10/0x20 [ 912.250462][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 912.255835][T18985] ? kmsan_get_metadata+0x116/0x180 [ 912.261034][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 912.266670][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 912.272737][T18985] ? _copy_from_user+0x201/0x310 [ 912.277672][T18985] ? kmsan_get_metadata+0x116/0x180 [ 912.282870][T18985] __msan_chain_origin+0x57/0xa0 [ 912.287809][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 912.292925][T18985] get_compat_msghdr+0x108/0x2b0 [ 912.297868][T18985] do_recvmmsg+0xdc7/0x22e0 [ 912.302378][T18985] ? kmsan_get_metadata+0x116/0x180 [ 912.307578][T18985] ? kmsan_get_metadata+0x116/0x180 [ 912.312784][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 912.318419][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 912.323736][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 912.328604][T18985] __sys_recvmmsg+0x340/0x5f0 [ 912.333281][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 912.339086][T18985] ? kmsan_get_metadata+0x116/0x180 [ 912.344285][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.350356][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.356512][T18985] __do_fast_syscall_32+0x129/0x180 [ 912.361711][T18985] do_fast_syscall_32+0x6a/0xc0 [ 912.366562][T18985] do_SYSENTER_32+0x73/0x90 [ 912.371071][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.377394][T18985] RIP: 0023:0xf7fe5549 [ 912.381460][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 912.401063][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 912.409476][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 912.417444][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 912.425411][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 912.433404][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 912.441373][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 912.449339][T18985] Uninit was stored to memory at: [ 912.454370][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 912.460087][T18985] __msan_chain_origin+0x57/0xa0 [ 912.465021][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 912.470131][T18985] get_compat_msghdr+0x108/0x2b0 [ 912.475070][T18985] do_recvmmsg+0xdc7/0x22e0 [ 912.479573][T18985] __sys_recvmmsg+0x340/0x5f0 [ 912.484255][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.490319][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.496472][T18985] __do_fast_syscall_32+0x129/0x180 [ 912.501666][T18985] do_fast_syscall_32+0x6a/0xc0 [ 912.506519][T18985] do_SYSENTER_32+0x73/0x90 [ 912.511020][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.517327][T18985] [ 912.519652][T18985] Uninit was stored to memory at: [ 912.524676][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 912.530392][T18985] __msan_chain_origin+0x57/0xa0 [ 912.535326][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 912.540458][T18985] get_compat_msghdr+0x108/0x2b0 [ 912.545393][T18985] do_recvmmsg+0xdc7/0x22e0 [ 912.549983][T18985] __sys_recvmmsg+0x340/0x5f0 [ 912.554660][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.560723][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.566878][T18985] __do_fast_syscall_32+0x129/0x180 [ 912.572083][T18985] do_fast_syscall_32+0x6a/0xc0 [ 912.576935][T18985] do_SYSENTER_32+0x73/0x90 [ 912.581439][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.587750][T18985] [ 912.590068][T18985] Uninit was stored to memory at: [ 912.595097][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 912.600814][T18985] __msan_chain_origin+0x57/0xa0 [ 912.605751][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 912.610857][T18985] get_compat_msghdr+0x108/0x2b0 [ 912.615794][T18985] do_recvmmsg+0xdc7/0x22e0 [ 912.620300][T18985] __sys_recvmmsg+0x340/0x5f0 [ 912.624973][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.631052][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.637217][T18985] __do_fast_syscall_32+0x129/0x180 [ 912.642414][T18985] do_fast_syscall_32+0x6a/0xc0 [ 912.647265][T18985] do_SYSENTER_32+0x73/0x90 [ 912.651782][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.658093][T18985] [ 912.660410][T18985] Uninit was stored to memory at: [ 912.665438][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 912.671774][T18985] __msan_chain_origin+0x57/0xa0 [ 912.676708][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 912.681817][T18985] get_compat_msghdr+0x108/0x2b0 [ 912.686765][T18985] do_recvmmsg+0xdc7/0x22e0 [ 912.691268][T18985] __sys_recvmmsg+0x340/0x5f0 [ 912.695948][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.702014][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.708171][T18985] __do_fast_syscall_32+0x129/0x180 [ 912.713371][T18985] do_fast_syscall_32+0x6a/0xc0 [ 912.718218][T18985] do_SYSENTER_32+0x73/0x90 [ 912.722721][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.729027][T18985] [ 912.731345][T18985] Uninit was stored to memory at: [ 912.736374][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 912.742090][T18985] __msan_chain_origin+0x57/0xa0 [ 912.747023][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 912.752128][T18985] get_compat_msghdr+0x108/0x2b0 [ 912.757062][T18985] do_recvmmsg+0xdc7/0x22e0 [ 912.761561][T18985] __sys_recvmmsg+0x340/0x5f0 [ 912.766237][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.772300][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.778457][T18985] __do_fast_syscall_32+0x129/0x180 [ 912.783655][T18985] do_fast_syscall_32+0x6a/0xc0 [ 912.788501][T18985] do_SYSENTER_32+0x73/0x90 [ 912.793005][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.799315][T18985] [ 912.801631][T18985] Uninit was stored to memory at: [ 912.806663][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 912.812383][T18985] __msan_chain_origin+0x57/0xa0 [ 912.817316][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 912.822428][T18985] get_compat_msghdr+0x108/0x2b0 [ 912.827364][T18985] do_recvmmsg+0xdc7/0x22e0 [ 912.831863][T18985] __sys_recvmmsg+0x340/0x5f0 [ 912.836538][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.842602][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.848753][T18985] __do_fast_syscall_32+0x129/0x180 [ 912.853956][T18985] do_fast_syscall_32+0x6a/0xc0 [ 912.858807][T18985] do_SYSENTER_32+0x73/0x90 [ 912.863306][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.869615][T18985] [ 912.871933][T18985] Uninit was stored to memory at: [ 912.876962][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 912.882680][T18985] __msan_chain_origin+0x57/0xa0 [ 912.887611][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 912.892718][T18985] get_compat_msghdr+0x108/0x2b0 [ 912.897765][T18985] do_recvmmsg+0xdc7/0x22e0 [ 912.902266][T18985] __sys_recvmmsg+0x340/0x5f0 [ 912.906942][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 912.913007][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 912.919158][T18985] __do_fast_syscall_32+0x129/0x180 [ 912.924358][T18985] do_fast_syscall_32+0x6a/0xc0 [ 912.929205][T18985] do_SYSENTER_32+0x73/0x90 [ 912.933709][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.940014][T18985] [ 912.942331][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 912.949003][T18985] do_recvmmsg+0xc2/0x22e0 [ 912.953417][T18985] do_recvmmsg+0xc2/0x22e0 [ 913.293543][T18982] not chained 140000 origins [ 913.298171][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 913.306841][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.316892][T18982] Call Trace: [ 913.320184][T18982] dump_stack+0x21c/0x280 [ 913.324526][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 913.330252][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 913.336318][T18982] ? kmsan_get_metadata+0x116/0x180 [ 913.341519][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 913.347330][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 913.353396][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 913.358767][T18982] ? kmsan_get_metadata+0x116/0x180 [ 913.363967][T18982] ? kmsan_get_metadata+0x116/0x180 [ 913.369168][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 913.374812][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 913.380884][T18982] ? _copy_from_user+0x201/0x310 [ 913.385822][T18982] ? kmsan_get_metadata+0x116/0x180 [ 913.391023][T18982] __msan_chain_origin+0x57/0xa0 [ 913.395962][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 913.401078][T18982] get_compat_msghdr+0x108/0x2b0 [ 913.406022][T18982] do_recvmmsg+0xdc7/0x22e0 [ 913.410527][T18982] ? kmsan_get_metadata+0x116/0x180 [ 913.415730][T18982] ? kmsan_get_metadata+0x116/0x180 [ 913.420932][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 913.426577][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 913.431865][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 913.436634][T18982] __sys_recvmmsg+0x340/0x5f0 [ 913.441311][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 913.447114][T18982] ? kmsan_get_metadata+0x116/0x180 [ 913.452313][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.458385][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.464543][T18982] __do_fast_syscall_32+0x129/0x180 [ 913.469746][T18982] do_fast_syscall_32+0x6a/0xc0 [ 913.474609][T18982] do_SYSENTER_32+0x73/0x90 [ 913.479122][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.485443][T18982] RIP: 0023:0xf7fe5549 [ 913.489511][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 913.509118][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 913.517531][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 913.525503][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 913.533471][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 913.541443][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 913.549413][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.557378][T18982] Uninit was stored to memory at: [ 913.562412][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 913.568133][T18982] __msan_chain_origin+0x57/0xa0 [ 913.573071][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 913.578183][T18982] get_compat_msghdr+0x108/0x2b0 [ 913.583147][T18982] do_recvmmsg+0xdc7/0x22e0 [ 913.587669][T18982] __sys_recvmmsg+0x340/0x5f0 [ 913.592351][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.598422][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.604578][T18982] __do_fast_syscall_32+0x129/0x180 [ 913.609776][T18982] do_fast_syscall_32+0x6a/0xc0 [ 913.614624][T18982] do_SYSENTER_32+0x73/0x90 [ 913.619132][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.625444][T18982] [ 913.627761][T18982] Uninit was stored to memory at: [ 913.632791][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 913.638513][T18982] __msan_chain_origin+0x57/0xa0 [ 913.643449][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 913.648556][T18982] get_compat_msghdr+0x108/0x2b0 [ 913.653496][T18982] do_recvmmsg+0xdc7/0x22e0 [ 913.658004][T18982] __sys_recvmmsg+0x340/0x5f0 [ 913.662680][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.668747][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.674906][T18982] __do_fast_syscall_32+0x129/0x180 [ 913.680104][T18982] do_fast_syscall_32+0x6a/0xc0 [ 913.684954][T18982] do_SYSENTER_32+0x73/0x90 [ 913.689457][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.695768][T18982] [ 913.698085][T18982] Uninit was stored to memory at: [ 913.703120][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 913.708843][T18982] __msan_chain_origin+0x57/0xa0 [ 913.713780][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 913.718891][T18982] get_compat_msghdr+0x108/0x2b0 [ 913.723844][T18982] do_recvmmsg+0xdc7/0x22e0 [ 913.728346][T18982] __sys_recvmmsg+0x340/0x5f0 [ 913.733024][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.739089][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.745243][T18982] __do_fast_syscall_32+0x129/0x180 [ 913.750442][T18982] do_fast_syscall_32+0x6a/0xc0 [ 913.755294][T18982] do_SYSENTER_32+0x73/0x90 [ 913.759811][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.766119][T18982] [ 913.768438][T18982] Uninit was stored to memory at: [ 913.773476][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 913.779210][T18982] __msan_chain_origin+0x57/0xa0 [ 913.784153][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 913.789263][T18982] get_compat_msghdr+0x108/0x2b0 [ 913.794207][T18982] do_recvmmsg+0xdc7/0x22e0 [ 913.798713][T18982] __sys_recvmmsg+0x340/0x5f0 [ 913.803390][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.809456][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.815610][T18982] __do_fast_syscall_32+0x129/0x180 [ 913.820808][T18982] do_fast_syscall_32+0x6a/0xc0 [ 913.825658][T18982] do_SYSENTER_32+0x73/0x90 [ 913.830159][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.836474][T18982] [ 913.838791][T18982] Uninit was stored to memory at: [ 913.843817][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 913.849538][T18982] __msan_chain_origin+0x57/0xa0 [ 913.854469][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 913.859578][T18982] get_compat_msghdr+0x108/0x2b0 [ 913.864518][T18982] do_recvmmsg+0xdc7/0x22e0 [ 913.869021][T18982] __sys_recvmmsg+0x340/0x5f0 [ 913.873699][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.879765][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.885933][T18982] __do_fast_syscall_32+0x129/0x180 [ 913.891132][T18982] do_fast_syscall_32+0x6a/0xc0 [ 913.895985][T18982] do_SYSENTER_32+0x73/0x90 [ 913.900488][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.906797][T18982] [ 913.909115][T18982] Uninit was stored to memory at: [ 913.914149][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 913.919885][T18982] __msan_chain_origin+0x57/0xa0 [ 913.924822][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 913.929931][T18982] get_compat_msghdr+0x108/0x2b0 [ 913.934870][T18982] do_recvmmsg+0xdc7/0x22e0 [ 913.939377][T18982] __sys_recvmmsg+0x340/0x5f0 [ 913.944052][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 913.950123][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 913.956277][T18982] __do_fast_syscall_32+0x129/0x180 [ 913.961484][T18982] do_fast_syscall_32+0x6a/0xc0 [ 913.966333][T18982] do_SYSENTER_32+0x73/0x90 [ 913.970862][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.977176][T18982] [ 913.979500][T18982] Uninit was stored to memory at: [ 913.984534][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 913.990258][T18982] __msan_chain_origin+0x57/0xa0 [ 913.995195][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 914.000305][T18982] get_compat_msghdr+0x108/0x2b0 [ 914.005246][T18982] do_recvmmsg+0xdc7/0x22e0 [ 914.010184][T18982] __sys_recvmmsg+0x340/0x5f0 [ 914.014864][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 914.020931][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 914.027086][T18982] __do_fast_syscall_32+0x129/0x180 [ 914.032285][T18982] do_fast_syscall_32+0x6a/0xc0 [ 914.037137][T18982] do_SYSENTER_32+0x73/0x90 [ 914.041642][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.047974][T18982] [ 914.050389][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 914.057070][T18982] do_recvmmsg+0xc2/0x22e0 [ 914.061493][T18982] do_recvmmsg+0xc2/0x22e0 [ 914.329187][T18982] not chained 150000 origins [ 914.333823][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 914.342482][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.352521][T18982] Call Trace: [ 914.355803][T18982] dump_stack+0x21c/0x280 [ 914.360125][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 914.365852][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 914.371907][T18982] ? kmsan_get_metadata+0x116/0x180 [ 914.377093][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 914.382890][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 914.388964][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 914.394319][T18982] ? kmsan_get_metadata+0x116/0x180 [ 914.399504][T18982] ? kmsan_get_metadata+0x116/0x180 [ 914.404692][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 914.410312][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 914.416370][T18982] ? _copy_from_user+0x201/0x310 [ 914.421293][T18982] ? kmsan_get_metadata+0x116/0x180 [ 914.426482][T18982] __msan_chain_origin+0x57/0xa0 [ 914.431410][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 914.436510][T18982] get_compat_msghdr+0x108/0x2b0 [ 914.441440][T18982] do_recvmmsg+0xdc7/0x22e0 [ 914.445938][T18982] ? kmsan_get_metadata+0x116/0x180 [ 914.451125][T18982] ? kmsan_get_metadata+0x116/0x180 [ 914.456318][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 914.461936][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 914.467211][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 914.471965][T18982] __sys_recvmmsg+0x340/0x5f0 [ 914.476630][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 914.482419][T18982] ? kmsan_get_metadata+0x116/0x180 [ 914.487605][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 914.493660][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 914.499802][T18982] __do_fast_syscall_32+0x129/0x180 [ 914.504989][T18982] do_fast_syscall_32+0x6a/0xc0 [ 914.509825][T18982] do_SYSENTER_32+0x73/0x90 [ 914.514318][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.520629][T18982] RIP: 0023:0xf7fe5549 [ 914.524686][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 914.544275][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 914.552671][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 914.560627][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 914.568583][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 914.576536][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 914.584491][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 914.592447][T18982] Uninit was stored to memory at: [ 914.597463][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 914.603173][T18982] __msan_chain_origin+0x57/0xa0 [ 914.608096][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 914.613192][T18982] get_compat_msghdr+0x108/0x2b0 [ 914.618114][T18982] do_recvmmsg+0xdc7/0x22e0 [ 914.622606][T18982] __sys_recvmmsg+0x340/0x5f0 [ 914.627268][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 914.633318][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 914.639457][T18982] __do_fast_syscall_32+0x129/0x180 [ 914.644645][T18982] do_fast_syscall_32+0x6a/0xc0 [ 914.649482][T18982] do_SYSENTER_32+0x73/0x90 [ 914.653970][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.660269][T18982] [ 914.662574][T18982] Uninit was stored to memory at: [ 914.667587][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 914.673294][T18982] __msan_chain_origin+0x57/0xa0 [ 914.678217][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 914.683310][T18982] get_compat_msghdr+0x108/0x2b0 [ 914.688234][T18982] do_recvmmsg+0xdc7/0x22e0 [ 914.692722][T18982] __sys_recvmmsg+0x340/0x5f0 [ 914.697385][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 914.703458][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 914.709596][T18982] __do_fast_syscall_32+0x129/0x180 [ 914.714778][T18982] do_fast_syscall_32+0x6a/0xc0 [ 914.719613][T18982] do_SYSENTER_32+0x73/0x90 [ 914.724101][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.730399][T18982] [ 914.732722][T18982] Uninit was stored to memory at: [ 914.737734][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 914.743443][T18982] __msan_chain_origin+0x57/0xa0 [ 914.748365][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 914.753480][T18982] get_compat_msghdr+0x108/0x2b0 [ 914.758415][T18982] do_recvmmsg+0xdc7/0x22e0 [ 914.762903][T18982] __sys_recvmmsg+0x340/0x5f0 [ 914.767564][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 914.773615][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 914.779753][T18982] __do_fast_syscall_32+0x129/0x180 [ 914.784937][T18982] do_fast_syscall_32+0x6a/0xc0 [ 914.789772][T18982] do_SYSENTER_32+0x73/0x90 [ 914.794262][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.800563][T18982] [ 914.802874][T18982] Uninit was stored to memory at: [ 914.807884][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 914.813675][T18982] __msan_chain_origin+0x57/0xa0 [ 914.818595][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 914.823688][T18982] get_compat_msghdr+0x108/0x2b0 [ 914.828609][T18982] do_recvmmsg+0xdc7/0x22e0 [ 914.833098][T18982] __sys_recvmmsg+0x340/0x5f0 [ 914.837761][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 914.843814][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 914.849952][T18982] __do_fast_syscall_32+0x129/0x180 [ 914.855135][T18982] do_fast_syscall_32+0x6a/0xc0 [ 914.859973][T18982] do_SYSENTER_32+0x73/0x90 [ 914.864464][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.870762][T18982] [ 914.873067][T18982] Uninit was stored to memory at: [ 914.878081][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 914.883786][T18982] __msan_chain_origin+0x57/0xa0 [ 914.888707][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 914.893800][T18982] get_compat_msghdr+0x108/0x2b0 [ 914.898724][T18982] do_recvmmsg+0xdc7/0x22e0 [ 914.903215][T18982] __sys_recvmmsg+0x340/0x5f0 [ 914.907880][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 914.913931][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 914.920084][T18982] __do_fast_syscall_32+0x129/0x180 [ 914.925267][T18982] do_fast_syscall_32+0x6a/0xc0 [ 914.930100][T18982] do_SYSENTER_32+0x73/0x90 [ 914.934588][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.940899][T18982] [ 914.943205][T18982] Uninit was stored to memory at: [ 914.948216][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 914.953920][T18982] __msan_chain_origin+0x57/0xa0 [ 914.958839][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 914.963933][T18982] get_compat_msghdr+0x108/0x2b0 [ 914.968857][T18982] do_recvmmsg+0xdc7/0x22e0 [ 914.973345][T18982] __sys_recvmmsg+0x340/0x5f0 [ 914.978008][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 914.984059][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 914.990197][T18982] __do_fast_syscall_32+0x129/0x180 [ 914.995402][T18982] do_fast_syscall_32+0x6a/0xc0 [ 915.000237][T18982] do_SYSENTER_32+0x73/0x90 [ 915.004726][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.011025][T18982] [ 915.013331][T18982] Uninit was stored to memory at: [ 915.018354][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 915.024079][T18982] __msan_chain_origin+0x57/0xa0 [ 915.029000][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 915.034098][T18982] get_compat_msghdr+0x108/0x2b0 [ 915.039019][T18982] do_recvmmsg+0xdc7/0x22e0 [ 915.043509][T18982] __sys_recvmmsg+0x340/0x5f0 [ 915.048173][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 915.054235][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 915.060380][T18982] __do_fast_syscall_32+0x129/0x180 [ 915.065564][T18982] do_fast_syscall_32+0x6a/0xc0 [ 915.070401][T18982] do_SYSENTER_32+0x73/0x90 [ 915.074890][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.081192][T18982] [ 915.083502][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 915.090262][T18982] do_recvmmsg+0xc2/0x22e0 [ 915.094664][T18982] do_recvmmsg+0xc2/0x22e0 [ 915.634635][T18985] not chained 160000 origins [ 915.639263][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 915.647924][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.658071][T18985] Call Trace: [ 915.661367][T18985] dump_stack+0x21c/0x280 [ 915.665704][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 915.671441][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 915.677529][T18985] ? kmsan_get_metadata+0x116/0x180 [ 915.682727][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 915.688533][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 915.694602][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 915.699974][T18985] ? kmsan_get_metadata+0x116/0x180 [ 915.705172][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 915.710805][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 915.716871][T18985] ? _copy_from_user+0x201/0x310 [ 915.721805][T18985] ? kmsan_get_metadata+0x116/0x180 [ 915.727003][T18985] __msan_chain_origin+0x57/0xa0 [ 915.732026][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 915.737141][T18985] get_compat_msghdr+0x108/0x2b0 [ 915.742081][T18985] do_recvmmsg+0xdc7/0x22e0 [ 915.746586][T18985] ? kmsan_get_metadata+0x116/0x180 [ 915.751791][T18985] ? kmsan_get_metadata+0x116/0x180 [ 915.756991][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 915.762629][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 915.767918][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 915.772693][T18985] __sys_recvmmsg+0x340/0x5f0 [ 915.777374][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 915.783176][T18985] ? kmsan_get_metadata+0x116/0x180 [ 915.788376][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 915.794446][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 915.800605][T18985] __do_fast_syscall_32+0x129/0x180 [ 915.805805][T18985] do_fast_syscall_32+0x6a/0xc0 [ 915.810655][T18985] do_SYSENTER_32+0x73/0x90 [ 915.815160][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.821478][T18985] RIP: 0023:0xf7fe5549 [ 915.825562][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 915.845167][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 915.853577][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 915.861549][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 915.869516][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.877483][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 915.885450][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.893415][T18985] Uninit was stored to memory at: [ 915.898448][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 915.904179][T18985] __msan_chain_origin+0x57/0xa0 [ 915.909114][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 915.914227][T18985] get_compat_msghdr+0x108/0x2b0 [ 915.919163][T18985] do_recvmmsg+0xdc7/0x22e0 [ 915.923664][T18985] __sys_recvmmsg+0x340/0x5f0 [ 915.928340][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 915.934403][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 915.940557][T18985] __do_fast_syscall_32+0x129/0x180 [ 915.945756][T18985] do_fast_syscall_32+0x6a/0xc0 [ 915.950607][T18985] do_SYSENTER_32+0x73/0x90 [ 915.955114][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.961422][T18985] [ 915.963740][T18985] Uninit was stored to memory at: [ 915.968766][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 915.974487][T18985] __msan_chain_origin+0x57/0xa0 [ 915.979420][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 915.984527][T18985] get_compat_msghdr+0x108/0x2b0 [ 915.989464][T18985] do_recvmmsg+0xdc7/0x22e0 [ 915.993966][T18985] __sys_recvmmsg+0x340/0x5f0 [ 915.998640][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.004739][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.010896][T18985] __do_fast_syscall_32+0x129/0x180 [ 916.016095][T18985] do_fast_syscall_32+0x6a/0xc0 [ 916.020950][T18985] do_SYSENTER_32+0x73/0x90 [ 916.025456][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.031767][T18985] [ 916.034082][T18985] Uninit was stored to memory at: [ 916.039112][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 916.044837][T18985] __msan_chain_origin+0x57/0xa0 [ 916.049961][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 916.055070][T18985] get_compat_msghdr+0x108/0x2b0 [ 916.060007][T18985] do_recvmmsg+0xdc7/0x22e0 [ 916.064509][T18985] __sys_recvmmsg+0x340/0x5f0 [ 916.069184][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.075250][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.081407][T18985] __do_fast_syscall_32+0x129/0x180 [ 916.086631][T18985] do_fast_syscall_32+0x6a/0xc0 [ 916.091479][T18985] do_SYSENTER_32+0x73/0x90 [ 916.095982][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.102289][T18985] [ 916.104604][T18985] Uninit was stored to memory at: [ 916.109633][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 916.115372][T18985] __msan_chain_origin+0x57/0xa0 [ 916.120310][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 916.125418][T18985] get_compat_msghdr+0x108/0x2b0 [ 916.130353][T18985] do_recvmmsg+0xdc7/0x22e0 [ 916.134856][T18985] __sys_recvmmsg+0x340/0x5f0 [ 916.139532][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.145599][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.151759][T18985] __do_fast_syscall_32+0x129/0x180 [ 916.156957][T18985] do_fast_syscall_32+0x6a/0xc0 [ 916.161914][T18985] do_SYSENTER_32+0x73/0x90 [ 916.166420][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.172727][T18985] [ 916.175046][T18985] Uninit was stored to memory at: [ 916.180072][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 916.185791][T18985] __msan_chain_origin+0x57/0xa0 [ 916.190728][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 916.195834][T18985] get_compat_msghdr+0x108/0x2b0 [ 916.200771][T18985] do_recvmmsg+0xdc7/0x22e0 [ 916.205291][T18985] __sys_recvmmsg+0x340/0x5f0 [ 916.209964][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.216028][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.222302][T18985] __do_fast_syscall_32+0x129/0x180 [ 916.227501][T18985] do_fast_syscall_32+0x6a/0xc0 [ 916.232348][T18985] do_SYSENTER_32+0x73/0x90 [ 916.236853][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.243170][T18985] [ 916.245488][T18985] Uninit was stored to memory at: [ 916.250516][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 916.256236][T18985] __msan_chain_origin+0x57/0xa0 [ 916.261178][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 916.266286][T18985] get_compat_msghdr+0x108/0x2b0 [ 916.271225][T18985] do_recvmmsg+0xdc7/0x22e0 [ 916.275729][T18985] __sys_recvmmsg+0x340/0x5f0 [ 916.280405][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.286470][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.292632][T18985] __do_fast_syscall_32+0x129/0x180 [ 916.297829][T18985] do_fast_syscall_32+0x6a/0xc0 [ 916.302679][T18985] do_SYSENTER_32+0x73/0x90 [ 916.307186][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.313496][T18985] [ 916.315815][T18985] Uninit was stored to memory at: [ 916.320845][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 916.326564][T18985] __msan_chain_origin+0x57/0xa0 [ 916.331502][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 916.336728][T18985] get_compat_msghdr+0x108/0x2b0 [ 916.341666][T18985] do_recvmmsg+0xdc7/0x22e0 [ 916.346173][T18985] __sys_recvmmsg+0x340/0x5f0 [ 916.350849][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 916.356923][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 916.363076][T18985] __do_fast_syscall_32+0x129/0x180 [ 916.368274][T18985] do_fast_syscall_32+0x6a/0xc0 [ 916.373123][T18985] do_SYSENTER_32+0x73/0x90 [ 916.377629][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 916.383936][T18985] [ 916.386256][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 916.392928][T18985] do_recvmmsg+0xc2/0x22e0 [ 916.397343][T18985] do_recvmmsg+0xc2/0x22e0 [ 916.879010][T18985] not chained 170000 origins [ 916.883632][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 916.892291][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.902336][T18985] Call Trace: [ 916.905631][T18985] dump_stack+0x21c/0x280 [ 916.909964][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 916.915687][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 916.921750][T18985] ? kmsan_get_metadata+0x116/0x180 [ 916.926946][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 916.932750][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 916.938815][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 916.944189][T18985] ? kmsan_get_metadata+0x116/0x180 [ 916.949386][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 916.955023][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 916.961084][T18985] ? _copy_from_user+0x201/0x310 [ 916.966019][T18985] ? kmsan_get_metadata+0x116/0x180 [ 916.971216][T18985] __msan_chain_origin+0x57/0xa0 [ 916.976152][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 916.981277][T18985] get_compat_msghdr+0x108/0x2b0 [ 916.986228][T18985] do_recvmmsg+0xdc7/0x22e0 [ 916.990745][T18985] ? kmsan_get_metadata+0x116/0x180 [ 916.995954][T18985] ? kmsan_get_metadata+0x116/0x180 [ 917.001153][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 917.006791][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 917.012078][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 917.016852][T18985] __sys_recvmmsg+0x340/0x5f0 [ 917.021530][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 917.027335][T18985] ? kmsan_get_metadata+0x116/0x180 [ 917.032534][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.038607][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.044766][T18985] __do_fast_syscall_32+0x129/0x180 [ 917.049969][T18985] do_fast_syscall_32+0x6a/0xc0 [ 917.054818][T18985] do_SYSENTER_32+0x73/0x90 [ 917.059327][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.065654][T18985] RIP: 0023:0xf7fe5549 [ 917.069724][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 917.089328][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 917.097741][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 917.105711][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 917.113682][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 917.121650][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 917.129619][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 917.137587][T18985] Uninit was stored to memory at: [ 917.142621][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 917.148342][T18985] __msan_chain_origin+0x57/0xa0 [ 917.153275][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 917.158385][T18985] get_compat_msghdr+0x108/0x2b0 [ 917.163326][T18985] do_recvmmsg+0xdc7/0x22e0 [ 917.167830][T18985] __sys_recvmmsg+0x340/0x5f0 [ 917.172511][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.178583][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.184737][T18985] __do_fast_syscall_32+0x129/0x180 [ 917.189939][T18985] do_fast_syscall_32+0x6a/0xc0 [ 917.194820][T18985] do_SYSENTER_32+0x73/0x90 [ 917.199331][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.201307][T18982] not chained 180000 origins [ 917.205647][T18985] [ 917.210229][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 917.212521][T18985] Uninit was stored to memory at: [ 917.221168][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.226176][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 917.236192][T18982] Call Trace: [ 917.241907][T18985] __msan_chain_origin+0x57/0xa0 [ 917.245167][T18982] dump_stack+0x21c/0x280 [ 917.250074][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 917.254390][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 917.259494][T18985] get_compat_msghdr+0x108/0x2b0 [ 917.265199][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 917.270116][T18985] do_recvmmsg+0xdc7/0x22e0 [ 917.276153][T18982] ? kmsan_get_metadata+0x116/0x180 [ 917.280633][T18985] __sys_recvmmsg+0x340/0x5f0 [ 917.285804][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 917.290456][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.296245][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 917.302282][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.308322][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 917.314449][T18985] __do_fast_syscall_32+0x129/0x180 [ 917.319800][T18982] ? kmsan_get_metadata+0x116/0x180 [ 917.324971][T18985] do_fast_syscall_32+0x6a/0xc0 [ 917.330142][T18982] ? kmsan_get_metadata+0x116/0x180 [ 917.334976][T18985] do_SYSENTER_32+0x73/0x90 [ 917.340147][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 917.344622][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.350226][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 917.356507][T18985] [ 917.362572][T18982] ? _copy_from_user+0x201/0x310 [ 917.364864][T18985] Uninit was stored to memory at: [ 917.369783][T18982] ? kmsan_get_metadata+0x116/0x180 [ 917.374781][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 917.379965][T18982] __msan_chain_origin+0x57/0xa0 [ 917.385668][T18985] __msan_chain_origin+0x57/0xa0 [ 917.390678][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 917.395591][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 917.400675][T18982] get_compat_msghdr+0x108/0x2b0 [ 917.405749][T18985] get_compat_msghdr+0x108/0x2b0 [ 917.405762][T18985] do_recvmmsg+0xdc7/0x22e0 [ 917.405776][T18985] __sys_recvmmsg+0x340/0x5f0 [ 917.405800][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.410713][T18982] do_recvmmsg+0xdc7/0x22e0 [ 917.415621][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.420093][T18982] ? kmsan_get_metadata+0x116/0x180 [ 917.424756][T18985] __do_fast_syscall_32+0x129/0x180 [ 917.430789][T18982] ? kmsan_get_metadata+0x116/0x180 [ 917.435264][T18985] do_fast_syscall_32+0x6a/0xc0 [ 917.441392][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 917.446557][T18985] do_SYSENTER_32+0x73/0x90 [ 917.451726][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 917.456896][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.461730][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 917.467318][T18985] [ 917.471807][T18982] __sys_recvmmsg+0x340/0x5f0 [ 917.477047][T18985] Uninit was stored to memory at: [ 917.483355][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 917.488089][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 917.490390][T18982] ? kmsan_get_metadata+0x116/0x180 [ 917.495043][T18985] __msan_chain_origin+0x57/0xa0 [ 917.500040][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.505811][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 917.511502][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.516666][T18985] get_compat_msghdr+0x108/0x2b0 [ 917.521576][T18982] __do_fast_syscall_32+0x129/0x180 [ 917.527616][T18985] do_recvmmsg+0xdc7/0x22e0 [ 917.532710][T18982] do_fast_syscall_32+0x6a/0xc0 [ 917.538833][T18985] __sys_recvmmsg+0x340/0x5f0 [ 917.543740][T18982] do_SYSENTER_32+0x73/0x90 [ 917.548908][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.553398][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.558215][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.562870][T18982] RIP: 0023:0xf7fe5549 [ 917.567346][T18985] __do_fast_syscall_32+0x129/0x180 [ 917.573385][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 917.579681][T18985] do_fast_syscall_32+0x6a/0xc0 [ 917.585795][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 917.589840][T18985] do_SYSENTER_32+0x73/0x90 [ 917.595007][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 917.614589][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.619404][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 917.627775][T18985] [ 917.632266][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 917.640219][T18985] Uninit was stored to memory at: [ 917.646523][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 917.654477][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 917.656771][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 917.664722][T18985] __msan_chain_origin+0x57/0xa0 [ 917.669718][T18982] Uninit was stored to memory at: [ 917.677673][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 917.683375][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 917.691316][T18985] get_compat_msghdr+0x108/0x2b0 [ 917.696226][T18982] __msan_chain_origin+0x57/0xa0 [ 917.701233][T18985] do_recvmmsg+0xdc7/0x22e0 [ 917.706313][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 917.712006][T18985] __sys_recvmmsg+0x340/0x5f0 [ 917.716912][T18982] get_compat_msghdr+0x108/0x2b0 [ 917.721834][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.726309][T18982] do_recvmmsg+0xdc7/0x22e0 [ 917.731406][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.736062][T18982] __sys_recvmmsg+0x340/0x5f0 [ 917.740977][T18985] __do_fast_syscall_32+0x129/0x180 [ 917.747037][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.751510][T18985] do_fast_syscall_32+0x6a/0xc0 [ 917.757635][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.762282][T18985] do_SYSENTER_32+0x73/0x90 [ 917.767451][T18982] __do_fast_syscall_32+0x129/0x180 [ 917.773488][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.778311][T18982] do_fast_syscall_32+0x6a/0xc0 [ 917.784419][T18985] [ 917.788906][T18982] do_SYSENTER_32+0x73/0x90 [ 917.794062][T18985] Uninit was stored to memory at: [ 917.800372][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.805196][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 917.807484][T18982] [ 917.811969][T18985] __msan_chain_origin+0x57/0xa0 [ 917.816973][T18982] Uninit was stored to memory at: [ 917.823282][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 917.828978][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 917.831278][T18985] get_compat_msghdr+0x108/0x2b0 [ 917.836189][T18982] __msan_chain_origin+0x57/0xa0 [ 917.841183][T18985] do_recvmmsg+0xdc7/0x22e0 [ 917.846262][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 917.851953][T18985] __sys_recvmmsg+0x340/0x5f0 [ 917.856860][T18982] get_compat_msghdr+0x108/0x2b0 [ 917.861772][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.866260][T18982] do_recvmmsg+0xdc7/0x22e0 [ 917.871354][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.876004][T18982] __sys_recvmmsg+0x340/0x5f0 [ 917.880924][T18985] __do_fast_syscall_32+0x129/0x180 [ 917.886973][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 917.891467][T18985] do_fast_syscall_32+0x6a/0xc0 [ 917.897591][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 917.902238][T18985] do_SYSENTER_32+0x73/0x90 [ 917.907408][T18982] __do_fast_syscall_32+0x129/0x180 [ 917.913458][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.918280][T18982] do_fast_syscall_32+0x6a/0xc0 [ 917.924392][T18985] [ 917.928880][T18982] do_SYSENTER_32+0x73/0x90 [ 917.934034][T18985] Uninit was stored to memory at: [ 917.940356][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 917.945182][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 917.947471][T18982] [ 917.951960][T18985] __msan_chain_origin+0x57/0xa0 [ 917.956947][T18982] Uninit was stored to memory at: [ 917.963261][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 917.968954][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 917.971251][T18985] get_compat_msghdr+0x108/0x2b0 [ 917.976163][T18982] __msan_chain_origin+0x57/0xa0 [ 917.981165][T18985] do_recvmmsg+0xdc7/0x22e0 [ 917.986247][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 917.992059][T18985] __sys_recvmmsg+0x340/0x5f0 [ 917.996982][T18982] get_compat_msghdr+0x108/0x2b0 [ 918.001896][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 918.006386][T18982] do_recvmmsg+0xdc7/0x22e0 [ 918.011468][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 918.016136][T18982] __sys_recvmmsg+0x340/0x5f0 [ 918.021049][T18985] __do_fast_syscall_32+0x129/0x180 [ 918.027086][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 918.031559][T18985] do_fast_syscall_32+0x6a/0xc0 [ 918.037685][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 918.042348][T18985] do_SYSENTER_32+0x73/0x90 [ 918.047517][T18982] __do_fast_syscall_32+0x129/0x180 [ 918.053554][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.058379][T18982] do_fast_syscall_32+0x6a/0xc0 [ 918.064485][T18985] [ 918.068970][T18982] do_SYSENTER_32+0x73/0x90 [ 918.074129][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 918.080438][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.085258][T18985] do_recvmmsg+0xc2/0x22e0 [ 918.087548][T18982] [ 918.092045][T18985] do_recvmmsg+0xc2/0x22e0 [ 918.098687][T18982] Uninit was stored to memory at: [ 918.121107][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 918.126833][T18982] __msan_chain_origin+0x57/0xa0 [ 918.131769][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 918.137027][T18982] get_compat_msghdr+0x108/0x2b0 [ 918.142041][T18982] do_recvmmsg+0xdc7/0x22e0 [ 918.146610][T18982] __sys_recvmmsg+0x340/0x5f0 [ 918.151284][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 918.157350][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 918.163499][T18982] __do_fast_syscall_32+0x129/0x180 [ 918.168694][T18982] do_fast_syscall_32+0x6a/0xc0 [ 918.173649][T18982] do_SYSENTER_32+0x73/0x90 [ 918.178152][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.184455][T18982] [ 918.186773][T18982] Uninit was stored to memory at: [ 918.191792][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 918.197503][T18982] __msan_chain_origin+0x57/0xa0 [ 918.202437][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 918.207543][T18982] get_compat_msghdr+0x108/0x2b0 [ 918.212471][T18982] do_recvmmsg+0xdc7/0x22e0 [ 918.216965][T18982] __sys_recvmmsg+0x340/0x5f0 [ 918.221630][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 918.227683][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 918.233827][T18982] __do_fast_syscall_32+0x129/0x180 [ 918.239010][T18982] do_fast_syscall_32+0x6a/0xc0 [ 918.243855][T18982] do_SYSENTER_32+0x73/0x90 [ 918.248347][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.254649][T18982] [ 918.256959][T18982] Uninit was stored to memory at: [ 918.261970][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 918.267675][T18982] __msan_chain_origin+0x57/0xa0 [ 918.272597][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 918.277691][T18982] get_compat_msghdr+0x108/0x2b0 [ 918.282614][T18982] do_recvmmsg+0xdc7/0x22e0 [ 918.287102][T18982] __sys_recvmmsg+0x340/0x5f0 [ 918.291767][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 918.297819][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 918.303965][T18982] __do_fast_syscall_32+0x129/0x180 [ 918.309151][T18982] do_fast_syscall_32+0x6a/0xc0 [ 918.313988][T18982] do_SYSENTER_32+0x73/0x90 [ 918.318479][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.324779][T18982] [ 918.327088][T18982] Uninit was stored to memory at: [ 918.332108][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 918.337817][T18982] __msan_chain_origin+0x57/0xa0 [ 918.342739][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 918.347834][T18982] get_compat_msghdr+0x108/0x2b0 [ 918.352758][T18982] do_recvmmsg+0xdc7/0x22e0 [ 918.357247][T18982] __sys_recvmmsg+0x340/0x5f0 [ 918.361909][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 918.367960][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 918.374100][T18982] __do_fast_syscall_32+0x129/0x180 [ 918.379285][T18982] do_fast_syscall_32+0x6a/0xc0 [ 918.384124][T18982] do_SYSENTER_32+0x73/0x90 [ 918.388615][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.394912][T18982] [ 918.397223][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 918.403880][T18982] do_recvmmsg+0xc2/0x22e0 [ 918.408279][T18982] do_recvmmsg+0xc2/0x22e0 [ 919.239380][T18985] not chained 190000 origins [ 919.244008][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 919.252670][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.262715][T18985] Call Trace: [ 919.266009][T18985] dump_stack+0x21c/0x280 [ 919.270345][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 919.276071][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 919.282132][T18985] ? kmsan_get_metadata+0x116/0x180 [ 919.287328][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.293140][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 919.299207][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 919.304580][T18985] ? kmsan_get_metadata+0x116/0x180 [ 919.309877][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 919.315515][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 919.321583][T18985] ? _copy_from_user+0x201/0x310 [ 919.326523][T18985] ? kmsan_get_metadata+0x116/0x180 [ 919.331724][T18985] __msan_chain_origin+0x57/0xa0 [ 919.336663][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 919.341792][T18985] get_compat_msghdr+0x108/0x2b0 [ 919.346733][T18985] do_recvmmsg+0xdc7/0x22e0 [ 919.351236][T18985] ? kmsan_get_metadata+0x116/0x180 [ 919.356436][T18985] ? kmsan_get_metadata+0x116/0x180 [ 919.361643][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 919.367277][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 919.372569][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 919.377334][T18985] __sys_recvmmsg+0x340/0x5f0 [ 919.382009][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.387813][T18985] ? kmsan_get_metadata+0x116/0x180 [ 919.393011][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.399079][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.405235][T18985] __do_fast_syscall_32+0x129/0x180 [ 919.410436][T18985] do_fast_syscall_32+0x6a/0xc0 [ 919.415285][T18985] do_SYSENTER_32+0x73/0x90 [ 919.419793][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.426114][T18985] RIP: 0023:0xf7fe5549 [ 919.430186][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 919.449892][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 919.458303][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 919.466269][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 919.474239][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 919.482206][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 919.490172][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 919.498137][T18985] Uninit was stored to memory at: [ 919.503167][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 919.508890][T18985] __msan_chain_origin+0x57/0xa0 [ 919.513826][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 919.518934][T18985] get_compat_msghdr+0x108/0x2b0 [ 919.523872][T18985] do_recvmmsg+0xdc7/0x22e0 [ 919.528375][T18985] __sys_recvmmsg+0x340/0x5f0 [ 919.533053][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.539155][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.545316][T18985] __do_fast_syscall_32+0x129/0x180 [ 919.550510][T18985] do_fast_syscall_32+0x6a/0xc0 [ 919.555372][T18985] do_SYSENTER_32+0x73/0x90 [ 919.559873][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.566181][T18985] [ 919.568497][T18985] Uninit was stored to memory at: [ 919.573525][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 919.579246][T18985] __msan_chain_origin+0x57/0xa0 [ 919.584179][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 919.589324][T18985] get_compat_msghdr+0x108/0x2b0 [ 919.594262][T18985] do_recvmmsg+0xdc7/0x22e0 [ 919.598768][T18985] __sys_recvmmsg+0x340/0x5f0 [ 919.603445][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.609512][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.615669][T18985] __do_fast_syscall_32+0x129/0x180 [ 919.620867][T18985] do_fast_syscall_32+0x6a/0xc0 [ 919.625717][T18985] do_SYSENTER_32+0x73/0x90 [ 919.630222][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.636533][T18985] [ 919.638850][T18985] Uninit was stored to memory at: [ 919.643879][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 919.649595][T18985] __msan_chain_origin+0x57/0xa0 [ 919.654539][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 919.659654][T18985] get_compat_msghdr+0x108/0x2b0 [ 919.664591][T18985] do_recvmmsg+0xdc7/0x22e0 [ 919.669092][T18985] __sys_recvmmsg+0x340/0x5f0 [ 919.673771][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.679836][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.685990][T18985] __do_fast_syscall_32+0x129/0x180 [ 919.691185][T18985] do_fast_syscall_32+0x6a/0xc0 [ 919.696034][T18985] do_SYSENTER_32+0x73/0x90 [ 919.700540][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.706847][T18985] [ 919.709163][T18985] Uninit was stored to memory at: [ 919.714191][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 919.719909][T18985] __msan_chain_origin+0x57/0xa0 [ 919.724848][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 919.729955][T18985] get_compat_msghdr+0x108/0x2b0 [ 919.734896][T18985] do_recvmmsg+0xdc7/0x22e0 [ 919.739464][T18985] __sys_recvmmsg+0x340/0x5f0 [ 919.744142][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.750207][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.756360][T18985] __do_fast_syscall_32+0x129/0x180 [ 919.761561][T18985] do_fast_syscall_32+0x6a/0xc0 [ 919.766410][T18985] do_SYSENTER_32+0x73/0x90 [ 919.770915][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.777222][T18985] [ 919.779539][T18985] Uninit was stored to memory at: [ 919.784564][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 919.790393][T18985] __msan_chain_origin+0x57/0xa0 [ 919.795354][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 919.800461][T18985] get_compat_msghdr+0x108/0x2b0 [ 919.805491][T18985] do_recvmmsg+0xdc7/0x22e0 [ 919.809995][T18985] __sys_recvmmsg+0x340/0x5f0 [ 919.814671][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.820736][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.826889][T18985] __do_fast_syscall_32+0x129/0x180 [ 919.832089][T18985] do_fast_syscall_32+0x6a/0xc0 [ 919.836940][T18985] do_SYSENTER_32+0x73/0x90 [ 919.841444][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.847756][T18985] [ 919.850074][T18985] Uninit was stored to memory at: [ 919.855103][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 919.860823][T18985] __msan_chain_origin+0x57/0xa0 [ 919.865762][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 919.870874][T18985] get_compat_msghdr+0x108/0x2b0 [ 919.875816][T18985] do_recvmmsg+0xdc7/0x22e0 [ 919.880326][T18985] __sys_recvmmsg+0x340/0x5f0 [ 919.885002][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.891092][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.897249][T18985] __do_fast_syscall_32+0x129/0x180 [ 919.902447][T18985] do_fast_syscall_32+0x6a/0xc0 [ 919.907305][T18985] do_SYSENTER_32+0x73/0x90 [ 919.911808][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.918117][T18985] [ 919.920435][T18985] Uninit was stored to memory at: [ 919.925463][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 919.931182][T18985] __msan_chain_origin+0x57/0xa0 [ 919.936116][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 919.941232][T18985] get_compat_msghdr+0x108/0x2b0 [ 919.946174][T18985] do_recvmmsg+0xdc7/0x22e0 [ 919.950680][T18985] __sys_recvmmsg+0x340/0x5f0 [ 919.955377][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 919.961446][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 919.967613][T18985] __do_fast_syscall_32+0x129/0x180 [ 919.972815][T18985] do_fast_syscall_32+0x6a/0xc0 [ 919.977668][T18985] do_SYSENTER_32+0x73/0x90 [ 919.982174][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.988484][T18985] [ 919.990811][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 919.997486][T18985] do_recvmmsg+0xc2/0x22e0 [ 920.001906][T18985] do_recvmmsg+0xc2/0x22e0 [ 920.390205][T18985] not chained 200000 origins [ 920.394834][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 920.403498][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.413577][T18985] Call Trace: [ 920.416875][T18985] dump_stack+0x21c/0x280 [ 920.421214][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 920.426939][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 920.433006][T18985] ? kmsan_get_metadata+0x116/0x180 [ 920.438204][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 920.444014][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 920.450079][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 920.455483][T18985] ? kmsan_get_metadata+0x116/0x180 [ 920.460687][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 920.466326][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 920.472398][T18985] ? _copy_from_user+0x201/0x310 [ 920.478295][T18985] ? kmsan_get_metadata+0x116/0x180 [ 920.483508][T18985] __msan_chain_origin+0x57/0xa0 [ 920.488449][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 920.493563][T18985] get_compat_msghdr+0x108/0x2b0 [ 920.498507][T18985] do_recvmmsg+0xdc7/0x22e0 [ 920.503015][T18985] ? kmsan_get_metadata+0x116/0x180 [ 920.508220][T18985] ? kmsan_get_metadata+0x116/0x180 [ 920.513423][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 920.519062][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 920.524353][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 920.529120][T18985] __sys_recvmmsg+0x340/0x5f0 [ 920.533802][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 920.539607][T18985] ? kmsan_get_metadata+0x116/0x180 [ 920.544810][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 920.550885][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 920.557041][T18985] __do_fast_syscall_32+0x129/0x180 [ 920.562504][T18985] do_fast_syscall_32+0x6a/0xc0 [ 920.567359][T18985] do_SYSENTER_32+0x73/0x90 [ 920.571869][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.578194][T18985] RIP: 0023:0xf7fe5549 [ 920.582264][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 920.601955][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 920.610365][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 920.618337][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 920.626309][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 920.634280][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 920.642249][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 920.650218][T18985] Uninit was stored to memory at: [ 920.655253][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 920.660978][T18985] __msan_chain_origin+0x57/0xa0 [ 920.665917][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 920.671029][T18985] get_compat_msghdr+0x108/0x2b0 [ 920.675970][T18985] do_recvmmsg+0xdc7/0x22e0 [ 920.680474][T18985] __sys_recvmmsg+0x340/0x5f0 [ 920.685151][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 920.691219][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 920.697375][T18985] __do_fast_syscall_32+0x129/0x180 [ 920.702575][T18985] do_fast_syscall_32+0x6a/0xc0 [ 920.707426][T18985] do_SYSENTER_32+0x73/0x90 [ 920.711933][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.718246][T18985] [ 920.720565][T18985] Uninit was stored to memory at: [ 920.725602][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 920.731325][T18985] __msan_chain_origin+0x57/0xa0 [ 920.736270][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 920.741384][T18985] get_compat_msghdr+0x108/0x2b0 [ 920.746322][T18985] do_recvmmsg+0xdc7/0x22e0 [ 920.750826][T18985] __sys_recvmmsg+0x340/0x5f0 [ 920.755504][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 920.761571][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 920.767732][T18985] __do_fast_syscall_32+0x129/0x180 [ 920.772942][T18985] do_fast_syscall_32+0x6a/0xc0 [ 920.777791][T18985] do_SYSENTER_32+0x73/0x90 [ 920.782299][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.788610][T18985] [ 920.790930][T18985] Uninit was stored to memory at: [ 920.795962][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 920.801684][T18985] __msan_chain_origin+0x57/0xa0 [ 920.806624][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 920.811739][T18985] get_compat_msghdr+0x108/0x2b0 [ 920.816680][T18985] do_recvmmsg+0xdc7/0x22e0 [ 920.821184][T18985] __sys_recvmmsg+0x340/0x5f0 [ 920.825861][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 920.831927][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 920.838081][T18985] __do_fast_syscall_32+0x129/0x180 [ 920.843281][T18985] do_fast_syscall_32+0x6a/0xc0 [ 920.848134][T18985] do_SYSENTER_32+0x73/0x90 [ 920.852637][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.858950][T18985] [ 920.861269][T18985] Uninit was stored to memory at: [ 920.866309][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 920.872032][T18985] __msan_chain_origin+0x57/0xa0 [ 920.876968][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 920.882077][T18985] get_compat_msghdr+0x108/0x2b0 [ 920.887018][T18985] do_recvmmsg+0xdc7/0x22e0 [ 920.892131][T18985] __sys_recvmmsg+0x340/0x5f0 [ 920.896810][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 920.902878][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 920.909036][T18985] __do_fast_syscall_32+0x129/0x180 [ 920.914231][T18985] do_fast_syscall_32+0x6a/0xc0 [ 920.919082][T18985] do_SYSENTER_32+0x73/0x90 [ 920.923587][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.929898][T18985] [ 920.932217][T18985] Uninit was stored to memory at: [ 920.937247][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 920.942970][T18985] __msan_chain_origin+0x57/0xa0 [ 920.947905][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 920.953016][T18985] get_compat_msghdr+0x108/0x2b0 [ 920.957957][T18985] do_recvmmsg+0xdc7/0x22e0 [ 920.962461][T18985] __sys_recvmmsg+0x340/0x5f0 [ 920.967661][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 920.973730][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 920.979888][T18985] __do_fast_syscall_32+0x129/0x180 [ 920.985087][T18985] do_fast_syscall_32+0x6a/0xc0 [ 920.989940][T18985] do_SYSENTER_32+0x73/0x90 [ 920.994450][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.000762][T18985] [ 921.003175][T18985] Uninit was stored to memory at: [ 921.008301][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 921.014023][T18985] __msan_chain_origin+0x57/0xa0 [ 921.018966][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 921.024095][T18985] get_compat_msghdr+0x108/0x2b0 [ 921.029036][T18985] do_recvmmsg+0xdc7/0x22e0 [ 921.033542][T18985] __sys_recvmmsg+0x340/0x5f0 [ 921.038220][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.044287][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.050480][T18985] __do_fast_syscall_32+0x129/0x180 [ 921.055680][T18985] do_fast_syscall_32+0x6a/0xc0 [ 921.060530][T18985] do_SYSENTER_32+0x73/0x90 [ 921.065037][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.071347][T18985] [ 921.073667][T18985] Uninit was stored to memory at: [ 921.078695][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 921.084418][T18985] __msan_chain_origin+0x57/0xa0 [ 921.089355][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 921.094465][T18985] get_compat_msghdr+0x108/0x2b0 [ 921.099404][T18985] do_recvmmsg+0xdc7/0x22e0 [ 921.103909][T18985] __sys_recvmmsg+0x340/0x5f0 [ 921.108587][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.114658][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.120820][T18985] __do_fast_syscall_32+0x129/0x180 [ 921.126023][T18985] do_fast_syscall_32+0x6a/0xc0 [ 921.130876][T18985] do_SYSENTER_32+0x73/0x90 [ 921.135401][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.141714][T18985] [ 921.144038][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 921.150720][T18985] do_recvmmsg+0xc2/0x22e0 [ 921.155317][T18985] do_recvmmsg+0xc2/0x22e0 [ 921.508680][T18982] not chained 210000 origins [ 921.513311][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 921.522087][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.532137][T18982] Call Trace: [ 921.535435][T18982] dump_stack+0x21c/0x280 [ 921.539778][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 921.545510][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 921.551578][T18982] ? kmsan_get_metadata+0x116/0x180 [ 921.556776][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.562589][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 921.568665][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 921.574036][T18982] ? kmsan_get_metadata+0x116/0x180 [ 921.579238][T18982] ? kmsan_get_metadata+0x116/0x180 [ 921.584446][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 921.590083][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 921.596153][T18982] ? _copy_from_user+0x201/0x310 [ 921.601092][T18982] ? kmsan_get_metadata+0x116/0x180 [ 921.606293][T18982] __msan_chain_origin+0x57/0xa0 [ 921.611233][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 921.616353][T18982] get_compat_msghdr+0x108/0x2b0 [ 921.621298][T18982] do_recvmmsg+0xdc7/0x22e0 [ 921.625805][T18982] ? kmsan_get_metadata+0x116/0x180 [ 921.631007][T18982] ? kmsan_get_metadata+0x116/0x180 [ 921.636563][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 921.642201][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 921.647488][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 921.652258][T18982] __sys_recvmmsg+0x340/0x5f0 [ 921.656938][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.662741][T18982] ? kmsan_get_metadata+0x116/0x180 [ 921.667943][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.674016][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.680174][T18982] __do_fast_syscall_32+0x129/0x180 [ 921.685379][T18982] do_fast_syscall_32+0x6a/0xc0 [ 921.692492][T18982] do_SYSENTER_32+0x73/0x90 [ 921.697003][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.703326][T18982] RIP: 0023:0xf7fe5549 [ 921.707398][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 921.727002][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 921.735415][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 921.743386][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 921.751357][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.759329][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 921.767300][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.775271][T18982] Uninit was stored to memory at: [ 921.780307][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 921.786030][T18982] __msan_chain_origin+0x57/0xa0 [ 921.790969][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 921.796081][T18982] get_compat_msghdr+0x108/0x2b0 [ 921.801975][T18982] do_recvmmsg+0xdc7/0x22e0 [ 921.806490][T18982] __sys_recvmmsg+0x340/0x5f0 [ 921.811169][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.817238][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.823394][T18982] __do_fast_syscall_32+0x129/0x180 [ 921.828591][T18982] do_fast_syscall_32+0x6a/0xc0 [ 921.833441][T18982] do_SYSENTER_32+0x73/0x90 [ 921.837946][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.844257][T18982] [ 921.846579][T18982] Uninit was stored to memory at: [ 921.851609][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 921.857332][T18982] __msan_chain_origin+0x57/0xa0 [ 921.862268][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 921.867379][T18982] get_compat_msghdr+0x108/0x2b0 [ 921.872318][T18982] do_recvmmsg+0xdc7/0x22e0 [ 921.876821][T18982] __sys_recvmmsg+0x340/0x5f0 [ 921.881498][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.887599][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.893759][T18982] __do_fast_syscall_32+0x129/0x180 [ 921.898957][T18982] do_fast_syscall_32+0x6a/0xc0 [ 921.903809][T18982] do_SYSENTER_32+0x73/0x90 [ 921.908321][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.914636][T18982] [ 921.916957][T18982] Uninit was stored to memory at: [ 921.921986][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 921.927708][T18982] __msan_chain_origin+0x57/0xa0 [ 921.932651][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 921.937762][T18982] get_compat_msghdr+0x108/0x2b0 [ 921.942790][T18982] do_recvmmsg+0xdc7/0x22e0 [ 921.947295][T18982] __sys_recvmmsg+0x340/0x5f0 [ 921.951971][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 921.958040][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 921.964197][T18982] __do_fast_syscall_32+0x129/0x180 [ 921.969395][T18982] do_fast_syscall_32+0x6a/0xc0 [ 921.974248][T18982] do_SYSENTER_32+0x73/0x90 [ 921.978783][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.985096][T18982] [ 921.987420][T18982] Uninit was stored to memory at: [ 921.992452][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 921.998178][T18982] __msan_chain_origin+0x57/0xa0 [ 922.003900][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 922.009006][T18982] get_compat_msghdr+0x108/0x2b0 [ 922.013942][T18982] do_recvmmsg+0xdc7/0x22e0 [ 922.018449][T18982] __sys_recvmmsg+0x340/0x5f0 [ 922.023126][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 922.029194][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 922.035362][T18982] __do_fast_syscall_32+0x129/0x180 [ 922.040560][T18982] do_fast_syscall_32+0x6a/0xc0 [ 922.045411][T18982] do_SYSENTER_32+0x73/0x90 [ 922.049919][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 922.056231][T18982] [ 922.058552][T18982] Uninit was stored to memory at: [ 922.063580][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 922.069300][T18982] __msan_chain_origin+0x57/0xa0 [ 922.074265][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 922.079373][T18982] get_compat_msghdr+0x108/0x2b0 [ 922.084312][T18982] do_recvmmsg+0xdc7/0x22e0 [ 922.088816][T18982] __sys_recvmmsg+0x340/0x5f0 [ 922.093529][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 922.099592][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 922.105750][T18982] __do_fast_syscall_32+0x129/0x180 [ 922.110949][T18982] do_fast_syscall_32+0x6a/0xc0 [ 922.115800][T18982] do_SYSENTER_32+0x73/0x90 [ 922.120304][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 922.126614][T18982] [ 922.128937][T18982] Uninit was stored to memory at: [ 922.133967][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 922.139685][T18982] __msan_chain_origin+0x57/0xa0 [ 922.144622][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 922.149744][T18982] get_compat_msghdr+0x108/0x2b0 [ 922.154777][T18982] do_recvmmsg+0xdc7/0x22e0 [ 922.159280][T18982] __sys_recvmmsg+0x340/0x5f0 [ 922.163961][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 922.170031][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 922.176190][T18982] __do_fast_syscall_32+0x129/0x180 [ 922.181391][T18982] do_fast_syscall_32+0x6a/0xc0 [ 922.186244][T18982] do_SYSENTER_32+0x73/0x90 [ 922.190747][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 922.197057][T18982] [ 922.199375][T18982] Uninit was stored to memory at: [ 922.204415][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 922.210134][T18982] __msan_chain_origin+0x57/0xa0 [ 922.215072][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 922.220182][T18982] get_compat_msghdr+0x108/0x2b0 [ 922.225124][T18982] do_recvmmsg+0xdc7/0x22e0 [ 922.229627][T18982] __sys_recvmmsg+0x340/0x5f0 [ 922.234311][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 922.240379][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 922.246537][T18982] __do_fast_syscall_32+0x129/0x180 [ 922.251735][T18982] do_fast_syscall_32+0x6a/0xc0 [ 922.256585][T18982] do_SYSENTER_32+0x73/0x90 [ 922.261089][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 922.267398][T18982] [ 922.269719][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 922.276399][T18982] do_recvmmsg+0xc2/0x22e0 [ 922.281159][T18982] do_recvmmsg+0xc2/0x22e0 [ 922.736308][T18982] not chained 220000 origins [ 922.740938][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 922.749601][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.759658][T18982] Call Trace: [ 922.762955][T18982] dump_stack+0x21c/0x280 [ 922.767295][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 922.773022][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 922.779094][T18982] ? kmsan_get_metadata+0x116/0x180 [ 922.784295][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 922.790105][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 922.796173][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 922.801546][T18982] ? kmsan_get_metadata+0x116/0x180 [ 922.806749][T18982] ? kmsan_get_metadata+0x116/0x180 [ 922.811953][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 922.817593][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 922.823665][T18982] ? _copy_from_user+0x201/0x310 [ 922.828602][T18982] ? kmsan_get_metadata+0x116/0x180 [ 922.833807][T18982] __msan_chain_origin+0x57/0xa0 [ 922.838746][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 922.843864][T18982] get_compat_msghdr+0x108/0x2b0 [ 922.848809][T18982] do_recvmmsg+0xdc7/0x22e0 [ 922.853313][T18982] ? kmsan_get_metadata+0x116/0x180 [ 922.858516][T18982] ? kmsan_get_metadata+0x116/0x180 [ 922.863718][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 922.869355][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 922.874651][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 922.879420][T18982] __sys_recvmmsg+0x340/0x5f0 [ 922.884105][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 922.889916][T18982] ? kmsan_get_metadata+0x116/0x180 [ 922.895118][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 922.901192][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 922.907351][T18982] __do_fast_syscall_32+0x129/0x180 [ 922.912555][T18982] do_fast_syscall_32+0x6a/0xc0 [ 922.917410][T18982] do_SYSENTER_32+0x73/0x90 [ 922.921918][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 922.928239][T18982] RIP: 0023:0xf7fe5549 [ 922.932308][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 922.951913][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 922.960324][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 922.968297][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 922.976269][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 922.984242][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 922.992215][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 923.000191][T18982] Uninit was stored to memory at: [ 923.005283][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 923.011010][T18982] __msan_chain_origin+0x57/0xa0 [ 923.015952][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 923.021067][T18982] get_compat_msghdr+0x108/0x2b0 [ 923.026008][T18982] do_recvmmsg+0xdc7/0x22e0 [ 923.030514][T18982] __sys_recvmmsg+0x340/0x5f0 [ 923.035194][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.041380][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.047537][T18982] __do_fast_syscall_32+0x129/0x180 [ 923.052728][T18982] do_fast_syscall_32+0x6a/0xc0 [ 923.057568][T18982] do_SYSENTER_32+0x73/0x90 [ 923.062067][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.068396][T18982] [ 923.070708][T18982] Uninit was stored to memory at: [ 923.075727][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 923.082272][T18982] __msan_chain_origin+0x57/0xa0 [ 923.087198][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 923.092299][T18982] get_compat_msghdr+0x108/0x2b0 [ 923.097231][T18982] do_recvmmsg+0xdc7/0x22e0 [ 923.101722][T18982] __sys_recvmmsg+0x340/0x5f0 [ 923.106389][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.112444][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.118588][T18982] __do_fast_syscall_32+0x129/0x180 [ 923.123777][T18982] do_fast_syscall_32+0x6a/0xc0 [ 923.128617][T18982] do_SYSENTER_32+0x73/0x90 [ 923.133129][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.139445][T18982] [ 923.141769][T18982] Uninit was stored to memory at: [ 923.146796][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 923.152506][T18982] __msan_chain_origin+0x57/0xa0 [ 923.157612][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 923.162717][T18982] get_compat_msghdr+0x108/0x2b0 [ 923.167643][T18982] do_recvmmsg+0xdc7/0x22e0 [ 923.172136][T18982] __sys_recvmmsg+0x340/0x5f0 [ 923.176802][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.182857][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.190300][T18982] __do_fast_syscall_32+0x129/0x180 [ 923.195509][T18982] do_fast_syscall_32+0x6a/0xc0 [ 923.200351][T18982] do_SYSENTER_32+0x73/0x90 [ 923.204842][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.211143][T18982] [ 923.213454][T18982] Uninit was stored to memory at: [ 923.218469][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 923.224180][T18982] __msan_chain_origin+0x57/0xa0 [ 923.229103][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 923.234200][T18982] get_compat_msghdr+0x108/0x2b0 [ 923.239142][T18982] do_recvmmsg+0xdc7/0x22e0 [ 923.243648][T18982] __sys_recvmmsg+0x340/0x5f0 [ 923.248324][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.254391][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.260541][T18982] __do_fast_syscall_32+0x129/0x180 [ 923.265730][T18982] do_fast_syscall_32+0x6a/0xc0 [ 923.270568][T18982] do_SYSENTER_32+0x73/0x90 [ 923.275061][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.281368][T18982] [ 923.283679][T18982] Uninit was stored to memory at: [ 923.288694][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 923.294403][T18982] __msan_chain_origin+0x57/0xa0 [ 923.299328][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 923.304428][T18982] get_compat_msghdr+0x108/0x2b0 [ 923.309353][T18982] do_recvmmsg+0xdc7/0x22e0 [ 923.313845][T18982] __sys_recvmmsg+0x340/0x5f0 [ 923.318509][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.324562][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.330704][T18982] __do_fast_syscall_32+0x129/0x180 [ 923.335888][T18982] do_fast_syscall_32+0x6a/0xc0 [ 923.340726][T18982] do_SYSENTER_32+0x73/0x90 [ 923.345217][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.351518][T18982] [ 923.353827][T18982] Uninit was stored to memory at: [ 923.358847][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 923.364555][T18982] __msan_chain_origin+0x57/0xa0 [ 923.369481][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 923.374575][T18982] get_compat_msghdr+0x108/0x2b0 [ 923.379500][T18982] do_recvmmsg+0xdc7/0x22e0 [ 923.384011][T18982] __sys_recvmmsg+0x340/0x5f0 [ 923.388706][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.394760][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.400901][T18982] __do_fast_syscall_32+0x129/0x180 [ 923.406086][T18982] do_fast_syscall_32+0x6a/0xc0 [ 923.410922][T18982] do_SYSENTER_32+0x73/0x90 [ 923.415416][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.421716][T18982] [ 923.424022][T18982] Uninit was stored to memory at: [ 923.429036][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 923.434741][T18982] __msan_chain_origin+0x57/0xa0 [ 923.439664][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 923.444762][T18982] get_compat_msghdr+0x108/0x2b0 [ 923.449688][T18982] do_recvmmsg+0xdc7/0x22e0 [ 923.454179][T18982] __sys_recvmmsg+0x340/0x5f0 [ 923.458844][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 923.464897][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 923.471126][T18982] __do_fast_syscall_32+0x129/0x180 [ 923.476311][T18982] do_fast_syscall_32+0x6a/0xc0 [ 923.481150][T18982] do_SYSENTER_32+0x73/0x90 [ 923.485644][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 923.492033][T18982] [ 923.494347][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 923.501008][T18982] do_recvmmsg+0xc2/0x22e0 [ 923.505410][T18982] do_recvmmsg+0xc2/0x22e0 [ 924.130631][T18982] not chained 230000 origins [ 924.135290][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 924.143956][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.154008][T18982] Call Trace: [ 924.157309][T18982] dump_stack+0x21c/0x280 [ 924.161655][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 924.167384][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 924.173457][T18982] ? kmsan_get_metadata+0x116/0x180 [ 924.178664][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 924.184482][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 924.190550][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 924.195924][T18982] ? kmsan_get_metadata+0x116/0x180 [ 924.201145][T18982] ? kmsan_get_metadata+0x116/0x180 [ 924.206348][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 924.211988][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 924.218064][T18982] ? _copy_from_user+0x201/0x310 [ 924.223015][T18982] ? kmsan_get_metadata+0x116/0x180 [ 924.228218][T18982] __msan_chain_origin+0x57/0xa0 [ 924.233159][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 924.238276][T18982] get_compat_msghdr+0x108/0x2b0 [ 924.243220][T18982] do_recvmmsg+0xdc7/0x22e0 [ 924.247731][T18982] ? kmsan_get_metadata+0x116/0x180 [ 924.252935][T18982] ? kmsan_get_metadata+0x116/0x180 [ 924.258137][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 924.263777][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 924.269067][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 924.273832][T18982] __sys_recvmmsg+0x340/0x5f0 [ 924.278511][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 924.284316][T18982] ? kmsan_get_metadata+0x116/0x180 [ 924.289517][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.295590][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.301805][T18982] __do_fast_syscall_32+0x129/0x180 [ 924.307107][T18982] do_fast_syscall_32+0x6a/0xc0 [ 924.311961][T18982] do_SYSENTER_32+0x73/0x90 [ 924.316468][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.322781][T18982] RIP: 0023:0xf7fe5549 [ 924.326840][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 924.346440][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 924.354849][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 924.362809][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 924.370767][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 924.378725][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 924.386684][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 924.394646][T18982] Uninit was stored to memory at: [ 924.399667][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 924.405377][T18982] __msan_chain_origin+0x57/0xa0 [ 924.410300][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 924.415484][T18982] get_compat_msghdr+0x108/0x2b0 [ 924.420408][T18982] do_recvmmsg+0xdc7/0x22e0 [ 924.424900][T18982] __sys_recvmmsg+0x340/0x5f0 [ 924.429565][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.435619][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.441795][T18982] __do_fast_syscall_32+0x129/0x180 [ 924.446980][T18982] do_fast_syscall_32+0x6a/0xc0 [ 924.451820][T18982] do_SYSENTER_32+0x73/0x90 [ 924.456312][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.462700][T18982] [ 924.465010][T18982] Uninit was stored to memory at: [ 924.470111][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 924.475820][T18982] __msan_chain_origin+0x57/0xa0 [ 924.480746][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 924.485844][T18982] get_compat_msghdr+0x108/0x2b0 [ 924.490770][T18982] do_recvmmsg+0xdc7/0x22e0 [ 924.495260][T18982] __sys_recvmmsg+0x340/0x5f0 [ 924.499924][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.505975][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.512117][T18982] __do_fast_syscall_32+0x129/0x180 [ 924.517302][T18982] do_fast_syscall_32+0x6a/0xc0 [ 924.522140][T18982] do_SYSENTER_32+0x73/0x90 [ 924.526643][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.532944][T18982] [ 924.535264][T18982] Uninit was stored to memory at: [ 924.540297][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 924.546028][T18982] __msan_chain_origin+0x57/0xa0 [ 924.550962][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 924.556066][T18982] get_compat_msghdr+0x108/0x2b0 [ 924.561000][T18982] do_recvmmsg+0xdc7/0x22e0 [ 924.565502][T18982] __sys_recvmmsg+0x340/0x5f0 [ 924.570170][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.576259][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.582403][T18982] __do_fast_syscall_32+0x129/0x180 [ 924.587592][T18982] do_fast_syscall_32+0x6a/0xc0 [ 924.592435][T18982] do_SYSENTER_32+0x73/0x90 [ 924.596930][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.603236][T18982] [ 924.605549][T18982] Uninit was stored to memory at: [ 924.610588][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 924.616301][T18982] __msan_chain_origin+0x57/0xa0 [ 924.621239][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 924.626344][T18982] get_compat_msghdr+0x108/0x2b0 [ 924.631273][T18982] do_recvmmsg+0xdc7/0x22e0 [ 924.635768][T18982] __sys_recvmmsg+0x340/0x5f0 [ 924.640439][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.646500][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.652680][T18982] __do_fast_syscall_32+0x129/0x180 [ 924.657880][T18982] do_fast_syscall_32+0x6a/0xc0 [ 924.662720][T18982] do_SYSENTER_32+0x73/0x90 [ 924.667214][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.673515][T18982] [ 924.675825][T18982] Uninit was stored to memory at: [ 924.680840][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 924.686547][T18982] __msan_chain_origin+0x57/0xa0 [ 924.691474][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 924.696673][T18982] get_compat_msghdr+0x108/0x2b0 [ 924.701600][T18982] do_recvmmsg+0xdc7/0x22e0 [ 924.706097][T18982] __sys_recvmmsg+0x340/0x5f0 [ 924.710760][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.716820][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.722961][T18982] __do_fast_syscall_32+0x129/0x180 [ 924.728145][T18982] do_fast_syscall_32+0x6a/0xc0 [ 924.732984][T18982] do_SYSENTER_32+0x73/0x90 [ 924.737477][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.743778][T18982] [ 924.746086][T18982] Uninit was stored to memory at: [ 924.751099][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 924.756807][T18982] __msan_chain_origin+0x57/0xa0 [ 924.761731][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 924.766829][T18982] get_compat_msghdr+0x108/0x2b0 [ 924.771755][T18982] do_recvmmsg+0xdc7/0x22e0 [ 924.776249][T18982] __sys_recvmmsg+0x340/0x5f0 [ 924.781174][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.787226][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.793367][T18982] __do_fast_syscall_32+0x129/0x180 [ 924.798552][T18982] do_fast_syscall_32+0x6a/0xc0 [ 924.803391][T18982] do_SYSENTER_32+0x73/0x90 [ 924.807880][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.814181][T18982] [ 924.816492][T18982] Uninit was stored to memory at: [ 924.821505][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 924.827215][T18982] __msan_chain_origin+0x57/0xa0 [ 924.832143][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 924.837256][T18982] get_compat_msghdr+0x108/0x2b0 [ 924.842182][T18982] do_recvmmsg+0xdc7/0x22e0 [ 924.846671][T18982] __sys_recvmmsg+0x340/0x5f0 [ 924.851336][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 924.857404][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 924.863548][T18982] __do_fast_syscall_32+0x129/0x180 [ 924.868734][T18982] do_fast_syscall_32+0x6a/0xc0 [ 924.873572][T18982] do_SYSENTER_32+0x73/0x90 [ 924.878062][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 924.884367][T18982] [ 924.886676][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 924.893338][T18982] do_recvmmsg+0xc2/0x22e0 [ 924.897743][T18982] do_recvmmsg+0xc2/0x22e0 [ 925.524760][T18982] not chained 240000 origins [ 925.529392][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 925.538059][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.548109][T18982] Call Trace: [ 925.551408][T18982] dump_stack+0x21c/0x280 [ 925.555748][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 925.561476][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 925.567547][T18982] ? kmsan_get_metadata+0x116/0x180 [ 925.572748][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 925.578560][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 925.584628][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 925.589998][T18982] ? kmsan_get_metadata+0x116/0x180 [ 925.595215][T18982] ? kmsan_get_metadata+0x116/0x180 [ 925.600417][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 925.606054][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 925.612126][T18982] ? _copy_from_user+0x201/0x310 [ 925.617064][T18982] ? kmsan_get_metadata+0x116/0x180 [ 925.622266][T18982] __msan_chain_origin+0x57/0xa0 [ 925.627204][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 925.632319][T18982] get_compat_msghdr+0x108/0x2b0 [ 925.637264][T18982] do_recvmmsg+0xdc7/0x22e0 [ 925.642120][T18982] ? kmsan_get_metadata+0x116/0x180 [ 925.647323][T18982] ? kmsan_get_metadata+0x116/0x180 [ 925.652526][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 925.658163][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 925.663476][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 925.668265][T18982] __sys_recvmmsg+0x340/0x5f0 [ 925.672944][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 925.678750][T18982] ? kmsan_get_metadata+0x116/0x180 [ 925.683953][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 925.690025][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 925.696185][T18982] __do_fast_syscall_32+0x129/0x180 [ 925.701387][T18982] do_fast_syscall_32+0x6a/0xc0 [ 925.706241][T18982] do_SYSENTER_32+0x73/0x90 [ 925.710865][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 925.717185][T18982] RIP: 0023:0xf7fe5549 [ 925.721254][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 925.740860][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 925.749277][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 925.757249][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 925.765219][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 925.773187][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 925.781156][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 925.789211][T18982] Uninit was stored to memory at: [ 925.794245][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 925.799965][T18982] __msan_chain_origin+0x57/0xa0 [ 925.804902][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 925.810009][T18982] get_compat_msghdr+0x108/0x2b0 [ 925.814949][T18982] do_recvmmsg+0xdc7/0x22e0 [ 925.819809][T18982] __sys_recvmmsg+0x340/0x5f0 [ 925.824496][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 925.830567][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 925.836725][T18982] __do_fast_syscall_32+0x129/0x180 [ 925.841924][T18982] do_fast_syscall_32+0x6a/0xc0 [ 925.846776][T18982] do_SYSENTER_32+0x73/0x90 [ 925.851286][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 925.857595][T18982] [ 925.859915][T18982] Uninit was stored to memory at: [ 925.864944][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 925.870664][T18982] __msan_chain_origin+0x57/0xa0 [ 925.875602][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 925.880710][T18982] get_compat_msghdr+0x108/0x2b0 [ 925.885649][T18982] do_recvmmsg+0xdc7/0x22e0 [ 925.890157][T18982] __sys_recvmmsg+0x340/0x5f0 [ 925.894836][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 925.900903][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 925.907055][T18982] __do_fast_syscall_32+0x129/0x180 [ 925.912254][T18982] do_fast_syscall_32+0x6a/0xc0 [ 925.917109][T18982] do_SYSENTER_32+0x73/0x90 [ 925.921615][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 925.927926][T18982] [ 925.930243][T18982] Uninit was stored to memory at: [ 925.935273][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 925.940994][T18982] __msan_chain_origin+0x57/0xa0 [ 925.945937][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 925.951051][T18982] get_compat_msghdr+0x108/0x2b0 [ 925.955996][T18982] do_recvmmsg+0xdc7/0x22e0 [ 925.960504][T18982] __sys_recvmmsg+0x340/0x5f0 [ 925.965185][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 925.971256][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 925.977413][T18982] __do_fast_syscall_32+0x129/0x180 [ 925.982620][T18982] do_fast_syscall_32+0x6a/0xc0 [ 925.987506][T18982] do_SYSENTER_32+0x73/0x90 [ 925.992013][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 925.998326][T18982] [ 926.000649][T18982] Uninit was stored to memory at: [ 926.005686][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 926.011412][T18982] __msan_chain_origin+0x57/0xa0 [ 926.016351][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 926.021468][T18982] get_compat_msghdr+0x108/0x2b0 [ 926.026417][T18982] do_recvmmsg+0xdc7/0x22e0 [ 926.030923][T18982] __sys_recvmmsg+0x340/0x5f0 [ 926.035605][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.041677][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.047833][T18982] __do_fast_syscall_32+0x129/0x180 [ 926.053029][T18982] do_fast_syscall_32+0x6a/0xc0 [ 926.057880][T18982] do_SYSENTER_32+0x73/0x90 [ 926.062471][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.068783][T18982] [ 926.071101][T18982] Uninit was stored to memory at: [ 926.076139][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 926.081863][T18982] __msan_chain_origin+0x57/0xa0 [ 926.086802][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 926.091914][T18982] get_compat_msghdr+0x108/0x2b0 [ 926.096853][T18982] do_recvmmsg+0xdc7/0x22e0 [ 926.101352][T18982] __sys_recvmmsg+0x340/0x5f0 [ 926.106030][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.112096][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.118257][T18982] __do_fast_syscall_32+0x129/0x180 [ 926.123456][T18982] do_fast_syscall_32+0x6a/0xc0 [ 926.128308][T18982] do_SYSENTER_32+0x73/0x90 [ 926.132811][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.139125][T18982] [ 926.141442][T18982] Uninit was stored to memory at: [ 926.146468][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 926.152189][T18982] __msan_chain_origin+0x57/0xa0 [ 926.157128][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 926.162351][T18982] get_compat_msghdr+0x108/0x2b0 [ 926.167289][T18982] do_recvmmsg+0xdc7/0x22e0 [ 926.171793][T18982] __sys_recvmmsg+0x340/0x5f0 [ 926.176478][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.182548][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.188705][T18982] __do_fast_syscall_32+0x129/0x180 [ 926.193906][T18982] do_fast_syscall_32+0x6a/0xc0 [ 926.198756][T18982] do_SYSENTER_32+0x73/0x90 [ 926.203264][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.209578][T18982] [ 926.211898][T18982] Uninit was stored to memory at: [ 926.216931][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 926.222650][T18982] __msan_chain_origin+0x57/0xa0 [ 926.227589][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 926.232701][T18982] get_compat_msghdr+0x108/0x2b0 [ 926.237644][T18982] do_recvmmsg+0xdc7/0x22e0 [ 926.242250][T18982] __sys_recvmmsg+0x340/0x5f0 [ 926.246928][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.252994][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.259150][T18982] __do_fast_syscall_32+0x129/0x180 [ 926.264348][T18982] do_fast_syscall_32+0x6a/0xc0 [ 926.269200][T18982] do_SYSENTER_32+0x73/0x90 [ 926.273700][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.280104][T18982] [ 926.282425][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 926.289087][T18982] do_recvmmsg+0xc2/0x22e0 [ 926.293494][T18982] do_recvmmsg+0xc2/0x22e0 [ 926.489417][T18982] not chained 250000 origins [ 926.494055][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 926.502720][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.512771][T18982] Call Trace: [ 926.516069][T18982] dump_stack+0x21c/0x280 [ 926.520408][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 926.526139][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 926.532209][T18982] ? kmsan_get_metadata+0x116/0x180 [ 926.537409][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 926.543218][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 926.549286][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 926.554661][T18982] ? kmsan_get_metadata+0x116/0x180 [ 926.559868][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 926.565509][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 926.571576][T18982] ? _copy_from_user+0x201/0x310 [ 926.576514][T18982] ? kmsan_get_metadata+0x116/0x180 [ 926.581712][T18982] __msan_chain_origin+0x57/0xa0 [ 926.586654][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 926.591771][T18982] get_compat_msghdr+0x108/0x2b0 [ 926.596720][T18982] do_recvmmsg+0xdc7/0x22e0 [ 926.601228][T18982] ? kmsan_get_metadata+0x116/0x180 [ 926.606432][T18982] ? kmsan_get_metadata+0x116/0x180 [ 926.611631][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 926.617268][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 926.622562][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 926.627336][T18982] __sys_recvmmsg+0x340/0x5f0 [ 926.632015][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 926.637818][T18982] ? kmsan_get_metadata+0x116/0x180 [ 926.643023][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.649096][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.655257][T18982] __do_fast_syscall_32+0x129/0x180 [ 926.660458][T18982] do_fast_syscall_32+0x6a/0xc0 [ 926.665314][T18982] do_SYSENTER_32+0x73/0x90 [ 926.669823][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.676151][T18982] RIP: 0023:0xf7fe5549 [ 926.680223][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 926.700002][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 926.708414][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 926.716389][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 926.724753][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 926.732847][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 926.740818][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 926.748787][T18982] Uninit was stored to memory at: [ 926.753822][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 926.759545][T18982] __msan_chain_origin+0x57/0xa0 [ 926.764483][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 926.769594][T18982] get_compat_msghdr+0x108/0x2b0 [ 926.774647][T18982] do_recvmmsg+0xdc7/0x22e0 [ 926.779156][T18982] __sys_recvmmsg+0x340/0x5f0 [ 926.783837][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.789906][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.796062][T18982] __do_fast_syscall_32+0x129/0x180 [ 926.801262][T18982] do_fast_syscall_32+0x6a/0xc0 [ 926.806119][T18982] do_SYSENTER_32+0x73/0x90 [ 926.810625][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.816958][T18982] [ 926.819278][T18982] Uninit was stored to memory at: [ 926.824308][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 926.830027][T18982] __msan_chain_origin+0x57/0xa0 [ 926.834964][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 926.840071][T18982] get_compat_msghdr+0x108/0x2b0 [ 926.845009][T18982] do_recvmmsg+0xdc7/0x22e0 [ 926.849512][T18982] __sys_recvmmsg+0x340/0x5f0 [ 926.854192][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.860259][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.866417][T18982] __do_fast_syscall_32+0x129/0x180 [ 926.871617][T18982] do_fast_syscall_32+0x6a/0xc0 [ 926.876467][T18982] do_SYSENTER_32+0x73/0x90 [ 926.880971][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.887283][T18982] [ 926.889604][T18982] Uninit was stored to memory at: [ 926.894633][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 926.900376][T18982] __msan_chain_origin+0x57/0xa0 [ 926.905319][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 926.910428][T18982] get_compat_msghdr+0x108/0x2b0 [ 926.915379][T18982] do_recvmmsg+0xdc7/0x22e0 [ 926.919913][T18982] __sys_recvmmsg+0x340/0x5f0 [ 926.924590][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 926.930742][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 926.936898][T18982] __do_fast_syscall_32+0x129/0x180 [ 926.942096][T18982] do_fast_syscall_32+0x6a/0xc0 [ 926.946950][T18982] do_SYSENTER_32+0x73/0x90 [ 926.951463][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 926.957776][T18982] [ 926.960095][T18982] Uninit was stored to memory at: [ 926.965135][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 926.970855][T18982] __msan_chain_origin+0x57/0xa0 [ 926.975794][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 926.980903][T18982] get_compat_msghdr+0x108/0x2b0 [ 926.985844][T18982] do_recvmmsg+0xdc7/0x22e0 [ 926.990349][T18982] __sys_recvmmsg+0x340/0x5f0 [ 926.995204][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.001269][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.007430][T18982] __do_fast_syscall_32+0x129/0x180 [ 927.012639][T18982] do_fast_syscall_32+0x6a/0xc0 [ 927.017494][T18982] do_SYSENTER_32+0x73/0x90 [ 927.021999][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.028313][T18982] [ 927.030635][T18982] Uninit was stored to memory at: [ 927.035677][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 927.041426][T18982] __msan_chain_origin+0x57/0xa0 [ 927.046365][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 927.051477][T18982] get_compat_msghdr+0x108/0x2b0 [ 927.056415][T18982] do_recvmmsg+0xdc7/0x22e0 [ 927.060955][T18982] __sys_recvmmsg+0x340/0x5f0 [ 927.065634][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.071707][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.077891][T18982] __do_fast_syscall_32+0x129/0x180 [ 927.083090][T18982] do_fast_syscall_32+0x6a/0xc0 [ 927.087941][T18982] do_SYSENTER_32+0x73/0x90 [ 927.092452][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.098764][T18982] [ 927.101084][T18982] Uninit was stored to memory at: [ 927.106114][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 927.111839][T18982] __msan_chain_origin+0x57/0xa0 [ 927.116779][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 927.121891][T18982] get_compat_msghdr+0x108/0x2b0 [ 927.126831][T18982] do_recvmmsg+0xdc7/0x22e0 [ 927.131337][T18982] __sys_recvmmsg+0x340/0x5f0 [ 927.136016][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.142083][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.148374][T18982] __do_fast_syscall_32+0x129/0x180 [ 927.153574][T18982] do_fast_syscall_32+0x6a/0xc0 [ 927.158428][T18982] do_SYSENTER_32+0x73/0x90 [ 927.162937][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.169250][T18982] [ 927.171569][T18982] Uninit was stored to memory at: [ 927.176607][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 927.182336][T18982] __msan_chain_origin+0x57/0xa0 [ 927.187278][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 927.192392][T18982] get_compat_msghdr+0x108/0x2b0 [ 927.197333][T18982] do_recvmmsg+0xdc7/0x22e0 [ 927.202449][T18982] __sys_recvmmsg+0x340/0x5f0 [ 927.207128][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.213191][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.219348][T18982] __do_fast_syscall_32+0x129/0x180 [ 927.224549][T18982] do_fast_syscall_32+0x6a/0xc0 [ 927.229404][T18982] do_SYSENTER_32+0x73/0x90 [ 927.233913][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.240226][T18982] [ 927.242552][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 927.249225][T18982] do_recvmmsg+0xc2/0x22e0 [ 927.253681][T18982] do_recvmmsg+0xc2/0x22e0 [ 927.607433][T18985] not chained 260000 origins [ 927.612065][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 927.620729][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.630782][T18985] Call Trace: [ 927.634087][T18985] dump_stack+0x21c/0x280 [ 927.638423][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 927.644145][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 927.650221][T18985] ? kmsan_get_metadata+0x116/0x180 [ 927.655419][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 927.661227][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 927.667293][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 927.672665][T18985] ? kmsan_get_metadata+0x116/0x180 [ 927.677867][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 927.683514][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 927.689588][T18985] ? _copy_from_user+0x201/0x310 [ 927.694527][T18985] ? kmsan_get_metadata+0x116/0x180 [ 927.699726][T18985] __msan_chain_origin+0x57/0xa0 [ 927.704669][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 927.709787][T18985] get_compat_msghdr+0x108/0x2b0 [ 927.714736][T18985] do_recvmmsg+0xdc7/0x22e0 [ 927.719242][T18985] ? kmsan_get_metadata+0x116/0x180 [ 927.724443][T18985] ? kmsan_get_metadata+0x116/0x180 [ 927.729643][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 927.735281][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 927.740569][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 927.745334][T18985] __sys_recvmmsg+0x340/0x5f0 [ 927.750012][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 927.755823][T18985] ? kmsan_get_metadata+0x116/0x180 [ 927.761024][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.767094][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.773250][T18985] __do_fast_syscall_32+0x129/0x180 [ 927.778450][T18985] do_fast_syscall_32+0x6a/0xc0 [ 927.783304][T18985] do_SYSENTER_32+0x73/0x90 [ 927.787815][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.794135][T18985] RIP: 0023:0xf7fe5549 [ 927.798206][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 927.817815][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 927.826231][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 927.834207][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 927.842179][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 927.850150][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 927.858122][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 927.866095][T18985] Uninit was stored to memory at: [ 927.871131][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 927.876854][T18985] __msan_chain_origin+0x57/0xa0 [ 927.881793][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 927.886907][T18985] get_compat_msghdr+0x108/0x2b0 [ 927.891848][T18985] do_recvmmsg+0xdc7/0x22e0 [ 927.896351][T18985] __sys_recvmmsg+0x340/0x5f0 [ 927.901056][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.907145][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.913301][T18985] __do_fast_syscall_32+0x129/0x180 [ 927.918498][T18985] do_fast_syscall_32+0x6a/0xc0 [ 927.923349][T18985] do_SYSENTER_32+0x73/0x90 [ 927.927852][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 927.934163][T18985] [ 927.936481][T18985] Uninit was stored to memory at: [ 927.941510][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 927.947362][T18985] __msan_chain_origin+0x57/0xa0 [ 927.952305][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 927.957424][T18985] get_compat_msghdr+0x108/0x2b0 [ 927.962367][T18985] do_recvmmsg+0xdc7/0x22e0 [ 927.966879][T18985] __sys_recvmmsg+0x340/0x5f0 [ 927.971559][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 927.977628][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 927.983783][T18985] __do_fast_syscall_32+0x129/0x180 [ 927.988984][T18985] do_fast_syscall_32+0x6a/0xc0 [ 927.993837][T18985] do_SYSENTER_32+0x73/0x90 [ 927.998344][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 928.004655][T18985] [ 928.006977][T18985] Uninit was stored to memory at: [ 928.012014][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 928.017737][T18985] __msan_chain_origin+0x57/0xa0 [ 928.022675][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 928.027783][T18985] get_compat_msghdr+0x108/0x2b0 [ 928.032720][T18985] do_recvmmsg+0xdc7/0x22e0 [ 928.037224][T18985] __sys_recvmmsg+0x340/0x5f0 [ 928.041902][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 928.047970][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 928.054127][T18985] __do_fast_syscall_32+0x129/0x180 [ 928.059327][T18985] do_fast_syscall_32+0x6a/0xc0 [ 928.064174][T18985] do_SYSENTER_32+0x73/0x90 [ 928.068678][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 928.074990][T18985] [ 928.077311][T18985] Uninit was stored to memory at: [ 928.082337][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 928.088059][T18985] __msan_chain_origin+0x57/0xa0 [ 928.092999][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 928.098124][T18985] get_compat_msghdr+0x108/0x2b0 [ 928.103064][T18985] do_recvmmsg+0xdc7/0x22e0 [ 928.107568][T18985] __sys_recvmmsg+0x340/0x5f0 [ 928.112247][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 928.118314][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 928.124468][T18985] __do_fast_syscall_32+0x129/0x180 [ 928.129671][T18985] do_fast_syscall_32+0x6a/0xc0 [ 928.134523][T18985] do_SYSENTER_32+0x73/0x90 [ 928.139039][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 928.145354][T18985] [ 928.147672][T18985] Uninit was stored to memory at: [ 928.152702][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 928.158421][T18985] __msan_chain_origin+0x57/0xa0 [ 928.163359][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 928.168471][T18985] get_compat_msghdr+0x108/0x2b0 [ 928.173411][T18985] do_recvmmsg+0xdc7/0x22e0 [ 928.177917][T18985] __sys_recvmmsg+0x340/0x5f0 [ 928.182598][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 928.188673][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 928.194833][T18985] __do_fast_syscall_32+0x129/0x180 [ 928.200034][T18985] do_fast_syscall_32+0x6a/0xc0 [ 928.204883][T18985] do_SYSENTER_32+0x73/0x90 [ 928.209391][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 928.215701][T18985] [ 928.218022][T18985] Uninit was stored to memory at: [ 928.223057][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 928.228778][T18985] __msan_chain_origin+0x57/0xa0 [ 928.233716][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 928.238828][T18985] get_compat_msghdr+0x108/0x2b0 [ 928.243768][T18985] do_recvmmsg+0xdc7/0x22e0 [ 928.248274][T18985] __sys_recvmmsg+0x340/0x5f0 [ 928.252951][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 928.259016][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 928.265195][T18985] __do_fast_syscall_32+0x129/0x180 [ 928.270396][T18985] do_fast_syscall_32+0x6a/0xc0 [ 928.275245][T18985] do_SYSENTER_32+0x73/0x90 [ 928.279751][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 928.286059][T18985] [ 928.288382][T18985] Uninit was stored to memory at: [ 928.293572][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 928.299297][T18985] __msan_chain_origin+0x57/0xa0 [ 928.304237][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 928.309345][T18985] get_compat_msghdr+0x108/0x2b0 [ 928.314283][T18985] do_recvmmsg+0xdc7/0x22e0 [ 928.318794][T18985] __sys_recvmmsg+0x340/0x5f0 [ 928.323472][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 928.329536][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 928.335690][T18985] __do_fast_syscall_32+0x129/0x180 [ 928.340884][T18985] do_fast_syscall_32+0x6a/0xc0 [ 928.345766][T18985] do_SYSENTER_32+0x73/0x90 [ 928.350272][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 928.356602][T18985] [ 928.358934][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 928.366395][T18985] do_recvmmsg+0xc2/0x22e0 [ 928.370811][T18985] do_recvmmsg+0xc2/0x22e0 [ 928.761652][T18982] not chained 270000 origins [ 928.766281][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 928.774948][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.784999][T18982] Call Trace: [ 928.788298][T18982] dump_stack+0x21c/0x280 [ 928.792642][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 928.798375][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 928.806531][T18982] ? kmsan_get_metadata+0x116/0x180 [ 928.811731][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 928.817543][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 928.823611][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 928.828987][T18982] ? kmsan_get_metadata+0x116/0x180 [ 928.834191][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 928.839831][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 928.845901][T18982] ? _copy_from_user+0x201/0x310 [ 928.850839][T18982] ? kmsan_get_metadata+0x116/0x180 [ 928.856041][T18982] __msan_chain_origin+0x57/0xa0 [ 928.860984][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 928.866105][T18982] get_compat_msghdr+0x108/0x2b0 [ 928.871052][T18982] do_recvmmsg+0xdc7/0x22e0 [ 928.875565][T18982] ? kmsan_get_metadata+0x116/0x180 [ 928.880769][T18982] ? kmsan_get_metadata+0x116/0x180 [ 928.885975][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 928.891714][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 928.897004][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 928.901775][T18982] __sys_recvmmsg+0x340/0x5f0 [ 928.906458][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 928.912264][T18982] ? kmsan_get_metadata+0x116/0x180 [ 928.917469][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 928.923546][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 928.929709][T18982] __do_fast_syscall_32+0x129/0x180 [ 928.934916][T18982] do_fast_syscall_32+0x6a/0xc0 [ 928.939775][T18982] do_SYSENTER_32+0x73/0x90 [ 928.944289][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 928.950612][T18982] RIP: 0023:0xf7fe5549 [ 928.954687][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 928.974296][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 928.982715][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 928.990688][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 928.998661][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 929.006640][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 929.014616][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 929.022619][T18982] Uninit was stored to memory at: [ 929.027663][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 929.033389][T18982] __msan_chain_origin+0x57/0xa0 [ 929.038332][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 929.043451][T18982] get_compat_msghdr+0x108/0x2b0 [ 929.048397][T18982] do_recvmmsg+0xdc7/0x22e0 [ 929.052908][T18982] __sys_recvmmsg+0x340/0x5f0 [ 929.057588][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.063660][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.069823][T18982] __do_fast_syscall_32+0x129/0x180 [ 929.075025][T18982] do_fast_syscall_32+0x6a/0xc0 [ 929.079877][T18982] do_SYSENTER_32+0x73/0x90 [ 929.084385][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.090701][T18982] [ 929.093021][T18982] Uninit was stored to memory at: [ 929.098055][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 929.103785][T18982] __msan_chain_origin+0x57/0xa0 [ 929.108730][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 929.113845][T18982] get_compat_msghdr+0x108/0x2b0 [ 929.118793][T18982] do_recvmmsg+0xdc7/0x22e0 [ 929.123304][T18982] __sys_recvmmsg+0x340/0x5f0 [ 929.127991][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.134061][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.140221][T18982] __do_fast_syscall_32+0x129/0x180 [ 929.145423][T18982] do_fast_syscall_32+0x6a/0xc0 [ 929.150280][T18982] do_SYSENTER_32+0x73/0x90 [ 929.154789][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.161106][T18982] [ 929.163439][T18982] Uninit was stored to memory at: [ 929.168474][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 929.174313][T18982] __msan_chain_origin+0x57/0xa0 [ 929.179254][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 929.184368][T18982] get_compat_msghdr+0x108/0x2b0 [ 929.189313][T18982] do_recvmmsg+0xdc7/0x22e0 [ 929.193822][T18982] __sys_recvmmsg+0x340/0x5f0 [ 929.198504][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.204578][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.210735][T18982] __do_fast_syscall_32+0x129/0x180 [ 929.215963][T18982] do_fast_syscall_32+0x6a/0xc0 [ 929.220817][T18982] do_SYSENTER_32+0x73/0x90 [ 929.225336][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.231649][T18982] [ 929.233967][T18982] Uninit was stored to memory at: [ 929.238999][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 929.244719][T18982] __msan_chain_origin+0x57/0xa0 [ 929.249656][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 929.254768][T18982] get_compat_msghdr+0x108/0x2b0 [ 929.259707][T18982] do_recvmmsg+0xdc7/0x22e0 [ 929.264213][T18982] __sys_recvmmsg+0x340/0x5f0 [ 929.268894][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.274963][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.281118][T18982] __do_fast_syscall_32+0x129/0x180 [ 929.286327][T18982] do_fast_syscall_32+0x6a/0xc0 [ 929.291180][T18982] do_SYSENTER_32+0x73/0x90 [ 929.295694][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.302007][T18982] [ 929.304330][T18982] Uninit was stored to memory at: [ 929.309363][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 929.315179][T18982] __msan_chain_origin+0x57/0xa0 [ 929.320148][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 929.325259][T18982] get_compat_msghdr+0x108/0x2b0 [ 929.330201][T18982] do_recvmmsg+0xdc7/0x22e0 [ 929.334706][T18982] __sys_recvmmsg+0x340/0x5f0 [ 929.339399][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.345468][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.352320][T18982] __do_fast_syscall_32+0x129/0x180 [ 929.357521][T18982] do_fast_syscall_32+0x6a/0xc0 [ 929.362374][T18982] do_SYSENTER_32+0x73/0x90 [ 929.366883][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.373196][T18982] [ 929.375515][T18982] Uninit was stored to memory at: [ 929.380555][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 929.386279][T18982] __msan_chain_origin+0x57/0xa0 [ 929.391216][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 929.396327][T18982] get_compat_msghdr+0x108/0x2b0 [ 929.401270][T18982] do_recvmmsg+0xdc7/0x22e0 [ 929.405777][T18982] __sys_recvmmsg+0x340/0x5f0 [ 929.410461][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.416533][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.422690][T18982] __do_fast_syscall_32+0x129/0x180 [ 929.427891][T18982] do_fast_syscall_32+0x6a/0xc0 [ 929.432744][T18982] do_SYSENTER_32+0x73/0x90 [ 929.437249][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.443560][T18982] [ 929.445879][T18982] Uninit was stored to memory at: [ 929.450913][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 929.456635][T18982] __msan_chain_origin+0x57/0xa0 [ 929.461584][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 929.466702][T18982] get_compat_msghdr+0x108/0x2b0 [ 929.471757][T18982] do_recvmmsg+0xdc7/0x22e0 [ 929.476264][T18982] __sys_recvmmsg+0x340/0x5f0 [ 929.480948][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 929.487019][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 929.493176][T18982] __do_fast_syscall_32+0x129/0x180 [ 929.498377][T18982] do_fast_syscall_32+0x6a/0xc0 [ 929.503231][T18982] do_SYSENTER_32+0x73/0x90 [ 929.507738][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 929.514060][T18982] [ 929.516385][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 929.523066][T18982] do_recvmmsg+0xc2/0x22e0 [ 929.527487][T18982] do_recvmmsg+0xc2/0x22e0 [ 931.077987][T18985] not chained 280000 origins [ 931.082618][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 931.091373][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.101422][T18985] Call Trace: [ 931.104719][T18985] dump_stack+0x21c/0x280 [ 931.109060][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 931.114787][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 931.120851][T18985] ? kmsan_get_metadata+0x116/0x180 [ 931.126051][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 931.131863][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 931.137936][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 931.143309][T18985] ? kmsan_get_metadata+0x116/0x180 [ 931.148509][T18985] ? kmsan_get_metadata+0x116/0x180 [ 931.153711][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 931.159350][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 931.165423][T18985] ? _copy_from_user+0x201/0x310 [ 931.170362][T18985] ? kmsan_get_metadata+0x116/0x180 [ 931.175570][T18985] __msan_chain_origin+0x57/0xa0 [ 931.180513][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 931.185645][T18985] get_compat_msghdr+0x108/0x2b0 [ 931.190586][T18985] do_recvmmsg+0xdc7/0x22e0 [ 931.195100][T18985] ? kmsan_get_metadata+0x116/0x180 [ 931.200315][T18985] ? kmsan_get_metadata+0x116/0x180 [ 931.205518][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 931.211159][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 931.216454][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 931.221347][T18985] __sys_recvmmsg+0x340/0x5f0 [ 931.226031][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 931.231837][T18985] ? kmsan_get_metadata+0x116/0x180 [ 931.237043][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.243118][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.249280][T18985] __do_fast_syscall_32+0x129/0x180 [ 931.254484][T18985] do_fast_syscall_32+0x6a/0xc0 [ 931.259340][T18985] do_SYSENTER_32+0x73/0x90 [ 931.263848][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.270258][T18985] RIP: 0023:0xf7fe5549 [ 931.274330][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 931.293937][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 931.302356][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 931.310335][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 931.318305][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 931.326315][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 931.334297][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 931.342271][T18985] Uninit was stored to memory at: [ 931.347309][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 931.353034][T18985] __msan_chain_origin+0x57/0xa0 [ 931.357970][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 931.363078][T18985] get_compat_msghdr+0x108/0x2b0 [ 931.368018][T18985] do_recvmmsg+0xdc7/0x22e0 [ 931.372609][T18985] __sys_recvmmsg+0x340/0x5f0 [ 931.377291][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.383357][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.389512][T18985] __do_fast_syscall_32+0x129/0x180 [ 931.394719][T18985] do_fast_syscall_32+0x6a/0xc0 [ 931.399571][T18985] do_SYSENTER_32+0x73/0x90 [ 931.404075][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.410388][T18985] [ 931.412707][T18985] Uninit was stored to memory at: [ 931.417742][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 931.423464][T18985] __msan_chain_origin+0x57/0xa0 [ 931.428687][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 931.433804][T18985] get_compat_msghdr+0x108/0x2b0 [ 931.438744][T18985] do_recvmmsg+0xdc7/0x22e0 [ 931.443246][T18985] __sys_recvmmsg+0x340/0x5f0 [ 931.447926][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.453995][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.460157][T18985] __do_fast_syscall_32+0x129/0x180 [ 931.465361][T18985] do_fast_syscall_32+0x6a/0xc0 [ 931.470215][T18985] do_SYSENTER_32+0x73/0x90 [ 931.474721][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.481032][T18985] [ 931.483354][T18985] Uninit was stored to memory at: [ 931.488398][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 931.494119][T18985] __msan_chain_origin+0x57/0xa0 [ 931.499063][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 931.504174][T18985] get_compat_msghdr+0x108/0x2b0 [ 931.509112][T18985] do_recvmmsg+0xdc7/0x22e0 [ 931.513628][T18985] __sys_recvmmsg+0x340/0x5f0 [ 931.518307][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.524374][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.530530][T18985] __do_fast_syscall_32+0x129/0x180 [ 931.535730][T18985] do_fast_syscall_32+0x6a/0xc0 [ 931.540579][T18985] do_SYSENTER_32+0x73/0x90 [ 931.545085][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.551398][T18985] [ 931.553719][T18985] Uninit was stored to memory at: [ 931.558747][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 931.564467][T18985] __msan_chain_origin+0x57/0xa0 [ 931.569405][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 931.574514][T18985] get_compat_msghdr+0x108/0x2b0 [ 931.579454][T18985] do_recvmmsg+0xdc7/0x22e0 [ 931.583958][T18985] __sys_recvmmsg+0x340/0x5f0 [ 931.588638][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.594705][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.600860][T18985] __do_fast_syscall_32+0x129/0x180 [ 931.606060][T18985] do_fast_syscall_32+0x6a/0xc0 [ 931.610911][T18985] do_SYSENTER_32+0x73/0x90 [ 931.615417][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.621729][T18985] [ 931.624051][T18985] Uninit was stored to memory at: [ 931.629080][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 931.634802][T18985] __msan_chain_origin+0x57/0xa0 [ 931.639740][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 931.644849][T18985] get_compat_msghdr+0x108/0x2b0 [ 931.649790][T18985] do_recvmmsg+0xdc7/0x22e0 [ 931.654294][T18985] __sys_recvmmsg+0x340/0x5f0 [ 931.658975][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.665046][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.671203][T18985] __do_fast_syscall_32+0x129/0x180 [ 931.676402][T18985] do_fast_syscall_32+0x6a/0xc0 [ 931.681253][T18985] do_SYSENTER_32+0x73/0x90 [ 931.685758][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.692073][T18985] [ 931.694390][T18985] Uninit was stored to memory at: [ 931.699420][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 931.705147][T18985] __msan_chain_origin+0x57/0xa0 [ 931.710111][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 931.715225][T18985] get_compat_msghdr+0x108/0x2b0 [ 931.720169][T18985] do_recvmmsg+0xdc7/0x22e0 [ 931.724671][T18985] __sys_recvmmsg+0x340/0x5f0 [ 931.729350][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.735417][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.741572][T18985] __do_fast_syscall_32+0x129/0x180 [ 931.746769][T18985] do_fast_syscall_32+0x6a/0xc0 [ 931.751653][T18985] do_SYSENTER_32+0x73/0x90 [ 931.756163][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.762472][T18985] [ 931.764791][T18985] Uninit was stored to memory at: [ 931.769821][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 931.775544][T18985] __msan_chain_origin+0x57/0xa0 [ 931.780481][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 931.785593][T18985] get_compat_msghdr+0x108/0x2b0 [ 931.790533][T18985] do_recvmmsg+0xdc7/0x22e0 [ 931.795041][T18985] __sys_recvmmsg+0x340/0x5f0 [ 931.799848][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 931.805914][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 931.812068][T18985] __do_fast_syscall_32+0x129/0x180 [ 931.817266][T18985] do_fast_syscall_32+0x6a/0xc0 [ 931.822114][T18985] do_SYSENTER_32+0x73/0x90 [ 931.826625][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 931.832935][T18985] [ 931.835255][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 931.841926][T18985] do_recvmmsg+0xc2/0x22e0 [ 931.846346][T18985] do_recvmmsg+0xc2/0x22e0 [ 932.976105][T18982] not chained 290000 origins [ 932.980737][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 932.989407][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.999460][T18982] Call Trace: [ 933.002761][T18982] dump_stack+0x21c/0x280 [ 933.007104][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 933.012832][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 933.018901][T18982] ? kmsan_get_metadata+0x116/0x180 [ 933.024104][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 933.029919][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 933.035989][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 933.041361][T18982] ? kmsan_get_metadata+0x116/0x180 [ 933.046567][T18982] ? kmsan_get_metadata+0x116/0x180 [ 933.051793][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 933.057433][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 933.063505][T18982] ? _copy_from_user+0x201/0x310 [ 933.068445][T18982] ? kmsan_get_metadata+0x116/0x180 [ 933.073650][T18982] __msan_chain_origin+0x57/0xa0 [ 933.078591][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 933.083712][T18982] get_compat_msghdr+0x108/0x2b0 [ 933.088660][T18982] do_recvmmsg+0xdc7/0x22e0 [ 933.093168][T18982] ? kmsan_get_metadata+0x116/0x180 [ 933.098372][T18982] ? kmsan_get_metadata+0x116/0x180 [ 933.103575][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 933.109212][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 933.114612][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 933.119384][T18982] __sys_recvmmsg+0x340/0x5f0 [ 933.124065][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 933.129870][T18982] ? kmsan_get_metadata+0x116/0x180 [ 933.135073][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.141163][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.147324][T18982] __do_fast_syscall_32+0x129/0x180 [ 933.152528][T18982] do_fast_syscall_32+0x6a/0xc0 [ 933.157394][T18982] do_SYSENTER_32+0x73/0x90 [ 933.161903][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.168315][T18982] RIP: 0023:0xf7fe5549 [ 933.172386][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 933.191994][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 933.200408][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 933.208384][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.216375][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 933.224350][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 933.232321][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 933.240290][T18982] Uninit was stored to memory at: [ 933.245322][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 933.251043][T18982] __msan_chain_origin+0x57/0xa0 [ 933.255980][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 933.261093][T18982] get_compat_msghdr+0x108/0x2b0 [ 933.266033][T18982] do_recvmmsg+0xdc7/0x22e0 [ 933.270536][T18982] __sys_recvmmsg+0x340/0x5f0 [ 933.275215][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.281316][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.287477][T18982] __do_fast_syscall_32+0x129/0x180 [ 933.292677][T18982] do_fast_syscall_32+0x6a/0xc0 [ 933.297529][T18982] do_SYSENTER_32+0x73/0x90 [ 933.302035][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.308780][T18982] [ 933.311099][T18982] Uninit was stored to memory at: [ 933.316130][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 933.321854][T18982] __msan_chain_origin+0x57/0xa0 [ 933.326811][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 933.331919][T18982] get_compat_msghdr+0x108/0x2b0 [ 933.336861][T18982] do_recvmmsg+0xdc7/0x22e0 [ 933.341373][T18982] __sys_recvmmsg+0x340/0x5f0 [ 933.346050][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.352119][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.358273][T18982] __do_fast_syscall_32+0x129/0x180 [ 933.363470][T18982] do_fast_syscall_32+0x6a/0xc0 [ 933.368322][T18982] do_SYSENTER_32+0x73/0x90 [ 933.373089][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.379401][T18982] [ 933.381717][T18982] Uninit was stored to memory at: [ 933.386746][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 933.392469][T18982] __msan_chain_origin+0x57/0xa0 [ 933.397406][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 933.402518][T18982] get_compat_msghdr+0x108/0x2b0 [ 933.407454][T18982] do_recvmmsg+0xdc7/0x22e0 [ 933.411960][T18982] __sys_recvmmsg+0x340/0x5f0 [ 933.416640][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.422707][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.428860][T18982] __do_fast_syscall_32+0x129/0x180 [ 933.434057][T18982] do_fast_syscall_32+0x6a/0xc0 [ 933.438907][T18982] do_SYSENTER_32+0x73/0x90 [ 933.443413][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.449722][T18982] [ 933.452037][T18982] Uninit was stored to memory at: [ 933.457067][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 933.462789][T18982] __msan_chain_origin+0x57/0xa0 [ 933.467723][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 933.472834][T18982] get_compat_msghdr+0x108/0x2b0 [ 933.477773][T18982] do_recvmmsg+0xdc7/0x22e0 [ 933.482284][T18982] __sys_recvmmsg+0x340/0x5f0 [ 933.486962][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.493028][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.499182][T18982] __do_fast_syscall_32+0x129/0x180 [ 933.504380][T18982] do_fast_syscall_32+0x6a/0xc0 [ 933.509236][T18982] do_SYSENTER_32+0x73/0x90 [ 933.513739][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.520051][T18982] [ 933.522369][T18982] Uninit was stored to memory at: [ 933.527404][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 933.533126][T18982] __msan_chain_origin+0x57/0xa0 [ 933.538065][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 933.543175][T18982] get_compat_msghdr+0x108/0x2b0 [ 933.548121][T18982] do_recvmmsg+0xdc7/0x22e0 [ 933.552623][T18982] __sys_recvmmsg+0x340/0x5f0 [ 933.557298][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.563364][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.569552][T18982] __do_fast_syscall_32+0x129/0x180 [ 933.574760][T18982] do_fast_syscall_32+0x6a/0xc0 [ 933.579620][T18982] do_SYSENTER_32+0x73/0x90 [ 933.584128][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.590438][T18982] [ 933.592756][T18982] Uninit was stored to memory at: [ 933.597789][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 933.603511][T18982] __msan_chain_origin+0x57/0xa0 [ 933.608449][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 933.613556][T18982] get_compat_msghdr+0x108/0x2b0 [ 933.618494][T18982] do_recvmmsg+0xdc7/0x22e0 [ 933.623001][T18982] __sys_recvmmsg+0x340/0x5f0 [ 933.627767][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.633832][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.639990][T18982] __do_fast_syscall_32+0x129/0x180 [ 933.645188][T18982] do_fast_syscall_32+0x6a/0xc0 [ 933.650045][T18982] do_SYSENTER_32+0x73/0x90 [ 933.654549][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.660862][T18982] [ 933.663178][T18982] Uninit was stored to memory at: [ 933.668205][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 933.673931][T18982] __msan_chain_origin+0x57/0xa0 [ 933.678869][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 933.683979][T18982] get_compat_msghdr+0x108/0x2b0 [ 933.688918][T18982] do_recvmmsg+0xdc7/0x22e0 [ 933.694406][T18982] __sys_recvmmsg+0x340/0x5f0 [ 933.699083][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 933.705154][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 933.711308][T18982] __do_fast_syscall_32+0x129/0x180 [ 933.716505][T18982] do_fast_syscall_32+0x6a/0xc0 [ 933.721357][T18982] do_SYSENTER_32+0x73/0x90 [ 933.725860][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 933.732168][T18982] [ 933.734488][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 933.741164][T18982] do_recvmmsg+0xc2/0x22e0 [ 933.745581][T18982] do_recvmmsg+0xc2/0x22e0 [ 934.286263][T18982] not chained 300000 origins [ 934.290892][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 934.299552][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.309595][T18982] Call Trace: [ 934.312882][T18982] dump_stack+0x21c/0x280 [ 934.317203][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 934.322917][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 934.328967][T18982] ? kmsan_get_metadata+0x116/0x180 [ 934.334152][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 934.339946][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 934.345997][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 934.351351][T18982] ? kmsan_get_metadata+0x116/0x180 [ 934.356537][T18982] ? kmsan_get_metadata+0x116/0x180 [ 934.361726][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 934.367346][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 934.373401][T18982] ? _copy_from_user+0x201/0x310 [ 934.378322][T18982] ? kmsan_get_metadata+0x116/0x180 [ 934.383512][T18982] __msan_chain_origin+0x57/0xa0 [ 934.388438][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 934.393541][T18982] get_compat_msghdr+0x108/0x2b0 [ 934.398470][T18982] do_recvmmsg+0xdc7/0x22e0 [ 934.402965][T18982] ? kmsan_get_metadata+0x116/0x180 [ 934.408153][T18982] ? kmsan_get_metadata+0x116/0x180 [ 934.413337][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 934.418958][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 934.424230][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 934.428993][T18982] __sys_recvmmsg+0x340/0x5f0 [ 934.433657][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 934.439447][T18982] ? kmsan_get_metadata+0x116/0x180 [ 934.444637][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.450693][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.456835][T18982] __do_fast_syscall_32+0x129/0x180 [ 934.462025][T18982] do_fast_syscall_32+0x6a/0xc0 [ 934.466866][T18982] do_SYSENTER_32+0x73/0x90 [ 934.471356][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.477664][T18982] RIP: 0023:0xf7fe5549 [ 934.481738][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 934.501330][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 934.509731][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 934.517690][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.525647][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.533604][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 934.541566][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.549528][T18982] Uninit was stored to memory at: [ 934.554566][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 934.560274][T18982] __msan_chain_origin+0x57/0xa0 [ 934.565201][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 934.570296][T18982] get_compat_msghdr+0x108/0x2b0 [ 934.575219][T18982] do_recvmmsg+0xdc7/0x22e0 [ 934.579722][T18982] __sys_recvmmsg+0x340/0x5f0 [ 934.584384][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.590434][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.596574][T18982] __do_fast_syscall_32+0x129/0x180 [ 934.601760][T18982] do_fast_syscall_32+0x6a/0xc0 [ 934.606596][T18982] do_SYSENTER_32+0x73/0x90 [ 934.611088][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.617388][T18982] [ 934.619695][T18982] Uninit was stored to memory at: [ 934.624722][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 934.630433][T18982] __msan_chain_origin+0x57/0xa0 [ 934.635377][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 934.640479][T18982] get_compat_msghdr+0x108/0x2b0 [ 934.645413][T18982] do_recvmmsg+0xdc7/0x22e0 [ 934.649911][T18982] __sys_recvmmsg+0x340/0x5f0 [ 934.654585][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.660640][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.666783][T18982] __do_fast_syscall_32+0x129/0x180 [ 934.671971][T18982] do_fast_syscall_32+0x6a/0xc0 [ 934.676807][T18982] do_SYSENTER_32+0x73/0x90 [ 934.681302][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.687614][T18982] [ 934.689921][T18982] Uninit was stored to memory at: [ 934.694933][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 934.700637][T18982] __msan_chain_origin+0x57/0xa0 [ 934.705559][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 934.710654][T18982] get_compat_msghdr+0x108/0x2b0 [ 934.715577][T18982] do_recvmmsg+0xdc7/0x22e0 [ 934.720064][T18982] __sys_recvmmsg+0x340/0x5f0 [ 934.724726][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.730777][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.736917][T18982] __do_fast_syscall_32+0x129/0x180 [ 934.742104][T18982] do_fast_syscall_32+0x6a/0xc0 [ 934.746940][T18982] do_SYSENTER_32+0x73/0x90 [ 934.751443][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.757744][T18982] [ 934.760048][T18982] Uninit was stored to memory at: [ 934.765069][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 934.770775][T18982] __msan_chain_origin+0x57/0xa0 [ 934.775710][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 934.780804][T18982] get_compat_msghdr+0x108/0x2b0 [ 934.785732][T18982] do_recvmmsg+0xdc7/0x22e0 [ 934.791263][T18982] __sys_recvmmsg+0x340/0x5f0 [ 934.795926][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.801978][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.808117][T18982] __do_fast_syscall_32+0x129/0x180 [ 934.813300][T18982] do_fast_syscall_32+0x6a/0xc0 [ 934.818146][T18982] do_SYSENTER_32+0x73/0x90 [ 934.822648][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.828946][T18982] [ 934.831251][T18982] Uninit was stored to memory at: [ 934.836283][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 934.841988][T18982] __msan_chain_origin+0x57/0xa0 [ 934.846910][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 934.852004][T18982] get_compat_msghdr+0x108/0x2b0 [ 934.856931][T18982] do_recvmmsg+0xdc7/0x22e0 [ 934.861421][T18982] __sys_recvmmsg+0x340/0x5f0 [ 934.866087][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.872139][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.878277][T18982] __do_fast_syscall_32+0x129/0x180 [ 934.883482][T18982] do_fast_syscall_32+0x6a/0xc0 [ 934.888318][T18982] do_SYSENTER_32+0x73/0x90 [ 934.892807][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.899111][T18982] [ 934.901420][T18982] Uninit was stored to memory at: [ 934.906445][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 934.912161][T18982] __msan_chain_origin+0x57/0xa0 [ 934.917082][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 934.929307][T18982] get_compat_msghdr+0x108/0x2b0 [ 934.934231][T18982] do_recvmmsg+0xdc7/0x22e0 [ 934.938720][T18982] __sys_recvmmsg+0x340/0x5f0 [ 934.943393][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 934.949449][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 934.955593][T18982] __do_fast_syscall_32+0x129/0x180 [ 934.960779][T18982] do_fast_syscall_32+0x6a/0xc0 [ 934.965614][T18982] do_SYSENTER_32+0x73/0x90 [ 934.970108][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 934.976415][T18982] [ 934.978741][T18982] Uninit was stored to memory at: [ 934.983770][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 934.989478][T18982] __msan_chain_origin+0x57/0xa0 [ 934.994401][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 934.999498][T18982] get_compat_msghdr+0x108/0x2b0 [ 935.004426][T18982] do_recvmmsg+0xdc7/0x22e0 [ 935.008919][T18982] __sys_recvmmsg+0x340/0x5f0 [ 935.013582][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 935.019648][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 935.025787][T18982] __do_fast_syscall_32+0x129/0x180 [ 935.030971][T18982] do_fast_syscall_32+0x6a/0xc0 [ 935.035808][T18982] do_SYSENTER_32+0x73/0x90 [ 935.040299][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 935.046599][T18982] [ 935.049015][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 935.055677][T18982] do_recvmmsg+0xc2/0x22e0 [ 935.060079][T18982] do_recvmmsg+0xc2/0x22e0 [ 936.621375][T18982] not chained 310000 origins [ 936.625999][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 936.634665][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.644721][T18982] Call Trace: [ 936.648097][T18982] dump_stack+0x21c/0x280 [ 936.652423][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 936.658132][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 936.664185][T18982] ? kmsan_get_metadata+0x116/0x180 [ 936.669375][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 936.675172][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 936.681224][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 936.686582][T18982] ? kmsan_get_metadata+0x116/0x180 [ 936.691765][T18982] ? kmsan_get_metadata+0x116/0x180 [ 936.696952][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 936.702574][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 936.708636][T18982] ? _copy_from_user+0x201/0x310 [ 936.713582][T18982] ? kmsan_get_metadata+0x116/0x180 [ 936.718769][T18982] __msan_chain_origin+0x57/0xa0 [ 936.723696][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 936.728797][T18982] get_compat_msghdr+0x108/0x2b0 [ 936.733726][T18982] do_recvmmsg+0xdc7/0x22e0 [ 936.738235][T18982] ? kmsan_get_metadata+0x116/0x180 [ 936.743425][T18982] ? kmsan_get_metadata+0x116/0x180 [ 936.748612][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 936.754252][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 936.759527][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 936.764277][T18982] __sys_recvmmsg+0x340/0x5f0 [ 936.768939][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 936.774728][T18982] ? kmsan_get_metadata+0x116/0x180 [ 936.779914][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 936.785972][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 936.792116][T18982] __do_fast_syscall_32+0x129/0x180 [ 936.797301][T18982] do_fast_syscall_32+0x6a/0xc0 [ 936.802142][T18982] do_SYSENTER_32+0x73/0x90 [ 936.806638][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 936.812946][T18982] RIP: 0023:0xf7fe5549 [ 936.817002][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 936.836590][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 936.844985][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 936.852941][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 936.860897][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 936.868852][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 936.876809][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 936.884765][T18982] Uninit was stored to memory at: [ 936.889778][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 936.895482][T18982] __msan_chain_origin+0x57/0xa0 [ 936.900405][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 936.905499][T18982] get_compat_msghdr+0x108/0x2b0 [ 936.910432][T18982] do_recvmmsg+0xdc7/0x22e0 [ 936.914920][T18982] __sys_recvmmsg+0x340/0x5f0 [ 936.919585][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 936.925643][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 936.931782][T18982] __do_fast_syscall_32+0x129/0x180 [ 936.936978][T18982] do_fast_syscall_32+0x6a/0xc0 [ 936.941812][T18982] do_SYSENTER_32+0x73/0x90 [ 936.946303][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 936.952604][T18982] [ 936.954913][T18982] Uninit was stored to memory at: [ 936.959926][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 936.965634][T18982] __msan_chain_origin+0x57/0xa0 [ 936.970557][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 936.975653][T18982] get_compat_msghdr+0x108/0x2b0 [ 936.980576][T18982] do_recvmmsg+0xdc7/0x22e0 [ 936.985064][T18982] __sys_recvmmsg+0x340/0x5f0 [ 936.989725][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 936.995778][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 937.001928][T18982] __do_fast_syscall_32+0x129/0x180 [ 937.007116][T18982] do_fast_syscall_32+0x6a/0xc0 [ 937.011954][T18982] do_SYSENTER_32+0x73/0x90 [ 937.016451][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 937.022753][T18982] [ 937.025065][T18982] Uninit was stored to memory at: [ 937.030086][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 937.035797][T18982] __msan_chain_origin+0x57/0xa0 [ 937.040720][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 937.045818][T18982] get_compat_msghdr+0x108/0x2b0 [ 937.050745][T18982] do_recvmmsg+0xdc7/0x22e0 [ 937.055235][T18982] __sys_recvmmsg+0x340/0x5f0 [ 937.059902][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 937.065955][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 937.072111][T18982] __do_fast_syscall_32+0x129/0x180 [ 937.077320][T18982] do_fast_syscall_32+0x6a/0xc0 [ 937.082170][T18982] do_SYSENTER_32+0x73/0x90 [ 937.086670][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 937.092981][T18982] [ 937.095291][T18982] Uninit was stored to memory at: [ 937.100309][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 937.106016][T18982] __msan_chain_origin+0x57/0xa0 [ 937.110937][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 937.116031][T18982] get_compat_msghdr+0x108/0x2b0 [ 937.120954][T18982] do_recvmmsg+0xdc7/0x22e0 [ 937.125446][T18982] __sys_recvmmsg+0x340/0x5f0 [ 937.130107][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 937.136163][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 937.142303][T18982] __do_fast_syscall_32+0x129/0x180 [ 937.147487][T18982] do_fast_syscall_32+0x6a/0xc0 [ 937.152323][T18982] do_SYSENTER_32+0x73/0x90 [ 937.156811][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 937.163111][T18982] [ 937.165421][T18982] Uninit was stored to memory at: [ 937.170445][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 937.176163][T18982] __msan_chain_origin+0x57/0xa0 [ 937.181090][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 937.186192][T18982] get_compat_msghdr+0x108/0x2b0 [ 937.191128][T18982] do_recvmmsg+0xdc7/0x22e0 [ 937.195627][T18982] __sys_recvmmsg+0x340/0x5f0 [ 937.200297][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 937.206352][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 937.212496][T18982] __do_fast_syscall_32+0x129/0x180 [ 937.217679][T18982] do_fast_syscall_32+0x6a/0xc0 [ 937.222515][T18982] do_SYSENTER_32+0x73/0x90 [ 937.227005][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 937.233304][T18982] [ 937.235612][T18982] Uninit was stored to memory at: [ 937.240624][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 937.246343][T18982] __msan_chain_origin+0x57/0xa0 [ 937.251266][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 937.256361][T18982] get_compat_msghdr+0x108/0x2b0 [ 937.261285][T18982] do_recvmmsg+0xdc7/0x22e0 [ 937.265773][T18982] __sys_recvmmsg+0x340/0x5f0 [ 937.270436][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 937.276489][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 937.282628][T18982] __do_fast_syscall_32+0x129/0x180 [ 937.287810][T18982] do_fast_syscall_32+0x6a/0xc0 [ 937.292645][T18982] do_SYSENTER_32+0x73/0x90 [ 937.297132][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 937.303431][T18982] [ 937.305760][T18982] Uninit was stored to memory at: [ 937.310770][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 937.316476][T18982] __msan_chain_origin+0x57/0xa0 [ 937.321398][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 937.326492][T18982] get_compat_msghdr+0x108/0x2b0 [ 937.331414][T18982] do_recvmmsg+0xdc7/0x22e0 [ 937.335904][T18982] __sys_recvmmsg+0x340/0x5f0 [ 937.340568][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 937.346620][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 937.352759][T18982] __do_fast_syscall_32+0x129/0x180 [ 937.357941][T18982] do_fast_syscall_32+0x6a/0xc0 [ 937.362779][T18982] do_SYSENTER_32+0x73/0x90 [ 937.367268][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 937.373566][T18982] [ 937.375888][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 937.382547][T18982] do_recvmmsg+0xc2/0x22e0 [ 937.386948][T18982] do_recvmmsg+0xc2/0x22e0 [ 938.084889][T18985] not chained 320000 origins [ 938.089513][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 938.098176][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.108290][T18985] Call Trace: [ 938.111583][T18985] dump_stack+0x21c/0x280 [ 938.115921][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 938.121647][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 938.127716][T18985] ? kmsan_get_metadata+0x116/0x180 [ 938.132913][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 938.139872][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 938.145935][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 938.151304][T18985] ? kmsan_get_metadata+0x116/0x180 [ 938.156506][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 938.162142][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 938.168213][T18985] ? _copy_from_user+0x201/0x310 [ 938.173149][T18985] ? kmsan_get_metadata+0x116/0x180 [ 938.178352][T18985] __msan_chain_origin+0x57/0xa0 [ 938.183292][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 938.188407][T18985] get_compat_msghdr+0x108/0x2b0 [ 938.193353][T18985] do_recvmmsg+0xdc7/0x22e0 [ 938.197859][T18985] ? kmsan_get_metadata+0x116/0x180 [ 938.203066][T18985] ? kmsan_get_metadata+0x116/0x180 [ 938.208271][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 938.213909][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 938.219197][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 938.223962][T18985] __sys_recvmmsg+0x340/0x5f0 [ 938.228642][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 938.234449][T18985] ? kmsan_get_metadata+0x116/0x180 [ 938.239660][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.245730][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.251883][T18985] __do_fast_syscall_32+0x129/0x180 [ 938.257084][T18985] do_fast_syscall_32+0x6a/0xc0 [ 938.261936][T18985] do_SYSENTER_32+0x73/0x90 [ 938.266442][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.272763][T18985] RIP: 0023:0xf7fe5549 [ 938.276832][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 938.296436][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 938.304848][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 938.312816][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 938.320783][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 938.328750][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 938.336718][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 938.344687][T18985] Uninit was stored to memory at: [ 938.349721][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 938.355440][T18985] __msan_chain_origin+0x57/0xa0 [ 938.360374][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 938.365483][T18985] get_compat_msghdr+0x108/0x2b0 [ 938.370422][T18985] do_recvmmsg+0xdc7/0x22e0 [ 938.374924][T18985] __sys_recvmmsg+0x340/0x5f0 [ 938.379597][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.386012][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.392161][T18985] __do_fast_syscall_32+0x129/0x180 [ 938.397353][T18985] do_fast_syscall_32+0x6a/0xc0 [ 938.402199][T18985] do_SYSENTER_32+0x73/0x90 [ 938.406700][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.413009][T18985] [ 938.415328][T18985] Uninit was stored to memory at: [ 938.420364][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 938.426083][T18985] __msan_chain_origin+0x57/0xa0 [ 938.431015][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 938.436121][T18985] get_compat_msghdr+0x108/0x2b0 [ 938.441060][T18985] do_recvmmsg+0xdc7/0x22e0 [ 938.445566][T18985] __sys_recvmmsg+0x340/0x5f0 [ 938.450243][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.456318][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.462468][T18985] __do_fast_syscall_32+0x129/0x180 [ 938.467671][T18985] do_fast_syscall_32+0x6a/0xc0 [ 938.472518][T18985] do_SYSENTER_32+0x73/0x90 [ 938.477022][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.483333][T18985] [ 938.485669][T18985] Uninit was stored to memory at: [ 938.490695][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 938.496416][T18985] __msan_chain_origin+0x57/0xa0 [ 938.501463][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 938.506572][T18985] get_compat_msghdr+0x108/0x2b0 [ 938.511509][T18985] do_recvmmsg+0xdc7/0x22e0 [ 938.516011][T18985] __sys_recvmmsg+0x340/0x5f0 [ 938.520685][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.526749][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.532901][T18985] __do_fast_syscall_32+0x129/0x180 [ 938.538100][T18985] do_fast_syscall_32+0x6a/0xc0 [ 938.542949][T18985] do_SYSENTER_32+0x73/0x90 [ 938.547456][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.553767][T18985] [ 938.556086][T18985] Uninit was stored to memory at: [ 938.561109][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 938.566828][T18985] __msan_chain_origin+0x57/0xa0 [ 938.571764][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 938.576873][T18985] get_compat_msghdr+0x108/0x2b0 [ 938.581812][T18985] do_recvmmsg+0xdc7/0x22e0 [ 938.586315][T18985] __sys_recvmmsg+0x340/0x5f0 [ 938.590993][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.597063][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.603217][T18985] __do_fast_syscall_32+0x129/0x180 [ 938.608416][T18985] do_fast_syscall_32+0x6a/0xc0 [ 938.613268][T18985] do_SYSENTER_32+0x73/0x90 [ 938.617772][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.624084][T18985] [ 938.626400][T18985] Uninit was stored to memory at: [ 938.631426][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 938.637144][T18985] __msan_chain_origin+0x57/0xa0 [ 938.642080][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 938.647190][T18985] get_compat_msghdr+0x108/0x2b0 [ 938.652130][T18985] do_recvmmsg+0xdc7/0x22e0 [ 938.656634][T18985] __sys_recvmmsg+0x340/0x5f0 [ 938.661314][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.667378][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.673529][T18985] __do_fast_syscall_32+0x129/0x180 [ 938.678727][T18985] do_fast_syscall_32+0x6a/0xc0 [ 938.683576][T18985] do_SYSENTER_32+0x73/0x90 [ 938.688080][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.694392][T18985] [ 938.696711][T18985] Uninit was stored to memory at: [ 938.701738][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 938.707462][T18985] __msan_chain_origin+0x57/0xa0 [ 938.712396][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 938.717505][T18985] get_compat_msghdr+0x108/0x2b0 [ 938.722444][T18985] do_recvmmsg+0xdc7/0x22e0 [ 938.726947][T18985] __sys_recvmmsg+0x340/0x5f0 [ 938.731624][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.737691][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.743848][T18985] __do_fast_syscall_32+0x129/0x180 [ 938.749042][T18985] do_fast_syscall_32+0x6a/0xc0 [ 938.753890][T18985] do_SYSENTER_32+0x73/0x90 [ 938.758393][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.764786][T18985] [ 938.767101][T18985] Uninit was stored to memory at: [ 938.772128][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 938.777847][T18985] __msan_chain_origin+0x57/0xa0 [ 938.782782][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 938.787888][T18985] get_compat_msghdr+0x108/0x2b0 [ 938.792827][T18985] do_recvmmsg+0xdc7/0x22e0 [ 938.797329][T18985] __sys_recvmmsg+0x340/0x5f0 [ 938.802004][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 938.808067][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 938.814217][T18985] __do_fast_syscall_32+0x129/0x180 [ 938.819441][T18985] do_fast_syscall_32+0x6a/0xc0 [ 938.824291][T18985] do_SYSENTER_32+0x73/0x90 [ 938.828796][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 938.835105][T18985] [ 938.837427][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 938.844103][T18985] do_recvmmsg+0xc2/0x22e0 [ 938.848518][T18985] do_recvmmsg+0xc2/0x22e0 [ 939.882798][T18982] not chained 330000 origins [ 939.887435][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 939.896101][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.906149][T18982] Call Trace: [ 939.909445][T18982] dump_stack+0x21c/0x280 [ 939.913783][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 939.919511][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 939.925577][T18982] ? kmsan_get_metadata+0x116/0x180 [ 939.930794][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 939.936601][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 939.942673][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 939.948044][T18982] ? kmsan_get_metadata+0x116/0x180 [ 939.953250][T18982] ? kmsan_get_metadata+0x116/0x180 [ 939.958455][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 939.964092][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 939.970160][T18982] ? _copy_from_user+0x201/0x310 [ 939.975098][T18982] ? kmsan_get_metadata+0x116/0x180 [ 939.980298][T18982] __msan_chain_origin+0x57/0xa0 [ 939.985237][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 939.990356][T18982] get_compat_msghdr+0x108/0x2b0 [ 939.995398][T18982] do_recvmmsg+0xdc7/0x22e0 [ 939.999905][T18982] ? kmsan_get_metadata+0x116/0x180 [ 940.005109][T18982] ? kmsan_get_metadata+0x116/0x180 [ 940.010317][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 940.015955][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 940.021353][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 940.026121][T18982] __sys_recvmmsg+0x340/0x5f0 [ 940.030807][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 940.036608][T18982] ? kmsan_get_metadata+0x116/0x180 [ 940.041812][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.047887][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.054045][T18982] __do_fast_syscall_32+0x129/0x180 [ 940.059249][T18982] do_fast_syscall_32+0x6a/0xc0 [ 940.064106][T18982] do_SYSENTER_32+0x73/0x90 [ 940.068650][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.074970][T18982] RIP: 0023:0xf7fe5549 [ 940.079034][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 940.098715][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 940.107113][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 940.115072][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 940.123039][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 940.130997][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 940.138955][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 940.146913][T18982] Uninit was stored to memory at: [ 940.151935][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 940.157647][T18982] __msan_chain_origin+0x57/0xa0 [ 940.162571][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 940.167671][T18982] get_compat_msghdr+0x108/0x2b0 [ 940.172599][T18982] do_recvmmsg+0xdc7/0x22e0 [ 940.177102][T18982] __sys_recvmmsg+0x340/0x5f0 [ 940.181771][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.187829][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.193973][T18982] __do_fast_syscall_32+0x129/0x180 [ 940.199161][T18982] do_fast_syscall_32+0x6a/0xc0 [ 940.204002][T18982] do_SYSENTER_32+0x73/0x90 [ 940.208501][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.214808][T18982] [ 940.217123][T18982] Uninit was stored to memory at: [ 940.222155][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 940.227861][T18982] __msan_chain_origin+0x57/0xa0 [ 940.232782][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 940.237980][T18982] get_compat_msghdr+0x108/0x2b0 [ 940.242910][T18982] do_recvmmsg+0xdc7/0x22e0 [ 940.247408][T18982] __sys_recvmmsg+0x340/0x5f0 [ 940.252070][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.258122][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.264275][T18982] __do_fast_syscall_32+0x129/0x180 [ 940.269460][T18982] do_fast_syscall_32+0x6a/0xc0 [ 940.274308][T18982] do_SYSENTER_32+0x73/0x90 [ 940.278805][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.285106][T18982] [ 940.287413][T18982] Uninit was stored to memory at: [ 940.292424][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 940.298128][T18982] __msan_chain_origin+0x57/0xa0 [ 940.303048][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 940.308145][T18982] get_compat_msghdr+0x108/0x2b0 [ 940.313069][T18982] do_recvmmsg+0xdc7/0x22e0 [ 940.317558][T18982] __sys_recvmmsg+0x340/0x5f0 [ 940.322219][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.328271][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.334412][T18982] __do_fast_syscall_32+0x129/0x180 [ 940.339592][T18982] do_fast_syscall_32+0x6a/0xc0 [ 940.344426][T18982] do_SYSENTER_32+0x73/0x90 [ 940.348915][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.355216][T18982] [ 940.357524][T18982] Uninit was stored to memory at: [ 940.362537][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 940.368244][T18982] __msan_chain_origin+0x57/0xa0 [ 940.373169][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 940.378262][T18982] get_compat_msghdr+0x108/0x2b0 [ 940.383186][T18982] do_recvmmsg+0xdc7/0x22e0 [ 940.387691][T18982] __sys_recvmmsg+0x340/0x5f0 [ 940.392355][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.398407][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.404558][T18982] __do_fast_syscall_32+0x129/0x180 [ 940.409744][T18982] do_fast_syscall_32+0x6a/0xc0 [ 940.414579][T18982] do_SYSENTER_32+0x73/0x90 [ 940.419068][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.425370][T18982] [ 940.427686][T18982] Uninit was stored to memory at: [ 940.432697][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 940.438404][T18982] __msan_chain_origin+0x57/0xa0 [ 940.443360][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 940.448456][T18982] get_compat_msghdr+0x108/0x2b0 [ 940.453380][T18982] do_recvmmsg+0xdc7/0x22e0 [ 940.457872][T18982] __sys_recvmmsg+0x340/0x5f0 [ 940.462534][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.468587][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.474725][T18982] __do_fast_syscall_32+0x129/0x180 [ 940.479922][T18982] do_fast_syscall_32+0x6a/0xc0 [ 940.484846][T18982] do_SYSENTER_32+0x73/0x90 [ 940.489335][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.495636][T18982] [ 940.497944][T18982] Uninit was stored to memory at: [ 940.503058][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 940.508764][T18982] __msan_chain_origin+0x57/0xa0 [ 940.513685][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 940.518782][T18982] get_compat_msghdr+0x108/0x2b0 [ 940.523710][T18982] do_recvmmsg+0xdc7/0x22e0 [ 940.528198][T18982] __sys_recvmmsg+0x340/0x5f0 [ 940.532861][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.538912][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.545051][T18982] __do_fast_syscall_32+0x129/0x180 [ 940.550235][T18982] do_fast_syscall_32+0x6a/0xc0 [ 940.555072][T18982] do_SYSENTER_32+0x73/0x90 [ 940.559562][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.565862][T18982] [ 940.568189][T18982] Uninit was stored to memory at: [ 940.573202][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 940.578905][T18982] __msan_chain_origin+0x57/0xa0 [ 940.583826][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 940.588920][T18982] get_compat_msghdr+0x108/0x2b0 [ 940.593845][T18982] do_recvmmsg+0xdc7/0x22e0 [ 940.598335][T18982] __sys_recvmmsg+0x340/0x5f0 [ 940.603016][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 940.609067][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 940.615205][T18982] __do_fast_syscall_32+0x129/0x180 [ 940.620388][T18982] do_fast_syscall_32+0x6a/0xc0 [ 940.625226][T18982] do_SYSENTER_32+0x73/0x90 [ 940.629716][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 940.636014][T18982] [ 940.638321][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 940.644979][T18982] do_recvmmsg+0xc2/0x22e0 [ 940.649380][T18982] do_recvmmsg+0xc2/0x22e0 [ 942.020279][T18985] not chained 340000 origins [ 942.024899][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 942.033560][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.043609][T18985] Call Trace: [ 942.046907][T18985] dump_stack+0x21c/0x280 [ 942.051241][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 942.056961][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 942.063028][T18985] ? kmsan_get_metadata+0x116/0x180 [ 942.068229][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 942.074040][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 942.080104][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 942.085479][T18985] ? kmsan_get_metadata+0x116/0x180 [ 942.090679][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 942.096312][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 942.102393][T18985] ? _copy_from_user+0x201/0x310 [ 942.107325][T18985] ? kmsan_get_metadata+0x116/0x180 [ 942.112524][T18985] __msan_chain_origin+0x57/0xa0 [ 942.117461][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 942.122575][T18985] get_compat_msghdr+0x108/0x2b0 [ 942.127516][T18985] do_recvmmsg+0xdc7/0x22e0 [ 942.132021][T18985] ? kmsan_get_metadata+0x116/0x180 [ 942.137222][T18985] ? kmsan_get_metadata+0x116/0x180 [ 942.142421][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 942.148052][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 942.153336][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 942.158099][T18985] __sys_recvmmsg+0x340/0x5f0 [ 942.162773][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 942.168578][T18985] ? kmsan_get_metadata+0x116/0x180 [ 942.173781][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.179848][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.186004][T18985] __do_fast_syscall_32+0x129/0x180 [ 942.191719][T18985] do_fast_syscall_32+0x6a/0xc0 [ 942.196572][T18985] do_SYSENTER_32+0x73/0x90 [ 942.201075][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.207397][T18985] RIP: 0023:0xf7fe5549 [ 942.211464][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 942.231072][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 942.239486][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 942.247176][T18982] not chained 350000 origins [ 942.247459][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 942.259965][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.267917][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 942.275868][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.283824][T18985] Uninit was stored to memory at: [ 942.283837][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 942.283853][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.288863][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 942.297491][T18982] Call Trace: [ 942.307535][T18985] __msan_chain_origin+0x57/0xa0 [ 942.313227][T18982] dump_stack+0x21c/0x280 [ 942.316494][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 942.321405][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 942.325703][T18985] get_compat_msghdr+0x108/0x2b0 [ 942.330793][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 942.336482][T18985] do_recvmmsg+0xdc7/0x22e0 [ 942.341408][T18982] ? kmsan_get_metadata+0x116/0x180 [ 942.347466][T18985] __sys_recvmmsg+0x340/0x5f0 [ 942.351951][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 942.357124][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.361773][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 942.367547][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.373583][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 942.379624][T18985] __do_fast_syscall_32+0x129/0x180 [ 942.385743][T18982] ? kmsan_get_metadata+0x116/0x180 [ 942.391089][T18985] do_fast_syscall_32+0x6a/0xc0 [ 942.396256][T18982] ? kmsan_get_metadata+0x116/0x180 [ 942.401426][T18985] do_SYSENTER_32+0x73/0x90 [ 942.406261][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 942.411429][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.415903][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 942.421491][T18985] [ 942.427804][T18982] ? _copy_from_user+0x201/0x310 [ 942.433823][T18985] Uninit was stored to memory at: [ 942.436136][T18982] ? kmsan_get_metadata+0x116/0x180 [ 942.441058][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 942.446052][T18982] __msan_chain_origin+0x57/0xa0 [ 942.451220][T18985] __msan_chain_origin+0x57/0xa0 [ 942.456909][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 942.461817][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 942.466729][T18982] get_compat_msghdr+0x108/0x2b0 [ 942.471799][T18985] get_compat_msghdr+0x108/0x2b0 [ 942.471823][T18985] do_recvmmsg+0xdc7/0x22e0 [ 942.476906][T18982] do_recvmmsg+0xdc7/0x22e0 [ 942.481814][T18985] __sys_recvmmsg+0x340/0x5f0 [ 942.486721][T18982] ? kmsan_get_metadata+0x116/0x180 [ 942.491196][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.495669][T18982] ? kmsan_get_metadata+0x116/0x180 [ 942.500324][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.505495][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 942.511529][T18985] __do_fast_syscall_32+0x129/0x180 [ 942.516699][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 942.522831][T18985] do_fast_syscall_32+0x6a/0xc0 [ 942.528451][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 942.533616][T18985] do_SYSENTER_32+0x73/0x90 [ 942.538876][T18982] __sys_recvmmsg+0x340/0x5f0 [ 942.543699][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.548443][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 942.552904][T18985] [ 942.557561][T18982] ? kmsan_get_metadata+0x116/0x180 [ 942.563845][T18985] Uninit was stored to memory at: [ 942.569632][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.571936][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 942.577104][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.582117][T18985] __msan_chain_origin+0x57/0xa0 [ 942.588156][T18982] __do_fast_syscall_32+0x129/0x180 [ 942.593841][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 942.599967][T18982] do_fast_syscall_32+0x6a/0xc0 [ 942.604885][T18985] get_compat_msghdr+0x108/0x2b0 [ 942.610143][T18982] do_SYSENTER_32+0x73/0x90 [ 942.615228][T18985] do_recvmmsg+0xdc7/0x22e0 [ 942.620052][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.624961][T18985] __sys_recvmmsg+0x340/0x5f0 [ 942.629429][T18982] RIP: 0023:0xf7fe5549 [ 942.633920][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.640220][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 942.644873][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.648900][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 942.654946][T18985] __do_fast_syscall_32+0x129/0x180 [ 942.674517][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 942.680659][T18985] do_fast_syscall_32+0x6a/0xc0 [ 942.689032][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 942.694208][T18985] do_SYSENTER_32+0x73/0x90 [ 942.702149][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.706978][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.714917][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 942.719384][T18985] [ 942.727346][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.733637][T18985] Uninit was stored to memory at: [ 942.741585][T18982] Uninit was stored to memory at: [ 942.743902][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 942.751845][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 942.756837][T18985] __msan_chain_origin+0x57/0xa0 [ 942.761831][T18982] __msan_chain_origin+0x57/0xa0 [ 942.767517][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 942.773205][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 942.778111][T18985] get_compat_msghdr+0x108/0x2b0 [ 942.783019][T18982] get_compat_msghdr+0x108/0x2b0 [ 942.788105][T18985] do_recvmmsg+0xdc7/0x22e0 [ 942.793185][T18982] do_recvmmsg+0xdc7/0x22e0 [ 942.798092][T18985] __sys_recvmmsg+0x340/0x5f0 [ 942.803000][T18982] __sys_recvmmsg+0x340/0x5f0 [ 942.807475][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.811950][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.816595][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.821245][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.827280][T18985] __do_fast_syscall_32+0x129/0x180 [ 942.833315][T18982] __do_fast_syscall_32+0x129/0x180 [ 942.839523][T18985] do_fast_syscall_32+0x6a/0xc0 [ 942.845664][T18982] do_fast_syscall_32+0x6a/0xc0 [ 942.850829][T18985] do_SYSENTER_32+0x73/0x90 [ 942.855998][T18982] do_SYSENTER_32+0x73/0x90 [ 942.860821][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.865641][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.870101][T18985] [ 942.874576][T18982] [ 942.880870][T18985] Uninit was stored to memory at: [ 942.887167][T18982] Uninit was stored to memory at: [ 942.889484][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 942.891791][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 942.896778][T18985] __msan_chain_origin+0x57/0xa0 [ 942.901774][T18982] __msan_chain_origin+0x57/0xa0 [ 942.907472][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 942.913160][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 942.918069][T18985] get_compat_msghdr+0x108/0x2b0 [ 942.922978][T18982] get_compat_msghdr+0x108/0x2b0 [ 942.928062][T18985] do_recvmmsg+0xdc7/0x22e0 [ 942.933143][T18982] do_recvmmsg+0xdc7/0x22e0 [ 942.938064][T18985] __sys_recvmmsg+0x340/0x5f0 [ 942.942972][T18982] __sys_recvmmsg+0x340/0x5f0 [ 942.947447][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.951930][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.956582][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.961233][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.967272][T18985] __do_fast_syscall_32+0x129/0x180 [ 942.973309][T18982] __do_fast_syscall_32+0x129/0x180 [ 942.979435][T18985] do_fast_syscall_32+0x6a/0xc0 [ 942.985558][T18982] do_fast_syscall_32+0x6a/0xc0 [ 942.990728][T18985] do_SYSENTER_32+0x73/0x90 [ 942.995910][T18982] do_SYSENTER_32+0x73/0x90 [ 943.000738][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.005572][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.010034][T18985] [ 943.014509][T18982] [ 943.020812][T18985] Uninit was stored to memory at: [ 943.027112][T18982] Uninit was stored to memory at: [ 943.029434][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 943.031733][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 943.036731][T18985] __msan_chain_origin+0x57/0xa0 [ 943.041743][T18982] __msan_chain_origin+0x57/0xa0 [ 943.047431][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 943.053118][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 943.058025][T18985] get_compat_msghdr+0x108/0x2b0 [ 943.062977][T18982] get_compat_msghdr+0x108/0x2b0 [ 943.068060][T18985] do_recvmmsg+0xdc7/0x22e0 [ 943.073147][T18982] do_recvmmsg+0xdc7/0x22e0 [ 943.078050][T18985] __sys_recvmmsg+0x340/0x5f0 [ 943.082958][T18982] __sys_recvmmsg+0x340/0x5f0 [ 943.087431][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.091904][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.096549][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.101198][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.107234][T18985] __do_fast_syscall_32+0x129/0x180 [ 943.113267][T18982] __do_fast_syscall_32+0x129/0x180 [ 943.119388][T18985] do_fast_syscall_32+0x6a/0xc0 [ 943.125511][T18982] do_fast_syscall_32+0x6a/0xc0 [ 943.130680][T18985] do_SYSENTER_32+0x73/0x90 [ 943.135849][T18982] do_SYSENTER_32+0x73/0x90 [ 943.140674][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.145498][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.149969][T18985] [ 943.154443][T18982] [ 943.160739][T18985] Uninit was stored to memory at: [ 943.167032][T18982] Uninit was stored to memory at: [ 943.169360][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 943.171669][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 943.176663][T18985] __msan_chain_origin+0x57/0xa0 [ 943.181666][T18982] __msan_chain_origin+0x57/0xa0 [ 943.187358][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 943.193050][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 943.197959][T18985] get_compat_msghdr+0x108/0x2b0 [ 943.202870][T18982] get_compat_msghdr+0x108/0x2b0 [ 943.207953][T18985] do_recvmmsg+0xdc7/0x22e0 [ 943.213038][T18982] do_recvmmsg+0xdc7/0x22e0 [ 943.217956][T18985] __sys_recvmmsg+0x340/0x5f0 [ 943.222877][T18982] __sys_recvmmsg+0x340/0x5f0 [ 943.227360][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.231835][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.236483][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.241131][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.247170][T18985] __do_fast_syscall_32+0x129/0x180 [ 943.253202][T18982] __do_fast_syscall_32+0x129/0x180 [ 943.259327][T18985] do_fast_syscall_32+0x6a/0xc0 [ 943.265451][T18982] do_fast_syscall_32+0x6a/0xc0 [ 943.270620][T18985] do_SYSENTER_32+0x73/0x90 [ 943.275790][T18982] do_SYSENTER_32+0x73/0x90 [ 943.280610][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.285431][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.289889][T18985] [ 943.294360][T18982] [ 943.300657][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 943.306950][T18982] Uninit was stored to memory at: [ 943.309262][T18985] do_recvmmsg+0xc2/0x22e0 [ 943.311572][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 943.318214][T18985] do_recvmmsg+0xc2/0x22e0 [ 943.323220][T18982] __msan_chain_origin+0x57/0xa0 [ 943.342619][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 943.347802][T18982] get_compat_msghdr+0x108/0x2b0 [ 943.352769][T18982] do_recvmmsg+0xdc7/0x22e0 [ 943.357282][T18982] __sys_recvmmsg+0x340/0x5f0 [ 943.361959][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.368026][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.374177][T18982] __do_fast_syscall_32+0x129/0x180 [ 943.379363][T18982] do_fast_syscall_32+0x6a/0xc0 [ 943.384198][T18982] do_SYSENTER_32+0x73/0x90 [ 943.388690][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.394990][T18982] [ 943.397298][T18982] Uninit was stored to memory at: [ 943.402313][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 943.408018][T18982] __msan_chain_origin+0x57/0xa0 [ 943.412940][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 943.418035][T18982] get_compat_msghdr+0x108/0x2b0 [ 943.422959][T18982] do_recvmmsg+0xdc7/0x22e0 [ 943.427450][T18982] __sys_recvmmsg+0x340/0x5f0 [ 943.432113][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.438212][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.444352][T18982] __do_fast_syscall_32+0x129/0x180 [ 943.449539][T18982] do_fast_syscall_32+0x6a/0xc0 [ 943.454374][T18982] do_SYSENTER_32+0x73/0x90 [ 943.458865][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.465165][T18982] [ 943.467483][T18982] Uninit was stored to memory at: [ 943.472499][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 943.478202][T18982] __msan_chain_origin+0x57/0xa0 [ 943.483124][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 943.488219][T18982] get_compat_msghdr+0x108/0x2b0 [ 943.493144][T18982] do_recvmmsg+0xdc7/0x22e0 [ 943.497636][T18982] __sys_recvmmsg+0x340/0x5f0 [ 943.502314][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.508376][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.514515][T18982] __do_fast_syscall_32+0x129/0x180 [ 943.519711][T18982] do_fast_syscall_32+0x6a/0xc0 [ 943.524547][T18982] do_SYSENTER_32+0x73/0x90 [ 943.529038][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.535336][T18982] [ 943.537645][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 943.544305][T18982] do_recvmmsg+0xc2/0x22e0 [ 943.548705][T18982] do_recvmmsg+0xc2/0x22e0 [ 944.448588][T18985] not chained 360000 origins [ 944.453238][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 944.461902][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.471952][T18985] Call Trace: [ 944.475244][T18985] dump_stack+0x21c/0x280 [ 944.479581][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 944.485304][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 944.491372][T18985] ? kmsan_get_metadata+0x116/0x180 [ 944.496569][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 944.502480][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 944.508547][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 944.513915][T18985] ? kmsan_get_metadata+0x116/0x180 [ 944.519118][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 944.524756][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 944.530828][T18985] ? _copy_from_user+0x201/0x310 [ 944.535769][T18985] ? kmsan_get_metadata+0x116/0x180 [ 944.540973][T18985] __msan_chain_origin+0x57/0xa0 [ 944.545916][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 944.551034][T18985] get_compat_msghdr+0x108/0x2b0 [ 944.555978][T18985] do_recvmmsg+0xdc7/0x22e0 [ 944.560486][T18985] ? kmsan_get_metadata+0x116/0x180 [ 944.565691][T18985] ? kmsan_get_metadata+0x116/0x180 [ 944.570911][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 944.576551][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 944.581841][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 944.586607][T18985] __sys_recvmmsg+0x340/0x5f0 [ 944.591293][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 944.597186][T18985] ? kmsan_get_metadata+0x116/0x180 [ 944.602385][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.608455][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.614608][T18985] __do_fast_syscall_32+0x129/0x180 [ 944.619809][T18985] do_fast_syscall_32+0x6a/0xc0 [ 944.624668][T18985] do_SYSENTER_32+0x73/0x90 [ 944.629175][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.635522][T18985] RIP: 0023:0xf7fe5549 [ 944.639589][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 944.659193][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 944.667606][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 944.675577][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 944.683547][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 944.691515][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 944.699484][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 944.707450][T18985] Uninit was stored to memory at: [ 944.712481][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 944.718200][T18985] __msan_chain_origin+0x57/0xa0 [ 944.723137][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 944.728245][T18985] get_compat_msghdr+0x108/0x2b0 [ 944.733182][T18985] do_recvmmsg+0xdc7/0x22e0 [ 944.737686][T18985] __sys_recvmmsg+0x340/0x5f0 [ 944.742359][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.748427][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.754580][T18985] __do_fast_syscall_32+0x129/0x180 [ 944.759775][T18985] do_fast_syscall_32+0x6a/0xc0 [ 944.764622][T18985] do_SYSENTER_32+0x73/0x90 [ 944.769129][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.775439][T18985] [ 944.777754][T18985] Uninit was stored to memory at: [ 944.782778][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 944.788494][T18985] __msan_chain_origin+0x57/0xa0 [ 944.793432][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 944.798547][T18985] get_compat_msghdr+0x108/0x2b0 [ 944.803485][T18985] do_recvmmsg+0xdc7/0x22e0 [ 944.807986][T18985] __sys_recvmmsg+0x340/0x5f0 [ 944.812665][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.818731][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.824890][T18985] __do_fast_syscall_32+0x129/0x180 [ 944.830087][T18985] do_fast_syscall_32+0x6a/0xc0 [ 944.834934][T18985] do_SYSENTER_32+0x73/0x90 [ 944.839437][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.845745][T18985] [ 944.848068][T18985] Uninit was stored to memory at: [ 944.853095][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 944.858815][T18985] __msan_chain_origin+0x57/0xa0 [ 944.863752][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 944.868863][T18985] get_compat_msghdr+0x108/0x2b0 [ 944.873808][T18985] do_recvmmsg+0xdc7/0x22e0 [ 944.878307][T18985] __sys_recvmmsg+0x340/0x5f0 [ 944.882979][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.889042][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.895197][T18985] __do_fast_syscall_32+0x129/0x180 [ 944.900392][T18985] do_fast_syscall_32+0x6a/0xc0 [ 944.905242][T18985] do_SYSENTER_32+0x73/0x90 [ 944.909744][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.916053][T18985] [ 944.918369][T18985] Uninit was stored to memory at: [ 944.923396][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 944.929115][T18985] __msan_chain_origin+0x57/0xa0 [ 944.934050][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 944.939153][T18985] get_compat_msghdr+0x108/0x2b0 [ 944.944108][T18985] do_recvmmsg+0xdc7/0x22e0 [ 944.948611][T18985] __sys_recvmmsg+0x340/0x5f0 [ 944.953284][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.959349][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.965501][T18985] __do_fast_syscall_32+0x129/0x180 [ 944.970697][T18985] do_fast_syscall_32+0x6a/0xc0 [ 944.975546][T18985] do_SYSENTER_32+0x73/0x90 [ 944.980050][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.986364][T18985] [ 944.988685][T18985] Uninit was stored to memory at: [ 944.993709][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 944.999429][T18985] __msan_chain_origin+0x57/0xa0 [ 945.004369][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 945.009480][T18985] get_compat_msghdr+0x108/0x2b0 [ 945.014417][T18985] do_recvmmsg+0xdc7/0x22e0 [ 945.018919][T18985] __sys_recvmmsg+0x340/0x5f0 [ 945.023593][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.029659][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.035813][T18985] __do_fast_syscall_32+0x129/0x180 [ 945.041007][T18985] do_fast_syscall_32+0x6a/0xc0 [ 945.045854][T18985] do_SYSENTER_32+0x73/0x90 [ 945.050357][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.056667][T18985] [ 945.058982][T18985] Uninit was stored to memory at: [ 945.064010][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 945.069725][T18985] __msan_chain_origin+0x57/0xa0 [ 945.074662][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 945.079774][T18985] get_compat_msghdr+0x108/0x2b0 [ 945.084712][T18985] do_recvmmsg+0xdc7/0x22e0 [ 945.089212][T18985] __sys_recvmmsg+0x340/0x5f0 [ 945.093889][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.099951][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.106102][T18985] __do_fast_syscall_32+0x129/0x180 [ 945.111296][T18985] do_fast_syscall_32+0x6a/0xc0 [ 945.116146][T18985] do_SYSENTER_32+0x73/0x90 [ 945.120644][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.126954][T18985] [ 945.129272][T18985] Uninit was stored to memory at: [ 945.134299][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 945.140020][T18985] __msan_chain_origin+0x57/0xa0 [ 945.144955][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 945.150060][T18985] get_compat_msghdr+0x108/0x2b0 [ 945.155005][T18985] do_recvmmsg+0xdc7/0x22e0 [ 945.159509][T18985] __sys_recvmmsg+0x340/0x5f0 [ 945.164183][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.170253][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.176410][T18985] __do_fast_syscall_32+0x129/0x180 [ 945.181608][T18985] do_fast_syscall_32+0x6a/0xc0 [ 945.186459][T18985] do_SYSENTER_32+0x73/0x90 [ 945.190963][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.197273][T18985] [ 945.199591][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 945.206264][T18985] do_recvmmsg+0xc2/0x22e0 [ 945.210677][T18985] do_recvmmsg+0xc2/0x22e0 [ 945.532976][T18982] not chained 370000 origins [ 945.537603][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 945.546382][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 945.556420][T18982] Call Trace: [ 945.559702][T18982] dump_stack+0x21c/0x280 [ 945.564026][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 945.569737][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 945.575803][T18982] ? kmsan_get_metadata+0x116/0x180 [ 945.580988][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 945.586782][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 945.592831][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 945.598186][T18982] ? kmsan_get_metadata+0x116/0x180 [ 945.603369][T18982] ? kmsan_get_metadata+0x116/0x180 [ 945.608555][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 945.614177][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 945.620230][T18982] ? _copy_from_user+0x201/0x310 [ 945.625153][T18982] ? kmsan_get_metadata+0x116/0x180 [ 945.630351][T18982] __msan_chain_origin+0x57/0xa0 [ 945.635276][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 945.640380][T18982] get_compat_msghdr+0x108/0x2b0 [ 945.645321][T18982] do_recvmmsg+0xdc7/0x22e0 [ 945.649812][T18982] ? kmsan_get_metadata+0x116/0x180 [ 945.655002][T18982] ? kmsan_get_metadata+0x116/0x180 [ 945.660188][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 945.665810][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 945.671082][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 945.675834][T18982] __sys_recvmmsg+0x340/0x5f0 [ 945.680498][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 945.686289][T18982] ? kmsan_get_metadata+0x116/0x180 [ 945.691475][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.697532][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.703677][T18982] __do_fast_syscall_32+0x129/0x180 [ 945.708863][T18982] do_fast_syscall_32+0x6a/0xc0 [ 945.713700][T18982] do_SYSENTER_32+0x73/0x90 [ 945.718192][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.724500][T18982] RIP: 0023:0xf7fe5549 [ 945.728903][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 945.748494][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 945.756891][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 945.764845][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 945.772799][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 945.780754][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 945.788709][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 945.796668][T18982] Uninit was stored to memory at: [ 945.801686][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 945.807390][T18982] __msan_chain_origin+0x57/0xa0 [ 945.812313][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 945.817408][T18982] get_compat_msghdr+0x108/0x2b0 [ 945.822329][T18982] do_recvmmsg+0xdc7/0x22e0 [ 945.826819][T18982] __sys_recvmmsg+0x340/0x5f0 [ 945.831479][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.837531][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.843675][T18982] __do_fast_syscall_32+0x129/0x180 [ 945.848856][T18982] do_fast_syscall_32+0x6a/0xc0 [ 945.853779][T18982] do_SYSENTER_32+0x73/0x90 [ 945.858278][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.864579][T18982] [ 945.866887][T18982] Uninit was stored to memory at: [ 945.871898][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 945.877604][T18982] __msan_chain_origin+0x57/0xa0 [ 945.882526][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 945.887619][T18982] get_compat_msghdr+0x108/0x2b0 [ 945.892541][T18982] do_recvmmsg+0xdc7/0x22e0 [ 945.897029][T18982] __sys_recvmmsg+0x340/0x5f0 [ 945.901690][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.907743][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.913884][T18982] __do_fast_syscall_32+0x129/0x180 [ 945.919066][T18982] do_fast_syscall_32+0x6a/0xc0 [ 945.923903][T18982] do_SYSENTER_32+0x73/0x90 [ 945.928396][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.934695][T18982] [ 945.937002][T18982] Uninit was stored to memory at: [ 945.942017][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 945.947721][T18982] __msan_chain_origin+0x57/0xa0 [ 945.952640][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 945.957738][T18982] get_compat_msghdr+0x108/0x2b0 [ 945.962666][T18982] do_recvmmsg+0xdc7/0x22e0 [ 945.967153][T18982] __sys_recvmmsg+0x340/0x5f0 [ 945.971815][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.977866][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.984007][T18982] __do_fast_syscall_32+0x129/0x180 [ 945.989188][T18982] do_fast_syscall_32+0x6a/0xc0 [ 945.994023][T18982] do_SYSENTER_32+0x73/0x90 [ 945.998525][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.004822][T18982] [ 946.007130][T18982] Uninit was stored to memory at: [ 946.012143][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 946.017850][T18982] __msan_chain_origin+0x57/0xa0 [ 946.022774][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 946.027867][T18982] get_compat_msghdr+0x108/0x2b0 [ 946.032789][T18982] do_recvmmsg+0xdc7/0x22e0 [ 946.037279][T18982] __sys_recvmmsg+0x340/0x5f0 [ 946.041941][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.047991][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.054128][T18982] __do_fast_syscall_32+0x129/0x180 [ 946.059311][T18982] do_fast_syscall_32+0x6a/0xc0 [ 946.064146][T18982] do_SYSENTER_32+0x73/0x90 [ 946.068811][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.075218][T18982] [ 946.077524][T18982] Uninit was stored to memory at: [ 946.082535][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 946.088238][T18982] __msan_chain_origin+0x57/0xa0 [ 946.093159][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 946.098253][T18982] get_compat_msghdr+0x108/0x2b0 [ 946.103176][T18982] do_recvmmsg+0xdc7/0x22e0 [ 946.107667][T18982] __sys_recvmmsg+0x340/0x5f0 [ 946.112328][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.118379][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.124519][T18982] __do_fast_syscall_32+0x129/0x180 [ 946.129700][T18982] do_fast_syscall_32+0x6a/0xc0 [ 946.134536][T18982] do_SYSENTER_32+0x73/0x90 [ 946.139026][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.145326][T18982] [ 946.147632][T18982] Uninit was stored to memory at: [ 946.152647][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 946.158356][T18982] __msan_chain_origin+0x57/0xa0 [ 946.163276][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 946.168372][T18982] get_compat_msghdr+0x108/0x2b0 [ 946.173300][T18982] do_recvmmsg+0xdc7/0x22e0 [ 946.177788][T18982] __sys_recvmmsg+0x340/0x5f0 [ 946.182450][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.188504][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.194644][T18982] __do_fast_syscall_32+0x129/0x180 [ 946.199839][T18982] do_fast_syscall_32+0x6a/0xc0 [ 946.204679][T18982] do_SYSENTER_32+0x73/0x90 [ 946.209169][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.215468][T18982] [ 946.217775][T18982] Uninit was stored to memory at: [ 946.222788][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 946.228496][T18982] __msan_chain_origin+0x57/0xa0 [ 946.233418][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 946.238526][T18982] get_compat_msghdr+0x108/0x2b0 [ 946.243458][T18982] do_recvmmsg+0xdc7/0x22e0 [ 946.247948][T18982] __sys_recvmmsg+0x340/0x5f0 [ 946.252612][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 946.258675][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 946.264826][T18982] __do_fast_syscall_32+0x129/0x180 [ 946.270019][T18982] do_fast_syscall_32+0x6a/0xc0 [ 946.274861][T18982] do_SYSENTER_32+0x73/0x90 [ 946.279357][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 946.285658][T18982] [ 946.287967][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 946.294628][T18982] do_recvmmsg+0xc2/0x22e0 [ 946.299032][T18982] do_recvmmsg+0xc2/0x22e0 [ 946.921047][T18985] not chained 380000 origins [ 946.925670][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 946.934330][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.944400][T18985] Call Trace: [ 946.947696][T18985] dump_stack+0x21c/0x280 [ 946.952031][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 946.957755][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 946.963928][T18985] ? kmsan_get_metadata+0x116/0x180 [ 946.969123][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 946.974940][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 946.981006][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 946.986377][T18985] ? kmsan_get_metadata+0x116/0x180 [ 946.991576][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 946.997211][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 947.003287][T18985] ? _copy_from_user+0x201/0x310 [ 947.008223][T18985] ? kmsan_get_metadata+0x116/0x180 [ 947.013426][T18985] __msan_chain_origin+0x57/0xa0 [ 947.018366][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 947.023485][T18985] get_compat_msghdr+0x108/0x2b0 [ 947.028430][T18985] do_recvmmsg+0xdc7/0x22e0 [ 947.032937][T18985] ? kmsan_get_metadata+0x116/0x180 [ 947.038139][T18985] ? kmsan_get_metadata+0x116/0x180 [ 947.043450][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 947.049082][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 947.054370][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 947.059744][T18985] __sys_recvmmsg+0x340/0x5f0 [ 947.064430][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 947.070233][T18985] ? kmsan_get_metadata+0x116/0x180 [ 947.075439][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 947.081511][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 947.087666][T18985] __do_fast_syscall_32+0x129/0x180 [ 947.092864][T18985] do_fast_syscall_32+0x6a/0xc0 [ 947.097714][T18985] do_SYSENTER_32+0x73/0x90 [ 947.102220][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 947.108543][T18985] RIP: 0023:0xf7fe5549 [ 947.112612][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 947.132219][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 947.140632][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 947.148604][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.156574][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 947.164545][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 947.172515][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 947.180487][T18985] Uninit was stored to memory at: [ 947.185524][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 947.191246][T18985] __msan_chain_origin+0x57/0xa0 [ 947.196184][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 947.201295][T18985] get_compat_msghdr+0x108/0x2b0 [ 947.206233][T18985] do_recvmmsg+0xdc7/0x22e0 [ 947.210734][T18985] __sys_recvmmsg+0x340/0x5f0 [ 947.215424][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 947.221490][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 947.227645][T18985] __do_fast_syscall_32+0x129/0x180 [ 947.232842][T18985] do_fast_syscall_32+0x6a/0xc0 [ 947.237695][T18985] do_SYSENTER_32+0x73/0x90 [ 947.242200][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 947.248510][T18985] [ 947.250862][T18985] Uninit was stored to memory at: [ 947.255892][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 947.261616][T18985] __msan_chain_origin+0x57/0xa0 [ 947.266552][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 947.271665][T18985] get_compat_msghdr+0x108/0x2b0 [ 947.276603][T18985] do_recvmmsg+0xdc7/0x22e0 [ 947.281108][T18985] __sys_recvmmsg+0x340/0x5f0 [ 947.285789][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 947.291856][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 947.298010][T18985] __do_fast_syscall_32+0x129/0x180 [ 947.303207][T18985] do_fast_syscall_32+0x6a/0xc0 [ 947.308079][T18985] do_SYSENTER_32+0x73/0x90 [ 947.312585][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 947.318896][T18985] [ 947.321217][T18985] Uninit was stored to memory at: [ 947.326249][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 947.331972][T18985] __msan_chain_origin+0x57/0xa0 [ 947.336912][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 947.342029][T18985] get_compat_msghdr+0x108/0x2b0 [ 947.350961][T18985] do_recvmmsg+0xdc7/0x22e0 [ 947.355468][T18985] __sys_recvmmsg+0x340/0x5f0 [ 947.360148][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 947.366215][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 947.372367][T18985] __do_fast_syscall_32+0x129/0x180 [ 947.377564][T18985] do_fast_syscall_32+0x6a/0xc0 [ 947.382409][T18985] do_SYSENTER_32+0x73/0x90 [ 947.386911][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 947.393219][T18985] [ 947.395538][T18985] Uninit was stored to memory at: [ 947.400569][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 947.406289][T18985] __msan_chain_origin+0x57/0xa0 [ 947.415278][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 947.420419][T18985] get_compat_msghdr+0x108/0x2b0 [ 947.425361][T18985] do_recvmmsg+0xdc7/0x22e0 [ 947.429866][T18985] __sys_recvmmsg+0x340/0x5f0 [ 947.434542][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 947.440611][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 947.446765][T18985] __do_fast_syscall_32+0x129/0x180 [ 947.451957][T18985] do_fast_syscall_32+0x6a/0xc0 [ 947.456804][T18985] do_SYSENTER_32+0x73/0x90 [ 947.461309][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 947.467617][T18985] [ 947.469936][T18985] Uninit was stored to memory at: [ 947.474966][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 947.480693][T18985] __msan_chain_origin+0x57/0xa0 [ 947.485628][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 947.490739][T18985] get_compat_msghdr+0x108/0x2b0 [ 947.495687][T18985] do_recvmmsg+0xdc7/0x22e0 [ 947.500187][T18985] __sys_recvmmsg+0x340/0x5f0 [ 947.504907][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 947.510971][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 947.517123][T18985] __do_fast_syscall_32+0x129/0x180 [ 947.522324][T18985] do_fast_syscall_32+0x6a/0xc0 [ 947.527172][T18985] do_SYSENTER_32+0x73/0x90 [ 947.531681][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 947.537990][T18985] [ 947.540309][T18985] Uninit was stored to memory at: [ 947.545341][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 947.551058][T18985] __msan_chain_origin+0x57/0xa0 [ 947.555994][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 947.561102][T18985] get_compat_msghdr+0x108/0x2b0 [ 947.566040][T18985] do_recvmmsg+0xdc7/0x22e0 [ 947.570547][T18985] __sys_recvmmsg+0x340/0x5f0 [ 947.575225][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 947.581288][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 947.587444][T18985] __do_fast_syscall_32+0x129/0x180 [ 947.592642][T18985] do_fast_syscall_32+0x6a/0xc0 [ 947.597496][T18985] do_SYSENTER_32+0x73/0x90 [ 947.602001][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 947.608308][T18985] [ 947.610625][T18985] Uninit was stored to memory at: [ 947.615652][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 947.621484][T18985] __msan_chain_origin+0x57/0xa0 [ 947.626420][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 947.631530][T18985] get_compat_msghdr+0x108/0x2b0 [ 947.636468][T18985] do_recvmmsg+0xdc7/0x22e0 [ 947.640970][T18985] __sys_recvmmsg+0x340/0x5f0 [ 947.645647][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 947.651717][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 947.657870][T18985] __do_fast_syscall_32+0x129/0x180 [ 947.663067][T18985] do_fast_syscall_32+0x6a/0xc0 [ 947.667913][T18985] do_SYSENTER_32+0x73/0x90 [ 947.672418][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 947.678728][T18985] [ 947.681045][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 947.687717][T18985] do_recvmmsg+0xc2/0x22e0 [ 947.692131][T18985] do_recvmmsg+0xc2/0x22e0 [ 948.247946][T18982] not chained 390000 origins [ 948.252600][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 948.261267][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 948.271314][T18982] Call Trace: [ 948.274611][T18982] dump_stack+0x21c/0x280 [ 948.278953][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 948.284679][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 948.290764][T18982] ? kmsan_get_metadata+0x116/0x180 [ 948.295962][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 948.301772][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 948.307836][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 948.313209][T18982] ? kmsan_get_metadata+0x116/0x180 [ 948.318412][T18982] ? kmsan_get_metadata+0x116/0x180 [ 948.323612][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 948.329253][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 948.335323][T18982] ? _copy_from_user+0x201/0x310 [ 948.340259][T18982] ? kmsan_get_metadata+0x116/0x180 [ 948.345459][T18982] __msan_chain_origin+0x57/0xa0 [ 948.350397][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 948.355514][T18982] get_compat_msghdr+0x108/0x2b0 [ 948.360461][T18982] do_recvmmsg+0xdc7/0x22e0 [ 948.364970][T18982] ? kmsan_get_metadata+0x116/0x180 [ 948.370173][T18982] ? kmsan_get_metadata+0x116/0x180 [ 948.375389][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 948.381023][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 948.386311][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 948.391082][T18982] __sys_recvmmsg+0x340/0x5f0 [ 948.395761][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 948.401564][T18982] ? kmsan_get_metadata+0x116/0x180 [ 948.406766][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.412924][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.419080][T18982] __do_fast_syscall_32+0x129/0x180 [ 948.424280][T18982] do_fast_syscall_32+0x6a/0xc0 [ 948.429131][T18982] do_SYSENTER_32+0x73/0x90 [ 948.433651][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.439974][T18982] RIP: 0023:0xf7fe5549 [ 948.444047][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 948.463662][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 948.472078][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 948.480048][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.488015][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.495982][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 948.503953][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.511920][T18982] Uninit was stored to memory at: [ 948.516955][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 948.522674][T18982] __msan_chain_origin+0x57/0xa0 [ 948.527607][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 948.532720][T18982] get_compat_msghdr+0x108/0x2b0 [ 948.537669][T18982] do_recvmmsg+0xdc7/0x22e0 [ 948.542174][T18982] __sys_recvmmsg+0x340/0x5f0 [ 948.546862][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.552929][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.559084][T18982] __do_fast_syscall_32+0x129/0x180 [ 948.564284][T18982] do_fast_syscall_32+0x6a/0xc0 [ 948.569132][T18982] do_SYSENTER_32+0x73/0x90 [ 948.573648][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.579959][T18982] [ 948.582276][T18982] Uninit was stored to memory at: [ 948.587308][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 948.593026][T18982] __msan_chain_origin+0x57/0xa0 [ 948.597961][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 948.603073][T18982] get_compat_msghdr+0x108/0x2b0 [ 948.608100][T18982] do_recvmmsg+0xdc7/0x22e0 [ 948.612605][T18982] __sys_recvmmsg+0x340/0x5f0 [ 948.617290][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.623360][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.629512][T18982] __do_fast_syscall_32+0x129/0x180 [ 948.634707][T18982] do_fast_syscall_32+0x6a/0xc0 [ 948.639555][T18982] do_SYSENTER_32+0x73/0x90 [ 948.644056][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.650365][T18982] [ 948.652682][T18982] Uninit was stored to memory at: [ 948.658578][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 948.664298][T18982] __msan_chain_origin+0x57/0xa0 [ 948.669232][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 948.674340][T18982] get_compat_msghdr+0x108/0x2b0 [ 948.679289][T18982] do_recvmmsg+0xdc7/0x22e0 [ 948.683791][T18982] __sys_recvmmsg+0x340/0x5f0 [ 948.688468][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.694534][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.700687][T18982] __do_fast_syscall_32+0x129/0x180 [ 948.705885][T18982] do_fast_syscall_32+0x6a/0xc0 [ 948.710733][T18982] do_SYSENTER_32+0x73/0x90 [ 948.715239][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.721548][T18982] [ 948.723873][T18982] Uninit was stored to memory at: [ 948.728901][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 948.734620][T18982] __msan_chain_origin+0x57/0xa0 [ 948.739559][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 948.744669][T18982] get_compat_msghdr+0x108/0x2b0 [ 948.749611][T18982] do_recvmmsg+0xdc7/0x22e0 [ 948.754155][T18982] __sys_recvmmsg+0x340/0x5f0 [ 948.758842][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.764923][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.771086][T18982] __do_fast_syscall_32+0x129/0x180 [ 948.776289][T18982] do_fast_syscall_32+0x6a/0xc0 [ 948.781137][T18982] do_SYSENTER_32+0x73/0x90 [ 948.785650][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.791963][T18982] [ 948.794281][T18982] Uninit was stored to memory at: [ 948.799309][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 948.805029][T18982] __msan_chain_origin+0x57/0xa0 [ 948.809966][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 948.815073][T18982] get_compat_msghdr+0x108/0x2b0 [ 948.820011][T18982] do_recvmmsg+0xdc7/0x22e0 [ 948.824517][T18982] __sys_recvmmsg+0x340/0x5f0 [ 948.829195][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.835266][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.841423][T18982] __do_fast_syscall_32+0x129/0x180 [ 948.846620][T18982] do_fast_syscall_32+0x6a/0xc0 [ 948.851473][T18982] do_SYSENTER_32+0x73/0x90 [ 948.855978][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.862288][T18982] [ 948.864607][T18982] Uninit was stored to memory at: [ 948.869635][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 948.875360][T18982] __msan_chain_origin+0x57/0xa0 [ 948.880307][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 948.885420][T18982] get_compat_msghdr+0x108/0x2b0 [ 948.890366][T18982] do_recvmmsg+0xdc7/0x22e0 [ 948.894871][T18982] __sys_recvmmsg+0x340/0x5f0 [ 948.899537][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.905591][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.911734][T18982] __do_fast_syscall_32+0x129/0x180 [ 948.916933][T18982] do_fast_syscall_32+0x6a/0xc0 [ 948.921776][T18982] do_SYSENTER_32+0x73/0x90 [ 948.926360][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 948.932664][T18982] [ 948.934974][T18982] Uninit was stored to memory at: [ 948.939992][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 948.945715][T18982] __msan_chain_origin+0x57/0xa0 [ 948.950639][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 948.955742][T18982] get_compat_msghdr+0x108/0x2b0 [ 948.960673][T18982] do_recvmmsg+0xdc7/0x22e0 [ 948.965164][T18982] __sys_recvmmsg+0x340/0x5f0 [ 948.969830][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 948.975882][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 948.982027][T18982] __do_fast_syscall_32+0x129/0x180 [ 948.987212][T18982] do_fast_syscall_32+0x6a/0xc0 [ 948.992049][T18982] do_SYSENTER_32+0x73/0x90 [ 948.996539][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 949.002845][T18982] [ 949.005160][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 949.011823][T18982] do_recvmmsg+0xc2/0x22e0 [ 949.016229][T18982] do_recvmmsg+0xc2/0x22e0 [ 949.682971][T18985] not chained 400000 origins [ 949.687600][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 949.696263][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.706314][T18985] Call Trace: [ 949.709609][T18985] dump_stack+0x21c/0x280 [ 949.713947][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 949.719670][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 949.725736][T18985] ? kmsan_get_metadata+0x116/0x180 [ 949.730956][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 949.736769][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 949.742923][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 949.748292][T18985] ? kmsan_get_metadata+0x116/0x180 [ 949.753492][T18985] ? kmsan_get_metadata+0x116/0x180 [ 949.758691][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 949.764330][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 949.770399][T18985] ? _copy_from_user+0x201/0x310 [ 949.775337][T18985] ? kmsan_get_metadata+0x116/0x180 [ 949.780536][T18985] __msan_chain_origin+0x57/0xa0 [ 949.785473][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 949.790708][T18985] get_compat_msghdr+0x108/0x2b0 [ 949.795651][T18985] do_recvmmsg+0xdc7/0x22e0 [ 949.800155][T18985] ? kmsan_get_metadata+0x116/0x180 [ 949.805363][T18985] ? kmsan_get_metadata+0x116/0x180 [ 949.810563][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 949.816198][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 949.821579][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 949.826344][T18985] __sys_recvmmsg+0x340/0x5f0 [ 949.831028][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 949.836829][T18985] ? kmsan_get_metadata+0x116/0x180 [ 949.842027][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 949.848099][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 949.854255][T18985] __do_fast_syscall_32+0x129/0x180 [ 949.859453][T18985] do_fast_syscall_32+0x6a/0xc0 [ 949.864303][T18985] do_SYSENTER_32+0x73/0x90 [ 949.868808][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 949.875128][T18985] RIP: 0023:0xf7fe5549 [ 949.879200][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 949.898802][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 949.907253][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 949.915222][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 949.923191][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 949.931155][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 949.939128][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 949.947095][T18985] Uninit was stored to memory at: [ 949.952128][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 949.957844][T18985] __msan_chain_origin+0x57/0xa0 [ 949.962818][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 949.967930][T18985] get_compat_msghdr+0x108/0x2b0 [ 949.972864][T18985] do_recvmmsg+0xdc7/0x22e0 [ 949.977363][T18985] __sys_recvmmsg+0x340/0x5f0 [ 949.982043][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 949.988107][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 949.994261][T18985] __do_fast_syscall_32+0x129/0x180 [ 949.999545][T18985] do_fast_syscall_32+0x6a/0xc0 [ 950.004389][T18985] do_SYSENTER_32+0x73/0x90 [ 950.008888][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.015196][T18985] [ 950.017511][T18985] Uninit was stored to memory at: [ 950.022536][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 950.028254][T18985] __msan_chain_origin+0x57/0xa0 [ 950.033188][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 950.038295][T18985] get_compat_msghdr+0x108/0x2b0 [ 950.043228][T18985] do_recvmmsg+0xdc7/0x22e0 [ 950.047727][T18985] __sys_recvmmsg+0x340/0x5f0 [ 950.052401][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.066199][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.072454][T18985] __do_fast_syscall_32+0x129/0x180 [ 950.077651][T18985] do_fast_syscall_32+0x6a/0xc0 [ 950.082497][T18985] do_SYSENTER_32+0x73/0x90 [ 950.087001][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.093309][T18985] [ 950.095624][T18985] Uninit was stored to memory at: [ 950.100650][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 950.106368][T18985] __msan_chain_origin+0x57/0xa0 [ 950.111299][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 950.116406][T18985] get_compat_msghdr+0x108/0x2b0 [ 950.121340][T18985] do_recvmmsg+0xdc7/0x22e0 [ 950.125840][T18985] __sys_recvmmsg+0x340/0x5f0 [ 950.130511][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.136572][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.142724][T18985] __do_fast_syscall_32+0x129/0x180 [ 950.147916][T18985] do_fast_syscall_32+0x6a/0xc0 [ 950.152763][T18985] do_SYSENTER_32+0x73/0x90 [ 950.157266][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.163667][T18985] [ 950.166005][T18985] Uninit was stored to memory at: [ 950.171126][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 950.176847][T18985] __msan_chain_origin+0x57/0xa0 [ 950.181782][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 950.192450][T18985] get_compat_msghdr+0x108/0x2b0 [ 950.197385][T18985] do_recvmmsg+0xdc7/0x22e0 [ 950.201886][T18985] __sys_recvmmsg+0x340/0x5f0 [ 950.206558][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.212620][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.218771][T18985] __do_fast_syscall_32+0x129/0x180 [ 950.223973][T18985] do_fast_syscall_32+0x6a/0xc0 [ 950.228851][T18985] do_SYSENTER_32+0x73/0x90 [ 950.233353][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.239660][T18985] [ 950.241975][T18985] Uninit was stored to memory at: [ 950.246999][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 950.252716][T18985] __msan_chain_origin+0x57/0xa0 [ 950.257651][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 950.262760][T18985] get_compat_msghdr+0x108/0x2b0 [ 950.267697][T18985] do_recvmmsg+0xdc7/0x22e0 [ 950.272204][T18985] __sys_recvmmsg+0x340/0x5f0 [ 950.276880][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.282944][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.289092][T18985] __do_fast_syscall_32+0x129/0x180 [ 950.294283][T18985] do_fast_syscall_32+0x6a/0xc0 [ 950.299130][T18985] do_SYSENTER_32+0x73/0x90 [ 950.303631][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.309938][T18985] [ 950.312253][T18985] Uninit was stored to memory at: [ 950.317276][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 950.322991][T18985] __msan_chain_origin+0x57/0xa0 [ 950.327919][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 950.333022][T18985] get_compat_msghdr+0x108/0x2b0 [ 950.337952][T18985] do_recvmmsg+0xdc7/0x22e0 [ 950.342448][T18985] __sys_recvmmsg+0x340/0x5f0 [ 950.347119][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.353183][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.359335][T18985] __do_fast_syscall_32+0x129/0x180 [ 950.364529][T18985] do_fast_syscall_32+0x6a/0xc0 [ 950.369370][T18985] do_SYSENTER_32+0x73/0x90 [ 950.373872][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.380180][T18985] [ 950.382494][T18985] Uninit was stored to memory at: [ 950.387515][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 950.393228][T18985] __msan_chain_origin+0x57/0xa0 [ 950.398158][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 950.403262][T18985] get_compat_msghdr+0x108/0x2b0 [ 950.408196][T18985] do_recvmmsg+0xdc7/0x22e0 [ 950.412693][T18985] __sys_recvmmsg+0x340/0x5f0 [ 950.417365][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.423428][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.429574][T18985] __do_fast_syscall_32+0x129/0x180 [ 950.434765][T18985] do_fast_syscall_32+0x6a/0xc0 [ 950.438843][T18982] not chained 410000 origins [ 950.439624][T18985] do_SYSENTER_32+0x73/0x90 [ 950.444198][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 950.448677][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.457324][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.463630][T18985] [ 950.473661][T18982] Call Trace: [ 950.475966][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 950.479236][T18982] dump_stack+0x21c/0x280 [ 950.485880][T18985] do_recvmmsg+0xc2/0x22e0 [ 950.490183][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 950.494570][T18985] do_recvmmsg+0xc2/0x22e0 [ 950.500266][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 950.510695][T18982] ? kmsan_get_metadata+0x116/0x180 [ 950.515895][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 950.521704][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 950.527771][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 950.533144][T18982] ? sched_clock_cpu+0x5e/0x950 [ 950.537986][T18982] ? kmsan_get_metadata+0x116/0x180 [ 950.543177][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 950.548800][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 950.554853][T18982] ? _copy_from_user+0x201/0x310 [ 950.559780][T18982] ? kmsan_get_metadata+0x116/0x180 [ 950.564970][T18982] __msan_chain_origin+0x57/0xa0 [ 950.569897][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 950.575001][T18982] get_compat_msghdr+0x108/0x2b0 [ 950.579935][T18982] do_recvmmsg+0xdc7/0x22e0 [ 950.584431][T18982] ? kmsan_get_metadata+0x116/0x180 [ 950.589620][T18982] ? kmsan_get_metadata+0x116/0x180 [ 950.594805][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 950.600425][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 950.605702][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 950.610454][T18982] __sys_recvmmsg+0x340/0x5f0 [ 950.615121][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 950.620909][T18982] ? kmsan_get_metadata+0x116/0x180 [ 950.626096][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.632153][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.638299][T18982] __do_fast_syscall_32+0x129/0x180 [ 950.643483][T18982] do_fast_syscall_32+0x6a/0xc0 [ 950.648322][T18982] do_SYSENTER_32+0x73/0x90 [ 950.652813][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.659119][T18982] RIP: 0023:0xf7fe5549 [ 950.663176][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 950.682766][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 950.691161][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 950.699120][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 950.707089][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 950.715058][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 950.723016][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 950.730971][T18982] Uninit was stored to memory at: [ 950.735986][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 950.741693][T18982] __msan_chain_origin+0x57/0xa0 [ 950.746631][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 950.751725][T18982] get_compat_msghdr+0x108/0x2b0 [ 950.756662][T18982] do_recvmmsg+0xdc7/0x22e0 [ 950.761156][T18982] __sys_recvmmsg+0x340/0x5f0 [ 950.765834][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.771906][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.778049][T18982] __do_fast_syscall_32+0x129/0x180 [ 950.783234][T18982] do_fast_syscall_32+0x6a/0xc0 [ 950.788071][T18982] do_SYSENTER_32+0x73/0x90 [ 950.792567][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.798868][T18982] [ 950.801174][T18982] Uninit was stored to memory at: [ 950.806191][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 950.811898][T18982] __msan_chain_origin+0x57/0xa0 [ 950.816819][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 950.821916][T18982] get_compat_msghdr+0x108/0x2b0 [ 950.826839][T18982] do_recvmmsg+0xdc7/0x22e0 [ 950.831328][T18982] __sys_recvmmsg+0x340/0x5f0 [ 950.835989][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.842041][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.848180][T18982] __do_fast_syscall_32+0x129/0x180 [ 950.853363][T18982] do_fast_syscall_32+0x6a/0xc0 [ 950.858373][T18982] do_SYSENTER_32+0x73/0x90 [ 950.863385][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.869688][T18982] [ 950.871996][T18982] Uninit was stored to memory at: [ 950.877011][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 950.882717][T18982] __msan_chain_origin+0x57/0xa0 [ 950.887636][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 950.892730][T18982] get_compat_msghdr+0x108/0x2b0 [ 950.897654][T18982] do_recvmmsg+0xdc7/0x22e0 [ 950.902147][T18982] __sys_recvmmsg+0x340/0x5f0 [ 950.906808][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.912861][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.919001][T18982] __do_fast_syscall_32+0x129/0x180 [ 950.924270][T18982] do_fast_syscall_32+0x6a/0xc0 [ 950.929105][T18982] do_SYSENTER_32+0x73/0x90 [ 950.933596][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 950.939894][T18982] [ 950.942205][T18982] Uninit was stored to memory at: [ 950.947216][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 950.952921][T18982] __msan_chain_origin+0x57/0xa0 [ 950.957842][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 950.962938][T18982] get_compat_msghdr+0x108/0x2b0 [ 950.967862][T18982] do_recvmmsg+0xdc7/0x22e0 [ 950.972352][T18982] __sys_recvmmsg+0x340/0x5f0 [ 950.977014][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 950.983066][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 950.989205][T18982] __do_fast_syscall_32+0x129/0x180 [ 950.994513][T18982] do_fast_syscall_32+0x6a/0xc0 [ 950.999353][T18982] do_SYSENTER_32+0x73/0x90 [ 951.003846][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 951.010146][T18982] [ 951.012455][T18982] Uninit was stored to memory at: [ 951.017479][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 951.023192][T18982] __msan_chain_origin+0x57/0xa0 [ 951.028120][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 951.033218][T18982] get_compat_msghdr+0x108/0x2b0 [ 951.038145][T18982] do_recvmmsg+0xdc7/0x22e0 [ 951.042636][T18982] __sys_recvmmsg+0x340/0x5f0 [ 951.047303][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 951.053356][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 951.059504][T18982] __do_fast_syscall_32+0x129/0x180 [ 951.064689][T18982] do_fast_syscall_32+0x6a/0xc0 [ 951.069526][T18982] do_SYSENTER_32+0x73/0x90 [ 951.074014][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 951.080312][T18982] [ 951.082618][T18982] Uninit was stored to memory at: [ 951.087629][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 951.093336][T18982] __msan_chain_origin+0x57/0xa0 [ 951.098256][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 951.103353][T18982] get_compat_msghdr+0x108/0x2b0 [ 951.108277][T18982] do_recvmmsg+0xdc7/0x22e0 [ 951.112770][T18982] __sys_recvmmsg+0x340/0x5f0 [ 951.117436][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 951.123501][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 951.129648][T18982] __do_fast_syscall_32+0x129/0x180 [ 951.134832][T18982] do_fast_syscall_32+0x6a/0xc0 [ 951.139671][T18982] do_SYSENTER_32+0x73/0x90 [ 951.144164][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 951.150465][T18982] [ 951.152775][T18982] Uninit was stored to memory at: [ 951.157794][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 951.163511][T18982] __msan_chain_origin+0x57/0xa0 [ 951.168442][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 951.173544][T18982] get_compat_msghdr+0x108/0x2b0 [ 951.178607][T18982] do_recvmmsg+0xdc7/0x22e0 [ 951.183103][T18982] __sys_recvmmsg+0x340/0x5f0 [ 951.187764][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 951.193818][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 951.199961][T18982] __do_fast_syscall_32+0x129/0x180 [ 951.205149][T18982] do_fast_syscall_32+0x6a/0xc0 [ 951.209990][T18982] do_SYSENTER_32+0x73/0x90 [ 951.214491][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 951.220795][T18982] [ 951.223108][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 951.229857][T18982] do_recvmmsg+0xc2/0x22e0 [ 951.234260][T18982] do_recvmmsg+0xc2/0x22e0 [ 952.127743][T18982] not chained 420000 origins [ 952.132369][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 952.141022][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.151058][T18982] Call Trace: [ 952.154343][T18982] dump_stack+0x21c/0x280 [ 952.158677][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 952.164400][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 952.170511][T18982] ? kmsan_get_metadata+0x116/0x180 [ 952.175710][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 952.181510][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 952.187562][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 952.192919][T18982] ? kmsan_get_metadata+0x116/0x180 [ 952.198107][T18982] ? kmsan_get_metadata+0x116/0x180 [ 952.203303][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 952.208926][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 952.214985][T18982] ? _copy_from_user+0x201/0x310 [ 952.219915][T18982] ? kmsan_get_metadata+0x116/0x180 [ 952.225108][T18982] __msan_chain_origin+0x57/0xa0 [ 952.230036][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 952.235156][T18982] get_compat_msghdr+0x108/0x2b0 [ 952.240097][T18982] do_recvmmsg+0xdc7/0x22e0 [ 952.244597][T18982] ? kmsan_get_metadata+0x116/0x180 [ 952.249798][T18982] ? kmsan_get_metadata+0x116/0x180 [ 952.254995][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 952.260624][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 952.265906][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 952.270665][T18982] __sys_recvmmsg+0x340/0x5f0 [ 952.275333][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 952.281124][T18982] ? kmsan_get_metadata+0x116/0x180 [ 952.286315][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.292375][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.298522][T18982] __do_fast_syscall_32+0x129/0x180 [ 952.303711][T18982] do_fast_syscall_32+0x6a/0xc0 [ 952.308556][T18982] do_SYSENTER_32+0x73/0x90 [ 952.313050][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.319363][T18982] RIP: 0023:0xf7fe5549 [ 952.323432][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 952.343034][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 952.351436][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 952.359393][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 952.367349][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 952.375303][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 952.383261][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 952.391218][T18982] Uninit was stored to memory at: [ 952.396254][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 952.401962][T18982] __msan_chain_origin+0x57/0xa0 [ 952.406903][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 952.412003][T18982] get_compat_msghdr+0x108/0x2b0 [ 952.416927][T18982] do_recvmmsg+0xdc7/0x22e0 [ 952.421426][T18982] __sys_recvmmsg+0x340/0x5f0 [ 952.426089][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.432139][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.438278][T18982] __do_fast_syscall_32+0x129/0x180 [ 952.443462][T18982] do_fast_syscall_32+0x6a/0xc0 [ 952.448408][T18982] do_SYSENTER_32+0x73/0x90 [ 952.452901][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.459201][T18982] [ 952.461510][T18982] Uninit was stored to memory at: [ 952.466523][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 952.472229][T18982] __msan_chain_origin+0x57/0xa0 [ 952.477150][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 952.482246][T18982] get_compat_msghdr+0x108/0x2b0 [ 952.487258][T18982] do_recvmmsg+0xdc7/0x22e0 [ 952.491745][T18982] __sys_recvmmsg+0x340/0x5f0 [ 952.496407][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.503155][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.509296][T18982] __do_fast_syscall_32+0x129/0x180 [ 952.514479][T18982] do_fast_syscall_32+0x6a/0xc0 [ 952.519315][T18982] do_SYSENTER_32+0x73/0x90 [ 952.523804][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.530105][T18982] [ 952.532416][T18982] Uninit was stored to memory at: [ 952.537430][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 952.543135][T18982] __msan_chain_origin+0x57/0xa0 [ 952.548059][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 952.553152][T18982] get_compat_msghdr+0x108/0x2b0 [ 952.558076][T18982] do_recvmmsg+0xdc7/0x22e0 [ 952.562566][T18982] __sys_recvmmsg+0x340/0x5f0 [ 952.567228][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.573282][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.579421][T18982] __do_fast_syscall_32+0x129/0x180 [ 952.584604][T18982] do_fast_syscall_32+0x6a/0xc0 [ 952.589439][T18982] do_SYSENTER_32+0x73/0x90 [ 952.593927][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.600224][T18982] [ 952.602531][T18982] Uninit was stored to memory at: [ 952.607544][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 952.613251][T18982] __msan_chain_origin+0x57/0xa0 [ 952.618171][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 952.623267][T18982] get_compat_msghdr+0x108/0x2b0 [ 952.628189][T18982] do_recvmmsg+0xdc7/0x22e0 [ 952.632680][T18982] __sys_recvmmsg+0x340/0x5f0 [ 952.637343][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.643394][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.649531][T18982] __do_fast_syscall_32+0x129/0x180 [ 952.654718][T18982] do_fast_syscall_32+0x6a/0xc0 [ 952.659562][T18982] do_SYSENTER_32+0x73/0x90 [ 952.664052][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.670352][T18982] [ 952.672660][T18982] Uninit was stored to memory at: [ 952.677673][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 952.683376][T18982] __msan_chain_origin+0x57/0xa0 [ 952.688309][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 952.693406][T18982] get_compat_msghdr+0x108/0x2b0 [ 952.698331][T18982] do_recvmmsg+0xdc7/0x22e0 [ 952.702819][T18982] __sys_recvmmsg+0x340/0x5f0 [ 952.707482][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.713532][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.719673][T18982] __do_fast_syscall_32+0x129/0x180 [ 952.724855][T18982] do_fast_syscall_32+0x6a/0xc0 [ 952.729691][T18982] do_SYSENTER_32+0x73/0x90 [ 952.734180][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.740494][T18982] [ 952.742804][T18982] Uninit was stored to memory at: [ 952.747815][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 952.753521][T18982] __msan_chain_origin+0x57/0xa0 [ 952.758442][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 952.763537][T18982] get_compat_msghdr+0x108/0x2b0 [ 952.768460][T18982] do_recvmmsg+0xdc7/0x22e0 [ 952.772947][T18982] __sys_recvmmsg+0x340/0x5f0 [ 952.777611][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.783667][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.789805][T18982] __do_fast_syscall_32+0x129/0x180 [ 952.794989][T18982] do_fast_syscall_32+0x6a/0xc0 [ 952.799824][T18982] do_SYSENTER_32+0x73/0x90 [ 952.804314][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.810613][T18982] [ 952.812923][T18982] Uninit was stored to memory at: [ 952.817936][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 952.823646][T18982] __msan_chain_origin+0x57/0xa0 [ 952.828569][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 952.833666][T18982] get_compat_msghdr+0x108/0x2b0 [ 952.838591][T18982] do_recvmmsg+0xdc7/0x22e0 [ 952.843094][T18982] __sys_recvmmsg+0x340/0x5f0 [ 952.847755][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 952.853807][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 952.859945][T18982] __do_fast_syscall_32+0x129/0x180 [ 952.865127][T18982] do_fast_syscall_32+0x6a/0xc0 [ 952.869964][T18982] do_SYSENTER_32+0x73/0x90 [ 952.874455][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 952.880753][T18982] [ 952.883062][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 952.889720][T18982] do_recvmmsg+0xc2/0x22e0 [ 952.894122][T18982] do_recvmmsg+0xc2/0x22e0 [ 953.678632][T18982] not chained 430000 origins [ 953.683259][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 953.691909][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.701949][T18982] Call Trace: [ 953.705240][T18982] dump_stack+0x21c/0x280 [ 953.709564][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 953.715272][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 953.721323][T18982] ? kmsan_get_metadata+0x116/0x180 [ 953.726509][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 953.732306][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 953.738360][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 953.743721][T18982] ? kmsan_get_metadata+0x116/0x180 [ 953.748907][T18982] ? kmsan_get_metadata+0x116/0x180 [ 953.754094][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 953.759716][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 953.765771][T18982] ? _copy_from_user+0x201/0x310 [ 953.770695][T18982] ? kmsan_get_metadata+0x116/0x180 [ 953.775884][T18982] __msan_chain_origin+0x57/0xa0 [ 953.780809][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 953.785912][T18982] get_compat_msghdr+0x108/0x2b0 [ 953.790841][T18982] do_recvmmsg+0xdc7/0x22e0 [ 953.795336][T18982] ? kmsan_get_metadata+0x116/0x180 [ 953.800526][T18982] ? kmsan_get_metadata+0x116/0x180 [ 953.805714][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 953.811335][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 953.816611][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 953.821362][T18982] __sys_recvmmsg+0x340/0x5f0 [ 953.826025][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 953.831816][T18982] ? kmsan_get_metadata+0x116/0x180 [ 953.837003][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 953.843061][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 953.849201][T18982] __do_fast_syscall_32+0x129/0x180 [ 953.854390][T18982] do_fast_syscall_32+0x6a/0xc0 [ 953.859231][T18982] do_SYSENTER_32+0x73/0x90 [ 953.863729][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 953.870038][T18982] RIP: 0023:0xf7fe5549 [ 953.874093][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 953.893768][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 953.902167][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 953.910139][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 953.919139][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 953.927093][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 953.935052][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 953.943009][T18982] Uninit was stored to memory at: [ 953.948025][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 953.953730][T18982] __msan_chain_origin+0x57/0xa0 [ 953.958652][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 953.963747][T18982] get_compat_msghdr+0x108/0x2b0 [ 953.968670][T18982] do_recvmmsg+0xdc7/0x22e0 [ 953.973159][T18982] __sys_recvmmsg+0x340/0x5f0 [ 953.977842][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 953.983906][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 953.990055][T18982] __do_fast_syscall_32+0x129/0x180 [ 953.995243][T18982] do_fast_syscall_32+0x6a/0xc0 [ 954.000082][T18982] do_SYSENTER_32+0x73/0x90 [ 954.004577][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 954.010884][T18982] [ 954.013199][T18982] Uninit was stored to memory at: [ 954.018217][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 954.023924][T18982] __msan_chain_origin+0x57/0xa0 [ 954.028845][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 954.033943][T18982] get_compat_msghdr+0x108/0x2b0 [ 954.038867][T18982] do_recvmmsg+0xdc7/0x22e0 [ 954.043444][T18982] __sys_recvmmsg+0x340/0x5f0 [ 954.048107][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 954.054162][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 954.060306][T18982] __do_fast_syscall_32+0x129/0x180 [ 954.065491][T18982] do_fast_syscall_32+0x6a/0xc0 [ 954.070327][T18982] do_SYSENTER_32+0x73/0x90 [ 954.074819][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 954.081120][T18982] [ 954.083430][T18982] Uninit was stored to memory at: [ 954.088453][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 954.094163][T18982] __msan_chain_origin+0x57/0xa0 [ 954.099086][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 954.104182][T18982] get_compat_msghdr+0x108/0x2b0 [ 954.109105][T18982] do_recvmmsg+0xdc7/0x22e0 [ 954.113593][T18982] __sys_recvmmsg+0x340/0x5f0 [ 954.118256][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 954.124310][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 954.130449][T18982] __do_fast_syscall_32+0x129/0x180 [ 954.135631][T18982] do_fast_syscall_32+0x6a/0xc0 [ 954.140468][T18982] do_SYSENTER_32+0x73/0x90 [ 954.144958][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 954.151257][T18982] [ 954.153562][T18982] Uninit was stored to memory at: [ 954.158574][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 954.164279][T18982] __msan_chain_origin+0x57/0xa0 [ 954.169245][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 954.174353][T18982] get_compat_msghdr+0x108/0x2b0 [ 954.179289][T18982] do_recvmmsg+0xdc7/0x22e0 [ 954.183790][T18982] __sys_recvmmsg+0x340/0x5f0 [ 954.188464][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 954.194520][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 954.200665][T18982] __do_fast_syscall_32+0x129/0x180 [ 954.205851][T18982] do_fast_syscall_32+0x6a/0xc0 [ 954.210686][T18982] do_SYSENTER_32+0x73/0x90 [ 954.215176][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 954.221475][T18982] [ 954.223790][T18982] Uninit was stored to memory at: [ 954.228805][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 954.234515][T18982] __msan_chain_origin+0x57/0xa0 [ 954.239436][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 954.244528][T18982] get_compat_msghdr+0x108/0x2b0 [ 954.249451][T18982] do_recvmmsg+0xdc7/0x22e0 [ 954.253940][T18982] __sys_recvmmsg+0x340/0x5f0 [ 954.258604][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 954.264656][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 954.270793][T18982] __do_fast_syscall_32+0x129/0x180 [ 954.275983][T18982] do_fast_syscall_32+0x6a/0xc0 [ 954.280818][T18982] do_SYSENTER_32+0x73/0x90 [ 954.285312][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 954.291611][T18982] [ 954.293917][T18982] Uninit was stored to memory at: [ 954.298930][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 954.304638][T18982] __msan_chain_origin+0x57/0xa0 [ 954.309560][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 954.314653][T18982] get_compat_msghdr+0x108/0x2b0 [ 954.319574][T18982] do_recvmmsg+0xdc7/0x22e0 [ 954.324065][T18982] __sys_recvmmsg+0x340/0x5f0 [ 954.328727][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 954.334782][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 954.340920][T18982] __do_fast_syscall_32+0x129/0x180 [ 954.346105][T18982] do_fast_syscall_32+0x6a/0xc0 [ 954.350938][T18982] do_SYSENTER_32+0x73/0x90 [ 954.355427][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 954.361727][T18982] [ 954.364034][T18982] Uninit was stored to memory at: [ 954.369045][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 954.374749][T18982] __msan_chain_origin+0x57/0xa0 [ 954.379671][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 954.384767][T18982] get_compat_msghdr+0x108/0x2b0 [ 954.389702][T18982] do_recvmmsg+0xdc7/0x22e0 [ 954.394191][T18982] __sys_recvmmsg+0x340/0x5f0 [ 954.398852][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 954.404904][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 954.411044][T18982] __do_fast_syscall_32+0x129/0x180 [ 954.416230][T18982] do_fast_syscall_32+0x6a/0xc0 [ 954.421066][T18982] do_SYSENTER_32+0x73/0x90 [ 954.425556][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 954.431856][T18982] [ 954.434165][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 954.440829][T18982] do_recvmmsg+0xc2/0x22e0 [ 954.445230][T18982] do_recvmmsg+0xc2/0x22e0 [ 954.986795][T18985] not chained 440000 origins [ 954.991415][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 955.000190][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.010242][T18985] Call Trace: [ 955.013540][T18985] dump_stack+0x21c/0x280 [ 955.017884][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 955.023611][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 955.029679][T18985] ? kmsan_get_metadata+0x116/0x180 [ 955.034877][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 955.040687][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 955.046764][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 955.052238][T18985] ? kmsan_get_metadata+0x116/0x180 [ 955.057438][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 955.063073][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 955.069150][T18985] ? _copy_from_user+0x201/0x310 [ 955.074086][T18985] ? kmsan_get_metadata+0x116/0x180 [ 955.079286][T18985] __msan_chain_origin+0x57/0xa0 [ 955.084224][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 955.089340][T18985] get_compat_msghdr+0x108/0x2b0 [ 955.094287][T18985] do_recvmmsg+0xdc7/0x22e0 [ 955.098791][T18985] ? kmsan_get_metadata+0x116/0x180 [ 955.103994][T18985] ? kmsan_get_metadata+0x116/0x180 [ 955.109203][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 955.114841][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 955.120129][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 955.124894][T18985] __sys_recvmmsg+0x340/0x5f0 [ 955.129617][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 955.135431][T18985] ? kmsan_get_metadata+0x116/0x180 [ 955.140628][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.146686][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.152828][T18985] __do_fast_syscall_32+0x129/0x180 [ 955.158013][T18985] do_fast_syscall_32+0x6a/0xc0 [ 955.162851][T18985] do_SYSENTER_32+0x73/0x90 [ 955.167342][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.173753][T18985] RIP: 0023:0xf7fe5549 [ 955.177824][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 955.197415][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 955.205818][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 955.213782][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 955.221742][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 955.229700][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 955.237656][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 955.245613][T18985] Uninit was stored to memory at: [ 955.250630][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 955.256335][T18985] __msan_chain_origin+0x57/0xa0 [ 955.261281][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 955.266376][T18985] get_compat_msghdr+0x108/0x2b0 [ 955.271298][T18985] do_recvmmsg+0xdc7/0x22e0 [ 955.275786][T18985] __sys_recvmmsg+0x340/0x5f0 [ 955.280449][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.286502][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.292642][T18985] __do_fast_syscall_32+0x129/0x180 [ 955.297831][T18985] do_fast_syscall_32+0x6a/0xc0 [ 955.302666][T18985] do_SYSENTER_32+0x73/0x90 [ 955.307163][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.313477][T18985] [ 955.315783][T18985] Uninit was stored to memory at: [ 955.320794][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 955.326500][T18985] __msan_chain_origin+0x57/0xa0 [ 955.331422][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 955.336517][T18985] get_compat_msghdr+0x108/0x2b0 [ 955.341451][T18985] do_recvmmsg+0xdc7/0x22e0 [ 955.345946][T18985] __sys_recvmmsg+0x340/0x5f0 [ 955.350608][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.356659][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.362886][T18985] __do_fast_syscall_32+0x129/0x180 [ 955.368077][T18985] do_fast_syscall_32+0x6a/0xc0 [ 955.372911][T18985] do_SYSENTER_32+0x73/0x90 [ 955.377400][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.383698][T18985] [ 955.386006][T18985] Uninit was stored to memory at: [ 955.391018][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 955.396723][T18985] __msan_chain_origin+0x57/0xa0 [ 955.401665][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 955.406760][T18985] get_compat_msghdr+0x108/0x2b0 [ 955.411683][T18985] do_recvmmsg+0xdc7/0x22e0 [ 955.416172][T18985] __sys_recvmmsg+0x340/0x5f0 [ 955.420833][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.426884][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.433024][T18985] __do_fast_syscall_32+0x129/0x180 [ 955.438207][T18985] do_fast_syscall_32+0x6a/0xc0 [ 955.443048][T18985] do_SYSENTER_32+0x73/0x90 [ 955.447537][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.453836][T18985] [ 955.456143][T18985] Uninit was stored to memory at: [ 955.461166][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 955.466871][T18985] __msan_chain_origin+0x57/0xa0 [ 955.471790][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 955.476884][T18985] get_compat_msghdr+0x108/0x2b0 [ 955.481807][T18985] do_recvmmsg+0xdc7/0x22e0 [ 955.486296][T18985] __sys_recvmmsg+0x340/0x5f0 [ 955.490957][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.497007][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.503145][T18985] __do_fast_syscall_32+0x129/0x180 [ 955.508331][T18985] do_fast_syscall_32+0x6a/0xc0 [ 955.513170][T18985] do_SYSENTER_32+0x73/0x90 [ 955.517658][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.523957][T18985] [ 955.526262][T18985] Uninit was stored to memory at: [ 955.531273][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 955.536979][T18985] __msan_chain_origin+0x57/0xa0 [ 955.541900][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 955.546994][T18985] get_compat_msghdr+0x108/0x2b0 [ 955.551914][T18985] do_recvmmsg+0xdc7/0x22e0 [ 955.556404][T18985] __sys_recvmmsg+0x340/0x5f0 [ 955.561066][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.567119][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.573258][T18985] __do_fast_syscall_32+0x129/0x180 [ 955.578439][T18985] do_fast_syscall_32+0x6a/0xc0 [ 955.583273][T18985] do_SYSENTER_32+0x73/0x90 [ 955.587762][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.594059][T18985] [ 955.596367][T18985] Uninit was stored to memory at: [ 955.601379][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 955.607082][T18985] __msan_chain_origin+0x57/0xa0 [ 955.612006][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 955.617101][T18985] get_compat_msghdr+0x108/0x2b0 [ 955.622023][T18985] do_recvmmsg+0xdc7/0x22e0 [ 955.626512][T18985] __sys_recvmmsg+0x340/0x5f0 [ 955.631175][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.637229][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.643365][T18985] __do_fast_syscall_32+0x129/0x180 [ 955.648548][T18985] do_fast_syscall_32+0x6a/0xc0 [ 955.653389][T18985] do_SYSENTER_32+0x73/0x90 [ 955.657877][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.664176][T18985] [ 955.666496][T18985] Uninit was stored to memory at: [ 955.671507][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 955.677210][T18985] __msan_chain_origin+0x57/0xa0 [ 955.682131][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 955.687229][T18985] get_compat_msghdr+0x108/0x2b0 [ 955.692151][T18985] do_recvmmsg+0xdc7/0x22e0 [ 955.696645][T18985] __sys_recvmmsg+0x340/0x5f0 [ 955.701308][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 955.707360][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 955.713499][T18985] __do_fast_syscall_32+0x129/0x180 [ 955.718681][T18985] do_fast_syscall_32+0x6a/0xc0 [ 955.723516][T18985] do_SYSENTER_32+0x73/0x90 [ 955.728004][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 955.734303][T18985] [ 955.736614][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 955.743278][T18985] do_recvmmsg+0xc2/0x22e0 [ 955.747692][T18985] do_recvmmsg+0xc2/0x22e0 [ 956.330220][T18982] not chained 450000 origins [ 956.334847][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 956.343511][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.353562][T18982] Call Trace: [ 956.356861][T18982] dump_stack+0x21c/0x280 [ 956.361197][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 956.366926][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 956.372996][T18982] ? kmsan_get_metadata+0x116/0x180 [ 956.378194][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 956.384011][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 956.390073][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 956.395447][T18982] ? kmsan_get_metadata+0x116/0x180 [ 956.400691][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 956.406333][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 956.412402][T18982] ? _copy_from_user+0x201/0x310 [ 956.417339][T18982] ? kmsan_get_metadata+0x116/0x180 [ 956.422543][T18982] __msan_chain_origin+0x57/0xa0 [ 956.427485][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 956.432604][T18982] get_compat_msghdr+0x108/0x2b0 [ 956.437554][T18982] do_recvmmsg+0xdc7/0x22e0 [ 956.442060][T18982] ? kmsan_get_metadata+0x116/0x180 [ 956.447260][T18982] ? kmsan_get_metadata+0x116/0x180 [ 956.452465][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 956.458102][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 956.463391][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 956.468158][T18982] __sys_recvmmsg+0x340/0x5f0 [ 956.472835][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 956.478635][T18982] ? kmsan_get_metadata+0x116/0x180 [ 956.483868][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 956.489939][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 956.496098][T18982] __do_fast_syscall_32+0x129/0x180 [ 956.501337][T18982] do_fast_syscall_32+0x6a/0xc0 [ 956.506190][T18982] do_SYSENTER_32+0x73/0x90 [ 956.510699][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.517025][T18982] RIP: 0023:0xf7fe5549 [ 956.521093][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 956.540699][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 956.549114][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 956.557085][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 956.565052][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 956.573132][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 956.581105][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 956.589071][T18982] Uninit was stored to memory at: [ 956.594105][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 956.599827][T18982] __msan_chain_origin+0x57/0xa0 [ 956.604766][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 956.609879][T18982] get_compat_msghdr+0x108/0x2b0 [ 956.614817][T18982] do_recvmmsg+0xdc7/0x22e0 [ 956.619318][T18982] __sys_recvmmsg+0x340/0x5f0 [ 956.623994][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 956.630061][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 956.636214][T18982] __do_fast_syscall_32+0x129/0x180 [ 956.641415][T18982] do_fast_syscall_32+0x6a/0xc0 [ 956.646263][T18982] do_SYSENTER_32+0x73/0x90 [ 956.650769][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.657076][T18982] [ 956.659395][T18982] Uninit was stored to memory at: [ 956.664425][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 956.670145][T18982] __msan_chain_origin+0x57/0xa0 [ 956.675081][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 956.680188][T18982] get_compat_msghdr+0x108/0x2b0 [ 956.685125][T18982] do_recvmmsg+0xdc7/0x22e0 [ 956.689633][T18982] __sys_recvmmsg+0x340/0x5f0 [ 956.694310][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 956.700375][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 956.706530][T18982] __do_fast_syscall_32+0x129/0x180 [ 956.711731][T18982] do_fast_syscall_32+0x6a/0xc0 [ 956.716579][T18982] do_SYSENTER_32+0x73/0x90 [ 956.721083][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.727505][T18982] [ 956.729823][T18982] Uninit was stored to memory at: [ 956.734855][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 956.740588][T18982] __msan_chain_origin+0x57/0xa0 [ 956.745523][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 956.750636][T18982] get_compat_msghdr+0x108/0x2b0 [ 956.755575][T18982] do_recvmmsg+0xdc7/0x22e0 [ 956.760078][T18982] __sys_recvmmsg+0x340/0x5f0 [ 956.764755][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 956.770820][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 956.776975][T18982] __do_fast_syscall_32+0x129/0x180 [ 956.782174][T18982] do_fast_syscall_32+0x6a/0xc0 [ 956.787025][T18982] do_SYSENTER_32+0x73/0x90 [ 956.791529][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.797836][T18982] [ 956.800151][T18982] Uninit was stored to memory at: [ 956.805179][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 956.810901][T18982] __msan_chain_origin+0x57/0xa0 [ 956.815840][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 956.820946][T18982] get_compat_msghdr+0x108/0x2b0 [ 956.825885][T18982] do_recvmmsg+0xdc7/0x22e0 [ 956.830387][T18982] __sys_recvmmsg+0x340/0x5f0 [ 956.835060][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 956.841128][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 956.847280][T18982] __do_fast_syscall_32+0x129/0x180 [ 956.852477][T18982] do_fast_syscall_32+0x6a/0xc0 [ 956.857329][T18982] do_SYSENTER_32+0x73/0x90 [ 956.861832][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.868141][T18982] [ 956.870459][T18982] Uninit was stored to memory at: [ 956.875489][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 956.881207][T18982] __msan_chain_origin+0x57/0xa0 [ 956.886145][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 956.891251][T18982] get_compat_msghdr+0x108/0x2b0 [ 956.896187][T18982] do_recvmmsg+0xdc7/0x22e0 [ 956.900695][T18982] __sys_recvmmsg+0x340/0x5f0 [ 956.905378][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 956.911447][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 956.917597][T18982] __do_fast_syscall_32+0x129/0x180 [ 956.922782][T18982] do_fast_syscall_32+0x6a/0xc0 [ 956.927618][T18982] do_SYSENTER_32+0x73/0x90 [ 956.932108][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 956.938409][T18982] [ 956.940719][T18982] Uninit was stored to memory at: [ 956.945736][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 956.951441][T18982] __msan_chain_origin+0x57/0xa0 [ 956.956363][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 956.961545][T18982] get_compat_msghdr+0x108/0x2b0 [ 956.966470][T18982] do_recvmmsg+0xdc7/0x22e0 [ 956.970960][T18982] __sys_recvmmsg+0x340/0x5f0 [ 956.975624][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 956.981674][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 956.987814][T18982] __do_fast_syscall_32+0x129/0x180 [ 956.992999][T18982] do_fast_syscall_32+0x6a/0xc0 [ 956.997850][T18982] do_SYSENTER_32+0x73/0x90 [ 957.002348][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.008647][T18982] [ 957.010958][T18982] Uninit was stored to memory at: [ 957.015977][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 957.021687][T18982] __msan_chain_origin+0x57/0xa0 [ 957.026615][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 957.031714][T18982] get_compat_msghdr+0x108/0x2b0 [ 957.036638][T18982] do_recvmmsg+0xdc7/0x22e0 [ 957.041129][T18982] __sys_recvmmsg+0x340/0x5f0 [ 957.045793][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.051843][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.057981][T18982] __do_fast_syscall_32+0x129/0x180 [ 957.063164][T18982] do_fast_syscall_32+0x6a/0xc0 [ 957.068000][T18982] do_SYSENTER_32+0x73/0x90 [ 957.072491][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.078791][T18982] [ 957.081098][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 957.087756][T18982] do_recvmmsg+0xc2/0x22e0 [ 957.092157][T18982] do_recvmmsg+0xc2/0x22e0 [ 957.471084][T18982] not chained 460000 origins [ 957.475804][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 957.484470][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.494598][T18982] Call Trace: [ 957.497881][T18982] dump_stack+0x21c/0x280 [ 957.502207][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 957.507916][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 957.513967][T18982] ? kmsan_get_metadata+0x116/0x180 [ 957.519151][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 957.524966][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 957.531017][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 957.536378][T18982] ? kmsan_get_metadata+0x116/0x180 [ 957.541566][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 957.547188][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 957.553245][T18982] ? _copy_from_user+0x201/0x310 [ 957.558167][T18982] ? kmsan_get_metadata+0x116/0x180 [ 957.563357][T18982] __msan_chain_origin+0x57/0xa0 [ 957.568283][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 957.573383][T18982] get_compat_msghdr+0x108/0x2b0 [ 957.578311][T18982] do_recvmmsg+0xdc7/0x22e0 [ 957.582805][T18982] ? kmsan_get_metadata+0x116/0x180 [ 957.587993][T18982] ? kmsan_get_metadata+0x116/0x180 [ 957.593177][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 957.598798][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 957.604070][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 957.608821][T18982] __sys_recvmmsg+0x340/0x5f0 [ 957.613487][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 957.619279][T18982] ? kmsan_get_metadata+0x116/0x180 [ 957.624468][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.630525][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.636670][T18982] __do_fast_syscall_32+0x129/0x180 [ 957.641858][T18982] do_fast_syscall_32+0x6a/0xc0 [ 957.646700][T18982] do_SYSENTER_32+0x73/0x90 [ 957.651192][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.657502][T18982] RIP: 0023:0xf7fe5549 [ 957.661558][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 957.681148][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 957.689544][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 957.697502][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 957.705459][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.713502][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 957.721456][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.729415][T18982] Uninit was stored to memory at: [ 957.734430][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 957.740156][T18982] __msan_chain_origin+0x57/0xa0 [ 957.745078][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 957.750172][T18982] get_compat_msghdr+0x108/0x2b0 [ 957.755096][T18982] do_recvmmsg+0xdc7/0x22e0 [ 957.759585][T18982] __sys_recvmmsg+0x340/0x5f0 [ 957.764246][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.770296][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.776438][T18982] __do_fast_syscall_32+0x129/0x180 [ 957.781622][T18982] do_fast_syscall_32+0x6a/0xc0 [ 957.786458][T18982] do_SYSENTER_32+0x73/0x90 [ 957.790946][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.797244][T18982] [ 957.799551][T18982] Uninit was stored to memory at: [ 957.804564][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 957.810288][T18982] __msan_chain_origin+0x57/0xa0 [ 957.815209][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 957.820301][T18982] get_compat_msghdr+0x108/0x2b0 [ 957.825223][T18982] do_recvmmsg+0xdc7/0x22e0 [ 957.829718][T18982] __sys_recvmmsg+0x340/0x5f0 [ 957.834380][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.840432][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.848740][T18982] __do_fast_syscall_32+0x129/0x180 [ 957.853924][T18982] do_fast_syscall_32+0x6a/0xc0 [ 957.858759][T18982] do_SYSENTER_32+0x73/0x90 [ 957.863251][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.869552][T18982] [ 957.871875][T18982] Uninit was stored to memory at: [ 957.876886][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 957.882591][T18982] __msan_chain_origin+0x57/0xa0 [ 957.887511][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 957.892603][T18982] get_compat_msghdr+0x108/0x2b0 [ 957.897526][T18982] do_recvmmsg+0xdc7/0x22e0 [ 957.902015][T18982] __sys_recvmmsg+0x340/0x5f0 [ 957.906683][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.912736][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.918875][T18982] __do_fast_syscall_32+0x129/0x180 [ 957.924060][T18982] do_fast_syscall_32+0x6a/0xc0 [ 957.928893][T18982] do_SYSENTER_32+0x73/0x90 [ 957.933385][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 957.939687][T18982] [ 957.941992][T18982] Uninit was stored to memory at: [ 957.947004][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 957.952710][T18982] __msan_chain_origin+0x57/0xa0 [ 957.957635][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 957.962731][T18982] get_compat_msghdr+0x108/0x2b0 [ 957.967654][T18982] do_recvmmsg+0xdc7/0x22e0 [ 957.972146][T18982] __sys_recvmmsg+0x340/0x5f0 [ 957.976809][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 957.982871][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 957.989007][T18982] __do_fast_syscall_32+0x129/0x180 [ 957.994193][T18982] do_fast_syscall_32+0x6a/0xc0 [ 957.999030][T18982] do_SYSENTER_32+0x73/0x90 [ 958.003518][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.009819][T18982] [ 958.012127][T18982] Uninit was stored to memory at: [ 958.017139][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 958.022844][T18982] __msan_chain_origin+0x57/0xa0 [ 958.027764][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 958.032862][T18982] get_compat_msghdr+0x108/0x2b0 [ 958.037784][T18982] do_recvmmsg+0xdc7/0x22e0 [ 958.042273][T18982] __sys_recvmmsg+0x340/0x5f0 [ 958.046934][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 958.052986][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 958.059127][T18982] __do_fast_syscall_32+0x129/0x180 [ 958.064309][T18982] do_fast_syscall_32+0x6a/0xc0 [ 958.069144][T18982] do_SYSENTER_32+0x73/0x90 [ 958.073634][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.079932][T18982] [ 958.082240][T18982] Uninit was stored to memory at: [ 958.087250][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 958.092956][T18982] __msan_chain_origin+0x57/0xa0 [ 958.097879][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 958.102971][T18982] get_compat_msghdr+0x108/0x2b0 [ 958.107897][T18982] do_recvmmsg+0xdc7/0x22e0 [ 958.112401][T18982] __sys_recvmmsg+0x340/0x5f0 [ 958.117065][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 958.123235][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 958.129378][T18982] __do_fast_syscall_32+0x129/0x180 [ 958.134560][T18982] do_fast_syscall_32+0x6a/0xc0 [ 958.139396][T18982] do_SYSENTER_32+0x73/0x90 [ 958.143885][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.150183][T18982] [ 958.152492][T18982] Uninit was stored to memory at: [ 958.157506][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 958.163269][T18982] __msan_chain_origin+0x57/0xa0 [ 958.168210][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 958.173329][T18982] get_compat_msghdr+0x108/0x2b0 [ 958.178266][T18982] do_recvmmsg+0xdc7/0x22e0 [ 958.182758][T18982] __sys_recvmmsg+0x340/0x5f0 [ 958.187424][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 958.193479][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 958.199618][T18982] __do_fast_syscall_32+0x129/0x180 [ 958.204801][T18982] do_fast_syscall_32+0x6a/0xc0 [ 958.209635][T18982] do_SYSENTER_32+0x73/0x90 [ 958.214125][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 958.220429][T18982] [ 958.222742][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 958.229402][T18982] do_recvmmsg+0xc2/0x22e0 [ 958.233805][T18982] do_recvmmsg+0xc2/0x22e0 [ 959.154008][T18982] not chained 470000 origins [ 959.158638][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 959.167309][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.177368][T18982] Call Trace: [ 959.180661][T18982] dump_stack+0x21c/0x280 [ 959.185000][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 959.190729][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 959.196797][T18982] ? kmsan_get_metadata+0x116/0x180 [ 959.201997][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 959.207808][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 959.213876][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 959.219249][T18982] ? kmsan_get_metadata+0x116/0x180 [ 959.224588][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 959.230226][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 959.236294][T18982] ? _copy_from_user+0x201/0x310 [ 959.241232][T18982] ? kmsan_get_metadata+0x116/0x180 [ 959.246435][T18982] __msan_chain_origin+0x57/0xa0 [ 959.251374][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 959.256489][T18982] get_compat_msghdr+0x108/0x2b0 [ 959.261434][T18982] do_recvmmsg+0xdc7/0x22e0 [ 959.265941][T18982] ? kmsan_get_metadata+0x116/0x180 [ 959.271153][T18982] ? kmsan_get_metadata+0x116/0x180 [ 959.276352][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 959.281987][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 959.287275][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 959.292040][T18982] __sys_recvmmsg+0x340/0x5f0 [ 959.296721][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 959.302525][T18982] ? kmsan_get_metadata+0x116/0x180 [ 959.307726][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.313797][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.319951][T18982] __do_fast_syscall_32+0x129/0x180 [ 959.325148][T18982] do_fast_syscall_32+0x6a/0xc0 [ 959.330002][T18982] do_SYSENTER_32+0x73/0x90 [ 959.334500][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.340810][T18982] RIP: 0023:0xf7fe5549 [ 959.344872][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 959.364472][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 959.372883][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 959.380850][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.388815][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 959.396776][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 959.404734][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 959.412692][T18982] Uninit was stored to memory at: [ 959.417710][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 959.423416][T18982] __msan_chain_origin+0x57/0xa0 [ 959.428339][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 959.433433][T18982] get_compat_msghdr+0x108/0x2b0 [ 959.438358][T18982] do_recvmmsg+0xdc7/0x22e0 [ 959.442862][T18982] __sys_recvmmsg+0x340/0x5f0 [ 959.447528][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.453580][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.459830][T18982] __do_fast_syscall_32+0x129/0x180 [ 959.465015][T18982] do_fast_syscall_32+0x6a/0xc0 [ 959.469849][T18982] do_SYSENTER_32+0x73/0x90 [ 959.474341][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.480641][T18982] [ 959.482948][T18982] Uninit was stored to memory at: [ 959.487961][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 959.493668][T18982] __msan_chain_origin+0x57/0xa0 [ 959.498590][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 959.503684][T18982] get_compat_msghdr+0x108/0x2b0 [ 959.508621][T18982] do_recvmmsg+0xdc7/0x22e0 [ 959.513108][T18982] __sys_recvmmsg+0x340/0x5f0 [ 959.517772][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.523823][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.529963][T18982] __do_fast_syscall_32+0x129/0x180 [ 959.535146][T18982] do_fast_syscall_32+0x6a/0xc0 [ 959.539979][T18982] do_SYSENTER_32+0x73/0x90 [ 959.544470][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.550784][T18982] [ 959.553089][T18982] Uninit was stored to memory at: [ 959.558102][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 959.563807][T18982] __msan_chain_origin+0x57/0xa0 [ 959.568726][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 959.573819][T18982] get_compat_msghdr+0x108/0x2b0 [ 959.578740][T18982] do_recvmmsg+0xdc7/0x22e0 [ 959.583229][T18982] __sys_recvmmsg+0x340/0x5f0 [ 959.587891][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.593941][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.600077][T18982] __do_fast_syscall_32+0x129/0x180 [ 959.605258][T18982] do_fast_syscall_32+0x6a/0xc0 [ 959.610092][T18982] do_SYSENTER_32+0x73/0x90 [ 959.614582][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.620881][T18982] [ 959.623187][T18982] Uninit was stored to memory at: [ 959.628201][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 959.633906][T18982] __msan_chain_origin+0x57/0xa0 [ 959.638828][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 959.643927][T18982] get_compat_msghdr+0x108/0x2b0 [ 959.648852][T18982] do_recvmmsg+0xdc7/0x22e0 [ 959.653344][T18982] __sys_recvmmsg+0x340/0x5f0 [ 959.658006][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.664059][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.670198][T18982] __do_fast_syscall_32+0x129/0x180 [ 959.675383][T18982] do_fast_syscall_32+0x6a/0xc0 [ 959.680231][T18982] do_SYSENTER_32+0x73/0x90 [ 959.684722][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.691022][T18982] [ 959.693327][T18982] Uninit was stored to memory at: [ 959.698339][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 959.704044][T18982] __msan_chain_origin+0x57/0xa0 [ 959.708964][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 959.714057][T18982] get_compat_msghdr+0x108/0x2b0 [ 959.718978][T18982] do_recvmmsg+0xdc7/0x22e0 [ 959.723468][T18982] __sys_recvmmsg+0x340/0x5f0 [ 959.728132][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.734184][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.740322][T18982] __do_fast_syscall_32+0x129/0x180 [ 959.745505][T18982] do_fast_syscall_32+0x6a/0xc0 [ 959.750338][T18982] do_SYSENTER_32+0x73/0x90 [ 959.754828][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.761131][T18982] [ 959.763436][T18982] Uninit was stored to memory at: [ 959.768448][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 959.774155][T18982] __msan_chain_origin+0x57/0xa0 [ 959.779075][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 959.784171][T18982] get_compat_msghdr+0x108/0x2b0 [ 959.789094][T18982] do_recvmmsg+0xdc7/0x22e0 [ 959.793584][T18982] __sys_recvmmsg+0x340/0x5f0 [ 959.798250][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.804304][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.810442][T18982] __do_fast_syscall_32+0x129/0x180 [ 959.815626][T18982] do_fast_syscall_32+0x6a/0xc0 [ 959.820462][T18982] do_SYSENTER_32+0x73/0x90 [ 959.824952][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.831250][T18982] [ 959.833558][T18982] Uninit was stored to memory at: [ 959.838570][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 959.844273][T18982] __msan_chain_origin+0x57/0xa0 [ 959.849195][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 959.854290][T18982] get_compat_msghdr+0x108/0x2b0 [ 959.859212][T18982] do_recvmmsg+0xdc7/0x22e0 [ 959.863703][T18982] __sys_recvmmsg+0x340/0x5f0 [ 959.868367][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 959.874419][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 959.880557][T18982] __do_fast_syscall_32+0x129/0x180 [ 959.885753][T18982] do_fast_syscall_32+0x6a/0xc0 [ 959.890588][T18982] do_SYSENTER_32+0x73/0x90 [ 959.895078][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 959.901377][T18982] [ 959.903708][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 959.910367][T18982] do_recvmmsg+0xc2/0x22e0 [ 959.914783][T18982] do_recvmmsg+0xc2/0x22e0 [ 960.418793][T18982] not chained 480000 origins [ 960.423411][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 960.432063][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.442101][T18982] Call Trace: [ 960.445384][T18982] dump_stack+0x21c/0x280 [ 960.449711][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 960.455436][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 960.461491][T18982] ? kmsan_get_metadata+0x116/0x180 [ 960.466678][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 960.472473][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 960.478524][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 960.483882][T18982] ? kmsan_get_metadata+0x116/0x180 [ 960.489069][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 960.494694][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 960.500753][T18982] ? _copy_from_user+0x201/0x310 [ 960.505677][T18982] ? kmsan_get_metadata+0x116/0x180 [ 960.510863][T18982] __msan_chain_origin+0x57/0xa0 [ 960.515789][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 960.520891][T18982] get_compat_msghdr+0x108/0x2b0 [ 960.525819][T18982] do_recvmmsg+0xdc7/0x22e0 [ 960.530323][T18982] ? kmsan_get_metadata+0x116/0x180 [ 960.535510][T18982] ? kmsan_get_metadata+0x116/0x180 [ 960.540698][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 960.546319][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 960.551592][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 960.556346][T18982] __sys_recvmmsg+0x340/0x5f0 [ 960.561021][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 960.566811][T18982] ? kmsan_get_metadata+0x116/0x180 [ 960.571998][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 960.578054][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 960.584195][T18982] __do_fast_syscall_32+0x129/0x180 [ 960.589382][T18982] do_fast_syscall_32+0x6a/0xc0 [ 960.594219][T18982] do_SYSENTER_32+0x73/0x90 [ 960.598713][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.605026][T18982] RIP: 0023:0xf7fe5549 [ 960.609083][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 960.628675][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 960.637073][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 960.645121][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 960.653084][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 960.661038][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 960.668993][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 960.676950][T18982] Uninit was stored to memory at: [ 960.681977][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 960.687685][T18982] __msan_chain_origin+0x57/0xa0 [ 960.692621][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 960.697714][T18982] get_compat_msghdr+0x108/0x2b0 [ 960.702645][T18982] do_recvmmsg+0xdc7/0x22e0 [ 960.707132][T18982] __sys_recvmmsg+0x340/0x5f0 [ 960.711793][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 960.717845][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 960.723985][T18982] __do_fast_syscall_32+0x129/0x180 [ 960.729169][T18982] do_fast_syscall_32+0x6a/0xc0 [ 960.734005][T18982] do_SYSENTER_32+0x73/0x90 [ 960.738495][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.744805][T18982] [ 960.747111][T18982] Uninit was stored to memory at: [ 960.752232][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 960.757937][T18982] __msan_chain_origin+0x57/0xa0 [ 960.762857][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 960.767952][T18982] get_compat_msghdr+0x108/0x2b0 [ 960.772876][T18982] do_recvmmsg+0xdc7/0x22e0 [ 960.777365][T18982] __sys_recvmmsg+0x340/0x5f0 [ 960.782027][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 960.788079][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 960.794219][T18982] __do_fast_syscall_32+0x129/0x180 [ 960.799403][T18982] do_fast_syscall_32+0x6a/0xc0 [ 960.804239][T18982] do_SYSENTER_32+0x73/0x90 [ 960.808737][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.815049][T18982] [ 960.817357][T18982] Uninit was stored to memory at: [ 960.822369][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 960.828161][T18982] __msan_chain_origin+0x57/0xa0 [ 960.833082][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 960.838175][T18982] get_compat_msghdr+0x108/0x2b0 [ 960.843100][T18982] do_recvmmsg+0xdc7/0x22e0 [ 960.847590][T18982] __sys_recvmmsg+0x340/0x5f0 [ 960.852254][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 960.858305][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 960.864459][T18982] __do_fast_syscall_32+0x129/0x180 [ 960.869642][T18982] do_fast_syscall_32+0x6a/0xc0 [ 960.874479][T18982] do_SYSENTER_32+0x73/0x90 [ 960.878969][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.885268][T18982] [ 960.887576][T18982] Uninit was stored to memory at: [ 960.892588][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 960.898295][T18982] __msan_chain_origin+0x57/0xa0 [ 960.903217][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 960.908315][T18982] get_compat_msghdr+0x108/0x2b0 [ 960.913237][T18982] do_recvmmsg+0xdc7/0x22e0 [ 960.917726][T18982] __sys_recvmmsg+0x340/0x5f0 [ 960.922392][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 960.928448][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 960.934586][T18982] __do_fast_syscall_32+0x129/0x180 [ 960.939771][T18982] do_fast_syscall_32+0x6a/0xc0 [ 960.944606][T18982] do_SYSENTER_32+0x73/0x90 [ 960.949098][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 960.955409][T18982] [ 960.957718][T18982] Uninit was stored to memory at: [ 960.962821][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 960.968527][T18982] __msan_chain_origin+0x57/0xa0 [ 960.973462][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 960.978570][T18982] get_compat_msghdr+0x108/0x2b0 [ 960.983501][T18982] do_recvmmsg+0xdc7/0x22e0 [ 960.987995][T18982] __sys_recvmmsg+0x340/0x5f0 [ 960.992671][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 960.998731][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.004984][T18982] __do_fast_syscall_32+0x129/0x180 [ 961.010170][T18982] do_fast_syscall_32+0x6a/0xc0 [ 961.015010][T18982] do_SYSENTER_32+0x73/0x90 [ 961.019503][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.025816][T18982] [ 961.028127][T18982] Uninit was stored to memory at: [ 961.033141][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 961.038847][T18982] __msan_chain_origin+0x57/0xa0 [ 961.043769][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 961.048865][T18982] get_compat_msghdr+0x108/0x2b0 [ 961.053789][T18982] do_recvmmsg+0xdc7/0x22e0 [ 961.058278][T18982] __sys_recvmmsg+0x340/0x5f0 [ 961.062940][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.068993][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.075131][T18982] __do_fast_syscall_32+0x129/0x180 [ 961.080315][T18982] do_fast_syscall_32+0x6a/0xc0 [ 961.085154][T18982] do_SYSENTER_32+0x73/0x90 [ 961.089642][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.095941][T18982] [ 961.098246][T18982] Uninit was stored to memory at: [ 961.103259][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 961.108965][T18982] __msan_chain_origin+0x57/0xa0 [ 961.113903][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 961.119003][T18982] get_compat_msghdr+0x108/0x2b0 [ 961.123933][T18982] do_recvmmsg+0xdc7/0x22e0 [ 961.128432][T18982] __sys_recvmmsg+0x340/0x5f0 [ 961.133104][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.139165][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.145312][T18982] __do_fast_syscall_32+0x129/0x180 [ 961.150499][T18982] do_fast_syscall_32+0x6a/0xc0 [ 961.155336][T18982] do_SYSENTER_32+0x73/0x90 [ 961.159828][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.166132][T18982] [ 961.168443][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 961.175114][T18982] do_recvmmsg+0xc2/0x22e0 [ 961.179521][T18982] do_recvmmsg+0xc2/0x22e0 [ 961.508039][T18985] not chained 490000 origins [ 961.512788][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 961.521492][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.531544][T18985] Call Trace: [ 961.534839][T18985] dump_stack+0x21c/0x280 [ 961.539199][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 961.544922][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 961.550992][T18985] ? kmsan_get_metadata+0x116/0x180 [ 961.556196][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 961.562005][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 961.568068][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 961.573440][T18985] ? kmsan_get_metadata+0x116/0x180 [ 961.578640][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 961.584273][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 961.590335][T18985] ? _copy_from_user+0x201/0x310 [ 961.595271][T18985] ? kmsan_get_metadata+0x116/0x180 [ 961.600467][T18985] __msan_chain_origin+0x57/0xa0 [ 961.605406][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 961.610520][T18985] get_compat_msghdr+0x108/0x2b0 [ 961.615462][T18985] do_recvmmsg+0xdc7/0x22e0 [ 961.619966][T18985] ? kmsan_get_metadata+0x116/0x180 [ 961.625168][T18985] ? kmsan_get_metadata+0x116/0x180 [ 961.630369][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 961.636001][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 961.642154][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 961.646920][T18985] __sys_recvmmsg+0x340/0x5f0 [ 961.651602][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 961.657401][T18985] ? kmsan_get_metadata+0x116/0x180 [ 961.662600][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.668678][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.674832][T18985] __do_fast_syscall_32+0x129/0x180 [ 961.680055][T18985] do_fast_syscall_32+0x6a/0xc0 [ 961.684905][T18985] do_SYSENTER_32+0x73/0x90 [ 961.689406][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.695723][T18985] RIP: 0023:0xf7fe5549 [ 961.699790][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 961.719394][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 961.727809][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 961.735774][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 961.743731][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 961.751686][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 961.759643][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 961.767599][T18985] Uninit was stored to memory at: [ 961.772621][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 961.778326][T18985] __msan_chain_origin+0x57/0xa0 [ 961.783251][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 961.788346][T18985] get_compat_msghdr+0x108/0x2b0 [ 961.793269][T18985] do_recvmmsg+0xdc7/0x22e0 [ 961.797769][T18985] __sys_recvmmsg+0x340/0x5f0 [ 961.802433][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.808484][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.814626][T18985] __do_fast_syscall_32+0x129/0x180 [ 961.819812][T18985] do_fast_syscall_32+0x6a/0xc0 [ 961.824657][T18985] do_SYSENTER_32+0x73/0x90 [ 961.829152][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.835456][T18985] [ 961.837763][T18985] Uninit was stored to memory at: [ 961.842780][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 961.848484][T18985] __msan_chain_origin+0x57/0xa0 [ 961.853406][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 961.858503][T18985] get_compat_msghdr+0x108/0x2b0 [ 961.863431][T18985] do_recvmmsg+0xdc7/0x22e0 [ 961.867920][T18985] __sys_recvmmsg+0x340/0x5f0 [ 961.872582][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.878635][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.884775][T18985] __do_fast_syscall_32+0x129/0x180 [ 961.889960][T18985] do_fast_syscall_32+0x6a/0xc0 [ 961.894795][T18985] do_SYSENTER_32+0x73/0x90 [ 961.899288][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.905589][T18985] [ 961.907897][T18985] Uninit was stored to memory at: [ 961.912908][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 961.918612][T18985] __msan_chain_origin+0x57/0xa0 [ 961.923634][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 961.928729][T18985] get_compat_msghdr+0x108/0x2b0 [ 961.933652][T18985] do_recvmmsg+0xdc7/0x22e0 [ 961.938141][T18985] __sys_recvmmsg+0x340/0x5f0 [ 961.942803][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 961.948853][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 961.955079][T18985] __do_fast_syscall_32+0x129/0x180 [ 961.960264][T18985] do_fast_syscall_32+0x6a/0xc0 [ 961.965101][T18985] do_SYSENTER_32+0x73/0x90 [ 961.969592][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 961.975892][T18985] [ 961.978200][T18985] Uninit was stored to memory at: [ 961.983211][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 961.988927][T18985] __msan_chain_origin+0x57/0xa0 [ 961.993848][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 961.998958][T18985] get_compat_msghdr+0x108/0x2b0 [ 962.003895][T18985] do_recvmmsg+0xdc7/0x22e0 [ 962.008389][T18985] __sys_recvmmsg+0x340/0x5f0 [ 962.013059][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 962.019122][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 962.025270][T18985] __do_fast_syscall_32+0x129/0x180 [ 962.030455][T18985] do_fast_syscall_32+0x6a/0xc0 [ 962.035291][T18985] do_SYSENTER_32+0x73/0x90 [ 962.039783][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 962.046083][T18985] [ 962.048390][T18985] Uninit was stored to memory at: [ 962.053405][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 962.059108][T18985] __msan_chain_origin+0x57/0xa0 [ 962.064030][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 962.069122][T18985] get_compat_msghdr+0x108/0x2b0 [ 962.074044][T18985] do_recvmmsg+0xdc7/0x22e0 [ 962.078545][T18985] __sys_recvmmsg+0x340/0x5f0 [ 962.083208][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 962.089258][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 962.095409][T18985] __do_fast_syscall_32+0x129/0x180 [ 962.100592][T18985] do_fast_syscall_32+0x6a/0xc0 [ 962.105426][T18985] do_SYSENTER_32+0x73/0x90 [ 962.109913][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 962.116214][T18985] [ 962.118520][T18985] Uninit was stored to memory at: [ 962.123532][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 962.129238][T18985] __msan_chain_origin+0x57/0xa0 [ 962.134160][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 962.139262][T18985] get_compat_msghdr+0x108/0x2b0 [ 962.144182][T18985] do_recvmmsg+0xdc7/0x22e0 [ 962.148669][T18985] __sys_recvmmsg+0x340/0x5f0 [ 962.153338][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 962.159390][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 962.165537][T18985] __do_fast_syscall_32+0x129/0x180 [ 962.170731][T18985] do_fast_syscall_32+0x6a/0xc0 [ 962.175576][T18985] do_SYSENTER_32+0x73/0x90 [ 962.180072][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 962.186378][T18985] [ 962.188694][T18985] Uninit was stored to memory at: [ 962.193715][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 962.199424][T18985] __msan_chain_origin+0x57/0xa0 [ 962.204353][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 962.209475][T18985] get_compat_msghdr+0x108/0x2b0 [ 962.214401][T18985] do_recvmmsg+0xdc7/0x22e0 [ 962.218899][T18985] __sys_recvmmsg+0x340/0x5f0 [ 962.223563][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 962.229615][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 962.235758][T18985] __do_fast_syscall_32+0x129/0x180 [ 962.240956][T18985] do_fast_syscall_32+0x6a/0xc0 [ 962.245790][T18985] do_SYSENTER_32+0x73/0x90 [ 962.250278][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 962.256580][T18985] [ 962.258979][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 962.265638][T18985] do_recvmmsg+0xc2/0x22e0 [ 962.270039][T18985] do_recvmmsg+0xc2/0x22e0 [ 962.874070][T18985] not chained 500000 origins [ 962.878691][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 962.887342][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 962.897378][T18985] Call Trace: [ 962.900660][T18985] dump_stack+0x21c/0x280 [ 962.905002][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 962.910711][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 962.916763][T18985] ? kmsan_get_metadata+0x116/0x180 [ 962.921949][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 962.927749][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 962.933818][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 962.940217][T18985] ? kmsan_get_metadata+0x116/0x180 [ 962.945406][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 962.951033][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 962.957091][T18985] ? _copy_from_user+0x201/0x310 [ 962.962034][T18985] ? kmsan_get_metadata+0x116/0x180 [ 962.967222][T18985] __msan_chain_origin+0x57/0xa0 [ 962.972147][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 962.977258][T18985] get_compat_msghdr+0x108/0x2b0 [ 962.982186][T18985] do_recvmmsg+0xdc7/0x22e0 [ 962.986681][T18985] ? kmsan_get_metadata+0x116/0x180 [ 962.991869][T18985] ? kmsan_get_metadata+0x116/0x180 [ 962.997056][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 963.002690][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 963.007969][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 963.012742][T18985] __sys_recvmmsg+0x340/0x5f0 [ 963.017410][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 963.023212][T18985] ? kmsan_get_metadata+0x116/0x180 [ 963.028407][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.034469][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.040616][T18985] __do_fast_syscall_32+0x129/0x180 [ 963.045807][T18985] do_fast_syscall_32+0x6a/0xc0 [ 963.050648][T18985] do_SYSENTER_32+0x73/0x90 [ 963.055142][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.061450][T18985] RIP: 0023:0xf7fe5549 [ 963.065506][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 963.085110][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 963.093505][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 963.101461][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 963.109426][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 963.117381][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 963.125339][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 963.133295][T18985] Uninit was stored to memory at: [ 963.138308][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 963.144010][T18985] __msan_chain_origin+0x57/0xa0 [ 963.148932][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 963.154113][T18985] get_compat_msghdr+0x108/0x2b0 [ 963.159038][T18985] do_recvmmsg+0xdc7/0x22e0 [ 963.163540][T18985] __sys_recvmmsg+0x340/0x5f0 [ 963.168213][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.174279][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.180444][T18985] __do_fast_syscall_32+0x129/0x180 [ 963.185633][T18985] do_fast_syscall_32+0x6a/0xc0 [ 963.190471][T18985] do_SYSENTER_32+0x73/0x90 [ 963.194964][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.201263][T18985] [ 963.203573][T18985] Uninit was stored to memory at: [ 963.208590][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 963.214301][T18985] __msan_chain_origin+0x57/0xa0 [ 963.219229][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 963.224328][T18985] get_compat_msghdr+0x108/0x2b0 [ 963.229252][T18985] do_recvmmsg+0xdc7/0x22e0 [ 963.233744][T18985] __sys_recvmmsg+0x340/0x5f0 [ 963.238407][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.244461][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.250598][T18985] __do_fast_syscall_32+0x129/0x180 [ 963.255785][T18985] do_fast_syscall_32+0x6a/0xc0 [ 963.260620][T18985] do_SYSENTER_32+0x73/0x90 [ 963.265109][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.271407][T18985] [ 963.273713][T18985] Uninit was stored to memory at: [ 963.278725][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 963.284432][T18985] __msan_chain_origin+0x57/0xa0 [ 963.289362][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 963.294457][T18985] get_compat_msghdr+0x108/0x2b0 [ 963.299405][T18985] do_recvmmsg+0xdc7/0x22e0 [ 963.303898][T18985] __sys_recvmmsg+0x340/0x5f0 [ 963.308561][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.314612][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.320751][T18985] __do_fast_syscall_32+0x129/0x180 [ 963.325936][T18985] do_fast_syscall_32+0x6a/0xc0 [ 963.330780][T18985] do_SYSENTER_32+0x73/0x90 [ 963.335270][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.341571][T18985] [ 963.343877][T18985] Uninit was stored to memory at: [ 963.348888][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 963.354595][T18985] __msan_chain_origin+0x57/0xa0 [ 963.359514][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 963.364610][T18985] get_compat_msghdr+0x108/0x2b0 [ 963.369536][T18985] do_recvmmsg+0xdc7/0x22e0 [ 963.374028][T18985] __sys_recvmmsg+0x340/0x5f0 [ 963.378691][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.384744][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.390898][T18985] __do_fast_syscall_32+0x129/0x180 [ 963.396080][T18985] do_fast_syscall_32+0x6a/0xc0 [ 963.400915][T18985] do_SYSENTER_32+0x73/0x90 [ 963.405403][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.411715][T18985] [ 963.414019][T18985] Uninit was stored to memory at: [ 963.419033][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 963.424738][T18985] __msan_chain_origin+0x57/0xa0 [ 963.429659][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 963.434764][T18985] get_compat_msghdr+0x108/0x2b0 [ 963.439701][T18985] do_recvmmsg+0xdc7/0x22e0 [ 963.444203][T18985] __sys_recvmmsg+0x340/0x5f0 [ 963.448864][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.454915][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.461053][T18985] __do_fast_syscall_32+0x129/0x180 [ 963.466235][T18985] do_fast_syscall_32+0x6a/0xc0 [ 963.471069][T18985] do_SYSENTER_32+0x73/0x90 [ 963.475558][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.481858][T18985] [ 963.484179][T18985] Uninit was stored to memory at: [ 963.489203][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 963.494909][T18985] __msan_chain_origin+0x57/0xa0 [ 963.499829][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 963.504929][T18985] get_compat_msghdr+0x108/0x2b0 [ 963.509851][T18985] do_recvmmsg+0xdc7/0x22e0 [ 963.514340][T18985] __sys_recvmmsg+0x340/0x5f0 [ 963.519002][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.525053][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.531192][T18985] __do_fast_syscall_32+0x129/0x180 [ 963.536375][T18985] do_fast_syscall_32+0x6a/0xc0 [ 963.541209][T18985] do_SYSENTER_32+0x73/0x90 [ 963.545700][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.551999][T18985] [ 963.554305][T18985] Uninit was stored to memory at: [ 963.559317][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 963.565022][T18985] __msan_chain_origin+0x57/0xa0 [ 963.569943][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 963.575037][T18985] get_compat_msghdr+0x108/0x2b0 [ 963.579958][T18985] do_recvmmsg+0xdc7/0x22e0 [ 963.584448][T18985] __sys_recvmmsg+0x340/0x5f0 [ 963.589109][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 963.595166][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 963.601304][T18985] __do_fast_syscall_32+0x129/0x180 [ 963.606486][T18985] do_fast_syscall_32+0x6a/0xc0 [ 963.611321][T18985] do_SYSENTER_32+0x73/0x90 [ 963.615811][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 963.622110][T18985] [ 963.624421][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 963.631079][T18985] do_recvmmsg+0xc2/0x22e0 [ 963.635485][T18985] do_recvmmsg+0xc2/0x22e0 [ 963.970565][T18985] not chained 510000 origins [ 963.975192][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 963.983859][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.993906][T18985] Call Trace: [ 963.997214][T18985] dump_stack+0x21c/0x280 [ 964.001563][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 964.007290][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 964.013355][T18985] ? kmsan_get_metadata+0x116/0x180 [ 964.018548][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 964.024355][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 964.030416][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 964.035783][T18985] ? kmsan_get_metadata+0x116/0x180 [ 964.040984][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 964.046617][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 964.052680][T18985] ? _copy_from_user+0x201/0x310 [ 964.057615][T18985] ? kmsan_get_metadata+0x116/0x180 [ 964.062812][T18985] __msan_chain_origin+0x57/0xa0 [ 964.067747][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 964.072860][T18985] get_compat_msghdr+0x108/0x2b0 [ 964.077798][T18985] do_recvmmsg+0xdc7/0x22e0 [ 964.082301][T18985] ? kmsan_get_metadata+0x116/0x180 [ 964.087498][T18985] ? kmsan_get_metadata+0x116/0x180 [ 964.092694][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 964.098317][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 964.103590][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 964.108345][T18985] __sys_recvmmsg+0x340/0x5f0 [ 964.113017][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 964.118808][T18985] ? kmsan_get_metadata+0x116/0x180 [ 964.123995][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 964.130050][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 964.136195][T18985] __do_fast_syscall_32+0x129/0x180 [ 964.141383][T18985] do_fast_syscall_32+0x6a/0xc0 [ 964.146231][T18985] do_SYSENTER_32+0x73/0x90 [ 964.150722][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 964.157032][T18985] RIP: 0023:0xf7fe5549 [ 964.161087][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 964.180804][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 964.189215][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 964.197176][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 964.205134][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 964.213106][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 964.221062][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 964.229022][T18985] Uninit was stored to memory at: [ 964.234043][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 964.239848][T18985] __msan_chain_origin+0x57/0xa0 [ 964.244771][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 964.249865][T18985] get_compat_msghdr+0x108/0x2b0 [ 964.254787][T18985] do_recvmmsg+0xdc7/0x22e0 [ 964.259278][T18985] __sys_recvmmsg+0x340/0x5f0 [ 964.263949][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 964.270011][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 964.276152][T18985] __do_fast_syscall_32+0x129/0x180 [ 964.281339][T18985] do_fast_syscall_32+0x6a/0xc0 [ 964.286174][T18985] do_SYSENTER_32+0x73/0x90 [ 964.290661][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 964.296964][T18985] [ 964.299274][T18985] Uninit was stored to memory at: [ 964.304286][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 964.309990][T18985] __msan_chain_origin+0x57/0xa0 [ 964.314912][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 964.320011][T18985] get_compat_msghdr+0x108/0x2b0 [ 964.324933][T18985] do_recvmmsg+0xdc7/0x22e0 [ 964.329437][T18985] __sys_recvmmsg+0x340/0x5f0 [ 964.334098][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 964.340153][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 964.346292][T18985] __do_fast_syscall_32+0x129/0x180 [ 964.351473][T18985] do_fast_syscall_32+0x6a/0xc0 [ 964.356306][T18985] do_SYSENTER_32+0x73/0x90 [ 964.360795][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 964.367093][T18985] [ 964.369399][T18985] Uninit was stored to memory at: [ 964.374411][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 964.380114][T18985] __msan_chain_origin+0x57/0xa0 [ 964.385034][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 964.390129][T18985] get_compat_msghdr+0x108/0x2b0 [ 964.395055][T18985] do_recvmmsg+0xdc7/0x22e0 [ 964.399542][T18985] __sys_recvmmsg+0x340/0x5f0 [ 964.404207][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 964.410258][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 964.416396][T18985] __do_fast_syscall_32+0x129/0x180 [ 964.421577][T18985] do_fast_syscall_32+0x6a/0xc0 [ 964.426410][T18985] do_SYSENTER_32+0x73/0x90 [ 964.430899][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 964.437217][T18985] [ 964.439523][T18985] Uninit was stored to memory at: [ 964.444541][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 964.450246][T18985] __msan_chain_origin+0x57/0xa0 [ 964.455166][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 964.460260][T18985] get_compat_msghdr+0x108/0x2b0 [ 964.465182][T18985] do_recvmmsg+0xdc7/0x22e0 [ 964.469676][T18985] __sys_recvmmsg+0x340/0x5f0 [ 964.474336][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 964.480385][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 964.486523][T18985] __do_fast_syscall_32+0x129/0x180 [ 964.491707][T18985] do_fast_syscall_32+0x6a/0xc0 [ 964.496545][T18985] do_SYSENTER_32+0x73/0x90 [ 964.501035][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 964.507335][T18985] [ 964.509643][T18985] Uninit was stored to memory at: [ 964.514660][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 964.520456][T18985] __msan_chain_origin+0x57/0xa0 [ 964.525377][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 964.530486][T18985] get_compat_msghdr+0x108/0x2b0 [ 964.535434][T18985] do_recvmmsg+0xdc7/0x22e0 [ 964.539941][T18985] __sys_recvmmsg+0x340/0x5f0 [ 964.544621][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 964.550689][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 964.556831][T18985] __do_fast_syscall_32+0x129/0x180 [ 964.562015][T18985] do_fast_syscall_32+0x6a/0xc0 [ 964.566849][T18985] do_SYSENTER_32+0x73/0x90 [ 964.571338][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 964.577640][T18985] [ 964.579951][T18985] Uninit was stored to memory at: [ 964.584980][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 964.590685][T18985] __msan_chain_origin+0x57/0xa0 [ 964.595609][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 964.601744][T18985] get_compat_msghdr+0x108/0x2b0 [ 964.606672][T18985] do_recvmmsg+0xdc7/0x22e0 [ 964.611160][T18985] __sys_recvmmsg+0x340/0x5f0 [ 964.615822][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 964.621874][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 964.628012][T18985] __do_fast_syscall_32+0x129/0x180 [ 964.633202][T18985] do_fast_syscall_32+0x6a/0xc0 [ 964.638037][T18985] do_SYSENTER_32+0x73/0x90 [ 964.642528][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 964.648837][T18985] [ 964.651143][T18985] Uninit was stored to memory at: [ 964.656155][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 964.661860][T18985] __msan_chain_origin+0x57/0xa0 [ 964.666782][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 964.672137][T18985] get_compat_msghdr+0x108/0x2b0 [ 964.677060][T18985] do_recvmmsg+0xdc7/0x22e0 [ 964.681550][T18985] __sys_recvmmsg+0x340/0x5f0 [ 964.686211][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 964.692262][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 964.698403][T18985] __do_fast_syscall_32+0x129/0x180 [ 964.703587][T18985] do_fast_syscall_32+0x6a/0xc0 [ 964.708420][T18985] do_SYSENTER_32+0x73/0x90 [ 964.712910][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 964.719207][T18985] [ 964.721515][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 964.728174][T18985] do_recvmmsg+0xc2/0x22e0 [ 964.732575][T18985] do_recvmmsg+0xc2/0x22e0 [ 964.889272][T18985] not chained 520000 origins [ 964.893871][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 964.902521][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.912569][T18985] Call Trace: [ 964.915848][T18985] dump_stack+0x21c/0x280 [ 964.920207][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 964.925907][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 964.931962][T18985] ? kmsan_get_metadata+0x116/0x180 [ 964.937182][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 964.942995][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 964.949046][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 964.954395][T18985] ? kmsan_get_metadata+0x116/0x180 [ 964.959569][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 964.965224][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 964.971266][T18985] ? _copy_from_user+0x201/0x310 [ 964.976210][T18985] ? kmsan_get_metadata+0x116/0x180 [ 964.981383][T18985] __msan_chain_origin+0x57/0xa0 [ 964.986309][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 964.991508][T18985] get_compat_msghdr+0x108/0x2b0 [ 964.996446][T18985] do_recvmmsg+0xdc7/0x22e0 [ 965.000950][T18985] ? kmsan_get_metadata+0x116/0x180 [ 965.006143][T18985] ? kmsan_get_metadata+0x116/0x180 [ 965.011372][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 965.017019][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 965.022293][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 965.027046][T18985] __sys_recvmmsg+0x340/0x5f0 [ 965.031701][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 965.037501][T18985] ? kmsan_get_metadata+0x116/0x180 [ 965.042690][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.048761][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.054914][T18985] __do_fast_syscall_32+0x129/0x180 [ 965.060087][T18985] do_fast_syscall_32+0x6a/0xc0 [ 965.064917][T18985] do_SYSENTER_32+0x73/0x90 [ 965.069395][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.075695][T18985] RIP: 0023:0xf7fe5549 [ 965.079738][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 965.099425][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 965.107829][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 965.115805][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 965.123762][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 965.131720][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 965.139672][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 965.147672][T18985] Uninit was stored to memory at: [ 965.152697][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 965.158418][T18985] __msan_chain_origin+0x57/0xa0 [ 965.163342][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 965.168438][T18985] get_compat_msghdr+0x108/0x2b0 [ 965.173361][T18985] do_recvmmsg+0xdc7/0x22e0 [ 965.177890][T18985] __sys_recvmmsg+0x340/0x5f0 [ 965.182558][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.188651][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.194793][T18985] __do_fast_syscall_32+0x129/0x180 [ 965.199966][T18985] do_fast_syscall_32+0x6a/0xc0 [ 965.204806][T18985] do_SYSENTER_32+0x73/0x90 [ 965.209301][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.215602][T18985] [ 965.217903][T18985] Uninit was stored to memory at: [ 965.222919][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 965.228672][T18985] __msan_chain_origin+0x57/0xa0 [ 965.233586][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 965.238726][T18985] get_compat_msghdr+0x108/0x2b0 [ 965.243653][T18985] do_recvmmsg+0xdc7/0x22e0 [ 965.248147][T18985] __sys_recvmmsg+0x340/0x5f0 [ 965.252810][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.258860][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.265037][T18985] __do_fast_syscall_32+0x129/0x180 [ 965.270220][T18985] do_fast_syscall_32+0x6a/0xc0 [ 965.275046][T18985] do_SYSENTER_32+0x73/0x90 [ 965.279524][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.285818][T18985] [ 965.288117][T18985] Uninit was stored to memory at: [ 965.293130][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 965.298834][T18985] __msan_chain_origin+0x57/0xa0 [ 965.303755][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 965.308855][T18985] get_compat_msghdr+0x108/0x2b0 [ 965.313773][T18985] do_recvmmsg+0xdc7/0x22e0 [ 965.318249][T18985] __sys_recvmmsg+0x340/0x5f0 [ 965.322911][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.328962][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.335092][T18985] __do_fast_syscall_32+0x129/0x180 [ 965.340264][T18985] do_fast_syscall_32+0x6a/0xc0 [ 965.345095][T18985] do_SYSENTER_32+0x73/0x90 [ 965.349574][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.355870][T18985] [ 965.358169][T18985] Uninit was stored to memory at: [ 965.363179][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 965.368884][T18985] __msan_chain_origin+0x57/0xa0 [ 965.373798][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 965.378882][T18985] get_compat_msghdr+0x108/0x2b0 [ 965.383805][T18985] do_recvmmsg+0xdc7/0x22e0 [ 965.388292][T18985] __sys_recvmmsg+0x340/0x5f0 [ 965.392956][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.399007][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.405137][T18985] __do_fast_syscall_32+0x129/0x180 [ 965.410323][T18985] do_fast_syscall_32+0x6a/0xc0 [ 965.415161][T18985] do_SYSENTER_32+0x73/0x90 [ 965.419641][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.425939][T18985] [ 965.428252][T18985] Uninit was stored to memory at: [ 965.433269][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 965.438976][T18985] __msan_chain_origin+0x57/0xa0 [ 965.443896][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 965.448991][T18985] get_compat_msghdr+0x108/0x2b0 [ 965.453925][T18985] do_recvmmsg+0xdc7/0x22e0 [ 965.458402][T18985] __sys_recvmmsg+0x340/0x5f0 [ 965.463066][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.469127][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.475256][T18985] __do_fast_syscall_32+0x129/0x180 [ 965.480427][T18985] do_fast_syscall_32+0x6a/0xc0 [ 965.485267][T18985] do_SYSENTER_32+0x73/0x90 [ 965.489748][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.496052][T18985] [ 965.498352][T18985] Uninit was stored to memory at: [ 965.503364][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 965.509070][T18985] __msan_chain_origin+0x57/0xa0 [ 965.513995][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 965.519090][T18985] get_compat_msghdr+0x108/0x2b0 [ 965.524014][T18985] do_recvmmsg+0xdc7/0x22e0 [ 965.528504][T18985] __sys_recvmmsg+0x340/0x5f0 [ 965.533169][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.539221][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.545352][T18985] __do_fast_syscall_32+0x129/0x180 [ 965.550526][T18985] do_fast_syscall_32+0x6a/0xc0 [ 965.555350][T18985] do_SYSENTER_32+0x73/0x90 [ 965.559828][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.566122][T18985] [ 965.568422][T18985] Uninit was stored to memory at: [ 965.573424][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 965.579115][T18985] __msan_chain_origin+0x57/0xa0 [ 965.584040][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 965.589143][T18985] get_compat_msghdr+0x108/0x2b0 [ 965.594057][T18985] do_recvmmsg+0xdc7/0x22e0 [ 965.598531][T18985] __sys_recvmmsg+0x340/0x5f0 [ 965.603190][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 965.609239][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 965.615384][T18985] __do_fast_syscall_32+0x129/0x180 [ 965.620683][T18985] do_fast_syscall_32+0x6a/0xc0 [ 965.625512][T18985] do_SYSENTER_32+0x73/0x90 [ 965.629990][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 965.636296][T18985] [ 965.638596][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 965.645247][T18985] do_recvmmsg+0xc2/0x22e0 [ 965.649636][T18985] do_recvmmsg+0xc2/0x22e0 [ 965.911087][T18982] not chained 530000 origins [ 965.915711][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 965.924375][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.934424][T18982] Call Trace: [ 965.937718][T18982] dump_stack+0x21c/0x280 [ 965.942052][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 965.947775][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 965.953839][T18982] ? kmsan_get_metadata+0x116/0x180 [ 965.959038][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 965.964846][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 965.970913][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 965.976287][T18982] ? kmsan_get_metadata+0x116/0x180 [ 965.981485][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 965.987990][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 965.994061][T18982] ? _copy_from_user+0x201/0x310 [ 965.998995][T18982] ? kmsan_get_metadata+0x116/0x180 [ 966.004195][T18982] __msan_chain_origin+0x57/0xa0 [ 966.009134][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 966.014257][T18982] get_compat_msghdr+0x108/0x2b0 [ 966.019197][T18982] do_recvmmsg+0xdc7/0x22e0 [ 966.023707][T18982] ? kmsan_get_metadata+0x116/0x180 [ 966.028911][T18982] ? kmsan_get_metadata+0x116/0x180 [ 966.034114][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 966.039752][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 966.045040][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 966.049842][T18982] __sys_recvmmsg+0x340/0x5f0 [ 966.054523][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 966.060328][T18982] ? kmsan_get_metadata+0x116/0x180 [ 966.065530][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.071675][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.077834][T18982] __do_fast_syscall_32+0x129/0x180 [ 966.083034][T18982] do_fast_syscall_32+0x6a/0xc0 [ 966.087886][T18982] do_SYSENTER_32+0x73/0x90 [ 966.092430][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.098749][T18982] RIP: 0023:0xf7fe5549 [ 966.102818][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 966.122420][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 966.131987][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 966.139958][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 966.147928][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 966.155896][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 966.163865][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.171837][T18982] Uninit was stored to memory at: [ 966.176870][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 966.182593][T18982] __msan_chain_origin+0x57/0xa0 [ 966.187535][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 966.192644][T18982] get_compat_msghdr+0x108/0x2b0 [ 966.197581][T18982] do_recvmmsg+0xdc7/0x22e0 [ 966.202083][T18982] __sys_recvmmsg+0x340/0x5f0 [ 966.206758][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.212825][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.218978][T18982] __do_fast_syscall_32+0x129/0x180 [ 966.224175][T18982] do_fast_syscall_32+0x6a/0xc0 [ 966.229021][T18982] do_SYSENTER_32+0x73/0x90 [ 966.233611][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.239918][T18982] [ 966.242234][T18982] Uninit was stored to memory at: [ 966.247261][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 966.252979][T18982] __msan_chain_origin+0x57/0xa0 [ 966.257909][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 966.263016][T18982] get_compat_msghdr+0x108/0x2b0 [ 966.267955][T18982] do_recvmmsg+0xdc7/0x22e0 [ 966.272458][T18982] __sys_recvmmsg+0x340/0x5f0 [ 966.277133][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.283286][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.289437][T18982] __do_fast_syscall_32+0x129/0x180 [ 966.294632][T18982] do_fast_syscall_32+0x6a/0xc0 [ 966.299478][T18982] do_SYSENTER_32+0x73/0x90 [ 966.303975][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.310282][T18982] [ 966.312602][T18982] Uninit was stored to memory at: [ 966.317626][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 966.323345][T18982] __msan_chain_origin+0x57/0xa0 [ 966.328276][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 966.333382][T18982] get_compat_msghdr+0x108/0x2b0 [ 966.338318][T18982] do_recvmmsg+0xdc7/0x22e0 [ 966.342821][T18982] __sys_recvmmsg+0x340/0x5f0 [ 966.347498][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.353563][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.359733][T18982] __do_fast_syscall_32+0x129/0x180 [ 966.364931][T18982] do_fast_syscall_32+0x6a/0xc0 [ 966.369806][T18982] do_SYSENTER_32+0x73/0x90 [ 966.374309][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.380615][T18982] [ 966.382925][T18982] Uninit was stored to memory at: [ 966.388636][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 966.394343][T18982] __msan_chain_origin+0x57/0xa0 [ 966.399265][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 966.404359][T18982] get_compat_msghdr+0x108/0x2b0 [ 966.409284][T18982] do_recvmmsg+0xdc7/0x22e0 [ 966.413775][T18982] __sys_recvmmsg+0x340/0x5f0 [ 966.418437][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.424488][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.430629][T18982] __do_fast_syscall_32+0x129/0x180 [ 966.435813][T18982] do_fast_syscall_32+0x6a/0xc0 [ 966.440650][T18982] do_SYSENTER_32+0x73/0x90 [ 966.445144][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.451444][T18982] [ 966.453753][T18982] Uninit was stored to memory at: [ 966.458768][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 966.464487][T18982] __msan_chain_origin+0x57/0xa0 [ 966.469412][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 966.474507][T18982] get_compat_msghdr+0x108/0x2b0 [ 966.479454][T18982] do_recvmmsg+0xdc7/0x22e0 [ 966.483941][T18982] __sys_recvmmsg+0x340/0x5f0 [ 966.488601][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.494655][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.500797][T18982] __do_fast_syscall_32+0x129/0x180 [ 966.505980][T18982] do_fast_syscall_32+0x6a/0xc0 [ 966.510816][T18982] do_SYSENTER_32+0x73/0x90 [ 966.515306][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.521609][T18982] [ 966.523936][T18982] Uninit was stored to memory at: [ 966.528948][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 966.534655][T18982] __msan_chain_origin+0x57/0xa0 [ 966.539580][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 966.544676][T18982] get_compat_msghdr+0x108/0x2b0 [ 966.549603][T18982] do_recvmmsg+0xdc7/0x22e0 [ 966.554092][T18982] __sys_recvmmsg+0x340/0x5f0 [ 966.558758][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.564810][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.570948][T18982] __do_fast_syscall_32+0x129/0x180 [ 966.576132][T18982] do_fast_syscall_32+0x6a/0xc0 [ 966.580967][T18982] do_SYSENTER_32+0x73/0x90 [ 966.585456][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.591755][T18982] [ 966.594063][T18982] Uninit was stored to memory at: [ 966.599075][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 966.604780][T18982] __msan_chain_origin+0x57/0xa0 [ 966.609702][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 966.614797][T18982] get_compat_msghdr+0x108/0x2b0 [ 966.619723][T18982] do_recvmmsg+0xdc7/0x22e0 [ 966.624214][T18982] __sys_recvmmsg+0x340/0x5f0 [ 966.628877][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 966.634927][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 966.641065][T18982] __do_fast_syscall_32+0x129/0x180 [ 966.646248][T18982] do_fast_syscall_32+0x6a/0xc0 [ 966.651094][T18982] do_SYSENTER_32+0x73/0x90 [ 966.655589][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 966.661889][T18982] [ 966.664201][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 966.670865][T18982] do_recvmmsg+0xc2/0x22e0 [ 966.675266][T18982] do_recvmmsg+0xc2/0x22e0 [ 966.966803][T18982] not chained 540000 origins [ 966.971424][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 966.980089][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.990139][T18982] Call Trace: [ 966.993432][T18982] dump_stack+0x21c/0x280 [ 966.997770][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 967.003500][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 967.009566][T18982] ? kmsan_get_metadata+0x116/0x180 [ 967.014759][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 967.020565][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 967.027265][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 967.032635][T18982] ? kmsan_get_metadata+0x116/0x180 [ 967.037829][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 967.043463][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 967.049530][T18982] ? _copy_from_user+0x201/0x310 [ 967.054468][T18982] ? kmsan_get_metadata+0x116/0x180 [ 967.059664][T18982] __msan_chain_origin+0x57/0xa0 [ 967.064593][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 967.069698][T18982] get_compat_msghdr+0x108/0x2b0 [ 967.074638][T18982] do_recvmmsg+0xdc7/0x22e0 [ 967.079132][T18982] ? kmsan_get_metadata+0x116/0x180 [ 967.084324][T18982] ? kmsan_get_metadata+0x116/0x180 [ 967.089512][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 967.095134][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 967.100407][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 967.105164][T18982] __sys_recvmmsg+0x340/0x5f0 [ 967.109831][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 967.115624][T18982] ? kmsan_get_metadata+0x116/0x180 [ 967.120809][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.126866][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.133021][T18982] __do_fast_syscall_32+0x129/0x180 [ 967.138216][T18982] do_fast_syscall_32+0x6a/0xc0 [ 967.143057][T18982] do_SYSENTER_32+0x73/0x90 [ 967.147551][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.153863][T18982] RIP: 0023:0xf7fe5549 [ 967.157929][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 967.177527][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 967.185930][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 967.193907][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 967.201862][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 967.209818][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 967.217778][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 967.225747][T18982] Uninit was stored to memory at: [ 967.230774][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 967.236496][T18982] __msan_chain_origin+0x57/0xa0 [ 967.241434][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 967.246542][T18982] get_compat_msghdr+0x108/0x2b0 [ 967.251485][T18982] do_recvmmsg+0xdc7/0x22e0 [ 967.255984][T18982] __sys_recvmmsg+0x340/0x5f0 [ 967.260651][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.266708][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.272847][T18982] __do_fast_syscall_32+0x129/0x180 [ 967.278033][T18982] do_fast_syscall_32+0x6a/0xc0 [ 967.282868][T18982] do_SYSENTER_32+0x73/0x90 [ 967.287358][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.293656][T18982] [ 967.295968][T18982] Uninit was stored to memory at: [ 967.300984][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 967.306690][T18982] __msan_chain_origin+0x57/0xa0 [ 967.311615][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 967.316713][T18982] get_compat_msghdr+0x108/0x2b0 [ 967.321638][T18982] do_recvmmsg+0xdc7/0x22e0 [ 967.326128][T18982] __sys_recvmmsg+0x340/0x5f0 [ 967.330803][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.336857][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.342995][T18982] __do_fast_syscall_32+0x129/0x180 [ 967.348187][T18982] do_fast_syscall_32+0x6a/0xc0 [ 967.353023][T18982] do_SYSENTER_32+0x73/0x90 [ 967.357605][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.363905][T18982] [ 967.366212][T18982] Uninit was stored to memory at: [ 967.371225][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 967.376931][T18982] __msan_chain_origin+0x57/0xa0 [ 967.381858][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 967.386953][T18982] get_compat_msghdr+0x108/0x2b0 [ 967.391878][T18982] do_recvmmsg+0xdc7/0x22e0 [ 967.396372][T18982] __sys_recvmmsg+0x340/0x5f0 [ 967.401035][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.407089][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.413229][T18982] __do_fast_syscall_32+0x129/0x180 [ 967.418413][T18982] do_fast_syscall_32+0x6a/0xc0 [ 967.423249][T18982] do_SYSENTER_32+0x73/0x90 [ 967.427777][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.434076][T18982] [ 967.436386][T18982] Uninit was stored to memory at: [ 967.441398][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 967.447103][T18982] __msan_chain_origin+0x57/0xa0 [ 967.452027][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 967.457139][T18982] get_compat_msghdr+0x108/0x2b0 [ 967.462065][T18982] do_recvmmsg+0xdc7/0x22e0 [ 967.466556][T18982] __sys_recvmmsg+0x340/0x5f0 [ 967.471219][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.477272][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.483415][T18982] __do_fast_syscall_32+0x129/0x180 [ 967.488599][T18982] do_fast_syscall_32+0x6a/0xc0 [ 967.493434][T18982] do_SYSENTER_32+0x73/0x90 [ 967.497924][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.504222][T18982] [ 967.506529][T18982] Uninit was stored to memory at: [ 967.511544][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 967.517250][T18982] __msan_chain_origin+0x57/0xa0 [ 967.522174][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 967.527268][T18982] get_compat_msghdr+0x108/0x2b0 [ 967.532309][T18982] do_recvmmsg+0xdc7/0x22e0 [ 967.536801][T18982] __sys_recvmmsg+0x340/0x5f0 [ 967.541463][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.547515][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.553655][T18982] __do_fast_syscall_32+0x129/0x180 [ 967.558845][T18982] do_fast_syscall_32+0x6a/0xc0 [ 967.563688][T18982] do_SYSENTER_32+0x73/0x90 [ 967.568176][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.574476][T18982] [ 967.576785][T18982] Uninit was stored to memory at: [ 967.581798][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 967.587504][T18982] __msan_chain_origin+0x57/0xa0 [ 967.592426][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 967.597521][T18982] get_compat_msghdr+0x108/0x2b0 [ 967.602447][T18982] do_recvmmsg+0xdc7/0x22e0 [ 967.606938][T18982] __sys_recvmmsg+0x340/0x5f0 [ 967.611599][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.617653][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.623794][T18982] __do_fast_syscall_32+0x129/0x180 [ 967.628975][T18982] do_fast_syscall_32+0x6a/0xc0 [ 967.633818][T18982] do_SYSENTER_32+0x73/0x90 [ 967.638307][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.644606][T18982] [ 967.646912][T18982] Uninit was stored to memory at: [ 967.651928][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 967.657637][T18982] __msan_chain_origin+0x57/0xa0 [ 967.662561][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 967.667658][T18982] get_compat_msghdr+0x108/0x2b0 [ 967.672582][T18982] do_recvmmsg+0xdc7/0x22e0 [ 967.677070][T18982] __sys_recvmmsg+0x340/0x5f0 [ 967.681733][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 967.687881][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 967.694020][T18982] __do_fast_syscall_32+0x129/0x180 [ 967.699202][T18982] do_fast_syscall_32+0x6a/0xc0 [ 967.704038][T18982] do_SYSENTER_32+0x73/0x90 [ 967.708528][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 967.714827][T18982] [ 967.717135][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 967.723794][T18982] do_recvmmsg+0xc2/0x22e0 [ 967.728195][T18982] do_recvmmsg+0xc2/0x22e0 [ 967.896627][T18982] not chained 550000 origins [ 967.901244][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 967.909996][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.920041][T18982] Call Trace: [ 967.923325][T18982] dump_stack+0x21c/0x280 [ 967.927651][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 967.933708][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 967.939779][T18982] ? kmsan_get_metadata+0x116/0x180 [ 967.944963][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 967.950758][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 967.956809][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 967.962166][T18982] ? kmsan_get_metadata+0x116/0x180 [ 967.967360][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 967.972984][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 967.979043][T18982] ? _copy_from_user+0x201/0x310 [ 967.983966][T18982] ? kmsan_get_metadata+0x116/0x180 [ 967.989152][T18982] __msan_chain_origin+0x57/0xa0 [ 967.994078][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 967.999178][T18982] get_compat_msghdr+0x108/0x2b0 [ 968.004107][T18982] do_recvmmsg+0xdc7/0x22e0 [ 968.008598][T18982] ? kmsan_get_metadata+0x116/0x180 [ 968.013806][T18982] ? kmsan_get_metadata+0x116/0x180 [ 968.018995][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 968.024617][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 968.029888][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 968.034641][T18982] __sys_recvmmsg+0x340/0x5f0 [ 968.039309][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 968.045098][T18982] ? kmsan_get_metadata+0x116/0x180 [ 968.050284][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.056354][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.062498][T18982] __do_fast_syscall_32+0x129/0x180 [ 968.067688][T18982] do_fast_syscall_32+0x6a/0xc0 [ 968.072527][T18982] do_SYSENTER_32+0x73/0x90 [ 968.077021][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.083329][T18982] RIP: 0023:0xf7fe5549 [ 968.087386][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 968.106976][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 968.115371][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 968.123329][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 968.131283][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 968.139238][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 968.147195][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.155152][T18982] Uninit was stored to memory at: [ 968.160166][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 968.165872][T18982] __msan_chain_origin+0x57/0xa0 [ 968.170808][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 968.175923][T18982] get_compat_msghdr+0x108/0x2b0 [ 968.180849][T18982] do_recvmmsg+0xdc7/0x22e0 [ 968.185339][T18982] __sys_recvmmsg+0x340/0x5f0 [ 968.190003][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.196059][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.202207][T18982] __do_fast_syscall_32+0x129/0x180 [ 968.207398][T18982] do_fast_syscall_32+0x6a/0xc0 [ 968.212236][T18982] do_SYSENTER_32+0x73/0x90 [ 968.216731][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.223034][T18982] [ 968.225344][T18982] Uninit was stored to memory at: [ 968.230359][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 968.236079][T18982] __msan_chain_origin+0x57/0xa0 [ 968.241020][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 968.246129][T18982] get_compat_msghdr+0x108/0x2b0 [ 968.251145][T18982] do_recvmmsg+0xdc7/0x22e0 [ 968.255647][T18982] __sys_recvmmsg+0x340/0x5f0 [ 968.260317][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.266372][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.272516][T18982] __do_fast_syscall_32+0x129/0x180 [ 968.277704][T18982] do_fast_syscall_32+0x6a/0xc0 [ 968.282542][T18982] do_SYSENTER_32+0x73/0x90 [ 968.287034][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.293333][T18982] [ 968.295639][T18982] Uninit was stored to memory at: [ 968.300654][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 968.306361][T18982] __msan_chain_origin+0x57/0xa0 [ 968.311281][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 968.316375][T18982] get_compat_msghdr+0x108/0x2b0 [ 968.321298][T18982] do_recvmmsg+0xdc7/0x22e0 [ 968.325787][T18982] __sys_recvmmsg+0x340/0x5f0 [ 968.330450][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.336504][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.342642][T18982] __do_fast_syscall_32+0x129/0x180 [ 968.348782][T18982] do_fast_syscall_32+0x6a/0xc0 [ 968.353623][T18982] do_SYSENTER_32+0x73/0x90 [ 968.358117][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.364446][T18982] [ 968.366754][T18982] Uninit was stored to memory at: [ 968.371769][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 968.377534][T18982] __msan_chain_origin+0x57/0xa0 [ 968.382458][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 968.387554][T18982] get_compat_msghdr+0x108/0x2b0 [ 968.392483][T18982] do_recvmmsg+0xdc7/0x22e0 [ 968.396972][T18982] __sys_recvmmsg+0x340/0x5f0 [ 968.401636][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.407690][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.413832][T18982] __do_fast_syscall_32+0x129/0x180 [ 968.419020][T18982] do_fast_syscall_32+0x6a/0xc0 [ 968.423862][T18982] do_SYSENTER_32+0x73/0x90 [ 968.428461][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.434762][T18982] [ 968.437070][T18982] Uninit was stored to memory at: [ 968.442083][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 968.447802][T18982] __msan_chain_origin+0x57/0xa0 [ 968.452737][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 968.457832][T18982] get_compat_msghdr+0x108/0x2b0 [ 968.462758][T18982] do_recvmmsg+0xdc7/0x22e0 [ 968.467247][T18982] __sys_recvmmsg+0x340/0x5f0 [ 968.471910][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.477967][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.484106][T18982] __do_fast_syscall_32+0x129/0x180 [ 968.489289][T18982] do_fast_syscall_32+0x6a/0xc0 [ 968.494142][T18982] do_SYSENTER_32+0x73/0x90 [ 968.498632][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.504949][T18982] [ 968.507256][T18982] Uninit was stored to memory at: [ 968.512270][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 968.517973][T18982] __msan_chain_origin+0x57/0xa0 [ 968.522896][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 968.527988][T18982] get_compat_msghdr+0x108/0x2b0 [ 968.532916][T18982] do_recvmmsg+0xdc7/0x22e0 [ 968.537405][T18982] __sys_recvmmsg+0x340/0x5f0 [ 968.542069][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.548123][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.554262][T18982] __do_fast_syscall_32+0x129/0x180 [ 968.559446][T18982] do_fast_syscall_32+0x6a/0xc0 [ 968.564282][T18982] do_SYSENTER_32+0x73/0x90 [ 968.568772][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.575070][T18982] [ 968.577377][T18982] Uninit was stored to memory at: [ 968.582391][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 968.588096][T18982] __msan_chain_origin+0x57/0xa0 [ 968.593018][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 968.598114][T18982] get_compat_msghdr+0x108/0x2b0 [ 968.603037][T18982] do_recvmmsg+0xdc7/0x22e0 [ 968.607527][T18982] __sys_recvmmsg+0x340/0x5f0 [ 968.612190][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 968.618246][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 968.624386][T18982] __do_fast_syscall_32+0x129/0x180 [ 968.629588][T18982] do_fast_syscall_32+0x6a/0xc0 [ 968.634423][T18982] do_SYSENTER_32+0x73/0x90 [ 968.638914][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 968.645212][T18982] [ 968.647520][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 968.654180][T18982] do_recvmmsg+0xc2/0x22e0 [ 968.658583][T18982] do_recvmmsg+0xc2/0x22e0 [ 968.957355][T18982] not chained 560000 origins [ 968.961971][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 968.970631][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.980677][T18982] Call Trace: [ 968.983974][T18982] dump_stack+0x21c/0x280 [ 968.988311][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 968.994034][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 969.000098][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.005297][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 969.011106][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 969.017170][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 969.022542][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.027743][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 969.033378][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 969.039449][T18982] ? _copy_from_user+0x201/0x310 [ 969.044384][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.049584][T18982] __msan_chain_origin+0x57/0xa0 [ 969.054522][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 969.059638][T18982] get_compat_msghdr+0x108/0x2b0 [ 969.064582][T18982] do_recvmmsg+0xdc7/0x22e0 [ 969.069087][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.074286][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.079488][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 969.085125][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 969.090412][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 969.095176][T18982] __sys_recvmmsg+0x340/0x5f0 [ 969.099853][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 969.105659][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.110856][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.116949][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.123104][T18982] __do_fast_syscall_32+0x129/0x180 [ 969.128305][T18982] do_fast_syscall_32+0x6a/0xc0 [ 969.133158][T18982] do_SYSENTER_32+0x73/0x90 [ 969.137662][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.143980][T18982] RIP: 0023:0xf7fe5549 [ 969.148048][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 969.168084][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 969.176501][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 969.184473][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 969.192442][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 969.200448][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 969.208419][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 969.216383][T18982] Uninit was stored to memory at: [ 969.221416][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 969.227135][T18982] __msan_chain_origin+0x57/0xa0 [ 969.232074][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 969.237190][T18982] get_compat_msghdr+0x108/0x2b0 [ 969.242130][T18982] do_recvmmsg+0xdc7/0x22e0 [ 969.246631][T18982] __sys_recvmmsg+0x340/0x5f0 [ 969.251306][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.257376][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.263532][T18982] __do_fast_syscall_32+0x129/0x180 [ 969.268726][T18982] do_fast_syscall_32+0x6a/0xc0 [ 969.273576][T18982] do_SYSENTER_32+0x73/0x90 [ 969.278081][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.284392][T18982] [ 969.286707][T18982] Uninit was stored to memory at: [ 969.291736][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 969.297452][T18982] __msan_chain_origin+0x57/0xa0 [ 969.302389][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 969.307502][T18982] get_compat_msghdr+0x108/0x2b0 [ 969.312441][T18982] do_recvmmsg+0xdc7/0x22e0 [ 969.316941][T18982] __sys_recvmmsg+0x340/0x5f0 [ 969.321613][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.327786][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.333937][T18982] __do_fast_syscall_32+0x129/0x180 [ 969.339132][T18982] do_fast_syscall_32+0x6a/0xc0 [ 969.343981][T18982] do_SYSENTER_32+0x73/0x90 [ 969.348481][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.354832][T18982] [ 969.357148][T18982] Uninit was stored to memory at: [ 969.362184][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 969.367903][T18982] __msan_chain_origin+0x57/0xa0 [ 969.372838][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 969.377943][T18982] get_compat_msghdr+0x108/0x2b0 [ 969.382881][T18982] do_recvmmsg+0xdc7/0x22e0 [ 969.387383][T18982] __sys_recvmmsg+0x340/0x5f0 [ 969.392057][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.398120][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.404271][T18982] __do_fast_syscall_32+0x129/0x180 [ 969.409467][T18982] do_fast_syscall_32+0x6a/0xc0 [ 969.414317][T18982] do_SYSENTER_32+0x73/0x90 [ 969.418817][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.425124][T18982] [ 969.427445][T18982] Uninit was stored to memory at: [ 969.432471][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 969.438194][T18982] __msan_chain_origin+0x57/0xa0 [ 969.443132][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 969.448238][T18982] get_compat_msghdr+0x108/0x2b0 [ 969.453176][T18982] do_recvmmsg+0xdc7/0x22e0 [ 969.457673][T18982] __sys_recvmmsg+0x340/0x5f0 [ 969.462344][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.468517][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.474668][T18982] __do_fast_syscall_32+0x129/0x180 [ 969.479860][T18982] do_fast_syscall_32+0x6a/0xc0 [ 969.484721][T18982] do_SYSENTER_32+0x73/0x90 [ 969.489222][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.495530][T18982] [ 969.497843][T18982] Uninit was stored to memory at: [ 969.502870][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 969.508593][T18982] __msan_chain_origin+0x57/0xa0 [ 969.513525][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 969.518629][T18982] get_compat_msghdr+0x108/0x2b0 [ 969.523563][T18982] do_recvmmsg+0xdc7/0x22e0 [ 969.528061][T18982] __sys_recvmmsg+0x340/0x5f0 [ 969.532734][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.538794][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.544943][T18982] __do_fast_syscall_32+0x129/0x180 [ 969.550138][T18982] do_fast_syscall_32+0x6a/0xc0 [ 969.554983][T18982] do_SYSENTER_32+0x73/0x90 [ 969.559481][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.565900][T18982] [ 969.568214][T18982] Uninit was stored to memory at: [ 969.573240][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 969.578953][T18982] __msan_chain_origin+0x57/0xa0 [ 969.583888][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 969.588992][T18982] get_compat_msghdr+0x108/0x2b0 [ 969.593926][T18982] do_recvmmsg+0xdc7/0x22e0 [ 969.598422][T18982] __sys_recvmmsg+0x340/0x5f0 [ 969.603095][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.609159][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.615316][T18982] __do_fast_syscall_32+0x129/0x180 [ 969.620507][T18982] do_fast_syscall_32+0x6a/0xc0 [ 969.625357][T18982] do_SYSENTER_32+0x73/0x90 [ 969.629854][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.636158][T18982] [ 969.638471][T18982] Uninit was stored to memory at: [ 969.643484][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 969.649195][T18982] __msan_chain_origin+0x57/0xa0 [ 969.654118][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 969.659212][T18982] get_compat_msghdr+0x108/0x2b0 [ 969.664136][T18982] do_recvmmsg+0xdc7/0x22e0 [ 969.668623][T18982] __sys_recvmmsg+0x340/0x5f0 [ 969.673287][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.679339][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.685480][T18982] __do_fast_syscall_32+0x129/0x180 [ 969.690664][T18982] do_fast_syscall_32+0x6a/0xc0 [ 969.695500][T18982] do_SYSENTER_32+0x73/0x90 [ 969.700002][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.706302][T18982] [ 969.708613][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 969.715279][T18982] do_recvmmsg+0xc2/0x22e0 [ 969.719681][T18982] do_recvmmsg+0xc2/0x22e0 [ 969.792171][T18982] not chained 570000 origins [ 969.796793][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 969.805444][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 969.815486][T18982] Call Trace: [ 969.818769][T18982] dump_stack+0x21c/0x280 [ 969.823114][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 969.828927][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 969.834980][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.840183][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 969.845979][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 969.852029][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 969.857388][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.862578][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 969.868203][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 969.874256][T18982] ? _copy_from_user+0x201/0x310 [ 969.879194][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.884382][T18982] __msan_chain_origin+0x57/0xa0 [ 969.889342][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 969.894446][T18982] get_compat_msghdr+0x108/0x2b0 [ 969.899375][T18982] do_recvmmsg+0xdc7/0x22e0 [ 969.903870][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.909066][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.914254][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 969.919899][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 969.925170][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 969.929926][T18982] __sys_recvmmsg+0x340/0x5f0 [ 969.934591][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 969.940382][T18982] ? kmsan_get_metadata+0x116/0x180 [ 969.945569][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 969.951626][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 969.957767][T18982] __do_fast_syscall_32+0x129/0x180 [ 969.962953][T18982] do_fast_syscall_32+0x6a/0xc0 [ 969.967790][T18982] do_SYSENTER_32+0x73/0x90 [ 969.972284][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 969.978594][T18982] RIP: 0023:0xf7fe5549 [ 969.982663][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 970.002253][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 970.010659][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 970.018637][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 970.026600][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 970.034564][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 970.042525][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 970.050487][T18982] Uninit was stored to memory at: [ 970.055513][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 970.061220][T18982] __msan_chain_origin+0x57/0xa0 [ 970.066160][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 970.071255][T18982] get_compat_msghdr+0x108/0x2b0 [ 970.076179][T18982] do_recvmmsg+0xdc7/0x22e0 [ 970.080668][T18982] __sys_recvmmsg+0x340/0x5f0 [ 970.085334][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.091386][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.097529][T18982] __do_fast_syscall_32+0x129/0x180 [ 970.102715][T18982] do_fast_syscall_32+0x6a/0xc0 [ 970.107548][T18982] do_SYSENTER_32+0x73/0x90 [ 970.112040][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.118340][T18982] [ 970.120646][T18982] Uninit was stored to memory at: [ 970.125659][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 970.131365][T18982] __msan_chain_origin+0x57/0xa0 [ 970.136286][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 970.141380][T18982] get_compat_msghdr+0x108/0x2b0 [ 970.146305][T18982] do_recvmmsg+0xdc7/0x22e0 [ 970.150793][T18982] __sys_recvmmsg+0x340/0x5f0 [ 970.155455][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.161510][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.167662][T18982] __do_fast_syscall_32+0x129/0x180 [ 970.172854][T18982] do_fast_syscall_32+0x6a/0xc0 [ 970.177704][T18982] do_SYSENTER_32+0x73/0x90 [ 970.182200][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.188503][T18982] [ 970.190827][T18982] Uninit was stored to memory at: [ 970.195845][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 970.201556][T18982] __msan_chain_origin+0x57/0xa0 [ 970.206486][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 970.211585][T18982] get_compat_msghdr+0x108/0x2b0 [ 970.216515][T18982] do_recvmmsg+0xdc7/0x22e0 [ 970.221007][T18982] __sys_recvmmsg+0x340/0x5f0 [ 970.225674][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.231729][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.237880][T18982] __do_fast_syscall_32+0x129/0x180 [ 970.243085][T18982] do_fast_syscall_32+0x6a/0xc0 [ 970.247928][T18982] do_SYSENTER_32+0x73/0x90 [ 970.252420][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.258736][T18982] [ 970.261053][T18982] Uninit was stored to memory at: [ 970.266080][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 970.271788][T18982] __msan_chain_origin+0x57/0xa0 [ 970.276726][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 970.281823][T18982] get_compat_msghdr+0x108/0x2b0 [ 970.286749][T18982] do_recvmmsg+0xdc7/0x22e0 [ 970.291326][T18982] __sys_recvmmsg+0x340/0x5f0 [ 970.295989][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.302041][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.308180][T18982] __do_fast_syscall_32+0x129/0x180 [ 970.313366][T18982] do_fast_syscall_32+0x6a/0xc0 [ 970.318202][T18982] do_SYSENTER_32+0x73/0x90 [ 970.322704][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.329003][T18982] [ 970.331309][T18982] Uninit was stored to memory at: [ 970.336322][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 970.342027][T18982] __msan_chain_origin+0x57/0xa0 [ 970.346948][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 970.352043][T18982] get_compat_msghdr+0x108/0x2b0 [ 970.356967][T18982] do_recvmmsg+0xdc7/0x22e0 [ 970.361453][T18982] __sys_recvmmsg+0x340/0x5f0 [ 970.366117][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.372171][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.378309][T18982] __do_fast_syscall_32+0x129/0x180 [ 970.383494][T18982] do_fast_syscall_32+0x6a/0xc0 [ 970.388330][T18982] do_SYSENTER_32+0x73/0x90 [ 970.392818][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.399116][T18982] [ 970.401425][T18982] Uninit was stored to memory at: [ 970.406452][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 970.412158][T18982] __msan_chain_origin+0x57/0xa0 [ 970.417080][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 970.422176][T18982] get_compat_msghdr+0x108/0x2b0 [ 970.427098][T18982] do_recvmmsg+0xdc7/0x22e0 [ 970.431586][T18982] __sys_recvmmsg+0x340/0x5f0 [ 970.436252][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.442306][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.448449][T18982] __do_fast_syscall_32+0x129/0x180 [ 970.453635][T18982] do_fast_syscall_32+0x6a/0xc0 [ 970.458472][T18982] do_SYSENTER_32+0x73/0x90 [ 970.462964][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.469262][T18982] [ 970.471567][T18982] Uninit was stored to memory at: [ 970.476578][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 970.482286][T18982] __msan_chain_origin+0x57/0xa0 [ 970.487206][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 970.492303][T18982] get_compat_msghdr+0x108/0x2b0 [ 970.497225][T18982] do_recvmmsg+0xdc7/0x22e0 [ 970.501715][T18982] __sys_recvmmsg+0x340/0x5f0 [ 970.506379][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.512435][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.518576][T18982] __do_fast_syscall_32+0x129/0x180 [ 970.523758][T18982] do_fast_syscall_32+0x6a/0xc0 [ 970.528593][T18982] do_SYSENTER_32+0x73/0x90 [ 970.533082][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.539380][T18982] [ 970.541690][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 970.548349][T18982] do_recvmmsg+0xc2/0x22e0 [ 970.552751][T18982] do_recvmmsg+0xc2/0x22e0 [ 970.790855][T18982] not chained 580000 origins [ 970.795483][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 970.804141][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.814179][T18982] Call Trace: [ 970.817460][T18982] dump_stack+0x21c/0x280 [ 970.821781][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 970.827580][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 970.833737][T18982] ? kmsan_get_metadata+0x116/0x180 [ 970.838924][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 970.844726][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 970.850781][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 970.856139][T18982] ? kmsan_get_metadata+0x116/0x180 [ 970.861329][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 970.866951][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 970.873007][T18982] ? _copy_from_user+0x201/0x310 [ 970.877930][T18982] ? kmsan_get_metadata+0x116/0x180 [ 970.883116][T18982] __msan_chain_origin+0x57/0xa0 [ 970.888040][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 970.893142][T18982] get_compat_msghdr+0x108/0x2b0 [ 970.898091][T18982] do_recvmmsg+0xdc7/0x22e0 [ 970.902585][T18982] ? kmsan_get_metadata+0x116/0x180 [ 970.907773][T18982] ? kmsan_get_metadata+0x116/0x180 [ 970.912959][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 970.918579][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 970.923854][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 970.928692][T18982] __sys_recvmmsg+0x340/0x5f0 [ 970.933372][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 970.939174][T18982] ? kmsan_get_metadata+0x116/0x180 [ 970.944373][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 970.950436][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 970.956587][T18982] __do_fast_syscall_32+0x129/0x180 [ 970.961781][T18982] do_fast_syscall_32+0x6a/0xc0 [ 970.966625][T18982] do_SYSENTER_32+0x73/0x90 [ 970.971125][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 970.977449][T18982] RIP: 0023:0xf7fe5549 [ 970.981526][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 971.001126][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 971.009541][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 971.017504][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 971.025467][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 971.033429][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 971.041391][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 971.049353][T18982] Uninit was stored to memory at: [ 971.054382][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 971.060091][T18982] __msan_chain_origin+0x57/0xa0 [ 971.065016][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 971.070134][T18982] get_compat_msghdr+0x108/0x2b0 [ 971.075059][T18982] do_recvmmsg+0xdc7/0x22e0 [ 971.079548][T18982] __sys_recvmmsg+0x340/0x5f0 [ 971.084211][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 971.090272][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 971.096409][T18982] __do_fast_syscall_32+0x129/0x180 [ 971.101594][T18982] do_fast_syscall_32+0x6a/0xc0 [ 971.106430][T18982] do_SYSENTER_32+0x73/0x90 [ 971.110921][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 971.117223][T18982] [ 971.119531][T18982] Uninit was stored to memory at: [ 971.124542][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 971.130246][T18982] __msan_chain_origin+0x57/0xa0 [ 971.135171][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 971.140277][T18982] get_compat_msghdr+0x108/0x2b0 [ 971.145201][T18982] do_recvmmsg+0xdc7/0x22e0 [ 971.149691][T18982] __sys_recvmmsg+0x340/0x5f0 [ 971.154352][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 971.160403][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 971.166637][T18982] __do_fast_syscall_32+0x129/0x180 [ 971.171819][T18982] do_fast_syscall_32+0x6a/0xc0 [ 971.176669][T18982] do_SYSENTER_32+0x73/0x90 [ 971.181166][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 971.187468][T18982] [ 971.189776][T18982] Uninit was stored to memory at: [ 971.194803][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 971.200548][T18982] __msan_chain_origin+0x57/0xa0 [ 971.205478][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 971.210577][T18982] get_compat_msghdr+0x108/0x2b0 [ 971.215508][T18982] do_recvmmsg+0xdc7/0x22e0 [ 971.220002][T18982] __sys_recvmmsg+0x340/0x5f0 [ 971.224667][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 971.230729][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 971.236871][T18982] __do_fast_syscall_32+0x129/0x180 [ 971.242055][T18982] do_fast_syscall_32+0x6a/0xc0 [ 971.246892][T18982] do_SYSENTER_32+0x73/0x90 [ 971.251383][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 971.257686][T18982] [ 971.259992][T18982] Uninit was stored to memory at: [ 971.265003][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 971.270709][T18982] __msan_chain_origin+0x57/0xa0 [ 971.275746][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 971.280840][T18982] get_compat_msghdr+0x108/0x2b0 [ 971.285763][T18982] do_recvmmsg+0xdc7/0x22e0 [ 971.290264][T18982] __sys_recvmmsg+0x340/0x5f0 [ 971.294928][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 971.300978][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 971.307116][T18982] __do_fast_syscall_32+0x129/0x180 [ 971.312299][T18982] do_fast_syscall_32+0x6a/0xc0 [ 971.317132][T18982] do_SYSENTER_32+0x73/0x90 [ 971.321621][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 971.327930][T18982] [ 971.330237][T18982] Uninit was stored to memory at: [ 971.335249][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 971.340956][T18982] __msan_chain_origin+0x57/0xa0 [ 971.345878][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 971.350972][T18982] get_compat_msghdr+0x108/0x2b0 [ 971.355896][T18982] do_recvmmsg+0xdc7/0x22e0 [ 971.360386][T18982] __sys_recvmmsg+0x340/0x5f0 [ 971.365049][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 971.371099][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 971.377237][T18982] __do_fast_syscall_32+0x129/0x180 [ 971.382422][T18982] do_fast_syscall_32+0x6a/0xc0 [ 971.387863][T18982] do_SYSENTER_32+0x73/0x90 [ 971.392352][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 971.398651][T18982] [ 971.400960][T18982] Uninit was stored to memory at: [ 971.405972][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 971.411680][T18982] __msan_chain_origin+0x57/0xa0 [ 971.416603][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 971.421700][T18982] get_compat_msghdr+0x108/0x2b0 [ 971.426623][T18982] do_recvmmsg+0xdc7/0x22e0 [ 971.431115][T18982] __sys_recvmmsg+0x340/0x5f0 [ 971.435776][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 971.441846][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 971.447989][T18982] __do_fast_syscall_32+0x129/0x180 [ 971.453173][T18982] do_fast_syscall_32+0x6a/0xc0 [ 971.458010][T18982] do_SYSENTER_32+0x73/0x90 [ 971.462501][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 971.468802][T18982] [ 971.471108][T18982] Uninit was stored to memory at: [ 971.476120][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 971.481823][T18982] __msan_chain_origin+0x57/0xa0 [ 971.486746][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 971.491839][T18982] get_compat_msghdr+0x108/0x2b0 [ 971.496764][T18982] do_recvmmsg+0xdc7/0x22e0 [ 971.501254][T18982] __sys_recvmmsg+0x340/0x5f0 [ 971.505916][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 971.511967][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 971.518105][T18982] __do_fast_syscall_32+0x129/0x180 [ 971.523289][T18982] do_fast_syscall_32+0x6a/0xc0 [ 971.528124][T18982] do_SYSENTER_32+0x73/0x90 [ 971.532613][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 971.538910][T18982] [ 971.541220][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 971.547882][T18982] do_recvmmsg+0xc2/0x22e0 [ 971.552285][T18982] do_recvmmsg+0xc2/0x22e0 [ 971.807297][T18982] not chained 590000 origins [ 971.811945][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 971.820604][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.830650][T18982] Call Trace: [ 971.833934][T18982] dump_stack+0x21c/0x280 [ 971.838258][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 971.843971][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 971.850021][T18982] ? kmsan_get_metadata+0x116/0x180 [ 971.855205][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 971.861000][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 971.867054][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 971.872411][T18982] ? kmsan_get_metadata+0x116/0x180 [ 971.877596][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 971.883218][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 971.889273][T18982] ? _copy_from_user+0x201/0x310 [ 971.894199][T18982] ? kmsan_get_metadata+0x116/0x180 [ 971.899384][T18982] __msan_chain_origin+0x57/0xa0 [ 971.904308][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 971.909408][T18982] get_compat_msghdr+0x108/0x2b0 [ 971.914339][T18982] do_recvmmsg+0xdc7/0x22e0 [ 971.918830][T18982] ? kmsan_get_metadata+0x116/0x180 [ 971.924023][T18982] ? kmsan_get_metadata+0x116/0x180 [ 971.929217][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 971.934847][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 971.940120][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 971.944874][T18982] __sys_recvmmsg+0x340/0x5f0 [ 971.949538][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 971.955329][T18982] ? kmsan_get_metadata+0x116/0x180 [ 971.960514][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 971.966572][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 971.972713][T18982] __do_fast_syscall_32+0x129/0x180 [ 971.977899][T18982] do_fast_syscall_32+0x6a/0xc0 [ 971.982737][T18982] do_SYSENTER_32+0x73/0x90 [ 971.987229][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 971.993554][T18982] RIP: 0023:0xf7fe5549 [ 971.997614][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 972.017218][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 972.025616][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 972.033573][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 972.041542][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 972.049508][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 972.057464][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 972.065421][T18982] Uninit was stored to memory at: [ 972.070445][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 972.076152][T18982] __msan_chain_origin+0x57/0xa0 [ 972.081078][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 972.086173][T18982] get_compat_msghdr+0x108/0x2b0 [ 972.091098][T18982] do_recvmmsg+0xdc7/0x22e0 [ 972.095587][T18982] __sys_recvmmsg+0x340/0x5f0 [ 972.100250][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.106483][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.112622][T18982] __do_fast_syscall_32+0x129/0x180 [ 972.117804][T18982] do_fast_syscall_32+0x6a/0xc0 [ 972.122641][T18982] do_SYSENTER_32+0x73/0x90 [ 972.127131][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.133433][T18982] [ 972.135740][T18982] Uninit was stored to memory at: [ 972.140750][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 972.146454][T18982] __msan_chain_origin+0x57/0xa0 [ 972.151376][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 972.156489][T18982] get_compat_msghdr+0x108/0x2b0 [ 972.161411][T18982] do_recvmmsg+0xdc7/0x22e0 [ 972.165901][T18982] __sys_recvmmsg+0x340/0x5f0 [ 972.170564][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.176630][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.182770][T18982] __do_fast_syscall_32+0x129/0x180 [ 972.187952][T18982] do_fast_syscall_32+0x6a/0xc0 [ 972.192786][T18982] do_SYSENTER_32+0x73/0x90 [ 972.197277][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.203682][T18982] [ 972.205991][T18982] Uninit was stored to memory at: [ 972.211003][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 972.216709][T18982] __msan_chain_origin+0x57/0xa0 [ 972.221630][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 972.226726][T18982] get_compat_msghdr+0x108/0x2b0 [ 972.231650][T18982] do_recvmmsg+0xdc7/0x22e0 [ 972.236139][T18982] __sys_recvmmsg+0x340/0x5f0 [ 972.240802][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.246853][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.252993][T18982] __do_fast_syscall_32+0x129/0x180 [ 972.258175][T18982] do_fast_syscall_32+0x6a/0xc0 [ 972.263023][T18982] do_SYSENTER_32+0x73/0x90 [ 972.267513][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.273811][T18982] [ 972.276120][T18982] Uninit was stored to memory at: [ 972.281131][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 972.286836][T18982] __msan_chain_origin+0x57/0xa0 [ 972.291758][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 972.296852][T18982] get_compat_msghdr+0x108/0x2b0 [ 972.301776][T18982] do_recvmmsg+0xdc7/0x22e0 [ 972.306265][T18982] __sys_recvmmsg+0x340/0x5f0 [ 972.310925][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.316978][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.323121][T18982] __do_fast_syscall_32+0x129/0x180 [ 972.328305][T18982] do_fast_syscall_32+0x6a/0xc0 [ 972.333142][T18982] do_SYSENTER_32+0x73/0x90 [ 972.337633][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.343933][T18982] [ 972.346241][T18982] Uninit was stored to memory at: [ 972.351262][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 972.356970][T18982] __msan_chain_origin+0x57/0xa0 [ 972.361893][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 972.366990][T18982] get_compat_msghdr+0x108/0x2b0 [ 972.371918][T18982] do_recvmmsg+0xdc7/0x22e0 [ 972.376426][T18982] __sys_recvmmsg+0x340/0x5f0 [ 972.381089][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.387141][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.393280][T18982] __do_fast_syscall_32+0x129/0x180 [ 972.398463][T18982] do_fast_syscall_32+0x6a/0xc0 [ 972.403298][T18982] do_SYSENTER_32+0x73/0x90 [ 972.407801][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.414099][T18982] [ 972.416407][T18982] Uninit was stored to memory at: [ 972.421417][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 972.427123][T18982] __msan_chain_origin+0x57/0xa0 [ 972.432043][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 972.437136][T18982] get_compat_msghdr+0x108/0x2b0 [ 972.442059][T18982] do_recvmmsg+0xdc7/0x22e0 [ 972.446550][T18982] __sys_recvmmsg+0x340/0x5f0 [ 972.451211][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.457263][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.463401][T18982] __do_fast_syscall_32+0x129/0x180 [ 972.468585][T18982] do_fast_syscall_32+0x6a/0xc0 [ 972.473419][T18982] do_SYSENTER_32+0x73/0x90 [ 972.477907][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.484208][T18982] [ 972.486518][T18982] Uninit was stored to memory at: [ 972.491555][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 972.497263][T18982] __msan_chain_origin+0x57/0xa0 [ 972.502190][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 972.507287][T18982] get_compat_msghdr+0x108/0x2b0 [ 972.512209][T18982] do_recvmmsg+0xdc7/0x22e0 [ 972.516697][T18982] __sys_recvmmsg+0x340/0x5f0 [ 972.521362][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 972.527413][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 972.533566][T18982] __do_fast_syscall_32+0x129/0x180 [ 972.538749][T18982] do_fast_syscall_32+0x6a/0xc0 [ 972.543587][T18982] do_SYSENTER_32+0x73/0x90 [ 972.548078][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 972.554377][T18982] [ 972.556687][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 972.563433][T18982] do_recvmmsg+0xc2/0x22e0 [ 972.567846][T18982] do_recvmmsg+0xc2/0x22e0 [ 972.982101][T18982] not chained 600000 origins [ 972.986722][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 972.995386][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.005452][T18982] Call Trace: [ 973.008747][T18982] dump_stack+0x21c/0x280 [ 973.013085][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 973.018809][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 973.024877][T18982] ? kmsan_get_metadata+0x116/0x180 [ 973.030073][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 973.035883][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 973.041947][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 973.047318][T18982] ? kmsan_get_metadata+0x116/0x180 [ 973.052529][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 973.058253][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 973.064320][T18982] ? _copy_from_user+0x201/0x310 [ 973.069252][T18982] ? kmsan_get_metadata+0x116/0x180 [ 973.074452][T18982] __msan_chain_origin+0x57/0xa0 [ 973.079388][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 973.084505][T18982] get_compat_msghdr+0x108/0x2b0 [ 973.089448][T18982] do_recvmmsg+0xdc7/0x22e0 [ 973.093954][T18982] ? kmsan_get_metadata+0x116/0x180 [ 973.099156][T18982] ? kmsan_get_metadata+0x116/0x180 [ 973.104361][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 973.109994][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 973.115294][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 973.120060][T18982] __sys_recvmmsg+0x340/0x5f0 [ 973.124744][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 973.130545][T18982] ? kmsan_get_metadata+0x116/0x180 [ 973.135745][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.141814][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.147966][T18982] __do_fast_syscall_32+0x129/0x180 [ 973.153163][T18982] do_fast_syscall_32+0x6a/0xc0 [ 973.158015][T18982] do_SYSENTER_32+0x73/0x90 [ 973.162519][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.168844][T18982] RIP: 0023:0xf7fe5549 [ 973.172942][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 973.192545][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 973.200956][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 973.208930][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 973.216896][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 973.224872][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 973.232847][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 973.241164][T18982] Uninit was stored to memory at: [ 973.246199][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 973.251917][T18982] __msan_chain_origin+0x57/0xa0 [ 973.256852][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 973.261960][T18982] get_compat_msghdr+0x108/0x2b0 [ 973.266894][T18982] do_recvmmsg+0xdc7/0x22e0 [ 973.271394][T18982] __sys_recvmmsg+0x340/0x5f0 [ 973.276068][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.282132][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.288284][T18982] __do_fast_syscall_32+0x129/0x180 [ 973.293516][T18982] do_fast_syscall_32+0x6a/0xc0 [ 973.298366][T18982] do_SYSENTER_32+0x73/0x90 [ 973.302868][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.309177][T18982] [ 973.311491][T18982] Uninit was stored to memory at: [ 973.316522][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 973.322242][T18982] __msan_chain_origin+0x57/0xa0 [ 973.327263][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 973.332367][T18982] get_compat_msghdr+0x108/0x2b0 [ 973.337301][T18982] do_recvmmsg+0xdc7/0x22e0 [ 973.341816][T18982] __sys_recvmmsg+0x340/0x5f0 [ 973.346492][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.352555][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.358707][T18982] __do_fast_syscall_32+0x129/0x180 [ 973.363904][T18982] do_fast_syscall_32+0x6a/0xc0 [ 973.368752][T18982] do_SYSENTER_32+0x73/0x90 [ 973.373255][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.379563][T18982] [ 973.381881][T18982] Uninit was stored to memory at: [ 973.386908][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 973.392623][T18982] __msan_chain_origin+0x57/0xa0 [ 973.397556][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 973.402666][T18982] get_compat_msghdr+0x108/0x2b0 [ 973.407605][T18982] do_recvmmsg+0xdc7/0x22e0 [ 973.412107][T18982] __sys_recvmmsg+0x340/0x5f0 [ 973.416778][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.422842][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.428996][T18982] __do_fast_syscall_32+0x129/0x180 [ 973.434193][T18982] do_fast_syscall_32+0x6a/0xc0 [ 973.439039][T18982] do_SYSENTER_32+0x73/0x90 [ 973.443540][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.449850][T18982] [ 973.452167][T18982] Uninit was stored to memory at: [ 973.457190][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 973.462910][T18982] __msan_chain_origin+0x57/0xa0 [ 973.467842][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 973.472949][T18982] get_compat_msghdr+0x108/0x2b0 [ 973.477882][T18982] do_recvmmsg+0xdc7/0x22e0 [ 973.482382][T18982] __sys_recvmmsg+0x340/0x5f0 [ 973.487053][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.493117][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.499269][T18982] __do_fast_syscall_32+0x129/0x180 [ 973.504464][T18982] do_fast_syscall_32+0x6a/0xc0 [ 973.509310][T18982] do_SYSENTER_32+0x73/0x90 [ 973.513810][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.520119][T18982] [ 973.522436][T18982] Uninit was stored to memory at: [ 973.527475][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 973.533286][T18982] __msan_chain_origin+0x57/0xa0 [ 973.538216][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 973.543322][T18982] get_compat_msghdr+0x108/0x2b0 [ 973.548256][T18982] do_recvmmsg+0xdc7/0x22e0 [ 973.552759][T18982] __sys_recvmmsg+0x340/0x5f0 [ 973.557431][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.563496][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.569651][T18982] __do_fast_syscall_32+0x129/0x180 [ 973.574885][T18982] do_fast_syscall_32+0x6a/0xc0 [ 973.579729][T18982] do_SYSENTER_32+0x73/0x90 [ 973.584229][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.590535][T18982] [ 973.592853][T18982] Uninit was stored to memory at: [ 973.597876][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 973.603597][T18982] __msan_chain_origin+0x57/0xa0 [ 973.608533][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 973.613648][T18982] get_compat_msghdr+0x108/0x2b0 [ 973.618585][T18982] do_recvmmsg+0xdc7/0x22e0 [ 973.623087][T18982] __sys_recvmmsg+0x340/0x5f0 [ 973.627761][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.633824][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.639973][T18982] __do_fast_syscall_32+0x129/0x180 [ 973.645169][T18982] do_fast_syscall_32+0x6a/0xc0 [ 973.650024][T18982] do_SYSENTER_32+0x73/0x90 [ 973.654525][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.660831][T18982] [ 973.663140][T18982] Uninit was stored to memory at: [ 973.668156][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 973.673860][T18982] __msan_chain_origin+0x57/0xa0 [ 973.678786][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 973.683882][T18982] get_compat_msghdr+0x108/0x2b0 [ 973.688805][T18982] do_recvmmsg+0xdc7/0x22e0 [ 973.693294][T18982] __sys_recvmmsg+0x340/0x5f0 [ 973.697958][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 973.704017][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 973.710162][T18982] __do_fast_syscall_32+0x129/0x180 [ 973.715347][T18982] do_fast_syscall_32+0x6a/0xc0 [ 973.720182][T18982] do_SYSENTER_32+0x73/0x90 [ 973.724679][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 973.730979][T18982] [ 973.733289][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 973.739948][T18982] do_recvmmsg+0xc2/0x22e0 [ 973.744349][T18982] do_recvmmsg+0xc2/0x22e0 [ 973.876963][T18985] not chained 610000 origins [ 973.881566][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 973.890217][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.900266][T18985] Call Trace: [ 973.903559][T18985] dump_stack+0x21c/0x280 [ 973.907906][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 973.913633][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 973.919696][T18985] ? kmsan_get_metadata+0x116/0x180 [ 973.924887][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 973.930694][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 973.936754][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 973.942121][T18985] ? kmsan_get_metadata+0x116/0x180 [ 973.947316][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 973.952939][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 973.958993][T18985] ? _copy_from_user+0x201/0x310 [ 973.963917][T18985] ? kmsan_get_metadata+0x116/0x180 [ 973.969104][T18985] __msan_chain_origin+0x57/0xa0 [ 973.974028][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 973.979129][T18985] get_compat_msghdr+0x108/0x2b0 [ 973.984056][T18985] do_recvmmsg+0xdc7/0x22e0 [ 973.988549][T18985] ? kmsan_get_metadata+0x116/0x180 [ 973.993736][T18985] ? kmsan_get_metadata+0x116/0x180 [ 973.998921][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 974.004540][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 974.009937][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 974.014701][T18985] __sys_recvmmsg+0x340/0x5f0 [ 974.019369][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 974.025157][T18985] ? kmsan_get_metadata+0x116/0x180 [ 974.030343][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.036399][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.042539][T18985] __do_fast_syscall_32+0x129/0x180 [ 974.047728][T18985] do_fast_syscall_32+0x6a/0xc0 [ 974.052565][T18985] do_SYSENTER_32+0x73/0x90 [ 974.057074][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.063396][T18985] RIP: 0023:0xf7fe5549 [ 974.067458][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 974.087136][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 974.095542][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 974.103507][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 974.111466][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 974.119429][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 974.127384][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 974.135341][T18985] Uninit was stored to memory at: [ 974.140360][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 974.146065][T18985] __msan_chain_origin+0x57/0xa0 [ 974.150986][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 974.156079][T18985] get_compat_msghdr+0x108/0x2b0 [ 974.161000][T18985] do_recvmmsg+0xdc7/0x22e0 [ 974.165488][T18985] __sys_recvmmsg+0x340/0x5f0 [ 974.170152][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.176224][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.182389][T18985] __do_fast_syscall_32+0x129/0x180 [ 974.187575][T18985] do_fast_syscall_32+0x6a/0xc0 [ 974.192411][T18985] do_SYSENTER_32+0x73/0x90 [ 974.196903][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.203211][T18985] [ 974.205519][T18985] Uninit was stored to memory at: [ 974.210537][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 974.216244][T18985] __msan_chain_origin+0x57/0xa0 [ 974.221170][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 974.226273][T18985] get_compat_msghdr+0x108/0x2b0 [ 974.231204][T18985] do_recvmmsg+0xdc7/0x22e0 [ 974.235698][T18985] __sys_recvmmsg+0x340/0x5f0 [ 974.240364][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.246418][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.252561][T18985] __do_fast_syscall_32+0x129/0x180 [ 974.257836][T18985] do_fast_syscall_32+0x6a/0xc0 [ 974.262672][T18985] do_SYSENTER_32+0x73/0x90 [ 974.267161][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.273464][T18985] [ 974.275773][T18985] Uninit was stored to memory at: [ 974.280784][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 974.286491][T18985] __msan_chain_origin+0x57/0xa0 [ 974.291411][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 974.296513][T18985] get_compat_msghdr+0x108/0x2b0 [ 974.301439][T18985] do_recvmmsg+0xdc7/0x22e0 [ 974.305926][T18985] __sys_recvmmsg+0x340/0x5f0 [ 974.310587][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.316638][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.322778][T18985] __do_fast_syscall_32+0x129/0x180 [ 974.327959][T18985] do_fast_syscall_32+0x6a/0xc0 [ 974.332797][T18985] do_SYSENTER_32+0x73/0x90 [ 974.337288][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.343605][T18985] [ 974.345914][T18985] Uninit was stored to memory at: [ 974.350924][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 974.356631][T18985] __msan_chain_origin+0x57/0xa0 [ 974.361552][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 974.366661][T18985] get_compat_msghdr+0x108/0x2b0 [ 974.371583][T18985] do_recvmmsg+0xdc7/0x22e0 [ 974.376072][T18985] __sys_recvmmsg+0x340/0x5f0 [ 974.380737][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.386789][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.392929][T18985] __do_fast_syscall_32+0x129/0x180 [ 974.398112][T18985] do_fast_syscall_32+0x6a/0xc0 [ 974.402947][T18985] do_SYSENTER_32+0x73/0x90 [ 974.407436][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.413735][T18985] [ 974.416042][T18985] Uninit was stored to memory at: [ 974.421052][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 974.426757][T18985] __msan_chain_origin+0x57/0xa0 [ 974.431787][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 974.436882][T18985] get_compat_msghdr+0x108/0x2b0 [ 974.441806][T18985] do_recvmmsg+0xdc7/0x22e0 [ 974.446296][T18985] __sys_recvmmsg+0x340/0x5f0 [ 974.450958][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.457011][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.463150][T18985] __do_fast_syscall_32+0x129/0x180 [ 974.468331][T18985] do_fast_syscall_32+0x6a/0xc0 [ 974.473168][T18985] do_SYSENTER_32+0x73/0x90 [ 974.477659][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.483960][T18985] [ 974.486268][T18985] Uninit was stored to memory at: [ 974.491279][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 974.496983][T18985] __msan_chain_origin+0x57/0xa0 [ 974.501906][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 974.507006][T18985] get_compat_msghdr+0x108/0x2b0 [ 974.511931][T18985] do_recvmmsg+0xdc7/0x22e0 [ 974.516419][T18985] __sys_recvmmsg+0x340/0x5f0 [ 974.521080][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.527132][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.533270][T18985] __do_fast_syscall_32+0x129/0x180 [ 974.538451][T18985] do_fast_syscall_32+0x6a/0xc0 [ 974.543286][T18985] do_SYSENTER_32+0x73/0x90 [ 974.547775][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.554075][T18985] [ 974.556381][T18985] Uninit was stored to memory at: [ 974.561482][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 974.567192][T18985] __msan_chain_origin+0x57/0xa0 [ 974.572116][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 974.577211][T18985] get_compat_msghdr+0x108/0x2b0 [ 974.582132][T18985] do_recvmmsg+0xdc7/0x22e0 [ 974.586620][T18985] __sys_recvmmsg+0x340/0x5f0 [ 974.591283][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 974.597347][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 974.603485][T18985] __do_fast_syscall_32+0x129/0x180 [ 974.608668][T18985] do_fast_syscall_32+0x6a/0xc0 [ 974.613504][T18985] do_SYSENTER_32+0x73/0x90 [ 974.617994][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 974.624294][T18985] [ 974.626603][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 974.633262][T18985] do_recvmmsg+0xc2/0x22e0 [ 974.637663][T18985] do_recvmmsg+0xc2/0x22e0 [ 974.881007][T18985] not chained 620000 origins [ 974.885634][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 974.894294][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 974.904342][T18985] Call Trace: [ 974.907634][T18985] dump_stack+0x21c/0x280 [ 974.911971][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 974.917697][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 974.923764][T18985] ? kmsan_get_metadata+0x116/0x180 [ 974.928957][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 974.934770][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 974.940834][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 974.946201][T18985] ? kmsan_get_metadata+0x116/0x180 [ 974.951397][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 974.957030][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 974.963100][T18985] ? _copy_from_user+0x201/0x310 [ 974.968031][T18985] ? kmsan_get_metadata+0x116/0x180 [ 974.973228][T18985] __msan_chain_origin+0x57/0xa0 [ 974.978165][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 974.983276][T18985] get_compat_msghdr+0x108/0x2b0 [ 974.988218][T18985] do_recvmmsg+0xdc7/0x22e0 [ 974.992724][T18985] ? kmsan_get_metadata+0x116/0x180 [ 974.997923][T18985] ? kmsan_get_metadata+0x116/0x180 [ 975.003129][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 975.008767][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 975.014054][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 975.018816][T18985] __sys_recvmmsg+0x340/0x5f0 [ 975.023521][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 975.029595][T18985] ? kmsan_get_metadata+0x116/0x180 [ 975.034799][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.041042][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.047201][T18985] __do_fast_syscall_32+0x129/0x180 [ 975.052398][T18985] do_fast_syscall_32+0x6a/0xc0 [ 975.057246][T18985] do_SYSENTER_32+0x73/0x90 [ 975.061747][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.068063][T18985] RIP: 0023:0xf7fe5549 [ 975.072128][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 975.091724][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 975.100128][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 975.108090][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 975.116051][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 975.124012][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 975.131973][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 975.139949][T18985] Uninit was stored to memory at: [ 975.144970][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 975.150676][T18985] __msan_chain_origin+0x57/0xa0 [ 975.155598][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 975.160712][T18985] get_compat_msghdr+0x108/0x2b0 [ 975.165638][T18985] do_recvmmsg+0xdc7/0x22e0 [ 975.170127][T18985] __sys_recvmmsg+0x340/0x5f0 [ 975.174802][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.180866][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.187017][T18985] __do_fast_syscall_32+0x129/0x180 [ 975.192203][T18985] do_fast_syscall_32+0x6a/0xc0 [ 975.197041][T18985] do_SYSENTER_32+0x73/0x90 [ 975.201532][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.207836][T18985] [ 975.210148][T18985] Uninit was stored to memory at: [ 975.215180][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 975.220891][T18985] __msan_chain_origin+0x57/0xa0 [ 975.225822][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 975.230926][T18985] get_compat_msghdr+0x108/0x2b0 [ 975.235855][T18985] do_recvmmsg+0xdc7/0x22e0 [ 975.240352][T18985] __sys_recvmmsg+0x340/0x5f0 [ 975.245021][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.251076][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.257219][T18985] __do_fast_syscall_32+0x129/0x180 [ 975.262404][T18985] do_fast_syscall_32+0x6a/0xc0 [ 975.267244][T18985] do_SYSENTER_32+0x73/0x90 [ 975.271750][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.278059][T18985] [ 975.280374][T18985] Uninit was stored to memory at: [ 975.285398][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 975.291107][T18985] __msan_chain_origin+0x57/0xa0 [ 975.296033][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 975.301129][T18985] get_compat_msghdr+0x108/0x2b0 [ 975.306055][T18985] do_recvmmsg+0xdc7/0x22e0 [ 975.310545][T18985] __sys_recvmmsg+0x340/0x5f0 [ 975.315211][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.321263][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.327403][T18985] __do_fast_syscall_32+0x129/0x180 [ 975.332586][T18985] do_fast_syscall_32+0x6a/0xc0 [ 975.337421][T18985] do_SYSENTER_32+0x73/0x90 [ 975.341917][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.348218][T18985] [ 975.350524][T18985] Uninit was stored to memory at: [ 975.355537][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 975.361243][T18985] __msan_chain_origin+0x57/0xa0 [ 975.366163][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 975.371259][T18985] get_compat_msghdr+0x108/0x2b0 [ 975.376183][T18985] do_recvmmsg+0xdc7/0x22e0 [ 975.380670][T18985] __sys_recvmmsg+0x340/0x5f0 [ 975.385330][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.391383][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.397524][T18985] __do_fast_syscall_32+0x129/0x180 [ 975.402706][T18985] do_fast_syscall_32+0x6a/0xc0 [ 975.407540][T18985] do_SYSENTER_32+0x73/0x90 [ 975.412030][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.418328][T18985] [ 975.420637][T18985] Uninit was stored to memory at: [ 975.425649][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 975.431357][T18985] __msan_chain_origin+0x57/0xa0 [ 975.436280][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 975.441377][T18985] get_compat_msghdr+0x108/0x2b0 [ 975.446300][T18985] do_recvmmsg+0xdc7/0x22e0 [ 975.450792][T18985] __sys_recvmmsg+0x340/0x5f0 [ 975.455454][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.461504][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.467641][T18985] __do_fast_syscall_32+0x129/0x180 [ 975.472825][T18985] do_fast_syscall_32+0x6a/0xc0 [ 975.477659][T18985] do_SYSENTER_32+0x73/0x90 [ 975.482151][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.488450][T18985] [ 975.490756][T18985] Uninit was stored to memory at: [ 975.495770][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 975.501494][T18985] __msan_chain_origin+0x57/0xa0 [ 975.506416][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 975.511509][T18985] get_compat_msghdr+0x108/0x2b0 [ 975.516431][T18985] do_recvmmsg+0xdc7/0x22e0 [ 975.520918][T18985] __sys_recvmmsg+0x340/0x5f0 [ 975.525675][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.531736][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.537881][T18985] __do_fast_syscall_32+0x129/0x180 [ 975.543067][T18985] do_fast_syscall_32+0x6a/0xc0 [ 975.547905][T18985] do_SYSENTER_32+0x73/0x90 [ 975.552396][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.558695][T18985] [ 975.561003][T18985] Uninit was stored to memory at: [ 975.566018][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 975.571724][T18985] __msan_chain_origin+0x57/0xa0 [ 975.576654][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 975.581747][T18985] get_compat_msghdr+0x108/0x2b0 [ 975.586668][T18985] do_recvmmsg+0xdc7/0x22e0 [ 975.591155][T18985] __sys_recvmmsg+0x340/0x5f0 [ 975.595816][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.601867][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.608010][T18985] __do_fast_syscall_32+0x129/0x180 [ 975.613192][T18985] do_fast_syscall_32+0x6a/0xc0 [ 975.618028][T18985] do_SYSENTER_32+0x73/0x90 [ 975.622519][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.628818][T18985] [ 975.631127][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 975.637784][T18985] do_recvmmsg+0xc2/0x22e0 [ 975.642185][T18985] do_recvmmsg+0xc2/0x22e0 [ 975.748211][T18985] not chained 630000 origins [ 975.752834][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 975.761490][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.771527][T18985] Call Trace: [ 975.774809][T18985] dump_stack+0x21c/0x280 [ 975.779132][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 975.784838][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 975.790890][T18985] ? kmsan_get_metadata+0x116/0x180 [ 975.796075][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 975.801871][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 975.807931][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 975.813289][T18985] ? kmsan_get_metadata+0x116/0x180 [ 975.818475][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 975.824094][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 975.830146][T18985] ? _copy_from_user+0x201/0x310 [ 975.835068][T18985] ? kmsan_get_metadata+0x116/0x180 [ 975.840253][T18985] __msan_chain_origin+0x57/0xa0 [ 975.845176][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 975.850278][T18985] get_compat_msghdr+0x108/0x2b0 [ 975.855209][T18985] do_recvmmsg+0xdc7/0x22e0 [ 975.859703][T18985] ? kmsan_get_metadata+0x116/0x180 [ 975.864891][T18985] ? kmsan_get_metadata+0x116/0x180 [ 975.870077][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 975.875696][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 975.880970][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 975.885719][T18985] __sys_recvmmsg+0x340/0x5f0 [ 975.890384][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 975.896173][T18985] ? kmsan_get_metadata+0x116/0x180 [ 975.901359][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 975.907415][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 975.913557][T18985] __do_fast_syscall_32+0x129/0x180 [ 975.919209][T18985] do_fast_syscall_32+0x6a/0xc0 [ 975.924046][T18985] do_SYSENTER_32+0x73/0x90 [ 975.928538][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 975.934846][T18985] RIP: 0023:0xf7fe5549 [ 975.938901][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 975.958498][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 975.966893][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 975.974848][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 975.982814][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 975.990783][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 975.998754][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 976.006722][T18985] Uninit was stored to memory at: [ 976.011754][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 976.017467][T18985] __msan_chain_origin+0x57/0xa0 [ 976.022395][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 976.027493][T18985] get_compat_msghdr+0x108/0x2b0 [ 976.032419][T18985] do_recvmmsg+0xdc7/0x22e0 [ 976.036910][T18985] __sys_recvmmsg+0x340/0x5f0 [ 976.041576][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.047634][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.053777][T18985] __do_fast_syscall_32+0x129/0x180 [ 976.058965][T18985] do_fast_syscall_32+0x6a/0xc0 [ 976.063800][T18985] do_SYSENTER_32+0x73/0x90 [ 976.068290][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.074590][T18985] [ 976.076896][T18985] Uninit was stored to memory at: [ 976.081911][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 976.087732][T18985] __msan_chain_origin+0x57/0xa0 [ 976.092653][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 976.097748][T18985] get_compat_msghdr+0x108/0x2b0 [ 976.102671][T18985] do_recvmmsg+0xdc7/0x22e0 [ 976.107158][T18985] __sys_recvmmsg+0x340/0x5f0 [ 976.111835][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.117888][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.124031][T18985] __do_fast_syscall_32+0x129/0x180 [ 976.129216][T18985] do_fast_syscall_32+0x6a/0xc0 [ 976.134052][T18985] do_SYSENTER_32+0x73/0x90 [ 976.138541][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.144838][T18985] [ 976.147155][T18985] Uninit was stored to memory at: [ 976.152169][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 976.157895][T18985] __msan_chain_origin+0x57/0xa0 [ 976.162820][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 976.167928][T18985] get_compat_msghdr+0x108/0x2b0 [ 976.172858][T18985] do_recvmmsg+0xdc7/0x22e0 [ 976.177353][T18985] __sys_recvmmsg+0x340/0x5f0 [ 976.182023][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.188083][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.194238][T18985] __do_fast_syscall_32+0x129/0x180 [ 976.199439][T18985] do_fast_syscall_32+0x6a/0xc0 [ 976.204278][T18985] do_SYSENTER_32+0x73/0x90 [ 976.208770][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.215071][T18985] [ 976.217379][T18985] Uninit was stored to memory at: [ 976.222390][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 976.228094][T18985] __msan_chain_origin+0x57/0xa0 [ 976.233016][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 976.238110][T18985] get_compat_msghdr+0x108/0x2b0 [ 976.243032][T18985] do_recvmmsg+0xdc7/0x22e0 [ 976.247524][T18985] __sys_recvmmsg+0x340/0x5f0 [ 976.252184][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.258239][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.264379][T18985] __do_fast_syscall_32+0x129/0x180 [ 976.269563][T18985] do_fast_syscall_32+0x6a/0xc0 [ 976.274398][T18985] do_SYSENTER_32+0x73/0x90 [ 976.278887][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.285186][T18985] [ 976.287496][T18985] Uninit was stored to memory at: [ 976.292506][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 976.298209][T18985] __msan_chain_origin+0x57/0xa0 [ 976.303133][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 976.308232][T18985] get_compat_msghdr+0x108/0x2b0 [ 976.313154][T18985] do_recvmmsg+0xdc7/0x22e0 [ 976.317641][T18985] __sys_recvmmsg+0x340/0x5f0 [ 976.322303][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.328354][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.334491][T18985] __do_fast_syscall_32+0x129/0x180 [ 976.339674][T18985] do_fast_syscall_32+0x6a/0xc0 [ 976.344510][T18985] do_SYSENTER_32+0x73/0x90 [ 976.348999][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.355300][T18985] [ 976.357605][T18985] Uninit was stored to memory at: [ 976.362615][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 976.368319][T18985] __msan_chain_origin+0x57/0xa0 [ 976.373244][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 976.378337][T18985] get_compat_msghdr+0x108/0x2b0 [ 976.383262][T18985] do_recvmmsg+0xdc7/0x22e0 [ 976.387749][T18985] __sys_recvmmsg+0x340/0x5f0 [ 976.392412][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.398463][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.404601][T18985] __do_fast_syscall_32+0x129/0x180 [ 976.409783][T18985] do_fast_syscall_32+0x6a/0xc0 [ 976.414617][T18985] do_SYSENTER_32+0x73/0x90 [ 976.419105][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.425403][T18985] [ 976.427722][T18985] Uninit was stored to memory at: [ 976.432734][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 976.438452][T18985] __msan_chain_origin+0x57/0xa0 [ 976.443373][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 976.448466][T18985] get_compat_msghdr+0x108/0x2b0 [ 976.453389][T18985] do_recvmmsg+0xdc7/0x22e0 [ 976.457888][T18985] __sys_recvmmsg+0x340/0x5f0 [ 976.462550][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 976.468602][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 976.474743][T18985] __do_fast_syscall_32+0x129/0x180 [ 976.479926][T18985] do_fast_syscall_32+0x6a/0xc0 [ 976.484765][T18985] do_SYSENTER_32+0x73/0x90 [ 976.489257][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 976.495558][T18985] [ 976.497869][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 976.504530][T18985] do_recvmmsg+0xc2/0x22e0 [ 976.508929][T18985] do_recvmmsg+0xc2/0x22e0 [ 976.857904][T18985] not chained 640000 origins [ 976.862554][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 976.871216][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.881264][T18985] Call Trace: [ 976.884561][T18985] dump_stack+0x21c/0x280 [ 976.888897][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 976.894617][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 976.900682][T18985] ? kmsan_get_metadata+0x116/0x180 [ 976.905879][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 976.911685][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 976.917751][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 976.923121][T18985] ? kmsan_get_metadata+0x116/0x180 [ 976.928322][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 976.933956][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 976.940024][T18985] ? _copy_from_user+0x201/0x310 [ 976.944966][T18985] ? kmsan_get_metadata+0x116/0x180 [ 976.950163][T18985] __msan_chain_origin+0x57/0xa0 [ 976.955139][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 976.960253][T18985] get_compat_msghdr+0x108/0x2b0 [ 976.965195][T18985] do_recvmmsg+0xdc7/0x22e0 [ 976.969730][T18985] ? kmsan_get_metadata+0x116/0x180 [ 976.974928][T18985] ? kmsan_get_metadata+0x116/0x180 [ 976.980128][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 976.985764][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 976.991190][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 976.995955][T18985] __sys_recvmmsg+0x340/0x5f0 [ 977.000631][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 977.006437][T18985] ? kmsan_get_metadata+0x116/0x180 [ 977.011638][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.017707][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.023861][T18985] __do_fast_syscall_32+0x129/0x180 [ 977.029060][T18985] do_fast_syscall_32+0x6a/0xc0 [ 977.033909][T18985] do_SYSENTER_32+0x73/0x90 [ 977.038447][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.044765][T18985] RIP: 0023:0xf7fe5549 [ 977.048835][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 977.068463][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 977.076871][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 977.084841][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 977.092808][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 977.100776][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 977.108738][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 977.116707][T18985] Uninit was stored to memory at: [ 977.121741][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 977.127461][T18985] __msan_chain_origin+0x57/0xa0 [ 977.132394][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 977.137509][T18985] get_compat_msghdr+0x108/0x2b0 [ 977.142442][T18985] do_recvmmsg+0xdc7/0x22e0 [ 977.146941][T18985] __sys_recvmmsg+0x340/0x5f0 [ 977.151729][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.157793][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.163947][T18985] __do_fast_syscall_32+0x129/0x180 [ 977.169150][T18985] do_fast_syscall_32+0x6a/0xc0 [ 977.174010][T18985] do_SYSENTER_32+0x73/0x90 [ 977.178525][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.184840][T18985] [ 977.187158][T18985] Uninit was stored to memory at: [ 977.192182][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 977.197903][T18985] __msan_chain_origin+0x57/0xa0 [ 977.202836][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 977.207936][T18985] get_compat_msghdr+0x108/0x2b0 [ 977.212867][T18985] do_recvmmsg+0xdc7/0x22e0 [ 977.217363][T18985] __sys_recvmmsg+0x340/0x5f0 [ 977.222034][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.228093][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.234243][T18985] __do_fast_syscall_32+0x129/0x180 [ 977.239435][T18985] do_fast_syscall_32+0x6a/0xc0 [ 977.244278][T18985] do_SYSENTER_32+0x73/0x90 [ 977.248777][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.255082][T18985] [ 977.257394][T18985] Uninit was stored to memory at: [ 977.262414][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 977.268122][T18985] __msan_chain_origin+0x57/0xa0 [ 977.273057][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 977.278153][T18985] get_compat_msghdr+0x108/0x2b0 [ 977.283077][T18985] do_recvmmsg+0xdc7/0x22e0 [ 977.287570][T18985] __sys_recvmmsg+0x340/0x5f0 [ 977.292241][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.298304][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.304446][T18985] __do_fast_syscall_32+0x129/0x180 [ 977.309631][T18985] do_fast_syscall_32+0x6a/0xc0 [ 977.314481][T18985] do_SYSENTER_32+0x73/0x90 [ 977.318980][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.325278][T18985] [ 977.327586][T18985] Uninit was stored to memory at: [ 977.332614][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 977.338318][T18985] __msan_chain_origin+0x57/0xa0 [ 977.343239][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 977.348332][T18985] get_compat_msghdr+0x108/0x2b0 [ 977.353257][T18985] do_recvmmsg+0xdc7/0x22e0 [ 977.357848][T18985] __sys_recvmmsg+0x340/0x5f0 [ 977.362510][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.368562][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.374711][T18985] __do_fast_syscall_32+0x129/0x180 [ 977.379894][T18985] do_fast_syscall_32+0x6a/0xc0 [ 977.384728][T18985] do_SYSENTER_32+0x73/0x90 [ 977.389219][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.395519][T18985] [ 977.397826][T18985] Uninit was stored to memory at: [ 977.402844][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 977.408546][T18985] __msan_chain_origin+0x57/0xa0 [ 977.413467][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 977.418570][T18985] get_compat_msghdr+0x108/0x2b0 [ 977.423495][T18985] do_recvmmsg+0xdc7/0x22e0 [ 977.427982][T18985] __sys_recvmmsg+0x340/0x5f0 [ 977.432642][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.438692][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.444829][T18985] __do_fast_syscall_32+0x129/0x180 [ 977.450010][T18985] do_fast_syscall_32+0x6a/0xc0 [ 977.454844][T18985] do_SYSENTER_32+0x73/0x90 [ 977.459332][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.465630][T18985] [ 977.467937][T18985] Uninit was stored to memory at: [ 977.472946][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 977.478651][T18985] __msan_chain_origin+0x57/0xa0 [ 977.483586][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 977.488682][T18985] get_compat_msghdr+0x108/0x2b0 [ 977.493605][T18985] do_recvmmsg+0xdc7/0x22e0 [ 977.498093][T18985] __sys_recvmmsg+0x340/0x5f0 [ 977.502755][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.508809][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.514962][T18985] __do_fast_syscall_32+0x129/0x180 [ 977.520144][T18985] do_fast_syscall_32+0x6a/0xc0 [ 977.524979][T18985] do_SYSENTER_32+0x73/0x90 [ 977.529467][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.535766][T18985] [ 977.538072][T18985] Uninit was stored to memory at: [ 977.543083][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 977.548787][T18985] __msan_chain_origin+0x57/0xa0 [ 977.553708][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 977.558803][T18985] get_compat_msghdr+0x108/0x2b0 [ 977.563726][T18985] do_recvmmsg+0xdc7/0x22e0 [ 977.568218][T18985] __sys_recvmmsg+0x340/0x5f0 [ 977.572881][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.578933][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.585071][T18985] __do_fast_syscall_32+0x129/0x180 [ 977.590255][T18985] do_fast_syscall_32+0x6a/0xc0 [ 977.595090][T18985] do_SYSENTER_32+0x73/0x90 [ 977.599579][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.605880][T18985] [ 977.608191][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 977.614851][T18985] do_recvmmsg+0xc2/0x22e0 [ 977.619252][T18985] do_recvmmsg+0xc2/0x22e0 [ 977.641430][T18982] not chained 650000 origins [ 977.646121][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 977.654816][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.664961][T18982] Call Trace: [ 977.668265][T18982] dump_stack+0x21c/0x280 [ 977.672596][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 977.678322][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 977.684388][T18982] ? kmsan_get_metadata+0x116/0x180 [ 977.689590][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 977.695404][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 977.701487][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 977.706862][T18982] ? kmsan_get_metadata+0x116/0x180 [ 977.712065][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 977.717707][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 977.723777][T18982] ? _copy_from_user+0x201/0x310 [ 977.728714][T18982] ? kmsan_get_metadata+0x116/0x180 [ 977.733914][T18982] __msan_chain_origin+0x57/0xa0 [ 977.738849][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 977.743963][T18982] get_compat_msghdr+0x108/0x2b0 [ 977.748904][T18982] do_recvmmsg+0xdc7/0x22e0 [ 977.753410][T18982] ? kmsan_get_metadata+0x116/0x180 [ 977.758630][T18982] ? kmsan_get_metadata+0x116/0x180 [ 977.763830][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 977.769465][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 977.774752][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 977.779519][T18982] __sys_recvmmsg+0x340/0x5f0 [ 977.784204][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 977.790005][T18982] ? kmsan_get_metadata+0x116/0x180 [ 977.795209][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.801279][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.807435][T18982] __do_fast_syscall_32+0x129/0x180 [ 977.812729][T18982] do_fast_syscall_32+0x6a/0xc0 [ 977.817577][T18982] do_SYSENTER_32+0x73/0x90 [ 977.822081][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.828401][T18982] RIP: 0023:0xf7fe5549 [ 977.832469][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 977.852073][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 977.860485][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 977.868454][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 977.876519][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 977.884487][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 977.892456][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 977.900508][T18982] Uninit was stored to memory at: [ 977.905627][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 977.911344][T18982] __msan_chain_origin+0x57/0xa0 [ 977.916319][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 977.921429][T18982] get_compat_msghdr+0x108/0x2b0 [ 977.926374][T18982] do_recvmmsg+0xdc7/0x22e0 [ 977.930877][T18982] __sys_recvmmsg+0x340/0x5f0 [ 977.935552][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 977.941655][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 977.947803][T18982] __do_fast_syscall_32+0x129/0x180 [ 977.952993][T18982] do_fast_syscall_32+0x6a/0xc0 [ 977.957831][T18982] do_SYSENTER_32+0x73/0x90 [ 977.962320][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 977.968620][T18982] [ 977.970926][T18982] Uninit was stored to memory at: [ 977.975942][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 977.981646][T18982] __msan_chain_origin+0x57/0xa0 [ 977.986566][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 977.991660][T18982] get_compat_msghdr+0x108/0x2b0 [ 977.996706][T18982] do_recvmmsg+0xdc7/0x22e0 [ 978.001205][T18982] __sys_recvmmsg+0x340/0x5f0 [ 978.005986][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.012049][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.018199][T18982] __do_fast_syscall_32+0x129/0x180 [ 978.023392][T18982] do_fast_syscall_32+0x6a/0xc0 [ 978.028236][T18982] do_SYSENTER_32+0x73/0x90 [ 978.032728][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.039029][T18982] [ 978.041337][T18982] Uninit was stored to memory at: [ 978.046353][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 978.052072][T18982] __msan_chain_origin+0x57/0xa0 [ 978.056996][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 978.062096][T18982] get_compat_msghdr+0x108/0x2b0 [ 978.068586][T18982] do_recvmmsg+0xdc7/0x22e0 [ 978.073079][T18982] __sys_recvmmsg+0x340/0x5f0 [ 978.077745][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.083802][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.089946][T18982] __do_fast_syscall_32+0x129/0x180 [ 978.095132][T18982] do_fast_syscall_32+0x6a/0xc0 [ 978.099970][T18982] do_SYSENTER_32+0x73/0x90 [ 978.104466][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.110766][T18982] [ 978.113076][T18982] Uninit was stored to memory at: [ 978.118090][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 978.123797][T18982] __msan_chain_origin+0x57/0xa0 [ 978.128731][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 978.133827][T18982] get_compat_msghdr+0x108/0x2b0 [ 978.138759][T18982] do_recvmmsg+0xdc7/0x22e0 [ 978.143253][T18982] __sys_recvmmsg+0x340/0x5f0 [ 978.147915][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.153973][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.160134][T18982] __do_fast_syscall_32+0x129/0x180 [ 978.165335][T18982] do_fast_syscall_32+0x6a/0xc0 [ 978.170191][T18982] do_SYSENTER_32+0x73/0x90 [ 978.174693][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.180996][T18982] [ 978.183312][T18982] Uninit was stored to memory at: [ 978.188332][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 978.194040][T18982] __msan_chain_origin+0x57/0xa0 [ 978.198986][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 978.204085][T18982] get_compat_msghdr+0x108/0x2b0 [ 978.209011][T18982] do_recvmmsg+0xdc7/0x22e0 [ 978.213521][T18982] __sys_recvmmsg+0x340/0x5f0 [ 978.218201][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.224252][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.230393][T18982] __do_fast_syscall_32+0x129/0x180 [ 978.235580][T18982] do_fast_syscall_32+0x6a/0xc0 [ 978.240417][T18982] do_SYSENTER_32+0x73/0x90 [ 978.244908][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.251207][T18982] [ 978.253514][T18982] Uninit was stored to memory at: [ 978.258530][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 978.264235][T18982] __msan_chain_origin+0x57/0xa0 [ 978.269158][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 978.274253][T18982] get_compat_msghdr+0x108/0x2b0 [ 978.279176][T18982] do_recvmmsg+0xdc7/0x22e0 [ 978.283667][T18982] __sys_recvmmsg+0x340/0x5f0 [ 978.288329][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.294380][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.300523][T18982] __do_fast_syscall_32+0x129/0x180 [ 978.305711][T18982] do_fast_syscall_32+0x6a/0xc0 [ 978.310546][T18982] do_SYSENTER_32+0x73/0x90 [ 978.315035][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.321336][T18982] [ 978.323644][T18982] Uninit was stored to memory at: [ 978.328656][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 978.334362][T18982] __msan_chain_origin+0x57/0xa0 [ 978.339285][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 978.344380][T18982] get_compat_msghdr+0x108/0x2b0 [ 978.349305][T18982] do_recvmmsg+0xdc7/0x22e0 [ 978.353802][T18982] __sys_recvmmsg+0x340/0x5f0 [ 978.358465][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.364519][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.370658][T18982] __do_fast_syscall_32+0x129/0x180 [ 978.375844][T18982] do_fast_syscall_32+0x6a/0xc0 [ 978.380677][T18982] do_SYSENTER_32+0x73/0x90 [ 978.385165][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.391465][T18982] [ 978.393772][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 978.400434][T18982] do_recvmmsg+0xc2/0x22e0 [ 978.404841][T18982] do_recvmmsg+0xc2/0x22e0 [ 978.701359][T18985] not chained 660000 origins [ 978.705992][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 978.714657][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.724715][T18985] Call Trace: [ 978.728013][T18985] dump_stack+0x21c/0x280 [ 978.732351][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 978.738080][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 978.744142][T18985] ? kmsan_get_metadata+0x116/0x180 [ 978.749334][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 978.755139][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 978.761198][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 978.766566][T18985] ? kmsan_get_metadata+0x116/0x180 [ 978.771761][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 978.777395][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 978.783460][T18985] ? _copy_from_user+0x201/0x310 [ 978.788394][T18985] ? kmsan_get_metadata+0x116/0x180 [ 978.793588][T18985] __msan_chain_origin+0x57/0xa0 [ 978.798519][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 978.803633][T18985] get_compat_msghdr+0x108/0x2b0 [ 978.808570][T18985] do_recvmmsg+0xdc7/0x22e0 [ 978.813073][T18985] ? kmsan_get_metadata+0x116/0x180 [ 978.818276][T18985] ? kmsan_get_metadata+0x116/0x180 [ 978.823567][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 978.829201][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 978.834499][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 978.839261][T18985] __sys_recvmmsg+0x340/0x5f0 [ 978.844038][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 978.849835][T18985] ? kmsan_get_metadata+0x116/0x180 [ 978.855032][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 978.861100][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 978.867249][T18985] __do_fast_syscall_32+0x129/0x180 [ 978.872443][T18985] do_fast_syscall_32+0x6a/0xc0 [ 978.877290][T18985] do_SYSENTER_32+0x73/0x90 [ 978.881788][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 978.888106][T18985] RIP: 0023:0xf7fe5549 [ 978.892164][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 978.911771][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 978.920170][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 978.928126][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 978.936084][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 978.944039][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 978.951994][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 978.960056][T18985] Uninit was stored to memory at: [ 978.965956][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 978.971687][T18985] __msan_chain_origin+0x57/0xa0 [ 978.976616][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 978.981717][T18985] get_compat_msghdr+0x108/0x2b0 [ 978.986645][T18985] do_recvmmsg+0xdc7/0x22e0 [ 978.991135][T18985] __sys_recvmmsg+0x340/0x5f0 [ 978.995806][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.001864][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.008025][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.013218][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.018067][T18985] do_SYSENTER_32+0x73/0x90 [ 979.022565][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.028868][T18985] [ 979.031178][T18985] Uninit was stored to memory at: [ 979.036195][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 979.041906][T18985] __msan_chain_origin+0x57/0xa0 [ 979.046831][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.051926][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.056848][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.061336][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.065996][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.072063][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.078219][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.083402][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.088237][T18985] do_SYSENTER_32+0x73/0x90 [ 979.092727][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.099027][T18985] [ 979.101334][T18985] Uninit was stored to memory at: [ 979.106344][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 979.112048][T18985] __msan_chain_origin+0x57/0xa0 [ 979.116967][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.122060][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.126985][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.131472][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.136136][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.142191][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.148330][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.153517][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.158350][T18985] do_SYSENTER_32+0x73/0x90 [ 979.162841][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.169149][T18985] [ 979.171468][T18985] Uninit was stored to memory at: [ 979.176494][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 979.182203][T18985] __msan_chain_origin+0x57/0xa0 [ 979.187127][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.192225][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.197151][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.201643][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.206310][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.212363][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.218505][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.223700][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.228539][T18985] do_SYSENTER_32+0x73/0x90 [ 979.233033][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.239421][T18985] [ 979.241731][T18985] Uninit was stored to memory at: [ 979.246751][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 979.252459][T18985] __msan_chain_origin+0x57/0xa0 [ 979.257401][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.262499][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.267423][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.271911][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.276575][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.282625][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.288763][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.293945][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.298778][T18985] do_SYSENTER_32+0x73/0x90 [ 979.303266][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.309563][T18985] [ 979.311872][T18985] Uninit was stored to memory at: [ 979.316888][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 979.322593][T18985] __msan_chain_origin+0x57/0xa0 [ 979.327515][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.332612][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.337545][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.342032][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.346696][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.352749][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.358887][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.364079][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.368912][T18985] do_SYSENTER_32+0x73/0x90 [ 979.373401][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.379699][T18985] [ 979.382004][T18985] Uninit was stored to memory at: [ 979.387016][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 979.392721][T18985] __msan_chain_origin+0x57/0xa0 [ 979.397644][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.402739][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.407663][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.412153][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.416815][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.422874][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.429012][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.434194][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.439029][T18985] do_SYSENTER_32+0x73/0x90 [ 979.443518][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.449819][T18985] [ 979.452125][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 979.458784][T18985] do_recvmmsg+0xc2/0x22e0 [ 979.463183][T18985] do_recvmmsg+0xc2/0x22e0 [ 979.553377][T18985] not chained 670000 origins [ 979.557988][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 979.566670][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.576706][T18985] Call Trace: [ 979.579981][T18985] dump_stack+0x21c/0x280 [ 979.584293][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 979.589991][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 979.596036][T18985] ? kmsan_get_metadata+0x116/0x180 [ 979.601208][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 979.606989][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 979.613028][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 979.618371][T18985] ? kmsan_get_metadata+0x116/0x180 [ 979.623546][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 979.629157][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 979.635208][T18985] ? _copy_from_user+0x201/0x310 [ 979.640136][T18985] ? kmsan_get_metadata+0x116/0x180 [ 979.645314][T18985] __msan_chain_origin+0x57/0xa0 [ 979.650230][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.655319][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.660232][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.664764][T18985] ? kmsan_get_metadata+0x116/0x180 [ 979.669936][T18985] ? kmsan_get_metadata+0x116/0x180 [ 979.675109][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 979.680717][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 979.685977][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 979.690717][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.695368][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 979.701145][T18985] ? kmsan_get_metadata+0x116/0x180 [ 979.706317][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.712361][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.718488][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.723661][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.728486][T18985] do_SYSENTER_32+0x73/0x90 [ 979.732965][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.739262][T18985] RIP: 0023:0xf7fe5549 [ 979.743305][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 979.762891][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 979.771292][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 979.779249][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 979.787206][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 979.795164][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 979.803119][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 979.811077][T18985] Uninit was stored to memory at: [ 979.816093][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 979.821800][T18985] __msan_chain_origin+0x57/0xa0 [ 979.826724][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.831821][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.836745][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.841232][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.845894][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.851951][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.858092][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.863274][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.868109][T18985] do_SYSENTER_32+0x73/0x90 [ 979.872599][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.878899][T18985] [ 979.881221][T18985] Uninit was stored to memory at: [ 979.886232][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 979.891937][T18985] __msan_chain_origin+0x57/0xa0 [ 979.896860][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.901952][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.906875][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.911363][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.916025][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.922096][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.928234][T18985] __do_fast_syscall_32+0x129/0x180 [ 979.933417][T18985] do_fast_syscall_32+0x6a/0xc0 [ 979.938253][T18985] do_SYSENTER_32+0x73/0x90 [ 979.942745][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 979.949046][T18985] [ 979.951357][T18985] Uninit was stored to memory at: [ 979.956370][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 979.962182][T18985] __msan_chain_origin+0x57/0xa0 [ 979.967103][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 979.972196][T18985] get_compat_msghdr+0x108/0x2b0 [ 979.977120][T18985] do_recvmmsg+0xdc7/0x22e0 [ 979.981608][T18985] __sys_recvmmsg+0x340/0x5f0 [ 979.986278][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 979.992330][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 979.998469][T18985] __do_fast_syscall_32+0x129/0x180 [ 980.003667][T18985] do_fast_syscall_32+0x6a/0xc0 [ 980.008516][T18985] do_SYSENTER_32+0x73/0x90 [ 980.013014][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 980.019318][T18985] [ 980.021625][T18985] Uninit was stored to memory at: [ 980.026654][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 980.032367][T18985] __msan_chain_origin+0x57/0xa0 [ 980.037290][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 980.042384][T18985] get_compat_msghdr+0x108/0x2b0 [ 980.047307][T18985] do_recvmmsg+0xdc7/0x22e0 [ 980.051798][T18985] __sys_recvmmsg+0x340/0x5f0 [ 980.056465][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 980.062519][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 980.068676][T18985] __do_fast_syscall_32+0x129/0x180 [ 980.073865][T18985] do_fast_syscall_32+0x6a/0xc0 [ 980.078707][T18985] do_SYSENTER_32+0x73/0x90 [ 980.083202][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 980.089507][T18985] [ 980.091821][T18985] Uninit was stored to memory at: [ 980.096844][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 980.102552][T18985] __msan_chain_origin+0x57/0xa0 [ 980.107473][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 980.112567][T18985] get_compat_msghdr+0x108/0x2b0 [ 980.117491][T18985] do_recvmmsg+0xdc7/0x22e0 [ 980.121979][T18985] __sys_recvmmsg+0x340/0x5f0 [ 980.126642][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 980.132701][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 980.138838][T18985] __do_fast_syscall_32+0x129/0x180 [ 980.144019][T18985] do_fast_syscall_32+0x6a/0xc0 [ 980.148853][T18985] do_SYSENTER_32+0x73/0x90 [ 980.153358][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 980.159658][T18985] [ 980.161967][T18985] Uninit was stored to memory at: [ 980.166981][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 980.172713][T18985] __msan_chain_origin+0x57/0xa0 [ 980.177644][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 980.182742][T18985] get_compat_msghdr+0x108/0x2b0 [ 980.187664][T18985] do_recvmmsg+0xdc7/0x22e0 [ 980.192160][T18985] __sys_recvmmsg+0x340/0x5f0 [ 980.196830][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 980.202889][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 980.209038][T18985] __do_fast_syscall_32+0x129/0x180 [ 980.214227][T18985] do_fast_syscall_32+0x6a/0xc0 [ 980.219071][T18985] do_SYSENTER_32+0x73/0x90 [ 980.223568][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 980.229868][T18985] [ 980.232185][T18985] Uninit was stored to memory at: [ 980.237200][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 980.242906][T18985] __msan_chain_origin+0x57/0xa0 [ 980.247826][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 980.252920][T18985] get_compat_msghdr+0x108/0x2b0 [ 980.257842][T18985] do_recvmmsg+0xdc7/0x22e0 [ 980.262330][T18985] __sys_recvmmsg+0x340/0x5f0 [ 980.266994][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 980.273045][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 980.279181][T18985] __do_fast_syscall_32+0x129/0x180 [ 980.284363][T18985] do_fast_syscall_32+0x6a/0xc0 [ 980.289203][T18985] do_SYSENTER_32+0x73/0x90 [ 980.293696][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 980.300006][T18985] [ 980.302314][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 980.308972][T18985] do_recvmmsg+0xc2/0x22e0 [ 980.313373][T18985] do_recvmmsg+0xc2/0x22e0 [ 980.570523][T18982] not chained 680000 origins [ 980.575173][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 980.583840][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.593891][T18982] Call Trace: [ 980.597186][T18982] dump_stack+0x21c/0x280 [ 980.601521][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 980.607246][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 980.613310][T18982] ? kmsan_get_metadata+0x116/0x180 [ 980.618509][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 980.624355][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 980.630427][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 980.635800][T18982] ? kmsan_get_metadata+0x116/0x180 [ 980.640999][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 980.646633][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 980.652703][T18982] ? _copy_from_user+0x201/0x310 [ 980.657639][T18982] ? kmsan_get_metadata+0x116/0x180 [ 980.662840][T18982] __msan_chain_origin+0x57/0xa0 [ 980.667782][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 980.672898][T18982] get_compat_msghdr+0x108/0x2b0 [ 980.677839][T18982] do_recvmmsg+0xdc7/0x22e0 [ 980.682343][T18982] ? kmsan_get_metadata+0x116/0x180 [ 980.687545][T18982] ? kmsan_get_metadata+0x116/0x180 [ 980.692746][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 980.698381][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 980.703671][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 980.708441][T18982] __sys_recvmmsg+0x340/0x5f0 [ 980.713154][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 980.718956][T18982] ? kmsan_get_metadata+0x116/0x180 [ 980.724158][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 980.730226][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 980.736383][T18982] __do_fast_syscall_32+0x129/0x180 [ 980.741589][T18982] do_fast_syscall_32+0x6a/0xc0 [ 980.746447][T18982] do_SYSENTER_32+0x73/0x90 [ 980.750952][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 980.757272][T18982] RIP: 0023:0xf7fe5549 [ 980.761342][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 980.780944][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 980.789355][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 980.797324][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 980.805290][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 980.813257][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 980.821223][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 980.829188][T18982] Uninit was stored to memory at: [ 980.834221][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 980.839940][T18982] __msan_chain_origin+0x57/0xa0 [ 980.844875][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 980.849983][T18982] get_compat_msghdr+0x108/0x2b0 [ 980.854920][T18982] do_recvmmsg+0xdc7/0x22e0 [ 980.859427][T18982] __sys_recvmmsg+0x340/0x5f0 [ 980.864102][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 980.870166][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 980.876321][T18982] __do_fast_syscall_32+0x129/0x180 [ 980.881518][T18982] do_fast_syscall_32+0x6a/0xc0 [ 980.886365][T18982] do_SYSENTER_32+0x73/0x90 [ 980.890876][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 980.897186][T18982] [ 980.899503][T18982] Uninit was stored to memory at: [ 980.904538][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 980.910266][T18982] __msan_chain_origin+0x57/0xa0 [ 980.915209][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 980.920320][T18982] get_compat_msghdr+0x108/0x2b0 [ 980.925257][T18982] do_recvmmsg+0xdc7/0x22e0 [ 980.929775][T18982] __sys_recvmmsg+0x340/0x5f0 [ 980.934458][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 980.940523][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 980.946763][T18982] __do_fast_syscall_32+0x129/0x180 [ 980.951963][T18982] do_fast_syscall_32+0x6a/0xc0 [ 980.956813][T18982] do_SYSENTER_32+0x73/0x90 [ 980.961322][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 980.967744][T18982] [ 980.970065][T18982] Uninit was stored to memory at: [ 980.975100][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 980.980820][T18982] __msan_chain_origin+0x57/0xa0 [ 980.985757][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 980.990865][T18982] get_compat_msghdr+0x108/0x2b0 [ 980.995802][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.000320][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.004998][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.011069][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.017223][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.022420][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.027354][T18982] do_SYSENTER_32+0x73/0x90 [ 981.031851][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.038161][T18982] [ 981.040476][T18982] Uninit was stored to memory at: [ 981.045503][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 981.051226][T18982] __msan_chain_origin+0x57/0xa0 [ 981.056161][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.061271][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.066206][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.070713][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.075473][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.081537][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.087693][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.092885][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.097744][T18982] do_SYSENTER_32+0x73/0x90 [ 981.102246][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.108553][T18982] [ 981.110866][T18982] Uninit was stored to memory at: [ 981.115891][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 981.121604][T18982] __msan_chain_origin+0x57/0xa0 [ 981.126533][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.131637][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.136569][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.141065][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.145736][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.151796][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.157945][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.163146][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.167991][T18982] do_SYSENTER_32+0x73/0x90 [ 981.172488][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.178793][T18982] [ 981.181109][T18982] Uninit was stored to memory at: [ 981.186134][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 981.191848][T18982] __msan_chain_origin+0x57/0xa0 [ 981.196777][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.201884][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.206817][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.211313][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.216072][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.222132][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.228281][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.233467][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.238318][T18982] do_SYSENTER_32+0x73/0x90 [ 981.242822][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.249128][T18982] [ 981.251444][T18982] Uninit was stored to memory at: [ 981.256466][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 981.262175][T18982] __msan_chain_origin+0x57/0xa0 [ 981.267098][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.272196][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.277121][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.281613][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.286278][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.292330][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.298472][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.303656][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.308492][T18982] do_SYSENTER_32+0x73/0x90 [ 981.312980][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.319279][T18982] [ 981.321587][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 981.328247][T18982] do_recvmmsg+0xc2/0x22e0 [ 981.332652][T18982] do_recvmmsg+0xc2/0x22e0 [ 981.392673][T18982] not chained 690000 origins [ 981.397292][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 981.405954][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.416000][T18982] Call Trace: [ 981.419296][T18982] dump_stack+0x21c/0x280 [ 981.423636][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 981.429357][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 981.435419][T18982] ? kmsan_get_metadata+0x116/0x180 [ 981.440629][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 981.446436][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 981.452500][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 981.457866][T18982] ? kmsan_get_metadata+0x116/0x180 [ 981.463060][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 981.468684][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 981.474738][T18982] ? _copy_from_user+0x201/0x310 [ 981.479661][T18982] ? kmsan_get_metadata+0x116/0x180 [ 981.484852][T18982] __msan_chain_origin+0x57/0xa0 [ 981.489873][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.494979][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.499910][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.504401][T18982] ? kmsan_get_metadata+0x116/0x180 [ 981.509603][T18982] ? kmsan_get_metadata+0x116/0x180 [ 981.514790][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 981.520409][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 981.525683][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 981.530456][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.535119][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 981.540908][T18982] ? kmsan_get_metadata+0x116/0x180 [ 981.546093][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.552158][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.558299][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.563486][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.568322][T18982] do_SYSENTER_32+0x73/0x90 [ 981.572816][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.579123][T18982] RIP: 0023:0xf7fe5549 [ 981.583178][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 981.602767][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 981.611163][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 981.619118][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 981.627073][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 981.635029][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 981.642986][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 981.650943][T18982] Uninit was stored to memory at: [ 981.655958][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 981.661664][T18982] __msan_chain_origin+0x57/0xa0 [ 981.666586][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.671679][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.676604][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.681091][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.685755][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.691810][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.697957][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.703140][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.707977][T18982] do_SYSENTER_32+0x73/0x90 [ 981.712490][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.718789][T18982] [ 981.721093][T18982] Uninit was stored to memory at: [ 981.726106][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 981.731813][T18982] __msan_chain_origin+0x57/0xa0 [ 981.736737][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.741832][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.746758][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.751247][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.755910][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.761961][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.768100][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.773282][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.778122][T18982] do_SYSENTER_32+0x73/0x90 [ 981.782613][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.788911][T18982] [ 981.791219][T18982] Uninit was stored to memory at: [ 981.796234][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 981.801940][T18982] __msan_chain_origin+0x57/0xa0 [ 981.806897][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.811993][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.816917][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.821408][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.826071][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.832124][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.838264][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.843446][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.848293][T18982] do_SYSENTER_32+0x73/0x90 [ 981.852797][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.859098][T18982] [ 981.861406][T18982] Uninit was stored to memory at: [ 981.866425][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 981.872130][T18982] __msan_chain_origin+0x57/0xa0 [ 981.877056][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.882151][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.887076][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.891565][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.896226][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.902277][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.908414][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.913599][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.918436][T18982] do_SYSENTER_32+0x73/0x90 [ 981.922927][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.929228][T18982] [ 981.931533][T18982] Uninit was stored to memory at: [ 981.936544][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 981.942266][T18982] __msan_chain_origin+0x57/0xa0 [ 981.947193][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 981.952379][T18982] get_compat_msghdr+0x108/0x2b0 [ 981.957306][T18982] do_recvmmsg+0xdc7/0x22e0 [ 981.961800][T18982] __sys_recvmmsg+0x340/0x5f0 [ 981.966474][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 981.972534][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 981.978687][T18982] __do_fast_syscall_32+0x129/0x180 [ 981.983876][T18982] do_fast_syscall_32+0x6a/0xc0 [ 981.988718][T18982] do_SYSENTER_32+0x73/0x90 [ 981.993215][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 981.999520][T18982] [ 982.001830][T18982] Uninit was stored to memory at: [ 982.006850][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 982.012676][T18982] __msan_chain_origin+0x57/0xa0 [ 982.017605][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 982.022703][T18982] get_compat_msghdr+0x108/0x2b0 [ 982.027628][T18982] do_recvmmsg+0xdc7/0x22e0 [ 982.032119][T18982] __sys_recvmmsg+0x340/0x5f0 [ 982.036793][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 982.042849][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 982.048993][T18982] __do_fast_syscall_32+0x129/0x180 [ 982.054182][T18982] do_fast_syscall_32+0x6a/0xc0 [ 982.059024][T18982] do_SYSENTER_32+0x73/0x90 [ 982.063960][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 982.070265][T18982] [ 982.072577][T18982] Uninit was stored to memory at: [ 982.077598][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 982.083316][T18982] __msan_chain_origin+0x57/0xa0 [ 982.088240][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 982.093343][T18982] get_compat_msghdr+0x108/0x2b0 [ 982.098278][T18982] do_recvmmsg+0xdc7/0x22e0 [ 982.102788][T18982] __sys_recvmmsg+0x340/0x5f0 [ 982.107459][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 982.113514][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 982.119655][T18982] __do_fast_syscall_32+0x129/0x180 [ 982.124841][T18982] do_fast_syscall_32+0x6a/0xc0 [ 982.129681][T18982] do_SYSENTER_32+0x73/0x90 [ 982.134175][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 982.140496][T18982] [ 982.142806][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 982.149468][T18982] do_recvmmsg+0xc2/0x22e0 [ 982.153870][T18982] do_recvmmsg+0xc2/0x22e0 [ 982.479821][T18985] not chained 700000 origins [ 982.484445][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 982.493106][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.503154][T18985] Call Trace: [ 982.506446][T18985] dump_stack+0x21c/0x280 [ 982.510783][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 982.516509][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 982.522574][T18985] ? kmsan_get_metadata+0x116/0x180 [ 982.527788][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 982.533598][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 982.539660][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 982.545029][T18985] ? kmsan_get_metadata+0x116/0x180 [ 982.550229][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 982.555863][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 982.561933][T18985] ? _copy_from_user+0x201/0x310 [ 982.566864][T18985] ? kmsan_get_metadata+0x116/0x180 [ 982.572061][T18985] __msan_chain_origin+0x57/0xa0 [ 982.576997][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 982.582112][T18985] get_compat_msghdr+0x108/0x2b0 [ 982.587052][T18985] do_recvmmsg+0xdc7/0x22e0 [ 982.591580][T18985] ? kmsan_get_metadata+0x116/0x180 [ 982.596778][T18985] ? kmsan_get_metadata+0x116/0x180 [ 982.601980][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 982.607611][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 982.612896][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 982.617662][T18985] __sys_recvmmsg+0x340/0x5f0 [ 982.622341][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 982.628270][T18985] ? kmsan_get_metadata+0x116/0x180 [ 982.633475][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 982.639553][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 982.645713][T18985] __do_fast_syscall_32+0x129/0x180 [ 982.650908][T18985] do_fast_syscall_32+0x6a/0xc0 [ 982.655758][T18985] do_SYSENTER_32+0x73/0x90 [ 982.660263][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 982.666582][T18985] RIP: 0023:0xf7fe5549 [ 982.670659][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 982.690272][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 982.698692][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 982.706661][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 982.714630][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 982.722601][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 982.730568][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 982.738537][T18985] Uninit was stored to memory at: [ 982.743566][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 982.749283][T18985] __msan_chain_origin+0x57/0xa0 [ 982.754225][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 982.759418][T18985] get_compat_msghdr+0x108/0x2b0 [ 982.764353][T18985] do_recvmmsg+0xdc7/0x22e0 [ 982.768878][T18985] __sys_recvmmsg+0x340/0x5f0 [ 982.773740][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 982.779807][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 982.785953][T18985] __do_fast_syscall_32+0x129/0x180 [ 982.791133][T18985] do_fast_syscall_32+0x6a/0xc0 [ 982.795971][T18985] do_SYSENTER_32+0x73/0x90 [ 982.800463][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 982.806762][T18985] [ 982.809070][T18985] Uninit was stored to memory at: [ 982.814083][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 982.819790][T18985] __msan_chain_origin+0x57/0xa0 [ 982.824716][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 982.829810][T18985] get_compat_msghdr+0x108/0x2b0 [ 982.834732][T18985] do_recvmmsg+0xdc7/0x22e0 [ 982.839220][T18985] __sys_recvmmsg+0x340/0x5f0 [ 982.843884][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 982.849935][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 982.856074][T18985] __do_fast_syscall_32+0x129/0x180 [ 982.861256][T18985] do_fast_syscall_32+0x6a/0xc0 [ 982.866090][T18985] do_SYSENTER_32+0x73/0x90 [ 982.870589][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 982.876888][T18985] [ 982.879196][T18985] Uninit was stored to memory at: [ 982.884231][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 982.889942][T18985] __msan_chain_origin+0x57/0xa0 [ 982.894874][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 982.899969][T18985] get_compat_msghdr+0x108/0x2b0 [ 982.904893][T18985] do_recvmmsg+0xdc7/0x22e0 [ 982.909379][T18985] __sys_recvmmsg+0x340/0x5f0 [ 982.914040][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 982.920096][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 982.926240][T18985] __do_fast_syscall_32+0x129/0x180 [ 982.931425][T18985] do_fast_syscall_32+0x6a/0xc0 [ 982.936259][T18985] do_SYSENTER_32+0x73/0x90 [ 982.940749][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 982.947051][T18985] [ 982.949357][T18985] Uninit was stored to memory at: [ 982.954371][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 982.960074][T18985] __msan_chain_origin+0x57/0xa0 [ 982.964996][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 982.970090][T18985] get_compat_msghdr+0x108/0x2b0 [ 982.975011][T18985] do_recvmmsg+0xdc7/0x22e0 [ 982.979501][T18985] __sys_recvmmsg+0x340/0x5f0 [ 982.984161][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 982.990212][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 982.996350][T18985] __do_fast_syscall_32+0x129/0x180 [ 983.001649][T18985] do_fast_syscall_32+0x6a/0xc0 [ 983.006500][T18985] do_SYSENTER_32+0x73/0x90 [ 983.010999][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.017302][T18985] [ 983.019617][T18985] Uninit was stored to memory at: [ 983.024635][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 983.030348][T18985] __msan_chain_origin+0x57/0xa0 [ 983.035274][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 983.040370][T18985] get_compat_msghdr+0x108/0x2b0 [ 983.045304][T18985] do_recvmmsg+0xdc7/0x22e0 [ 983.049798][T18985] __sys_recvmmsg+0x340/0x5f0 [ 983.054462][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.060513][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.066656][T18985] __do_fast_syscall_32+0x129/0x180 [ 983.071839][T18985] do_fast_syscall_32+0x6a/0xc0 [ 983.076679][T18985] do_SYSENTER_32+0x73/0x90 [ 983.081168][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.087468][T18985] [ 983.089773][T18985] Uninit was stored to memory at: [ 983.094784][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 983.100505][T18985] __msan_chain_origin+0x57/0xa0 [ 983.105432][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 983.110530][T18985] get_compat_msghdr+0x108/0x2b0 [ 983.115468][T18985] do_recvmmsg+0xdc7/0x22e0 [ 983.119956][T18985] __sys_recvmmsg+0x340/0x5f0 [ 983.124620][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.130681][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.136826][T18985] __do_fast_syscall_32+0x129/0x180 [ 983.142023][T18985] do_fast_syscall_32+0x6a/0xc0 [ 983.146858][T18985] do_SYSENTER_32+0x73/0x90 [ 983.151391][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.157693][T18985] [ 983.160003][T18985] Uninit was stored to memory at: [ 983.165022][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 983.170745][T18985] __msan_chain_origin+0x57/0xa0 [ 983.175675][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 983.180775][T18985] get_compat_msghdr+0x108/0x2b0 [ 983.185702][T18985] do_recvmmsg+0xdc7/0x22e0 [ 983.190191][T18985] __sys_recvmmsg+0x340/0x5f0 [ 983.194857][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.200913][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.207055][T18985] __do_fast_syscall_32+0x129/0x180 [ 983.212239][T18985] do_fast_syscall_32+0x6a/0xc0 [ 983.217077][T18985] do_SYSENTER_32+0x73/0x90 [ 983.221574][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.227877][T18985] [ 983.230190][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 983.236852][T18985] do_recvmmsg+0xc2/0x22e0 [ 983.241266][T18985] do_recvmmsg+0xc2/0x22e0 [ 983.277927][T18982] not chained 710000 origins [ 983.282581][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 983.291243][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.301292][T18982] Call Trace: [ 983.304591][T18982] dump_stack+0x21c/0x280 [ 983.308933][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 983.314662][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 983.320728][T18982] ? kmsan_get_metadata+0x116/0x180 [ 983.326018][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 983.331832][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 983.337898][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 983.343271][T18982] ? kmsan_get_metadata+0x116/0x180 [ 983.348496][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 983.354136][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 983.360210][T18982] ? _copy_from_user+0x201/0x310 [ 983.365150][T18982] ? kmsan_get_metadata+0x116/0x180 [ 983.370391][T18982] __msan_chain_origin+0x57/0xa0 [ 983.375328][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 983.380554][T18982] get_compat_msghdr+0x108/0x2b0 [ 983.385496][T18982] do_recvmmsg+0xdc7/0x22e0 [ 983.390002][T18982] ? kmsan_get_metadata+0x116/0x180 [ 983.395202][T18982] ? kmsan_get_metadata+0x116/0x180 [ 983.400402][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 983.406044][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 983.411373][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 983.416142][T18982] __sys_recvmmsg+0x340/0x5f0 [ 983.420818][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 983.426626][T18982] ? kmsan_get_metadata+0x116/0x180 [ 983.431859][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.437928][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.444087][T18982] __do_fast_syscall_32+0x129/0x180 [ 983.449287][T18982] do_fast_syscall_32+0x6a/0xc0 [ 983.454137][T18982] do_SYSENTER_32+0x73/0x90 [ 983.458643][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.464962][T18982] RIP: 0023:0xf7fe5549 [ 983.469031][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 983.488653][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 983.497062][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 983.505028][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.512997][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.520962][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 983.528928][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.536896][T18982] Uninit was stored to memory at: [ 983.541927][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 983.547649][T18982] __msan_chain_origin+0x57/0xa0 [ 983.552583][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 983.557693][T18982] get_compat_msghdr+0x108/0x2b0 [ 983.562630][T18982] do_recvmmsg+0xdc7/0x22e0 [ 983.567134][T18982] __sys_recvmmsg+0x340/0x5f0 [ 983.571807][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.577868][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.584022][T18982] __do_fast_syscall_32+0x129/0x180 [ 983.589220][T18982] do_fast_syscall_32+0x6a/0xc0 [ 983.594068][T18982] do_SYSENTER_32+0x73/0x90 [ 983.598569][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.604880][T18982] [ 983.607196][T18982] Uninit was stored to memory at: [ 983.612226][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 983.617946][T18982] __msan_chain_origin+0x57/0xa0 [ 983.622882][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 983.627991][T18982] get_compat_msghdr+0x108/0x2b0 [ 983.632935][T18982] do_recvmmsg+0xdc7/0x22e0 [ 983.637441][T18982] __sys_recvmmsg+0x340/0x5f0 [ 983.642119][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.648182][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.654382][T18982] __do_fast_syscall_32+0x129/0x180 [ 983.659577][T18982] do_fast_syscall_32+0x6a/0xc0 [ 983.664433][T18982] do_SYSENTER_32+0x73/0x90 [ 983.668936][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.675244][T18982] [ 983.677561][T18982] Uninit was stored to memory at: [ 983.682587][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 983.688309][T18982] __msan_chain_origin+0x57/0xa0 [ 983.693281][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 983.698393][T18982] get_compat_msghdr+0x108/0x2b0 [ 983.703333][T18982] do_recvmmsg+0xdc7/0x22e0 [ 983.707840][T18982] __sys_recvmmsg+0x340/0x5f0 [ 983.712552][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.718614][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.724768][T18982] __do_fast_syscall_32+0x129/0x180 [ 983.729960][T18982] do_fast_syscall_32+0x6a/0xc0 [ 983.734797][T18982] do_SYSENTER_32+0x73/0x90 [ 983.739293][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.745597][T18982] [ 983.747907][T18982] Uninit was stored to memory at: [ 983.752923][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 983.758627][T18982] __msan_chain_origin+0x57/0xa0 [ 983.763552][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 983.768647][T18982] get_compat_msghdr+0x108/0x2b0 [ 983.773570][T18982] do_recvmmsg+0xdc7/0x22e0 [ 983.778494][T18982] __sys_recvmmsg+0x340/0x5f0 [ 983.783156][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.789207][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.795346][T18982] __do_fast_syscall_32+0x129/0x180 [ 983.800535][T18982] do_fast_syscall_32+0x6a/0xc0 [ 983.805374][T18982] do_SYSENTER_32+0x73/0x90 [ 983.809869][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.816171][T18982] [ 983.818480][T18982] Uninit was stored to memory at: [ 983.823495][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 983.829722][T18982] __msan_chain_origin+0x57/0xa0 [ 983.834649][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 983.839747][T18982] get_compat_msghdr+0x108/0x2b0 [ 983.844677][T18982] do_recvmmsg+0xdc7/0x22e0 [ 983.849167][T18982] __sys_recvmmsg+0x340/0x5f0 [ 983.853833][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.859886][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.866025][T18982] __do_fast_syscall_32+0x129/0x180 [ 983.871208][T18982] do_fast_syscall_32+0x6a/0xc0 [ 983.876045][T18982] do_SYSENTER_32+0x73/0x90 [ 983.880535][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.886836][T18982] [ 983.889145][T18982] Uninit was stored to memory at: [ 983.894160][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 983.899865][T18982] __msan_chain_origin+0x57/0xa0 [ 983.904789][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 983.909884][T18982] get_compat_msghdr+0x108/0x2b0 [ 983.914851][T18982] do_recvmmsg+0xdc7/0x22e0 [ 983.919342][T18982] __sys_recvmmsg+0x340/0x5f0 [ 983.924006][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 983.930060][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 983.936211][T18982] __do_fast_syscall_32+0x129/0x180 [ 983.941392][T18982] do_fast_syscall_32+0x6a/0xc0 [ 983.946240][T18982] do_SYSENTER_32+0x73/0x90 [ 983.950753][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 983.957055][T18982] [ 983.959361][T18982] Uninit was stored to memory at: [ 983.964376][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 983.970080][T18982] __msan_chain_origin+0x57/0xa0 [ 983.975006][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 983.980103][T18982] get_compat_msghdr+0x108/0x2b0 [ 983.985039][T18982] do_recvmmsg+0xdc7/0x22e0 [ 983.989553][T18982] __sys_recvmmsg+0x340/0x5f0 [ 983.994218][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.000272][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.006413][T18982] __do_fast_syscall_32+0x129/0x180 [ 984.011612][T18982] do_fast_syscall_32+0x6a/0xc0 [ 984.016450][T18982] do_SYSENTER_32+0x73/0x90 [ 984.020939][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.027237][T18982] [ 984.029547][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 984.036213][T18982] do_recvmmsg+0xc2/0x22e0 [ 984.040614][T18982] do_recvmmsg+0xc2/0x22e0 [ 984.291294][T18982] not chained 720000 origins [ 984.295907][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 984.304559][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.314596][T18982] Call Trace: [ 984.317878][T18982] dump_stack+0x21c/0x280 [ 984.322204][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 984.327914][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 984.333965][T18982] ? kmsan_get_metadata+0x116/0x180 [ 984.339146][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 984.344943][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 984.350995][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 984.356357][T18982] ? kmsan_get_metadata+0x116/0x180 [ 984.361544][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 984.367169][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 984.373227][T18982] ? _copy_from_user+0x201/0x310 [ 984.378150][T18982] ? kmsan_get_metadata+0x116/0x180 [ 984.383337][T18982] __msan_chain_origin+0x57/0xa0 [ 984.388266][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 984.393368][T18982] get_compat_msghdr+0x108/0x2b0 [ 984.398296][T18982] do_recvmmsg+0xdc7/0x22e0 [ 984.402790][T18982] ? kmsan_get_metadata+0x116/0x180 [ 984.407977][T18982] ? kmsan_get_metadata+0x116/0x180 [ 984.413166][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 984.418792][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 984.424063][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 984.428817][T18982] __sys_recvmmsg+0x340/0x5f0 [ 984.433487][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 984.439275][T18982] ? kmsan_get_metadata+0x116/0x180 [ 984.444463][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.450520][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.456660][T18982] __do_fast_syscall_32+0x129/0x180 [ 984.461852][T18982] do_fast_syscall_32+0x6a/0xc0 [ 984.466699][T18982] do_SYSENTER_32+0x73/0x90 [ 984.471190][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.477500][T18982] RIP: 0023:0xf7fe5549 [ 984.481556][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 984.501145][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 984.509557][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 984.517515][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 984.525470][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 984.533437][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 984.541401][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 984.549360][T18982] Uninit was stored to memory at: [ 984.554383][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 984.560095][T18982] __msan_chain_origin+0x57/0xa0 [ 984.565032][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 984.570128][T18982] get_compat_msghdr+0x108/0x2b0 [ 984.575063][T18982] do_recvmmsg+0xdc7/0x22e0 [ 984.579553][T18982] __sys_recvmmsg+0x340/0x5f0 [ 984.584236][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.590288][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.596430][T18982] __do_fast_syscall_32+0x129/0x180 [ 984.601614][T18982] do_fast_syscall_32+0x6a/0xc0 [ 984.606451][T18982] do_SYSENTER_32+0x73/0x90 [ 984.610949][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.617253][T18982] [ 984.619566][T18982] Uninit was stored to memory at: [ 984.624587][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 984.630299][T18982] __msan_chain_origin+0x57/0xa0 [ 984.635222][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 984.640316][T18982] get_compat_msghdr+0x108/0x2b0 [ 984.645240][T18982] do_recvmmsg+0xdc7/0x22e0 [ 984.649727][T18982] __sys_recvmmsg+0x340/0x5f0 [ 984.654393][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.660456][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.666598][T18982] __do_fast_syscall_32+0x129/0x180 [ 984.671794][T18982] do_fast_syscall_32+0x6a/0xc0 [ 984.676630][T18982] do_SYSENTER_32+0x73/0x90 [ 984.681119][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.687419][T18982] [ 984.689737][T18982] Uninit was stored to memory at: [ 984.694760][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 984.700464][T18982] __msan_chain_origin+0x57/0xa0 [ 984.705399][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 984.710497][T18982] get_compat_msghdr+0x108/0x2b0 [ 984.715420][T18982] do_recvmmsg+0xdc7/0x22e0 [ 984.719919][T18982] __sys_recvmmsg+0x340/0x5f0 [ 984.724580][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.730647][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.736785][T18982] __do_fast_syscall_32+0x129/0x180 [ 984.741967][T18982] do_fast_syscall_32+0x6a/0xc0 [ 984.746803][T18982] do_SYSENTER_32+0x73/0x90 [ 984.751293][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.757592][T18982] [ 984.759898][T18982] Uninit was stored to memory at: [ 984.764908][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 984.770613][T18982] __msan_chain_origin+0x57/0xa0 [ 984.775536][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 984.780630][T18982] get_compat_msghdr+0x108/0x2b0 [ 984.785552][T18982] do_recvmmsg+0xdc7/0x22e0 [ 984.790041][T18982] __sys_recvmmsg+0x340/0x5f0 [ 984.794706][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.800758][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.806898][T18982] __do_fast_syscall_32+0x129/0x180 [ 984.812080][T18982] do_fast_syscall_32+0x6a/0xc0 [ 984.816915][T18982] do_SYSENTER_32+0x73/0x90 [ 984.821404][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.827703][T18982] [ 984.830009][T18982] Uninit was stored to memory at: [ 984.835020][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 984.840831][T18982] __msan_chain_origin+0x57/0xa0 [ 984.845769][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 984.850865][T18982] get_compat_msghdr+0x108/0x2b0 [ 984.855789][T18982] do_recvmmsg+0xdc7/0x22e0 [ 984.860284][T18982] __sys_recvmmsg+0x340/0x5f0 [ 984.864956][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.871009][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.877161][T18982] __do_fast_syscall_32+0x129/0x180 [ 984.882345][T18982] do_fast_syscall_32+0x6a/0xc0 [ 984.887199][T18982] do_SYSENTER_32+0x73/0x90 [ 984.891692][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.897991][T18982] [ 984.900318][T18982] Uninit was stored to memory at: [ 984.906298][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 984.912004][T18982] __msan_chain_origin+0x57/0xa0 [ 984.916924][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 984.922017][T18982] get_compat_msghdr+0x108/0x2b0 [ 984.926939][T18982] do_recvmmsg+0xdc7/0x22e0 [ 984.931425][T18982] __sys_recvmmsg+0x340/0x5f0 [ 984.936090][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 984.943195][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 984.949332][T18982] __do_fast_syscall_32+0x129/0x180 [ 984.954514][T18982] do_fast_syscall_32+0x6a/0xc0 [ 984.959349][T18982] do_SYSENTER_32+0x73/0x90 [ 984.963837][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 984.970134][T18982] [ 984.972443][T18982] Uninit was stored to memory at: [ 984.977454][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 984.983156][T18982] __msan_chain_origin+0x57/0xa0 [ 984.988076][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 984.993176][T18982] get_compat_msghdr+0x108/0x2b0 [ 984.998113][T18982] do_recvmmsg+0xdc7/0x22e0 [ 985.002603][T18982] __sys_recvmmsg+0x340/0x5f0 [ 985.007265][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.013322][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.019475][T18982] __do_fast_syscall_32+0x129/0x180 [ 985.024657][T18982] do_fast_syscall_32+0x6a/0xc0 [ 985.029495][T18982] do_SYSENTER_32+0x73/0x90 [ 985.033983][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.040280][T18982] [ 985.042589][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 985.049251][T18982] do_recvmmsg+0xc2/0x22e0 [ 985.053652][T18982] do_recvmmsg+0xc2/0x22e0 [ 985.402937][T18982] not chained 730000 origins [ 985.407554][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 985.420302][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.430348][T18982] Call Trace: [ 985.433640][T18982] dump_stack+0x21c/0x280 [ 985.437975][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 985.443697][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 985.449758][T18982] ? kmsan_get_metadata+0x116/0x180 [ 985.454955][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 985.460766][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 985.466834][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 985.472205][T18982] ? kmsan_get_metadata+0x116/0x180 [ 985.477401][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 985.483039][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 985.489107][T18982] ? _copy_from_user+0x201/0x310 [ 985.494040][T18982] ? kmsan_get_metadata+0x116/0x180 [ 985.499238][T18982] __msan_chain_origin+0x57/0xa0 [ 985.504177][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 985.509293][T18982] get_compat_msghdr+0x108/0x2b0 [ 985.514317][T18982] do_recvmmsg+0xdc7/0x22e0 [ 985.518822][T18982] ? kmsan_get_metadata+0x116/0x180 [ 985.524017][T18982] ? kmsan_get_metadata+0x116/0x180 [ 985.529214][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 985.534845][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 985.540126][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 985.544886][T18982] __sys_recvmmsg+0x340/0x5f0 [ 985.549557][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 985.555355][T18982] ? kmsan_get_metadata+0x116/0x180 [ 985.560571][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.566637][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.572784][T18982] __do_fast_syscall_32+0x129/0x180 [ 985.577977][T18982] do_fast_syscall_32+0x6a/0xc0 [ 985.582821][T18982] do_SYSENTER_32+0x73/0x90 [ 985.587327][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.593641][T18982] RIP: 0023:0xf7fe5549 [ 985.597702][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 985.617297][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 985.625732][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 985.633698][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 985.641748][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 985.649712][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 985.658130][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 985.666098][T18982] Uninit was stored to memory at: [ 985.671128][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 985.676840][T18982] __msan_chain_origin+0x57/0xa0 [ 985.681769][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 985.686873][T18982] get_compat_msghdr+0x108/0x2b0 [ 985.691801][T18982] do_recvmmsg+0xdc7/0x22e0 [ 985.696293][T18982] __sys_recvmmsg+0x340/0x5f0 [ 985.700957][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.707019][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.713263][T18982] __do_fast_syscall_32+0x129/0x180 [ 985.718449][T18982] do_fast_syscall_32+0x6a/0xc0 [ 985.723285][T18982] do_SYSENTER_32+0x73/0x90 [ 985.727776][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.734076][T18982] [ 985.736383][T18982] Uninit was stored to memory at: [ 985.741394][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 985.747098][T18982] __msan_chain_origin+0x57/0xa0 [ 985.752020][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 985.757128][T18982] get_compat_msghdr+0x108/0x2b0 [ 985.762052][T18982] do_recvmmsg+0xdc7/0x22e0 [ 985.766543][T18982] __sys_recvmmsg+0x340/0x5f0 [ 985.771205][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.777256][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.783395][T18982] __do_fast_syscall_32+0x129/0x180 [ 985.788577][T18982] do_fast_syscall_32+0x6a/0xc0 [ 985.793411][T18982] do_SYSENTER_32+0x73/0x90 [ 985.797992][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.804290][T18982] [ 985.806595][T18982] Uninit was stored to memory at: [ 985.811606][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 985.817311][T18982] __msan_chain_origin+0x57/0xa0 [ 985.822232][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 985.827327][T18982] get_compat_msghdr+0x108/0x2b0 [ 985.832262][T18982] do_recvmmsg+0xdc7/0x22e0 [ 985.836750][T18982] __sys_recvmmsg+0x340/0x5f0 [ 985.841411][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.847474][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.853614][T18982] __do_fast_syscall_32+0x129/0x180 [ 985.858796][T18982] do_fast_syscall_32+0x6a/0xc0 [ 985.863630][T18982] do_SYSENTER_32+0x73/0x90 [ 985.868119][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.874418][T18982] [ 985.876725][T18982] Uninit was stored to memory at: [ 985.881738][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 985.887443][T18982] __msan_chain_origin+0x57/0xa0 [ 985.892364][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 985.897461][T18982] get_compat_msghdr+0x108/0x2b0 [ 985.902384][T18982] do_recvmmsg+0xdc7/0x22e0 [ 985.906872][T18982] __sys_recvmmsg+0x340/0x5f0 [ 985.911534][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.917587][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.923726][T18982] __do_fast_syscall_32+0x129/0x180 [ 985.928910][T18982] do_fast_syscall_32+0x6a/0xc0 [ 985.933745][T18982] do_SYSENTER_32+0x73/0x90 [ 985.938234][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 985.944534][T18982] [ 985.946840][T18982] Uninit was stored to memory at: [ 985.951854][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 985.957561][T18982] __msan_chain_origin+0x57/0xa0 [ 985.962483][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 985.967576][T18982] get_compat_msghdr+0x108/0x2b0 [ 985.972500][T18982] do_recvmmsg+0xdc7/0x22e0 [ 985.976991][T18982] __sys_recvmmsg+0x340/0x5f0 [ 985.981664][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 985.987717][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 985.993856][T18982] __do_fast_syscall_32+0x129/0x180 [ 985.999039][T18982] do_fast_syscall_32+0x6a/0xc0 [ 986.003874][T18982] do_SYSENTER_32+0x73/0x90 [ 986.008362][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 986.014660][T18982] [ 986.016968][T18982] Uninit was stored to memory at: [ 986.021980][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 986.027685][T18982] __msan_chain_origin+0x57/0xa0 [ 986.032610][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 986.037709][T18982] get_compat_msghdr+0x108/0x2b0 [ 986.042632][T18982] do_recvmmsg+0xdc7/0x22e0 [ 986.047120][T18982] __sys_recvmmsg+0x340/0x5f0 [ 986.051781][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 986.057834][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 986.063972][T18982] __do_fast_syscall_32+0x129/0x180 [ 986.069154][T18982] do_fast_syscall_32+0x6a/0xc0 [ 986.073993][T18982] do_SYSENTER_32+0x73/0x90 [ 986.078481][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 986.084781][T18982] [ 986.087086][T18982] Uninit was stored to memory at: [ 986.092099][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 986.097803][T18982] __msan_chain_origin+0x57/0xa0 [ 986.102725][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 986.107817][T18982] get_compat_msghdr+0x108/0x2b0 [ 986.112742][T18982] do_recvmmsg+0xdc7/0x22e0 [ 986.117229][T18982] __sys_recvmmsg+0x340/0x5f0 [ 986.121890][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 986.127944][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 986.134082][T18982] __do_fast_syscall_32+0x129/0x180 [ 986.139262][T18982] do_fast_syscall_32+0x6a/0xc0 [ 986.144096][T18982] do_SYSENTER_32+0x73/0x90 [ 986.148586][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 986.154891][T18982] [ 986.157202][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 986.163861][T18982] do_recvmmsg+0xc2/0x22e0 [ 986.168276][T18982] do_recvmmsg+0xc2/0x22e0 [ 986.449651][T18982] not chained 740000 origins [ 986.454299][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 986.462960][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.473004][T18982] Call Trace: [ 986.476300][T18982] dump_stack+0x21c/0x280 [ 986.480636][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 986.486360][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 986.492429][T18982] ? kmsan_get_metadata+0x116/0x180 [ 986.497623][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 986.503430][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 986.509497][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 986.514867][T18982] ? kmsan_get_metadata+0x116/0x180 [ 986.520072][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 986.525712][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 986.531976][T18982] ? _copy_from_user+0x201/0x310 [ 986.536914][T18982] ? kmsan_get_metadata+0x116/0x180 [ 986.542111][T18982] __msan_chain_origin+0x57/0xa0 [ 986.547048][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 986.552163][T18982] get_compat_msghdr+0x108/0x2b0 [ 986.557110][T18982] do_recvmmsg+0xdc7/0x22e0 [ 986.561617][T18982] ? kmsan_get_metadata+0x116/0x180 [ 986.566823][T18982] ? kmsan_get_metadata+0x116/0x180 [ 986.572024][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 986.577660][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 986.582946][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 986.587712][T18982] __sys_recvmmsg+0x340/0x5f0 [ 986.592388][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 986.598188][T18982] ? kmsan_get_metadata+0x116/0x180 [ 986.603384][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 986.609455][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 986.615610][T18982] __do_fast_syscall_32+0x129/0x180 [ 986.620811][T18982] do_fast_syscall_32+0x6a/0xc0 [ 986.625662][T18982] do_SYSENTER_32+0x73/0x90 [ 986.630174][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 986.636493][T18982] RIP: 0023:0xf7fe5549 [ 986.640584][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 986.660287][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 986.668702][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 986.676671][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 986.684644][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 986.692609][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 986.700575][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 986.708538][T18982] Uninit was stored to memory at: [ 986.713564][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 986.719278][T18982] __msan_chain_origin+0x57/0xa0 [ 986.724213][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 986.729317][T18982] get_compat_msghdr+0x108/0x2b0 [ 986.734250][T18982] do_recvmmsg+0xdc7/0x22e0 [ 986.738745][T18982] __sys_recvmmsg+0x340/0x5f0 [ 986.743417][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 986.749558][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 986.755700][T18982] __do_fast_syscall_32+0x129/0x180 [ 986.760885][T18982] do_fast_syscall_32+0x6a/0xc0 [ 986.765726][T18982] do_SYSENTER_32+0x73/0x90 [ 986.770216][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 986.776517][T18982] [ 986.778825][T18982] Uninit was stored to memory at: [ 986.783839][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 986.789544][T18982] __msan_chain_origin+0x57/0xa0 [ 986.794484][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 986.799579][T18982] get_compat_msghdr+0x108/0x2b0 [ 986.804504][T18982] do_recvmmsg+0xdc7/0x22e0 [ 986.808993][T18982] __sys_recvmmsg+0x340/0x5f0 [ 986.813660][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 986.819717][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 986.825886][T18982] __do_fast_syscall_32+0x129/0x180 [ 986.831069][T18982] do_fast_syscall_32+0x6a/0xc0 [ 986.835903][T18982] do_SYSENTER_32+0x73/0x90 [ 986.840393][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 986.846691][T18982] [ 986.849002][T18982] Uninit was stored to memory at: [ 986.854014][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 986.859724][T18982] __msan_chain_origin+0x57/0xa0 [ 986.864647][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 986.869741][T18982] get_compat_msghdr+0x108/0x2b0 [ 986.874666][T18982] do_recvmmsg+0xdc7/0x22e0 [ 986.879155][T18982] __sys_recvmmsg+0x340/0x5f0 [ 986.883818][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 986.889870][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 986.896012][T18982] __do_fast_syscall_32+0x129/0x180 [ 986.901194][T18982] do_fast_syscall_32+0x6a/0xc0 [ 986.906030][T18982] do_SYSENTER_32+0x73/0x90 [ 986.910518][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 986.916826][T18982] [ 986.919132][T18982] Uninit was stored to memory at: [ 986.924143][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 986.929848][T18982] __msan_chain_origin+0x57/0xa0 [ 986.934772][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 986.939878][T18982] get_compat_msghdr+0x108/0x2b0 [ 986.944803][T18982] do_recvmmsg+0xdc7/0x22e0 [ 986.949291][T18982] __sys_recvmmsg+0x340/0x5f0 [ 986.953953][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 986.960003][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 986.966144][T18982] __do_fast_syscall_32+0x129/0x180 [ 986.971336][T18982] do_fast_syscall_32+0x6a/0xc0 [ 986.976184][T18982] do_SYSENTER_32+0x73/0x90 [ 986.980674][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 986.986980][T18982] [ 986.989291][T18982] Uninit was stored to memory at: [ 986.997795][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 987.003508][T18982] __msan_chain_origin+0x57/0xa0 [ 987.008430][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 987.013527][T18982] get_compat_msghdr+0x108/0x2b0 [ 987.018469][T18982] do_recvmmsg+0xdc7/0x22e0 [ 987.022972][T18982] __sys_recvmmsg+0x340/0x5f0 [ 987.027639][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.033696][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.039838][T18982] __do_fast_syscall_32+0x129/0x180 [ 987.045141][T18982] do_fast_syscall_32+0x6a/0xc0 [ 987.049978][T18982] do_SYSENTER_32+0x73/0x90 [ 987.054474][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.060781][T18982] [ 987.063087][T18982] Uninit was stored to memory at: [ 987.068100][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 987.073894][T18982] __msan_chain_origin+0x57/0xa0 [ 987.078819][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 987.083916][T18982] get_compat_msghdr+0x108/0x2b0 [ 987.088843][T18982] do_recvmmsg+0xdc7/0x22e0 [ 987.093342][T18982] __sys_recvmmsg+0x340/0x5f0 [ 987.098006][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.104067][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.110211][T18982] __do_fast_syscall_32+0x129/0x180 [ 987.115397][T18982] do_fast_syscall_32+0x6a/0xc0 [ 987.120236][T18982] do_SYSENTER_32+0x73/0x90 [ 987.124729][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.131036][T18982] [ 987.133350][T18982] Uninit was stored to memory at: [ 987.138369][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 987.144510][T18982] __msan_chain_origin+0x57/0xa0 [ 987.149433][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 987.154527][T18982] get_compat_msghdr+0x108/0x2b0 [ 987.159965][T18982] do_recvmmsg+0xdc7/0x22e0 [ 987.164554][T18982] __sys_recvmmsg+0x340/0x5f0 [ 987.169227][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.175283][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.181426][T18982] __do_fast_syscall_32+0x129/0x180 [ 987.186612][T18982] do_fast_syscall_32+0x6a/0xc0 [ 987.191450][T18982] do_SYSENTER_32+0x73/0x90 [ 987.195945][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.202248][T18982] [ 987.204561][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 987.211227][T18982] do_recvmmsg+0xc2/0x22e0 [ 987.215632][T18982] do_recvmmsg+0xc2/0x22e0 [ 987.462044][T18985] not chained 750000 origins [ 987.466662][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 987.475322][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.485370][T18985] Call Trace: [ 987.488665][T18985] dump_stack+0x21c/0x280 [ 987.493968][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 987.499691][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 987.505753][T18985] ? kmsan_get_metadata+0x116/0x180 [ 987.510944][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 987.516748][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 987.522809][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 987.528174][T18985] ? kmsan_get_metadata+0x116/0x180 [ 987.533366][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 987.539168][T18985] ? kmsan_get_metadata+0x116/0x180 [ 987.544366][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 987.550000][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 987.556065][T18985] ? _copy_from_user+0x201/0x310 [ 987.561011][T18985] ? kmsan_get_metadata+0x116/0x180 [ 987.566209][T18985] __msan_chain_origin+0x57/0xa0 [ 987.571141][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 987.576249][T18985] get_compat_msghdr+0x108/0x2b0 [ 987.581177][T18985] do_recvmmsg+0xdc7/0x22e0 [ 987.585668][T18985] ? kmsan_get_metadata+0x116/0x180 [ 987.590855][T18985] ? kmsan_get_metadata+0x116/0x180 [ 987.596041][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 987.601662][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 987.606933][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 987.611683][T18985] __sys_recvmmsg+0x340/0x5f0 [ 987.616361][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 987.622156][T18985] ? kmsan_get_metadata+0x116/0x180 [ 987.627341][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.633404][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.639546][T18985] __do_fast_syscall_32+0x129/0x180 [ 987.644734][T18985] do_fast_syscall_32+0x6a/0xc0 [ 987.649570][T18985] do_SYSENTER_32+0x73/0x90 [ 987.654062][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.660372][T18985] RIP: 0023:0xf7fe5549 [ 987.664432][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 987.684021][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 987.692418][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 987.700377][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.708335][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.716290][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 987.724247][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.732224][T18985] Uninit was stored to memory at: [ 987.737341][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 987.743045][T18985] __msan_chain_origin+0x57/0xa0 [ 987.747966][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 987.753061][T18985] get_compat_msghdr+0x108/0x2b0 [ 987.757984][T18985] do_recvmmsg+0xdc7/0x22e0 [ 987.762475][T18985] __sys_recvmmsg+0x340/0x5f0 [ 987.767138][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.773192][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.779348][T18985] __do_fast_syscall_32+0x129/0x180 [ 987.784533][T18985] do_fast_syscall_32+0x6a/0xc0 [ 987.789366][T18985] do_SYSENTER_32+0x73/0x90 [ 987.793900][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.800205][T18985] [ 987.802514][T18985] Uninit was stored to memory at: [ 987.807526][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 987.813231][T18985] __msan_chain_origin+0x57/0xa0 [ 987.818154][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 987.823334][T18985] get_compat_msghdr+0x108/0x2b0 [ 987.828257][T18985] do_recvmmsg+0xdc7/0x22e0 [ 987.832746][T18985] __sys_recvmmsg+0x340/0x5f0 [ 987.837415][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.843465][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.849611][T18985] __do_fast_syscall_32+0x129/0x180 [ 987.854808][T18985] do_fast_syscall_32+0x6a/0xc0 [ 987.859641][T18985] do_SYSENTER_32+0x73/0x90 [ 987.864128][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.870433][T18985] [ 987.872741][T18985] Uninit was stored to memory at: [ 987.877752][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 987.898736][T18985] __msan_chain_origin+0x57/0xa0 [ 987.903657][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 987.908753][T18985] get_compat_msghdr+0x108/0x2b0 [ 987.913677][T18985] do_recvmmsg+0xdc7/0x22e0 [ 987.918165][T18985] __sys_recvmmsg+0x340/0x5f0 [ 987.922827][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.928878][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 987.935018][T18985] __do_fast_syscall_32+0x129/0x180 [ 987.940213][T18985] do_fast_syscall_32+0x6a/0xc0 [ 987.945052][T18985] do_SYSENTER_32+0x73/0x90 [ 987.949543][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 987.955845][T18985] [ 987.958152][T18985] Uninit was stored to memory at: [ 987.963186][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 987.968896][T18985] __msan_chain_origin+0x57/0xa0 [ 987.973823][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 987.978920][T18985] get_compat_msghdr+0x108/0x2b0 [ 987.983847][T18985] do_recvmmsg+0xdc7/0x22e0 [ 987.988338][T18985] __sys_recvmmsg+0x340/0x5f0 [ 987.993021][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 987.999087][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.005239][T18985] __do_fast_syscall_32+0x129/0x180 [ 988.010424][T18985] do_fast_syscall_32+0x6a/0xc0 [ 988.015262][T18985] do_SYSENTER_32+0x73/0x90 [ 988.019752][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.026138][T18985] [ 988.028446][T18985] Uninit was stored to memory at: [ 988.033460][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 988.039167][T18985] __msan_chain_origin+0x57/0xa0 [ 988.044091][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 988.049188][T18985] get_compat_msghdr+0x108/0x2b0 [ 988.054113][T18985] do_recvmmsg+0xdc7/0x22e0 [ 988.058604][T18985] __sys_recvmmsg+0x340/0x5f0 [ 988.063268][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.069322][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.075477][T18985] __do_fast_syscall_32+0x129/0x180 [ 988.080660][T18985] do_fast_syscall_32+0x6a/0xc0 [ 988.085496][T18985] do_SYSENTER_32+0x73/0x90 [ 988.089987][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.096288][T18985] [ 988.098595][T18985] Uninit was stored to memory at: [ 988.103611][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 988.109318][T18985] __msan_chain_origin+0x57/0xa0 [ 988.114238][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 988.119331][T18985] get_compat_msghdr+0x108/0x2b0 [ 988.124255][T18985] do_recvmmsg+0xdc7/0x22e0 [ 988.128744][T18985] __sys_recvmmsg+0x340/0x5f0 [ 988.133407][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.139458][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.145598][T18985] __do_fast_syscall_32+0x129/0x180 [ 988.150787][T18985] do_fast_syscall_32+0x6a/0xc0 [ 988.155622][T18985] do_SYSENTER_32+0x73/0x90 [ 988.160111][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.166413][T18985] [ 988.168723][T18985] Uninit was stored to memory at: [ 988.173747][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 988.179493][T18985] __msan_chain_origin+0x57/0xa0 [ 988.184420][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 988.189517][T18985] get_compat_msghdr+0x108/0x2b0 [ 988.194438][T18985] do_recvmmsg+0xdc7/0x22e0 [ 988.198926][T18985] __sys_recvmmsg+0x340/0x5f0 [ 988.203588][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.209638][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.215780][T18985] __do_fast_syscall_32+0x129/0x180 [ 988.220978][T18985] do_fast_syscall_32+0x6a/0xc0 [ 988.225823][T18985] do_SYSENTER_32+0x73/0x90 [ 988.230319][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.236622][T18985] [ 988.238938][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 988.245599][T18985] do_recvmmsg+0xc2/0x22e0 [ 988.250003][T18985] do_recvmmsg+0xc2/0x22e0 [ 988.472835][T18985] not chained 760000 origins [ 988.477454][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 988.486112][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.496197][T18985] Call Trace: [ 988.499491][T18985] dump_stack+0x21c/0x280 [ 988.503825][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 988.509545][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 988.515611][T18985] ? kmsan_get_metadata+0x116/0x180 [ 988.520810][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 988.526619][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 988.532683][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 988.538053][T18985] ? kmsan_get_metadata+0x116/0x180 [ 988.543249][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 988.548879][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 988.555212][T18985] ? _copy_from_user+0x201/0x310 [ 988.560149][T18985] ? kmsan_get_metadata+0x116/0x180 [ 988.565347][T18985] __msan_chain_origin+0x57/0xa0 [ 988.570293][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 988.575409][T18985] get_compat_msghdr+0x108/0x2b0 [ 988.580463][T18985] do_recvmmsg+0xdc7/0x22e0 [ 988.584966][T18985] ? kmsan_get_metadata+0x116/0x180 [ 988.590164][T18985] ? kmsan_get_metadata+0x116/0x180 [ 988.595374][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 988.601009][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 988.606295][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 988.611057][T18985] __sys_recvmmsg+0x340/0x5f0 [ 988.615733][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 988.621531][T18985] ? kmsan_get_metadata+0x116/0x180 [ 988.626727][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.632882][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.639038][T18985] __do_fast_syscall_32+0x129/0x180 [ 988.644244][T18985] do_fast_syscall_32+0x6a/0xc0 [ 988.649091][T18985] do_SYSENTER_32+0x73/0x90 [ 988.653599][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.659918][T18985] RIP: 0023:0xf7fe5549 [ 988.663986][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 988.683614][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 988.692020][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 988.699985][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 988.707947][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 988.715907][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 988.723861][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 988.731821][T18985] Uninit was stored to memory at: [ 988.736844][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 988.742562][T18985] __msan_chain_origin+0x57/0xa0 [ 988.747484][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 988.752583][T18985] get_compat_msghdr+0x108/0x2b0 [ 988.757526][T18985] do_recvmmsg+0xdc7/0x22e0 [ 988.762021][T18985] __sys_recvmmsg+0x340/0x5f0 [ 988.766696][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.772748][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.778895][T18985] __do_fast_syscall_32+0x129/0x180 [ 988.784077][T18985] do_fast_syscall_32+0x6a/0xc0 [ 988.788909][T18985] do_SYSENTER_32+0x73/0x90 [ 988.793400][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.799701][T18985] [ 988.802008][T18985] Uninit was stored to memory at: [ 988.807021][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 988.812741][T18985] __msan_chain_origin+0x57/0xa0 [ 988.817663][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 988.822756][T18985] get_compat_msghdr+0x108/0x2b0 [ 988.827678][T18985] do_recvmmsg+0xdc7/0x22e0 [ 988.832167][T18985] __sys_recvmmsg+0x340/0x5f0 [ 988.836832][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.842884][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.849022][T18985] __do_fast_syscall_32+0x129/0x180 [ 988.854208][T18985] do_fast_syscall_32+0x6a/0xc0 [ 988.859042][T18985] do_SYSENTER_32+0x73/0x90 [ 988.863533][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.869846][T18985] [ 988.872152][T18985] Uninit was stored to memory at: [ 988.877162][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 988.882879][T18985] __msan_chain_origin+0x57/0xa0 [ 988.887800][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 988.892894][T18985] get_compat_msghdr+0x108/0x2b0 [ 988.897817][T18985] do_recvmmsg+0xdc7/0x22e0 [ 988.902307][T18985] __sys_recvmmsg+0x340/0x5f0 [ 988.906968][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.913022][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.919159][T18985] __do_fast_syscall_32+0x129/0x180 [ 988.924341][T18985] do_fast_syscall_32+0x6a/0xc0 [ 988.929176][T18985] do_SYSENTER_32+0x73/0x90 [ 988.933668][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 988.939965][T18985] [ 988.942270][T18985] Uninit was stored to memory at: [ 988.947283][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 988.952987][T18985] __msan_chain_origin+0x57/0xa0 [ 988.957907][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 988.962999][T18985] get_compat_msghdr+0x108/0x2b0 [ 988.967923][T18985] do_recvmmsg+0xdc7/0x22e0 [ 988.972413][T18985] __sys_recvmmsg+0x340/0x5f0 [ 988.977075][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 988.983127][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 988.989263][T18985] __do_fast_syscall_32+0x129/0x180 [ 988.994447][T18985] do_fast_syscall_32+0x6a/0xc0 [ 988.999281][T18985] do_SYSENTER_32+0x73/0x90 [ 989.003892][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.010199][T18985] [ 989.012513][T18985] Uninit was stored to memory at: [ 989.017531][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 989.023238][T18985] __msan_chain_origin+0x57/0xa0 [ 989.028159][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 989.033258][T18985] get_compat_msghdr+0x108/0x2b0 [ 989.038185][T18985] do_recvmmsg+0xdc7/0x22e0 [ 989.042674][T18985] __sys_recvmmsg+0x340/0x5f0 [ 989.047342][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.053395][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.059539][T18985] __do_fast_syscall_32+0x129/0x180 [ 989.064731][T18985] do_fast_syscall_32+0x6a/0xc0 [ 989.069569][T18985] do_SYSENTER_32+0x73/0x90 [ 989.074064][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.080365][T18985] [ 989.082674][T18985] Uninit was stored to memory at: [ 989.087690][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 989.093413][T18985] __msan_chain_origin+0x57/0xa0 [ 989.098333][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 989.103429][T18985] get_compat_msghdr+0x108/0x2b0 [ 989.108351][T18985] do_recvmmsg+0xdc7/0x22e0 [ 989.112841][T18985] __sys_recvmmsg+0x340/0x5f0 [ 989.117591][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.123644][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.129783][T18985] __do_fast_syscall_32+0x129/0x180 [ 989.134965][T18985] do_fast_syscall_32+0x6a/0xc0 [ 989.139800][T18985] do_SYSENTER_32+0x73/0x90 [ 989.144289][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.150589][T18985] [ 989.152896][T18985] Uninit was stored to memory at: [ 989.157907][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 989.163611][T18985] __msan_chain_origin+0x57/0xa0 [ 989.168531][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 989.173635][T18985] get_compat_msghdr+0x108/0x2b0 [ 989.178560][T18985] do_recvmmsg+0xdc7/0x22e0 [ 989.183051][T18985] __sys_recvmmsg+0x340/0x5f0 [ 989.187713][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.193780][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.199936][T18985] __do_fast_syscall_32+0x129/0x180 [ 989.205123][T18985] do_fast_syscall_32+0x6a/0xc0 [ 989.209959][T18985] do_SYSENTER_32+0x73/0x90 [ 989.214452][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.220755][T18985] [ 989.223067][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 989.229739][T18985] do_recvmmsg+0xc2/0x22e0 [ 989.234172][T18985] do_recvmmsg+0xc2/0x22e0 [ 989.366082][T18982] not chained 770000 origins [ 989.370732][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 989.379406][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.389540][T18982] Call Trace: [ 989.392834][T18982] dump_stack+0x21c/0x280 [ 989.397173][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 989.402894][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 989.408960][T18982] ? kmsan_get_metadata+0x116/0x180 [ 989.414159][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 989.419968][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 989.426036][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 989.431409][T18982] ? kmsan_get_metadata+0x116/0x180 [ 989.436609][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 989.442244][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 989.448318][T18982] ? _copy_from_user+0x201/0x310 [ 989.453255][T18982] ? kmsan_get_metadata+0x116/0x180 [ 989.458451][T18982] __msan_chain_origin+0x57/0xa0 [ 989.463422][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 989.468538][T18982] get_compat_msghdr+0x108/0x2b0 [ 989.473485][T18982] do_recvmmsg+0xdc7/0x22e0 [ 989.477991][T18982] ? kmsan_get_metadata+0x116/0x180 [ 989.483192][T18982] ? kmsan_get_metadata+0x116/0x180 [ 989.488390][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 989.494023][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 989.499313][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 989.504076][T18982] __sys_recvmmsg+0x340/0x5f0 [ 989.508760][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 989.514559][T18982] ? kmsan_get_metadata+0x116/0x180 [ 989.519761][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.525831][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.531987][T18982] __do_fast_syscall_32+0x129/0x180 [ 989.537189][T18982] do_fast_syscall_32+0x6a/0xc0 [ 989.542041][T18982] do_SYSENTER_32+0x73/0x90 [ 989.546546][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.552865][T18982] RIP: 0023:0xf7fe5549 [ 989.556931][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 989.576532][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 989.584944][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 989.592909][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 989.600875][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 989.608840][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 989.616809][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 989.624775][T18982] Uninit was stored to memory at: [ 989.629805][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 989.635528][T18982] __msan_chain_origin+0x57/0xa0 [ 989.640463][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 989.645572][T18982] get_compat_msghdr+0x108/0x2b0 [ 989.650509][T18982] do_recvmmsg+0xdc7/0x22e0 [ 989.655011][T18982] __sys_recvmmsg+0x340/0x5f0 [ 989.659686][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.665747][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.671897][T18982] __do_fast_syscall_32+0x129/0x180 [ 989.677191][T18982] do_fast_syscall_32+0x6a/0xc0 [ 989.682041][T18982] do_SYSENTER_32+0x73/0x90 [ 989.686545][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.692850][T18982] [ 989.695162][T18982] Uninit was stored to memory at: [ 989.700186][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 989.705898][T18982] __msan_chain_origin+0x57/0xa0 [ 989.710827][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 989.715929][T18982] get_compat_msghdr+0x108/0x2b0 [ 989.720861][T18982] do_recvmmsg+0xdc7/0x22e0 [ 989.725358][T18982] __sys_recvmmsg+0x340/0x5f0 [ 989.730037][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.736091][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.742231][T18982] __do_fast_syscall_32+0x129/0x180 [ 989.747415][T18982] do_fast_syscall_32+0x6a/0xc0 [ 989.752261][T18982] do_SYSENTER_32+0x73/0x90 [ 989.756751][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.763050][T18982] [ 989.765357][T18982] Uninit was stored to memory at: [ 989.770372][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 989.776079][T18982] __msan_chain_origin+0x57/0xa0 [ 989.781002][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 989.786098][T18982] get_compat_msghdr+0x108/0x2b0 [ 989.791022][T18982] do_recvmmsg+0xdc7/0x22e0 [ 989.795512][T18982] __sys_recvmmsg+0x340/0x5f0 [ 989.800173][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.806223][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.812362][T18982] __do_fast_syscall_32+0x129/0x180 [ 989.817546][T18982] do_fast_syscall_32+0x6a/0xc0 [ 989.822382][T18982] do_SYSENTER_32+0x73/0x90 [ 989.826871][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.833181][T18982] [ 989.835490][T18982] Uninit was stored to memory at: [ 989.840504][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 989.846211][T18982] __msan_chain_origin+0x57/0xa0 [ 989.851131][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 989.856227][T18982] get_compat_msghdr+0x108/0x2b0 [ 989.861150][T18982] do_recvmmsg+0xdc7/0x22e0 [ 989.865641][T18982] __sys_recvmmsg+0x340/0x5f0 [ 989.870307][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.876360][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.882504][T18982] __do_fast_syscall_32+0x129/0x180 [ 989.887688][T18982] do_fast_syscall_32+0x6a/0xc0 [ 989.892523][T18982] do_SYSENTER_32+0x73/0x90 [ 989.897014][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.903325][T18982] [ 989.905631][T18982] Uninit was stored to memory at: [ 989.910642][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 989.916349][T18982] __msan_chain_origin+0x57/0xa0 [ 989.921270][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 989.926369][T18982] get_compat_msghdr+0x108/0x2b0 [ 989.931295][T18982] do_recvmmsg+0xdc7/0x22e0 [ 989.935791][T18982] __sys_recvmmsg+0x340/0x5f0 [ 989.940453][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 989.946504][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 989.952653][T18982] __do_fast_syscall_32+0x129/0x180 [ 989.957837][T18982] do_fast_syscall_32+0x6a/0xc0 [ 989.962672][T18982] do_SYSENTER_32+0x73/0x90 [ 989.967162][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 989.973468][T18982] [ 989.975781][T18982] Uninit was stored to memory at: [ 989.980885][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 989.986595][T18982] __msan_chain_origin+0x57/0xa0 [ 989.991520][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 989.996616][T18982] get_compat_msghdr+0x108/0x2b0 [ 990.001543][T18982] do_recvmmsg+0xdc7/0x22e0 [ 990.006043][T18982] __sys_recvmmsg+0x340/0x5f0 [ 990.010714][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.016771][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.022915][T18982] __do_fast_syscall_32+0x129/0x180 [ 990.028103][T18982] do_fast_syscall_32+0x6a/0xc0 [ 990.032957][T18982] do_SYSENTER_32+0x73/0x90 [ 990.037455][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.043760][T18982] [ 990.046067][T18982] Uninit was stored to memory at: [ 990.051085][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 990.056792][T18982] __msan_chain_origin+0x57/0xa0 [ 990.061721][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 990.066816][T18982] get_compat_msghdr+0x108/0x2b0 [ 990.071738][T18982] do_recvmmsg+0xdc7/0x22e0 [ 990.076228][T18982] __sys_recvmmsg+0x340/0x5f0 [ 990.080891][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.086943][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.093081][T18982] __do_fast_syscall_32+0x129/0x180 [ 990.098264][T18982] do_fast_syscall_32+0x6a/0xc0 [ 990.103099][T18982] do_SYSENTER_32+0x73/0x90 [ 990.107592][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.113890][T18982] [ 990.116199][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 990.122858][T18982] do_recvmmsg+0xc2/0x22e0 [ 990.127260][T18982] do_recvmmsg+0xc2/0x22e0 [ 990.307371][T18982] not chained 780000 origins [ 990.311993][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 990.320654][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.330700][T18982] Call Trace: [ 990.333994][T18982] dump_stack+0x21c/0x280 [ 990.338332][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 990.344055][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 990.350123][T18982] ? kmsan_get_metadata+0x116/0x180 [ 990.355353][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 990.361161][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 990.367229][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 990.372632][T18982] ? kmsan_get_metadata+0x116/0x180 [ 990.377862][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 990.383499][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 990.389565][T18982] ? _copy_from_user+0x201/0x310 [ 990.394499][T18982] ? kmsan_get_metadata+0x116/0x180 [ 990.399701][T18982] __msan_chain_origin+0x57/0xa0 [ 990.404641][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 990.409757][T18982] get_compat_msghdr+0x108/0x2b0 [ 990.414701][T18982] do_recvmmsg+0xdc7/0x22e0 [ 990.419206][T18982] ? kmsan_get_metadata+0x116/0x180 [ 990.424411][T18982] ? kmsan_get_metadata+0x116/0x180 [ 990.429610][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 990.435247][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 990.440534][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 990.445297][T18982] __sys_recvmmsg+0x340/0x5f0 [ 990.449976][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 990.456123][T18982] ? kmsan_get_metadata+0x116/0x180 [ 990.461318][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.467385][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.473539][T18982] __do_fast_syscall_32+0x129/0x180 [ 990.478738][T18982] do_fast_syscall_32+0x6a/0xc0 [ 990.483587][T18982] do_SYSENTER_32+0x73/0x90 [ 990.488087][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.494403][T18982] RIP: 0023:0xf7fe5549 [ 990.498473][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 990.518071][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 990.526494][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 990.534456][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 990.542413][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 990.550370][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 990.558324][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 990.566281][T18982] Uninit was stored to memory at: [ 990.571296][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 990.577007][T18982] __msan_chain_origin+0x57/0xa0 [ 990.581930][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 990.587027][T18982] get_compat_msghdr+0x108/0x2b0 [ 990.591967][T18982] do_recvmmsg+0xdc7/0x22e0 [ 990.596470][T18982] __sys_recvmmsg+0x340/0x5f0 [ 990.601135][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.607189][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.613333][T18982] __do_fast_syscall_32+0x129/0x180 [ 990.618515][T18982] do_fast_syscall_32+0x6a/0xc0 [ 990.623352][T18982] do_SYSENTER_32+0x73/0x90 [ 990.627843][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.634141][T18982] [ 990.636448][T18982] Uninit was stored to memory at: [ 990.641465][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 990.647171][T18982] __msan_chain_origin+0x57/0xa0 [ 990.652093][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 990.657189][T18982] get_compat_msghdr+0x108/0x2b0 [ 990.662115][T18982] do_recvmmsg+0xdc7/0x22e0 [ 990.666603][T18982] __sys_recvmmsg+0x340/0x5f0 [ 990.671265][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.677317][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.683459][T18982] __do_fast_syscall_32+0x129/0x180 [ 990.688642][T18982] do_fast_syscall_32+0x6a/0xc0 [ 990.693480][T18982] do_SYSENTER_32+0x73/0x90 [ 990.697968][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.704269][T18982] [ 990.706576][T18982] Uninit was stored to memory at: [ 990.711587][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 990.717293][T18982] __msan_chain_origin+0x57/0xa0 [ 990.722229][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 990.727326][T18982] get_compat_msghdr+0x108/0x2b0 [ 990.732249][T18982] do_recvmmsg+0xdc7/0x22e0 [ 990.736742][T18982] __sys_recvmmsg+0x340/0x5f0 [ 990.741404][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.747456][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.753596][T18982] __do_fast_syscall_32+0x129/0x180 [ 990.758780][T18982] do_fast_syscall_32+0x6a/0xc0 [ 990.763616][T18982] do_SYSENTER_32+0x73/0x90 [ 990.768107][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.774404][T18982] [ 990.776710][T18982] Uninit was stored to memory at: [ 990.781724][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 990.787430][T18982] __msan_chain_origin+0x57/0xa0 [ 990.792353][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 990.797462][T18982] get_compat_msghdr+0x108/0x2b0 [ 990.802385][T18982] do_recvmmsg+0xdc7/0x22e0 [ 990.806875][T18982] __sys_recvmmsg+0x340/0x5f0 [ 990.811537][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.817589][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.823728][T18982] __do_fast_syscall_32+0x129/0x180 [ 990.828915][T18982] do_fast_syscall_32+0x6a/0xc0 [ 990.833750][T18982] do_SYSENTER_32+0x73/0x90 [ 990.838242][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.844549][T18982] [ 990.846855][T18982] Uninit was stored to memory at: [ 990.851867][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 990.857572][T18982] __msan_chain_origin+0x57/0xa0 [ 990.862495][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 990.867589][T18982] get_compat_msghdr+0x108/0x2b0 [ 990.872517][T18982] do_recvmmsg+0xdc7/0x22e0 [ 990.877005][T18982] __sys_recvmmsg+0x340/0x5f0 [ 990.881666][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.887717][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.893858][T18982] __do_fast_syscall_32+0x129/0x180 [ 990.899042][T18982] do_fast_syscall_32+0x6a/0xc0 [ 990.903889][T18982] do_SYSENTER_32+0x73/0x90 [ 990.908378][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.914677][T18982] [ 990.916986][T18982] Uninit was stored to memory at: [ 990.921998][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 990.927704][T18982] __msan_chain_origin+0x57/0xa0 [ 990.932625][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 990.937718][T18982] get_compat_msghdr+0x108/0x2b0 [ 990.942642][T18982] do_recvmmsg+0xdc7/0x22e0 [ 990.947133][T18982] __sys_recvmmsg+0x340/0x5f0 [ 990.951795][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 990.957849][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 990.963990][T18982] __do_fast_syscall_32+0x129/0x180 [ 990.969172][T18982] do_fast_syscall_32+0x6a/0xc0 [ 990.974008][T18982] do_SYSENTER_32+0x73/0x90 [ 990.978499][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 990.984801][T18982] [ 990.987109][T18982] Uninit was stored to memory at: [ 990.992125][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 990.997831][T18982] __msan_chain_origin+0x57/0xa0 [ 991.002767][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 991.007955][T18982] get_compat_msghdr+0x108/0x2b0 [ 991.012880][T18982] do_recvmmsg+0xdc7/0x22e0 [ 991.017370][T18982] __sys_recvmmsg+0x340/0x5f0 [ 991.022035][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.028093][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.034238][T18982] __do_fast_syscall_32+0x129/0x180 [ 991.039426][T18982] do_fast_syscall_32+0x6a/0xc0 [ 991.044266][T18982] do_SYSENTER_32+0x73/0x90 [ 991.048761][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.055063][T18982] [ 991.057378][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 991.064040][T18982] do_recvmmsg+0xc2/0x22e0 [ 991.068443][T18982] do_recvmmsg+0xc2/0x22e0 [ 991.219493][T18985] not chained 790000 origins [ 991.224120][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 991.232780][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.242826][T18985] Call Trace: [ 991.246118][T18985] dump_stack+0x21c/0x280 [ 991.250455][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 991.256177][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 991.262241][T18985] ? kmsan_get_metadata+0x116/0x180 [ 991.267432][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 991.273237][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 991.279301][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 991.284670][T18985] ? kmsan_get_metadata+0x116/0x180 [ 991.289869][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 991.295500][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 991.301564][T18985] ? _copy_from_user+0x201/0x310 [ 991.306497][T18985] ? kmsan_get_metadata+0x116/0x180 [ 991.311700][T18985] __msan_chain_origin+0x57/0xa0 [ 991.316641][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 991.321756][T18985] get_compat_msghdr+0x108/0x2b0 [ 991.326708][T18985] do_recvmmsg+0xdc7/0x22e0 [ 991.331211][T18985] ? kmsan_get_metadata+0x116/0x180 [ 991.336411][T18985] ? kmsan_get_metadata+0x116/0x180 [ 991.341607][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 991.347235][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 991.352518][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 991.357281][T18985] __sys_recvmmsg+0x340/0x5f0 [ 991.361955][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 991.367757][T18985] ? kmsan_get_metadata+0x116/0x180 [ 991.372955][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.379021][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.385171][T18985] __do_fast_syscall_32+0x129/0x180 [ 991.390363][T18985] do_fast_syscall_32+0x6a/0xc0 [ 991.395211][T18985] do_SYSENTER_32+0x73/0x90 [ 991.399718][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.406035][T18985] RIP: 0023:0xf7fe5549 [ 991.410102][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 991.429719][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 991.438127][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 991.446090][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 991.454054][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 991.462019][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 991.469981][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 991.477943][T18985] Uninit was stored to memory at: [ 991.482967][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 991.488682][T18985] __msan_chain_origin+0x57/0xa0 [ 991.493615][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 991.498721][T18985] get_compat_msghdr+0x108/0x2b0 [ 991.503650][T18985] do_recvmmsg+0xdc7/0x22e0 [ 991.508146][T18985] __sys_recvmmsg+0x340/0x5f0 [ 991.512816][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.518868][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.525010][T18985] __do_fast_syscall_32+0x129/0x180 [ 991.530192][T18985] do_fast_syscall_32+0x6a/0xc0 [ 991.535027][T18985] do_SYSENTER_32+0x73/0x90 [ 991.539518][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.545817][T18985] [ 991.548123][T18985] Uninit was stored to memory at: [ 991.553133][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 991.558838][T18985] __msan_chain_origin+0x57/0xa0 [ 991.563759][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 991.568853][T18985] get_compat_msghdr+0x108/0x2b0 [ 991.573784][T18985] do_recvmmsg+0xdc7/0x22e0 [ 991.578274][T18985] __sys_recvmmsg+0x340/0x5f0 [ 991.582934][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.588984][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.595208][T18985] __do_fast_syscall_32+0x129/0x180 [ 991.600392][T18985] do_fast_syscall_32+0x6a/0xc0 [ 991.605228][T18985] do_SYSENTER_32+0x73/0x90 [ 991.609719][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.616017][T18985] [ 991.618323][T18985] Uninit was stored to memory at: [ 991.623336][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 991.629040][T18985] __msan_chain_origin+0x57/0xa0 [ 991.633960][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 991.639055][T18985] get_compat_msghdr+0x108/0x2b0 [ 991.643978][T18985] do_recvmmsg+0xdc7/0x22e0 [ 991.648468][T18985] __sys_recvmmsg+0x340/0x5f0 [ 991.653130][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.659183][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.665324][T18985] __do_fast_syscall_32+0x129/0x180 [ 991.670509][T18985] do_fast_syscall_32+0x6a/0xc0 [ 991.675342][T18985] do_SYSENTER_32+0x73/0x90 [ 991.679832][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.686130][T18985] [ 991.688437][T18985] Uninit was stored to memory at: [ 991.693449][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 991.699154][T18985] __msan_chain_origin+0x57/0xa0 [ 991.704074][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 991.709178][T18985] get_compat_msghdr+0x108/0x2b0 [ 991.714099][T18985] do_recvmmsg+0xdc7/0x22e0 [ 991.718589][T18985] __sys_recvmmsg+0x340/0x5f0 [ 991.723260][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.729310][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.735457][T18985] __do_fast_syscall_32+0x129/0x180 [ 991.740642][T18985] do_fast_syscall_32+0x6a/0xc0 [ 991.745478][T18985] do_SYSENTER_32+0x73/0x90 [ 991.749966][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.756265][T18985] [ 991.758572][T18985] Uninit was stored to memory at: [ 991.763585][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 991.769288][T18985] __msan_chain_origin+0x57/0xa0 [ 991.774209][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 991.779305][T18985] get_compat_msghdr+0x108/0x2b0 [ 991.784242][T18985] do_recvmmsg+0xdc7/0x22e0 [ 991.788827][T18985] __sys_recvmmsg+0x340/0x5f0 [ 991.793487][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.799539][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.805678][T18985] __do_fast_syscall_32+0x129/0x180 [ 991.810864][T18985] do_fast_syscall_32+0x6a/0xc0 [ 991.815704][T18985] do_SYSENTER_32+0x73/0x90 [ 991.820191][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.826490][T18985] [ 991.828799][T18985] Uninit was stored to memory at: [ 991.833809][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 991.839514][T18985] __msan_chain_origin+0x57/0xa0 [ 991.844434][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 991.849541][T18985] get_compat_msghdr+0x108/0x2b0 [ 991.854466][T18985] do_recvmmsg+0xdc7/0x22e0 [ 991.858961][T18985] __sys_recvmmsg+0x340/0x5f0 [ 991.863623][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.869675][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.875817][T18985] __do_fast_syscall_32+0x129/0x180 [ 991.881000][T18985] do_fast_syscall_32+0x6a/0xc0 [ 991.885836][T18985] do_SYSENTER_32+0x73/0x90 [ 991.890325][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.896626][T18985] [ 991.898933][T18985] Uninit was stored to memory at: [ 991.903944][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 991.909649][T18985] __msan_chain_origin+0x57/0xa0 [ 991.914570][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 991.919662][T18985] get_compat_msghdr+0x108/0x2b0 [ 991.924584][T18985] do_recvmmsg+0xdc7/0x22e0 [ 991.929071][T18985] __sys_recvmmsg+0x340/0x5f0 [ 991.933735][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 991.939799][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 991.945936][T18985] __do_fast_syscall_32+0x129/0x180 [ 991.951240][T18985] do_fast_syscall_32+0x6a/0xc0 [ 991.956077][T18985] do_SYSENTER_32+0x73/0x90 [ 991.960565][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 991.966862][T18985] [ 991.969171][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 991.975833][T18985] do_recvmmsg+0xc2/0x22e0 [ 991.980233][T18985] do_recvmmsg+0xc2/0x22e0 [ 992.158158][T18982] not chained 800000 origins [ 992.162794][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 992.171452][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.181500][T18982] Call Trace: [ 992.184789][T18982] dump_stack+0x21c/0x280 [ 992.189114][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 992.194825][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 992.200877][T18982] ? kmsan_get_metadata+0x116/0x180 [ 992.206066][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 992.211866][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 992.217921][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 992.223382][T18982] ? kmsan_get_metadata+0x116/0x180 [ 992.228568][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 992.234189][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 992.240244][T18982] ? _copy_from_user+0x201/0x310 [ 992.245172][T18982] ? kmsan_get_metadata+0x116/0x180 [ 992.250360][T18982] __msan_chain_origin+0x57/0xa0 [ 992.255290][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 992.260392][T18982] get_compat_msghdr+0x108/0x2b0 [ 992.265323][T18982] do_recvmmsg+0xdc7/0x22e0 [ 992.269813][T18982] ? kmsan_get_metadata+0x116/0x180 [ 992.275002][T18982] ? kmsan_get_metadata+0x116/0x180 [ 992.280190][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 992.285812][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 992.291084][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 992.295836][T18982] __sys_recvmmsg+0x340/0x5f0 [ 992.300500][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 992.306292][T18982] ? kmsan_get_metadata+0x116/0x180 [ 992.311478][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.317534][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.323677][T18982] __do_fast_syscall_32+0x129/0x180 [ 992.328864][T18982] do_fast_syscall_32+0x6a/0xc0 [ 992.333703][T18982] do_SYSENTER_32+0x73/0x90 [ 992.338195][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.344504][T18982] RIP: 0023:0xf7fe5549 [ 992.348561][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 992.368149][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 992.376545][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 992.384501][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 992.392455][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 992.400412][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 992.408371][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 992.416325][T18982] Uninit was stored to memory at: [ 992.421341][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 992.427049][T18982] __msan_chain_origin+0x57/0xa0 [ 992.431975][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 992.437082][T18982] get_compat_msghdr+0x108/0x2b0 [ 992.442011][T18982] do_recvmmsg+0xdc7/0x22e0 [ 992.446500][T18982] __sys_recvmmsg+0x340/0x5f0 [ 992.451163][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.457215][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.463356][T18982] __do_fast_syscall_32+0x129/0x180 [ 992.468537][T18982] do_fast_syscall_32+0x6a/0xc0 [ 992.473371][T18982] do_SYSENTER_32+0x73/0x90 [ 992.477859][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.484159][T18982] [ 992.486465][T18982] Uninit was stored to memory at: [ 992.491478][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 992.497184][T18982] __msan_chain_origin+0x57/0xa0 [ 992.502108][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 992.507202][T18982] get_compat_msghdr+0x108/0x2b0 [ 992.512126][T18982] do_recvmmsg+0xdc7/0x22e0 [ 992.516621][T18982] __sys_recvmmsg+0x340/0x5f0 [ 992.521283][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.527335][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.533497][T18982] __do_fast_syscall_32+0x129/0x180 [ 992.538681][T18982] do_fast_syscall_32+0x6a/0xc0 [ 992.543530][T18982] do_SYSENTER_32+0x73/0x90 [ 992.548019][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.554318][T18982] [ 992.556627][T18982] Uninit was stored to memory at: [ 992.561639][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 992.567348][T18982] __msan_chain_origin+0x57/0xa0 [ 992.572274][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 992.577371][T18982] get_compat_msghdr+0x108/0x2b0 [ 992.582294][T18982] do_recvmmsg+0xdc7/0x22e0 [ 992.586783][T18982] __sys_recvmmsg+0x340/0x5f0 [ 992.591447][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.597498][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.603638][T18982] __do_fast_syscall_32+0x129/0x180 [ 992.608820][T18982] do_fast_syscall_32+0x6a/0xc0 [ 992.613657][T18982] do_SYSENTER_32+0x73/0x90 [ 992.618146][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.624449][T18982] [ 992.626756][T18982] Uninit was stored to memory at: [ 992.631856][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 992.637561][T18982] __msan_chain_origin+0x57/0xa0 [ 992.642481][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 992.647576][T18982] get_compat_msghdr+0x108/0x2b0 [ 992.652499][T18982] do_recvmmsg+0xdc7/0x22e0 [ 992.656989][T18982] __sys_recvmmsg+0x340/0x5f0 [ 992.661650][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.667702][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.673842][T18982] __do_fast_syscall_32+0x129/0x180 [ 992.679037][T18982] do_fast_syscall_32+0x6a/0xc0 [ 992.683873][T18982] do_SYSENTER_32+0x73/0x90 [ 992.688365][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.694664][T18982] [ 992.696971][T18982] Uninit was stored to memory at: [ 992.701985][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 992.707961][T18982] __msan_chain_origin+0x57/0xa0 [ 992.712882][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 992.717977][T18982] get_compat_msghdr+0x108/0x2b0 [ 992.722900][T18982] do_recvmmsg+0xdc7/0x22e0 [ 992.727389][T18982] __sys_recvmmsg+0x340/0x5f0 [ 992.732052][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.738118][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.744261][T18982] __do_fast_syscall_32+0x129/0x180 [ 992.749444][T18982] do_fast_syscall_32+0x6a/0xc0 [ 992.754282][T18982] do_SYSENTER_32+0x73/0x90 [ 992.758772][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.765074][T18982] [ 992.767382][T18982] Uninit was stored to memory at: [ 992.772392][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 992.778100][T18982] __msan_chain_origin+0x57/0xa0 [ 992.783020][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 992.788115][T18982] get_compat_msghdr+0x108/0x2b0 [ 992.793039][T18982] do_recvmmsg+0xdc7/0x22e0 [ 992.797533][T18982] __sys_recvmmsg+0x340/0x5f0 [ 992.802195][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.808249][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.814394][T18982] __do_fast_syscall_32+0x129/0x180 [ 992.819579][T18982] do_fast_syscall_32+0x6a/0xc0 [ 992.824414][T18982] do_SYSENTER_32+0x73/0x90 [ 992.828905][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.835217][T18982] [ 992.837620][T18982] Uninit was stored to memory at: [ 992.842633][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 992.848339][T18982] __msan_chain_origin+0x57/0xa0 [ 992.853264][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 992.858360][T18982] get_compat_msghdr+0x108/0x2b0 [ 992.863285][T18982] do_recvmmsg+0xdc7/0x22e0 [ 992.867774][T18982] __sys_recvmmsg+0x340/0x5f0 [ 992.872436][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 992.878488][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 992.884627][T18982] __do_fast_syscall_32+0x129/0x180 [ 992.889810][T18982] do_fast_syscall_32+0x6a/0xc0 [ 992.894646][T18982] do_SYSENTER_32+0x73/0x90 [ 992.899135][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 992.905433][T18982] [ 992.907741][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 992.914400][T18982] do_recvmmsg+0xc2/0x22e0 [ 992.918801][T18982] do_recvmmsg+0xc2/0x22e0 [ 993.137170][T18985] not chained 810000 origins [ 993.141801][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 993.150459][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.160507][T18985] Call Trace: [ 993.163803][T18985] dump_stack+0x21c/0x280 [ 993.168137][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 993.173866][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 993.179940][T18985] ? kmsan_get_metadata+0x116/0x180 [ 993.185140][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 993.190948][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 993.197011][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 993.202379][T18985] ? kmsan_get_metadata+0x116/0x180 [ 993.207579][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 993.213213][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 993.219285][T18985] ? _copy_from_user+0x201/0x310 [ 993.224224][T18985] ? kmsan_get_metadata+0x116/0x180 [ 993.229420][T18985] __msan_chain_origin+0x57/0xa0 [ 993.234348][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 993.239453][T18985] get_compat_msghdr+0x108/0x2b0 [ 993.244384][T18985] do_recvmmsg+0xdc7/0x22e0 [ 993.248880][T18985] ? kmsan_get_metadata+0x116/0x180 [ 993.254071][T18985] ? kmsan_get_metadata+0x116/0x180 [ 993.259260][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 993.264904][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 993.270177][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 993.274930][T18985] __sys_recvmmsg+0x340/0x5f0 [ 993.279597][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 993.285385][T18985] ? kmsan_get_metadata+0x116/0x180 [ 993.290573][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.296629][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.302780][T18985] __do_fast_syscall_32+0x129/0x180 [ 993.307965][T18985] do_fast_syscall_32+0x6a/0xc0 [ 993.312802][T18985] do_SYSENTER_32+0x73/0x90 [ 993.317294][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.323603][T18985] RIP: 0023:0xf7fe5549 [ 993.327657][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 993.347245][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 993.355641][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 993.363599][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 993.371555][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 993.379513][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 993.387470][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 993.395426][T18985] Uninit was stored to memory at: [ 993.400450][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 993.406156][T18985] __msan_chain_origin+0x57/0xa0 [ 993.411076][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 993.416170][T18985] get_compat_msghdr+0x108/0x2b0 [ 993.422222][T18985] do_recvmmsg+0xdc7/0x22e0 [ 993.426708][T18985] __sys_recvmmsg+0x340/0x5f0 [ 993.431369][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.437425][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.443566][T18985] __do_fast_syscall_32+0x129/0x180 [ 993.448750][T18985] do_fast_syscall_32+0x6a/0xc0 [ 993.453584][T18985] do_SYSENTER_32+0x73/0x90 [ 993.458071][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.464372][T18985] [ 993.466678][T18985] Uninit was stored to memory at: [ 993.471690][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 993.477395][T18985] __msan_chain_origin+0x57/0xa0 [ 993.482321][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 993.487417][T18985] get_compat_msghdr+0x108/0x2b0 [ 993.492339][T18985] do_recvmmsg+0xdc7/0x22e0 [ 993.496826][T18985] __sys_recvmmsg+0x340/0x5f0 [ 993.501488][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.507540][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.513677][T18985] __do_fast_syscall_32+0x129/0x180 [ 993.518860][T18985] do_fast_syscall_32+0x6a/0xc0 [ 993.523708][T18985] do_SYSENTER_32+0x73/0x90 [ 993.528196][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.535625][T18985] [ 993.537931][T18985] Uninit was stored to memory at: [ 993.542940][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 993.548644][T18985] __msan_chain_origin+0x57/0xa0 [ 993.553566][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 993.558659][T18985] get_compat_msghdr+0x108/0x2b0 [ 993.563582][T18985] do_recvmmsg+0xdc7/0x22e0 [ 993.568068][T18985] __sys_recvmmsg+0x340/0x5f0 [ 993.572728][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.578780][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.584918][T18985] __do_fast_syscall_32+0x129/0x180 [ 993.590102][T18985] do_fast_syscall_32+0x6a/0xc0 [ 993.594938][T18985] do_SYSENTER_32+0x73/0x90 [ 993.599428][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.605729][T18985] [ 993.608035][T18985] Uninit was stored to memory at: [ 993.613047][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 993.618751][T18985] __msan_chain_origin+0x57/0xa0 [ 993.623673][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 993.628766][T18985] get_compat_msghdr+0x108/0x2b0 [ 993.633689][T18985] do_recvmmsg+0xdc7/0x22e0 [ 993.638177][T18985] __sys_recvmmsg+0x340/0x5f0 [ 993.642854][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.648903][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.655044][T18985] __do_fast_syscall_32+0x129/0x180 [ 993.660224][T18985] do_fast_syscall_32+0x6a/0xc0 [ 993.665061][T18985] do_SYSENTER_32+0x73/0x90 [ 993.669548][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.675850][T18985] [ 993.678164][T18985] Uninit was stored to memory at: [ 993.683175][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 993.688879][T18985] __msan_chain_origin+0x57/0xa0 [ 993.693802][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 993.698898][T18985] get_compat_msghdr+0x108/0x2b0 [ 993.703823][T18985] do_recvmmsg+0xdc7/0x22e0 [ 993.708316][T18985] __sys_recvmmsg+0x340/0x5f0 [ 993.712978][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.719030][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.725170][T18985] __do_fast_syscall_32+0x129/0x180 [ 993.730353][T18985] do_fast_syscall_32+0x6a/0xc0 [ 993.735187][T18985] do_SYSENTER_32+0x73/0x90 [ 993.739676][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.745974][T18985] [ 993.748283][T18985] Uninit was stored to memory at: [ 993.753293][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 993.758999][T18985] __msan_chain_origin+0x57/0xa0 [ 993.763922][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 993.769015][T18985] get_compat_msghdr+0x108/0x2b0 [ 993.773953][T18985] do_recvmmsg+0xdc7/0x22e0 [ 993.778443][T18985] __sys_recvmmsg+0x340/0x5f0 [ 993.783105][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.789169][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.795310][T18985] __do_fast_syscall_32+0x129/0x180 [ 993.800493][T18985] do_fast_syscall_32+0x6a/0xc0 [ 993.805327][T18985] do_SYSENTER_32+0x73/0x90 [ 993.809817][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.816116][T18985] [ 993.818425][T18985] Uninit was stored to memory at: [ 993.823438][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 993.829143][T18985] __msan_chain_origin+0x57/0xa0 [ 993.834067][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 993.839160][T18985] get_compat_msghdr+0x108/0x2b0 [ 993.844083][T18985] do_recvmmsg+0xdc7/0x22e0 [ 993.848590][T18985] __sys_recvmmsg+0x340/0x5f0 [ 993.853253][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 993.859305][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 993.865445][T18985] __do_fast_syscall_32+0x129/0x180 [ 993.870629][T18985] do_fast_syscall_32+0x6a/0xc0 [ 993.875473][T18985] do_SYSENTER_32+0x73/0x90 [ 993.879960][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 993.886259][T18985] [ 993.888569][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 993.895227][T18985] do_recvmmsg+0xc2/0x22e0 [ 993.899629][T18985] do_recvmmsg+0xc2/0x22e0 [ 994.161479][T18985] not chained 820000 origins [ 994.166098][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 994.174764][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.184814][T18985] Call Trace: [ 994.188108][T18985] dump_stack+0x21c/0x280 [ 994.192449][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 994.198169][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 994.204406][T18985] ? kmsan_get_metadata+0x116/0x180 [ 994.209608][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 994.215417][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 994.221495][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 994.226866][T18985] ? kmsan_get_metadata+0x116/0x180 [ 994.232063][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 994.237696][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 994.243766][T18985] ? _copy_from_user+0x201/0x310 [ 994.248701][T18985] ? kmsan_get_metadata+0x116/0x180 [ 994.253894][T18985] __msan_chain_origin+0x57/0xa0 [ 994.258830][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 994.263947][T18985] get_compat_msghdr+0x108/0x2b0 [ 994.268888][T18985] do_recvmmsg+0xdc7/0x22e0 [ 994.273391][T18985] ? kmsan_get_metadata+0x116/0x180 [ 994.278603][T18985] ? kmsan_get_metadata+0x116/0x180 [ 994.283799][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 994.289438][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 994.294727][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 994.299491][T18985] __sys_recvmmsg+0x340/0x5f0 [ 994.304168][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 994.309967][T18985] ? kmsan_get_metadata+0x116/0x180 [ 994.315163][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.321232][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.327386][T18985] __do_fast_syscall_32+0x129/0x180 [ 994.332593][T18985] do_fast_syscall_32+0x6a/0xc0 [ 994.337445][T18985] do_SYSENTER_32+0x73/0x90 [ 994.341948][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.348266][T18985] RIP: 0023:0xf7fe5549 [ 994.352363][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 994.371963][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 994.380372][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 994.388339][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 994.396305][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 994.404270][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 994.412235][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 994.420200][T18985] Uninit was stored to memory at: [ 994.425267][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 994.430987][T18985] __msan_chain_origin+0x57/0xa0 [ 994.435922][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 994.441025][T18985] get_compat_msghdr+0x108/0x2b0 [ 994.445962][T18985] do_recvmmsg+0xdc7/0x22e0 [ 994.450467][T18985] __sys_recvmmsg+0x340/0x5f0 [ 994.455146][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.461207][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.467358][T18985] __do_fast_syscall_32+0x129/0x180 [ 994.472555][T18985] do_fast_syscall_32+0x6a/0xc0 [ 994.477401][T18985] do_SYSENTER_32+0x73/0x90 [ 994.481906][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.488212][T18985] [ 994.490530][T18985] Uninit was stored to memory at: [ 994.495558][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 994.501277][T18985] __msan_chain_origin+0x57/0xa0 [ 994.506211][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 994.511313][T18985] get_compat_msghdr+0x108/0x2b0 [ 994.516263][T18985] do_recvmmsg+0xdc7/0x22e0 [ 994.520776][T18985] __sys_recvmmsg+0x340/0x5f0 [ 994.525451][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.531510][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.537663][T18985] __do_fast_syscall_32+0x129/0x180 [ 994.542861][T18985] do_fast_syscall_32+0x6a/0xc0 [ 994.547710][T18985] do_SYSENTER_32+0x73/0x90 [ 994.552216][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.558525][T18985] [ 994.560844][T18985] Uninit was stored to memory at: [ 994.565895][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 994.571612][T18985] __msan_chain_origin+0x57/0xa0 [ 994.576548][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 994.581656][T18985] get_compat_msghdr+0x108/0x2b0 [ 994.586590][T18985] do_recvmmsg+0xdc7/0x22e0 [ 994.591091][T18985] __sys_recvmmsg+0x340/0x5f0 [ 994.595766][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.601837][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.607991][T18985] __do_fast_syscall_32+0x129/0x180 [ 994.613205][T18985] do_fast_syscall_32+0x6a/0xc0 [ 994.618049][T18985] do_SYSENTER_32+0x73/0x90 [ 994.622551][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.628860][T18985] [ 994.631176][T18985] Uninit was stored to memory at: [ 994.636201][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 994.641920][T18985] __msan_chain_origin+0x57/0xa0 [ 994.646851][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 994.651954][T18985] get_compat_msghdr+0x108/0x2b0 [ 994.656887][T18985] do_recvmmsg+0xdc7/0x22e0 [ 994.661384][T18985] __sys_recvmmsg+0x340/0x5f0 [ 994.666059][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.672120][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.678269][T18985] __do_fast_syscall_32+0x129/0x180 [ 994.683462][T18985] do_fast_syscall_32+0x6a/0xc0 [ 994.688306][T18985] do_SYSENTER_32+0x73/0x90 [ 994.692804][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.699110][T18985] [ 994.701440][T18985] Uninit was stored to memory at: [ 994.706463][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 994.712176][T18985] __msan_chain_origin+0x57/0xa0 [ 994.717107][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 994.722208][T18985] get_compat_msghdr+0x108/0x2b0 [ 994.727140][T18985] do_recvmmsg+0xdc7/0x22e0 [ 994.731636][T18985] __sys_recvmmsg+0x340/0x5f0 [ 994.736308][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.742369][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.748519][T18985] __do_fast_syscall_32+0x129/0x180 [ 994.753712][T18985] do_fast_syscall_32+0x6a/0xc0 [ 994.758553][T18985] do_SYSENTER_32+0x73/0x90 [ 994.763054][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.769357][T18985] [ 994.771670][T18985] Uninit was stored to memory at: [ 994.776691][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 994.782407][T18985] __msan_chain_origin+0x57/0xa0 [ 994.787354][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 994.792456][T18985] get_compat_msghdr+0x108/0x2b0 [ 994.797395][T18985] do_recvmmsg+0xdc7/0x22e0 [ 994.801902][T18985] __sys_recvmmsg+0x340/0x5f0 [ 994.806569][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.812620][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.818764][T18985] __do_fast_syscall_32+0x129/0x180 [ 994.823949][T18985] do_fast_syscall_32+0x6a/0xc0 [ 994.828783][T18985] do_SYSENTER_32+0x73/0x90 [ 994.833274][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.839573][T18985] [ 994.841882][T18985] Uninit was stored to memory at: [ 994.846895][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 994.852601][T18985] __msan_chain_origin+0x57/0xa0 [ 994.857522][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 994.862624][T18985] get_compat_msghdr+0x108/0x2b0 [ 994.867547][T18985] do_recvmmsg+0xdc7/0x22e0 [ 994.872038][T18985] __sys_recvmmsg+0x340/0x5f0 [ 994.876699][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 994.882751][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 994.888893][T18985] __do_fast_syscall_32+0x129/0x180 [ 994.894075][T18985] do_fast_syscall_32+0x6a/0xc0 [ 994.898913][T18985] do_SYSENTER_32+0x73/0x90 [ 994.903407][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 994.909712][T18985] [ 994.912021][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 994.918680][T18985] do_recvmmsg+0xc2/0x22e0 [ 994.923080][T18985] do_recvmmsg+0xc2/0x22e0 [ 995.047212][T18982] not chained 830000 origins [ 995.051819][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 995.060489][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.070519][T18982] Call Trace: [ 995.073791][T18982] dump_stack+0x21c/0x280 [ 995.078099][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 995.083830][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 995.089883][T18982] ? kmsan_get_metadata+0x116/0x180 [ 995.095055][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 995.100838][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 995.106894][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 995.112260][T18982] ? kmsan_get_metadata+0x116/0x180 [ 995.117434][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 995.123058][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 995.129112][T18982] ? _copy_from_user+0x201/0x310 [ 995.134025][T18982] ? kmsan_get_metadata+0x116/0x180 [ 995.139255][T18982] __msan_chain_origin+0x57/0xa0 [ 995.144184][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 995.149283][T18982] get_compat_msghdr+0x108/0x2b0 [ 995.154197][T18982] do_recvmmsg+0xdc7/0x22e0 [ 995.158675][T18982] ? kmsan_get_metadata+0x116/0x180 [ 995.163861][T18982] ? kmsan_get_metadata+0x116/0x180 [ 995.169047][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 995.174665][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 995.179937][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 995.184709][T18982] __sys_recvmmsg+0x340/0x5f0 [ 995.189380][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 995.195161][T18982] ? kmsan_get_metadata+0x116/0x180 [ 995.200337][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.206397][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.212548][T18982] __do_fast_syscall_32+0x129/0x180 [ 995.217733][T18982] do_fast_syscall_32+0x6a/0xc0 [ 995.222572][T18982] do_SYSENTER_32+0x73/0x90 [ 995.227084][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.233433][T18982] RIP: 0023:0xf7fe5549 [ 995.237527][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 995.257116][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 995.265519][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 995.273499][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 995.281459][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 995.289416][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 995.297366][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 995.305319][T18982] Uninit was stored to memory at: [ 995.310338][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 995.316069][T18982] __msan_chain_origin+0x57/0xa0 [ 995.320982][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 995.326070][T18982] get_compat_msghdr+0x108/0x2b0 [ 995.330982][T18982] do_recvmmsg+0xdc7/0x22e0 [ 995.335568][T18982] __sys_recvmmsg+0x340/0x5f0 [ 995.340223][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.346267][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.352397][T18982] __do_fast_syscall_32+0x129/0x180 [ 995.357570][T18982] do_fast_syscall_32+0x6a/0xc0 [ 995.362406][T18982] do_SYSENTER_32+0x73/0x90 [ 995.366917][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.373228][T18982] [ 995.375532][T18982] Uninit was stored to memory at: [ 995.380537][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 995.386236][T18982] __msan_chain_origin+0x57/0xa0 [ 995.391147][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 995.396233][T18982] get_compat_msghdr+0x108/0x2b0 [ 995.401146][T18982] do_recvmmsg+0xdc7/0x22e0 [ 995.405641][T18982] __sys_recvmmsg+0x340/0x5f0 [ 995.410293][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.416337][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.422490][T18982] __do_fast_syscall_32+0x129/0x180 [ 995.427674][T18982] do_fast_syscall_32+0x6a/0xc0 [ 995.432517][T18982] do_SYSENTER_32+0x73/0x90 [ 995.436998][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.443293][T18982] [ 995.445603][T18982] Uninit was stored to memory at: [ 995.450620][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 995.456312][T18982] __msan_chain_origin+0x57/0xa0 [ 995.461224][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 995.466328][T18982] get_compat_msghdr+0x108/0x2b0 [ 995.471238][T18982] do_recvmmsg+0xdc7/0x22e0 [ 995.475715][T18982] __sys_recvmmsg+0x340/0x5f0 [ 995.480365][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.486406][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.492545][T18982] __do_fast_syscall_32+0x129/0x180 [ 995.497727][T18982] do_fast_syscall_32+0x6a/0xc0 [ 995.502566][T18982] do_SYSENTER_32+0x73/0x90 [ 995.507056][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.513369][T18982] [ 995.515683][T18982] Uninit was stored to memory at: [ 995.520700][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 995.526395][T18982] __msan_chain_origin+0x57/0xa0 [ 995.531305][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 995.536387][T18982] get_compat_msghdr+0x108/0x2b0 [ 995.541298][T18982] do_recvmmsg+0xdc7/0x22e0 [ 995.545779][T18982] __sys_recvmmsg+0x340/0x5f0 [ 995.550427][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.556471][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.562610][T18982] __do_fast_syscall_32+0x129/0x180 [ 995.567793][T18982] do_fast_syscall_32+0x6a/0xc0 [ 995.572621][T18982] do_SYSENTER_32+0x73/0x90 [ 995.577099][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.583396][T18982] [ 995.585722][T18982] Uninit was stored to memory at: [ 995.590724][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 995.596431][T18982] __msan_chain_origin+0x57/0xa0 [ 995.601339][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 995.606424][T18982] get_compat_msghdr+0x108/0x2b0 [ 995.611335][T18982] do_recvmmsg+0xdc7/0x22e0 [ 995.615825][T18982] __sys_recvmmsg+0x340/0x5f0 [ 995.620496][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.626540][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.632671][T18982] __do_fast_syscall_32+0x129/0x180 [ 995.637841][T18982] do_fast_syscall_32+0x6a/0xc0 [ 995.642676][T18982] do_SYSENTER_32+0x73/0x90 [ 995.647165][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.653460][T18982] [ 995.655774][T18982] Uninit was stored to memory at: [ 995.660775][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 995.666474][T18982] __msan_chain_origin+0x57/0xa0 [ 995.671403][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 995.676487][T18982] get_compat_msghdr+0x108/0x2b0 [ 995.681398][T18982] do_recvmmsg+0xdc7/0x22e0 [ 995.685882][T18982] __sys_recvmmsg+0x340/0x5f0 [ 995.690536][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.696590][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.702731][T18982] __do_fast_syscall_32+0x129/0x180 [ 995.707946][T18982] do_fast_syscall_32+0x6a/0xc0 [ 995.712773][T18982] do_SYSENTER_32+0x73/0x90 [ 995.717252][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.723554][T18982] [ 995.725871][T18982] Uninit was stored to memory at: [ 995.730986][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 995.736679][T18982] __msan_chain_origin+0x57/0xa0 [ 995.741603][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 995.746689][T18982] get_compat_msghdr+0x108/0x2b0 [ 995.751601][T18982] do_recvmmsg+0xdc7/0x22e0 [ 995.756079][T18982] __sys_recvmmsg+0x340/0x5f0 [ 995.760733][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 995.766776][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 995.772906][T18982] __do_fast_syscall_32+0x129/0x180 [ 995.778077][T18982] do_fast_syscall_32+0x6a/0xc0 [ 995.782910][T18982] do_SYSENTER_32+0x73/0x90 [ 995.787419][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 995.793710][T18982] [ 995.796009][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 995.802669][T18982] do_recvmmsg+0xc2/0x22e0 [ 995.807088][T18982] do_recvmmsg+0xc2/0x22e0 [ 996.158641][T18982] not chained 840000 origins [ 996.163265][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 996.171931][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.181984][T18982] Call Trace: [ 996.185281][T18982] dump_stack+0x21c/0x280 [ 996.189624][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 996.195351][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 996.201416][T18982] ? kmsan_get_metadata+0x116/0x180 [ 996.206621][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 996.212437][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 996.218505][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 996.223886][T18982] ? kmsan_get_metadata+0x116/0x180 [ 996.229127][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 996.234766][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 996.240836][T18982] ? _copy_from_user+0x201/0x310 [ 996.245770][T18982] ? kmsan_get_metadata+0x116/0x180 [ 996.250966][T18982] __msan_chain_origin+0x57/0xa0 [ 996.255899][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 996.261011][T18982] get_compat_msghdr+0x108/0x2b0 [ 996.265949][T18982] do_recvmmsg+0xdc7/0x22e0 [ 996.270449][T18982] ? kmsan_get_metadata+0x116/0x180 [ 996.275647][T18982] ? kmsan_get_metadata+0x116/0x180 [ 996.280841][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 996.286471][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 996.291752][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 996.296514][T18982] __sys_recvmmsg+0x340/0x5f0 [ 996.302314][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 996.308113][T18982] ? kmsan_get_metadata+0x116/0x180 [ 996.313305][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.319369][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.325521][T18982] __do_fast_syscall_32+0x129/0x180 [ 996.330716][T18982] do_fast_syscall_32+0x6a/0xc0 [ 996.335568][T18982] do_SYSENTER_32+0x73/0x90 [ 996.340071][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.346393][T18982] RIP: 0023:0xf7fe5549 [ 996.350458][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 996.370054][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 996.378460][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 996.386423][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 996.388919][T18985] not chained 850000 origins [ 996.394499][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 996.407003][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 996.414954][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 996.422905][T18982] Uninit was stored to memory at: [ 996.422917][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 996.422933][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.427940][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 996.436564][T18985] Call Trace: [ 996.446607][T18982] __msan_chain_origin+0x57/0xa0 [ 996.452306][T18985] dump_stack+0x21c/0x280 [ 996.455563][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 996.460472][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 996.464768][T18982] get_compat_msghdr+0x108/0x2b0 [ 996.469852][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 996.475542][T18982] do_recvmmsg+0xdc7/0x22e0 [ 996.480446][T18985] ? kmsan_get_metadata+0x116/0x180 [ 996.486500][T18982] __sys_recvmmsg+0x340/0x5f0 [ 996.490972][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 996.496143][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.500792][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 996.506580][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.512614][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 996.518655][T18982] __do_fast_syscall_32+0x129/0x180 [ 996.524779][T18985] ? __irq_exit_rcu+0x7a/0x270 [ 996.530121][T18982] do_fast_syscall_32+0x6a/0xc0 [ 996.535289][T18985] ? __msan_get_context_state+0x9/0x20 [ 996.540023][T18982] do_SYSENTER_32+0x73/0x90 [ 996.544842][T18985] ? kmsan_get_metadata+0x116/0x180 [ 996.550289][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.554762][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 996.559929][T18982] [ 996.566252][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 996.571839][T18982] Uninit was stored to memory at: [ 996.574152][T18985] ? _copy_from_user+0x201/0x310 [ 996.580189][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 996.585180][T18985] ? kmsan_get_metadata+0x116/0x180 [ 996.590093][T18982] __msan_chain_origin+0x57/0xa0 [ 996.595782][T18985] __msan_chain_origin+0x57/0xa0 [ 996.600947][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 996.605854][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 996.610763][T18982] get_compat_msghdr+0x108/0x2b0 [ 996.615846][T18985] get_compat_msghdr+0x108/0x2b0 [ 996.620944][T18982] do_recvmmsg+0xdc7/0x22e0 [ 996.625854][T18985] do_recvmmsg+0xdc7/0x22e0 [ 996.630761][T18982] __sys_recvmmsg+0x340/0x5f0 [ 996.635232][T18985] ? kmsan_get_metadata+0x116/0x180 [ 996.639708][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.644359][T18985] ? kmsan_get_metadata+0x116/0x180 [ 996.649530][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.655579][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 996.660745][T18982] __do_fast_syscall_32+0x129/0x180 [ 996.666868][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 996.672470][T18982] do_fast_syscall_32+0x6a/0xc0 [ 996.677652][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 996.682903][T18982] do_SYSENTER_32+0x73/0x90 [ 996.687730][T18985] __sys_recvmmsg+0x340/0x5f0 [ 996.692462][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.696936][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 996.701570][T18982] [ 996.707876][T18985] ? kmsan_get_metadata+0x116/0x180 [ 996.713642][T18982] Uninit was stored to memory at: [ 996.715956][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.721128][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 996.726136][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.732186][T18982] __msan_chain_origin+0x57/0xa0 [ 996.737875][T18985] __do_fast_syscall_32+0x129/0x180 [ 996.743995][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 996.748919][T18985] do_fast_syscall_32+0x6a/0xc0 [ 996.754084][T18982] get_compat_msghdr+0x108/0x2b0 [ 996.759178][T18985] do_SYSENTER_32+0x73/0x90 [ 996.764000][T18982] do_recvmmsg+0xdc7/0x22e0 [ 996.768907][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.773380][T18982] __sys_recvmmsg+0x340/0x5f0 [ 996.777849][T18985] RIP: 0023:0xf7fe5549 [ 996.784148][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.788797][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 996.792838][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.798867][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 996.818578][T18982] __do_fast_syscall_32+0x129/0x180 [ 996.824698][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 996.833091][T18982] do_fast_syscall_32+0x6a/0xc0 [ 996.838267][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 996.846228][T18982] do_SYSENTER_32+0x73/0x90 [ 996.851041][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 996.859008][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 996.863476][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 996.871414][T18982] [ 996.877718][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 996.885657][T18982] Uninit was stored to memory at: [ 996.887960][T18985] Uninit was stored to memory at: [ 996.895922][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 996.900916][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 996.905909][T18982] __msan_chain_origin+0x57/0xa0 [ 996.911597][T18985] __msan_chain_origin+0x57/0xa0 [ 996.917284][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 996.922192][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 996.927102][T18982] get_compat_msghdr+0x108/0x2b0 [ 996.932182][T18985] get_compat_msghdr+0x108/0x2b0 [ 996.937268][T18982] do_recvmmsg+0xdc7/0x22e0 [ 996.942174][T18985] do_recvmmsg+0xdc7/0x22e0 [ 996.947085][T18982] __sys_recvmmsg+0x340/0x5f0 [ 996.951561][T18985] __sys_recvmmsg+0x340/0x5f0 [ 996.956034][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.960697][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 996.965352][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.971383][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 996.977424][T18982] __do_fast_syscall_32+0x129/0x180 [ 996.983548][T18985] __do_fast_syscall_32+0x129/0x180 [ 996.989777][T18982] do_fast_syscall_32+0x6a/0xc0 [ 996.994961][T18985] do_fast_syscall_32+0x6a/0xc0 [ 997.000146][T18982] do_SYSENTER_32+0x73/0x90 [ 997.004967][T18985] do_SYSENTER_32+0x73/0x90 [ 997.009801][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.014276][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.018742][T18982] [ 997.025037][T18985] [ 997.031344][T18982] Uninit was stored to memory at: [ 997.033646][T18985] Uninit was stored to memory at: [ 997.035965][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 997.040957][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 997.045975][T18982] __msan_chain_origin+0x57/0xa0 [ 997.051669][T18985] __msan_chain_origin+0x57/0xa0 [ 997.057369][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 997.062379][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 997.067288][T18982] get_compat_msghdr+0x108/0x2b0 [ 997.072371][T18985] get_compat_msghdr+0x108/0x2b0 [ 997.077457][T18982] do_recvmmsg+0xdc7/0x22e0 [ 997.082366][T18985] do_recvmmsg+0xdc7/0x22e0 [ 997.087276][T18982] __sys_recvmmsg+0x340/0x5f0 [ 997.091753][T18985] __sys_recvmmsg+0x340/0x5f0 [ 997.096230][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.100880][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.105541][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.111577][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.117616][T18982] __do_fast_syscall_32+0x129/0x180 [ 997.123758][T18985] __do_fast_syscall_32+0x129/0x180 [ 997.129886][T18982] do_fast_syscall_32+0x6a/0xc0 [ 997.135060][T18985] do_fast_syscall_32+0x6a/0xc0 [ 997.140239][T18982] do_SYSENTER_32+0x73/0x90 [ 997.145061][T18985] do_SYSENTER_32+0x73/0x90 [ 997.149883][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.154356][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.158815][T18982] [ 997.165719][T18985] [ 997.172120][T18982] Uninit was stored to memory at: [ 997.174426][T18985] Uninit was stored to memory at: [ 997.176762][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 997.181755][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 997.186767][T18982] __msan_chain_origin+0x57/0xa0 [ 997.192715][T18985] __msan_chain_origin+0x57/0xa0 [ 997.198405][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 997.203310][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 997.208230][T18982] get_compat_msghdr+0x108/0x2b0 [ 997.213314][T18985] get_compat_msghdr+0x108/0x2b0 [ 997.218400][T18982] do_recvmmsg+0xdc7/0x22e0 [ 997.223320][T18985] do_recvmmsg+0xdc7/0x22e0 [ 997.228235][T18982] __sys_recvmmsg+0x340/0x5f0 [ 997.232707][T18985] __sys_recvmmsg+0x340/0x5f0 [ 997.237180][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.241828][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.246491][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.252528][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.258580][T18982] __do_fast_syscall_32+0x129/0x180 [ 997.264703][T18985] __do_fast_syscall_32+0x129/0x180 [ 997.270825][T18982] do_fast_syscall_32+0x6a/0xc0 [ 997.275993][T18985] do_fast_syscall_32+0x6a/0xc0 [ 997.281161][T18982] do_SYSENTER_32+0x73/0x90 [ 997.285982][T18985] do_SYSENTER_32+0x73/0x90 [ 997.290803][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.295274][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.299733][T18982] [ 997.306029][T18985] [ 997.312332][T18982] Uninit was stored to memory at: [ 997.314633][T18985] Uninit was stored to memory at: [ 997.317076][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 997.322070][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 997.327068][T18982] __msan_chain_origin+0x57/0xa0 [ 997.332756][T18985] __msan_chain_origin+0x57/0xa0 [ 997.338442][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 997.343348][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 997.348257][T18982] get_compat_msghdr+0x108/0x2b0 [ 997.353337][T18985] get_compat_msghdr+0x108/0x2b0 [ 997.358420][T18982] do_recvmmsg+0xdc7/0x22e0 [ 997.363343][T18985] do_recvmmsg+0xdc7/0x22e0 [ 997.368253][T18982] __sys_recvmmsg+0x340/0x5f0 [ 997.372729][T18985] __sys_recvmmsg+0x340/0x5f0 [ 997.377204][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.381864][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.386513][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.392727][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.398760][T18982] __do_fast_syscall_32+0x129/0x180 [ 997.404881][T18985] __do_fast_syscall_32+0x129/0x180 [ 997.411016][T18982] do_fast_syscall_32+0x6a/0xc0 [ 997.416183][T18985] do_fast_syscall_32+0x6a/0xc0 [ 997.421351][T18982] do_SYSENTER_32+0x73/0x90 [ 997.426171][T18985] do_SYSENTER_32+0x73/0x90 [ 997.430997][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.435479][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.439953][T18982] [ 997.446261][T18985] [ 997.452557][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 997.454855][T18985] Uninit was stored to memory at: [ 997.457169][T18982] do_recvmmsg+0xc2/0x22e0 [ 997.463814][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 997.468811][T18982] do_recvmmsg+0xc2/0x22e0 [ 997.473198][T18985] __msan_chain_origin+0x57/0xa0 [ 997.488192][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 997.493298][T18985] get_compat_msghdr+0x108/0x2b0 [ 997.498233][T18985] do_recvmmsg+0xdc7/0x22e0 [ 997.502737][T18985] __sys_recvmmsg+0x340/0x5f0 [ 997.507412][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.513479][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.519629][T18985] __do_fast_syscall_32+0x129/0x180 [ 997.524935][T18985] do_fast_syscall_32+0x6a/0xc0 [ 997.529817][T18985] do_SYSENTER_32+0x73/0x90 [ 997.534325][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.540633][T18985] [ 997.542949][T18985] Uninit was stored to memory at: [ 997.548057][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 997.553813][T18985] __msan_chain_origin+0x57/0xa0 [ 997.558759][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 997.563873][T18985] get_compat_msghdr+0x108/0x2b0 [ 997.568816][T18985] do_recvmmsg+0xdc7/0x22e0 [ 997.573326][T18985] __sys_recvmmsg+0x340/0x5f0 [ 997.578005][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.584076][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.590237][T18985] __do_fast_syscall_32+0x129/0x180 [ 997.595426][T18985] do_fast_syscall_32+0x6a/0xc0 [ 997.600281][T18985] do_SYSENTER_32+0x73/0x90 [ 997.605292][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.611680][T18985] [ 997.613987][T18985] Uninit was stored to memory at: [ 997.619001][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 997.624737][T18985] __msan_chain_origin+0x57/0xa0 [ 997.629671][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 997.634767][T18985] get_compat_msghdr+0x108/0x2b0 [ 997.639690][T18985] do_recvmmsg+0xdc7/0x22e0 [ 997.644183][T18985] __sys_recvmmsg+0x340/0x5f0 [ 997.648849][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 997.654903][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 997.661042][T18985] __do_fast_syscall_32+0x129/0x180 [ 997.666227][T18985] do_fast_syscall_32+0x6a/0xc0 [ 997.671062][T18985] do_SYSENTER_32+0x73/0x90 [ 997.675554][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 997.681855][T18985] [ 997.684164][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 997.690823][T18985] do_recvmmsg+0xc2/0x22e0 [ 997.695236][T18985] do_recvmmsg+0xc2/0x22e0 [ 998.063340][T18982] not chained 860000 origins [ 998.067985][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 998.076730][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.086777][T18982] Call Trace: [ 998.090068][T18982] dump_stack+0x21c/0x280 [ 998.094399][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 998.100117][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 998.106198][T18982] ? kmsan_get_metadata+0x116/0x180 [ 998.111383][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 998.117179][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 998.123236][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 998.128594][T18982] ? kmsan_get_metadata+0x116/0x180 [ 998.133783][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 998.139403][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 998.145457][T18982] ? _copy_from_user+0x201/0x310 [ 998.150379][T18982] ? kmsan_get_metadata+0x116/0x180 [ 998.155565][T18982] __msan_chain_origin+0x57/0xa0 [ 998.160493][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 998.165613][T18982] get_compat_msghdr+0x108/0x2b0 [ 998.170570][T18982] do_recvmmsg+0xdc7/0x22e0 [ 998.175363][T18982] ? kmsan_get_metadata+0x116/0x180 [ 998.180570][T18982] ? kmsan_get_metadata+0x116/0x180 [ 998.185872][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 998.191500][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 998.196778][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 998.201536][T18982] __sys_recvmmsg+0x340/0x5f0 [ 998.206203][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 998.211996][T18982] ? kmsan_get_metadata+0x116/0x180 [ 998.217187][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.223248][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.229391][T18982] __do_fast_syscall_32+0x129/0x180 [ 998.234582][T18982] do_fast_syscall_32+0x6a/0xc0 [ 998.239431][T18982] do_SYSENTER_32+0x73/0x90 [ 998.243926][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.250234][T18982] RIP: 0023:0xf7fe5549 [ 998.254294][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 998.273889][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 998.282298][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 998.290255][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 998.298211][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 998.306168][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 998.314124][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 998.322079][T18982] Uninit was stored to memory at: [ 998.327095][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 998.332803][T18982] __msan_chain_origin+0x57/0xa0 [ 998.337728][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 998.342823][T18982] get_compat_msghdr+0x108/0x2b0 [ 998.347746][T18982] do_recvmmsg+0xdc7/0x22e0 [ 998.352234][T18982] __sys_recvmmsg+0x340/0x5f0 [ 998.356896][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.363038][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.369177][T18982] __do_fast_syscall_32+0x129/0x180 [ 998.374359][T18982] do_fast_syscall_32+0x6a/0xc0 [ 998.379194][T18982] do_SYSENTER_32+0x73/0x90 [ 998.383683][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.389985][T18982] [ 998.392294][T18982] Uninit was stored to memory at: [ 998.397308][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 998.403013][T18982] __msan_chain_origin+0x57/0xa0 [ 998.407933][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 998.413040][T18982] get_compat_msghdr+0x108/0x2b0 [ 998.417962][T18982] do_recvmmsg+0xdc7/0x22e0 [ 998.422451][T18982] __sys_recvmmsg+0x340/0x5f0 [ 998.427113][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.433177][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.439319][T18982] __do_fast_syscall_32+0x129/0x180 [ 998.444503][T18982] do_fast_syscall_32+0x6a/0xc0 [ 998.449343][T18982] do_SYSENTER_32+0x73/0x90 [ 998.453831][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.460131][T18982] [ 998.462437][T18982] Uninit was stored to memory at: [ 998.467448][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 998.473152][T18982] __msan_chain_origin+0x57/0xa0 [ 998.478075][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 998.483169][T18982] get_compat_msghdr+0x108/0x2b0 [ 998.488092][T18982] do_recvmmsg+0xdc7/0x22e0 [ 998.492668][T18982] __sys_recvmmsg+0x340/0x5f0 [ 998.497332][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.503385][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.509524][T18982] __do_fast_syscall_32+0x129/0x180 [ 998.514709][T18982] do_fast_syscall_32+0x6a/0xc0 [ 998.519543][T18982] do_SYSENTER_32+0x73/0x90 [ 998.524034][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.530334][T18982] [ 998.532642][T18982] Uninit was stored to memory at: [ 998.537655][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 998.543359][T18982] __msan_chain_origin+0x57/0xa0 [ 998.548279][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 998.553373][T18982] get_compat_msghdr+0x108/0x2b0 [ 998.558298][T18982] do_recvmmsg+0xdc7/0x22e0 [ 998.562790][T18982] __sys_recvmmsg+0x340/0x5f0 [ 998.567457][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.573525][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.579665][T18982] __do_fast_syscall_32+0x129/0x180 [ 998.584848][T18982] do_fast_syscall_32+0x6a/0xc0 [ 998.589681][T18982] do_SYSENTER_32+0x73/0x90 [ 998.594170][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.600470][T18982] [ 998.602779][T18982] Uninit was stored to memory at: [ 998.607808][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 998.613513][T18982] __msan_chain_origin+0x57/0xa0 [ 998.618448][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 998.623633][T18982] get_compat_msghdr+0x108/0x2b0 [ 998.628555][T18982] do_recvmmsg+0xdc7/0x22e0 [ 998.633044][T18982] __sys_recvmmsg+0x340/0x5f0 [ 998.637719][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.643772][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.649915][T18982] __do_fast_syscall_32+0x129/0x180 [ 998.655101][T18982] do_fast_syscall_32+0x6a/0xc0 [ 998.659938][T18982] do_SYSENTER_32+0x73/0x90 [ 998.664428][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.670730][T18982] [ 998.673036][T18982] Uninit was stored to memory at: [ 998.678064][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 998.683768][T18982] __msan_chain_origin+0x57/0xa0 [ 998.688694][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 998.693790][T18982] get_compat_msghdr+0x108/0x2b0 [ 998.698720][T18982] do_recvmmsg+0xdc7/0x22e0 [ 998.703209][T18982] __sys_recvmmsg+0x340/0x5f0 [ 998.707872][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.713925][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.720066][T18982] __do_fast_syscall_32+0x129/0x180 [ 998.725262][T18982] do_fast_syscall_32+0x6a/0xc0 [ 998.730096][T18982] do_SYSENTER_32+0x73/0x90 [ 998.734586][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.740887][T18982] [ 998.743194][T18982] Uninit was stored to memory at: [ 998.748207][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 998.753913][T18982] __msan_chain_origin+0x57/0xa0 [ 998.758836][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 998.763932][T18982] get_compat_msghdr+0x108/0x2b0 [ 998.768853][T18982] do_recvmmsg+0xdc7/0x22e0 [ 998.773340][T18982] __sys_recvmmsg+0x340/0x5f0 [ 998.778024][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 998.784075][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 998.790213][T18982] __do_fast_syscall_32+0x129/0x180 [ 998.795395][T18982] do_fast_syscall_32+0x6a/0xc0 [ 998.800228][T18982] do_SYSENTER_32+0x73/0x90 [ 998.804718][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 998.811018][T18982] [ 998.813328][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 998.819990][T18982] do_recvmmsg+0xc2/0x22e0 [ 998.824392][T18982] do_recvmmsg+0xc2/0x22e0 [ 999.090335][T18985] not chained 870000 origins [ 999.094958][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 999.103619][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.113665][T18985] Call Trace: [ 999.116958][T18985] dump_stack+0x21c/0x280 [ 999.121287][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 999.127006][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 999.133069][T18985] ? kmsan_get_metadata+0x116/0x180 [ 999.138265][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 999.144072][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 999.150131][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 999.155535][T18985] ? kmsan_get_metadata+0x116/0x180 [ 999.160734][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 999.166409][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 999.172480][T18985] ? _copy_from_user+0x201/0x310 [ 999.177416][T18985] ? kmsan_get_metadata+0x116/0x180 [ 999.182615][T18985] __msan_chain_origin+0x57/0xa0 [ 999.187554][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 999.192669][T18985] get_compat_msghdr+0x108/0x2b0 [ 999.197611][T18985] do_recvmmsg+0xdc7/0x22e0 [ 999.202117][T18985] ? kmsan_get_metadata+0x116/0x180 [ 999.207318][T18985] ? kmsan_get_metadata+0x116/0x180 [ 999.212518][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 999.218149][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 999.223446][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 999.228246][T18985] __sys_recvmmsg+0x340/0x5f0 [ 999.232922][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 999.238723][T18985] ? kmsan_get_metadata+0x116/0x180 [ 999.243923][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.250023][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.256182][T18985] __do_fast_syscall_32+0x129/0x180 [ 999.261382][T18985] do_fast_syscall_32+0x6a/0xc0 [ 999.266230][T18985] do_SYSENTER_32+0x73/0x90 [ 999.270734][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.277059][T18985] RIP: 0023:0xf7fe5549 [ 999.281136][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 999.300737][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 999.309150][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 999.317118][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 999.325084][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 999.333049][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 999.341013][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 999.348976][T18985] Uninit was stored to memory at: [ 999.354004][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 999.359724][T18985] __msan_chain_origin+0x57/0xa0 [ 999.364657][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 999.369782][T18985] get_compat_msghdr+0x108/0x2b0 [ 999.374719][T18985] do_recvmmsg+0xdc7/0x22e0 [ 999.379217][T18985] __sys_recvmmsg+0x340/0x5f0 [ 999.383888][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.389949][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.396099][T18985] __do_fast_syscall_32+0x129/0x180 [ 999.401292][T18985] do_fast_syscall_32+0x6a/0xc0 [ 999.406137][T18985] do_SYSENTER_32+0x73/0x90 [ 999.410641][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.416947][T18985] [ 999.419263][T18985] Uninit was stored to memory at: [ 999.424286][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 999.430001][T18985] __msan_chain_origin+0x57/0xa0 [ 999.434931][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 999.440035][T18985] get_compat_msghdr+0x108/0x2b0 [ 999.444970][T18985] do_recvmmsg+0xdc7/0x22e0 [ 999.449469][T18985] __sys_recvmmsg+0x340/0x5f0 [ 999.454141][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.460205][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.466461][T18985] __do_fast_syscall_32+0x129/0x180 [ 999.471652][T18985] do_fast_syscall_32+0x6a/0xc0 [ 999.476498][T18985] do_SYSENTER_32+0x73/0x90 [ 999.480999][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.487313][T18985] [ 999.489630][T18985] Uninit was stored to memory at: [ 999.494653][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 999.500366][T18985] __msan_chain_origin+0x57/0xa0 [ 999.505299][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 999.510407][T18985] get_compat_msghdr+0x108/0x2b0 [ 999.515342][T18985] do_recvmmsg+0xdc7/0x22e0 [ 999.519842][T18985] __sys_recvmmsg+0x340/0x5f0 [ 999.524517][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.530581][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.536733][T18985] __do_fast_syscall_32+0x129/0x180 [ 999.541928][T18985] do_fast_syscall_32+0x6a/0xc0 [ 999.546780][T18985] do_SYSENTER_32+0x73/0x90 [ 999.551298][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.557603][T18985] [ 999.559919][T18985] Uninit was stored to memory at: [ 999.564942][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 999.570658][T18985] __msan_chain_origin+0x57/0xa0 [ 999.575590][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 999.580699][T18985] get_compat_msghdr+0x108/0x2b0 [ 999.585630][T18985] do_recvmmsg+0xdc7/0x22e0 [ 999.590166][T18985] __sys_recvmmsg+0x340/0x5f0 [ 999.594840][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.600902][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.607086][T18985] __do_fast_syscall_32+0x129/0x180 [ 999.612281][T18985] do_fast_syscall_32+0x6a/0xc0 [ 999.617125][T18985] do_SYSENTER_32+0x73/0x90 [ 999.621623][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.627933][T18985] [ 999.630246][T18985] Uninit was stored to memory at: [ 999.635268][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 999.640979][T18985] __msan_chain_origin+0x57/0xa0 [ 999.645907][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 999.651006][T18985] get_compat_msghdr+0x108/0x2b0 [ 999.655937][T18985] do_recvmmsg+0xdc7/0x22e0 [ 999.660431][T18985] __sys_recvmmsg+0x340/0x5f0 [ 999.665100][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.671158][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.677304][T18985] __do_fast_syscall_32+0x129/0x180 [ 999.682494][T18985] do_fast_syscall_32+0x6a/0xc0 [ 999.687335][T18985] do_SYSENTER_32+0x73/0x90 [ 999.691838][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.698140][T18985] [ 999.700450][T18985] Uninit was stored to memory at: [ 999.705469][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 999.711179][T18985] __msan_chain_origin+0x57/0xa0 [ 999.716112][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 999.721216][T18985] get_compat_msghdr+0x108/0x2b0 [ 999.726143][T18985] do_recvmmsg+0xdc7/0x22e0 [ 999.730631][T18985] __sys_recvmmsg+0x340/0x5f0 [ 999.735292][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.741342][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.747483][T18985] __do_fast_syscall_32+0x129/0x180 [ 999.752665][T18985] do_fast_syscall_32+0x6a/0xc0 [ 999.757519][T18985] do_SYSENTER_32+0x73/0x90 [ 999.762008][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.768309][T18985] [ 999.770617][T18985] Uninit was stored to memory at: [ 999.775630][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 999.781337][T18985] __msan_chain_origin+0x57/0xa0 [ 999.786257][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 999.791349][T18985] get_compat_msghdr+0x108/0x2b0 [ 999.796300][T18985] do_recvmmsg+0xdc7/0x22e0 [ 999.800791][T18985] __sys_recvmmsg+0x340/0x5f0 [ 999.805455][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 999.811506][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 999.817662][T18985] __do_fast_syscall_32+0x129/0x180 [ 999.822846][T18985] do_fast_syscall_32+0x6a/0xc0 [ 999.827683][T18985] do_SYSENTER_32+0x73/0x90 [ 999.832172][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 999.838473][T18985] [ 999.840780][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 999.847440][T18985] do_recvmmsg+0xc2/0x22e0 [ 999.851840][T18985] do_recvmmsg+0xc2/0x22e0 [ 999.975387][T18985] not chained 880000 origins [ 999.980028][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 999.988694][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.998743][T18985] Call Trace: [ 1000.002037][T18985] dump_stack+0x21c/0x280 [ 1000.006371][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1000.012102][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1000.018165][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1000.023364][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1000.029186][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1000.035251][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1000.040626][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1000.045826][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1000.051449][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1000.057544][T18985] ? _copy_from_user+0x201/0x310 [ 1000.062456][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1000.067667][T18985] __msan_chain_origin+0x57/0xa0 [ 1000.072583][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1000.077672][T18985] get_compat_msghdr+0x108/0x2b0 [ 1000.082588][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1000.087107][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1000.092281][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1000.097496][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1000.103116][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1000.108415][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1000.113198][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1000.117849][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1000.123631][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1000.128805][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.134847][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.140987][T18985] __do_fast_syscall_32+0x129/0x180 [ 1000.146159][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1000.151509][T18985] do_SYSENTER_32+0x73/0x90 [ 1000.155998][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.162309][T18985] RIP: 0023:0xf7fe5549 [ 1000.166355][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1000.185981][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1000.194369][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1000.202350][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1000.210294][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1000.218238][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1000.226187][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1000.234135][T18985] Uninit was stored to memory at: [ 1000.239160][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1000.244854][T18985] __msan_chain_origin+0x57/0xa0 [ 1000.249765][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1000.254964][T18985] get_compat_msghdr+0x108/0x2b0 [ 1000.259874][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1000.264350][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1000.269006][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.275044][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.281170][T18985] __do_fast_syscall_32+0x129/0x180 [ 1000.286354][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1000.291173][T18985] do_SYSENTER_32+0x73/0x90 [ 1000.295662][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.301954][T18985] [ 1000.304252][T18985] Uninit was stored to memory at: [ 1000.309251][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1000.314954][T18985] __msan_chain_origin+0x57/0xa0 [ 1000.319884][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1000.325489][T18985] get_compat_msghdr+0x108/0x2b0 [ 1000.330420][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1000.334985][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1000.339646][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.345717][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.351871][T18985] __do_fast_syscall_32+0x129/0x180 [ 1000.357059][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1000.361896][T18985] do_SYSENTER_32+0x73/0x90 [ 1000.366384][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.372683][T18985] [ 1000.374993][T18985] Uninit was stored to memory at: [ 1000.380006][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1000.385715][T18985] __msan_chain_origin+0x57/0xa0 [ 1000.390639][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1000.395733][T18985] get_compat_msghdr+0x108/0x2b0 [ 1000.400654][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1000.405142][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1000.409803][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.415852][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.421990][T18985] __do_fast_syscall_32+0x129/0x180 [ 1000.427171][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1000.432011][T18985] do_SYSENTER_32+0x73/0x90 [ 1000.436502][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.442801][T18985] [ 1000.445106][T18985] Uninit was stored to memory at: [ 1000.450118][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1000.455842][T18985] __msan_chain_origin+0x57/0xa0 [ 1000.460764][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1000.465857][T18985] get_compat_msghdr+0x108/0x2b0 [ 1000.470778][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1000.475265][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1000.479925][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.485976][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.492115][T18985] __do_fast_syscall_32+0x129/0x180 [ 1000.497296][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1000.502130][T18985] do_SYSENTER_32+0x73/0x90 [ 1000.506617][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.512914][T18985] [ 1000.515223][T18985] Uninit was stored to memory at: [ 1000.520234][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1000.525941][T18985] __msan_chain_origin+0x57/0xa0 [ 1000.530863][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1000.535958][T18985] get_compat_msghdr+0x108/0x2b0 [ 1000.540889][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1000.545377][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1000.550039][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.556090][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.562228][T18985] __do_fast_syscall_32+0x129/0x180 [ 1000.567411][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1000.572244][T18985] do_SYSENTER_32+0x73/0x90 [ 1000.576734][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.583032][T18985] [ 1000.585339][T18985] Uninit was stored to memory at: [ 1000.590351][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1000.596057][T18985] __msan_chain_origin+0x57/0xa0 [ 1000.600978][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1000.606072][T18985] get_compat_msghdr+0x108/0x2b0 [ 1000.610996][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1000.615495][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1000.620156][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.626210][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.632350][T18985] __do_fast_syscall_32+0x129/0x180 [ 1000.637547][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1000.642380][T18985] do_SYSENTER_32+0x73/0x90 [ 1000.646870][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.653170][T18985] [ 1000.655479][T18985] Uninit was stored to memory at: [ 1000.660491][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1000.666196][T18985] __msan_chain_origin+0x57/0xa0 [ 1000.671120][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1000.676214][T18985] get_compat_msghdr+0x108/0x2b0 [ 1000.681137][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1000.685627][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1000.690287][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1000.696341][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1000.702482][T18985] __do_fast_syscall_32+0x129/0x180 [ 1000.707665][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1000.712499][T18985] do_SYSENTER_32+0x73/0x90 [ 1000.716990][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1000.723288][T18985] [ 1000.725596][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1000.732253][T18985] do_recvmmsg+0xc2/0x22e0 [ 1000.736654][T18985] do_recvmmsg+0xc2/0x22e0 [ 1000.998900][T18982] not chained 890000 origins [ 1001.003524][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1001.012190][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.022246][T18982] Call Trace: [ 1001.025544][T18982] dump_stack+0x21c/0x280 [ 1001.029877][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 1001.035604][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1001.041664][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1001.046861][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1001.052669][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1001.058733][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1001.064103][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1001.069299][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1001.074932][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1001.080998][T18982] ? _copy_from_user+0x201/0x310 [ 1001.085935][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1001.091134][T18982] __msan_chain_origin+0x57/0xa0 [ 1001.096067][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1001.101176][T18982] get_compat_msghdr+0x108/0x2b0 [ 1001.106117][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1001.110620][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1001.115821][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1001.121016][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1001.126649][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 1001.131934][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 1001.136694][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1001.141368][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1001.147170][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1001.152368][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.158436][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.164692][T18982] __do_fast_syscall_32+0x129/0x180 [ 1001.169893][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1001.174744][T18982] do_SYSENTER_32+0x73/0x90 [ 1001.179246][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.185574][T18982] RIP: 0023:0xf7fe5549 [ 1001.189640][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1001.209243][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1001.217654][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1001.225625][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1001.233607][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1001.241666][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1001.249634][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1001.257619][T18982] Uninit was stored to memory at: [ 1001.262655][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1001.268398][T18982] __msan_chain_origin+0x57/0xa0 [ 1001.273344][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1001.278445][T18982] get_compat_msghdr+0x108/0x2b0 [ 1001.283374][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1001.287869][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1001.292544][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.298615][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.304756][T18982] __do_fast_syscall_32+0x129/0x180 [ 1001.309938][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1001.314776][T18982] do_SYSENTER_32+0x73/0x90 [ 1001.319264][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.325562][T18982] [ 1001.327871][T18982] Uninit was stored to memory at: [ 1001.332886][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1001.338591][T18982] __msan_chain_origin+0x57/0xa0 [ 1001.343513][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1001.348606][T18982] get_compat_msghdr+0x108/0x2b0 [ 1001.353532][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1001.358021][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1001.362685][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.368738][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.374878][T18982] __do_fast_syscall_32+0x129/0x180 [ 1001.380063][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1001.384902][T18982] do_SYSENTER_32+0x73/0x90 [ 1001.389391][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.395691][T18982] [ 1001.397997][T18982] Uninit was stored to memory at: [ 1001.403008][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1001.408714][T18982] __msan_chain_origin+0x57/0xa0 [ 1001.413634][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1001.418726][T18982] get_compat_msghdr+0x108/0x2b0 [ 1001.423649][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1001.428138][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1001.432800][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.438854][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.444991][T18982] __do_fast_syscall_32+0x129/0x180 [ 1001.450173][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1001.455009][T18982] do_SYSENTER_32+0x73/0x90 [ 1001.459498][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.465797][T18982] [ 1001.468106][T18982] Uninit was stored to memory at: [ 1001.473116][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1001.478828][T18982] __msan_chain_origin+0x57/0xa0 [ 1001.483749][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1001.488844][T18982] get_compat_msghdr+0x108/0x2b0 [ 1001.493767][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1001.498254][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1001.502915][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.508964][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.515100][T18982] __do_fast_syscall_32+0x129/0x180 [ 1001.520282][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1001.525114][T18982] do_SYSENTER_32+0x73/0x90 [ 1001.529605][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.535906][T18982] [ 1001.538211][T18982] Uninit was stored to memory at: [ 1001.543226][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1001.548930][T18982] __msan_chain_origin+0x57/0xa0 [ 1001.553854][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1001.558948][T18982] get_compat_msghdr+0x108/0x2b0 [ 1001.563870][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1001.568360][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1001.573021][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.579074][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.585214][T18982] __do_fast_syscall_32+0x129/0x180 [ 1001.590394][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1001.595229][T18982] do_SYSENTER_32+0x73/0x90 [ 1001.599717][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.606016][T18982] [ 1001.608323][T18982] Uninit was stored to memory at: [ 1001.613372][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1001.619078][T18982] __msan_chain_origin+0x57/0xa0 [ 1001.624004][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1001.629098][T18982] get_compat_msghdr+0x108/0x2b0 [ 1001.634020][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1001.638520][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1001.643180][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.649231][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.655372][T18982] __do_fast_syscall_32+0x129/0x180 [ 1001.660555][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1001.665390][T18982] do_SYSENTER_32+0x73/0x90 [ 1001.669879][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.676179][T18982] [ 1001.678488][T18982] Uninit was stored to memory at: [ 1001.683501][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1001.689205][T18982] __msan_chain_origin+0x57/0xa0 [ 1001.694126][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1001.699223][T18982] get_compat_msghdr+0x108/0x2b0 [ 1001.704144][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1001.708630][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1001.713301][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1001.719355][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1001.725494][T18982] __do_fast_syscall_32+0x129/0x180 [ 1001.730696][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1001.735532][T18982] do_SYSENTER_32+0x73/0x90 [ 1001.740022][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1001.746336][T18982] [ 1001.748648][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 1001.755307][T18982] do_recvmmsg+0xc2/0x22e0 [ 1001.759709][T18982] do_recvmmsg+0xc2/0x22e0 [ 1001.920329][T18985] not chained 900000 origins [ 1001.924960][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1001.933621][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.943669][T18985] Call Trace: [ 1001.946962][T18985] dump_stack+0x21c/0x280 [ 1001.951297][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1001.957026][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1001.963091][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1001.968294][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1001.974107][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1001.980171][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1001.985541][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1001.990784][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1001.996422][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1002.002490][T18985] ? _copy_from_user+0x201/0x310 [ 1002.007421][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1002.012618][T18985] __msan_chain_origin+0x57/0xa0 [ 1002.017555][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1002.022685][T18985] get_compat_msghdr+0x108/0x2b0 [ 1002.027649][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1002.032154][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1002.037355][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1002.042557][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1002.048187][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1002.053469][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1002.058230][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1002.062906][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1002.068709][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1002.073913][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.079981][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.086134][T18985] __do_fast_syscall_32+0x129/0x180 [ 1002.091334][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1002.096183][T18985] do_SYSENTER_32+0x73/0x90 [ 1002.100684][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.107003][T18985] RIP: 0023:0xf7fe5549 [ 1002.111070][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1002.130667][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1002.139091][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1002.147057][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1002.155023][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1002.162983][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1002.170951][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1002.178923][T18985] Uninit was stored to memory at: [ 1002.183947][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1002.189656][T18985] __msan_chain_origin+0x57/0xa0 [ 1002.194586][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1002.199685][T18985] get_compat_msghdr+0x108/0x2b0 [ 1002.204615][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1002.209111][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1002.213778][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.219833][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.225972][T18985] __do_fast_syscall_32+0x129/0x180 [ 1002.231154][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1002.235989][T18985] do_SYSENTER_32+0x73/0x90 [ 1002.240491][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.246790][T18985] [ 1002.249101][T18985] Uninit was stored to memory at: [ 1002.254120][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1002.259824][T18985] __msan_chain_origin+0x57/0xa0 [ 1002.264745][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1002.269839][T18985] get_compat_msghdr+0x108/0x2b0 [ 1002.274766][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1002.279256][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1002.283931][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.290089][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.296242][T18985] __do_fast_syscall_32+0x129/0x180 [ 1002.301433][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1002.306272][T18985] do_SYSENTER_32+0x73/0x90 [ 1002.310780][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.317079][T18985] [ 1002.319388][T18985] Uninit was stored to memory at: [ 1002.324402][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1002.330107][T18985] __msan_chain_origin+0x57/0xa0 [ 1002.335030][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1002.340123][T18985] get_compat_msghdr+0x108/0x2b0 [ 1002.345044][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1002.349620][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1002.354284][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.360336][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.366474][T18985] __do_fast_syscall_32+0x129/0x180 [ 1002.371675][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1002.376516][T18985] do_SYSENTER_32+0x73/0x90 [ 1002.381018][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.387317][T18985] [ 1002.389624][T18985] Uninit was stored to memory at: [ 1002.394635][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1002.400338][T18985] __msan_chain_origin+0x57/0xa0 [ 1002.405258][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1002.410350][T18985] get_compat_msghdr+0x108/0x2b0 [ 1002.415272][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1002.419760][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1002.424427][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.430480][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.436620][T18985] __do_fast_syscall_32+0x129/0x180 [ 1002.441809][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1002.450113][T18985] do_SYSENTER_32+0x73/0x90 [ 1002.454619][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.460933][T18985] [ 1002.463246][T18985] Uninit was stored to memory at: [ 1002.468263][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1002.474227][T18985] __msan_chain_origin+0x57/0xa0 [ 1002.479267][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1002.484365][T18985] get_compat_msghdr+0x108/0x2b0 [ 1002.489289][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1002.493981][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1002.498653][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.504707][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.510849][T18985] __do_fast_syscall_32+0x129/0x180 [ 1002.516031][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1002.520865][T18985] do_SYSENTER_32+0x73/0x90 [ 1002.525354][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.531652][T18985] [ 1002.533959][T18985] Uninit was stored to memory at: [ 1002.538971][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1002.544677][T18985] __msan_chain_origin+0x57/0xa0 [ 1002.549599][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1002.554695][T18985] get_compat_msghdr+0x108/0x2b0 [ 1002.559622][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1002.564115][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1002.568779][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.574835][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.580984][T18985] __do_fast_syscall_32+0x129/0x180 [ 1002.586176][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1002.591011][T18985] do_SYSENTER_32+0x73/0x90 [ 1002.595503][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.601803][T18985] [ 1002.604112][T18985] Uninit was stored to memory at: [ 1002.609122][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1002.614826][T18985] __msan_chain_origin+0x57/0xa0 [ 1002.619749][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1002.624845][T18985] get_compat_msghdr+0x108/0x2b0 [ 1002.629771][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1002.634257][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1002.638933][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1002.644983][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1002.651131][T18985] __do_fast_syscall_32+0x129/0x180 [ 1002.656313][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1002.661147][T18985] do_SYSENTER_32+0x73/0x90 [ 1002.665635][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.671933][T18985] [ 1002.674242][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1002.680898][T18985] do_recvmmsg+0xc2/0x22e0 [ 1002.685301][T18985] do_recvmmsg+0xc2/0x22e0 [ 1002.869972][T18985] not chained 910000 origins [ 1002.874597][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1002.883258][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.893304][T18985] Call Trace: [ 1002.896601][T18985] dump_stack+0x21c/0x280 [ 1002.900931][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1002.906652][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1002.912715][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1002.917913][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1002.923717][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1002.929800][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1002.935176][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1002.940369][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1002.945992][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1002.952043][T18985] ? _copy_from_user+0x201/0x310 [ 1002.956965][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1002.962149][T18985] __msan_chain_origin+0x57/0xa0 [ 1002.967073][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1002.972176][T18985] get_compat_msghdr+0x108/0x2b0 [ 1002.977102][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1002.981600][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1002.986786][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1002.991978][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1002.997612][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1003.002896][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1003.007651][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1003.012316][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1003.018111][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1003.023305][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.029368][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.035519][T18985] __do_fast_syscall_32+0x129/0x180 [ 1003.040709][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1003.045551][T18985] do_SYSENTER_32+0x73/0x90 [ 1003.050045][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.056355][T18985] RIP: 0023:0xf7fe5549 [ 1003.060409][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1003.079998][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1003.088393][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1003.096348][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1003.104303][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1003.112258][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1003.120210][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1003.128164][T18985] Uninit was stored to memory at: [ 1003.133180][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1003.138882][T18985] __msan_chain_origin+0x57/0xa0 [ 1003.143890][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1003.148983][T18985] get_compat_msghdr+0x108/0x2b0 [ 1003.153906][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1003.158393][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1003.163054][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.169120][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.175292][T18985] __do_fast_syscall_32+0x129/0x180 [ 1003.180489][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1003.185335][T18985] do_SYSENTER_32+0x73/0x90 [ 1003.189832][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.196133][T18985] [ 1003.198444][T18985] Uninit was stored to memory at: [ 1003.203462][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1003.209173][T18985] __msan_chain_origin+0x57/0xa0 [ 1003.214096][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1003.219190][T18985] get_compat_msghdr+0x108/0x2b0 [ 1003.224113][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1003.228610][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1003.233273][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.239602][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.245755][T18985] __do_fast_syscall_32+0x129/0x180 [ 1003.250950][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1003.255791][T18985] do_SYSENTER_32+0x73/0x90 [ 1003.260286][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.266588][T18985] [ 1003.268895][T18985] Uninit was stored to memory at: [ 1003.273909][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1003.279613][T18985] __msan_chain_origin+0x57/0xa0 [ 1003.284537][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1003.289631][T18985] get_compat_msghdr+0x108/0x2b0 [ 1003.294555][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1003.299044][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1003.303707][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.309759][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.315905][T18985] __do_fast_syscall_32+0x129/0x180 [ 1003.321086][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1003.325919][T18985] do_SYSENTER_32+0x73/0x90 [ 1003.330406][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.336706][T18985] [ 1003.339014][T18985] Uninit was stored to memory at: [ 1003.344025][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1003.349731][T18985] __msan_chain_origin+0x57/0xa0 [ 1003.354654][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1003.359837][T18985] get_compat_msghdr+0x108/0x2b0 [ 1003.364762][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1003.369250][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1003.373910][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.379961][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.386100][T18985] __do_fast_syscall_32+0x129/0x180 [ 1003.391279][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1003.396114][T18985] do_SYSENTER_32+0x73/0x90 [ 1003.400601][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.406899][T18985] [ 1003.409204][T18985] Uninit was stored to memory at: [ 1003.414222][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1003.419926][T18985] __msan_chain_origin+0x57/0xa0 [ 1003.424848][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1003.429944][T18985] get_compat_msghdr+0x108/0x2b0 [ 1003.434867][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1003.439355][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1003.444016][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.450065][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.456204][T18985] __do_fast_syscall_32+0x129/0x180 [ 1003.461396][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1003.466233][T18985] do_SYSENTER_32+0x73/0x90 [ 1003.470719][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.477018][T18985] [ 1003.479323][T18985] Uninit was stored to memory at: [ 1003.486243][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1003.491947][T18985] __msan_chain_origin+0x57/0xa0 [ 1003.496868][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1003.501964][T18985] get_compat_msghdr+0x108/0x2b0 [ 1003.506885][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1003.511373][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1003.516036][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.522086][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.528226][T18985] __do_fast_syscall_32+0x129/0x180 [ 1003.533407][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1003.538241][T18985] do_SYSENTER_32+0x73/0x90 [ 1003.542731][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.549029][T18985] [ 1003.551336][T18985] Uninit was stored to memory at: [ 1003.556347][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1003.562051][T18985] __msan_chain_origin+0x57/0xa0 [ 1003.566970][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1003.572064][T18985] get_compat_msghdr+0x108/0x2b0 [ 1003.576985][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1003.581472][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1003.586132][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1003.592183][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1003.598333][T18985] __do_fast_syscall_32+0x129/0x180 [ 1003.603517][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1003.608451][T18985] do_SYSENTER_32+0x73/0x90 [ 1003.612938][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.619238][T18985] [ 1003.621546][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1003.628203][T18985] do_recvmmsg+0xc2/0x22e0 [ 1003.632607][T18985] do_recvmmsg+0xc2/0x22e0 [ 1004.038376][T18982] not chained 920000 origins [ 1004.042981][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1004.051667][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.061709][T18982] Call Trace: [ 1004.065175][T18982] dump_stack+0x21c/0x280 [ 1004.069507][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 1004.075225][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1004.081282][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1004.086478][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1004.092285][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1004.098347][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1004.103715][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1004.108911][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1004.114543][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1004.120607][T18982] ? _copy_from_user+0x201/0x310 [ 1004.125541][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1004.130735][T18982] __msan_chain_origin+0x57/0xa0 [ 1004.135669][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1004.140789][T18982] get_compat_msghdr+0x108/0x2b0 [ 1004.145731][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1004.150232][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1004.155431][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1004.160649][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1004.166278][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 1004.171567][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 1004.176326][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1004.180991][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1004.186799][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1004.191988][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.198044][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.204185][T18982] __do_fast_syscall_32+0x129/0x180 [ 1004.209371][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1004.214211][T18982] do_SYSENTER_32+0x73/0x90 [ 1004.218705][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.225015][T18982] RIP: 0023:0xf7fe5549 [ 1004.229069][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1004.248658][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1004.257055][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1004.265011][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.273660][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1004.281615][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1004.289569][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1004.297525][T18982] Uninit was stored to memory at: [ 1004.302543][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1004.308247][T18982] __msan_chain_origin+0x57/0xa0 [ 1004.313168][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1004.318260][T18982] get_compat_msghdr+0x108/0x2b0 [ 1004.323182][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1004.327673][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1004.332336][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.338388][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.344528][T18982] __do_fast_syscall_32+0x129/0x180 [ 1004.349711][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1004.354545][T18982] do_SYSENTER_32+0x73/0x90 [ 1004.359034][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.365337][T18982] [ 1004.367651][T18982] Uninit was stored to memory at: [ 1004.372665][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1004.378369][T18982] __msan_chain_origin+0x57/0xa0 [ 1004.383290][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1004.388385][T18982] get_compat_msghdr+0x108/0x2b0 [ 1004.393309][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1004.397799][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1004.402461][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.408515][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.414656][T18982] __do_fast_syscall_32+0x129/0x180 [ 1004.419838][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1004.424673][T18982] do_SYSENTER_32+0x73/0x90 [ 1004.429160][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.435468][T18982] [ 1004.437781][T18982] Uninit was stored to memory at: [ 1004.442793][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1004.448498][T18982] __msan_chain_origin+0x57/0xa0 [ 1004.453418][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1004.458513][T18982] get_compat_msghdr+0x108/0x2b0 [ 1004.463437][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1004.467925][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1004.472587][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.478638][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.484778][T18982] __do_fast_syscall_32+0x129/0x180 [ 1004.489963][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1004.494798][T18982] do_SYSENTER_32+0x73/0x90 [ 1004.499288][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.505585][T18982] [ 1004.507896][T18982] Uninit was stored to memory at: [ 1004.512997][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1004.518700][T18982] __msan_chain_origin+0x57/0xa0 [ 1004.523623][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1004.528718][T18982] get_compat_msghdr+0x108/0x2b0 [ 1004.533642][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1004.538132][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1004.542806][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.548861][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.555002][T18982] __do_fast_syscall_32+0x129/0x180 [ 1004.560190][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1004.565032][T18982] do_SYSENTER_32+0x73/0x90 [ 1004.569530][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.575834][T18982] [ 1004.578165][T18982] Uninit was stored to memory at: [ 1004.583199][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1004.589971][T18982] __msan_chain_origin+0x57/0xa0 [ 1004.594896][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1004.599991][T18982] get_compat_msghdr+0x108/0x2b0 [ 1004.604915][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1004.609403][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1004.614067][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.620118][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.626258][T18982] __do_fast_syscall_32+0x129/0x180 [ 1004.631439][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1004.636274][T18982] do_SYSENTER_32+0x73/0x90 [ 1004.640764][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.647062][T18982] [ 1004.649368][T18982] Uninit was stored to memory at: [ 1004.654379][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1004.660084][T18982] __msan_chain_origin+0x57/0xa0 [ 1004.665005][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1004.670100][T18982] get_compat_msghdr+0x108/0x2b0 [ 1004.675021][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1004.679509][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1004.684170][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.690228][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.696366][T18982] __do_fast_syscall_32+0x129/0x180 [ 1004.701549][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1004.706382][T18982] do_SYSENTER_32+0x73/0x90 [ 1004.710978][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.717278][T18982] [ 1004.719584][T18982] Uninit was stored to memory at: [ 1004.724595][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1004.730301][T18982] __msan_chain_origin+0x57/0xa0 [ 1004.735221][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1004.740317][T18982] get_compat_msghdr+0x108/0x2b0 [ 1004.745241][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1004.749740][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1004.754401][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1004.760451][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1004.766590][T18982] __do_fast_syscall_32+0x129/0x180 [ 1004.771777][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1004.776616][T18982] do_SYSENTER_32+0x73/0x90 [ 1004.781106][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1004.787408][T18982] [ 1004.789721][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 1004.796382][T18982] do_recvmmsg+0xc2/0x22e0 [ 1004.800784][T18982] do_recvmmsg+0xc2/0x22e0 [ 1004.926928][T18985] not chained 930000 origins [ 1004.931564][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1004.940227][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.950279][T18985] Call Trace: [ 1004.953574][T18985] dump_stack+0x21c/0x280 [ 1004.957909][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1004.963632][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1004.969693][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1004.974892][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1004.980697][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1004.986762][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1004.992281][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1004.997521][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1005.003158][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1005.009231][T18985] ? _copy_from_user+0x201/0x310 [ 1005.014170][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1005.019369][T18985] __msan_chain_origin+0x57/0xa0 [ 1005.024306][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1005.029420][T18985] get_compat_msghdr+0x108/0x2b0 [ 1005.034361][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1005.038868][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1005.044067][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1005.049282][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1005.054919][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1005.060203][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1005.064972][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1005.069687][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1005.075499][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1005.080691][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.086753][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.092897][T18985] __do_fast_syscall_32+0x129/0x180 [ 1005.098085][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1005.102926][T18985] do_SYSENTER_32+0x73/0x90 [ 1005.107417][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.113726][T18985] RIP: 0023:0xf7fe5549 [ 1005.117784][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1005.137407][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1005.145817][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1005.153772][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1005.161744][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1005.169796][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1005.177758][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1005.185717][T18985] Uninit was stored to memory at: [ 1005.190736][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1005.196443][T18985] __msan_chain_origin+0x57/0xa0 [ 1005.201367][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1005.206481][T18985] get_compat_msghdr+0x108/0x2b0 [ 1005.211407][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1005.215897][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1005.220563][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.226613][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.232753][T18985] __do_fast_syscall_32+0x129/0x180 [ 1005.237940][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1005.242776][T18985] do_SYSENTER_32+0x73/0x90 [ 1005.247264][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.253561][T18985] [ 1005.255866][T18985] Uninit was stored to memory at: [ 1005.260877][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1005.266582][T18985] __msan_chain_origin+0x57/0xa0 [ 1005.271504][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1005.276599][T18985] get_compat_msghdr+0x108/0x2b0 [ 1005.281521][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1005.286012][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1005.290673][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.296725][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.302863][T18985] __do_fast_syscall_32+0x129/0x180 [ 1005.308044][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1005.312878][T18985] do_SYSENTER_32+0x73/0x90 [ 1005.317365][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.323664][T18985] [ 1005.325971][T18985] Uninit was stored to memory at: [ 1005.330981][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1005.336688][T18985] __msan_chain_origin+0x57/0xa0 [ 1005.341607][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1005.346704][T18985] get_compat_msghdr+0x108/0x2b0 [ 1005.351625][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1005.356115][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1005.360779][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.366830][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.372971][T18985] __do_fast_syscall_32+0x129/0x180 [ 1005.378153][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1005.382990][T18985] do_SYSENTER_32+0x73/0x90 [ 1005.387479][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.393778][T18985] [ 1005.396084][T18985] Uninit was stored to memory at: [ 1005.401094][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1005.406798][T18985] __msan_chain_origin+0x57/0xa0 [ 1005.411720][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1005.416813][T18985] get_compat_msghdr+0x108/0x2b0 [ 1005.421737][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1005.426227][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1005.430888][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.436943][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.443082][T18985] __do_fast_syscall_32+0x129/0x180 [ 1005.448263][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1005.453105][T18985] do_SYSENTER_32+0x73/0x90 [ 1005.457594][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.464009][T18985] [ 1005.466314][T18985] Uninit was stored to memory at: [ 1005.471325][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1005.477031][T18985] __msan_chain_origin+0x57/0xa0 [ 1005.481953][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1005.487046][T18985] get_compat_msghdr+0x108/0x2b0 [ 1005.491969][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1005.496458][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1005.501119][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.507170][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.513311][T18985] __do_fast_syscall_32+0x129/0x180 [ 1005.518495][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1005.523331][T18985] do_SYSENTER_32+0x73/0x90 [ 1005.527819][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.534117][T18985] [ 1005.536425][T18985] Uninit was stored to memory at: [ 1005.541434][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1005.547143][T18985] __msan_chain_origin+0x57/0xa0 [ 1005.552070][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1005.557168][T18985] get_compat_msghdr+0x108/0x2b0 [ 1005.562091][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1005.566580][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1005.571242][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.577294][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.583433][T18985] __do_fast_syscall_32+0x129/0x180 [ 1005.588615][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1005.593453][T18985] do_SYSENTER_32+0x73/0x90 [ 1005.597944][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.604244][T18985] [ 1005.606548][T18985] Uninit was stored to memory at: [ 1005.611561][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1005.617264][T18985] __msan_chain_origin+0x57/0xa0 [ 1005.622188][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1005.627284][T18985] get_compat_msghdr+0x108/0x2b0 [ 1005.632208][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1005.636701][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1005.641362][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1005.647427][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1005.653567][T18985] __do_fast_syscall_32+0x129/0x180 [ 1005.658750][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1005.663585][T18985] do_SYSENTER_32+0x73/0x90 [ 1005.668072][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.674372][T18985] [ 1005.676686][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1005.683346][T18985] do_recvmmsg+0xc2/0x22e0 [ 1005.687749][T18985] do_recvmmsg+0xc2/0x22e0 [ 1006.008769][T18982] not chained 940000 origins [ 1006.013393][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1006.022056][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.032105][T18982] Call Trace: [ 1006.035399][T18982] dump_stack+0x21c/0x280 [ 1006.039747][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 1006.045502][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1006.051571][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1006.056766][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1006.062576][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1006.068638][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1006.074009][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1006.079208][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1006.084840][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1006.090905][T18982] ? _copy_from_user+0x201/0x310 [ 1006.095841][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1006.101063][T18982] __msan_chain_origin+0x57/0xa0 [ 1006.106002][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1006.111115][T18982] get_compat_msghdr+0x108/0x2b0 [ 1006.116054][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1006.120559][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1006.125762][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1006.130959][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1006.136594][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 1006.141880][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 1006.146652][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1006.151329][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1006.157129][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1006.162326][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1006.168400][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1006.175776][T18982] __do_fast_syscall_32+0x129/0x180 [ 1006.180971][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1006.185820][T18982] do_SYSENTER_32+0x73/0x90 [ 1006.190321][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1006.196639][T18982] RIP: 0023:0xf7fe5549 [ 1006.200704][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1006.220311][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1006.228724][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1006.236721][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1006.244700][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1006.252671][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1006.260641][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1006.268609][T18982] Uninit was stored to memory at: [ 1006.273737][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1006.279451][T18982] __msan_chain_origin+0x57/0xa0 [ 1006.284381][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1006.289484][T18982] get_compat_msghdr+0x108/0x2b0 [ 1006.294418][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1006.298912][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1006.303575][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1006.309630][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1006.315771][T18982] __do_fast_syscall_32+0x129/0x180 [ 1006.320954][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1006.325790][T18982] do_SYSENTER_32+0x73/0x90 [ 1006.330279][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1006.336580][T18982] [ 1006.338887][T18982] Uninit was stored to memory at: [ 1006.343900][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1006.349603][T18982] __msan_chain_origin+0x57/0xa0 [ 1006.354523][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1006.359630][T18982] get_compat_msghdr+0x108/0x2b0 [ 1006.364571][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1006.369062][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1006.373730][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1006.379782][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1006.385922][T18982] __do_fast_syscall_32+0x129/0x180 [ 1006.391104][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1006.395940][T18982] do_SYSENTER_32+0x73/0x90 [ 1006.400428][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1006.406750][T18982] [ 1006.409057][T18982] Uninit was stored to memory at: [ 1006.414068][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1006.419774][T18982] __msan_chain_origin+0x57/0xa0 [ 1006.424697][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1006.429790][T18982] get_compat_msghdr+0x108/0x2b0 [ 1006.434715][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1006.439204][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1006.443867][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1006.449931][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1006.456068][T18982] __do_fast_syscall_32+0x129/0x180 [ 1006.461251][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1006.466086][T18982] do_SYSENTER_32+0x73/0x90 [ 1006.470579][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1006.476886][T18982] [ 1006.479196][T18982] Uninit was stored to memory at: [ 1006.484209][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1006.489912][T18982] __msan_chain_origin+0x57/0xa0 [ 1006.494834][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1006.499927][T18982] get_compat_msghdr+0x108/0x2b0 [ 1006.504852][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1006.509340][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1006.514004][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1006.520055][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1006.526194][T18982] __do_fast_syscall_32+0x129/0x180 [ 1006.531378][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1006.536217][T18982] do_SYSENTER_32+0x73/0x90 [ 1006.540705][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1006.547007][T18982] [ 1006.549316][T18982] Uninit was stored to memory at: [ 1006.554333][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1006.560036][T18982] __msan_chain_origin+0x57/0xa0 [ 1006.564960][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1006.570057][T18982] get_compat_msghdr+0x108/0x2b0 [ 1006.574983][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1006.579472][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1006.584135][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1006.590204][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1006.596345][T18982] __do_fast_syscall_32+0x129/0x180 [ 1006.601528][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1006.606364][T18982] do_SYSENTER_32+0x73/0x90 [ 1006.610852][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1006.617152][T18982] [ 1006.619458][T18982] Uninit was stored to memory at: [ 1006.624472][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1006.630176][T18982] __msan_chain_origin+0x57/0xa0 [ 1006.635099][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1006.640192][T18982] get_compat_msghdr+0x108/0x2b0 [ 1006.645119][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1006.649608][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1006.654269][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1006.660338][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1006.666480][T18982] __do_fast_syscall_32+0x129/0x180 [ 1006.671661][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1006.676505][T18982] do_SYSENTER_32+0x73/0x90 [ 1006.680999][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1006.687305][T18982] [ 1006.689615][T18982] Uninit was stored to memory at: [ 1006.694628][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1006.700333][T18982] __msan_chain_origin+0x57/0xa0 [ 1006.705254][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1006.710347][T18982] get_compat_msghdr+0x108/0x2b0 [ 1006.715270][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1006.719757][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1006.724419][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1006.730473][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1006.736612][T18982] __do_fast_syscall_32+0x129/0x180 [ 1006.741797][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1006.746632][T18982] do_SYSENTER_32+0x73/0x90 [ 1006.751124][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1006.757425][T18982] [ 1006.759734][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 1006.766392][T18982] do_recvmmsg+0xc2/0x22e0 [ 1006.770792][T18982] do_recvmmsg+0xc2/0x22e0 [ 1006.907591][T18985] not chained 950000 origins [ 1006.912230][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1006.920880][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.930934][T18985] Call Trace: [ 1006.934215][T18985] dump_stack+0x21c/0x280 [ 1006.938539][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1006.944247][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1006.950299][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1006.955495][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1006.961288][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1006.967343][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1006.972706][T18985] ? common_interrupt+0x1c9/0x310 [ 1006.977715][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1006.982906][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1006.988531][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1006.994588][T18985] ? _copy_from_user+0x201/0x310 [ 1006.999510][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1007.004694][T18985] __msan_chain_origin+0x57/0xa0 [ 1007.009619][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1007.014721][T18985] get_compat_msghdr+0x108/0x2b0 [ 1007.019651][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1007.024143][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1007.029333][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1007.034518][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1007.040137][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1007.045407][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1007.050157][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1007.054824][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1007.060613][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1007.065801][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1007.071873][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1007.078012][T18985] __do_fast_syscall_32+0x129/0x180 [ 1007.083199][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1007.088470][T18985] do_SYSENTER_32+0x73/0x90 [ 1007.092963][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1007.099270][T18985] RIP: 0023:0xf7fe5549 [ 1007.103324][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1007.122913][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1007.131316][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1007.139271][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1007.147237][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1007.155199][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1007.163157][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1007.171119][T18985] Uninit was stored to memory at: [ 1007.176141][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1007.181847][T18985] __msan_chain_origin+0x57/0xa0 [ 1007.186773][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1007.191873][T18985] get_compat_msghdr+0x108/0x2b0 [ 1007.196811][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1007.201307][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1007.205972][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1007.212027][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1007.218174][T18985] __do_fast_syscall_32+0x129/0x180 [ 1007.223360][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1007.228198][T18985] do_SYSENTER_32+0x73/0x90 [ 1007.232689][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1007.238989][T18985] [ 1007.241296][T18985] Uninit was stored to memory at: [ 1007.246309][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1007.252014][T18985] __msan_chain_origin+0x57/0xa0 [ 1007.256938][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1007.262035][T18985] get_compat_msghdr+0x108/0x2b0 [ 1007.266960][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1007.271451][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1007.276112][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1007.282163][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1007.288314][T18985] __do_fast_syscall_32+0x129/0x180 [ 1007.293496][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1007.298332][T18985] do_SYSENTER_32+0x73/0x90 [ 1007.302821][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1007.309121][T18985] [ 1007.311426][T18985] Uninit was stored to memory at: [ 1007.316439][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1007.322145][T18985] __msan_chain_origin+0x57/0xa0 [ 1007.327068][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1007.332160][T18985] get_compat_msghdr+0x108/0x2b0 [ 1007.337081][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1007.341569][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1007.346233][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1007.352287][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1007.358424][T18985] __do_fast_syscall_32+0x129/0x180 [ 1007.363620][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1007.368455][T18985] do_SYSENTER_32+0x73/0x90 [ 1007.372948][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1007.379246][T18985] [ 1007.381552][T18985] Uninit was stored to memory at: [ 1007.386564][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1007.392268][T18985] __msan_chain_origin+0x57/0xa0 [ 1007.397189][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1007.402282][T18985] get_compat_msghdr+0x108/0x2b0 [ 1007.407638][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1007.412125][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1007.416785][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1007.422835][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1007.428974][T18985] __do_fast_syscall_32+0x129/0x180 [ 1007.434154][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1007.438986][T18985] do_SYSENTER_32+0x73/0x90 [ 1007.443473][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1007.449774][T18985] [ 1007.452079][T18985] Uninit was stored to memory at: [ 1007.457090][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1007.462797][T18985] __msan_chain_origin+0x57/0xa0 [ 1007.467718][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1007.472812][T18985] get_compat_msghdr+0x108/0x2b0 [ 1007.477733][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1007.482219][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1007.486880][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1007.492936][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1007.499075][T18985] __do_fast_syscall_32+0x129/0x180 [ 1007.504276][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1007.509111][T18985] do_SYSENTER_32+0x73/0x90 [ 1007.513598][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1007.519900][T18985] [ 1007.522207][T18985] Uninit was stored to memory at: [ 1007.527217][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1007.532921][T18985] __msan_chain_origin+0x57/0xa0 [ 1007.537841][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1007.542935][T18985] get_compat_msghdr+0x108/0x2b0 [ 1007.547856][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1007.552344][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1007.557003][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1007.563058][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1007.569196][T18985] __do_fast_syscall_32+0x129/0x180 [ 1007.574379][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1007.579213][T18985] do_SYSENTER_32+0x73/0x90 [ 1007.583702][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1007.590000][T18985] [ 1007.592307][T18985] Uninit was stored to memory at: [ 1007.597319][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1007.603027][T18985] __msan_chain_origin+0x57/0xa0 [ 1007.607947][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1007.613041][T18985] get_compat_msghdr+0x108/0x2b0 [ 1007.617964][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1007.622454][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1007.627115][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1007.633165][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1007.639302][T18985] __do_fast_syscall_32+0x129/0x180 [ 1007.644484][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1007.649318][T18985] do_SYSENTER_32+0x73/0x90 [ 1007.653809][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1007.660107][T18985] [ 1007.662412][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1007.669069][T18985] do_recvmmsg+0xc2/0x22e0 [ 1007.673470][T18985] do_recvmmsg+0xc2/0x22e0 [ 1007.943758][T18982] not chained 960000 origins [ 1007.948397][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1007.957067][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.967114][T18982] Call Trace: [ 1007.970410][T18982] dump_stack+0x21c/0x280 [ 1007.974747][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 1007.980469][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1007.986535][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1007.991731][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1007.997543][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1008.003612][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1008.008989][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1008.014194][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1008.019832][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1008.025899][T18982] ? _copy_from_user+0x201/0x310 [ 1008.030836][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1008.036041][T18982] __msan_chain_origin+0x57/0xa0 [ 1008.041067][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1008.046179][T18982] get_compat_msghdr+0x108/0x2b0 [ 1008.051119][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1008.055625][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1008.060828][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1008.066032][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1008.071838][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 1008.077386][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 1008.082146][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1008.086816][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1008.092608][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1008.097797][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1008.103855][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1008.110000][T18982] __do_fast_syscall_32+0x129/0x180 [ 1008.115188][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1008.120060][T18982] do_SYSENTER_32+0x73/0x90 [ 1008.124556][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1008.130865][T18982] RIP: 0023:0xf7fe5549 [ 1008.134921][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1008.154510][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1008.162906][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1008.170870][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1008.178839][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1008.186804][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1008.194771][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1008.202737][T18982] Uninit was stored to memory at: [ 1008.207768][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1008.213476][T18982] __msan_chain_origin+0x57/0xa0 [ 1008.218400][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1008.223497][T18982] get_compat_msghdr+0x108/0x2b0 [ 1008.228421][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1008.232911][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1008.237574][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1008.243628][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1008.249767][T18982] __do_fast_syscall_32+0x129/0x180 [ 1008.254954][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1008.259788][T18982] do_SYSENTER_32+0x73/0x90 [ 1008.264280][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1008.270590][T18982] [ 1008.272904][T18982] Uninit was stored to memory at: [ 1008.277945][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1008.283660][T18982] __msan_chain_origin+0x57/0xa0 [ 1008.288588][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1008.293689][T18982] get_compat_msghdr+0x108/0x2b0 [ 1008.298621][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1008.303110][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1008.307774][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1008.313829][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1008.319969][T18982] __do_fast_syscall_32+0x129/0x180 [ 1008.325153][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1008.329990][T18982] do_SYSENTER_32+0x73/0x90 [ 1008.334481][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1008.340783][T18982] [ 1008.343106][T18982] Uninit was stored to memory at: [ 1008.348120][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1008.353825][T18982] __msan_chain_origin+0x57/0xa0 [ 1008.358747][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1008.363841][T18982] get_compat_msghdr+0x108/0x2b0 [ 1008.368766][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1008.373255][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1008.377919][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1008.383970][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1008.390108][T18982] __do_fast_syscall_32+0x129/0x180 [ 1008.395289][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1008.400137][T18982] do_SYSENTER_32+0x73/0x90 [ 1008.404627][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1008.410925][T18982] [ 1008.413232][T18982] Uninit was stored to memory at: [ 1008.418243][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1008.423947][T18982] __msan_chain_origin+0x57/0xa0 [ 1008.428868][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1008.433968][T18982] get_compat_msghdr+0x108/0x2b0 [ 1008.438890][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1008.443379][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1008.448042][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1008.454096][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1008.460233][T18982] __do_fast_syscall_32+0x129/0x180 [ 1008.465415][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1008.470248][T18982] do_SYSENTER_32+0x73/0x90 [ 1008.474742][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1008.481040][T18982] [ 1008.483348][T18982] Uninit was stored to memory at: [ 1008.488375][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1008.494079][T18982] __msan_chain_origin+0x57/0xa0 [ 1008.499002][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1008.504098][T18982] get_compat_msghdr+0x108/0x2b0 [ 1008.509022][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1008.513510][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1008.518170][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1008.524222][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1008.530358][T18982] __do_fast_syscall_32+0x129/0x180 [ 1008.535553][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1008.540390][T18982] do_SYSENTER_32+0x73/0x90 [ 1008.544877][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1008.551182][T18982] [ 1008.553490][T18982] Uninit was stored to memory at: [ 1008.558504][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1008.564210][T18982] __msan_chain_origin+0x57/0xa0 [ 1008.569140][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1008.574240][T18982] get_compat_msghdr+0x108/0x2b0 [ 1008.579166][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1008.583656][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1008.588316][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1008.594368][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1008.600519][T18982] __do_fast_syscall_32+0x129/0x180 [ 1008.605703][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1008.610541][T18982] do_SYSENTER_32+0x73/0x90 [ 1008.615033][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1008.621331][T18982] [ 1008.623639][T18982] Uninit was stored to memory at: [ 1008.628650][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1008.634357][T18982] __msan_chain_origin+0x57/0xa0 [ 1008.639276][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1008.644370][T18982] get_compat_msghdr+0x108/0x2b0 [ 1008.649293][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1008.653783][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1008.658444][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1008.664497][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1008.670636][T18982] __do_fast_syscall_32+0x129/0x180 [ 1008.675818][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1008.680668][T18982] do_SYSENTER_32+0x73/0x90 [ 1008.685160][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1008.691458][T18982] [ 1008.693774][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 1008.700432][T18982] do_recvmmsg+0xc2/0x22e0 [ 1008.704833][T18982] do_recvmmsg+0xc2/0x22e0 [ 1008.918827][T18985] not chained 970000 origins [ 1008.923442][T18985] CPU: 0 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1008.932105][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.942155][T18985] Call Trace: [ 1008.945449][T18985] dump_stack+0x21c/0x280 [ 1008.949787][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1008.955509][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1008.961576][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1008.966773][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1008.972582][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1008.978646][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1008.984016][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1008.989303][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1008.994937][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1009.001005][T18985] ? _copy_from_user+0x201/0x310 [ 1009.005951][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1009.011152][T18985] __msan_chain_origin+0x57/0xa0 [ 1009.016088][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1009.021203][T18985] get_compat_msghdr+0x108/0x2b0 [ 1009.026143][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1009.030650][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1009.035857][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1009.041057][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1009.046689][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1009.051971][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1009.056733][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1009.061414][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1009.067216][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1009.072420][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.078488][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.084643][T18985] __do_fast_syscall_32+0x129/0x180 [ 1009.089839][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1009.094687][T18985] do_SYSENTER_32+0x73/0x90 [ 1009.099192][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.105513][T18985] RIP: 0023:0xf7fe5549 [ 1009.109579][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1009.129330][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1009.137748][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1009.145717][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1009.153683][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1009.161650][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1009.169616][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1009.177588][T18985] Uninit was stored to memory at: [ 1009.182619][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1009.188337][T18985] __msan_chain_origin+0x57/0xa0 [ 1009.193271][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1009.198377][T18985] get_compat_msghdr+0x108/0x2b0 [ 1009.203313][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1009.207817][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1009.212489][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.218564][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.224713][T18985] __do_fast_syscall_32+0x129/0x180 [ 1009.229908][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1009.234754][T18985] do_SYSENTER_32+0x73/0x90 [ 1009.239263][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.245573][T18985] [ 1009.247889][T18985] Uninit was stored to memory at: [ 1009.252946][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1009.258665][T18985] __msan_chain_origin+0x57/0xa0 [ 1009.263597][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1009.268701][T18985] get_compat_msghdr+0x108/0x2b0 [ 1009.273634][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1009.278133][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1009.282809][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.288871][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.295022][T18985] __do_fast_syscall_32+0x129/0x180 [ 1009.300215][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1009.305063][T18985] do_SYSENTER_32+0x73/0x90 [ 1009.309565][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.315874][T18985] [ 1009.318209][T18985] Uninit was stored to memory at: [ 1009.323242][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1009.328956][T18985] __msan_chain_origin+0x57/0xa0 [ 1009.333888][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1009.338994][T18985] get_compat_msghdr+0x108/0x2b0 [ 1009.343934][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1009.348436][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1009.353114][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.359181][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.365355][T18985] __do_fast_syscall_32+0x129/0x180 [ 1009.370551][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1009.375398][T18985] do_SYSENTER_32+0x73/0x90 [ 1009.379902][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.386209][T18985] [ 1009.388524][T18985] Uninit was stored to memory at: [ 1009.393554][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1009.399275][T18985] __msan_chain_origin+0x57/0xa0 [ 1009.404234][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1009.409342][T18985] get_compat_msghdr+0x108/0x2b0 [ 1009.414280][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1009.418790][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1009.423466][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.429530][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.435685][T18985] __do_fast_syscall_32+0x129/0x180 [ 1009.440880][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1009.445732][T18985] do_SYSENTER_32+0x73/0x90 [ 1009.450234][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.456540][T18985] [ 1009.458868][T18985] Uninit was stored to memory at: [ 1009.463896][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1009.469617][T18985] __msan_chain_origin+0x57/0xa0 [ 1009.474547][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1009.479649][T18985] get_compat_msghdr+0x108/0x2b0 [ 1009.484584][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1009.489083][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1009.493756][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.499822][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.505974][T18985] __do_fast_syscall_32+0x129/0x180 [ 1009.511169][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1009.516014][T18985] do_SYSENTER_32+0x73/0x90 [ 1009.520511][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.526817][T18985] [ 1009.529130][T18985] Uninit was stored to memory at: [ 1009.534147][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1009.539862][T18985] __msan_chain_origin+0x57/0xa0 [ 1009.544796][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1009.549901][T18985] get_compat_msghdr+0x108/0x2b0 [ 1009.554838][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1009.559336][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1009.564006][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.570064][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.576208][T18985] __do_fast_syscall_32+0x129/0x180 [ 1009.581390][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1009.586234][T18985] do_SYSENTER_32+0x73/0x90 [ 1009.590725][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.597027][T18985] [ 1009.599337][T18985] Uninit was stored to memory at: [ 1009.604349][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1009.610067][T18985] __msan_chain_origin+0x57/0xa0 [ 1009.614993][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1009.620087][T18985] get_compat_msghdr+0x108/0x2b0 [ 1009.625010][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1009.629500][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1009.634161][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.640214][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.646364][T18985] __do_fast_syscall_32+0x129/0x180 [ 1009.651554][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1009.656393][T18985] do_SYSENTER_32+0x73/0x90 [ 1009.660887][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.667188][T18985] [ 1009.669509][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1009.676170][T18985] do_recvmmsg+0xc2/0x22e0 [ 1009.680574][T18985] do_recvmmsg+0xc2/0x22e0 [ 1009.801053][T18982] not chained 980000 origins [ 1009.805649][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1009.814291][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.826797][T18982] Call Trace: [ 1009.830065][T18982] dump_stack+0x21c/0x280 [ 1009.834373][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 1009.840069][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1009.846124][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1009.851310][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1009.857106][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1009.863148][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1009.868542][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1009.873717][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1009.879462][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1009.885504][T18982] ? _copy_from_user+0x201/0x310 [ 1009.890414][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1009.895588][T18982] __msan_chain_origin+0x57/0xa0 [ 1009.900501][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1009.905591][T18982] get_compat_msghdr+0x108/0x2b0 [ 1009.910506][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1009.914984][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1009.920195][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1009.925373][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1009.931018][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 1009.936292][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 1009.941031][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1009.945683][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1009.951472][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1009.956661][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1009.962705][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1009.968831][T18982] __do_fast_syscall_32+0x129/0x180 [ 1009.974004][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1009.978827][T18982] do_SYSENTER_32+0x73/0x90 [ 1009.983304][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1009.989603][T18982] RIP: 0023:0xf7fe5549 [ 1009.993648][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1010.013231][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1010.021630][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1010.029578][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1010.037527][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1010.045478][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1010.053427][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1010.061378][T18982] Uninit was stored to memory at: [ 1010.066389][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1010.072083][T18982] __msan_chain_origin+0x57/0xa0 [ 1010.076994][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1010.082077][T18982] get_compat_msghdr+0x108/0x2b0 [ 1010.086989][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1010.091465][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1010.096116][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.102155][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.108327][T18982] __do_fast_syscall_32+0x129/0x180 [ 1010.113537][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1010.118373][T18982] do_SYSENTER_32+0x73/0x90 [ 1010.122852][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.129142][T18982] [ 1010.131440][T18982] Uninit was stored to memory at: [ 1010.136473][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1010.142166][T18982] __msan_chain_origin+0x57/0xa0 [ 1010.147131][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1010.152214][T18982] get_compat_msghdr+0x108/0x2b0 [ 1010.157138][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1010.161725][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1010.166390][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.172433][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.178568][T18982] __do_fast_syscall_32+0x129/0x180 [ 1010.183832][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1010.188660][T18982] do_SYSENTER_32+0x73/0x90 [ 1010.193162][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.199454][T18982] [ 1010.201760][T18982] Uninit was stored to memory at: [ 1010.206773][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1010.212465][T18982] __msan_chain_origin+0x57/0xa0 [ 1010.217374][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1010.222457][T18982] get_compat_msghdr+0x108/0x2b0 [ 1010.227369][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1010.231845][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1010.236505][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.242545][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.248672][T18982] __do_fast_syscall_32+0x129/0x180 [ 1010.253938][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1010.258788][T18982] do_SYSENTER_32+0x73/0x90 [ 1010.263278][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.269570][T18982] [ 1010.271885][T18982] Uninit was stored to memory at: [ 1010.276886][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1010.282592][T18982] __msan_chain_origin+0x57/0xa0 [ 1010.287513][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1010.292610][T18982] get_compat_msghdr+0x108/0x2b0 [ 1010.297541][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1010.302016][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1010.306677][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.312716][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.318843][T18982] __do_fast_syscall_32+0x129/0x180 [ 1010.324013][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1010.328836][T18982] do_SYSENTER_32+0x73/0x90 [ 1010.333313][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.339604][T18982] [ 1010.341915][T18982] Uninit was stored to memory at: [ 1010.346920][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1010.352614][T18982] __msan_chain_origin+0x57/0xa0 [ 1010.357522][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1010.362615][T18982] get_compat_msghdr+0x108/0x2b0 [ 1010.367541][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1010.372021][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1010.376670][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.382727][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.388854][T18982] __do_fast_syscall_32+0x129/0x180 [ 1010.394034][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1010.398868][T18982] do_SYSENTER_32+0x73/0x90 [ 1010.403345][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.409649][T18982] [ 1010.411948][T18982] Uninit was stored to memory at: [ 1010.416950][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1010.422644][T18982] __msan_chain_origin+0x57/0xa0 [ 1010.427553][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1010.432636][T18982] get_compat_msghdr+0x108/0x2b0 [ 1010.437548][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1010.442024][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1010.446672][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.452713][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.458838][T18982] __do_fast_syscall_32+0x129/0x180 [ 1010.464020][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1010.468857][T18982] do_SYSENTER_32+0x73/0x90 [ 1010.473337][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.479629][T18982] [ 1010.481946][T18982] Uninit was stored to memory at: [ 1010.486952][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1010.492644][T18982] __msan_chain_origin+0x57/0xa0 [ 1010.497563][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1010.502658][T18982] get_compat_msghdr+0x108/0x2b0 [ 1010.507568][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1010.512046][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1010.516695][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1010.522733][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1010.528870][T18982] __do_fast_syscall_32+0x129/0x180 [ 1010.534043][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1010.538865][T18982] do_SYSENTER_32+0x73/0x90 [ 1010.543344][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1010.549643][T18982] [ 1010.551943][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 1010.558588][T18982] do_recvmmsg+0xc2/0x22e0 [ 1010.562989][T18982] do_recvmmsg+0xc2/0x22e0 [ 1010.938237][T18985] not chained 990000 origins [ 1010.942865][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1010.951539][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.961590][T18985] Call Trace: [ 1010.964887][T18985] dump_stack+0x21c/0x280 [ 1010.969219][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1010.974962][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1010.981042][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1010.986241][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1010.992045][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1010.998104][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1011.003483][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.008709][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1011.014345][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1011.020415][T18985] ? _copy_from_user+0x201/0x310 [ 1011.025352][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.030549][T18985] __msan_chain_origin+0x57/0xa0 [ 1011.035493][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1011.040596][T18985] get_compat_msghdr+0x108/0x2b0 [ 1011.045529][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1011.050023][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.055211][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.060400][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1011.066021][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1011.071293][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1011.076044][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1011.080709][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1011.086501][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.091688][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.097744][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.103889][T18985] __do_fast_syscall_32+0x129/0x180 [ 1011.109073][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1011.113911][T18985] do_SYSENTER_32+0x73/0x90 [ 1011.118401][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.124711][T18985] RIP: 0023:0xf7fe5549 [ 1011.128765][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1011.148355][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1011.156752][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1011.164708][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1011.172675][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1011.180634][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1011.188591][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1011.196548][T18985] Uninit was stored to memory at: [ 1011.201565][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1011.207270][T18985] __msan_chain_origin+0x57/0xa0 [ 1011.212191][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1011.217289][T18985] get_compat_msghdr+0x108/0x2b0 [ 1011.222212][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1011.226704][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1011.231365][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.237419][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.243561][T18985] __do_fast_syscall_32+0x129/0x180 [ 1011.248743][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1011.253580][T18985] do_SYSENTER_32+0x73/0x90 [ 1011.258070][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.264372][T18985] [ 1011.266681][T18985] Uninit was stored to memory at: [ 1011.271693][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1011.277397][T18985] __msan_chain_origin+0x57/0xa0 [ 1011.282320][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1011.287417][T18985] get_compat_msghdr+0x108/0x2b0 [ 1011.292340][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1011.296830][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1011.301492][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.307544][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.313686][T18985] __do_fast_syscall_32+0x129/0x180 [ 1011.318869][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1011.323704][T18985] do_SYSENTER_32+0x73/0x90 [ 1011.328192][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.334512][T18985] [ 1011.336820][T18985] Uninit was stored to memory at: [ 1011.341834][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1011.347539][T18985] __msan_chain_origin+0x57/0xa0 [ 1011.352480][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1011.357577][T18985] get_compat_msghdr+0x108/0x2b0 [ 1011.362502][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1011.366989][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1011.371652][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.377703][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.383841][T18985] __do_fast_syscall_32+0x129/0x180 [ 1011.389022][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1011.393856][T18985] do_SYSENTER_32+0x73/0x90 [ 1011.398347][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.404646][T18985] [ 1011.406951][T18985] Uninit was stored to memory at: [ 1011.412048][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1011.417754][T18985] __msan_chain_origin+0x57/0xa0 [ 1011.422676][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1011.427773][T18985] get_compat_msghdr+0x108/0x2b0 [ 1011.432695][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1011.437183][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1011.441844][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.447895][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.454032][T18985] __do_fast_syscall_32+0x129/0x180 [ 1011.459220][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1011.464073][T18985] do_SYSENTER_32+0x73/0x90 [ 1011.468560][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.474859][T18985] [ 1011.477187][T18985] Uninit was stored to memory at: [ 1011.482209][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1011.487916][T18985] __msan_chain_origin+0x57/0xa0 [ 1011.492837][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1011.497931][T18985] get_compat_msghdr+0x108/0x2b0 [ 1011.502938][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1011.507427][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1011.512087][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.518138][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.524276][T18985] __do_fast_syscall_32+0x129/0x180 [ 1011.529458][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1011.534293][T18985] do_SYSENTER_32+0x73/0x90 [ 1011.538783][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.545094][T18985] [ 1011.547407][T18985] Uninit was stored to memory at: [ 1011.553026][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1011.558728][T18985] __msan_chain_origin+0x57/0xa0 [ 1011.563649][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1011.568743][T18985] get_compat_msghdr+0x108/0x2b0 [ 1011.573666][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1011.578156][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1011.582820][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.588871][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.595008][T18985] __do_fast_syscall_32+0x129/0x180 [ 1011.600189][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1011.605024][T18985] do_SYSENTER_32+0x73/0x90 [ 1011.609511][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.615813][T18985] [ 1011.618119][T18985] Uninit was stored to memory at: [ 1011.623131][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1011.628838][T18985] __msan_chain_origin+0x57/0xa0 [ 1011.633759][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1011.638852][T18985] get_compat_msghdr+0x108/0x2b0 [ 1011.643775][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1011.648266][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1011.652927][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1011.658979][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1011.665118][T18985] __do_fast_syscall_32+0x129/0x180 [ 1011.670319][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1011.675156][T18985] do_SYSENTER_32+0x73/0x90 [ 1011.679645][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1011.685945][T18985] [ 1011.688280][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1011.694938][T18985] do_recvmmsg+0xc2/0x22e0 [ 1011.699340][T18985] do_recvmmsg+0xc2/0x22e0 [ 1011.875644][T18985] not chained 1000000 origins [ 1011.880349][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1011.889008][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.899055][T18985] Call Trace: [ 1011.902350][T18985] dump_stack+0x21c/0x280 [ 1011.906684][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1011.912409][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1011.918472][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.923673][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1011.929478][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1011.935546][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1011.940915][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.946113][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1011.951748][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1011.957817][T18985] ? _copy_from_user+0x201/0x310 [ 1011.962750][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.967982][T18985] __msan_chain_origin+0x57/0xa0 [ 1011.972919][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1011.978031][T18985] get_compat_msghdr+0x108/0x2b0 [ 1011.982972][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1011.987477][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.992676][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1011.997874][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1012.003514][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1012.008804][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1012.013576][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1012.018255][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1012.024072][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1012.029307][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.035378][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.041536][T18985] __do_fast_syscall_32+0x129/0x180 [ 1012.046765][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1012.051615][T18985] do_SYSENTER_32+0x73/0x90 [ 1012.056125][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.062444][T18985] RIP: 0023:0xf7fe5549 [ 1012.066539][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1012.086138][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1012.094577][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1012.102549][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1012.110524][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1012.118496][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1012.126467][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1012.134437][T18985] Uninit was stored to memory at: [ 1012.139471][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1012.145190][T18985] __msan_chain_origin+0x57/0xa0 [ 1012.150125][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1012.155237][T18985] get_compat_msghdr+0x108/0x2b0 [ 1012.160172][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1012.164671][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1012.169356][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.175427][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.181594][T18985] __do_fast_syscall_32+0x129/0x180 [ 1012.186794][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1012.191644][T18985] do_SYSENTER_32+0x73/0x90 [ 1012.196148][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.202455][T18985] [ 1012.204783][T18985] Uninit was stored to memory at: [ 1012.209811][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1012.215534][T18985] __msan_chain_origin+0x57/0xa0 [ 1012.220466][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1012.225577][T18985] get_compat_msghdr+0x108/0x2b0 [ 1012.230511][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1012.235011][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1012.239686][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.245843][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.251994][T18985] __do_fast_syscall_32+0x129/0x180 [ 1012.257187][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1012.262034][T18985] do_SYSENTER_32+0x73/0x90 [ 1012.266531][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.272839][T18985] [ 1012.275151][T18985] Uninit was stored to memory at: [ 1012.280176][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1012.285895][T18985] __msan_chain_origin+0x57/0xa0 [ 1012.290831][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1012.295936][T18985] get_compat_msghdr+0x108/0x2b0 [ 1012.300870][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1012.305369][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1012.310044][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.316106][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.322256][T18985] __do_fast_syscall_32+0x129/0x180 [ 1012.327446][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1012.332290][T18985] do_SYSENTER_32+0x73/0x90 [ 1012.336809][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.343119][T18985] [ 1012.345430][T18985] Uninit was stored to memory at: [ 1012.350453][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1012.356168][T18985] __msan_chain_origin+0x57/0xa0 [ 1012.361097][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1012.366196][T18985] get_compat_msghdr+0x108/0x2b0 [ 1012.371118][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1012.375608][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1012.380269][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.386323][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.392466][T18985] __do_fast_syscall_32+0x129/0x180 [ 1012.397648][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1012.402483][T18985] do_SYSENTER_32+0x73/0x90 [ 1012.406974][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.413273][T18985] [ 1012.415580][T18985] Uninit was stored to memory at: [ 1012.420592][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1012.426298][T18985] __msan_chain_origin+0x57/0xa0 [ 1012.431220][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1012.436321][T18985] get_compat_msghdr+0x108/0x2b0 [ 1012.441243][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1012.445731][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1012.450391][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.456441][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.462582][T18985] __do_fast_syscall_32+0x129/0x180 [ 1012.467766][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1012.472600][T18985] do_SYSENTER_32+0x73/0x90 [ 1012.477089][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.483388][T18985] [ 1012.485693][T18985] Uninit was stored to memory at: [ 1012.490703][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1012.496411][T18985] __msan_chain_origin+0x57/0xa0 [ 1012.501336][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1012.506431][T18985] get_compat_msghdr+0x108/0x2b0 [ 1012.511356][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1012.515847][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1012.520508][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.526561][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.532701][T18985] __do_fast_syscall_32+0x129/0x180 [ 1012.537882][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1012.542719][T18985] do_SYSENTER_32+0x73/0x90 [ 1012.547206][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.553506][T18985] [ 1012.555811][T18985] Uninit was stored to memory at: [ 1012.560832][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1012.566537][T18985] __msan_chain_origin+0x57/0xa0 [ 1012.571462][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1012.576558][T18985] get_compat_msghdr+0x108/0x2b0 [ 1012.581480][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1012.585968][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1012.590630][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.596679][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.602816][T18985] __do_fast_syscall_32+0x129/0x180 [ 1012.608004][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1012.612840][T18985] do_SYSENTER_32+0x73/0x90 [ 1012.617330][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.623630][T18985] [ 1012.625938][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1012.632595][T18985] do_recvmmsg+0xc2/0x22e0 [ 1012.636995][T18985] do_recvmmsg+0xc2/0x22e0 [ 1012.803546][T18982] not chained 1010000 origins [ 1012.808255][T18982] CPU: 1 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1012.816916][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.826965][T18982] Call Trace: [ 1012.830259][T18982] dump_stack+0x21c/0x280 [ 1012.834596][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 1012.840320][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1012.846383][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1012.851582][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1012.857392][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1012.863458][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1012.868832][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1012.874069][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1012.879705][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1012.885771][T18982] ? _copy_from_user+0x201/0x310 [ 1012.890705][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1012.895906][T18982] __msan_chain_origin+0x57/0xa0 [ 1012.900846][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1012.905961][T18982] get_compat_msghdr+0x108/0x2b0 [ 1012.910902][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1012.915408][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1012.920612][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1012.925816][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1012.931457][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 1012.936867][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 1012.941640][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1012.946433][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1012.952238][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1012.957438][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1012.963511][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1012.969668][T18982] __do_fast_syscall_32+0x129/0x180 [ 1012.974873][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1012.979725][T18982] do_SYSENTER_32+0x73/0x90 [ 1012.984236][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1012.990556][T18982] RIP: 0023:0xf7fe5549 [ 1012.994624][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1013.014235][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1013.022651][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1013.030621][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1013.038588][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1013.046556][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1013.054523][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1013.062488][T18982] Uninit was stored to memory at: [ 1013.067519][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1013.073236][T18982] __msan_chain_origin+0x57/0xa0 [ 1013.078172][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1013.083276][T18982] get_compat_msghdr+0x108/0x2b0 [ 1013.088207][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1013.092706][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1013.097374][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.103428][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.109569][T18982] __do_fast_syscall_32+0x129/0x180 [ 1013.114756][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1013.119593][T18982] do_SYSENTER_32+0x73/0x90 [ 1013.124085][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.130385][T18982] [ 1013.132699][T18982] Uninit was stored to memory at: [ 1013.137714][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1013.143421][T18982] __msan_chain_origin+0x57/0xa0 [ 1013.148341][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1013.153436][T18982] get_compat_msghdr+0x108/0x2b0 [ 1013.158362][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1013.162851][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1013.167513][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.173577][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.179803][T18982] __do_fast_syscall_32+0x129/0x180 [ 1013.184991][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1013.189828][T18982] do_SYSENTER_32+0x73/0x90 [ 1013.194323][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.200631][T18982] [ 1013.202946][T18982] Uninit was stored to memory at: [ 1013.207963][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1013.213669][T18982] __msan_chain_origin+0x57/0xa0 [ 1013.218631][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1013.223733][T18982] get_compat_msghdr+0x108/0x2b0 [ 1013.228668][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1013.233161][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1013.237827][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.243886][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.250028][T18982] __do_fast_syscall_32+0x129/0x180 [ 1013.255213][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1013.260049][T18982] do_SYSENTER_32+0x73/0x90 [ 1013.264539][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.270848][T18982] [ 1013.273161][T18982] Uninit was stored to memory at: [ 1013.278174][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1013.283882][T18982] __msan_chain_origin+0x57/0xa0 [ 1013.288803][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1013.293897][T18982] get_compat_msghdr+0x108/0x2b0 [ 1013.298820][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1013.303312][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1013.307973][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.314025][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.320162][T18982] __do_fast_syscall_32+0x129/0x180 [ 1013.325344][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1013.330182][T18982] do_SYSENTER_32+0x73/0x90 [ 1013.334672][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.340970][T18982] [ 1013.343297][T18982] Uninit was stored to memory at: [ 1013.348309][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1013.354014][T18982] __msan_chain_origin+0x57/0xa0 [ 1013.358936][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1013.364032][T18982] get_compat_msghdr+0x108/0x2b0 [ 1013.368956][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1013.373447][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1013.378108][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.384160][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.390298][T18982] __do_fast_syscall_32+0x129/0x180 [ 1013.395489][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1013.400324][T18982] do_SYSENTER_32+0x73/0x90 [ 1013.404814][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.411114][T18982] [ 1013.413420][T18982] Uninit was stored to memory at: [ 1013.418433][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1013.424140][T18982] __msan_chain_origin+0x57/0xa0 [ 1013.429059][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1013.434172][T18982] get_compat_msghdr+0x108/0x2b0 [ 1013.439094][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1013.443585][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1013.448247][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.454301][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.460438][T18982] __do_fast_syscall_32+0x129/0x180 [ 1013.465621][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1013.470455][T18982] do_SYSENTER_32+0x73/0x90 [ 1013.474944][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.481242][T18982] [ 1013.483549][T18982] Uninit was stored to memory at: [ 1013.488575][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1013.494286][T18982] __msan_chain_origin+0x57/0xa0 [ 1013.499220][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1013.504318][T18982] get_compat_msghdr+0x108/0x2b0 [ 1013.509240][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1013.513727][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1013.518388][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.524442][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.530580][T18982] __do_fast_syscall_32+0x129/0x180 [ 1013.535765][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1013.540599][T18982] do_SYSENTER_32+0x73/0x90 [ 1013.545088][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.551388][T18982] [ 1013.553697][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 1013.560357][T18982] do_recvmmsg+0xc2/0x22e0 [ 1013.564771][T18982] do_recvmmsg+0xc2/0x22e0 [ 1013.731087][T18985] not chained 1020000 origins [ 1013.735862][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1013.744507][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.754545][T18985] Call Trace: [ 1013.757812][T18985] dump_stack+0x21c/0x280 [ 1013.762136][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1013.767842][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1013.773898][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1013.779083][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1013.784874][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1013.790924][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1013.796285][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1013.801493][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1013.807106][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1013.813161][T18985] ? _copy_from_user+0x201/0x310 [ 1013.818085][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1013.823281][T18985] __msan_chain_origin+0x57/0xa0 [ 1013.828220][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1013.833336][T18985] get_compat_msghdr+0x108/0x2b0 [ 1013.838274][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1013.842778][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1013.847971][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1013.853160][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1013.858795][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1013.864058][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1013.868795][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1013.873458][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1013.879249][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1013.884426][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1013.890466][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1013.896610][T18985] __do_fast_syscall_32+0x129/0x180 [ 1013.901794][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1013.906663][T18985] do_SYSENTER_32+0x73/0x90 [ 1013.911166][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1013.917499][T18985] RIP: 0023:0xf7fe5549 [ 1013.921558][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1013.941141][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1013.949531][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1013.957493][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1013.965445][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1013.973402][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1013.981364][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1013.989316][T18985] Uninit was stored to memory at: [ 1013.994369][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1014.000086][T18985] __msan_chain_origin+0x57/0xa0 [ 1014.005007][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1014.010099][T18985] get_compat_msghdr+0x108/0x2b0 [ 1014.015030][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1014.019576][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1014.024233][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.030275][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.036408][T18985] __do_fast_syscall_32+0x129/0x180 [ 1014.041581][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1014.046406][T18985] do_SYSENTER_32+0x73/0x90 [ 1014.050931][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.057228][T18985] [ 1014.059581][T18985] Uninit was stored to memory at: [ 1014.064597][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1014.070290][T18985] __msan_chain_origin+0x57/0xa0 [ 1014.075204][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1014.080287][T18985] get_compat_msghdr+0x108/0x2b0 [ 1014.085199][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1014.089679][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1014.094342][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.100394][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.106526][T18985] __do_fast_syscall_32+0x129/0x180 [ 1014.111709][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1014.116543][T18985] do_SYSENTER_32+0x73/0x90 [ 1014.121034][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.127341][T18985] [ 1014.129639][T18985] Uninit was stored to memory at: [ 1014.134654][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1014.140370][T18985] __msan_chain_origin+0x57/0xa0 [ 1014.145294][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1014.150391][T18985] get_compat_msghdr+0x108/0x2b0 [ 1014.155422][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1014.159902][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1014.164564][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.170617][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.176748][T18985] __do_fast_syscall_32+0x129/0x180 [ 1014.181934][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1014.186774][T18985] do_SYSENTER_32+0x73/0x90 [ 1014.191250][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.197543][T18985] [ 1014.199842][T18985] Uninit was stored to memory at: [ 1014.204844][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1014.210563][T18985] __msan_chain_origin+0x57/0xa0 [ 1014.215486][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1014.220569][T18985] get_compat_msghdr+0x108/0x2b0 [ 1014.225480][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1014.229956][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1014.234617][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.240674][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.246809][T18985] __do_fast_syscall_32+0x129/0x180 [ 1014.251993][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1014.256844][T18985] do_SYSENTER_32+0x73/0x90 [ 1014.261334][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.267626][T18985] [ 1014.269927][T18985] Uninit was stored to memory at: [ 1014.274940][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1014.280650][T18985] __msan_chain_origin+0x57/0xa0 [ 1014.285565][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1014.290649][T18985] get_compat_msghdr+0x108/0x2b0 [ 1014.295567][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1014.300044][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1014.304697][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.310740][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.316871][T18985] __do_fast_syscall_32+0x129/0x180 [ 1014.322044][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1014.326869][T18985] do_SYSENTER_32+0x73/0x90 [ 1014.331348][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.337640][T18985] [ 1014.339939][T18985] Uninit was stored to memory at: [ 1014.344953][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1014.350659][T18985] __msan_chain_origin+0x57/0xa0 [ 1014.355581][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1014.360678][T18985] get_compat_msghdr+0x108/0x2b0 [ 1014.365593][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1014.370073][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1014.374739][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.380789][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.387034][T18985] __do_fast_syscall_32+0x129/0x180 [ 1014.392230][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1014.397064][T18985] do_SYSENTER_32+0x73/0x90 [ 1014.401550][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.407840][T18985] [ 1014.410173][T18985] Uninit was stored to memory at: [ 1014.415179][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1014.420911][T18985] __msan_chain_origin+0x57/0xa0 [ 1014.425824][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1014.430918][T18985] get_compat_msghdr+0x108/0x2b0 [ 1014.435896][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1014.440379][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1014.445031][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.451069][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.457209][T18985] __do_fast_syscall_32+0x129/0x180 [ 1014.462405][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1014.467289][T18985] do_SYSENTER_32+0x73/0x90 [ 1014.471778][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1014.478081][T18985] [ 1014.480385][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1014.487034][T18985] do_recvmmsg+0xc2/0x22e0 [ 1014.491423][T18985] do_recvmmsg+0xc2/0x22e0 [ 1014.817059][T18982] not chained 1030000 origins [ 1014.821766][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1014.830428][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.840478][T18982] Call Trace: [ 1014.843773][T18982] dump_stack+0x21c/0x280 [ 1014.848110][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 1014.853835][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1014.859904][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1014.865102][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1014.870911][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1014.876978][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1014.882352][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1014.887575][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1014.893210][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1014.899281][T18982] ? _copy_from_user+0x201/0x310 [ 1014.904216][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1014.909522][T18982] __msan_chain_origin+0x57/0xa0 [ 1014.914458][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1014.919579][T18982] get_compat_msghdr+0x108/0x2b0 [ 1014.924520][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1014.929023][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1014.934221][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1014.939427][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1014.945062][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 1014.950346][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 1014.955112][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1014.959791][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1014.965595][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1014.970791][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1014.976860][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1014.983019][T18982] __do_fast_syscall_32+0x129/0x180 [ 1014.988220][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1014.993074][T18982] do_SYSENTER_32+0x73/0x90 [ 1014.997581][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.003903][T18982] RIP: 0023:0xf7fe5549 [ 1015.007984][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1015.027600][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1015.036011][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1015.043986][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1015.051958][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1015.059932][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1015.067903][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1015.075872][T18982] Uninit was stored to memory at: [ 1015.080907][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1015.086629][T18982] __msan_chain_origin+0x57/0xa0 [ 1015.091560][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1015.096663][T18982] get_compat_msghdr+0x108/0x2b0 [ 1015.101589][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1015.106087][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1015.110765][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.116828][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.122979][T18982] __do_fast_syscall_32+0x129/0x180 [ 1015.128173][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1015.133013][T18982] do_SYSENTER_32+0x73/0x90 [ 1015.137509][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.143812][T18982] [ 1015.146120][T18982] Uninit was stored to memory at: [ 1015.151137][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1015.156843][T18982] __msan_chain_origin+0x57/0xa0 [ 1015.161894][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1015.166997][T18982] get_compat_msghdr+0x108/0x2b0 [ 1015.171933][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1015.176434][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1015.181102][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.187160][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.193305][T18982] __do_fast_syscall_32+0x129/0x180 [ 1015.198495][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1015.203335][T18982] do_SYSENTER_32+0x73/0x90 [ 1015.207830][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.214130][T18982] [ 1015.216440][T18982] Uninit was stored to memory at: [ 1015.221463][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1015.227168][T18982] __msan_chain_origin+0x57/0xa0 [ 1015.232088][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1015.237181][T18982] get_compat_msghdr+0x108/0x2b0 [ 1015.242108][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1015.246597][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1015.251259][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.257311][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.263452][T18982] __do_fast_syscall_32+0x129/0x180 [ 1015.268633][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1015.273467][T18982] do_SYSENTER_32+0x73/0x90 [ 1015.277965][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.284270][T18982] [ 1015.286578][T18982] Uninit was stored to memory at: [ 1015.291592][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1015.297296][T18982] __msan_chain_origin+0x57/0xa0 [ 1015.302220][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1015.307315][T18982] get_compat_msghdr+0x108/0x2b0 [ 1015.312243][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1015.316741][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1015.321403][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.327470][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.333616][T18982] __do_fast_syscall_32+0x129/0x180 [ 1015.338799][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1015.343635][T18982] do_SYSENTER_32+0x73/0x90 [ 1015.348123][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.354429][T18982] [ 1015.356748][T18982] Uninit was stored to memory at: [ 1015.361762][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1015.367483][T18982] __msan_chain_origin+0x57/0xa0 [ 1015.372404][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1015.377502][T18982] get_compat_msghdr+0x108/0x2b0 [ 1015.382431][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1015.386919][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1015.391582][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.397633][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.404129][T18982] __do_fast_syscall_32+0x129/0x180 [ 1015.409411][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1015.414245][T18982] do_SYSENTER_32+0x73/0x90 [ 1015.418734][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.425034][T18982] [ 1015.427339][T18982] Uninit was stored to memory at: [ 1015.432360][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1015.438064][T18982] __msan_chain_origin+0x57/0xa0 [ 1015.442985][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1015.448101][T18982] get_compat_msghdr+0x108/0x2b0 [ 1015.453028][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1015.457517][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1015.462181][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.468327][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.474469][T18982] __do_fast_syscall_32+0x129/0x180 [ 1015.479654][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1015.484491][T18982] do_SYSENTER_32+0x73/0x90 [ 1015.488979][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.495277][T18982] [ 1015.497583][T18982] Uninit was stored to memory at: [ 1015.502596][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1015.508301][T18982] __msan_chain_origin+0x57/0xa0 [ 1015.513224][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1015.518318][T18982] get_compat_msghdr+0x108/0x2b0 [ 1015.523243][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1015.527732][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1015.532395][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.538445][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.544585][T18982] __do_fast_syscall_32+0x129/0x180 [ 1015.549766][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1015.554602][T18982] do_SYSENTER_32+0x73/0x90 [ 1015.559093][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.565390][T18982] [ 1015.567700][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 1015.574366][T18982] do_recvmmsg+0xc2/0x22e0 [ 1015.578770][T18982] do_recvmmsg+0xc2/0x22e0 [ 1015.726800][T18985] not chained 1040000 origins [ 1015.731515][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1015.740178][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.750312][T18985] Call Trace: [ 1015.753607][T18985] dump_stack+0x21c/0x280 [ 1015.757939][T18985] kmsan_internal_chain_origin+0x6f/0x130 [ 1015.763656][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1015.769706][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1015.774889][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1015.780682][T18985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1015.786733][T18985] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1015.792094][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1015.797285][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1015.802905][T18985] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1015.808957][T18985] ? _copy_from_user+0x201/0x310 [ 1015.813883][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1015.819067][T18985] __msan_chain_origin+0x57/0xa0 [ 1015.823992][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1015.829092][T18985] get_compat_msghdr+0x108/0x2b0 [ 1015.834019][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1015.838510][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1015.843696][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1015.848884][T18985] ? kmsan_internal_set_origin+0x85/0xc0 [ 1015.854506][T18985] ? __msan_poison_alloca+0xe9/0x110 [ 1015.859795][T18985] ? __sys_recvmmsg+0xb5/0x5f0 [ 1015.864553][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1015.869223][T18985] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1015.875020][T18985] ? kmsan_get_metadata+0x116/0x180 [ 1015.880220][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1015.886292][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1015.892450][T18985] __do_fast_syscall_32+0x129/0x180 [ 1015.897641][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1015.902483][T18985] do_SYSENTER_32+0x73/0x90 [ 1015.906977][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1015.913288][T18985] RIP: 0023:0xf7fe5549 [ 1015.917344][T18985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1015.936932][T18985] RSP: 002b:00000000f55be0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1015.946211][T18985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1015.954174][T18985] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1015.962137][T18985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1015.970096][T18985] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1015.978055][T18985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1015.986016][T18985] Uninit was stored to memory at: [ 1015.991035][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1015.996743][T18985] __msan_chain_origin+0x57/0xa0 [ 1016.001666][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1016.006779][T18985] get_compat_msghdr+0x108/0x2b0 [ 1016.011707][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1016.016200][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1016.020871][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.026934][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.033081][T18985] __do_fast_syscall_32+0x129/0x180 [ 1016.038267][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1016.043106][T18985] do_SYSENTER_32+0x73/0x90 [ 1016.047599][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.053898][T18985] [ 1016.056212][T18985] Uninit was stored to memory at: [ 1016.061237][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1016.067038][T18985] __msan_chain_origin+0x57/0xa0 [ 1016.071960][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1016.077054][T18985] get_compat_msghdr+0x108/0x2b0 [ 1016.081977][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1016.086466][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1016.091135][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.097188][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.103327][T18985] __do_fast_syscall_32+0x129/0x180 [ 1016.108508][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1016.113344][T18985] do_SYSENTER_32+0x73/0x90 [ 1016.117851][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.124148][T18985] [ 1016.126457][T18985] Uninit was stored to memory at: [ 1016.131470][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1016.137261][T18985] __msan_chain_origin+0x57/0xa0 [ 1016.142184][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1016.147279][T18985] get_compat_msghdr+0x108/0x2b0 [ 1016.152203][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1016.156693][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1016.161361][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.167423][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.173569][T18985] __do_fast_syscall_32+0x129/0x180 [ 1016.178755][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1016.183597][T18985] do_SYSENTER_32+0x73/0x90 [ 1016.188093][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.194397][T18985] [ 1016.196707][T18985] Uninit was stored to memory at: [ 1016.201726][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1016.207439][T18985] __msan_chain_origin+0x57/0xa0 [ 1016.212364][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1016.217460][T18985] get_compat_msghdr+0x108/0x2b0 [ 1016.222385][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1016.226874][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1016.231537][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.237603][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.243751][T18985] __do_fast_syscall_32+0x129/0x180 [ 1016.248948][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1016.253789][T18985] do_SYSENTER_32+0x73/0x90 [ 1016.258278][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.264578][T18985] [ 1016.266899][T18985] Uninit was stored to memory at: [ 1016.271922][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1016.277634][T18985] __msan_chain_origin+0x57/0xa0 [ 1016.282564][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1016.287661][T18985] get_compat_msghdr+0x108/0x2b0 [ 1016.292586][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1016.297076][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1016.301744][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.307803][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.313942][T18985] __do_fast_syscall_32+0x129/0x180 [ 1016.319126][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1016.323963][T18985] do_SYSENTER_32+0x73/0x90 [ 1016.328451][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.334750][T18985] [ 1016.337058][T18985] Uninit was stored to memory at: [ 1016.342158][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1016.347861][T18985] __msan_chain_origin+0x57/0xa0 [ 1016.352783][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1016.357878][T18985] get_compat_msghdr+0x108/0x2b0 [ 1016.362803][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1016.367290][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1016.371966][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.378015][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.384175][T18985] __do_fast_syscall_32+0x129/0x180 [ 1016.389357][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1016.394192][T18985] do_SYSENTER_32+0x73/0x90 [ 1016.398680][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.404982][T18985] [ 1016.407287][T18985] Uninit was stored to memory at: [ 1016.412298][T18985] kmsan_internal_chain_origin+0xad/0x130 [ 1016.418003][T18985] __msan_chain_origin+0x57/0xa0 [ 1016.422922][T18985] __get_compat_msghdr+0x6db/0x9d0 [ 1016.428016][T18985] get_compat_msghdr+0x108/0x2b0 [ 1016.432948][T18985] do_recvmmsg+0xdc7/0x22e0 [ 1016.437475][T18985] __sys_recvmmsg+0x340/0x5f0 [ 1016.442138][T18985] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1016.448188][T18985] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1016.454327][T18985] __do_fast_syscall_32+0x129/0x180 [ 1016.459511][T18985] do_fast_syscall_32+0x6a/0xc0 [ 1016.464345][T18985] do_SYSENTER_32+0x73/0x90 [ 1016.468834][T18985] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1016.475132][T18985] [ 1016.477441][T18985] Local variable ----msg_sys@do_recvmmsg created at: [ 1016.484101][T18985] do_recvmmsg+0xc2/0x22e0 [ 1016.488502][T18985] do_recvmmsg+0xc2/0x22e0 [ 1016.960229][T18982] not chained 1050000 origins [ 1016.964943][T18982] CPU: 0 PID: 18982 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 1016.973605][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.983912][T18982] Call Trace: [ 1016.987206][T18982] dump_stack+0x21c/0x280 [ 1016.991541][T18982] kmsan_internal_chain_origin+0x6f/0x130 [ 1016.997263][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1017.003321][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1017.008506][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1017.014305][T18982] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1017.020360][T18982] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1017.025724][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1017.030901][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1017.036511][T18982] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1017.042683][T18982] ? _copy_from_user+0x201/0x310 [ 1017.047610][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1017.052792][T18982] __msan_chain_origin+0x57/0xa0 [ 1017.057709][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1017.062799][T18982] get_compat_msghdr+0x108/0x2b0 [ 1017.067723][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1017.072235][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1017.077408][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1017.082582][T18982] ? kmsan_internal_set_origin+0x85/0xc0 [ 1017.088189][T18982] ? __msan_poison_alloca+0xe9/0x110 [ 1017.093452][T18982] ? __sys_recvmmsg+0xb5/0x5f0 [ 1017.098190][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1017.102854][T18982] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1017.108691][T18982] ? kmsan_get_metadata+0x116/0x180 [ 1017.113881][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.120029][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.126178][T18982] __do_fast_syscall_32+0x129/0x180 [ 1017.131391][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1017.136220][T18982] do_SYSENTER_32+0x73/0x90 [ 1017.140705][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.147006][T18982] RIP: 0023:0xf7fe5549 [ 1017.151052][T18982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1017.170639][T18982] RSP: 002b:00000000f55df0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1017.179028][T18982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000880 [ 1017.186987][T18982] RDX: 0000000004000246 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.194952][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1017.202933][T18982] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1017.210880][T18982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1017.218826][T18982] Uninit was stored to memory at: [ 1017.223843][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1017.229553][T18982] __msan_chain_origin+0x57/0xa0 [ 1017.235030][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1017.240114][T18982] get_compat_msghdr+0x108/0x2b0 [ 1017.245026][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1017.249552][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1017.254204][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.260242][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.266368][T18982] __do_fast_syscall_32+0x129/0x180 [ 1017.271549][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1017.276375][T18982] do_SYSENTER_32+0x73/0x90 [ 1017.280855][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.287146][T18982] [ 1017.289454][T18982] Uninit was stored to memory at: [ 1017.294457][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1017.300148][T18982] __msan_chain_origin+0x57/0xa0 [ 1017.305059][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1017.310142][T18982] get_compat_msghdr+0x108/0x2b0 [ 1017.315052][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1017.319529][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1017.324188][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.330240][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.336379][T18982] __do_fast_syscall_32+0x129/0x180 [ 1017.341549][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1017.346385][T18982] do_SYSENTER_32+0x73/0x90 [ 1017.350862][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.357163][T18982] [ 1017.359462][T18982] Uninit was stored to memory at: [ 1017.364461][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1017.370155][T18982] __msan_chain_origin+0x57/0xa0 [ 1017.375066][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1017.380159][T18982] get_compat_msghdr+0x108/0x2b0 [ 1017.385083][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1017.389572][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1017.394222][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.400261][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.406398][T18982] __do_fast_syscall_32+0x129/0x180 [ 1017.411580][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1017.416403][T18982] do_SYSENTER_32+0x73/0x90 [ 1017.420879][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.427173][T18982] [ 1017.429490][T18982] Uninit was stored to memory at: [ 1017.434504][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1017.440198][T18982] __msan_chain_origin+0x57/0xa0 [ 1017.445110][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1017.450279][T18982] get_compat_msghdr+0x108/0x2b0 [ 1017.455188][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1017.459665][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1017.464314][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.470353][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.476480][T18982] __do_fast_syscall_32+0x129/0x180 [ 1017.481651][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1017.486475][T18982] do_SYSENTER_32+0x73/0x90 [ 1017.490953][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.497245][T18982] [ 1017.499544][T18982] Uninit was stored to memory at: [ 1017.504542][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1017.510248][T18982] __msan_chain_origin+0x57/0xa0 [ 1017.515157][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1017.520238][T18982] get_compat_msghdr+0x108/0x2b0 [ 1017.525148][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1017.529635][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1017.534299][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.540340][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.546468][T18982] __do_fast_syscall_32+0x129/0x180 [ 1017.551639][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1017.556465][T18982] do_SYSENTER_32+0x73/0x90 [ 1017.560953][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.567244][T18982] [ 1017.569541][T18982] Uninit was stored to memory at: [ 1017.574542][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1017.580236][T18982] __msan_chain_origin+0x57/0xa0 [ 1017.585160][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1017.590242][T18982] get_compat_msghdr+0x108/0x2b0 [ 1017.595153][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1017.599630][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1017.604280][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.610320][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.616457][T18982] __do_fast_syscall_32+0x129/0x180 [ 1017.621628][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1017.626453][T18982] do_SYSENTER_32+0x73/0x90 [ 1017.630941][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.637235][T18982] [ 1017.639535][T18982] Uninit was stored to memory at: [ 1017.644535][T18982] kmsan_internal_chain_origin+0xad/0x130 [ 1017.650227][T18982] __msan_chain_origin+0x57/0xa0 [ 1017.655138][T18982] __get_compat_msghdr+0x6db/0x9d0 [ 1017.660392][T18982] get_compat_msghdr+0x108/0x2b0 [ 1017.665318][T18982] do_recvmmsg+0xdc7/0x22e0 [ 1017.669796][T18982] __sys_recvmmsg+0x340/0x5f0 [ 1017.674450][T18982] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1017.680488][T18982] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1017.686617][T18982] __do_fast_syscall_32+0x129/0x180 [ 1017.691791][T18982] do_fast_syscall_32+0x6a/0xc0 [ 1017.696616][T18982] do_SYSENTER_32+0x73/0x90 [ 1017.701093][T18982] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.707383][T18982] [ 1017.709693][T18982] Local variable ----msg_sys@do_recvmmsg created at: [ 1017.716339][T18982] do_recvmmsg+0xc2/0x22e0 [ 1017.720728][T18982] do_recvmmsg+0xc2/0x22e0 06:42:47 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]}) 06:42:47 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 06:42:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040), 0x4) 06:42:47 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, 0x0) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:42:47 executing program 5: mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000080)='9p\x00', 0x200455, 0x0) 06:42:47 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x43a79a7527392b4b, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001400)}], 0x0, 0x0) openat(r0, 0x0, 0x0, 0x0) [ 1018.580682][T19143] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1018.712056][T19143] 9pnet_virtio: no channels available for device 127.0.0.1 06:42:48 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000001a80)=@ethernet={0x0, @remote}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0xaaaaaaaaaaaac44, &(0x7f0000001140)=[{&(0x7f0000001b40)="a276f683159309a9e5ea3c0e28dedabb1d0beef9599a83b2ca40eed5aa0d1ad30b828ad6142fb90d9400de764f4a69c15eb0f1b9c7a5800dc057b96733d788a5254d55b24ced853561e8ceddef30217cff1f70ff1f08ab5167b55fc3d151ae121aa88934c138d8214e4562855da4d8bd7f4989d00917d81f66f05de4c0247cdce5bc3840bea6a87f709a9cda2d6e4f6800d1a720bed4ff0291d85b22069b00af3f87b6935346bb3991b0a3ad7f926144657cc65b0f93db3b", 0x1}, {&(0x7f0000000140)="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", 0x1000}], 0x10, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000001300)=ANY=[@ANYBLOB, @ANYBLOB="02000200", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="02e60000", @ANYRES64, @ANYBLOB], 0x5c, 0x0) 06:42:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10d082) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) write(r0, &(0x7f0000000000), 0x52698b21) 06:42:48 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, 0x0) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) [ 1019.124200][ T1404] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:42:48 executing program 5: r0 = socket(0x1, 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 06:42:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000600)={0x11, 0x1e, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 1019.746888][ T1404] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:42:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x4, 0x7}, 0x1c) [ 1020.488157][ T1404] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.896309][ T1404] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.127820][ T1404] tipc: TX() has been purged, node left! [ 1024.608045][ T1404] device hsr_slave_0 left promiscuous mode [ 1024.646995][ T1404] device hsr_slave_1 left promiscuous mode [ 1024.727918][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.735886][ T1404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.778877][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.787697][ T1404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.812040][ T1404] device bridge_slave_1 left promiscuous mode [ 1024.818676][ T1404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.832476][ T1404] device bridge_slave_0 left promiscuous mode [ 1024.839392][ T1404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.859091][ T1404] device veth1_macvtap left promiscuous mode [ 1024.866781][ T1404] device veth0_macvtap left promiscuous mode [ 1024.873076][ T1404] device veth1_vlan left promiscuous mode [ 1024.878942][ T1404] device veth0_vlan left promiscuous mode [ 1027.286353][ T1404] team0 (unregistering): Port device team_slave_1 removed [ 1027.300385][ T1404] team0 (unregistering): Port device team_slave_0 removed [ 1027.320465][ T1404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.340877][ T1404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.422991][ T1404] bond0 (unregistering): Released all slaves [ 1027.747000][T19221] IPVS: ftp: loaded support on port[0] = 21 [ 1027.959423][T19221] chnl_net:caif_netlink_parms(): no params data found [ 1028.105859][T19221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.113269][T19221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.123159][T19221] device bridge_slave_0 entered promiscuous mode [ 1028.147193][T19221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.155317][T19221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.165186][T19221] device bridge_slave_1 entered promiscuous mode [ 1028.255165][T19221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.277075][T19221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.348508][T19221] team0: Port device team_slave_0 added [ 1028.361611][T19221] team0: Port device team_slave_1 added [ 1028.414146][T19221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.421216][T19221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.447652][T19221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.467037][T19221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.474547][T19221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.502749][T19221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.574936][T19221] device hsr_slave_0 entered promiscuous mode [ 1028.591074][T19221] device hsr_slave_1 entered promiscuous mode [ 1028.601405][T19221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1028.609605][T19221] Cannot create hsr debugfs directory [ 1028.983529][T19221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.015661][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1029.024588][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1029.044907][T19221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.064775][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1029.074620][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1029.084695][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.092100][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.142361][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1029.150776][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1029.160734][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1029.169744][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.177088][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.185586][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1029.196617][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1029.207383][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1029.217832][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1029.240806][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1029.250100][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1029.260498][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1029.284108][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1029.293931][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1029.325511][T19221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1029.338841][T19221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1029.348299][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1029.357982][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1029.399616][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1029.407410][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1029.437410][T19221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.545731][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1029.556597][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1029.585529][ T8482] Bluetooth: hci4: command 0x0409 tx timeout [ 1029.606252][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1029.618040][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1029.639512][T19221] device veth0_vlan entered promiscuous mode [ 1029.655244][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1029.664552][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1029.683375][T19221] device veth1_vlan entered promiscuous mode [ 1029.735462][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1029.744815][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1029.754231][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1029.764153][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1029.783166][T19221] device veth0_macvtap entered promiscuous mode [ 1029.801154][T19221] device veth1_macvtap entered promiscuous mode [ 1029.824474][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1029.834072][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1029.864763][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1029.875545][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.885593][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1029.896217][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.906259][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1029.916877][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.926988][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1029.937605][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.947682][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1029.958303][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.970694][T19221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.984087][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1029.994182][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1030.016875][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.028891][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.039528][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.050206][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.060279][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.070922][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.081007][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.091662][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.101625][T19221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.112267][T19221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.126204][T19221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.135908][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1030.146473][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1030.441512][ T8481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.449704][ T8481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.560584][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1030.593957][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.602074][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.629770][ T714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1030.773423][ T31] audit: type=1326 audit(1605076979.931:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=19451 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7feb549 code=0x0 [ 1031.551652][ T31] audit: type=1326 audit(1605076980.711:10): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=19451 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7feb549 code=0x0 06:43:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xc8, 0xec, 0x1fc, 0xec, 0x0, 0x2a8, 0x2e8, 0x2e8, 0x2e8, 0x2a8, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'veth1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010100, 'macvtap0\x00'}}}, {{@ipv6={@private1, @dev, [], [], 'veth1_macvtap\x00', 'vlan0\x00'}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@limit={{0x3c, 'limit\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@hl={{0x24, 'hl\x00'}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) 06:43:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x7c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa4}}, 0x4048881) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB="0074ab7af74a46ecefe4f6c339db38b34825e52da778269b3e9fc65c5b357e316585b2fcf206dd3baece42499392442b039d9d5d3a477dacf91811c326e5ed3d004fe0ff2e1fc7461b45242bbbb6664dc292ef32820d8dc448752294f8c9", @ANYRESDEC], 0x54}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20048a92341f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0x7ff8, 0xe, 0x0, 0xfffffffffffffe2b) 06:43:00 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, 0x0) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:00 executing program 0: r0 = socket(0xa, 0x3, 0x2) connect$packet(r0, &(0x7f0000000000), 0x14) 06:43:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6068cc8600143300fe8000000000000000000000000000aa"], 0x0) 06:43:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="0157706f7495541c656f749bbcd2", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) [ 1031.663071][ T8482] Bluetooth: hci4: command 0x041b tx timeout 06:43:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xffffffffffffffd0) 06:43:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x600000, 0xe, 0x1ff}, 0x1c) 06:43:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) close(r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0) 06:43:01 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x146, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1032.213702][T19472] x_tables: duplicate underflow at hook 2 [ 1032.273883][T19474] x_tables: duplicate underflow at hook 2 06:43:01 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:01 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x3) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x5) fcntl$addseals(r0, 0x409, 0xb) 06:43:01 executing program 4: semctl$GETPID(0x0, 0x3, 0xb, 0x0) 06:43:01 executing program 1: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000a80)) 06:43:01 executing program 5: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/253) 06:43:02 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @rand_addr, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x7, 0x0, [@empty]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@broadcast}, {}, {@private}]}]}}}}}}}, 0x0) 06:43:02 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 06:43:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x8008af26, &(0x7f0000000080)) 06:43:02 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:43:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, "ca"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) [ 1033.742036][T19160] Bluetooth: hci4: command 0x040f tx timeout 06:43:04 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:43:04 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:04 executing program 5: socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x300) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000b40)=ANY=[], 0xfa38) 06:43:04 executing program 3: 06:43:04 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000000904"], 0x0) 06:43:04 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 1035.822147][T19160] Bluetooth: hci4: command 0x0419 tx timeout 06:43:05 executing program 3: 06:43:05 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:05 executing program 5: [ 1036.181942][T19160] usb 5-1: new high-speed USB device number 8 using dummy_hcd 06:43:05 executing program 3: [ 1036.422185][T19160] usb 5-1: Using ep0 maxpacket: 8 [ 1036.583012][T19160] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.593609][T19160] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1036.602957][T19160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.726704][T19160] usb 5-1: config 0 descriptor?? 06:43:05 executing program 5: [ 1036.778310][T19160] iowarrior 5-1:0.0: no interrupt-in endpoint found 06:43:06 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) [ 1037.002040][ T8482] usb 5-1: USB disconnect, device number 8 06:43:06 executing program 0: 06:43:06 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ff}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000200)=""/4115, 0x1013}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080)=0x910, 0x4) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) 06:43:06 executing program 5: 06:43:06 executing program 1: [ 1037.772252][ T8482] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1038.040534][ T8482] usb 5-1: Using ep0 maxpacket: 8 [ 1038.162231][ T8482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.172787][ T8482] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1038.182222][ T8482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.210734][ T8482] usb 5-1: config 0 descriptor?? [ 1038.262309][ T8482] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 1038.463179][ T714] usb 5-1: USB disconnect, device number 9 06:43:07 executing program 4: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000140)) 06:43:07 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:07 executing program 5: 06:43:07 executing program 3: 06:43:07 executing program 0: 06:43:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000014c0)={0x0, @xdp, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @ipx={0x4, 0x0, 0x0, "05c31eca4064"}}) 06:43:08 executing program 1: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd7530dc6b0d5d761) 06:43:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) 06:43:08 executing program 3: 06:43:08 executing program 0: 06:43:08 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:08 executing program 4: set_mempolicy(0x0, &(0x7f0000000380), 0x6) 06:43:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_CHAIN]}, 0x34}}, 0x0) 06:43:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) 06:43:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000080)=0xfffffffffffffd9d) 06:43:08 executing program 3: getdents64(0xffffffffffffff9c, 0x0, 0x0) [ 1039.880817][T19622] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 06:43:09 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0xffff) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/117, 0x75) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 06:43:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 06:43:09 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x80c0, 0x0) 06:43:09 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:09 executing program 3: msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES16], 0x1, 0x0) 06:43:09 executing program 5: r0 = getpgid(0x0) ptrace$getsig(0x4202, r0, 0x0, 0x0) [ 1040.438141][ T31] audit: type=1326 audit(1605076989.601:11): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=19628 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7feb549 code=0x0 06:43:10 executing program 5: process_vm_writev(0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 06:43:10 executing program 1: pselect6(0x40, &(0x7f00000003c0), 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0}) 06:43:10 executing program 3: socket(0x1d, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 06:43:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000014c0)={0x0, @xdp, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @ipx={0x4, 0x0, 0x0, "05c31eca4064", 0x20}}) 06:43:10 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) [ 1041.230660][ T31] audit: type=1326 audit(1605076990.391:12): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=19628 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7feb549 code=0x0 06:43:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @remote}, @ax25={0x3, @default}, @ipx={0x4, 0x0, 0x0, "3b5fb50c7176"}}) 06:43:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xfffffffffffffd72) [ 1041.587120][T19653] can: request_module (can-proto-0) failed. [ 1041.655767][T19653] can: request_module (can-proto-0) failed. 06:43:10 executing program 5: pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0xff}, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) 06:43:11 executing program 3: socketpair(0x22, 0x0, 0x2, 0x0) 06:43:11 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 06:43:11 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:11 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{}, {}]}) 06:43:11 executing program 1: syz_mount_image$afs(&(0x7f0000000280)='afs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x40004, &(0x7f0000000400)) 06:43:11 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/config\x00') 06:43:11 executing program 3: futex$FUTEX_WAIT_MULTIPLE(0x0, 0xd, 0x0, &(0x7f0000001800), 0x0, 0x0) 06:43:12 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x10001]}, 0x8}) 06:43:12 executing program 4: timer_create(0x5, &(0x7f00000000c0), 0x0) 06:43:12 executing program 0: modify_ldt$write(0x1, &(0x7f0000001740), 0x10) 06:43:12 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:12 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000006180)='net/sco\x00') 06:43:12 executing program 3: ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) 06:43:12 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/rt_acct\x00') 06:43:12 executing program 5: capset(&(0x7f00000007c0)={0x19980330}, &(0x7f0000000800)) 06:43:13 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f00000000c0)) 06:43:13 executing program 0: capset(&(0x7f00000015c0)={0x19980330, 0xffffffffffffffff}, 0x0) 06:43:13 executing program 3: syz_mount_image$squashfs(&(0x7f0000000280)='squashfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2400, &(0x7f00000005c0)) 06:43:13 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) [ 1044.202258][T19705] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 06:43:13 executing program 4: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x3) 06:43:13 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/softnet_stat\x00') 06:43:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 06:43:13 executing program 1: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) 06:43:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r0, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r2, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r3, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) 06:43:14 executing program 3: futimesat(0xffffffffffffffff, 0x0, &(0x7f0000001400)={{}, {0x0, 0xea60}}) 06:43:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000002680), &(0x7f00000026c0)=0x4) 06:43:14 executing program 4: syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001340)=[{&(0x7f0000001240)="fc", 0x1, 0xfff}], 0x0, 0x0) 06:43:14 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) 06:43:14 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) 06:43:14 executing program 1: utimensat(0xffffffffffffffff, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={{0x0, 0xea60}, {0x77359400}}, 0x0) 06:43:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x8}) 06:43:14 executing program 5: ioperm(0x0, 0xa0a, 0x0) 06:43:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r0, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r2, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r3, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) 06:43:15 executing program 4: set_mempolicy(0x3, &(0x7f00000006c0)=0x9, 0xb9b) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 06:43:15 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001680)='ns\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 06:43:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002d00010000400000000000008e"], 0x2c}}, 0x0) 06:43:15 executing program 1: capset(&(0x7f0000000100)={0x20080522, 0xffffffffffffffff}, 0x0) 06:43:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000000)=0xd6) 06:43:15 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/hwrng\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000000100)=""/152, 0x98) 06:43:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r0, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r2, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r3, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) [ 1046.630678][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 06:43:15 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0xffffffbe}) 06:43:16 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0}) 06:43:16 executing program 5: syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000180)="db", 0x1, 0x80000000}], 0x0, 0x0) 06:43:16 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)) 06:43:16 executing program 0: shmget$private(0x0, 0x1000, 0x54001005, &(0x7f0000fff000/0x1000)=nil) 06:43:16 executing program 3: socketpair(0x24, 0x0, 0x0, 0x0) 06:43:16 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) 06:43:17 executing program 5: getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000240)) r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 06:43:17 executing program 1: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) 06:43:17 executing program 0: clock_gettime(0x0, &(0x7f00000013c0)) 06:43:17 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x0, 0x1000, 0x30, 0x0, 0x0, 0x0, 0x8}) 06:43:17 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) 06:43:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x2}]}, &(0x7f00000002c0)=0x10) 06:43:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 06:43:17 executing program 5: set_mempolicy(0x3, &(0x7f00000006c0)=0x9, 0xb9b) syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000140)="81", 0x1}], 0x0, 0x0) 06:43:17 executing program 1: set_mempolicy(0x0, &(0x7f00000006c0)=0x9, 0xb9b) 06:43:18 executing program 3: syz_mount_image$afs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000140)="81", 0x1}, {&(0x7f0000000240)='6', 0x1}, {&(0x7f0000000cc0)="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", 0x341}], 0x0, 0x0) 06:43:18 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) 06:43:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000002d000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000090001007273767098"], 0x34}}, 0x0) 06:43:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:43:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 1049.429477][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:43:18 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(0x0, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) 06:43:19 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/hwrng\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 06:43:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}}, 0x0) 06:43:19 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x20) 06:43:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1310}}, 0x0) 06:43:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x14) 06:43:19 executing program 1: openat$hwrng(0xffffffffffffff9c, 0x0, 0x494900, 0x0) 06:43:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x24, 0x2d, 0x1}, 0x24}}, 0x0) 06:43:19 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(0x0, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:19 executing program 3: sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000001640)) 06:43:20 executing program 4: set_mempolicy(0x0, &(0x7f0000000040), 0x0) 06:43:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 06:43:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x9}]}, &(0x7f00000002c0)=0x10) 06:43:20 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/hwrng\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 06:43:20 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(0x0, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)=ANY=[@ANYBLOB="10"], 0x1310}}, 0x0) 06:43:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)) 06:43:20 executing program 4: syz_mount_image$squashfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:43:21 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 06:43:21 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:21 executing program 3: symlinkat(&(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000b00)='./file0\x00') [ 1052.235480][T19866] syz-executor.5 (19866) used greatest stack depth: 3904 bytes left 06:43:21 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/hwrng\x00', 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 06:43:21 executing program 0: fanotify_mark(0xffffffffffffffff, 0x5, 0x3, 0xffffffffffffffff, 0x0) 06:43:21 executing program 5: getitimer(0x1, &(0x7f00000000c0)) 06:43:21 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), 0x0) 06:43:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x11, 0x4) 06:43:22 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:22 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs, 0x6e) 06:43:22 executing program 0: syz_mount_image$squashfs(&(0x7f0000000100)='squashfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xc00, &(0x7f0000000280)) 06:43:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x13}]}, &(0x7f00000002c0)=0x10) 06:43:22 executing program 1: pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={0xff}, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) 06:43:22 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') 06:43:23 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000002680), &(0x7f00000026c0)=0x4) 06:43:23 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:23 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) 06:43:23 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') 06:43:23 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x0) 06:43:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xe}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0) 06:43:23 executing program 4: r0 = getpgid(0x0) sched_setaffinity(r0, 0x0, 0x0) 06:43:24 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000002580), 0x4) 06:43:24 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x0, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000002d00010000000000000000000d"], 0x34}}, 0x0) 06:43:24 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740)='/dev/hwrng\x00', 0x20200, 0x0) 06:43:24 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7) [ 1055.501085][T19937] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 06:43:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000080)) 06:43:24 executing program 5: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) 06:43:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @remote}, @ax25={0x3, @default}, @ipx={0x4, 0x0, 0x0, "3b5fb50c7176"}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='tunl0\x00'}) 06:43:25 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x0, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @empty}]}, &(0x7f00000002c0)=0x10) 06:43:25 executing program 4: statx(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) setreuid(0xee00, 0x0) 06:43:26 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000001bc0), 0x10) 06:43:26 executing program 0: rt_sigpending(&(0x7f0000001440), 0x8) 06:43:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @remote}, @ax25={0x3, @default}, @ipx={0x4, 0x0, 0x0, "3b5fb50c7176"}, 0x5, 0x0, 0x0, 0x0, 0xfff7, &(0x7f0000000000)='tunl0\x00'}) 06:43:26 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xe0002, 0x0) 06:43:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @remote}, @ax25={0x3, @default}, @ipx={0x4, 0x0, 0x0, "3b5fb50c7176"}, 0x5}) 06:43:26 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x0, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:26 executing program 5: capset(&(0x7f00000007c0)={0x19980330}, &(0x7f0000000800)) syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000240)="82", 0x1}], 0x0, 0x0) 06:43:27 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x0) 06:43:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)=ANY=[@ANYBLOB="101300002d0001000000000000000000000000001f20519b56135a6300d29202a840c5"], 0x1310}}, 0x0) 06:43:27 executing program 3: msgget(0x3, 0x210) 06:43:27 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:27 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000c80)) [ 1058.252497][T19980] netlink: 4844 bytes leftover after parsing attributes in process `syz-executor.4'. 06:43:27 executing program 5: socketpair(0x25, 0x1, 0x6244, 0x0) 06:43:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x8}]}) 06:43:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x1, 0x4) 06:43:27 executing program 4: timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 06:43:27 executing program 3: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x100) 06:43:28 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:28 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0), 0x8}) 06:43:28 executing program 0: syz_mount_image$afs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[{&(0x7f0000000180)="db", 0x1, 0x80000000}, {&(0x7f0000000cc0)="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", 0xe01, 0x200}], 0x0, 0x0) 06:43:28 executing program 1: process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/112, 0x70}], 0x1, 0x0, 0x0, 0x0) 06:43:28 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{0x0}], 0x1}, 0x0) 06:43:28 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x501941, 0x0) 06:43:29 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:29 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 06:43:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000240)=0xffffffff, 0x4) 06:43:29 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001680)='ns\x00') 06:43:29 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:29 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101800, 0x0) 06:43:30 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, 0x0) 06:43:30 executing program 5: process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/112, 0x70}], 0x1, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x0) 06:43:30 executing program 4: set_mempolicy(0x3, &(0x7f00000006c0)=0x9, 0xb9b) syz_mount_image$afs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:43:30 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x181201, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'trylock', ' ', 'mem'}, 0xc) 06:43:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}]}, &(0x7f00000002c0)=0x10) 06:43:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}}, 0x0) 06:43:30 executing program 5: capset(&(0x7f0000001100)={0x0, 0xffffffffffffffff}, 0x0) 06:43:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 06:43:30 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:31 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 06:43:31 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000780)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/180, 0xb4}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/112, 0x70}], 0xa, &(0x7f0000000700)=""/102, 0x66}, 0x10002) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000007c0), 0x4) recvmsg$can_raw(r1, &(0x7f0000001b80)={&(0x7f0000000800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000940)=""/118, 0x76}, {&(0x7f00000009c0)=""/215, 0xd7}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/17, 0x11}], 0x5}, 0x40000022) 06:43:31 executing program 5: syz_mount_image$afs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180)="db", 0x1, 0x80000000}, {&(0x7f0000000cc0)="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", 0xe01, 0x200}, {0x0}], 0x0, 0x0) 06:43:31 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:31 executing program 0: symlinkat(&(0x7f0000002580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00') 06:43:31 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x41) 06:43:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:43:32 executing program 0: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) 06:43:32 executing program 5: syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1158000, &(0x7f0000000480)) 06:43:32 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200), 0x8}) 06:43:32 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x0, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:32 executing program 4: set_mempolicy(0x3, &(0x7f00000006c0)=0x9, 0xb9b) syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000240)='6', 0x1}], 0x0, 0x0) 06:43:32 executing program 0: ioperm(0x0, 0xa0a, 0x1) 06:43:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 06:43:32 executing program 5: process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/112, 0x70}], 0x1, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/48, 0x30}, {0x0}], 0x2, 0x0) 06:43:33 executing program 3: set_mempolicy(0x3, &(0x7f00000006c0)=0x9, 0xb9b) 06:43:33 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) 06:43:33 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x0, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x3}]}) 06:43:33 executing program 5: syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000180)="db", 0x1, 0x80000000}], 0x28, &(0x7f0000000780)) 06:43:33 executing program 3: set_mempolicy(0x3, &(0x7f00000006c0)=0x9, 0xb9b) syz_mount_image$afs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000140)="81", 0x1}, {&(0x7f0000000240)='6', 0x1}, {&(0x7f0000000cc0)="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", 0x341}], 0x0, 0x0) 06:43:33 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4800) 06:43:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x0, 0x0, 0x30, 0x960, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 06:43:34 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x0, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:34 executing program 0: timer_create(0x0, &(0x7f00000000c0), 0x0) 06:43:34 executing program 1: syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001340)=[{&(0x7f0000001240)="fc63", 0x2, 0xfff}], 0x0, 0x0) 06:43:34 executing program 5: set_mempolicy(0x3, &(0x7f00000006c0)=0x9, 0xb9b) syz_mount_image$afs(&(0x7f00000000c0)='afs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)) 06:43:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x0, 0x0, 0x30, 0x960, 0x0, 0xbfc, 0x8}) [ 1065.887551][T20137] kAFS: No cell specified 06:43:35 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x210300, 0x0) 06:43:35 executing program 0: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) 06:43:35 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x0, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000002d8501"], 0x34}}, 0x0) 06:43:35 executing program 1: timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000080)) 06:43:35 executing program 4: prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/98) 06:43:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0x5, 0x4) 06:43:36 executing program 3: pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={0xff}, &(0x7f0000000480)={0x77359400}, 0x0) 06:43:36 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) 06:43:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') name_to_handle_at(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1000) 06:43:36 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x0, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:36 executing program 0: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 06:43:36 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') 06:43:36 executing program 4: clock_getres(0x0, &(0x7f0000001240)) 06:43:36 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x0, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000c80)=0x1, 0x11) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 06:43:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) 06:43:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) sendmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="f518377a1d70479d6a10101fab97cb3b3a2cdfe6f8b88cc29f4755440000000000000000000000006ee8fefd0c5600802400000000009f6a558f6453e3e7ddd364500fc8f5794c4a10e908d7283d19546e5659070803010b509a2f39f3e9376a9cf56835f4ef5bc8c0c84b4966716367e5c28d03cb851be973e341e736047d9e491eb3f4474bdac7fa46e4672e4f8b568b4bdd5ac2fe8832b73e27545de34e090062adc3c8e32aead20935bcc81936b2c451cb70a47c10f35eef4c446b9753c06ad6eebe03b27d25be", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000a80)="1179c8bfd4cd9f76dca3196a84497a8312f243acd5897f232f8a3efad897b17bde88980c4582e35ec3d7e64973f3886b3e40b302f09fe9935985d60fb36e1521d688da815a0574373bc15bae7908008d9ea5ebbb9f8d72950553dd63f7bf3ef85e1c34e8e90c69cf", 0x68}], 0x1}}], 0x2, 0x0) 06:43:37 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 06:43:37 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:37 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "400006", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x59}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5}}}}}}}, 0x0) 06:43:37 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) 06:43:38 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x2a4) splice(r1, 0x0, r0, 0x0, 0x500, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 06:43:38 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x1f, r0, 0x0, 0x0) 06:43:38 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "400006", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x59}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5}}}}}}}, 0x0) 06:43:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400000000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000007ee551146413f12e3caac37887dfd1f3e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60076d4dd901225f994f4dabd3da9af7f7500388bf03d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ae14c2c794f72cbf5fe31789e70227bfd8115efd90e8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae903b833bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3240fe2cd5c0609c8028178e21de4ac9a95cdf57782a20d4e04fd1ab7883f050084137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f65970600a85c9a74ca196700218f919746bb4b8406000000e4ab6b465d7bd658ec7950e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e716b256acf183d8e55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b1405e7daef356602487886b6f0beb5ca9a9b31a57"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca003f0800ffffffba0e7200ffff08", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 06:43:38 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:39 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x8, 0x6, 0x4], [{0x0, 0x0, 0x0, 0x1}, {0xfffffc00}, {0x0, 0x0, 0x0, 0x1, 0x1}], 0x9}) 06:43:39 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000180)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @dev}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 06:43:39 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 06:43:40 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:40 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f00000000c0)="b90103600040f000009e0ff008071fffffe100004000631177fbac141414e0000001be3e7d2a182fff57040de1ca8222477c56b81309c90f126c2fbea0569c721df396f4b106fffa347443678fba7794a2ec8b8b5bf48636d8817830f680dc09f80e26e40093db0102db4cdafebc5ebefc3bf18215528f86497343a75e90596231e85195c7462dac80117a1907465b94f89bd0", 0x0, 0x104, 0x6000000000000000, 0x0, 0xd5, &(0x7f0000000400)="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"}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 06:43:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000000c0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 06:43:42 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x26400) 06:43:42 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:42 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="43e90c5031890700", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="8c5cfdb01811d351b4cf084fcbc73ea6", 0x10) 06:43:42 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on='xino=on'}]}) 06:43:42 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000000c0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 06:43:42 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1, 0x0, 0x0) 06:43:42 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) 06:43:43 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:43 executing program 0: socket$inet6(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf16, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x40) 06:43:43 executing program 4: mlock2(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000c60000/0x3000)=nil], &(0x7f00000000c0), 0x0, 0x0) 06:43:43 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:43 executing program 5: socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x759000) 06:43:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) 06:43:44 executing program 0: 06:43:44 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:44 executing program 4: 06:43:44 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:44 executing program 5: 06:43:44 executing program 0: 06:43:45 executing program 4: 06:43:45 executing program 1: 06:43:45 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:45 executing program 5: 06:43:45 executing program 0: 06:43:45 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:45 executing program 4: 06:43:45 executing program 1: 06:43:46 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:46 executing program 0: 06:43:46 executing program 5: 06:43:46 executing program 4: 06:43:46 executing program 1: 06:43:47 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:47 executing program 4: 06:43:47 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:47 executing program 0: 06:43:47 executing program 5: 06:43:47 executing program 1: 06:43:47 executing program 5: 06:43:48 executing program 4: 06:43:48 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:48 executing program 1: 06:43:48 executing program 0: 06:43:48 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:48 executing program 5: 06:43:48 executing program 4: 06:43:49 executing program 0: 06:43:49 executing program 1: 06:43:49 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:49 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:49 executing program 4: 06:43:49 executing program 5: 06:43:49 executing program 0: 06:43:49 executing program 1: 06:43:49 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) r1 = socket$inet6(0xa, 0x6, 0x0) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:50 executing program 5: 06:43:50 executing program 4: 06:43:50 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:50 executing program 0: 06:43:50 executing program 1: 06:43:50 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:50 executing program 4: 06:43:50 executing program 5: 06:43:50 executing program 0: 06:43:50 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:51 executing program 1: 06:43:51 executing program 4: 06:43:51 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:51 executing program 5: 06:43:51 executing program 0: 06:43:51 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:51 executing program 1: 06:43:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x6, 0x0, 0x0, 0xffffffff}]}) 06:43:52 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xb9) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:52 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1555555555555858, &(0x7f0000000300)=[{&(0x7f0000000c80)="7fa2c4066749d155a5481266333b732aa98fdb9e6c68e745f62cc39aeed1a5aac575d2604a24e61c69b5010d3d92eb701c5d7c77334563c744e635cb98d052a039faec2fcba1d27cdc54079515acdafe1f9f03fe2be0e6bc29eb873859010b27eaa3b011ffcceb8175c547e65c5b1cd4abc83e5ce209905bbc3d6926b5525771427ae3af0091fce8c0b54bfaa4a79362dcbf26ed1a3518d515c47068f539f32becf611b2", 0x14, 0x3}, {&(0x7f0000000140)="c687a9efa8aa014ee0248f60d214486f04a2203bdedb6fb76a8ba32660c6b8cc1a4bc54f2b2aa96b4a92f5ae19cf7c15da45d42aec5d3395ab59c8d9b4d84133636cb7bf938344a3954d85a3904fd517bbf2c09a03d81c1e6d74a586043f6a4dd6d87dad0359f74643ffd90889952e0c276e39135d22f09c68b9d1f4f2ff32a65475135bd2a0620658b4c6c26ab9", 0x8e, 0xffff0001}, {&(0x7f0000000200)="ac0843f1f2fca77a2cbbe1", 0xb, 0x8}, {&(0x7f0000000d40)="67311c9c0849926ce33bcfaba1d5328615f78b10ab701d31d43eff0f0000d8a47b858338251d09acb68aa3d8aecd67bbc39aecff0b56229bdd000078a079b0ac832e9d6decf9c9bc62ec02215cec6a65ce5a42d9f8285528a60c6fc8d7c3f4373be7414ead618f892c42a76cc04a", 0x49, 0xffff7bc5}, {&(0x7f00000002c0)="2a04000000dde1", 0x7, 0x8000}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB='do~t_appraise,\x00']) 06:43:52 executing program 5: 06:43:52 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:52 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:52 executing program 1: [ 1084.010250][ T31] audit: type=1326 audit(1605077033.171:13): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=20407 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7feb549 code=0xffff0000 06:43:53 executing program 5: 06:43:53 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 06:43:53 executing program 4: 06:43:53 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x10010, 0x0, 0x4, 0x4, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000180)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r3, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa592, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x3, 0x8, 0x3f, 0x0, 0x0, 0x20, 0x90000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffa9, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x1, 0xffffffc0, 0x61a98ed53d6dd75a, 0x98, 0x200, 0x101}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 06:43:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8941, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) 06:43:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012a00)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000013f00)="2719c0d901", 0x5, 0x40000}], 0x0, &(0x7f0000014a00)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 06:43:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x402c5828, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) [ 1085.181451][T20431] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1085.336094][T20433] ===================================================== [ 1085.343128][T20433] BUG: KMSAN: uninit-value in qtree_entry_unused+0x137/0x1b0 [ 1085.350500][T20433] CPU: 1 PID: 20433 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1085.359176][T20433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.369225][T20433] Call Trace: [ 1085.372521][T20433] dump_stack+0x21c/0x280 [ 1085.376845][T20433] kmsan_report+0xf7/0x1e0 [ 1085.381255][T20433] __msan_warning+0x5f/0xa0 [ 1085.385764][T20433] qtree_entry_unused+0x137/0x1b0 [ 1085.390842][T20433] v2r1_mem2diskdqb+0x43d/0x710 [ 1085.395684][T20433] ? v2r0_is_id+0x380/0x380 [ 1085.400169][T20433] qtree_write_dquot+0x226/0x870 [ 1085.405195][T20433] v2_write_dquot+0x1ad/0x280 [ 1085.409878][T20433] ? v2_read_dquot+0x1a0/0x1a0 [ 1085.414653][T20433] dquot_acquire+0x46e/0x760 [ 1085.419304][T20433] ext4_acquire_dquot+0x422/0x550 [ 1085.424345][T20433] ? ext4_write_dquot+0x490/0x490 [ 1085.429377][T20433] dqget+0x14be/0x1c50 [ 1085.433456][T20433] __dquot_initialize+0x9d6/0x19e0 [ 1085.438567][T20433] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 1085.444379][T20433] ? __kernel_text_address+0x171/0x2d0 [ 1085.449842][T20433] ? kmsan_internal_set_origin+0x85/0xc0 [ 1085.455475][T20433] ? __msan_poison_alloca+0xe9/0x110 [ 1085.460764][T20433] dquot_initialize+0x4d/0x60 [ 1085.465442][T20433] ext4_xattr_set+0x14e/0x690 [ 1085.470132][T20433] ext4_xattr_trusted_set+0xf3/0x110 [ 1085.475470][T20433] __vfs_setxattr+0x94f/0x9a0 [ 1085.480145][T20433] ? ext4_xattr_trusted_get+0xe0/0xe0 [ 1085.485512][T20433] __vfs_setxattr_noperm+0x378/0xc90 [ 1085.490804][T20433] __vfs_setxattr_locked+0x5f2/0x6a0 [ 1085.496097][T20433] vfs_setxattr+0x1e4/0x4d0 [ 1085.500596][T20433] ? kmsan_get_metadata+0x116/0x180 [ 1085.505789][T20433] setxattr+0x43d/0x8f0 [ 1085.510009][T20433] ? __msan_instrument_asm_store+0xb8/0x130 [ 1085.515906][T20433] ? __sb_start_write+0x12c/0x2e0 [ 1085.520926][T20433] ? kmsan_get_metadata+0x116/0x180 [ 1085.526126][T20433] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1085.531931][T20433] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1085.537994][T20433] ? kmsan_get_metadata+0x116/0x180 [ 1085.543195][T20433] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1085.549006][T20433] path_setxattr+0x2cd/0x4f0 [ 1085.553607][T20433] __se_sys_setxattr+0xee/0x110 [ 1085.558466][T20433] __ia32_sys_setxattr+0x62/0x80 [ 1085.563410][T20433] __do_fast_syscall_32+0x129/0x180 [ 1085.568611][T20433] do_fast_syscall_32+0x6a/0xc0 [ 1085.573468][T20433] do_SYSENTER_32+0x73/0x90 [ 1085.578007][T20433] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1085.584330][T20433] RIP: 0023:0xf7fca549 [ 1085.588402][T20433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1085.608016][T20433] RSP: 002b:00000000f55a30cc EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 1085.616429][T20433] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000080 [ 1085.624397][T20433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1085.632369][T20433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1085.640352][T20433] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1085.648309][T20433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1085.656277][T20433] [ 1085.658595][T20433] Uninit was created at: [ 1085.662836][T20433] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1085.668568][T20433] kmsan_slab_alloc+0x8d/0xe0 [ 1085.673245][T20433] __kmalloc+0x282/0x490 [ 1085.677480][T20433] getdqbuf+0x4e/0xe0 [ 1085.681441][T20433] qtree_write_dquot+0xf2/0x870 [ 1085.686278][T20433] v2_write_dquot+0x1ad/0x280 [ 1085.690966][T20433] dquot_acquire+0x46e/0x760 [ 1085.695571][T20433] ext4_acquire_dquot+0x422/0x550 [ 1085.700595][T20433] dqget+0x14be/0x1c50 [ 1085.704664][T20433] __dquot_initialize+0x9d6/0x19e0 [ 1085.709766][T20433] dquot_initialize+0x4d/0x60 [ 1085.714432][T20433] ext4_xattr_set+0x14e/0x690 [ 1085.719112][T20433] ext4_xattr_trusted_set+0xf3/0x110 [ 1085.724399][T20433] __vfs_setxattr+0x94f/0x9a0 [ 1085.729074][T20433] __vfs_setxattr_noperm+0x378/0xc90 [ 1085.734361][T20433] __vfs_setxattr_locked+0x5f2/0x6a0 [ 1085.739644][T20433] vfs_setxattr+0x1e4/0x4d0 [ 1085.744151][T20433] setxattr+0x43d/0x8f0 [ 1085.748307][T20433] path_setxattr+0x2cd/0x4f0 [ 1085.752930][T20433] __se_sys_setxattr+0xee/0x110 [ 1085.757783][T20433] __ia32_sys_setxattr+0x62/0x80 [ 1085.762725][T20433] __do_fast_syscall_32+0x129/0x180 [ 1085.767930][T20433] do_fast_syscall_32+0x6a/0xc0 [ 1085.772782][T20433] do_SYSENTER_32+0x73/0x90 [ 1085.777291][T20433] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1085.783607][T20433] ===================================================== [ 1085.790532][T20433] Disabling lock debugging due to kernel taint [ 1085.796680][T20433] Kernel panic - not syncing: panic_on_warn set ... [ 1085.803276][T20433] CPU: 1 PID: 20433 Comm: syz-executor.1 Tainted: G B 5.9.0-rc8-syzkaller #0 [ 1085.813328][T20433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.823378][T20433] Call Trace: [ 1085.826674][T20433] dump_stack+0x21c/0x280 [ 1085.831007][T20433] panic+0x4c8/0xea7 [ 1085.834912][T20433] ? add_taint+0x17c/0x210 [ 1085.839333][T20433] kmsan_report+0x1da/0x1e0 [ 1085.843849][T20433] __msan_warning+0x5f/0xa0 [ 1085.848373][T20433] qtree_entry_unused+0x137/0x1b0 [ 1085.853404][T20433] v2r1_mem2diskdqb+0x43d/0x710 [ 1085.858259][T20433] ? v2r0_is_id+0x380/0x380 [ 1085.862768][T20433] qtree_write_dquot+0x226/0x870 [ 1085.867733][T20433] v2_write_dquot+0x1ad/0x280 [ 1085.872416][T20433] ? v2_read_dquot+0x1a0/0x1a0 [ 1085.877180][T20433] dquot_acquire+0x46e/0x760 [ 1085.881776][T20433] ext4_acquire_dquot+0x422/0x550 [ 1085.886802][T20433] ? ext4_write_dquot+0x490/0x490 [ 1085.891828][T20433] dqget+0x14be/0x1c50 [ 1085.895906][T20433] __dquot_initialize+0x9d6/0x19e0 [ 1085.901026][T20433] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 1085.906836][T20433] ? __kernel_text_address+0x171/0x2d0 [ 1085.912300][T20433] ? kmsan_internal_set_origin+0x85/0xc0 [ 1085.917938][T20433] ? __msan_poison_alloca+0xe9/0x110 [ 1085.923226][T20433] dquot_initialize+0x4d/0x60 [ 1085.927914][T20433] ext4_xattr_set+0x14e/0x690 [ 1085.932624][T20433] ext4_xattr_trusted_set+0xf3/0x110 [ 1085.937918][T20433] __vfs_setxattr+0x94f/0x9a0 [ 1085.942605][T20433] ? ext4_xattr_trusted_get+0xe0/0xe0 [ 1085.947985][T20433] __vfs_setxattr_noperm+0x378/0xc90 [ 1085.953282][T20433] __vfs_setxattr_locked+0x5f2/0x6a0 [ 1085.958573][T20433] vfs_setxattr+0x1e4/0x4d0 [ 1085.963082][T20433] ? kmsan_get_metadata+0x116/0x180 [ 1085.968396][T20433] setxattr+0x43d/0x8f0 [ 1085.972564][T20433] ? __msan_instrument_asm_store+0xb8/0x130 [ 1085.978460][T20433] ? __sb_start_write+0x12c/0x2e0 [ 1085.983484][T20433] ? kmsan_get_metadata+0x116/0x180 [ 1085.988683][T20433] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1085.994495][T20433] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1086.000562][T20433] ? kmsan_get_metadata+0x116/0x180 [ 1086.005765][T20433] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1086.011575][T20433] path_setxattr+0x2cd/0x4f0 [ 1086.016172][T20433] __se_sys_setxattr+0xee/0x110 [ 1086.021025][T20433] __ia32_sys_setxattr+0x62/0x80 [ 1086.025969][T20433] __do_fast_syscall_32+0x129/0x180 [ 1086.031171][T20433] do_fast_syscall_32+0x6a/0xc0 [ 1086.036026][T20433] do_SYSENTER_32+0x73/0x90 [ 1086.040535][T20433] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1086.046862][T20433] RIP: 0023:0xf7fca549 [ 1086.050933][T20433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1086.070538][T20433] RSP: 002b:00000000f55a30cc EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 1086.078951][T20433] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000080 [ 1086.086923][T20433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1086.094891][T20433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1086.102864][T20433] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1086.110841][T20433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1086.119422][T20433] Kernel Offset: disabled [ 1086.123734][T20433] Rebooting in 86400 seconds..