0x4dd/0xe90 [ 154.736483][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 154.741908][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 154.747233][ C0] packet_sendmsg+0x6a12/0x99d0 [ 154.752358][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 154.757522][ C0] __sys_sendmsg+0x714/0x830 [ 154.762278][ C0] __se_sys_sendmsg+0x97/0xb0 [ 154.767007][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 154.771790][ C0] do_syscall_64+0x9f/0x140 [ 154.776427][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.782439][ C0] ===================================================== [ 154.789949][ C0] ===================================================== [ 154.796968][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 154.803965][ C0] CPU: 0 PID: 8439 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 154.814581][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.825058][ C0] Call Trace: [ 154.828694][ C0] [ 154.831826][ C0] dump_stack+0x24c/0x2e0 [ 154.836613][ C0] kmsan_report+0xfb/0x1e0 [ 154.841166][ C0] __msan_warning+0x5c/0xa0 [ 154.845725][ C0] ip_rcv_core+0xf5d/0x1480 [ 154.850273][ C0] ip_rcv+0xc7/0x820 [ 154.854387][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.859979][ C0] __netif_receive_skb+0x1ec/0x640 [ 154.865328][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.871108][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 154.876875][ C0] process_backlog+0x517/0xbd0 [ 154.881882][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 154.887299][ C0] __napi_poll+0x13e/0xca0 [ 154.892202][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.898989][ C0] net_rx_action+0x726/0x14a0 [ 154.903696][ C0] ? net_tx_action+0xd30/0xd30 [ 154.908471][ C0] __do_softirq+0x1b9/0x715 [ 154.912979][ C0] ? idle_cpu+0x9a/0x1d0 [ 154.917283][ C0] ? __irq_exit_rcu+0x83/0x280 [ 154.922063][ C0] do_softirq+0x123/0x1c0 [ 154.926575][ C0] [ 154.929704][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 154.934747][ C0] local_bh_enable+0x36/0x40 [ 154.940181][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 154.945852][ C0] dev_queue_xmit+0x4b/0x60 [ 154.950562][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 154.956220][ C0] packet_sendmsg+0x86ee/0x99d0 [ 154.961563][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 154.967950][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.973470][ C0] ? kmsan_get_metadata+0x116/0x180 [ 154.978946][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 154.984985][ C0] ? process_slab+0x13a8/0x1b70 [ 154.990109][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 154.996179][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.002574][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.007551][ C0] ? packet_getsockopt+0x1120/0x1120 [ 155.013303][ C0] __sys_sendmsg+0x714/0x830 [ 155.018044][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.024078][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 155.030165][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.035503][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.040291][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.045268][ C0] do_syscall_64+0x9f/0x140 [ 155.049778][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.055881][ C0] RIP: 0033:0x443e29 [ 155.059780][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 155.079959][ C0] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.088380][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 155.096559][ C0] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 155.104639][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 155.112789][ C0] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 00000000000254d4 [ 155.120964][ C0] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 155.129265][ C0] [ 155.131611][ C0] Uninit was stored to memory at: [ 155.136627][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 155.142431][ C0] __msan_chain_origin+0x54/0xa0 [ 155.147452][ C0] iptunnel_xmit+0xbd6/0xf20 [ 155.152051][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 155.157422][ C0] geneve_xmit+0x2139/0x3c40 [ 155.162011][ C0] xmit_one+0x2b6/0x760 [ 155.166186][ C0] __dev_queue_xmit+0x3432/0x4600 [ 155.171243][ C0] dev_queue_xmit+0x4b/0x60 [ 155.175752][ C0] packet_sendmsg+0x86ee/0x99d0 [ 155.180686][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.185641][ C0] __sys_sendmsg+0x714/0x830 [ 155.190260][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.195049][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.199806][ C0] do_syscall_64+0x9f/0x140 [ 155.204464][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.210422][ C0] [ 155.212756][ C0] Uninit was created at: [ 155.216995][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.222782][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 155.227463][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.233574][ C0] __alloc_skb+0x4dd/0xe90 [ 155.238116][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 155.243328][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 155.248540][ C0] packet_sendmsg+0x6a12/0x99d0 [ 155.253406][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.258256][ C0] __sys_sendmsg+0x714/0x830 [ 155.262867][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.267654][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.272591][ C0] do_syscall_64+0x9f/0x140 [ 155.277093][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.283458][ C0] ===================================================== [ 155.290632][ C0] ===================================================== [ 155.297754][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 155.304921][ C0] CPU: 0 PID: 8439 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.315622][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.326048][ C0] Call Trace: [ 155.329347][ C0] [ 155.332204][ C0] dump_stack+0x24c/0x2e0 [ 155.336574][ C0] kmsan_report+0xfb/0x1e0 [ 155.341195][ C0] __msan_warning+0x5c/0xa0 [ 155.345740][ C0] ip_rcv_core+0x1068/0x1480 [ 155.351058][ C0] ip_rcv+0xc7/0x820 [ 155.354988][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.360497][ C0] __netif_receive_skb+0x1ec/0x640 [ 155.365648][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.371412][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 155.377185][ C0] process_backlog+0x517/0xbd0 [ 155.382412][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 155.395977][ C0] __napi_poll+0x13e/0xca0 [ 155.400424][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.406505][ C0] net_rx_action+0x726/0x14a0 [ 155.411286][ C0] ? net_tx_action+0xd30/0xd30 [ 155.416107][ C0] __do_softirq+0x1b9/0x715 [ 155.420901][ C0] ? idle_cpu+0x9a/0x1d0 [ 155.425148][ C0] ? __irq_exit_rcu+0x83/0x280 [ 155.429926][ C0] do_softirq+0x123/0x1c0 [ 155.434266][ C0] [ 155.437210][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 155.442291][ C0] local_bh_enable+0x36/0x40 [ 155.447144][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 155.452654][ C0] dev_queue_xmit+0x4b/0x60 [ 155.457171][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 155.462471][ C0] packet_sendmsg+0x86ee/0x99d0 [ 155.467423][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.473494][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.478785][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.484603][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.490248][ C0] ? process_slab+0x13a8/0x1b70 [ 155.495136][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.501204][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 155.507572][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.512561][ C0] ? packet_getsockopt+0x1120/0x1120 [ 155.517989][ C0] __sys_sendmsg+0x714/0x830 [ 155.522663][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.528407][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 155.534671][ C0] ? kmsan_get_metadata+0x116/0x180 [ 155.540047][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.544899][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.549657][ C0] do_syscall_64+0x9f/0x140 [ 155.554169][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.560181][ C0] RIP: 0033:0x443e29 [ 155.564109][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 155.584912][ C0] RSP: 002b:00007ffe4a926e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.593962][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e29 [ 155.602136][ C0] RDX: 0000000000008844 RSI: 00000000200005c0 RDI: 0000000000000003 [ 155.610538][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 155.618865][ C0] R10: 00007ffe4a926910 R11: 0000000000000246 R12: 00000000000254d4 [ 155.626967][ C0] R13: 00007ffe4a926ec0 R14: 00007ffe4a926eb0 R15: 00007ffe4a926ea4 [ 155.634971][ C0] [ 155.637288][ C0] Uninit was stored to memory at: [ 155.642291][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 155.648016][ C0] __msan_chain_origin+0x54/0xa0 [ 155.652945][ C0] __ip_local_out+0x479/0x840 [ 155.657705][ C0] ip_local_out+0xa1/0x1e0 [ 155.662113][ C0] iptunnel_xmit+0x931/0xf20 [ 155.666908][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 155.672158][ C0] geneve_xmit+0x2139/0x3c40 [ 155.676891][ C0] xmit_one+0x2b6/0x760 [ 155.681041][ C0] __dev_queue_xmit+0x3432/0x4600 [ 155.686163][ C0] dev_queue_xmit+0x4b/0x60 [ 155.690668][ C0] packet_sendmsg+0x86ee/0x99d0 [ 155.696146][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.701066][ C0] __sys_sendmsg+0x714/0x830 [ 155.705671][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.710360][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.715115][ C0] do_syscall_64+0x9f/0x140 [ 155.719632][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.725611][ C0] [ 155.727928][ C0] Uninit was stored to memory at: [ 155.733022][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 155.738808][ C0] __msan_chain_origin+0x54/0xa0 [ 155.743747][ C0] iptunnel_xmit+0xbd6/0xf20 [ 155.748801][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 155.754118][ C0] geneve_xmit+0x2139/0x3c40 [ 155.758799][ C0] xmit_one+0x2b6/0x760 [ 155.763272][ C0] __dev_queue_xmit+0x3432/0x4600 [ 155.768735][ C0] dev_queue_xmit+0x4b/0x60 [ 155.773270][ C0] packet_sendmsg+0x86ee/0x99d0 [ 155.778325][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.783208][ C0] __sys_sendmsg+0x714/0x830 [ 155.787795][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.792748][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.797823][ C0] do_syscall_64+0x9f/0x140 [ 155.802446][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.808449][ C0] [ 155.810802][ C0] Uninit was created at: [ 155.815326][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 155.821078][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 155.825852][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 155.831979][ C0] __alloc_skb+0x4dd/0xe90 [ 155.836491][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 155.841706][ C0] sock_alloc_send_pskb+0xdc1/0xf90 executing program [ 155.847240][ C0] packet_sendmsg+0x6a12/0x99d0 [ 155.852163][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 155.857019][ C0] __sys_sendmsg+0x714/0x830 [ 155.861682][ C0] __se_sys_sendmsg+0x97/0xb0 [ 155.866495][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 155.871539][ C0] do_syscall_64+0x9f/0x140 [ 155.876071][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 155.882342][ C0] ===================================================== [ 155.928952][ C1] ===================================================== [ 155.936114][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 155.943299][ C1] CPU: 1 PID: 8440 Comm: syz-executor873 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 155.953488][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.963573][ C1] Call Trace: [ 155.966895][ C1] [ 155.969753][ C1] dump_stack+0x24c/0x2e0 [ 155.974126][ C1] kmsan_report+0xfb/0x1e0