[ 434.822135][T12366] ? _copy_from_user+0x219/0x310 [ 434.822135][T12366] ? kmsan_get_metadata+0x11b/0x180 [ 434.822135][T12366] __msan_chain_origin+0xcb/0x140 [ 434.822135][T12366] __get_compat_msghdr+0x6e1/0x9d0 [ 434.822135][T12366] get_compat_msghdr+0x108/0x2c0 [ 434.822135][T12366] ? __sys_recvmmsg+0x51c/0x6f0 [ 434.822135][T12366] do_recvmmsg+0x1063/0x2120 [ 434.822135][T12366] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 434.822135][T12366] ? kmsan_get_metadata+0x11b/0x180 [ 434.822135][T12366] ? kmsan_get_metadata+0x11b/0x180 [ 434.822135][T12366] ? stack_depot_save_extra+0x3cb/0x4f0 [ 434.822135][T12366] ? kmsan_get_metadata+0x11b/0x180 [ 434.822135][T12366] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 434.822135][T12366] ? __msan_poison_alloca+0x15a/0x1a0 [ 434.822135][T12366] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 434.822135][T12366] __sys_recvmmsg+0x51c/0x6f0 [ 434.822135][T12366] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 434.822135][T12366] __do_fast_syscall_32+0x96/0xe0 [ 434.822135][T12366] do_fast_syscall_32+0x3c/0x80 [ 434.822135][T12366] do_SYSENTER_32+0x1b/0x20 [ 434.822135][T12366] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.822135][T12366] RIP: 0023:0xf6f35549 [ 434.822135][T12366] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 434.822135][T12366] RSP: 002b:00000000f450e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 434.822135][T12366] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 434.822135][T12366] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.822135][T12366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.822135][T12366] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 434.822135][T12366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.822135][T12366] Uninit was stored to memory at: [ 434.822135][T12366] kmsan_internal_chain_origin+0xa0/0x110 [ 434.822135][T12366] __msan_chain_origin+0xcb/0x140 [ 434.822135][T12366] __get_compat_msghdr+0x6e1/0x9d0 [ 434.822135][T12366] get_compat_msghdr+0x108/0x2c0 [ 434.822135][T12366] do_recvmmsg+0x1063/0x2120 [ 434.822135][T12366] __sys_recvmmsg+0x51c/0x6f0 [ 434.822135][T12366] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 434.822135][T12366] __do_fast_syscall_32+0x96/0xe0 [ 434.822135][T12366] do_fast_syscall_32+0x3c/0x80 [ 434.822135][T12366] do_SYSENTER_32+0x1b/0x20 [ 434.822135][T12366] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.822135][T12366] [ 434.822135][T12366] Uninit was stored to memory at: [ 434.822135][T12366] kmsan_internal_chain_origin+0xa0/0x110 [ 434.822135][T12366] __msan_chain_origin+0xcb/0x140 [ 434.822135][T12366] __get_compat_msghdr+0x6e1/0x9d0 [ 434.822135][T12366] get_compat_msghdr+0x108/0x2c0 [ 434.822135][T12366] do_recvmmsg+0x1063/0x2120 [ 434.822135][T12366] __sys_recvmmsg+0x51c/0x6f0 [ 434.822135][T12366] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 434.822135][T12366] __do_fast_syscall_32+0x96/0xe0 [ 434.822135][T12366] do_fast_syscall_32+0x3c/0x80 [ 434.822135][T12366] do_SYSENTER_32+0x1b/0x20 [ 434.822135][T12366] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.822135][T12366] [ 434.822135][T12366] Uninit was stored to memory at: [ 434.822135][T12366] kmsan_internal_chain_origin+0xa0/0x110 [ 434.822135][T12366] __msan_chain_origin+0xcb/0x140 [ 434.822135][T12366] __get_compat_msghdr+0x6e1/0x9d0 [ 434.822135][T12366] get_compat_msghdr+0x108/0x2c0 [ 434.822135][T12366] do_recvmmsg+0x1063/0x2120 [ 434.822135][T12366] __sys_recvmmsg+0x51c/0x6f0 [ 434.822135][T12366] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 434.822135][T12366] __do_fast_syscall_32+0x96/0xe0 [ 434.822135][T12366] do_fast_syscall_32+0x3c/0x80 [ 434.822135][T12366] do_SYSENTER_32+0x1b/0x20 [ 434.822135][T12366] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.822135][T12366] [ 434.822135][T12366] Uninit was stored to memory at: [ 434.822135][T12366] kmsan_internal_chain_origin+0xa0/0x110 [ 434.822135][T12366] __msan_chain_origin+0xcb/0x140 [ 434.822135][T12366] __get_compat_msghdr+0x6e1/0x9d0 [ 434.822135][T12366] get_compat_msghdr+0x108/0x2c0 [ 434.822135][T12366] do_recvmmsg+0x1063/0x2120 [ 434.822135][T12366] __sys_recvmmsg+0x51c/0x6f0 [ 434.822135][T12366] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 434.822135][T12366] __do_fast_syscall_32+0x96/0xe0 [ 434.822135][T12366] do_fast_syscall_32+0x3c/0x80 [ 434.822135][T12366] do_SYSENTER_32+0x1b/0x20 [ 434.822135][T12366] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.822135][T12366] [ 434.822135][T12366] Uninit was stored to memory at: [ 434.822135][T12366] kmsan_internal_chain_origin+0xa0/0x110 [ 434.822135][T12366] __msan_chain_origin+0xcb/0x140 [ 434.822135][T12366] __get_compat_msghdr+0x6e1/0x9d0 [ 434.822135][T12366] get_compat_msghdr+0x108/0x2c0 [ 434.822135][T12366] do_recvmmsg+0x1063/0x2120 [ 434.822135][T12366] __sys_recvmmsg+0x51c/0x6f0 [ 434.822135][T12366] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 434.822135][T12366] __do_fast_syscall_32+0x96/0xe0 [ 434.822135][T12366] do_fast_syscall_32+0x3c/0x80 [ 434.822135][T12366] do_SYSENTER_32+0x1b/0x20 [ 434.822135][T12366] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.822135][T12366] [ 434.822135][T12366] Uninit was stored to memory at: [ 434.822135][T12366] kmsan_internal_chain_origin+0xa0/0x110 [ 434.822135][T12366] __msan_chain_origin+0xcb/0x140 [ 434.822135][T12366] __get_compat_msghdr+0x6e1/0x9d0 [ 434.822135][T12366] get_compat_msghdr+0x108/0x2c0 [ 434.822135][T12366] do_recvmmsg+0x1063/0x2120 [ 434.822135][T12366] __sys_recvmmsg+0x51c/0x6f0 [ 434.822135][T12366] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 434.822135][T12366] __do_fast_syscall_32+0x96/0xe0 [ 434.822135][T12366] do_fast_syscall_32+0x3c/0x80 [ 434.822135][T12366] do_SYSENTER_32+0x1b/0x20 [ 434.822135][T12366] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.822135][T12366] [ 434.822135][T12366] Uninit was stored to memory at: [ 434.822135][T12366] kmsan_internal_chain_origin+0xa0/0x110 [ 434.822135][T12366] __msan_chain_origin+0xcb/0x140 [ 434.822135][T12366] __get_compat_msghdr+0x6e1/0x9d0 [ 434.822135][T12366] get_compat_msghdr+0x108/0x2c0 [ 434.822135][T12366] do_recvmmsg+0x1063/0x2120 [ 434.822135][T12366] __sys_recvmmsg+0x51c/0x6f0 [ 434.822135][T12366] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 434.822135][T12366] __do_fast_syscall_32+0x96/0xe0 [ 434.822135][T12366] do_fast_syscall_32+0x3c/0x80 [ 434.822135][T12366] do_SYSENTER_32+0x1b/0x20 [ 434.822135][T12366] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.822135][T12366] [ 434.822135][T12366] Local variable ----msg_sys@do_recvmmsg created at: [ 434.822135][T12366] do_recvmmsg+0xc1/0x2120 [ 434.822135][T12366] __sys_recvmmsg+0x51c/0x6f0 09:58:05 executing program 4: syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540), 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000003000)=""/165, 0xa5, 0x0, 0x0, 0x1000000000000000) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0xac}}, 0x0) 09:58:05 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05651bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f7c6126795da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9899122c5b2b6b60f7e8849c8fad68909f11b5e502375ed449638d5c3e73024dd19f8f325b0456a01f65442e64d9148a3a491b09f02eb19ac6aebb49b4f1055", 0xbb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 09:58:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x2000000, @loopback}, 0x1c) 09:58:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 09:58:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b0001006772657461700000", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:58:05 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='B') [ 436.066443][ T8] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 09:58:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000380)={0x0, r5+60000000}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r4+10000000}}, 0x0) [ 436.315369][T12436] ptrace attach of "/root/syz-executor.3"[12435] was attempted by "/root/syz-executor.3"[12436] 09:58:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x3000000, @loopback}, 0x1c) [ 436.409901][ T8] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.465561][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 436.475070][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:58:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b0001006772657461700000", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 436.831477][ T8] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 09:58:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 09:58:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x4000000, @loopback}, 0x1c) [ 437.310251][ T8] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 09:58:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 437.377471][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.387239][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.984017][ T8] device hsr_slave_0 left promiscuous mode [ 440.996334][ T8] device hsr_slave_1 left promiscuous mode [ 441.019947][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.028347][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.044069][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.051783][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.068631][ T8] device bridge_slave_1 left promiscuous mode [ 441.075584][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.091634][ T8] device bridge_slave_0 left promiscuous mode [ 441.098588][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.126601][ T8] device veth1_macvtap left promiscuous mode [ 441.133057][ T8] device veth0_macvtap left promiscuous mode [ 441.139451][ T8] device veth1_vlan left promiscuous mode [ 441.145714][ T8] device veth0_vlan left promiscuous mode [ 443.349316][ T8] team0 (unregistering): Port device team_slave_1 removed [ 443.631120][ T8] team0 (unregistering): Port device team_slave_0 removed [ 443.656209][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.680980][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.799221][ T8] bond0 (unregistering): Released all slaves [ 445.221296][T12512] chnl_net:caif_netlink_parms(): no params data found [ 445.323119][T12512] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.330354][T12512] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.339726][T12512] device bridge_slave_0 entered promiscuous mode [ 445.350216][T12512] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.357641][T12512] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.366351][T12512] device bridge_slave_1 entered promiscuous mode [ 445.400084][T12512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.416240][T12512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.452707][T12512] team0: Port device team_slave_0 added [ 445.461907][T12512] team0: Port device team_slave_1 added [ 445.491742][T12512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.498869][T12512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.525817][T12512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.541860][T12512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.549544][T12512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.575761][T12512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.618345][T12512] device hsr_slave_0 entered promiscuous mode [ 445.626026][T12512] device hsr_slave_1 entered promiscuous mode [ 445.637412][T12512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.645675][T12512] Cannot create hsr debugfs directory [ 445.782632][T12512] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.789839][T12512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.797629][T12512] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.805031][T12512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.879731][T12512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.901831][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.911994][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.923011][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.934915][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 445.951753][T12512] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.969126][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.978195][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.985549][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.003160][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.012562][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.019747][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.056022][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.066147][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.087397][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.105808][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.120963][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.138671][T12512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.172697][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.180286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.194628][T12512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.280601][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.291230][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.325909][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.335616][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.353667][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.362823][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.371433][T12512] device veth0_vlan entered promiscuous mode [ 446.390768][T12512] device veth1_vlan entered promiscuous mode [ 446.429902][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.439801][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.449085][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.458801][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.476024][T12512] device veth0_macvtap entered promiscuous mode [ 446.492605][T12512] device veth1_macvtap entered promiscuous mode [ 446.519581][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.530361][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.540380][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.551055][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.561129][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.571785][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.581854][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.592511][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.610930][T12512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.619043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.628020][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.637330][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.647030][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.665764][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.676559][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.686604][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.697311][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.707334][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.718026][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.728107][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.738777][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.749628][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.760521][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.773179][T12512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.785779][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.795326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 446.982346][ T56] Bluetooth: hci4: command 0x0409 tx timeout [ 447.042629][T12411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.051337][T12411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.077082][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 447.147535][ T937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.155517][ T937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.169916][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 447.403586][T12759] not chained 1050000 origins [ 447.408258][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 447.412127][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.412127][T12759] Call Trace: [ 447.412127][T12759] dump_stack+0x25a/0x2f6 [ 447.412127][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 447.412127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 447.412127][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 447.412127][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 447.412127][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 447.412127][T12759] ? release_sock+0x2b5/0x2e0 [ 447.412127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 447.412127][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 447.412127][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 447.412127][T12759] ? should_fail+0x75/0x9c0 [ 447.412127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 447.412127][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 447.412127][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 447.412127][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 447.412127][T12759] ? _copy_from_user+0x219/0x310 [ 447.412127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 447.412127][T12759] __msan_chain_origin+0xcb/0x140 [ 447.412127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 447.412127][T12759] get_compat_msghdr+0x108/0x2c0 [ 447.412127][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 447.412127][T12759] do_recvmmsg+0x1063/0x2120 [ 447.412127][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 447.412127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 447.412127][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 447.412127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 447.412127][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 447.412127][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 447.412127][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 447.412127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 447.412127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 447.412127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 447.412127][T12759] do_fast_syscall_32+0x3c/0x80 [ 447.412127][T12759] do_SYSENTER_32+0x1b/0x20 [ 447.412127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.412127][T12759] RIP: 0023:0xf6f46549 [ 447.412127][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 447.412127][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 447.412127][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 447.412127][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.412127][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.412127][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 447.412127][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.412127][T12759] Uninit was stored to memory at: [ 447.412127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 447.412127][T12759] __msan_chain_origin+0xcb/0x140 [ 447.412127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 447.412127][T12759] get_compat_msghdr+0x108/0x2c0 [ 447.412127][T12759] do_recvmmsg+0x1063/0x2120 [ 447.412127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 447.412127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 447.412127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 447.412127][T12759] do_fast_syscall_32+0x3c/0x80 [ 447.412127][T12759] do_SYSENTER_32+0x1b/0x20 [ 447.412127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.412127][T12759] [ 447.412127][T12759] Uninit was stored to memory at: [ 447.412127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 447.412127][T12759] __msan_chain_origin+0xcb/0x140 [ 447.412127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 447.412127][T12759] get_compat_msghdr+0x108/0x2c0 [ 447.412127][T12759] do_recvmmsg+0x1063/0x2120 [ 447.412127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 447.412127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 447.412127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 447.412127][T12759] do_fast_syscall_32+0x3c/0x80 [ 447.412127][T12759] do_SYSENTER_32+0x1b/0x20 [ 447.412127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.412127][T12759] [ 447.412127][T12759] Uninit was stored to memory at: [ 447.412127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 447.412127][T12759] __msan_chain_origin+0xcb/0x140 [ 447.412127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 447.412127][T12759] get_compat_msghdr+0x108/0x2c0 [ 447.412127][T12759] do_recvmmsg+0x1063/0x2120 [ 447.412127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 447.412127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 447.412127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 447.412127][T12759] do_fast_syscall_32+0x3c/0x80 [ 447.412127][T12759] do_SYSENTER_32+0x1b/0x20 [ 447.412127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.412127][T12759] [ 447.412127][T12759] Uninit was stored to memory at: [ 447.412127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 447.412127][T12759] __msan_chain_origin+0xcb/0x140 [ 447.412127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 447.412127][T12759] get_compat_msghdr+0x108/0x2c0 [ 447.412127][T12759] do_recvmmsg+0x1063/0x2120 [ 447.412127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 447.412127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 447.412127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 447.412127][T12759] do_fast_syscall_32+0x3c/0x80 [ 447.412127][T12759] do_SYSENTER_32+0x1b/0x20 [ 447.412127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.412127][T12759] [ 447.412127][T12759] Uninit was stored to memory at: [ 447.412127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 447.412127][T12759] __msan_chain_origin+0xcb/0x140 [ 447.412127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 447.412127][T12759] get_compat_msghdr+0x108/0x2c0 [ 447.412127][T12759] do_recvmmsg+0x1063/0x2120 [ 447.412127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 447.412127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 447.412127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 447.412127][T12759] do_fast_syscall_32+0x3c/0x80 [ 447.412127][T12759] do_SYSENTER_32+0x1b/0x20 [ 447.412127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.412127][T12759] [ 447.412127][T12759] Uninit was stored to memory at: [ 447.412127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 447.412127][T12759] __msan_chain_origin+0xcb/0x140 [ 447.412127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 447.412127][T12759] get_compat_msghdr+0x108/0x2c0 [ 447.412127][T12759] do_recvmmsg+0x1063/0x2120 [ 447.412127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 447.412127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 447.412127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 447.412127][T12759] do_fast_syscall_32+0x3c/0x80 [ 447.412127][T12759] do_SYSENTER_32+0x1b/0x20 [ 447.412127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.412127][T12759] [ 447.412127][T12759] Uninit was stored to memory at: [ 447.412127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 447.412127][T12759] __msan_chain_origin+0xcb/0x140 [ 447.412127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 447.412127][T12759] get_compat_msghdr+0x108/0x2c0 [ 447.412127][T12759] do_recvmmsg+0x1063/0x2120 [ 447.412127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 447.412127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 447.412127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 447.412127][T12759] do_fast_syscall_32+0x3c/0x80 [ 447.412127][T12759] do_SYSENTER_32+0x1b/0x20 [ 447.412127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.412127][T12759] [ 447.412127][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 447.412127][T12759] do_recvmmsg+0xc1/0x2120 [ 447.412127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 448.310660][T12759] not chained 1060000 origins [ 448.312136][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 448.312136][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.312136][T12759] Call Trace: [ 448.312136][T12759] dump_stack+0x25a/0x2f6 [ 448.312136][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 448.312136][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 448.312136][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 448.312136][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 448.312136][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 448.312136][T12759] ? release_sock+0x2b5/0x2e0 [ 448.312136][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 448.312136][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 448.380141][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 448.380141][T12759] ? should_fail+0x75/0x9c0 [ 448.380141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 448.380141][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 448.380141][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 448.380141][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 448.380141][T12759] ? _copy_from_user+0x219/0x310 [ 448.380141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 448.380141][T12759] __msan_chain_origin+0xcb/0x140 [ 448.380141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 448.380141][T12759] get_compat_msghdr+0x108/0x2c0 [ 448.380141][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 448.380141][T12759] do_recvmmsg+0x1063/0x2120 [ 448.380141][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 448.380141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 448.380141][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 448.380141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 448.380141][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 448.380141][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 448.380141][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 448.380141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 448.380141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 448.380141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 448.380141][T12759] do_fast_syscall_32+0x3c/0x80 [ 448.380141][T12759] do_SYSENTER_32+0x1b/0x20 [ 448.380141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.380141][T12759] RIP: 0023:0xf6f46549 [ 448.380141][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 448.380141][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 448.380141][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 448.380141][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.380141][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.380141][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 448.380141][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.380141][T12759] Uninit was stored to memory at: [ 448.380141][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 448.380141][T12759] __msan_chain_origin+0xcb/0x140 [ 448.380141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 448.380141][T12759] get_compat_msghdr+0x108/0x2c0 [ 448.380141][T12759] do_recvmmsg+0x1063/0x2120 [ 448.380141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 448.380141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 448.380141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 448.380141][T12759] do_fast_syscall_32+0x3c/0x80 [ 448.380141][T12759] do_SYSENTER_32+0x1b/0x20 [ 448.380141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.380141][T12759] [ 448.380141][T12759] Uninit was stored to memory at: [ 448.380141][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 448.380141][T12759] __msan_chain_origin+0xcb/0x140 [ 448.380141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 448.380141][T12759] get_compat_msghdr+0x108/0x2c0 [ 448.380141][T12759] do_recvmmsg+0x1063/0x2120 [ 448.380141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 448.380141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 448.380141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 448.380141][T12759] do_fast_syscall_32+0x3c/0x80 [ 448.380141][T12759] do_SYSENTER_32+0x1b/0x20 [ 448.380141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.380141][T12759] [ 448.380141][T12759] Uninit was stored to memory at: [ 448.729884][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 448.729884][T12759] __msan_chain_origin+0xcb/0x140 [ 448.729884][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 448.729884][T12759] get_compat_msghdr+0x108/0x2c0 [ 448.729884][T12759] do_recvmmsg+0x1063/0x2120 [ 448.729884][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 448.729884][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 448.729884][T12759] __do_fast_syscall_32+0x96/0xe0 [ 448.729884][T12759] do_fast_syscall_32+0x3c/0x80 [ 448.729884][T12759] do_SYSENTER_32+0x1b/0x20 [ 448.729884][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.729884][T12759] [ 448.729884][T12759] Uninit was stored to memory at: [ 448.729884][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 448.729884][T12759] __msan_chain_origin+0xcb/0x140 [ 448.729884][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 448.729884][T12759] get_compat_msghdr+0x108/0x2c0 [ 448.729884][T12759] do_recvmmsg+0x1063/0x2120 [ 448.729884][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 448.729884][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 448.729884][T12759] __do_fast_syscall_32+0x96/0xe0 [ 448.729884][T12759] do_fast_syscall_32+0x3c/0x80 [ 448.729884][T12759] do_SYSENTER_32+0x1b/0x20 [ 448.729884][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.729884][T12759] [ 448.729884][T12759] Uninit was stored to memory at: [ 448.729884][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 448.729884][T12759] __msan_chain_origin+0xcb/0x140 [ 448.729884][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 448.729884][T12759] get_compat_msghdr+0x108/0x2c0 [ 448.729884][T12759] do_recvmmsg+0x1063/0x2120 [ 448.729884][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 448.729884][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 448.729884][T12759] __do_fast_syscall_32+0x96/0xe0 [ 448.729884][T12759] do_fast_syscall_32+0x3c/0x80 [ 448.729884][T12759] do_SYSENTER_32+0x1b/0x20 [ 448.729884][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.729884][T12759] [ 448.729884][T12759] Uninit was stored to memory at: [ 448.729884][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 448.729884][T12759] __msan_chain_origin+0xcb/0x140 [ 448.729884][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 448.729884][T12759] get_compat_msghdr+0x108/0x2c0 [ 448.729884][T12759] do_recvmmsg+0x1063/0x2120 [ 448.729884][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 448.729884][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 448.729884][T12759] __do_fast_syscall_32+0x96/0xe0 [ 448.729884][T12759] do_fast_syscall_32+0x3c/0x80 [ 448.729884][T12759] do_SYSENTER_32+0x1b/0x20 [ 448.729884][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.729884][T12759] [ 448.729884][T12759] Uninit was stored to memory at: [ 448.729884][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 448.729884][T12759] __msan_chain_origin+0xcb/0x140 [ 448.729884][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 448.729884][T12759] get_compat_msghdr+0x108/0x2c0 [ 448.729884][T12759] do_recvmmsg+0x1063/0x2120 [ 448.729884][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 448.729884][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 448.729884][T12759] __do_fast_syscall_32+0x96/0xe0 [ 448.729884][T12759] do_fast_syscall_32+0x3c/0x80 [ 448.729884][T12759] do_SYSENTER_32+0x1b/0x20 [ 448.729884][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.729884][T12759] [ 448.729884][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 448.729884][T12759] do_recvmmsg+0xc1/0x2120 [ 448.729884][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 449.079361][ T56] Bluetooth: hci4: command 0x041b tx timeout [ 449.093160][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.099629][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.169170][T12759] not chained 1070000 origins [ 449.172121][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 449.172121][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.172121][T12759] Call Trace: [ 449.172121][T12759] dump_stack+0x25a/0x2f6 [ 449.172121][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 449.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 449.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 449.172121][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 449.172121][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 449.172121][T12759] ? release_sock+0x2b5/0x2e0 [ 449.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 449.172121][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 449.172121][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 449.172121][T12759] ? should_fail+0x75/0x9c0 [ 449.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 449.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 449.172121][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 449.172121][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 449.172121][T12759] ? _copy_from_user+0x219/0x310 [ 449.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 449.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 449.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 449.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 449.172121][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 449.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 449.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 449.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 449.172121][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 449.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 449.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 449.172121][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 449.172121][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 449.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 449.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 449.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 449.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 449.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 449.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.172121][T12759] RIP: 0023:0xf6f46549 [ 449.172121][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.172121][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 449.172121][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 449.172121][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.172121][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.172121][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 449.172121][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.172121][T12759] Uninit was stored to memory at: [ 449.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 449.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 449.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 449.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 449.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 449.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 449.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 449.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 449.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 449.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 449.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.172121][T12759] [ 449.172121][T12759] Uninit was stored to memory at: [ 449.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 449.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 449.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 449.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 449.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 449.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 449.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 449.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 449.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 449.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 449.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.172121][T12759] [ 449.172121][T12759] Uninit was stored to memory at: [ 449.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 449.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 449.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 449.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 449.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 449.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 449.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 449.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 449.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 449.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 449.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.172121][T12759] [ 449.172121][T12759] Uninit was stored to memory at: [ 449.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 449.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 449.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 449.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 449.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 449.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 449.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 449.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 449.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 449.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 449.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.172121][T12759] [ 449.172121][T12759] Uninit was stored to memory at: [ 449.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 449.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 449.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 449.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 449.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 449.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 449.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 449.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 449.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 449.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 449.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.172121][T12759] [ 449.172121][T12759] Uninit was stored to memory at: [ 449.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 449.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 449.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 449.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 449.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 449.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 449.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 449.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 449.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 449.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 449.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.172121][T12759] [ 449.172121][T12759] Uninit was stored to memory at: [ 449.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 449.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 449.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 449.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 449.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 449.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 449.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 449.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 449.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 449.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 449.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.172121][T12759] [ 449.172121][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 449.172121][T12759] do_recvmmsg+0xc1/0x2120 [ 449.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.047416][T12759] not chained 1080000 origins [ 450.052112][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 450.052141][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.052141][T12759] Call Trace: [ 450.052141][T12759] dump_stack+0x25a/0x2f6 [ 450.052141][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 450.052141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.052141][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 450.052141][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 450.052141][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 450.052141][T12759] ? release_sock+0x2b5/0x2e0 [ 450.052141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.052141][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 450.052141][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 450.052141][T12759] ? should_fail+0x75/0x9c0 [ 450.052141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.052141][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 450.052141][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 450.052141][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 450.052141][T12759] ? _copy_from_user+0x219/0x310 [ 450.052141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.052141][T12759] __msan_chain_origin+0xcb/0x140 [ 450.052141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.052141][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.052141][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 450.052141][T12759] do_recvmmsg+0x1063/0x2120 [ 450.052141][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 450.052141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.052141][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 450.052141][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.052141][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 450.052141][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 450.052141][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.052141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.052141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.052141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.052141][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.052141][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.052141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.052141][T12759] RIP: 0023:0xf6f46549 [ 450.052141][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 450.052141][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 450.052141][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 450.052141][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.052141][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.052141][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 450.052141][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.052141][T12759] Uninit was stored to memory at: [ 450.052141][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.052141][T12759] __msan_chain_origin+0xcb/0x140 [ 450.052141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.052141][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.052141][T12759] do_recvmmsg+0x1063/0x2120 [ 450.052141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.052141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.052141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.052141][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.052141][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.052141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.052141][T12759] [ 450.052141][T12759] Uninit was stored to memory at: [ 450.052141][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.052141][T12759] __msan_chain_origin+0xcb/0x140 [ 450.052141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.052141][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.052141][T12759] do_recvmmsg+0x1063/0x2120 [ 450.052141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.052141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.052141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.052141][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.052141][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.052141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.052141][T12759] [ 450.052141][T12759] Uninit was stored to memory at: [ 450.052141][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.052141][T12759] __msan_chain_origin+0xcb/0x140 [ 450.052141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.052141][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.052141][T12759] do_recvmmsg+0x1063/0x2120 [ 450.052141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.052141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.052141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.052141][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.052141][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.052141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.052141][T12759] [ 450.052141][T12759] Uninit was stored to memory at: [ 450.052141][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.052141][T12759] __msan_chain_origin+0xcb/0x140 [ 450.052141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.052141][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.052141][T12759] do_recvmmsg+0x1063/0x2120 [ 450.052141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.052141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.052141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.052141][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.052141][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.052141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.052141][T12759] [ 450.052141][T12759] Uninit was stored to memory at: [ 450.052141][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.052141][T12759] __msan_chain_origin+0xcb/0x140 [ 450.052141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.052141][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.052141][T12759] do_recvmmsg+0x1063/0x2120 [ 450.052141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.052141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.052141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.052141][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.052141][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.052141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.052141][T12759] [ 450.052141][T12759] Uninit was stored to memory at: [ 450.052141][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.052141][T12759] __msan_chain_origin+0xcb/0x140 [ 450.052141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.052141][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.052141][T12759] do_recvmmsg+0x1063/0x2120 [ 450.052141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.052141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.052141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.052141][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.052141][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.052141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.052141][T12759] [ 450.052141][T12759] Uninit was stored to memory at: [ 450.052141][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.052141][T12759] __msan_chain_origin+0xcb/0x140 [ 450.052141][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.052141][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.052141][T12759] do_recvmmsg+0x1063/0x2120 [ 450.052141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.052141][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.052141][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.052141][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.052141][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.052141][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.052141][T12759] [ 450.052141][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 450.052141][T12759] do_recvmmsg+0xc1/0x2120 [ 450.052141][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.898655][T12759] not chained 1090000 origins [ 450.902137][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 450.902137][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.902137][T12759] Call Trace: [ 450.922184][T12759] dump_stack+0x25a/0x2f6 [ 450.922184][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 450.922184][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.922184][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 450.945478][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 450.945478][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 450.945478][T12759] ? release_sock+0x2b5/0x2e0 [ 450.945478][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.945478][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 450.945478][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 450.945478][T12759] ? should_fail+0x75/0x9c0 [ 450.945478][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.945478][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 450.945478][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 450.945478][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 450.945478][T12759] ? _copy_from_user+0x219/0x310 [ 450.945478][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.945478][T12759] __msan_chain_origin+0xcb/0x140 [ 450.945478][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.945478][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.945478][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 450.945478][T12759] do_recvmmsg+0x1063/0x2120 [ 450.945478][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 450.945478][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.945478][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 450.945478][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 450.945478][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 450.945478][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 450.945478][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.945478][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.945478][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.945478][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.945478][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.945478][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.945478][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.945478][T12759] RIP: 0023:0xf6f46549 [ 450.945478][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 450.945478][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 450.945478][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 450.945478][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.945478][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.945478][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 450.945478][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.945478][T12759] Uninit was stored to memory at: [ 450.945478][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.945478][T12759] __msan_chain_origin+0xcb/0x140 [ 450.945478][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.945478][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.945478][T12759] do_recvmmsg+0x1063/0x2120 [ 450.945478][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.945478][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.945478][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.945478][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.945478][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.945478][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.945478][T12759] [ 450.945478][T12759] Uninit was stored to memory at: [ 450.945478][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.945478][T12759] __msan_chain_origin+0xcb/0x140 [ 450.945478][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.945478][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.945478][T12759] do_recvmmsg+0x1063/0x2120 [ 450.945478][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.945478][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.945478][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.945478][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.945478][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.945478][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.945478][T12759] [ 450.945478][T12759] Uninit was stored to memory at: [ 450.945478][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.945478][T12759] __msan_chain_origin+0xcb/0x140 [ 450.945478][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.945478][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.945478][T12759] do_recvmmsg+0x1063/0x2120 [ 450.945478][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.945478][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.945478][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.945478][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.945478][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.945478][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.945478][T12759] [ 450.945478][T12759] Uninit was stored to memory at: [ 450.945478][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.945478][T12759] __msan_chain_origin+0xcb/0x140 [ 450.945478][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.945478][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.945478][T12759] do_recvmmsg+0x1063/0x2120 [ 450.945478][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.945478][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.945478][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.945478][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.945478][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.945478][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.945478][T12759] [ 450.945478][T12759] Uninit was stored to memory at: [ 450.945478][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.945478][T12759] __msan_chain_origin+0xcb/0x140 [ 450.945478][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.945478][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.945478][T12759] do_recvmmsg+0x1063/0x2120 [ 450.945478][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.945478][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.945478][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.945478][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.945478][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.945478][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.945478][T12759] [ 450.945478][T12759] Uninit was stored to memory at: [ 450.945478][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.945478][T12759] __msan_chain_origin+0xcb/0x140 [ 450.945478][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.945478][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.945478][T12759] do_recvmmsg+0x1063/0x2120 [ 450.945478][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.945478][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.945478][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.945478][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.945478][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.945478][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.945478][T12759] [ 450.945478][T12759] Uninit was stored to memory at: [ 450.945478][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 450.945478][T12759] __msan_chain_origin+0xcb/0x140 [ 450.945478][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 450.945478][T12759] get_compat_msghdr+0x108/0x2c0 [ 450.945478][T12759] do_recvmmsg+0x1063/0x2120 [ 450.945478][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 450.945478][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 450.945478][T12759] __do_fast_syscall_32+0x96/0xe0 [ 450.945478][T12759] do_fast_syscall_32+0x3c/0x80 [ 450.945478][T12759] do_SYSENTER_32+0x1b/0x20 [ 450.945478][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.945478][T12759] [ 450.945478][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 450.945478][T12759] do_recvmmsg+0xc1/0x2120 [ 450.945478][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 451.670424][ T56] Bluetooth: hci4: command 0x040f tx timeout [ 451.753075][T12759] not chained 1100000 origins [ 451.757770][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 451.762131][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.762131][T12759] Call Trace: [ 451.762131][T12759] dump_stack+0x25a/0x2f6 [ 451.762131][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 451.762131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 451.762131][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 451.762131][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 451.762131][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 451.762131][T12759] ? release_sock+0x2b5/0x2e0 [ 451.762131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 451.762131][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 451.762131][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 451.831608][T12759] ? should_fail+0x75/0x9c0 [ 451.831608][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 451.831608][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 451.831608][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 451.831608][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 451.831608][T12759] ? _copy_from_user+0x219/0x310 [ 451.831608][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 451.831608][T12759] __msan_chain_origin+0xcb/0x140 [ 451.831608][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 451.831608][T12759] get_compat_msghdr+0x108/0x2c0 [ 451.831608][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 451.831608][T12759] do_recvmmsg+0x1063/0x2120 [ 451.831608][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 451.831608][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 451.831608][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 451.831608][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 451.831608][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 451.831608][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 451.831608][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 451.831608][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 451.831608][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 451.831608][T12759] __do_fast_syscall_32+0x96/0xe0 [ 451.831608][T12759] do_fast_syscall_32+0x3c/0x80 [ 451.831608][T12759] do_SYSENTER_32+0x1b/0x20 [ 451.831608][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.831608][T12759] RIP: 0023:0xf6f46549 [ 451.831608][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 451.831608][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 451.831608][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 451.831608][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.831608][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.831608][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 451.831608][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.831608][T12759] Uninit was stored to memory at: [ 451.831608][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 451.831608][T12759] __msan_chain_origin+0xcb/0x140 [ 451.831608][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 451.831608][T12759] get_compat_msghdr+0x108/0x2c0 [ 451.831608][T12759] do_recvmmsg+0x1063/0x2120 [ 451.831608][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 451.831608][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 451.831608][T12759] __do_fast_syscall_32+0x96/0xe0 [ 451.831608][T12759] do_fast_syscall_32+0x3c/0x80 [ 451.831608][T12759] do_SYSENTER_32+0x1b/0x20 [ 451.831608][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.831608][T12759] [ 451.831608][T12759] Uninit was stored to memory at: [ 451.831608][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 451.831608][T12759] __msan_chain_origin+0xcb/0x140 [ 451.831608][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 451.831608][T12759] get_compat_msghdr+0x108/0x2c0 [ 451.831608][T12759] do_recvmmsg+0x1063/0x2120 [ 451.831608][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 451.831608][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 451.831608][T12759] __do_fast_syscall_32+0x96/0xe0 [ 451.831608][T12759] do_fast_syscall_32+0x3c/0x80 [ 451.831608][T12759] do_SYSENTER_32+0x1b/0x20 [ 451.831608][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.831608][T12759] [ 451.831608][T12759] Uninit was stored to memory at: [ 451.831608][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 451.831608][T12759] __msan_chain_origin+0xcb/0x140 [ 451.831608][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 451.831608][T12759] get_compat_msghdr+0x108/0x2c0 [ 451.831608][T12759] do_recvmmsg+0x1063/0x2120 [ 451.831608][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 451.831608][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 451.831608][T12759] __do_fast_syscall_32+0x96/0xe0 [ 451.831608][T12759] do_fast_syscall_32+0x3c/0x80 [ 451.831608][T12759] do_SYSENTER_32+0x1b/0x20 [ 451.831608][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.831608][T12759] [ 451.831608][T12759] Uninit was stored to memory at: [ 451.831608][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 451.831608][T12759] __msan_chain_origin+0xcb/0x140 [ 451.831608][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 451.831608][T12759] get_compat_msghdr+0x108/0x2c0 [ 451.831608][T12759] do_recvmmsg+0x1063/0x2120 [ 451.831608][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 451.831608][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 451.831608][T12759] __do_fast_syscall_32+0x96/0xe0 [ 451.831608][T12759] do_fast_syscall_32+0x3c/0x80 [ 451.831608][T12759] do_SYSENTER_32+0x1b/0x20 [ 451.831608][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.831608][T12759] [ 451.831608][T12759] Uninit was stored to memory at: [ 451.831608][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 451.831608][T12759] __msan_chain_origin+0xcb/0x140 [ 451.831608][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 451.831608][T12759] get_compat_msghdr+0x108/0x2c0 [ 451.831608][T12759] do_recvmmsg+0x1063/0x2120 [ 451.831608][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 451.831608][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 451.831608][T12759] __do_fast_syscall_32+0x96/0xe0 [ 451.831608][T12759] do_fast_syscall_32+0x3c/0x80 [ 451.831608][T12759] do_SYSENTER_32+0x1b/0x20 [ 451.831608][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.831608][T12759] [ 451.831608][T12759] Uninit was stored to memory at: [ 451.831608][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 451.831608][T12759] __msan_chain_origin+0xcb/0x140 [ 451.831608][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 451.831608][T12759] get_compat_msghdr+0x108/0x2c0 [ 451.831608][T12759] do_recvmmsg+0x1063/0x2120 [ 451.831608][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 451.831608][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 451.831608][T12759] __do_fast_syscall_32+0x96/0xe0 [ 451.831608][T12759] do_fast_syscall_32+0x3c/0x80 [ 451.831608][T12759] do_SYSENTER_32+0x1b/0x20 [ 451.831608][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.831608][T12759] [ 451.831608][T12759] Uninit was stored to memory at: [ 451.831608][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 451.831608][T12759] __msan_chain_origin+0xcb/0x140 [ 451.831608][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 451.831608][T12759] get_compat_msghdr+0x108/0x2c0 [ 451.831608][T12759] do_recvmmsg+0x1063/0x2120 [ 451.831608][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 451.831608][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 451.831608][T12759] __do_fast_syscall_32+0x96/0xe0 [ 451.831608][T12759] do_fast_syscall_32+0x3c/0x80 [ 451.831608][T12759] do_SYSENTER_32+0x1b/0x20 [ 451.831608][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.831608][T12759] [ 451.831608][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 451.831608][T12759] do_recvmmsg+0xc1/0x2120 [ 451.831608][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 452.616019][T12759] not chained 1110000 origins [ 452.620717][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 452.622182][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.622182][T12759] Call Trace: [ 452.622182][T12759] dump_stack+0x25a/0x2f6 [ 452.622182][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 452.652415][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 452.652415][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 452.652415][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 452.652415][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 452.652415][T12759] ? release_sock+0x2b5/0x2e0 [ 452.652415][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 452.652415][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 452.652415][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 452.652415][T12759] ? should_fail+0x75/0x9c0 [ 452.652415][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 452.652415][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 452.652415][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 452.652415][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 452.652415][T12759] ? _copy_from_user+0x219/0x310 [ 452.652415][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 452.652415][T12759] __msan_chain_origin+0xcb/0x140 [ 452.652415][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 452.652415][T12759] get_compat_msghdr+0x108/0x2c0 [ 452.652415][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 452.652415][T12759] do_recvmmsg+0x1063/0x2120 [ 452.652415][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 452.652415][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 452.652415][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 452.652415][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 452.652415][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 452.652415][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 452.652415][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 452.652415][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 452.652415][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 452.652415][T12759] __do_fast_syscall_32+0x96/0xe0 [ 452.652415][T12759] do_fast_syscall_32+0x3c/0x80 [ 452.652415][T12759] do_SYSENTER_32+0x1b/0x20 [ 452.652415][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.652415][T12759] RIP: 0023:0xf6f46549 [ 452.652415][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 452.652415][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 452.652415][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 452.652415][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.652415][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.652415][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 452.652415][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.652415][T12759] Uninit was stored to memory at: [ 452.652415][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 452.652415][T12759] __msan_chain_origin+0xcb/0x140 [ 452.652415][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 452.652415][T12759] get_compat_msghdr+0x108/0x2c0 [ 452.652415][T12759] do_recvmmsg+0x1063/0x2120 [ 452.652415][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 452.652415][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 452.652415][T12759] __do_fast_syscall_32+0x96/0xe0 [ 452.652415][T12759] do_fast_syscall_32+0x3c/0x80 [ 452.652415][T12759] do_SYSENTER_32+0x1b/0x20 [ 452.652415][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.652415][T12759] [ 452.652415][T12759] Uninit was stored to memory at: [ 452.652415][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 452.652415][T12759] __msan_chain_origin+0xcb/0x140 [ 452.652415][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 452.652415][T12759] get_compat_msghdr+0x108/0x2c0 [ 452.652415][T12759] do_recvmmsg+0x1063/0x2120 [ 452.652415][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 452.652415][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 452.652415][T12759] __do_fast_syscall_32+0x96/0xe0 [ 452.652415][T12759] do_fast_syscall_32+0x3c/0x80 [ 452.652415][T12759] do_SYSENTER_32+0x1b/0x20 [ 452.652415][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.652415][T12759] [ 452.652415][T12759] Uninit was stored to memory at: [ 452.652415][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 452.652415][T12759] __msan_chain_origin+0xcb/0x140 [ 452.652415][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 452.652415][T12759] get_compat_msghdr+0x108/0x2c0 [ 452.652415][T12759] do_recvmmsg+0x1063/0x2120 [ 452.652415][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 452.652415][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 452.652415][T12759] __do_fast_syscall_32+0x96/0xe0 [ 452.652415][T12759] do_fast_syscall_32+0x3c/0x80 [ 452.652415][T12759] do_SYSENTER_32+0x1b/0x20 [ 452.652415][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.652415][T12759] [ 452.652415][T12759] Uninit was stored to memory at: [ 452.652415][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 452.652415][T12759] __msan_chain_origin+0xcb/0x140 [ 452.652415][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 452.652415][T12759] get_compat_msghdr+0x108/0x2c0 [ 452.652415][T12759] do_recvmmsg+0x1063/0x2120 [ 452.652415][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 452.652415][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 452.652415][T12759] __do_fast_syscall_32+0x96/0xe0 [ 452.652415][T12759] do_fast_syscall_32+0x3c/0x80 [ 452.652415][T12759] do_SYSENTER_32+0x1b/0x20 [ 452.652415][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.652415][T12759] [ 452.652415][T12759] Uninit was stored to memory at: [ 452.652415][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 452.652415][T12759] __msan_chain_origin+0xcb/0x140 [ 452.652415][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 452.652415][T12759] get_compat_msghdr+0x108/0x2c0 [ 452.652415][T12759] do_recvmmsg+0x1063/0x2120 [ 452.652415][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 452.652415][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 452.652415][T12759] __do_fast_syscall_32+0x96/0xe0 [ 452.652415][T12759] do_fast_syscall_32+0x3c/0x80 [ 452.652415][T12759] do_SYSENTER_32+0x1b/0x20 [ 452.652415][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.652415][T12759] [ 452.652415][T12759] Uninit was stored to memory at: [ 452.652415][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 452.652415][T12759] __msan_chain_origin+0xcb/0x140 [ 452.652415][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 452.652415][T12759] get_compat_msghdr+0x108/0x2c0 [ 452.652415][T12759] do_recvmmsg+0x1063/0x2120 [ 452.652415][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 452.652415][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 452.652415][T12759] __do_fast_syscall_32+0x96/0xe0 [ 452.652415][T12759] do_fast_syscall_32+0x3c/0x80 [ 452.652415][T12759] do_SYSENTER_32+0x1b/0x20 [ 452.652415][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.652415][T12759] [ 452.652415][T12759] Uninit was stored to memory at: [ 452.652415][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 452.652415][T12759] __msan_chain_origin+0xcb/0x140 [ 452.652415][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 452.652415][T12759] get_compat_msghdr+0x108/0x2c0 [ 452.652415][T12759] do_recvmmsg+0x1063/0x2120 [ 452.652415][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 452.652415][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 452.652415][T12759] __do_fast_syscall_32+0x96/0xe0 [ 452.652415][T12759] do_fast_syscall_32+0x3c/0x80 [ 452.652415][T12759] do_SYSENTER_32+0x1b/0x20 [ 452.652415][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.652415][T12759] [ 452.652415][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 452.652415][T12759] do_recvmmsg+0xc1/0x2120 [ 452.652415][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 453.471413][T12759] not chained 1120000 origins [ 453.472136][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 453.472136][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.472136][T12759] Call Trace: [ 453.472136][T12759] dump_stack+0x25a/0x2f6 [ 453.472136][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 453.472136][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 453.472136][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 453.472136][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 453.472136][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 453.472136][T12759] ? release_sock+0x2b5/0x2e0 [ 453.472136][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 453.472136][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 453.472136][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 453.472136][T12759] ? should_fail+0x75/0x9c0 [ 453.472136][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 453.472136][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 453.472136][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 453.472136][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 453.472136][T12759] ? _copy_from_user+0x219/0x310 [ 453.472136][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 453.472136][T12759] __msan_chain_origin+0xcb/0x140 [ 453.472136][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 453.472136][T12759] get_compat_msghdr+0x108/0x2c0 [ 453.472136][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 453.472136][T12759] do_recvmmsg+0x1063/0x2120 [ 453.472136][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 453.472136][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 453.472136][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 453.472136][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 453.472136][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 453.472136][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 453.472136][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 453.472136][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 453.472136][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 453.472136][T12759] __do_fast_syscall_32+0x96/0xe0 [ 453.472136][T12759] do_fast_syscall_32+0x3c/0x80 [ 453.472136][T12759] do_SYSENTER_32+0x1b/0x20 [ 453.472136][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.472136][T12759] RIP: 0023:0xf6f46549 [ 453.472136][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 453.472136][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 453.472136][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 453.472136][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.472136][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.472136][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 453.472136][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.472136][T12759] Uninit was stored to memory at: [ 453.472136][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 453.472136][T12759] __msan_chain_origin+0xcb/0x140 [ 453.472136][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 453.472136][T12759] get_compat_msghdr+0x108/0x2c0 [ 453.472136][T12759] do_recvmmsg+0x1063/0x2120 [ 453.472136][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 453.472136][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 453.472136][T12759] __do_fast_syscall_32+0x96/0xe0 [ 453.472136][T12759] do_fast_syscall_32+0x3c/0x80 [ 453.472136][T12759] do_SYSENTER_32+0x1b/0x20 [ 453.472136][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.472136][T12759] [ 453.472136][T12759] Uninit was stored to memory at: [ 453.472136][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 453.472136][T12759] __msan_chain_origin+0xcb/0x140 [ 453.472136][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 453.472136][T12759] get_compat_msghdr+0x108/0x2c0 [ 453.472136][T12759] do_recvmmsg+0x1063/0x2120 [ 453.472136][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 453.472136][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 453.472136][T12759] __do_fast_syscall_32+0x96/0xe0 [ 453.472136][T12759] do_fast_syscall_32+0x3c/0x80 [ 453.472136][T12759] do_SYSENTER_32+0x1b/0x20 [ 453.472136][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.472136][T12759] [ 453.472136][T12759] Uninit was stored to memory at: [ 453.472136][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 453.472136][T12759] __msan_chain_origin+0xcb/0x140 [ 453.472136][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 453.472136][T12759] get_compat_msghdr+0x108/0x2c0 [ 453.472136][T12759] do_recvmmsg+0x1063/0x2120 [ 453.472136][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 453.472136][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 453.472136][T12759] __do_fast_syscall_32+0x96/0xe0 [ 453.472136][T12759] do_fast_syscall_32+0x3c/0x80 [ 453.472136][T12759] do_SYSENTER_32+0x1b/0x20 [ 453.472136][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.472136][T12759] [ 453.472136][T12759] Uninit was stored to memory at: [ 453.472136][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 453.472136][T12759] __msan_chain_origin+0xcb/0x140 [ 453.472136][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 453.472136][T12759] get_compat_msghdr+0x108/0x2c0 [ 453.472136][T12759] do_recvmmsg+0x1063/0x2120 [ 453.472136][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 453.472136][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 453.472136][T12759] __do_fast_syscall_32+0x96/0xe0 [ 453.472136][T12759] do_fast_syscall_32+0x3c/0x80 [ 453.472136][T12759] do_SYSENTER_32+0x1b/0x20 [ 453.472136][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.472136][T12759] [ 453.472136][T12759] Uninit was stored to memory at: [ 453.472136][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 453.472136][T12759] __msan_chain_origin+0xcb/0x140 [ 453.472136][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 453.472136][T12759] get_compat_msghdr+0x108/0x2c0 [ 453.472136][T12759] do_recvmmsg+0x1063/0x2120 [ 453.472136][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 453.472136][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 453.472136][T12759] __do_fast_syscall_32+0x96/0xe0 [ 453.472136][T12759] do_fast_syscall_32+0x3c/0x80 [ 453.472136][T12759] do_SYSENTER_32+0x1b/0x20 [ 453.472136][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.472136][T12759] [ 453.472136][T12759] Uninit was stored to memory at: [ 453.472136][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 453.472136][T12759] __msan_chain_origin+0xcb/0x140 [ 453.472136][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 453.472136][T12759] get_compat_msghdr+0x108/0x2c0 [ 453.472136][T12759] do_recvmmsg+0x1063/0x2120 [ 453.472136][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 453.472136][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 453.472136][T12759] __do_fast_syscall_32+0x96/0xe0 [ 453.472136][T12759] do_fast_syscall_32+0x3c/0x80 [ 453.472136][T12759] do_SYSENTER_32+0x1b/0x20 [ 453.472136][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.472136][T12759] [ 453.472136][T12759] Uninit was stored to memory at: [ 453.472136][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 453.472136][T12759] __msan_chain_origin+0xcb/0x140 [ 453.472136][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 453.472136][T12759] get_compat_msghdr+0x108/0x2c0 [ 453.472136][T12759] do_recvmmsg+0x1063/0x2120 [ 453.472136][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 453.472136][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 453.472136][T12759] __do_fast_syscall_32+0x96/0xe0 [ 453.472136][T12759] do_fast_syscall_32+0x3c/0x80 [ 453.472136][T12759] do_SYSENTER_32+0x1b/0x20 [ 453.472136][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.472136][T12759] [ 453.472136][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 453.472136][T12759] do_recvmmsg+0xc1/0x2120 [ 453.472136][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 454.241320][ T56] Bluetooth: hci4: command 0x0419 tx timeout [ 454.323755][T12759] not chained 1130000 origins [ 454.328540][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 454.332131][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.332131][T12759] Call Trace: [ 454.332131][T12759] dump_stack+0x25a/0x2f6 [ 454.332131][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 454.332131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 454.332131][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 454.332131][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 454.332131][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 454.332131][T12759] ? release_sock+0x2b5/0x2e0 [ 454.332131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 454.332131][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 454.332131][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 454.332131][T12759] ? should_fail+0x75/0x9c0 [ 454.332131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 454.332131][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 454.332131][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 454.332131][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 454.332131][T12759] ? _copy_from_user+0x219/0x310 [ 454.332131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 454.332131][T12759] __msan_chain_origin+0xcb/0x140 [ 454.332131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 454.332131][T12759] get_compat_msghdr+0x108/0x2c0 [ 454.332131][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 454.332131][T12759] do_recvmmsg+0x1063/0x2120 [ 454.332131][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 454.332131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 454.332131][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 454.332131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 454.332131][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 454.332131][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 454.332131][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 454.332131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 454.332131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 454.332131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 454.332131][T12759] do_fast_syscall_32+0x3c/0x80 [ 454.332131][T12759] do_SYSENTER_32+0x1b/0x20 [ 454.332131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.332131][T12759] RIP: 0023:0xf6f46549 [ 454.332131][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 454.332131][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 454.332131][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 454.332131][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.332131][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.332131][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 454.332131][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.332131][T12759] Uninit was stored to memory at: [ 454.332131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 454.332131][T12759] __msan_chain_origin+0xcb/0x140 [ 454.332131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 454.332131][T12759] get_compat_msghdr+0x108/0x2c0 [ 454.332131][T12759] do_recvmmsg+0x1063/0x2120 [ 454.332131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 454.332131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 454.332131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 454.332131][T12759] do_fast_syscall_32+0x3c/0x80 [ 454.332131][T12759] do_SYSENTER_32+0x1b/0x20 [ 454.332131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.332131][T12759] [ 454.332131][T12759] Uninit was stored to memory at: [ 454.332131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 454.332131][T12759] __msan_chain_origin+0xcb/0x140 [ 454.332131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 454.332131][T12759] get_compat_msghdr+0x108/0x2c0 [ 454.332131][T12759] do_recvmmsg+0x1063/0x2120 [ 454.332131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 454.332131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 454.332131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 454.332131][T12759] do_fast_syscall_32+0x3c/0x80 [ 454.332131][T12759] do_SYSENTER_32+0x1b/0x20 [ 454.332131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.332131][T12759] [ 454.332131][T12759] Uninit was stored to memory at: [ 454.332131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 454.332131][T12759] __msan_chain_origin+0xcb/0x140 [ 454.332131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 454.332131][T12759] get_compat_msghdr+0x108/0x2c0 [ 454.332131][T12759] do_recvmmsg+0x1063/0x2120 [ 454.332131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 454.332131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 454.332131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 454.332131][T12759] do_fast_syscall_32+0x3c/0x80 [ 454.332131][T12759] do_SYSENTER_32+0x1b/0x20 [ 454.332131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.332131][T12759] [ 454.332131][T12759] Uninit was stored to memory at: [ 454.332131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 454.332131][T12759] __msan_chain_origin+0xcb/0x140 [ 454.332131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 454.332131][T12759] get_compat_msghdr+0x108/0x2c0 [ 454.332131][T12759] do_recvmmsg+0x1063/0x2120 [ 454.332131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 454.332131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 454.332131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 454.332131][T12759] do_fast_syscall_32+0x3c/0x80 [ 454.332131][T12759] do_SYSENTER_32+0x1b/0x20 [ 454.332131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.332131][T12759] [ 454.332131][T12759] Uninit was stored to memory at: [ 454.332131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 454.332131][T12759] __msan_chain_origin+0xcb/0x140 [ 454.332131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 454.332131][T12759] get_compat_msghdr+0x108/0x2c0 [ 454.332131][T12759] do_recvmmsg+0x1063/0x2120 [ 454.332131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 454.332131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 454.332131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 454.332131][T12759] do_fast_syscall_32+0x3c/0x80 [ 454.332131][T12759] do_SYSENTER_32+0x1b/0x20 [ 454.332131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.332131][T12759] [ 454.332131][T12759] Uninit was stored to memory at: [ 454.332131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 454.332131][T12759] __msan_chain_origin+0xcb/0x140 [ 454.332131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 454.332131][T12759] get_compat_msghdr+0x108/0x2c0 [ 454.332131][T12759] do_recvmmsg+0x1063/0x2120 [ 454.332131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 454.332131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 454.332131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 454.332131][T12759] do_fast_syscall_32+0x3c/0x80 [ 454.332131][T12759] do_SYSENTER_32+0x1b/0x20 [ 454.332131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.332131][T12759] [ 454.332131][T12759] Uninit was stored to memory at: [ 454.332131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 454.332131][T12759] __msan_chain_origin+0xcb/0x140 [ 454.332131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 454.332131][T12759] get_compat_msghdr+0x108/0x2c0 [ 454.332131][T12759] do_recvmmsg+0x1063/0x2120 [ 454.332131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 454.332131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 454.332131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 454.332131][T12759] do_fast_syscall_32+0x3c/0x80 [ 454.332131][T12759] do_SYSENTER_32+0x1b/0x20 [ 454.332131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.332131][T12759] [ 454.332131][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 454.332131][T12759] do_recvmmsg+0xc1/0x2120 [ 454.332131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 455.174795][T12759] not chained 1140000 origins [ 455.179487][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 455.182134][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.182134][T12759] Call Trace: [ 455.182134][T12759] dump_stack+0x25a/0x2f6 [ 455.182134][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 455.182134][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 455.182134][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 455.182134][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 455.182134][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 455.182134][T12759] ? propagate_entity_load_avg+0x4c/0x1210 [ 455.182134][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 455.182134][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 455.182134][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 455.182134][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 455.182134][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 455.182134][T12759] ? should_fail+0x75/0x9c0 [ 455.182134][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 455.182134][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 455.182134][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 455.182134][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 455.182134][T12759] ? _copy_from_user+0x219/0x310 [ 455.182134][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 455.182134][T12759] __msan_chain_origin+0xcb/0x140 [ 455.182134][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 455.182134][T12759] get_compat_msghdr+0x108/0x2c0 [ 455.182134][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 455.182134][T12759] do_recvmmsg+0x1063/0x2120 [ 455.182134][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 455.182134][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 455.182134][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 455.182134][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 455.182134][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 455.182134][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 455.182134][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 455.182134][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 455.182134][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 455.182134][T12759] __do_fast_syscall_32+0x96/0xe0 [ 455.182134][T12759] do_fast_syscall_32+0x3c/0x80 [ 455.182134][T12759] do_SYSENTER_32+0x1b/0x20 [ 455.182134][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.182134][T12759] RIP: 0023:0xf6f46549 [ 455.182134][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 455.182134][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 455.182134][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 455.182134][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.182134][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.182134][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 455.182134][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.182134][T12759] Uninit was stored to memory at: [ 455.182134][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 455.182134][T12759] __msan_chain_origin+0xcb/0x140 [ 455.182134][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 455.182134][T12759] get_compat_msghdr+0x108/0x2c0 [ 455.182134][T12759] do_recvmmsg+0x1063/0x2120 [ 455.182134][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 455.182134][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 455.182134][T12759] __do_fast_syscall_32+0x96/0xe0 [ 455.182134][T12759] do_fast_syscall_32+0x3c/0x80 [ 455.182134][T12759] do_SYSENTER_32+0x1b/0x20 [ 455.182134][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.182134][T12759] [ 455.182134][T12759] Uninit was stored to memory at: [ 455.182134][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 455.182134][T12759] __msan_chain_origin+0xcb/0x140 [ 455.182134][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 455.182134][T12759] get_compat_msghdr+0x108/0x2c0 [ 455.182134][T12759] do_recvmmsg+0x1063/0x2120 [ 455.182134][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 455.182134][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 455.182134][T12759] __do_fast_syscall_32+0x96/0xe0 [ 455.182134][T12759] do_fast_syscall_32+0x3c/0x80 [ 455.182134][T12759] do_SYSENTER_32+0x1b/0x20 [ 455.182134][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.182134][T12759] [ 455.182134][T12759] Uninit was stored to memory at: [ 455.182134][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 455.182134][T12759] __msan_chain_origin+0xcb/0x140 [ 455.182134][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 455.182134][T12759] get_compat_msghdr+0x108/0x2c0 [ 455.182134][T12759] do_recvmmsg+0x1063/0x2120 [ 455.182134][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 455.182134][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 455.182134][T12759] __do_fast_syscall_32+0x96/0xe0 [ 455.182134][T12759] do_fast_syscall_32+0x3c/0x80 [ 455.182134][T12759] do_SYSENTER_32+0x1b/0x20 [ 455.182134][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.182134][T12759] [ 455.182134][T12759] Uninit was stored to memory at: [ 455.182134][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 455.182134][T12759] __msan_chain_origin+0xcb/0x140 [ 455.182134][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 455.182134][T12759] get_compat_msghdr+0x108/0x2c0 [ 455.182134][T12759] do_recvmmsg+0x1063/0x2120 [ 455.182134][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 455.182134][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 455.182134][T12759] __do_fast_syscall_32+0x96/0xe0 [ 455.182134][T12759] do_fast_syscall_32+0x3c/0x80 [ 455.182134][T12759] do_SYSENTER_32+0x1b/0x20 [ 455.182134][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.182134][T12759] [ 455.182134][T12759] Uninit was stored to memory at: [ 455.182134][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 455.182134][T12759] __msan_chain_origin+0xcb/0x140 [ 455.182134][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 455.182134][T12759] get_compat_msghdr+0x108/0x2c0 [ 455.182134][T12759] do_recvmmsg+0x1063/0x2120 [ 455.182134][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 455.182134][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 455.182134][T12759] __do_fast_syscall_32+0x96/0xe0 [ 455.182134][T12759] do_fast_syscall_32+0x3c/0x80 [ 455.182134][T12759] do_SYSENTER_32+0x1b/0x20 [ 455.182134][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.182134][T12759] [ 455.182134][T12759] Uninit was stored to memory at: [ 455.182134][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 455.182134][T12759] __msan_chain_origin+0xcb/0x140 [ 455.182134][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 455.182134][T12759] get_compat_msghdr+0x108/0x2c0 [ 455.182134][T12759] do_recvmmsg+0x1063/0x2120 [ 455.182134][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 455.182134][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 455.182134][T12759] __do_fast_syscall_32+0x96/0xe0 [ 455.182134][T12759] do_fast_syscall_32+0x3c/0x80 [ 455.182134][T12759] do_SYSENTER_32+0x1b/0x20 [ 455.182134][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.182134][T12759] [ 455.182134][T12759] Uninit was stored to memory at: [ 455.182134][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 455.182134][T12759] __msan_chain_origin+0xcb/0x140 [ 455.182134][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 455.182134][T12759] get_compat_msghdr+0x108/0x2c0 [ 455.182134][T12759] do_recvmmsg+0x1063/0x2120 [ 455.182134][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 455.182134][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 455.182134][T12759] __do_fast_syscall_32+0x96/0xe0 [ 455.182134][T12759] do_fast_syscall_32+0x3c/0x80 [ 455.182134][T12759] do_SYSENTER_32+0x1b/0x20 [ 455.182134][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.182134][T12759] [ 455.182134][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 455.182134][T12759] do_recvmmsg+0xc1/0x2120 [ 455.182134][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.038126][T12759] not chained 1150000 origins [ 456.042133][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 456.042133][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.042133][T12759] Call Trace: [ 456.042133][T12759] dump_stack+0x25a/0x2f6 [ 456.042133][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 456.042133][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.042133][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 456.042133][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 456.042133][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 456.042133][T12759] ? release_sock+0x2b5/0x2e0 [ 456.042133][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.042133][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 456.042133][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 456.042133][T12759] ? should_fail+0x75/0x9c0 [ 456.042133][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.042133][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 456.042133][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 456.042133][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 456.042133][T12759] ? _copy_from_user+0x219/0x310 [ 456.042133][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.042133][T12759] __msan_chain_origin+0xcb/0x140 [ 456.042133][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.042133][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.042133][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 456.042133][T12759] do_recvmmsg+0x1063/0x2120 [ 456.042133][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 456.042133][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.042133][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 456.042133][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.042133][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 456.042133][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 456.042133][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.042133][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.042133][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.042133][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.042133][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.042133][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.042133][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.042133][T12759] RIP: 0023:0xf6f46549 [ 456.042133][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 456.042133][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 456.042133][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 456.042133][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.042133][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.042133][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 456.042133][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.042133][T12759] Uninit was stored to memory at: [ 456.042133][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.042133][T12759] __msan_chain_origin+0xcb/0x140 [ 456.042133][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.042133][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.042133][T12759] do_recvmmsg+0x1063/0x2120 [ 456.042133][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.042133][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.042133][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.042133][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.042133][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.042133][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.042133][T12759] [ 456.042133][T12759] Uninit was stored to memory at: [ 456.042133][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.042133][T12759] __msan_chain_origin+0xcb/0x140 [ 456.042133][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.042133][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.042133][T12759] do_recvmmsg+0x1063/0x2120 [ 456.042133][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.042133][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.042133][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.042133][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.042133][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.042133][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.042133][T12759] [ 456.042133][T12759] Uninit was stored to memory at: [ 456.042133][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.042133][T12759] __msan_chain_origin+0xcb/0x140 [ 456.042133][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.042133][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.042133][T12759] do_recvmmsg+0x1063/0x2120 [ 456.042133][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.042133][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.042133][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.042133][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.042133][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.042133][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.042133][T12759] [ 456.042133][T12759] Uninit was stored to memory at: [ 456.042133][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.042133][T12759] __msan_chain_origin+0xcb/0x140 [ 456.042133][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.042133][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.042133][T12759] do_recvmmsg+0x1063/0x2120 [ 456.042133][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.042133][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.042133][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.042133][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.042133][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.042133][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.042133][T12759] [ 456.042133][T12759] Uninit was stored to memory at: [ 456.042133][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.042133][T12759] __msan_chain_origin+0xcb/0x140 [ 456.042133][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.042133][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.042133][T12759] do_recvmmsg+0x1063/0x2120 [ 456.042133][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.042133][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.042133][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.042133][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.042133][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.042133][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.042133][T12759] [ 456.042133][T12759] Uninit was stored to memory at: [ 456.042133][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.042133][T12759] __msan_chain_origin+0xcb/0x140 [ 456.042133][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.042133][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.042133][T12759] do_recvmmsg+0x1063/0x2120 [ 456.042133][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.042133][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.042133][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.042133][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.042133][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.042133][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.042133][T12759] [ 456.042133][T12759] Uninit was stored to memory at: [ 456.042133][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.042133][T12759] __msan_chain_origin+0xcb/0x140 [ 456.042133][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.042133][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.042133][T12759] do_recvmmsg+0x1063/0x2120 [ 456.042133][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.042133][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.042133][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.042133][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.042133][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.042133][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.042133][T12759] [ 456.042133][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 456.042133][T12759] do_recvmmsg+0xc1/0x2120 [ 456.042133][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.882357][T12759] not chained 1160000 origins [ 456.887047][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 456.892228][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.892228][T12759] Call Trace: [ 456.892228][T12759] dump_stack+0x25a/0x2f6 [ 456.892228][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 456.892228][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.892228][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 456.892228][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 456.892228][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 456.937467][T12759] ? release_sock+0x2b5/0x2e0 [ 456.937467][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.937467][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 456.937467][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 456.937467][T12759] ? should_fail+0x75/0x9c0 [ 456.937467][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.937467][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 456.937467][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 456.937467][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 456.937467][T12759] ? _copy_from_user+0x219/0x310 [ 456.937467][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.937467][T12759] __msan_chain_origin+0xcb/0x140 [ 456.937467][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.937467][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.937467][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 456.937467][T12759] do_recvmmsg+0x1063/0x2120 [ 456.937467][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 456.937467][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.937467][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 456.937467][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 456.937467][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 456.937467][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 456.937467][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.937467][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.937467][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.937467][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.937467][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.937467][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.937467][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.937467][T12759] RIP: 0023:0xf6f46549 [ 456.937467][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 456.937467][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 456.937467][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 456.937467][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.937467][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.937467][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 456.937467][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.937467][T12759] Uninit was stored to memory at: [ 456.937467][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.937467][T12759] __msan_chain_origin+0xcb/0x140 [ 456.937467][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.937467][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.937467][T12759] do_recvmmsg+0x1063/0x2120 [ 456.937467][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.937467][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.937467][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.937467][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.937467][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.937467][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.937467][T12759] [ 456.937467][T12759] Uninit was stored to memory at: [ 456.937467][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.937467][T12759] __msan_chain_origin+0xcb/0x140 [ 456.937467][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.937467][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.937467][T12759] do_recvmmsg+0x1063/0x2120 [ 456.937467][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.937467][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.937467][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.937467][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.937467][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.937467][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.937467][T12759] [ 456.937467][T12759] Uninit was stored to memory at: [ 456.937467][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.937467][T12759] __msan_chain_origin+0xcb/0x140 [ 456.937467][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.937467][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.937467][T12759] do_recvmmsg+0x1063/0x2120 [ 456.937467][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.937467][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.937467][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.937467][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.937467][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.937467][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.937467][T12759] [ 456.937467][T12759] Uninit was stored to memory at: [ 456.937467][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.937467][T12759] __msan_chain_origin+0xcb/0x140 [ 456.937467][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.937467][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.937467][T12759] do_recvmmsg+0x1063/0x2120 [ 456.937467][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.937467][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.937467][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.937467][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.937467][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.937467][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.937467][T12759] [ 456.937467][T12759] Uninit was stored to memory at: [ 456.937467][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.937467][T12759] __msan_chain_origin+0xcb/0x140 [ 456.937467][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.937467][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.937467][T12759] do_recvmmsg+0x1063/0x2120 [ 456.937467][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.937467][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.937467][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.937467][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.937467][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.937467][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.937467][T12759] [ 456.937467][T12759] Uninit was stored to memory at: [ 456.937467][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.937467][T12759] __msan_chain_origin+0xcb/0x140 [ 456.937467][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.937467][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.937467][T12759] do_recvmmsg+0x1063/0x2120 [ 456.937467][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.937467][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.937467][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.937467][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.937467][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.937467][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.937467][T12759] [ 456.937467][T12759] Uninit was stored to memory at: [ 456.937467][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 456.937467][T12759] __msan_chain_origin+0xcb/0x140 [ 456.937467][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 456.937467][T12759] get_compat_msghdr+0x108/0x2c0 [ 456.937467][T12759] do_recvmmsg+0x1063/0x2120 [ 456.937467][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 456.937467][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 456.937467][T12759] __do_fast_syscall_32+0x96/0xe0 [ 456.937467][T12759] do_fast_syscall_32+0x3c/0x80 [ 456.937467][T12759] do_SYSENTER_32+0x1b/0x20 [ 456.937467][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.937467][T12759] [ 456.937467][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 456.937467][T12759] do_recvmmsg+0xc1/0x2120 [ 456.937467][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 457.733866][T12759] not chained 1170000 origins [ 457.738559][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 457.746096][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.746096][T12759] Call Trace: [ 457.746096][T12759] dump_stack+0x25a/0x2f6 [ 457.746096][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 457.746096][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 457.746096][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 457.777729][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 457.777729][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 457.777729][T12759] ? release_sock+0x2b5/0x2e0 [ 457.777729][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 457.800745][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 457.800745][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 457.800745][T12759] ? should_fail+0x75/0x9c0 [ 457.800745][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 457.800745][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 457.800745][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 457.800745][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 457.800745][T12759] ? _copy_from_user+0x219/0x310 [ 457.800745][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 457.800745][T12759] __msan_chain_origin+0xcb/0x140 [ 457.800745][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 457.800745][T12759] get_compat_msghdr+0x108/0x2c0 [ 457.800745][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 457.800745][T12759] do_recvmmsg+0x1063/0x2120 [ 457.800745][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 457.800745][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 457.800745][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 457.800745][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 457.800745][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 457.800745][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 457.800745][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 457.800745][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 457.800745][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 457.800745][T12759] __do_fast_syscall_32+0x96/0xe0 [ 457.800745][T12759] do_fast_syscall_32+0x3c/0x80 [ 457.800745][T12759] do_SYSENTER_32+0x1b/0x20 [ 457.800745][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.800745][T12759] RIP: 0023:0xf6f46549 [ 457.800745][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 457.800745][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 457.800745][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 457.800745][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.800745][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.800745][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 457.800745][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.800745][T12759] Uninit was stored to memory at: [ 457.800745][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 457.800745][T12759] __msan_chain_origin+0xcb/0x140 [ 457.800745][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 457.800745][T12759] get_compat_msghdr+0x108/0x2c0 [ 457.800745][T12759] do_recvmmsg+0x1063/0x2120 [ 457.800745][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 457.800745][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 457.800745][T12759] __do_fast_syscall_32+0x96/0xe0 [ 457.800745][T12759] do_fast_syscall_32+0x3c/0x80 [ 457.800745][T12759] do_SYSENTER_32+0x1b/0x20 [ 457.800745][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.800745][T12759] [ 457.800745][T12759] Uninit was stored to memory at: [ 457.800745][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 457.800745][T12759] __msan_chain_origin+0xcb/0x140 [ 457.800745][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 457.800745][T12759] get_compat_msghdr+0x108/0x2c0 [ 457.800745][T12759] do_recvmmsg+0x1063/0x2120 [ 457.800745][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 457.800745][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 457.800745][T12759] __do_fast_syscall_32+0x96/0xe0 [ 457.800745][T12759] do_fast_syscall_32+0x3c/0x80 [ 457.800745][T12759] do_SYSENTER_32+0x1b/0x20 [ 457.800745][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.800745][T12759] [ 457.800745][T12759] Uninit was stored to memory at: [ 457.800745][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 457.800745][T12759] __msan_chain_origin+0xcb/0x140 [ 457.800745][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 457.800745][T12759] get_compat_msghdr+0x108/0x2c0 [ 457.800745][T12759] do_recvmmsg+0x1063/0x2120 [ 457.800745][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 457.800745][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 457.800745][T12759] __do_fast_syscall_32+0x96/0xe0 [ 457.800745][T12759] do_fast_syscall_32+0x3c/0x80 [ 457.800745][T12759] do_SYSENTER_32+0x1b/0x20 [ 457.800745][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.800745][T12759] [ 457.800745][T12759] Uninit was stored to memory at: [ 457.800745][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 457.800745][T12759] __msan_chain_origin+0xcb/0x140 [ 457.800745][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 457.800745][T12759] get_compat_msghdr+0x108/0x2c0 [ 457.800745][T12759] do_recvmmsg+0x1063/0x2120 [ 457.800745][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 457.800745][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 457.800745][T12759] __do_fast_syscall_32+0x96/0xe0 [ 457.800745][T12759] do_fast_syscall_32+0x3c/0x80 [ 457.800745][T12759] do_SYSENTER_32+0x1b/0x20 [ 457.800745][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.800745][T12759] [ 457.800745][T12759] Uninit was stored to memory at: [ 457.800745][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 457.800745][T12759] __msan_chain_origin+0xcb/0x140 [ 457.800745][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 457.800745][T12759] get_compat_msghdr+0x108/0x2c0 [ 457.800745][T12759] do_recvmmsg+0x1063/0x2120 [ 457.800745][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 457.800745][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 457.800745][T12759] __do_fast_syscall_32+0x96/0xe0 [ 457.800745][T12759] do_fast_syscall_32+0x3c/0x80 [ 457.800745][T12759] do_SYSENTER_32+0x1b/0x20 [ 457.800745][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.800745][T12759] [ 457.800745][T12759] Uninit was stored to memory at: [ 457.800745][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 457.800745][T12759] __msan_chain_origin+0xcb/0x140 [ 457.800745][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 457.800745][T12759] get_compat_msghdr+0x108/0x2c0 [ 457.800745][T12759] do_recvmmsg+0x1063/0x2120 [ 457.800745][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 457.800745][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 457.800745][T12759] __do_fast_syscall_32+0x96/0xe0 [ 457.800745][T12759] do_fast_syscall_32+0x3c/0x80 [ 457.800745][T12759] do_SYSENTER_32+0x1b/0x20 [ 457.800745][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.800745][T12759] [ 457.800745][T12759] Uninit was stored to memory at: [ 457.800745][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 457.800745][T12759] __msan_chain_origin+0xcb/0x140 [ 457.800745][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 457.800745][T12759] get_compat_msghdr+0x108/0x2c0 [ 457.800745][T12759] do_recvmmsg+0x1063/0x2120 [ 457.800745][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 457.800745][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 457.800745][T12759] __do_fast_syscall_32+0x96/0xe0 [ 457.800745][T12759] do_fast_syscall_32+0x3c/0x80 [ 457.800745][T12759] do_SYSENTER_32+0x1b/0x20 [ 457.800745][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.800745][T12759] [ 457.800745][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 457.800745][T12759] do_recvmmsg+0xc1/0x2120 [ 457.800745][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 458.590372][T12759] not chained 1180000 origins [ 458.592140][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 458.592140][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.592140][T12759] Call Trace: [ 458.592140][T12759] dump_stack+0x25a/0x2f6 [ 458.618675][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 458.618675][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 458.618675][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 458.633156][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 458.633156][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 458.633156][T12759] ? release_sock+0x2b5/0x2e0 [ 458.633156][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 458.633156][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 458.633156][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 458.633156][T12759] ? should_fail+0x75/0x9c0 [ 458.633156][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 458.633156][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 458.633156][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 458.633156][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 458.633156][T12759] ? _copy_from_user+0x219/0x310 [ 458.633156][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 458.633156][T12759] __msan_chain_origin+0xcb/0x140 [ 458.633156][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 458.633156][T12759] get_compat_msghdr+0x108/0x2c0 [ 458.633156][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 458.633156][T12759] do_recvmmsg+0x1063/0x2120 [ 458.633156][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 458.633156][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 458.633156][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 458.633156][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 458.633156][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 458.633156][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 458.633156][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 458.633156][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 458.633156][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 458.633156][T12759] __do_fast_syscall_32+0x96/0xe0 [ 458.633156][T12759] do_fast_syscall_32+0x3c/0x80 [ 458.633156][T12759] do_SYSENTER_32+0x1b/0x20 [ 458.633156][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.633156][T12759] RIP: 0023:0xf6f46549 [ 458.633156][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 458.633156][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 458.633156][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 458.633156][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.633156][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.633156][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 458.633156][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.633156][T12759] Uninit was stored to memory at: [ 458.633156][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 458.633156][T12759] __msan_chain_origin+0xcb/0x140 [ 458.633156][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 458.633156][T12759] get_compat_msghdr+0x108/0x2c0 [ 458.633156][T12759] do_recvmmsg+0x1063/0x2120 [ 458.633156][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 458.633156][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 458.633156][T12759] __do_fast_syscall_32+0x96/0xe0 [ 458.633156][T12759] do_fast_syscall_32+0x3c/0x80 [ 458.633156][T12759] do_SYSENTER_32+0x1b/0x20 [ 458.633156][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.633156][T12759] [ 458.633156][T12759] Uninit was stored to memory at: [ 458.633156][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 458.633156][T12759] __msan_chain_origin+0xcb/0x140 [ 458.633156][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 458.633156][T12759] get_compat_msghdr+0x108/0x2c0 [ 458.633156][T12759] do_recvmmsg+0x1063/0x2120 [ 458.633156][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 458.633156][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 458.633156][T12759] __do_fast_syscall_32+0x96/0xe0 [ 458.633156][T12759] do_fast_syscall_32+0x3c/0x80 [ 458.633156][T12759] do_SYSENTER_32+0x1b/0x20 [ 458.633156][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.633156][T12759] [ 458.633156][T12759] Uninit was stored to memory at: [ 458.633156][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 458.633156][T12759] __msan_chain_origin+0xcb/0x140 [ 458.633156][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 458.633156][T12759] get_compat_msghdr+0x108/0x2c0 [ 458.633156][T12759] do_recvmmsg+0x1063/0x2120 [ 458.633156][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 458.633156][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 458.633156][T12759] __do_fast_syscall_32+0x96/0xe0 [ 458.633156][T12759] do_fast_syscall_32+0x3c/0x80 [ 458.633156][T12759] do_SYSENTER_32+0x1b/0x20 [ 458.633156][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.633156][T12759] [ 458.633156][T12759] Uninit was stored to memory at: [ 458.633156][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 458.633156][T12759] __msan_chain_origin+0xcb/0x140 [ 458.633156][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 458.633156][T12759] get_compat_msghdr+0x108/0x2c0 [ 458.633156][T12759] do_recvmmsg+0x1063/0x2120 [ 458.633156][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 458.633156][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 458.633156][T12759] __do_fast_syscall_32+0x96/0xe0 [ 458.633156][T12759] do_fast_syscall_32+0x3c/0x80 [ 458.633156][T12759] do_SYSENTER_32+0x1b/0x20 [ 458.633156][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.633156][T12759] [ 458.633156][T12759] Uninit was stored to memory at: [ 458.633156][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 458.633156][T12759] __msan_chain_origin+0xcb/0x140 [ 458.633156][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 458.633156][T12759] get_compat_msghdr+0x108/0x2c0 [ 458.633156][T12759] do_recvmmsg+0x1063/0x2120 [ 458.633156][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 458.633156][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 458.633156][T12759] __do_fast_syscall_32+0x96/0xe0 [ 458.633156][T12759] do_fast_syscall_32+0x3c/0x80 [ 458.633156][T12759] do_SYSENTER_32+0x1b/0x20 [ 458.633156][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.633156][T12759] [ 458.633156][T12759] Uninit was stored to memory at: [ 458.633156][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 458.633156][T12759] __msan_chain_origin+0xcb/0x140 [ 458.633156][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 458.633156][T12759] get_compat_msghdr+0x108/0x2c0 [ 458.633156][T12759] do_recvmmsg+0x1063/0x2120 [ 458.633156][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 458.633156][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 458.633156][T12759] __do_fast_syscall_32+0x96/0xe0 [ 458.633156][T12759] do_fast_syscall_32+0x3c/0x80 [ 458.633156][T12759] do_SYSENTER_32+0x1b/0x20 [ 458.633156][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.633156][T12759] [ 458.633156][T12759] Uninit was stored to memory at: [ 458.633156][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 458.633156][T12759] __msan_chain_origin+0xcb/0x140 [ 458.633156][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 458.633156][T12759] get_compat_msghdr+0x108/0x2c0 [ 458.633156][T12759] do_recvmmsg+0x1063/0x2120 [ 458.633156][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 458.633156][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 458.633156][T12759] __do_fast_syscall_32+0x96/0xe0 [ 458.633156][T12759] do_fast_syscall_32+0x3c/0x80 [ 458.633156][T12759] do_SYSENTER_32+0x1b/0x20 [ 458.633156][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.633156][T12759] [ 458.633156][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 458.633156][T12759] do_recvmmsg+0xc1/0x2120 [ 458.633156][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 459.444212][T12759] not chained 1190000 origins [ 459.448908][T12759] CPU: 0 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 459.452131][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.452131][T12759] Call Trace: [ 459.452131][T12759] dump_stack+0x25a/0x2f6 [ 459.452131][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 459.452131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 459.452131][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 459.452131][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 459.452131][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 459.452131][T12759] ? release_sock+0x2b5/0x2e0 [ 459.452131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 459.452131][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 459.452131][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 459.452131][T12759] ? should_fail+0x75/0x9c0 [ 459.452131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 459.452131][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 459.452131][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 459.452131][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 459.452131][T12759] ? _copy_from_user+0x219/0x310 [ 459.452131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 459.452131][T12759] __msan_chain_origin+0xcb/0x140 [ 459.452131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 459.452131][T12759] get_compat_msghdr+0x108/0x2c0 [ 459.452131][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 459.452131][T12759] do_recvmmsg+0x1063/0x2120 [ 459.452131][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 459.452131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 459.452131][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 459.452131][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 459.452131][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 459.452131][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 459.452131][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 459.452131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 459.452131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 459.452131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 459.452131][T12759] do_fast_syscall_32+0x3c/0x80 [ 459.452131][T12759] do_SYSENTER_32+0x1b/0x20 [ 459.452131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.452131][T12759] RIP: 0023:0xf6f46549 [ 459.452131][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 459.452131][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 459.452131][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 459.452131][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.452131][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.452131][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 459.452131][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.452131][T12759] Uninit was stored to memory at: [ 459.452131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 459.452131][T12759] __msan_chain_origin+0xcb/0x140 [ 459.452131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 459.452131][T12759] get_compat_msghdr+0x108/0x2c0 [ 459.452131][T12759] do_recvmmsg+0x1063/0x2120 [ 459.452131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 459.452131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 459.452131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 459.452131][T12759] do_fast_syscall_32+0x3c/0x80 [ 459.452131][T12759] do_SYSENTER_32+0x1b/0x20 [ 459.452131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.452131][T12759] [ 459.452131][T12759] Uninit was stored to memory at: [ 459.452131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 459.452131][T12759] __msan_chain_origin+0xcb/0x140 [ 459.452131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 459.452131][T12759] get_compat_msghdr+0x108/0x2c0 [ 459.452131][T12759] do_recvmmsg+0x1063/0x2120 [ 459.452131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 459.452131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 459.452131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 459.452131][T12759] do_fast_syscall_32+0x3c/0x80 [ 459.452131][T12759] do_SYSENTER_32+0x1b/0x20 [ 459.452131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.452131][T12759] [ 459.452131][T12759] Uninit was stored to memory at: [ 459.452131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 459.452131][T12759] __msan_chain_origin+0xcb/0x140 [ 459.452131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 459.452131][T12759] get_compat_msghdr+0x108/0x2c0 [ 459.452131][T12759] do_recvmmsg+0x1063/0x2120 [ 459.452131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 459.452131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 459.452131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 459.452131][T12759] do_fast_syscall_32+0x3c/0x80 [ 459.452131][T12759] do_SYSENTER_32+0x1b/0x20 [ 459.452131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.452131][T12759] [ 459.452131][T12759] Uninit was stored to memory at: [ 459.452131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 459.452131][T12759] __msan_chain_origin+0xcb/0x140 [ 459.452131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 459.452131][T12759] get_compat_msghdr+0x108/0x2c0 [ 459.452131][T12759] do_recvmmsg+0x1063/0x2120 [ 459.452131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 459.452131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 459.452131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 459.452131][T12759] do_fast_syscall_32+0x3c/0x80 [ 459.452131][T12759] do_SYSENTER_32+0x1b/0x20 [ 459.452131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.452131][T12759] [ 459.452131][T12759] Uninit was stored to memory at: [ 459.452131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 459.452131][T12759] __msan_chain_origin+0xcb/0x140 [ 459.452131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 459.452131][T12759] get_compat_msghdr+0x108/0x2c0 [ 459.452131][T12759] do_recvmmsg+0x1063/0x2120 [ 459.452131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 459.452131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 459.452131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 459.452131][T12759] do_fast_syscall_32+0x3c/0x80 [ 459.452131][T12759] do_SYSENTER_32+0x1b/0x20 [ 459.452131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.452131][T12759] [ 459.452131][T12759] Uninit was stored to memory at: [ 459.452131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 459.452131][T12759] __msan_chain_origin+0xcb/0x140 [ 459.452131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 459.452131][T12759] get_compat_msghdr+0x108/0x2c0 [ 459.452131][T12759] do_recvmmsg+0x1063/0x2120 [ 459.452131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 459.452131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 459.452131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 459.452131][T12759] do_fast_syscall_32+0x3c/0x80 [ 459.452131][T12759] do_SYSENTER_32+0x1b/0x20 [ 459.452131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.452131][T12759] [ 459.452131][T12759] Uninit was stored to memory at: [ 459.452131][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 459.452131][T12759] __msan_chain_origin+0xcb/0x140 [ 459.452131][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 459.452131][T12759] get_compat_msghdr+0x108/0x2c0 [ 459.452131][T12759] do_recvmmsg+0x1063/0x2120 [ 459.452131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 459.452131][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 459.452131][T12759] __do_fast_syscall_32+0x96/0xe0 [ 459.452131][T12759] do_fast_syscall_32+0x3c/0x80 [ 459.452131][T12759] do_SYSENTER_32+0x1b/0x20 [ 459.452131][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.452131][T12759] [ 459.452131][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 459.452131][T12759] do_recvmmsg+0xc1/0x2120 [ 459.452131][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 460.307683][T12759] not chained 1200000 origins [ 460.312126][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 460.312126][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.312126][T12759] Call Trace: [ 460.312126][T12759] dump_stack+0x25a/0x2f6 [ 460.312126][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 460.312126][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 460.312126][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 460.312126][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 460.312126][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 460.312126][T12759] ? release_sock+0x2b5/0x2e0 [ 460.312126][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 460.312126][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 460.312126][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 460.312126][T12759] ? should_fail+0x75/0x9c0 [ 460.312126][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 460.312126][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 460.312126][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 460.312126][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 460.312126][T12759] ? _copy_from_user+0x219/0x310 [ 460.312126][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 460.312126][T12759] __msan_chain_origin+0xcb/0x140 [ 460.312126][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 460.312126][T12759] get_compat_msghdr+0x108/0x2c0 [ 460.312126][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 460.312126][T12759] do_recvmmsg+0x1063/0x2120 [ 460.312126][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 460.312126][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 460.312126][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 460.312126][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 460.312126][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 460.312126][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 460.312126][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 460.312126][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 460.312126][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 460.312126][T12759] __do_fast_syscall_32+0x96/0xe0 [ 460.312126][T12759] do_fast_syscall_32+0x3c/0x80 [ 460.312126][T12759] do_SYSENTER_32+0x1b/0x20 [ 460.312126][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.312126][T12759] RIP: 0023:0xf6f46549 [ 460.312126][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 460.312126][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 460.312126][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 460.312126][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.312126][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.312126][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 460.312126][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.312126][T12759] Uninit was stored to memory at: [ 460.312126][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 460.312126][T12759] __msan_chain_origin+0xcb/0x140 [ 460.312126][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 460.312126][T12759] get_compat_msghdr+0x108/0x2c0 [ 460.312126][T12759] do_recvmmsg+0x1063/0x2120 [ 460.312126][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 460.312126][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 460.312126][T12759] __do_fast_syscall_32+0x96/0xe0 [ 460.312126][T12759] do_fast_syscall_32+0x3c/0x80 [ 460.312126][T12759] do_SYSENTER_32+0x1b/0x20 [ 460.312126][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.312126][T12759] [ 460.312126][T12759] Uninit was stored to memory at: [ 460.312126][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 460.312126][T12759] __msan_chain_origin+0xcb/0x140 [ 460.312126][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 460.312126][T12759] get_compat_msghdr+0x108/0x2c0 [ 460.312126][T12759] do_recvmmsg+0x1063/0x2120 [ 460.312126][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 460.312126][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 460.312126][T12759] __do_fast_syscall_32+0x96/0xe0 [ 460.312126][T12759] do_fast_syscall_32+0x3c/0x80 [ 460.312126][T12759] do_SYSENTER_32+0x1b/0x20 [ 460.312126][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.312126][T12759] [ 460.312126][T12759] Uninit was stored to memory at: [ 460.312126][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 460.312126][T12759] __msan_chain_origin+0xcb/0x140 [ 460.312126][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 460.312126][T12759] get_compat_msghdr+0x108/0x2c0 [ 460.312126][T12759] do_recvmmsg+0x1063/0x2120 [ 460.312126][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 460.312126][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 460.312126][T12759] __do_fast_syscall_32+0x96/0xe0 [ 460.312126][T12759] do_fast_syscall_32+0x3c/0x80 [ 460.312126][T12759] do_SYSENTER_32+0x1b/0x20 [ 460.312126][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.312126][T12759] [ 460.312126][T12759] Uninit was stored to memory at: [ 460.312126][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 460.312126][T12759] __msan_chain_origin+0xcb/0x140 [ 460.312126][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 460.312126][T12759] get_compat_msghdr+0x108/0x2c0 [ 460.312126][T12759] do_recvmmsg+0x1063/0x2120 [ 460.312126][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 460.312126][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 460.312126][T12759] __do_fast_syscall_32+0x96/0xe0 [ 460.312126][T12759] do_fast_syscall_32+0x3c/0x80 [ 460.312126][T12759] do_SYSENTER_32+0x1b/0x20 [ 460.312126][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.312126][T12759] [ 460.312126][T12759] Uninit was stored to memory at: [ 460.312126][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 460.312126][T12759] __msan_chain_origin+0xcb/0x140 [ 460.312126][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 460.312126][T12759] get_compat_msghdr+0x108/0x2c0 [ 460.312126][T12759] do_recvmmsg+0x1063/0x2120 [ 460.312126][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 460.312126][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 460.312126][T12759] __do_fast_syscall_32+0x96/0xe0 [ 460.312126][T12759] do_fast_syscall_32+0x3c/0x80 [ 460.312126][T12759] do_SYSENTER_32+0x1b/0x20 [ 460.312126][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.312126][T12759] [ 460.312126][T12759] Uninit was stored to memory at: [ 460.312126][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 460.312126][T12759] __msan_chain_origin+0xcb/0x140 [ 460.312126][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 460.312126][T12759] get_compat_msghdr+0x108/0x2c0 [ 460.312126][T12759] do_recvmmsg+0x1063/0x2120 [ 460.312126][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 460.312126][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 460.312126][T12759] __do_fast_syscall_32+0x96/0xe0 [ 460.312126][T12759] do_fast_syscall_32+0x3c/0x80 [ 460.312126][T12759] do_SYSENTER_32+0x1b/0x20 [ 460.312126][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.312126][T12759] [ 460.312126][T12759] Uninit was stored to memory at: [ 460.312126][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 460.312126][T12759] __msan_chain_origin+0xcb/0x140 [ 460.312126][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 460.312126][T12759] get_compat_msghdr+0x108/0x2c0 [ 460.312126][T12759] do_recvmmsg+0x1063/0x2120 [ 460.312126][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 460.312126][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 460.312126][T12759] __do_fast_syscall_32+0x96/0xe0 [ 460.312126][T12759] do_fast_syscall_32+0x3c/0x80 [ 460.312126][T12759] do_SYSENTER_32+0x1b/0x20 [ 460.312126][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.312126][T12759] [ 460.312126][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 460.312126][T12759] do_recvmmsg+0xc1/0x2120 [ 460.312126][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 461.162730][T12759] not chained 1210000 origins [ 461.167424][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 461.172121][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.172121][T12759] Call Trace: [ 461.172121][T12759] dump_stack+0x25a/0x2f6 [ 461.172121][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 461.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 461.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 461.172121][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 461.172121][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 461.172121][T12759] ? release_sock+0x2b5/0x2e0 [ 461.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 461.172121][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 461.172121][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 461.172121][T12759] ? should_fail+0x75/0x9c0 [ 461.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 461.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 461.172121][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 461.172121][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 461.172121][T12759] ? _copy_from_user+0x219/0x310 [ 461.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 461.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 461.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 461.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 461.172121][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 461.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 461.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 461.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 461.172121][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 461.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 461.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 461.172121][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 461.172121][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 461.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 461.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 461.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 461.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 461.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 461.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.172121][T12759] RIP: 0023:0xf6f46549 [ 461.172121][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 461.172121][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 461.172121][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 461.172121][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 461.172121][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.172121][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 461.172121][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.172121][T12759] Uninit was stored to memory at: [ 461.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 461.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 461.462475][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 461.462475][T12759] get_compat_msghdr+0x108/0x2c0 [ 461.462475][T12759] do_recvmmsg+0x1063/0x2120 [ 461.462475][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 461.462475][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 461.462475][T12759] __do_fast_syscall_32+0x96/0xe0 [ 461.462475][T12759] do_fast_syscall_32+0x3c/0x80 [ 461.462475][T12759] do_SYSENTER_32+0x1b/0x20 [ 461.462475][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.462475][T12759] [ 461.462475][T12759] Uninit was stored to memory at: [ 461.462475][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 461.462475][T12759] __msan_chain_origin+0xcb/0x140 [ 461.462475][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 461.462475][T12759] get_compat_msghdr+0x108/0x2c0 [ 461.462475][T12759] do_recvmmsg+0x1063/0x2120 [ 461.462475][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 461.462475][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 461.462475][T12759] __do_fast_syscall_32+0x96/0xe0 [ 461.462475][T12759] do_fast_syscall_32+0x3c/0x80 [ 461.462475][T12759] do_SYSENTER_32+0x1b/0x20 [ 461.462475][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.462475][T12759] [ 461.462475][T12759] Uninit was stored to memory at: [ 461.462475][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 461.462475][T12759] __msan_chain_origin+0xcb/0x140 [ 461.462475][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 461.462475][T12759] get_compat_msghdr+0x108/0x2c0 [ 461.462475][T12759] do_recvmmsg+0x1063/0x2120 [ 461.462475][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 461.462475][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 461.462475][T12759] __do_fast_syscall_32+0x96/0xe0 [ 461.462475][T12759] do_fast_syscall_32+0x3c/0x80 [ 461.462475][T12759] do_SYSENTER_32+0x1b/0x20 [ 461.462475][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.462475][T12759] [ 461.462475][T12759] Uninit was stored to memory at: [ 461.462475][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 461.462475][T12759] __msan_chain_origin+0xcb/0x140 [ 461.462475][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 461.462475][T12759] get_compat_msghdr+0x108/0x2c0 [ 461.462475][T12759] do_recvmmsg+0x1063/0x2120 [ 461.462475][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 461.462475][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 461.462475][T12759] __do_fast_syscall_32+0x96/0xe0 [ 461.462475][T12759] do_fast_syscall_32+0x3c/0x80 [ 461.462475][T12759] do_SYSENTER_32+0x1b/0x20 [ 461.462475][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.462475][T12759] [ 461.462475][T12759] Uninit was stored to memory at: [ 461.462475][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 461.462475][T12759] __msan_chain_origin+0xcb/0x140 [ 461.462475][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 461.462475][T12759] get_compat_msghdr+0x108/0x2c0 [ 461.462475][T12759] do_recvmmsg+0x1063/0x2120 [ 461.462475][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 461.462475][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 461.462475][T12759] __do_fast_syscall_32+0x96/0xe0 [ 461.462475][T12759] do_fast_syscall_32+0x3c/0x80 [ 461.462475][T12759] do_SYSENTER_32+0x1b/0x20 [ 461.462475][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.462475][T12759] [ 461.462475][T12759] Uninit was stored to memory at: [ 461.462475][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 461.462475][T12759] __msan_chain_origin+0xcb/0x140 [ 461.462475][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 461.462475][T12759] get_compat_msghdr+0x108/0x2c0 [ 461.462475][T12759] do_recvmmsg+0x1063/0x2120 [ 461.462475][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 461.462475][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 461.462475][T12759] __do_fast_syscall_32+0x96/0xe0 [ 461.462475][T12759] do_fast_syscall_32+0x3c/0x80 [ 461.462475][T12759] do_SYSENTER_32+0x1b/0x20 [ 461.462475][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.462475][T12759] [ 461.462475][T12759] Uninit was stored to memory at: [ 461.462475][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 461.462475][T12759] __msan_chain_origin+0xcb/0x140 [ 461.462475][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 461.462475][T12759] get_compat_msghdr+0x108/0x2c0 [ 461.462475][T12759] do_recvmmsg+0x1063/0x2120 [ 461.462475][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 461.462475][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 461.462475][T12759] __do_fast_syscall_32+0x96/0xe0 [ 461.462475][T12759] do_fast_syscall_32+0x3c/0x80 [ 461.462475][T12759] do_SYSENTER_32+0x1b/0x20 [ 461.462475][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.462475][T12759] [ 461.462475][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 461.462475][T12759] do_recvmmsg+0xc1/0x2120 [ 461.462475][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.018914][T12759] not chained 1220000 origins [ 462.022127][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 462.022127][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.022127][T12759] Call Trace: [ 462.022127][T12759] dump_stack+0x25a/0x2f6 [ 462.022127][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 462.022127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.022127][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 462.022127][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 462.022127][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 462.022127][T12759] ? release_sock+0x2b5/0x2e0 [ 462.022127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.022127][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 462.022127][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 462.022127][T12759] ? should_fail+0x75/0x9c0 [ 462.022127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.022127][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 462.022127][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 462.022127][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 462.022127][T12759] ? _copy_from_user+0x219/0x310 [ 462.022127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.022127][T12759] __msan_chain_origin+0xcb/0x140 [ 462.022127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.022127][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.022127][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 462.022127][T12759] do_recvmmsg+0x1063/0x2120 [ 462.022127][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 462.022127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.022127][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 462.022127][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.022127][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 462.022127][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 462.022127][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.022127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.022127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.022127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.022127][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.022127][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.022127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.022127][T12759] RIP: 0023:0xf6f46549 [ 462.022127][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 462.022127][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 462.022127][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 462.022127][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 462.022127][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.022127][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 462.022127][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.022127][T12759] Uninit was stored to memory at: [ 462.022127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.022127][T12759] __msan_chain_origin+0xcb/0x140 [ 462.022127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.022127][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.022127][T12759] do_recvmmsg+0x1063/0x2120 [ 462.022127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.022127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.022127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.022127][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.022127][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.022127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.022127][T12759] [ 462.022127][T12759] Uninit was stored to memory at: [ 462.022127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.022127][T12759] __msan_chain_origin+0xcb/0x140 [ 462.022127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.022127][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.022127][T12759] do_recvmmsg+0x1063/0x2120 [ 462.022127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.022127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.022127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.022127][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.022127][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.022127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.022127][T12759] [ 462.022127][T12759] Uninit was stored to memory at: [ 462.022127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.022127][T12759] __msan_chain_origin+0xcb/0x140 [ 462.022127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.022127][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.022127][T12759] do_recvmmsg+0x1063/0x2120 [ 462.022127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.022127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.022127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.022127][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.022127][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.022127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.022127][T12759] [ 462.022127][T12759] Uninit was stored to memory at: [ 462.022127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.022127][T12759] __msan_chain_origin+0xcb/0x140 [ 462.022127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.022127][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.022127][T12759] do_recvmmsg+0x1063/0x2120 [ 462.022127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.022127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.022127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.022127][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.022127][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.022127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.022127][T12759] [ 462.022127][T12759] Uninit was stored to memory at: [ 462.022127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.022127][T12759] __msan_chain_origin+0xcb/0x140 [ 462.022127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.022127][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.022127][T12759] do_recvmmsg+0x1063/0x2120 [ 462.022127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.022127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.022127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.022127][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.022127][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.022127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.022127][T12759] [ 462.022127][T12759] Uninit was stored to memory at: [ 462.022127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.022127][T12759] __msan_chain_origin+0xcb/0x140 [ 462.022127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.022127][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.022127][T12759] do_recvmmsg+0x1063/0x2120 [ 462.022127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.022127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.022127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.022127][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.022127][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.022127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.022127][T12759] [ 462.022127][T12759] Uninit was stored to memory at: [ 462.022127][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.022127][T12759] __msan_chain_origin+0xcb/0x140 [ 462.022127][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.022127][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.022127][T12759] do_recvmmsg+0x1063/0x2120 [ 462.022127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.022127][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.022127][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.022127][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.022127][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.022127][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.022127][T12759] [ 462.022127][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 462.022127][T12759] do_recvmmsg+0xc1/0x2120 [ 462.022127][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.867183][T12759] not chained 1230000 origins [ 462.871884][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 462.872120][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.872120][T12759] Call Trace: [ 462.872120][T12759] dump_stack+0x25a/0x2f6 [ 462.872120][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 462.872120][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.872120][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 462.872120][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 462.872120][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 462.872120][T12759] ? release_sock+0x2b5/0x2e0 [ 462.872120][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.872120][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 462.872120][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 462.872120][T12759] ? should_fail+0x75/0x9c0 [ 462.872120][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.872120][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 462.872120][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 462.872120][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 462.872120][T12759] ? _copy_from_user+0x219/0x310 [ 462.872120][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.872120][T12759] __msan_chain_origin+0xcb/0x140 [ 462.872120][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.872120][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.872120][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 462.872120][T12759] do_recvmmsg+0x1063/0x2120 [ 462.872120][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 462.872120][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.872120][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 462.872120][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 462.872120][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 462.872120][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 462.872120][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.872120][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.872120][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.872120][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.872120][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.872120][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.872120][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.872120][T12759] RIP: 0023:0xf6f46549 [ 462.872120][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 462.872120][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 462.872120][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 462.872120][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 462.872120][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.872120][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 462.872120][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.872120][T12759] Uninit was stored to memory at: [ 462.872120][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.872120][T12759] __msan_chain_origin+0xcb/0x140 [ 462.872120][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.872120][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.872120][T12759] do_recvmmsg+0x1063/0x2120 [ 462.872120][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.872120][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.872120][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.872120][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.872120][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.872120][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.872120][T12759] [ 462.872120][T12759] Uninit was stored to memory at: [ 462.872120][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.872120][T12759] __msan_chain_origin+0xcb/0x140 [ 462.872120][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.872120][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.872120][T12759] do_recvmmsg+0x1063/0x2120 [ 462.872120][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.872120][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.872120][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.872120][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.872120][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.872120][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.872120][T12759] [ 462.872120][T12759] Uninit was stored to memory at: [ 462.872120][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.872120][T12759] __msan_chain_origin+0xcb/0x140 [ 462.872120][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.872120][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.872120][T12759] do_recvmmsg+0x1063/0x2120 [ 462.872120][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.872120][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.872120][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.872120][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.872120][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.872120][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.872120][T12759] [ 462.872120][T12759] Uninit was stored to memory at: [ 462.872120][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.872120][T12759] __msan_chain_origin+0xcb/0x140 [ 462.872120][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.872120][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.872120][T12759] do_recvmmsg+0x1063/0x2120 [ 462.872120][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.872120][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.872120][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.872120][T12759] do_fast_syscall_32+0x3c/0x80 [ 462.872120][T12759] do_SYSENTER_32+0x1b/0x20 [ 462.872120][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.872120][T12759] [ 462.872120][T12759] Uninit was stored to memory at: [ 462.872120][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 462.872120][T12759] __msan_chain_origin+0xcb/0x140 [ 462.872120][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 462.872120][T12759] get_compat_msghdr+0x108/0x2c0 [ 462.872120][T12759] do_recvmmsg+0x1063/0x2120 [ 462.872120][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 462.872120][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 462.872120][T12759] __do_fast_syscall_32+0x96/0xe0 [ 462.872120][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.462600][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.462600][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.462600][T12759] [ 463.462600][T12759] Uninit was stored to memory at: [ 463.462600][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 463.462600][T12759] __msan_chain_origin+0xcb/0x140 [ 463.462600][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.462600][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.462600][T12759] do_recvmmsg+0x1063/0x2120 [ 463.462600][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.462600][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.462600][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.462600][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.462600][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.462600][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.462600][T12759] [ 463.462600][T12759] Uninit was stored to memory at: [ 463.462600][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 463.462600][T12759] __msan_chain_origin+0xcb/0x140 [ 463.462600][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.462600][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.462600][T12759] do_recvmmsg+0x1063/0x2120 [ 463.462600][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.462600][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.462600][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.462600][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.462600][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.462600][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.462600][T12759] [ 463.462600][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 463.462600][T12759] do_recvmmsg+0xc1/0x2120 [ 463.462600][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.720523][T12759] not chained 1240000 origins [ 463.722123][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 463.722123][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.722123][T12759] Call Trace: [ 463.722123][T12759] dump_stack+0x25a/0x2f6 [ 463.722123][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 463.722123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 463.722123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 463.722123][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 463.722123][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 463.722123][T12759] ? release_sock+0x2b5/0x2e0 [ 463.722123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 463.722123][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 463.722123][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 463.722123][T12759] ? should_fail+0x75/0x9c0 [ 463.722123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 463.722123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 463.722123][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 463.722123][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 463.722123][T12759] ? _copy_from_user+0x219/0x310 [ 463.722123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 463.722123][T12759] __msan_chain_origin+0xcb/0x140 [ 463.722123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.722123][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.722123][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 463.722123][T12759] do_recvmmsg+0x1063/0x2120 [ 463.722123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 463.722123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 463.722123][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 463.722123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 463.722123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 463.722123][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 463.722123][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.722123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.722123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.722123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.722123][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.722123][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.722123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.722123][T12759] RIP: 0023:0xf6f46549 [ 463.722123][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 463.722123][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 463.722123][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 463.722123][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.722123][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.722123][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 463.722123][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.722123][T12759] Uninit was stored to memory at: [ 463.722123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 463.722123][T12759] __msan_chain_origin+0xcb/0x140 [ 463.722123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.722123][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.722123][T12759] do_recvmmsg+0x1063/0x2120 [ 463.722123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.722123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.722123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.722123][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.722123][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.722123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.722123][T12759] [ 463.722123][T12759] Uninit was stored to memory at: [ 463.722123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 463.722123][T12759] __msan_chain_origin+0xcb/0x140 [ 463.722123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.722123][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.722123][T12759] do_recvmmsg+0x1063/0x2120 [ 463.722123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.722123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.722123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.722123][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.722123][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.722123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.722123][T12759] [ 463.722123][T12759] Uninit was stored to memory at: [ 463.722123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 463.722123][T12759] __msan_chain_origin+0xcb/0x140 [ 463.722123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.722123][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.722123][T12759] do_recvmmsg+0x1063/0x2120 [ 463.722123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.722123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.722123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.722123][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.722123][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.722123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.722123][T12759] [ 463.722123][T12759] Uninit was stored to memory at: [ 463.722123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 463.722123][T12759] __msan_chain_origin+0xcb/0x140 [ 463.722123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.722123][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.722123][T12759] do_recvmmsg+0x1063/0x2120 [ 463.722123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.722123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.722123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.722123][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.722123][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.722123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.722123][T12759] [ 463.722123][T12759] Uninit was stored to memory at: [ 463.722123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 463.722123][T12759] __msan_chain_origin+0xcb/0x140 [ 463.722123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.722123][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.722123][T12759] do_recvmmsg+0x1063/0x2120 [ 463.722123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.722123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.722123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.722123][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.722123][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.722123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.722123][T12759] [ 463.722123][T12759] Uninit was stored to memory at: [ 463.722123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 463.722123][T12759] __msan_chain_origin+0xcb/0x140 [ 463.722123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.722123][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.722123][T12759] do_recvmmsg+0x1063/0x2120 [ 463.722123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.722123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.722123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.722123][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.722123][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.722123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.722123][T12759] [ 463.722123][T12759] Uninit was stored to memory at: [ 463.722123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 463.722123][T12759] __msan_chain_origin+0xcb/0x140 [ 463.722123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 463.722123][T12759] get_compat_msghdr+0x108/0x2c0 [ 463.722123][T12759] do_recvmmsg+0x1063/0x2120 [ 463.722123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 463.722123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 463.722123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 463.722123][T12759] do_fast_syscall_32+0x3c/0x80 [ 463.722123][T12759] do_SYSENTER_32+0x1b/0x20 [ 463.722123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.722123][T12759] [ 463.722123][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 463.722123][T12759] do_recvmmsg+0xc1/0x2120 [ 463.722123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 464.577442][T12759] not chained 1250000 origins [ 464.582117][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 464.582117][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.582117][T12759] Call Trace: [ 464.582117][T12759] dump_stack+0x25a/0x2f6 [ 464.582117][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 464.582117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 464.582117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 464.582117][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 464.582117][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 464.582117][T12759] ? release_sock+0x2b5/0x2e0 [ 464.582117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 464.582117][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 464.582117][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 464.582117][T12759] ? should_fail+0x75/0x9c0 [ 464.582117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 464.582117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 464.582117][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 464.582117][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 464.582117][T12759] ? _copy_from_user+0x219/0x310 [ 464.582117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 464.582117][T12759] __msan_chain_origin+0xcb/0x140 [ 464.582117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 464.582117][T12759] get_compat_msghdr+0x108/0x2c0 [ 464.582117][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 464.582117][T12759] do_recvmmsg+0x1063/0x2120 [ 464.582117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 464.582117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 464.582117][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 464.582117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 464.582117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 464.582117][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 464.582117][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 464.582117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 464.582117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 464.582117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 464.582117][T12759] do_fast_syscall_32+0x3c/0x80 [ 464.582117][T12759] do_SYSENTER_32+0x1b/0x20 [ 464.582117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.582117][T12759] RIP: 0023:0xf6f46549 [ 464.582117][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 464.582117][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 464.582117][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 464.582117][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.582117][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.582117][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 464.582117][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.582117][T12759] Uninit was stored to memory at: [ 464.582117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 464.582117][T12759] __msan_chain_origin+0xcb/0x140 [ 464.582117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 464.582117][T12759] get_compat_msghdr+0x108/0x2c0 [ 464.582117][T12759] do_recvmmsg+0x1063/0x2120 [ 464.582117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 464.582117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 464.582117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 464.582117][T12759] do_fast_syscall_32+0x3c/0x80 [ 464.582117][T12759] do_SYSENTER_32+0x1b/0x20 [ 464.582117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.582117][T12759] [ 464.582117][T12759] Uninit was stored to memory at: [ 464.582117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 464.582117][T12759] __msan_chain_origin+0xcb/0x140 [ 464.582117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 464.582117][T12759] get_compat_msghdr+0x108/0x2c0 [ 464.582117][T12759] do_recvmmsg+0x1063/0x2120 [ 464.582117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 464.582117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 464.582117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 464.582117][T12759] do_fast_syscall_32+0x3c/0x80 [ 464.582117][T12759] do_SYSENTER_32+0x1b/0x20 [ 464.582117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.582117][T12759] [ 464.582117][T12759] Uninit was stored to memory at: [ 464.582117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 464.582117][T12759] __msan_chain_origin+0xcb/0x140 [ 464.582117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 464.582117][T12759] get_compat_msghdr+0x108/0x2c0 [ 464.582117][T12759] do_recvmmsg+0x1063/0x2120 [ 464.582117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 464.582117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 464.582117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 464.582117][T12759] do_fast_syscall_32+0x3c/0x80 [ 464.582117][T12759] do_SYSENTER_32+0x1b/0x20 [ 464.582117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.582117][T12759] [ 464.582117][T12759] Uninit was stored to memory at: [ 464.582117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 464.582117][T12759] __msan_chain_origin+0xcb/0x140 [ 464.582117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 464.582117][T12759] get_compat_msghdr+0x108/0x2c0 [ 464.582117][T12759] do_recvmmsg+0x1063/0x2120 [ 464.582117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 464.582117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 464.582117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 464.582117][T12759] do_fast_syscall_32+0x3c/0x80 [ 464.582117][T12759] do_SYSENTER_32+0x1b/0x20 [ 464.582117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.582117][T12759] [ 464.582117][T12759] Uninit was stored to memory at: [ 464.582117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 464.582117][T12759] __msan_chain_origin+0xcb/0x140 [ 464.582117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 464.582117][T12759] get_compat_msghdr+0x108/0x2c0 [ 464.582117][T12759] do_recvmmsg+0x1063/0x2120 [ 464.582117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 464.582117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 464.582117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 464.582117][T12759] do_fast_syscall_32+0x3c/0x80 [ 464.582117][T12759] do_SYSENTER_32+0x1b/0x20 [ 464.582117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.582117][T12759] [ 464.582117][T12759] Uninit was stored to memory at: [ 464.582117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 464.582117][T12759] __msan_chain_origin+0xcb/0x140 [ 464.582117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 464.582117][T12759] get_compat_msghdr+0x108/0x2c0 [ 464.582117][T12759] do_recvmmsg+0x1063/0x2120 [ 464.582117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 464.582117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 464.582117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 464.582117][T12759] do_fast_syscall_32+0x3c/0x80 [ 464.582117][T12759] do_SYSENTER_32+0x1b/0x20 [ 464.582117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.582117][T12759] [ 464.582117][T12759] Uninit was stored to memory at: [ 464.582117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 464.582117][T12759] __msan_chain_origin+0xcb/0x140 [ 464.582117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 464.582117][T12759] get_compat_msghdr+0x108/0x2c0 [ 464.582117][T12759] do_recvmmsg+0x1063/0x2120 [ 464.582117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 464.582117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 464.582117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 464.582117][T12759] do_fast_syscall_32+0x3c/0x80 [ 464.582117][T12759] do_SYSENTER_32+0x1b/0x20 [ 464.582117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.582117][T12759] [ 464.582117][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 464.582117][T12759] do_recvmmsg+0xc1/0x2120 [ 464.582117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 465.421621][T12759] not chained 1260000 origins [ 465.422115][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 465.432233][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.432233][T12759] Call Trace: [ 465.432233][T12759] dump_stack+0x25a/0x2f6 [ 465.432233][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 465.432233][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 465.462460][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 465.462460][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 465.462460][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 465.462460][T12759] ? release_sock+0x2b5/0x2e0 [ 465.462460][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 465.486919][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 465.486919][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 465.486919][T12759] ? should_fail+0x75/0x9c0 [ 465.486919][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 465.486919][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 465.486919][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 465.486919][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 465.486919][T12759] ? _copy_from_user+0x219/0x310 [ 465.486919][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 465.486919][T12759] __msan_chain_origin+0xcb/0x140 [ 465.486919][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 465.486919][T12759] get_compat_msghdr+0x108/0x2c0 [ 465.486919][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 465.486919][T12759] do_recvmmsg+0x1063/0x2120 [ 465.486919][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 465.486919][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 465.486919][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 465.486919][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 465.486919][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 465.486919][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 465.486919][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 465.486919][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 465.486919][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 465.486919][T12759] __do_fast_syscall_32+0x96/0xe0 [ 465.486919][T12759] do_fast_syscall_32+0x3c/0x80 [ 465.486919][T12759] do_SYSENTER_32+0x1b/0x20 [ 465.486919][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.486919][T12759] RIP: 0023:0xf6f46549 [ 465.486919][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 465.486919][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 465.486919][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 465.486919][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 465.486919][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.486919][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 465.486919][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.486919][T12759] Uninit was stored to memory at: [ 465.486919][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 465.486919][T12759] __msan_chain_origin+0xcb/0x140 [ 465.486919][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 465.486919][T12759] get_compat_msghdr+0x108/0x2c0 [ 465.486919][T12759] do_recvmmsg+0x1063/0x2120 [ 465.486919][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 465.486919][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 465.486919][T12759] __do_fast_syscall_32+0x96/0xe0 [ 465.486919][T12759] do_fast_syscall_32+0x3c/0x80 [ 465.486919][T12759] do_SYSENTER_32+0x1b/0x20 [ 465.486919][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.486919][T12759] [ 465.486919][T12759] Uninit was stored to memory at: [ 465.486919][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 465.486919][T12759] __msan_chain_origin+0xcb/0x140 [ 465.486919][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 465.486919][T12759] get_compat_msghdr+0x108/0x2c0 [ 465.486919][T12759] do_recvmmsg+0x1063/0x2120 [ 465.486919][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 465.486919][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 465.486919][T12759] __do_fast_syscall_32+0x96/0xe0 [ 465.486919][T12759] do_fast_syscall_32+0x3c/0x80 [ 465.486919][T12759] do_SYSENTER_32+0x1b/0x20 [ 465.486919][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.486919][T12759] [ 465.486919][T12759] Uninit was stored to memory at: [ 465.486919][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 465.486919][T12759] __msan_chain_origin+0xcb/0x140 [ 465.486919][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 465.486919][T12759] get_compat_msghdr+0x108/0x2c0 [ 465.486919][T12759] do_recvmmsg+0x1063/0x2120 [ 465.486919][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 465.486919][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 465.486919][T12759] __do_fast_syscall_32+0x96/0xe0 [ 465.486919][T12759] do_fast_syscall_32+0x3c/0x80 [ 465.486919][T12759] do_SYSENTER_32+0x1b/0x20 [ 465.486919][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.486919][T12759] [ 465.486919][T12759] Uninit was stored to memory at: [ 465.486919][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 465.486919][T12759] __msan_chain_origin+0xcb/0x140 [ 465.486919][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 465.486919][T12759] get_compat_msghdr+0x108/0x2c0 [ 465.486919][T12759] do_recvmmsg+0x1063/0x2120 [ 465.486919][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 465.486919][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 465.486919][T12759] __do_fast_syscall_32+0x96/0xe0 [ 465.486919][T12759] do_fast_syscall_32+0x3c/0x80 [ 465.486919][T12759] do_SYSENTER_32+0x1b/0x20 [ 465.486919][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.486919][T12759] [ 465.486919][T12759] Uninit was stored to memory at: [ 465.486919][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 465.486919][T12759] __msan_chain_origin+0xcb/0x140 [ 465.486919][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 465.486919][T12759] get_compat_msghdr+0x108/0x2c0 [ 465.486919][T12759] do_recvmmsg+0x1063/0x2120 [ 465.486919][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 465.486919][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 465.486919][T12759] __do_fast_syscall_32+0x96/0xe0 [ 465.486919][T12759] do_fast_syscall_32+0x3c/0x80 [ 465.486919][T12759] do_SYSENTER_32+0x1b/0x20 [ 465.486919][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.486919][T12759] [ 465.486919][T12759] Uninit was stored to memory at: [ 465.486919][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 465.486919][T12759] __msan_chain_origin+0xcb/0x140 [ 465.486919][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 465.486919][T12759] get_compat_msghdr+0x108/0x2c0 [ 465.486919][T12759] do_recvmmsg+0x1063/0x2120 [ 465.486919][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 465.486919][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 465.486919][T12759] __do_fast_syscall_32+0x96/0xe0 [ 465.486919][T12759] do_fast_syscall_32+0x3c/0x80 [ 465.486919][T12759] do_SYSENTER_32+0x1b/0x20 [ 465.486919][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.486919][T12759] [ 465.486919][T12759] Uninit was stored to memory at: [ 465.486919][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 465.486919][T12759] __msan_chain_origin+0xcb/0x140 [ 465.486919][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 465.486919][T12759] get_compat_msghdr+0x108/0x2c0 [ 465.486919][T12759] do_recvmmsg+0x1063/0x2120 [ 465.486919][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 465.486919][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 465.486919][T12759] __do_fast_syscall_32+0x96/0xe0 [ 465.486919][T12759] do_fast_syscall_32+0x3c/0x80 [ 465.486919][T12759] do_SYSENTER_32+0x1b/0x20 [ 465.486919][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.486919][T12759] [ 465.486919][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 465.486919][T12759] do_recvmmsg+0xc1/0x2120 [ 465.486919][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 466.279051][T12759] not chained 1270000 origins [ 466.282120][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 466.282120][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.298388][T12759] Call Trace: [ 466.298388][T12759] dump_stack+0x25a/0x2f6 [ 466.298388][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 466.298388][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 466.320249][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 466.320249][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 466.320249][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 466.320249][T12759] ? release_sock+0x2b5/0x2e0 [ 466.320249][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 466.320249][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 466.320249][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 466.320249][T12759] ? should_fail+0x75/0x9c0 [ 466.320249][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 466.320249][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 466.320249][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 466.320249][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 466.320249][T12759] ? _copy_from_user+0x219/0x310 [ 466.320249][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 466.320249][T12759] __msan_chain_origin+0xcb/0x140 [ 466.320249][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 466.320249][T12759] get_compat_msghdr+0x108/0x2c0 [ 466.320249][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 466.320249][T12759] do_recvmmsg+0x1063/0x2120 [ 466.320249][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 466.320249][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 466.320249][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 466.320249][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 466.320249][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 466.320249][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 466.320249][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 466.320249][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 466.320249][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 466.320249][T12759] __do_fast_syscall_32+0x96/0xe0 [ 466.320249][T12759] do_fast_syscall_32+0x3c/0x80 [ 466.320249][T12759] do_SYSENTER_32+0x1b/0x20 [ 466.320249][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.320249][T12759] RIP: 0023:0xf6f46549 [ 466.320249][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 466.320249][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 466.320249][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 466.320249][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.320249][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.320249][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 466.320249][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.320249][T12759] Uninit was stored to memory at: [ 466.320249][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 466.320249][T12759] __msan_chain_origin+0xcb/0x140 [ 466.320249][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 466.320249][T12759] get_compat_msghdr+0x108/0x2c0 [ 466.320249][T12759] do_recvmmsg+0x1063/0x2120 [ 466.320249][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 466.320249][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 466.320249][T12759] __do_fast_syscall_32+0x96/0xe0 [ 466.320249][T12759] do_fast_syscall_32+0x3c/0x80 [ 466.320249][T12759] do_SYSENTER_32+0x1b/0x20 [ 466.320249][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.320249][T12759] [ 466.320249][T12759] Uninit was stored to memory at: [ 466.320249][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 466.320249][T12759] __msan_chain_origin+0xcb/0x140 [ 466.320249][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 466.320249][T12759] get_compat_msghdr+0x108/0x2c0 [ 466.320249][T12759] do_recvmmsg+0x1063/0x2120 [ 466.320249][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 466.320249][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 466.320249][T12759] __do_fast_syscall_32+0x96/0xe0 [ 466.320249][T12759] do_fast_syscall_32+0x3c/0x80 [ 466.320249][T12759] do_SYSENTER_32+0x1b/0x20 [ 466.320249][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.320249][T12759] [ 466.320249][T12759] Uninit was stored to memory at: [ 466.320249][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 466.320249][T12759] __msan_chain_origin+0xcb/0x140 [ 466.320249][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 466.320249][T12759] get_compat_msghdr+0x108/0x2c0 [ 466.320249][T12759] do_recvmmsg+0x1063/0x2120 [ 466.320249][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 466.320249][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 466.320249][T12759] __do_fast_syscall_32+0x96/0xe0 [ 466.320249][T12759] do_fast_syscall_32+0x3c/0x80 [ 466.320249][T12759] do_SYSENTER_32+0x1b/0x20 [ 466.320249][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.320249][T12759] [ 466.320249][T12759] Uninit was stored to memory at: [ 466.320249][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 466.320249][T12759] __msan_chain_origin+0xcb/0x140 [ 466.320249][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 466.320249][T12759] get_compat_msghdr+0x108/0x2c0 [ 466.320249][T12759] do_recvmmsg+0x1063/0x2120 [ 466.320249][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 466.320249][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 466.320249][T12759] __do_fast_syscall_32+0x96/0xe0 [ 466.320249][T12759] do_fast_syscall_32+0x3c/0x80 [ 466.320249][T12759] do_SYSENTER_32+0x1b/0x20 [ 466.320249][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.320249][T12759] [ 466.320249][T12759] Uninit was stored to memory at: [ 466.320249][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 466.320249][T12759] __msan_chain_origin+0xcb/0x140 [ 466.320249][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 466.320249][T12759] get_compat_msghdr+0x108/0x2c0 [ 466.320249][T12759] do_recvmmsg+0x1063/0x2120 [ 466.320249][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 466.320249][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 466.320249][T12759] __do_fast_syscall_32+0x96/0xe0 [ 466.320249][T12759] do_fast_syscall_32+0x3c/0x80 [ 466.320249][T12759] do_SYSENTER_32+0x1b/0x20 [ 466.320249][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.320249][T12759] [ 466.320249][T12759] Uninit was stored to memory at: [ 466.320249][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 466.320249][T12759] __msan_chain_origin+0xcb/0x140 [ 466.320249][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 466.320249][T12759] get_compat_msghdr+0x108/0x2c0 [ 466.320249][T12759] do_recvmmsg+0x1063/0x2120 [ 466.320249][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 466.320249][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 466.320249][T12759] __do_fast_syscall_32+0x96/0xe0 [ 466.320249][T12759] do_fast_syscall_32+0x3c/0x80 [ 466.320249][T12759] do_SYSENTER_32+0x1b/0x20 [ 466.320249][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.320249][T12759] [ 466.320249][T12759] Uninit was stored to memory at: [ 466.320249][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 466.320249][T12759] __msan_chain_origin+0xcb/0x140 [ 466.320249][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 466.320249][T12759] get_compat_msghdr+0x108/0x2c0 [ 466.320249][T12759] do_recvmmsg+0x1063/0x2120 [ 466.320249][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 466.320249][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 466.320249][T12759] __do_fast_syscall_32+0x96/0xe0 [ 466.320249][T12759] do_fast_syscall_32+0x3c/0x80 [ 466.320249][T12759] do_SYSENTER_32+0x1b/0x20 [ 466.320249][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.320249][T12759] [ 466.320249][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 466.320249][T12759] do_recvmmsg+0xc1/0x2120 [ 466.320249][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.130950][T12759] not chained 1280000 origins [ 467.132103][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 467.132103][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.132103][T12759] Call Trace: [ 467.132103][T12759] dump_stack+0x25a/0x2f6 [ 467.132103][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 467.132103][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 467.132103][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 467.132103][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 467.132103][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 467.132103][T12759] ? release_sock+0x2b5/0x2e0 [ 467.132103][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 467.132103][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 467.132103][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 467.132103][T12759] ? should_fail+0x75/0x9c0 [ 467.132103][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 467.132103][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 467.132103][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 467.132103][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 467.132103][T12759] ? _copy_from_user+0x219/0x310 [ 467.132103][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 467.132103][T12759] __msan_chain_origin+0xcb/0x140 [ 467.132103][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 467.132103][T12759] get_compat_msghdr+0x108/0x2c0 [ 467.132103][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 467.132103][T12759] do_recvmmsg+0x1063/0x2120 [ 467.132103][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 467.132103][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 467.132103][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 467.132103][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 467.132103][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 467.132103][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 467.132103][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 467.132103][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.132103][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 467.132103][T12759] __do_fast_syscall_32+0x96/0xe0 [ 467.132103][T12759] do_fast_syscall_32+0x3c/0x80 [ 467.132103][T12759] do_SYSENTER_32+0x1b/0x20 [ 467.132103][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.132103][T12759] RIP: 0023:0xf6f46549 [ 467.132103][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 467.132103][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 467.132103][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 467.132103][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.132103][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.132103][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 467.132103][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.132103][T12759] Uninit was stored to memory at: [ 467.132103][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 467.132103][T12759] __msan_chain_origin+0xcb/0x140 [ 467.132103][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 467.132103][T12759] get_compat_msghdr+0x108/0x2c0 [ 467.132103][T12759] do_recvmmsg+0x1063/0x2120 [ 467.132103][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.132103][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 467.132103][T12759] __do_fast_syscall_32+0x96/0xe0 [ 467.462471][T12759] do_fast_syscall_32+0x3c/0x80 [ 467.462471][T12759] do_SYSENTER_32+0x1b/0x20 [ 467.462471][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.462471][T12759] [ 467.462471][T12759] Uninit was stored to memory at: [ 467.462471][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 467.462471][T12759] __msan_chain_origin+0xcb/0x140 [ 467.462471][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 467.462471][T12759] get_compat_msghdr+0x108/0x2c0 [ 467.462471][T12759] do_recvmmsg+0x1063/0x2120 [ 467.462471][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.462471][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 467.462471][T12759] __do_fast_syscall_32+0x96/0xe0 [ 467.462471][T12759] do_fast_syscall_32+0x3c/0x80 [ 467.462471][T12759] do_SYSENTER_32+0x1b/0x20 [ 467.462471][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.462471][T12759] [ 467.462471][T12759] Uninit was stored to memory at: [ 467.462471][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 467.462471][T12759] __msan_chain_origin+0xcb/0x140 [ 467.462471][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 467.462471][T12759] get_compat_msghdr+0x108/0x2c0 [ 467.462471][T12759] do_recvmmsg+0x1063/0x2120 [ 467.462471][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.462471][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 467.462471][T12759] __do_fast_syscall_32+0x96/0xe0 [ 467.462471][T12759] do_fast_syscall_32+0x3c/0x80 [ 467.462471][T12759] do_SYSENTER_32+0x1b/0x20 [ 467.462471][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.462471][T12759] [ 467.462471][T12759] Uninit was stored to memory at: [ 467.462471][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 467.462471][T12759] __msan_chain_origin+0xcb/0x140 [ 467.462471][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 467.462471][T12759] get_compat_msghdr+0x108/0x2c0 [ 467.462471][T12759] do_recvmmsg+0x1063/0x2120 [ 467.462471][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.462471][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 467.462471][T12759] __do_fast_syscall_32+0x96/0xe0 [ 467.462471][T12759] do_fast_syscall_32+0x3c/0x80 [ 467.462471][T12759] do_SYSENTER_32+0x1b/0x20 [ 467.462471][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.462471][T12759] [ 467.462471][T12759] Uninit was stored to memory at: [ 467.462471][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 467.462471][T12759] __msan_chain_origin+0xcb/0x140 [ 467.462471][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 467.462471][T12759] get_compat_msghdr+0x108/0x2c0 [ 467.462471][T12759] do_recvmmsg+0x1063/0x2120 [ 467.462471][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.462471][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 467.462471][T12759] __do_fast_syscall_32+0x96/0xe0 [ 467.462471][T12759] do_fast_syscall_32+0x3c/0x80 [ 467.462471][T12759] do_SYSENTER_32+0x1b/0x20 [ 467.462471][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.462471][T12759] [ 467.462471][T12759] Uninit was stored to memory at: [ 467.462471][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 467.462471][T12759] __msan_chain_origin+0xcb/0x140 [ 467.462471][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 467.462471][T12759] get_compat_msghdr+0x108/0x2c0 [ 467.462471][T12759] do_recvmmsg+0x1063/0x2120 [ 467.462471][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.462471][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 467.462471][T12759] __do_fast_syscall_32+0x96/0xe0 [ 467.462471][T12759] do_fast_syscall_32+0x3c/0x80 [ 467.462471][T12759] do_SYSENTER_32+0x1b/0x20 [ 467.462471][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.462471][T12759] [ 467.462471][T12759] Uninit was stored to memory at: [ 467.462471][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 467.462471][T12759] __msan_chain_origin+0xcb/0x140 [ 467.462471][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 467.462471][T12759] get_compat_msghdr+0x108/0x2c0 [ 467.462471][T12759] do_recvmmsg+0x1063/0x2120 [ 467.462471][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.462471][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 467.462471][T12759] __do_fast_syscall_32+0x96/0xe0 [ 467.462471][T12759] do_fast_syscall_32+0x3c/0x80 [ 467.462471][T12759] do_SYSENTER_32+0x1b/0x20 [ 467.462471][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.462471][T12759] [ 467.462471][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 467.462471][T12759] do_recvmmsg+0xc1/0x2120 [ 467.462471][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 467.983932][T12759] not chained 1290000 origins [ 467.988628][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 467.992132][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.992132][T12759] Call Trace: [ 467.992132][T12759] dump_stack+0x25a/0x2f6 [ 467.992132][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 467.992132][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 467.992132][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 467.992132][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 467.992132][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 467.992132][T12759] ? release_sock+0x2b5/0x2e0 [ 467.992132][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.049430][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 468.049430][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 468.049430][T12759] ? should_fail+0x75/0x9c0 [ 468.049430][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.049430][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 468.049430][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 468.049430][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 468.049430][T12759] ? _copy_from_user+0x219/0x310 [ 468.049430][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.049430][T12759] __msan_chain_origin+0xcb/0x140 [ 468.049430][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.049430][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.049430][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 468.049430][T12759] do_recvmmsg+0x1063/0x2120 [ 468.049430][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 468.049430][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.049430][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 468.049430][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.049430][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 468.049430][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 468.049430][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.049430][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.049430][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.049430][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.049430][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.049430][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.049430][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.049430][T12759] RIP: 0023:0xf6f46549 [ 468.049430][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 468.049430][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 468.049430][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 468.049430][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.049430][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.049430][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 468.049430][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.049430][T12759] Uninit was stored to memory at: [ 468.049430][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.049430][T12759] __msan_chain_origin+0xcb/0x140 [ 468.049430][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.049430][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.049430][T12759] do_recvmmsg+0x1063/0x2120 [ 468.049430][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.049430][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.049430][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.049430][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.049430][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.049430][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.049430][T12759] [ 468.049430][T12759] Uninit was stored to memory at: [ 468.049430][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.049430][T12759] __msan_chain_origin+0xcb/0x140 [ 468.049430][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.049430][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.049430][T12759] do_recvmmsg+0x1063/0x2120 [ 468.049430][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.049430][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.049430][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.049430][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.049430][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.049430][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.049430][T12759] [ 468.049430][T12759] Uninit was stored to memory at: [ 468.049430][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.049430][T12759] __msan_chain_origin+0xcb/0x140 [ 468.049430][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.049430][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.049430][T12759] do_recvmmsg+0x1063/0x2120 [ 468.049430][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.049430][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.049430][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.049430][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.049430][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.049430][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.049430][T12759] [ 468.049430][T12759] Uninit was stored to memory at: [ 468.049430][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.049430][T12759] __msan_chain_origin+0xcb/0x140 [ 468.049430][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.049430][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.049430][T12759] do_recvmmsg+0x1063/0x2120 [ 468.049430][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.049430][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.049430][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.049430][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.049430][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.049430][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.049430][T12759] [ 468.049430][T12759] Uninit was stored to memory at: [ 468.049430][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.049430][T12759] __msan_chain_origin+0xcb/0x140 [ 468.049430][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.049430][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.049430][T12759] do_recvmmsg+0x1063/0x2120 [ 468.049430][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.049430][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.049430][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.049430][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.049430][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.049430][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.049430][T12759] [ 468.049430][T12759] Uninit was stored to memory at: [ 468.049430][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.049430][T12759] __msan_chain_origin+0xcb/0x140 [ 468.049430][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.049430][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.049430][T12759] do_recvmmsg+0x1063/0x2120 [ 468.049430][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.049430][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.049430][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.049430][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.049430][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.049430][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.049430][T12759] [ 468.049430][T12759] Uninit was stored to memory at: [ 468.049430][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.049430][T12759] __msan_chain_origin+0xcb/0x140 [ 468.049430][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.049430][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.049430][T12759] do_recvmmsg+0x1063/0x2120 [ 468.049430][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.049430][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.049430][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.049430][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.049430][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.049430][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.049430][T12759] [ 468.049430][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 468.049430][T12759] do_recvmmsg+0xc1/0x2120 [ 468.049430][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.837731][T12759] not chained 1300000 origins [ 468.842121][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 468.842121][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.842121][T12759] Call Trace: [ 468.842121][T12759] dump_stack+0x25a/0x2f6 [ 468.842121][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 468.842121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.842121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 468.842121][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 468.842121][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 468.842121][T12759] ? release_sock+0x2b5/0x2e0 [ 468.842121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.842121][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 468.842121][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 468.842121][T12759] ? should_fail+0x75/0x9c0 [ 468.842121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.842121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 468.842121][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 468.842121][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 468.842121][T12759] ? _copy_from_user+0x219/0x310 [ 468.842121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.842121][T12759] __msan_chain_origin+0xcb/0x140 [ 468.842121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.842121][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.842121][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 468.842121][T12759] do_recvmmsg+0x1063/0x2120 [ 468.842121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 468.842121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.842121][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 468.842121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 468.842121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 468.842121][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 468.842121][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.842121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.842121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.842121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.842121][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.842121][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.842121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.842121][T12759] RIP: 0023:0xf6f46549 [ 468.842121][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 468.842121][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 468.842121][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 468.842121][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.842121][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.842121][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 468.842121][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.842121][T12759] Uninit was stored to memory at: [ 468.842121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.842121][T12759] __msan_chain_origin+0xcb/0x140 [ 468.842121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.842121][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.842121][T12759] do_recvmmsg+0x1063/0x2120 [ 468.842121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.842121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.842121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.842121][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.842121][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.842121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.842121][T12759] [ 468.842121][T12759] Uninit was stored to memory at: [ 468.842121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.842121][T12759] __msan_chain_origin+0xcb/0x140 [ 468.842121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.842121][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.842121][T12759] do_recvmmsg+0x1063/0x2120 [ 468.842121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.842121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.842121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.842121][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.842121][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.842121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.842121][T12759] [ 468.842121][T12759] Uninit was stored to memory at: [ 468.842121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.842121][T12759] __msan_chain_origin+0xcb/0x140 [ 468.842121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.842121][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.842121][T12759] do_recvmmsg+0x1063/0x2120 [ 468.842121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.842121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.842121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.842121][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.842121][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.842121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.842121][T12759] [ 468.842121][T12759] Uninit was stored to memory at: [ 468.842121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.842121][T12759] __msan_chain_origin+0xcb/0x140 [ 468.842121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.842121][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.842121][T12759] do_recvmmsg+0x1063/0x2120 [ 468.842121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.842121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.842121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.842121][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.842121][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.842121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.842121][T12759] [ 468.842121][T12759] Uninit was stored to memory at: [ 468.842121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.842121][T12759] __msan_chain_origin+0xcb/0x140 [ 468.842121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 468.842121][T12759] get_compat_msghdr+0x108/0x2c0 [ 468.842121][T12759] do_recvmmsg+0x1063/0x2120 [ 468.842121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 468.842121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 468.842121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 468.842121][T12759] do_fast_syscall_32+0x3c/0x80 [ 468.842121][T12759] do_SYSENTER_32+0x1b/0x20 [ 468.842121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.842121][T12759] [ 468.842121][T12759] Uninit was stored to memory at: [ 468.842121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 468.842121][T12759] __msan_chain_origin+0xcb/0x140 [ 469.462360][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.462360][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.462360][T12759] do_recvmmsg+0x1063/0x2120 [ 469.462360][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.462360][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.462360][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.462360][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.462360][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.462360][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.462360][T12759] [ 469.462360][T12759] Uninit was stored to memory at: [ 469.462360][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 469.462360][T12759] __msan_chain_origin+0xcb/0x140 [ 469.462360][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.462360][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.462360][T12759] do_recvmmsg+0x1063/0x2120 [ 469.462360][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.462360][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.462360][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.462360][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.462360][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.462360][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.462360][T12759] [ 469.462360][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 469.462360][T12759] do_recvmmsg+0xc1/0x2120 [ 469.462360][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.695459][T12759] not chained 1310000 origins [ 469.700248][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 469.702117][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.702117][T12759] Call Trace: [ 469.702117][T12759] dump_stack+0x25a/0x2f6 [ 469.702117][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 469.702117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 469.702117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 469.702117][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 469.702117][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 469.702117][T12759] ? release_sock+0x2b5/0x2e0 [ 469.702117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 469.702117][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 469.702117][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 469.702117][T12759] ? should_fail+0x75/0x9c0 [ 469.702117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 469.702117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 469.702117][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 469.702117][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 469.702117][T12759] ? _copy_from_user+0x219/0x310 [ 469.702117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 469.702117][T12759] __msan_chain_origin+0xcb/0x140 [ 469.702117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.702117][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.702117][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 469.702117][T12759] do_recvmmsg+0x1063/0x2120 [ 469.702117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 469.702117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 469.702117][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 469.702117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 469.702117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 469.702117][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 469.702117][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.702117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.702117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.702117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.702117][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.702117][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.702117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.702117][T12759] RIP: 0023:0xf6f46549 [ 469.702117][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 469.702117][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 469.702117][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 469.702117][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.702117][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.702117][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 469.702117][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.702117][T12759] Uninit was stored to memory at: [ 469.702117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 469.702117][T12759] __msan_chain_origin+0xcb/0x140 [ 469.702117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.702117][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.702117][T12759] do_recvmmsg+0x1063/0x2120 [ 469.702117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.702117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.702117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.702117][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.702117][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.702117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.702117][T12759] [ 469.702117][T12759] Uninit was stored to memory at: [ 469.702117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 469.702117][T12759] __msan_chain_origin+0xcb/0x140 [ 469.702117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.702117][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.702117][T12759] do_recvmmsg+0x1063/0x2120 [ 469.702117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.702117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.702117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.702117][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.702117][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.702117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.702117][T12759] [ 469.702117][T12759] Uninit was stored to memory at: [ 469.702117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 469.702117][T12759] __msan_chain_origin+0xcb/0x140 [ 469.702117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.702117][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.702117][T12759] do_recvmmsg+0x1063/0x2120 [ 469.702117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.702117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.702117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.702117][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.702117][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.702117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.702117][T12759] [ 469.702117][T12759] Uninit was stored to memory at: [ 469.702117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 469.702117][T12759] __msan_chain_origin+0xcb/0x140 [ 469.702117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.702117][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.702117][T12759] do_recvmmsg+0x1063/0x2120 [ 469.702117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.702117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.702117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.702117][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.702117][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.702117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.702117][T12759] [ 469.702117][T12759] Uninit was stored to memory at: [ 469.702117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 469.702117][T12759] __msan_chain_origin+0xcb/0x140 [ 469.702117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.702117][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.702117][T12759] do_recvmmsg+0x1063/0x2120 [ 469.702117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.702117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.702117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.702117][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.702117][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.702117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.702117][T12759] [ 469.702117][T12759] Uninit was stored to memory at: [ 469.702117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 469.702117][T12759] __msan_chain_origin+0xcb/0x140 [ 469.702117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.702117][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.702117][T12759] do_recvmmsg+0x1063/0x2120 [ 469.702117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.702117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.702117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.702117][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.702117][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.702117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.702117][T12759] [ 469.702117][T12759] Uninit was stored to memory at: [ 469.702117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 469.702117][T12759] __msan_chain_origin+0xcb/0x140 [ 469.702117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 469.702117][T12759] get_compat_msghdr+0x108/0x2c0 [ 469.702117][T12759] do_recvmmsg+0x1063/0x2120 [ 469.702117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 469.702117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 469.702117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 469.702117][T12759] do_fast_syscall_32+0x3c/0x80 [ 469.702117][T12759] do_SYSENTER_32+0x1b/0x20 [ 469.702117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.702117][T12759] [ 469.702117][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 469.702117][T12759] do_recvmmsg+0xc1/0x2120 [ 469.702117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 470.555665][T12759] not chained 1320000 origins [ 470.560356][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 470.562294][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.562294][T12759] Call Trace: [ 470.562294][T12759] dump_stack+0x25a/0x2f6 [ 470.562294][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 470.562294][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 470.562294][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 470.562294][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 470.562294][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 470.562294][T12759] ? release_sock+0x2b5/0x2e0 [ 470.616881][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 470.616881][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 470.616881][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 470.616881][T12759] ? should_fail+0x75/0x9c0 [ 470.616881][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 470.616881][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 470.616881][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 470.616881][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 470.616881][T12759] ? _copy_from_user+0x219/0x310 [ 470.616881][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 470.616881][T12759] __msan_chain_origin+0xcb/0x140 [ 470.616881][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 470.616881][T12759] get_compat_msghdr+0x108/0x2c0 [ 470.616881][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 470.616881][T12759] do_recvmmsg+0x1063/0x2120 [ 470.616881][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 470.616881][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 470.616881][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 470.616881][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 470.616881][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 470.616881][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 470.616881][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 470.616881][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 470.616881][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 470.616881][T12759] __do_fast_syscall_32+0x96/0xe0 [ 470.616881][T12759] do_fast_syscall_32+0x3c/0x80 [ 470.616881][T12759] do_SYSENTER_32+0x1b/0x20 [ 470.616881][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.616881][T12759] RIP: 0023:0xf6f46549 [ 470.616881][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 470.616881][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 470.616881][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 470.616881][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.616881][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.616881][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 470.616881][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.616881][T12759] Uninit was stored to memory at: [ 470.616881][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 470.616881][T12759] __msan_chain_origin+0xcb/0x140 [ 470.616881][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 470.616881][T12759] get_compat_msghdr+0x108/0x2c0 [ 470.616881][T12759] do_recvmmsg+0x1063/0x2120 [ 470.616881][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 470.616881][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 470.616881][T12759] __do_fast_syscall_32+0x96/0xe0 [ 470.616881][T12759] do_fast_syscall_32+0x3c/0x80 [ 470.616881][T12759] do_SYSENTER_32+0x1b/0x20 [ 470.616881][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.616881][T12759] [ 470.616881][T12759] Uninit was stored to memory at: [ 470.616881][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 470.616881][T12759] __msan_chain_origin+0xcb/0x140 [ 470.616881][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 470.616881][T12759] get_compat_msghdr+0x108/0x2c0 [ 470.616881][T12759] do_recvmmsg+0x1063/0x2120 [ 470.616881][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 470.616881][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 470.616881][T12759] __do_fast_syscall_32+0x96/0xe0 [ 470.616881][T12759] do_fast_syscall_32+0x3c/0x80 [ 470.616881][T12759] do_SYSENTER_32+0x1b/0x20 [ 470.616881][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.616881][T12759] [ 470.616881][T12759] Uninit was stored to memory at: [ 470.616881][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 470.616881][T12759] __msan_chain_origin+0xcb/0x140 [ 470.616881][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 470.616881][T12759] get_compat_msghdr+0x108/0x2c0 [ 470.616881][T12759] do_recvmmsg+0x1063/0x2120 [ 470.616881][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 470.616881][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 470.616881][T12759] __do_fast_syscall_32+0x96/0xe0 [ 470.616881][T12759] do_fast_syscall_32+0x3c/0x80 [ 470.616881][T12759] do_SYSENTER_32+0x1b/0x20 [ 470.616881][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.616881][T12759] [ 470.616881][T12759] Uninit was stored to memory at: [ 470.616881][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 470.616881][T12759] __msan_chain_origin+0xcb/0x140 [ 470.616881][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 470.616881][T12759] get_compat_msghdr+0x108/0x2c0 [ 470.616881][T12759] do_recvmmsg+0x1063/0x2120 [ 470.616881][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 470.616881][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 470.616881][T12759] __do_fast_syscall_32+0x96/0xe0 [ 470.616881][T12759] do_fast_syscall_32+0x3c/0x80 [ 470.616881][T12759] do_SYSENTER_32+0x1b/0x20 [ 470.616881][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.616881][T12759] [ 470.616881][T12759] Uninit was stored to memory at: [ 470.616881][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 470.616881][T12759] __msan_chain_origin+0xcb/0x140 [ 470.616881][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 470.616881][T12759] get_compat_msghdr+0x108/0x2c0 [ 470.616881][T12759] do_recvmmsg+0x1063/0x2120 [ 470.616881][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 470.616881][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 470.616881][T12759] __do_fast_syscall_32+0x96/0xe0 [ 470.616881][T12759] do_fast_syscall_32+0x3c/0x80 [ 470.616881][T12759] do_SYSENTER_32+0x1b/0x20 [ 470.616881][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.616881][T12759] [ 470.616881][T12759] Uninit was stored to memory at: [ 470.616881][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 470.616881][T12759] __msan_chain_origin+0xcb/0x140 [ 470.616881][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 470.616881][T12759] get_compat_msghdr+0x108/0x2c0 [ 470.616881][T12759] do_recvmmsg+0x1063/0x2120 [ 470.616881][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 470.616881][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 470.616881][T12759] __do_fast_syscall_32+0x96/0xe0 [ 470.616881][T12759] do_fast_syscall_32+0x3c/0x80 [ 470.616881][T12759] do_SYSENTER_32+0x1b/0x20 [ 470.616881][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.616881][T12759] [ 470.616881][T12759] Uninit was stored to memory at: [ 470.616881][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 470.616881][T12759] __msan_chain_origin+0xcb/0x140 [ 470.616881][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 470.616881][T12759] get_compat_msghdr+0x108/0x2c0 [ 470.616881][T12759] do_recvmmsg+0x1063/0x2120 [ 470.616881][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 470.616881][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 470.616881][T12759] __do_fast_syscall_32+0x96/0xe0 [ 470.616881][T12759] do_fast_syscall_32+0x3c/0x80 [ 470.616881][T12759] do_SYSENTER_32+0x1b/0x20 [ 470.616881][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.616881][T12759] [ 470.616881][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 470.616881][T12759] do_recvmmsg+0xc1/0x2120 [ 470.616881][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 471.399489][T12759] not chained 1330000 origins [ 471.402248][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 471.402248][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.402248][T12759] Call Trace: [ 471.402248][T12759] dump_stack+0x25a/0x2f6 [ 471.402248][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 471.402248][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 471.402248][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 471.402248][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 471.402248][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 471.402248][T12759] ? release_sock+0x2b5/0x2e0 [ 471.460037][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 471.463034][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 471.463034][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 471.463034][T12759] ? should_fail+0x75/0x9c0 [ 471.463034][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 471.463034][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 471.463034][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 471.463034][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 471.463034][T12759] ? _copy_from_user+0x219/0x310 [ 471.463034][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 471.463034][T12759] __msan_chain_origin+0xcb/0x140 [ 471.463034][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 471.463034][T12759] get_compat_msghdr+0x108/0x2c0 [ 471.463034][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 471.463034][T12759] do_recvmmsg+0x1063/0x2120 [ 471.463034][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 471.463034][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 471.463034][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 471.463034][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 471.463034][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 471.463034][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 471.463034][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 471.463034][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 471.463034][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 471.463034][T12759] __do_fast_syscall_32+0x96/0xe0 [ 471.463034][T12759] do_fast_syscall_32+0x3c/0x80 [ 471.463034][T12759] do_SYSENTER_32+0x1b/0x20 [ 471.463034][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.463034][T12759] RIP: 0023:0xf6f46549 [ 471.463034][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 471.463034][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 471.463034][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 471.463034][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.463034][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.463034][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 471.463034][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.463034][T12759] Uninit was stored to memory at: [ 471.463034][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 471.463034][T12759] __msan_chain_origin+0xcb/0x140 [ 471.463034][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 471.463034][T12759] get_compat_msghdr+0x108/0x2c0 [ 471.463034][T12759] do_recvmmsg+0x1063/0x2120 [ 471.463034][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 471.463034][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 471.463034][T12759] __do_fast_syscall_32+0x96/0xe0 [ 471.463034][T12759] do_fast_syscall_32+0x3c/0x80 [ 471.463034][T12759] do_SYSENTER_32+0x1b/0x20 [ 471.463034][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.463034][T12759] [ 471.463034][T12759] Uninit was stored to memory at: [ 471.463034][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 471.463034][T12759] __msan_chain_origin+0xcb/0x140 [ 471.463034][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 471.463034][T12759] get_compat_msghdr+0x108/0x2c0 [ 471.463034][T12759] do_recvmmsg+0x1063/0x2120 [ 471.463034][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 471.463034][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 471.463034][T12759] __do_fast_syscall_32+0x96/0xe0 [ 471.463034][T12759] do_fast_syscall_32+0x3c/0x80 [ 471.463034][T12759] do_SYSENTER_32+0x1b/0x20 [ 471.463034][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.463034][T12759] [ 471.463034][T12759] Uninit was stored to memory at: [ 471.463034][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 471.463034][T12759] __msan_chain_origin+0xcb/0x140 [ 471.463034][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 471.463034][T12759] get_compat_msghdr+0x108/0x2c0 [ 471.463034][T12759] do_recvmmsg+0x1063/0x2120 [ 471.463034][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 471.463034][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 471.463034][T12759] __do_fast_syscall_32+0x96/0xe0 [ 471.463034][T12759] do_fast_syscall_32+0x3c/0x80 [ 471.463034][T12759] do_SYSENTER_32+0x1b/0x20 [ 471.463034][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.463034][T12759] [ 471.463034][T12759] Uninit was stored to memory at: [ 471.463034][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 471.463034][T12759] __msan_chain_origin+0xcb/0x140 [ 471.463034][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 471.463034][T12759] get_compat_msghdr+0x108/0x2c0 [ 471.463034][T12759] do_recvmmsg+0x1063/0x2120 [ 471.463034][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 471.463034][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 471.463034][T12759] __do_fast_syscall_32+0x96/0xe0 [ 471.463034][T12759] do_fast_syscall_32+0x3c/0x80 [ 471.463034][T12759] do_SYSENTER_32+0x1b/0x20 [ 471.463034][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.463034][T12759] [ 471.463034][T12759] Uninit was stored to memory at: [ 471.463034][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 471.463034][T12759] __msan_chain_origin+0xcb/0x140 [ 471.463034][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 471.463034][T12759] get_compat_msghdr+0x108/0x2c0 [ 471.463034][T12759] do_recvmmsg+0x1063/0x2120 [ 471.463034][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 471.463034][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 471.463034][T12759] __do_fast_syscall_32+0x96/0xe0 [ 471.463034][T12759] do_fast_syscall_32+0x3c/0x80 [ 471.463034][T12759] do_SYSENTER_32+0x1b/0x20 [ 471.463034][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.463034][T12759] [ 471.463034][T12759] Uninit was stored to memory at: [ 471.463034][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 471.463034][T12759] __msan_chain_origin+0xcb/0x140 [ 471.463034][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 471.463034][T12759] get_compat_msghdr+0x108/0x2c0 [ 471.463034][T12759] do_recvmmsg+0x1063/0x2120 [ 471.463034][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 471.463034][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 471.463034][T12759] __do_fast_syscall_32+0x96/0xe0 [ 471.463034][T12759] do_fast_syscall_32+0x3c/0x80 [ 471.463034][T12759] do_SYSENTER_32+0x1b/0x20 [ 471.463034][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.463034][T12759] [ 471.463034][T12759] Uninit was stored to memory at: [ 471.463034][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 471.463034][T12759] __msan_chain_origin+0xcb/0x140 [ 471.463034][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 471.463034][T12759] get_compat_msghdr+0x108/0x2c0 [ 471.463034][T12759] do_recvmmsg+0x1063/0x2120 [ 471.463034][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 471.463034][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 471.463034][T12759] __do_fast_syscall_32+0x96/0xe0 [ 471.463034][T12759] do_fast_syscall_32+0x3c/0x80 [ 471.463034][T12759] do_SYSENTER_32+0x1b/0x20 [ 471.463034][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.463034][T12759] [ 471.463034][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 471.463034][T12759] do_recvmmsg+0xc1/0x2120 [ 471.463034][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 472.253085][T12759] not chained 1340000 origins [ 472.257777][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 472.262116][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.262116][T12759] Call Trace: [ 472.262116][T12759] dump_stack+0x25a/0x2f6 [ 472.262116][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 472.262116][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 472.262116][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 472.262116][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 472.262116][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 472.262116][T12759] ? release_sock+0x2b5/0x2e0 [ 472.262116][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 472.262116][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 472.262116][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 472.262116][T12759] ? should_fail+0x75/0x9c0 [ 472.262116][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 472.262116][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 472.262116][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 472.262116][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 472.262116][T12759] ? _copy_from_user+0x219/0x310 [ 472.262116][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 472.262116][T12759] __msan_chain_origin+0xcb/0x140 [ 472.262116][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 472.262116][T12759] get_compat_msghdr+0x108/0x2c0 [ 472.262116][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 472.262116][T12759] do_recvmmsg+0x1063/0x2120 [ 472.262116][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 472.262116][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 472.262116][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 472.262116][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 472.262116][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 472.262116][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 472.262116][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 472.262116][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 472.262116][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 472.262116][T12759] __do_fast_syscall_32+0x96/0xe0 [ 472.262116][T12759] do_fast_syscall_32+0x3c/0x80 [ 472.262116][T12759] do_SYSENTER_32+0x1b/0x20 [ 472.262116][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.262116][T12759] RIP: 0023:0xf6f46549 [ 472.262116][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 472.262116][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 472.262116][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 472.262116][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.262116][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.262116][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 472.262116][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.262116][T12759] Uninit was stored to memory at: [ 472.262116][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 472.262116][T12759] __msan_chain_origin+0xcb/0x140 [ 472.262116][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 472.262116][T12759] get_compat_msghdr+0x108/0x2c0 [ 472.262116][T12759] do_recvmmsg+0x1063/0x2120 [ 472.262116][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 472.262116][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 472.262116][T12759] __do_fast_syscall_32+0x96/0xe0 [ 472.262116][T12759] do_fast_syscall_32+0x3c/0x80 [ 472.262116][T12759] do_SYSENTER_32+0x1b/0x20 [ 472.262116][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.262116][T12759] [ 472.262116][T12759] Uninit was stored to memory at: [ 472.262116][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 472.262116][T12759] __msan_chain_origin+0xcb/0x140 [ 472.262116][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 472.262116][T12759] get_compat_msghdr+0x108/0x2c0 [ 472.262116][T12759] do_recvmmsg+0x1063/0x2120 [ 472.262116][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 472.262116][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 472.262116][T12759] __do_fast_syscall_32+0x96/0xe0 [ 472.262116][T12759] do_fast_syscall_32+0x3c/0x80 [ 472.262116][T12759] do_SYSENTER_32+0x1b/0x20 [ 472.262116][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.262116][T12759] [ 472.262116][T12759] Uninit was stored to memory at: [ 472.262116][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 472.262116][T12759] __msan_chain_origin+0xcb/0x140 [ 472.262116][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 472.262116][T12759] get_compat_msghdr+0x108/0x2c0 [ 472.262116][T12759] do_recvmmsg+0x1063/0x2120 [ 472.262116][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 472.262116][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 472.262116][T12759] __do_fast_syscall_32+0x96/0xe0 [ 472.262116][T12759] do_fast_syscall_32+0x3c/0x80 [ 472.262116][T12759] do_SYSENTER_32+0x1b/0x20 [ 472.262116][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.262116][T12759] [ 472.262116][T12759] Uninit was stored to memory at: [ 472.262116][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 472.262116][T12759] __msan_chain_origin+0xcb/0x140 [ 472.262116][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 472.262116][T12759] get_compat_msghdr+0x108/0x2c0 [ 472.262116][T12759] do_recvmmsg+0x1063/0x2120 [ 472.262116][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 472.262116][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 472.262116][T12759] __do_fast_syscall_32+0x96/0xe0 [ 472.262116][T12759] do_fast_syscall_32+0x3c/0x80 [ 472.262116][T12759] do_SYSENTER_32+0x1b/0x20 [ 472.262116][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.262116][T12759] [ 472.262116][T12759] Uninit was stored to memory at: [ 472.262116][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 472.262116][T12759] __msan_chain_origin+0xcb/0x140 [ 472.262116][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 472.262116][T12759] get_compat_msghdr+0x108/0x2c0 [ 472.262116][T12759] do_recvmmsg+0x1063/0x2120 [ 472.262116][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 472.262116][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 472.262116][T12759] __do_fast_syscall_32+0x96/0xe0 [ 472.262116][T12759] do_fast_syscall_32+0x3c/0x80 [ 472.262116][T12759] do_SYSENTER_32+0x1b/0x20 [ 472.262116][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.262116][T12759] [ 472.262116][T12759] Uninit was stored to memory at: [ 472.262116][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 472.262116][T12759] __msan_chain_origin+0xcb/0x140 [ 472.262116][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 472.262116][T12759] get_compat_msghdr+0x108/0x2c0 [ 472.262116][T12759] do_recvmmsg+0x1063/0x2120 [ 472.262116][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 472.262116][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 472.262116][T12759] __do_fast_syscall_32+0x96/0xe0 [ 472.262116][T12759] do_fast_syscall_32+0x3c/0x80 [ 472.262116][T12759] do_SYSENTER_32+0x1b/0x20 [ 472.262116][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.262116][T12759] [ 472.262116][T12759] Uninit was stored to memory at: [ 472.262116][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 472.262116][T12759] __msan_chain_origin+0xcb/0x140 [ 472.262116][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 472.262116][T12759] get_compat_msghdr+0x108/0x2c0 [ 472.262116][T12759] do_recvmmsg+0x1063/0x2120 [ 472.262116][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 472.262116][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 472.262116][T12759] __do_fast_syscall_32+0x96/0xe0 [ 472.262116][T12759] do_fast_syscall_32+0x3c/0x80 [ 472.262116][T12759] do_SYSENTER_32+0x1b/0x20 [ 472.262116][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.262116][T12759] [ 472.262116][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 472.262116][T12759] do_recvmmsg+0xc1/0x2120 [ 472.262116][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.096805][T12759] not chained 1350000 origins [ 473.101492][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 473.102117][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.102117][T12759] Call Trace: [ 473.102117][T12759] dump_stack+0x25a/0x2f6 [ 473.102117][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 473.102117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 473.102117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 473.102117][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 473.102117][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 473.102117][T12759] ? release_sock+0x2b5/0x2e0 [ 473.102117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 473.102117][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 473.102117][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 473.102117][T12759] ? should_fail+0x75/0x9c0 [ 473.102117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 473.102117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 473.102117][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 473.102117][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 473.102117][T12759] ? _copy_from_user+0x219/0x310 [ 473.102117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 473.102117][T12759] __msan_chain_origin+0xcb/0x140 [ 473.102117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 473.102117][T12759] get_compat_msghdr+0x108/0x2c0 [ 473.102117][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 473.102117][T12759] do_recvmmsg+0x1063/0x2120 [ 473.102117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 473.102117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 473.102117][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 473.102117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 473.102117][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 473.102117][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 473.102117][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 473.102117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.102117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 473.102117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 473.102117][T12759] do_fast_syscall_32+0x3c/0x80 [ 473.102117][T12759] do_SYSENTER_32+0x1b/0x20 [ 473.102117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.102117][T12759] RIP: 0023:0xf6f46549 [ 473.102117][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 473.102117][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 473.102117][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 473.102117][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.102117][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.102117][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 473.102117][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.102117][T12759] Uninit was stored to memory at: [ 473.102117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 473.102117][T12759] __msan_chain_origin+0xcb/0x140 [ 473.102117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 473.102117][T12759] get_compat_msghdr+0x108/0x2c0 [ 473.102117][T12759] do_recvmmsg+0x1063/0x2120 [ 473.102117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.102117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 473.102117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 473.102117][T12759] do_fast_syscall_32+0x3c/0x80 [ 473.102117][T12759] do_SYSENTER_32+0x1b/0x20 [ 473.102117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.102117][T12759] [ 473.102117][T12759] Uninit was stored to memory at: [ 473.102117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 473.102117][T12759] __msan_chain_origin+0xcb/0x140 [ 473.102117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 473.102117][T12759] get_compat_msghdr+0x108/0x2c0 [ 473.102117][T12759] do_recvmmsg+0x1063/0x2120 [ 473.102117][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.102117][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 473.102117][T12759] __do_fast_syscall_32+0x96/0xe0 [ 473.102117][T12759] do_fast_syscall_32+0x3c/0x80 [ 473.102117][T12759] do_SYSENTER_32+0x1b/0x20 [ 473.102117][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.102117][T12759] [ 473.102117][T12759] Uninit was stored to memory at: [ 473.102117][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 473.102117][T12759] __msan_chain_origin+0xcb/0x140 [ 473.102117][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 473.102117][T12759] get_compat_msghdr+0x108/0x2c0 [ 473.102117][T12759] do_recvmmsg+0x1063/0x2120 [ 473.542390][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.542390][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 473.542390][T12759] __do_fast_syscall_32+0x96/0xe0 [ 473.542390][T12759] do_fast_syscall_32+0x3c/0x80 [ 473.542390][T12759] do_SYSENTER_32+0x1b/0x20 [ 473.542390][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.542390][T12759] [ 473.542390][T12759] Uninit was stored to memory at: [ 473.542390][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 473.542390][T12759] __msan_chain_origin+0xcb/0x140 [ 473.542390][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 473.542390][T12759] get_compat_msghdr+0x108/0x2c0 [ 473.542390][T12759] do_recvmmsg+0x1063/0x2120 [ 473.542390][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.542390][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 473.542390][T12759] __do_fast_syscall_32+0x96/0xe0 [ 473.542390][T12759] do_fast_syscall_32+0x3c/0x80 [ 473.542390][T12759] do_SYSENTER_32+0x1b/0x20 [ 473.542390][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.542390][T12759] [ 473.542390][T12759] Uninit was stored to memory at: [ 473.542390][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 473.542390][T12759] __msan_chain_origin+0xcb/0x140 [ 473.542390][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 473.542390][T12759] get_compat_msghdr+0x108/0x2c0 [ 473.542390][T12759] do_recvmmsg+0x1063/0x2120 [ 473.542390][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.542390][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 473.542390][T12759] __do_fast_syscall_32+0x96/0xe0 [ 473.542390][T12759] do_fast_syscall_32+0x3c/0x80 [ 473.542390][T12759] do_SYSENTER_32+0x1b/0x20 [ 473.542390][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.542390][T12759] [ 473.542390][T12759] Uninit was stored to memory at: [ 473.542390][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 473.542390][T12759] __msan_chain_origin+0xcb/0x140 [ 473.542390][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 473.542390][T12759] get_compat_msghdr+0x108/0x2c0 [ 473.542390][T12759] do_recvmmsg+0x1063/0x2120 [ 473.542390][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.542390][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 473.542390][T12759] __do_fast_syscall_32+0x96/0xe0 [ 473.542390][T12759] do_fast_syscall_32+0x3c/0x80 [ 473.542390][T12759] do_SYSENTER_32+0x1b/0x20 [ 473.542390][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.542390][T12759] [ 473.542390][T12759] Uninit was stored to memory at: [ 473.542390][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 473.542390][T12759] __msan_chain_origin+0xcb/0x140 [ 473.542390][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 473.542390][T12759] get_compat_msghdr+0x108/0x2c0 [ 473.542390][T12759] do_recvmmsg+0x1063/0x2120 [ 473.542390][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.542390][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 473.542390][T12759] __do_fast_syscall_32+0x96/0xe0 [ 473.542390][T12759] do_fast_syscall_32+0x3c/0x80 [ 473.542390][T12759] do_SYSENTER_32+0x1b/0x20 [ 473.542390][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.542390][T12759] [ 473.542390][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 473.542390][T12759] do_recvmmsg+0xc1/0x2120 [ 473.542390][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 473.946515][T12759] not chained 1360000 origins [ 473.951209][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 473.952123][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.952123][T12759] Call Trace: [ 473.952123][T12759] dump_stack+0x25a/0x2f6 [ 473.952123][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 473.952123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 473.952123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 473.952123][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 473.952123][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 473.952123][T12759] ? release_sock+0x2b5/0x2e0 [ 473.952123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 473.952123][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 473.952123][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 474.024772][T12759] ? should_fail+0x75/0x9c0 [ 474.030117][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.032220][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 474.032220][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 474.045007][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 474.052848][T12759] ? _copy_from_user+0x219/0x310 [ 474.052848][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.052848][T12759] __msan_chain_origin+0xcb/0x140 [ 474.065034][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.072351][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.072351][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 474.081805][T12759] do_recvmmsg+0x1063/0x2120 [ 474.084882][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 474.084882][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.095386][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 474.104981][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.104981][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 474.112213][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 474.112213][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.124925][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.132361][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.132361][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.144892][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.144892][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.152227][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.152227][T12759] RIP: 0023:0xf6f46549 [ 474.164981][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 474.172215][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 474.192378][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 474.192378][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.208128][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.216608][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 474.216608][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.232251][T12759] Uninit was stored to memory at: [ 474.232251][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.232251][T12759] __msan_chain_origin+0xcb/0x140 [ 474.244763][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.252363][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.252363][T12759] do_recvmmsg+0x1063/0x2120 [ 474.264723][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.264723][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.272215][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.272215][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.284937][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.286492][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.292212][T12759] [ 474.292212][T12759] Uninit was stored to memory at: [ 474.292212][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.304719][T12759] __msan_chain_origin+0xcb/0x140 [ 474.304719][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.315155][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.315155][T12759] do_recvmmsg+0x1063/0x2120 [ 474.324944][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.332260][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.332260][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.332260][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.345413][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.352234][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.352234][T12759] [ 474.352234][T12759] Uninit was stored to memory at: [ 474.364918][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.372346][T12759] __msan_chain_origin+0xcb/0x140 [ 474.372346][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.372346][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.388979][T12759] do_recvmmsg+0x1063/0x2120 [ 474.392239][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.392239][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.392239][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.405006][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.412931][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.412931][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.412931][T12759] [ 474.412931][T12759] Uninit was stored to memory at: [ 474.412931][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.434789][T12759] __msan_chain_origin+0xcb/0x140 [ 474.442380][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.442380][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.442380][T12759] do_recvmmsg+0x1063/0x2120 [ 474.454822][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.462507][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.462507][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.462507][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.474880][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.482381][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.482381][T12759] [ 474.491389][T12759] Uninit was stored to memory at: [ 474.495001][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.495001][T12759] __msan_chain_origin+0xcb/0x140 [ 474.505477][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.505477][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.514869][T12759] do_recvmmsg+0x1063/0x2120 [ 474.522495][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.522495][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.522495][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.537931][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.542377][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.542377][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.542377][T12759] [ 474.554968][T12759] Uninit was stored to memory at: [ 474.554968][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.562380][T12759] __msan_chain_origin+0xcb/0x140 [ 474.562380][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.574840][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.582498][T12759] do_recvmmsg+0x1063/0x2120 [ 474.582498][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.582498][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.596392][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.602386][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.602386][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.602386][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.614888][T12759] [ 474.614888][T12759] Uninit was stored to memory at: [ 474.622364][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.622364][T12759] __msan_chain_origin+0xcb/0x140 [ 474.634789][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.634789][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.645466][T12759] do_recvmmsg+0x1063/0x2120 [ 474.645466][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.654837][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.654837][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.664849][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.664849][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.674922][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.682394][T12759] [ 474.682394][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 474.682394][T12759] do_recvmmsg+0xc1/0x2120 [ 474.696294][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.802489][T12759] not chained 1370000 origins [ 474.807180][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 474.812119][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.812119][T12759] Call Trace: [ 474.812119][T12759] dump_stack+0x25a/0x2f6 [ 474.812119][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 474.812119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.812119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 474.812119][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 474.812119][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 474.812119][T12759] ? release_sock+0x2b5/0x2e0 [ 474.812119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.812119][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 474.812119][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 474.812119][T12759] ? should_fail+0x75/0x9c0 [ 474.812119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.812119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 474.812119][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 474.812119][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 474.812119][T12759] ? _copy_from_user+0x219/0x310 [ 474.812119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.812119][T12759] __msan_chain_origin+0xcb/0x140 [ 474.812119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.812119][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.812119][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 474.812119][T12759] do_recvmmsg+0x1063/0x2120 [ 474.812119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 474.812119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.812119][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 474.812119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 474.812119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 474.812119][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 474.812119][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.812119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.812119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.812119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.812119][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.812119][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.812119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.812119][T12759] RIP: 0023:0xf6f46549 [ 474.812119][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 474.812119][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 474.812119][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 474.812119][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.812119][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.812119][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 474.812119][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.812119][T12759] Uninit was stored to memory at: [ 474.812119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.812119][T12759] __msan_chain_origin+0xcb/0x140 [ 474.812119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.812119][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.812119][T12759] do_recvmmsg+0x1063/0x2120 [ 474.812119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.812119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.812119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.812119][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.812119][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.812119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.812119][T12759] [ 474.812119][T12759] Uninit was stored to memory at: [ 474.812119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.812119][T12759] __msan_chain_origin+0xcb/0x140 [ 474.812119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.812119][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.812119][T12759] do_recvmmsg+0x1063/0x2120 [ 474.812119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.812119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.812119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.812119][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.812119][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.812119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.812119][T12759] [ 474.812119][T12759] Uninit was stored to memory at: [ 474.812119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.812119][T12759] __msan_chain_origin+0xcb/0x140 [ 474.812119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.812119][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.812119][T12759] do_recvmmsg+0x1063/0x2120 [ 474.812119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.812119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.812119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.812119][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.812119][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.812119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.812119][T12759] [ 474.812119][T12759] Uninit was stored to memory at: [ 474.812119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.812119][T12759] __msan_chain_origin+0xcb/0x140 [ 474.812119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.812119][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.812119][T12759] do_recvmmsg+0x1063/0x2120 [ 474.812119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.812119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.812119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.812119][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.812119][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.812119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.812119][T12759] [ 474.812119][T12759] Uninit was stored to memory at: [ 474.812119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.812119][T12759] __msan_chain_origin+0xcb/0x140 [ 474.812119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.812119][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.812119][T12759] do_recvmmsg+0x1063/0x2120 [ 474.812119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.812119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.812119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.812119][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.812119][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.812119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.812119][T12759] [ 474.812119][T12759] Uninit was stored to memory at: [ 474.812119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.812119][T12759] __msan_chain_origin+0xcb/0x140 [ 474.812119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.812119][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.812119][T12759] do_recvmmsg+0x1063/0x2120 [ 474.812119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.812119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.812119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.812119][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.812119][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.812119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.812119][T12759] [ 474.812119][T12759] Uninit was stored to memory at: [ 474.812119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 474.812119][T12759] __msan_chain_origin+0xcb/0x140 [ 474.812119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 474.812119][T12759] get_compat_msghdr+0x108/0x2c0 [ 474.812119][T12759] do_recvmmsg+0x1063/0x2120 [ 474.812119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 474.812119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 474.812119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 474.812119][T12759] do_fast_syscall_32+0x3c/0x80 [ 474.812119][T12759] do_SYSENTER_32+0x1b/0x20 [ 474.812119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.812119][T12759] [ 474.812119][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 475.542554][T12759] do_recvmmsg+0xc1/0x2120 [ 475.542554][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 475.655256][T12759] not chained 1380000 origins [ 475.659947][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 475.662123][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.662123][T12759] Call Trace: [ 475.662123][T12759] dump_stack+0x25a/0x2f6 [ 475.662123][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 475.662123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 475.662123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 475.662123][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 475.662123][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 475.662123][T12759] ? release_sock+0x2b5/0x2e0 [ 475.662123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 475.662123][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 475.662123][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 475.662123][T12759] ? should_fail+0x75/0x9c0 [ 475.662123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 475.662123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 475.662123][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 475.662123][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 475.662123][T12759] ? _copy_from_user+0x219/0x310 [ 475.662123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 475.662123][T12759] __msan_chain_origin+0xcb/0x140 [ 475.662123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 475.662123][T12759] get_compat_msghdr+0x108/0x2c0 [ 475.662123][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 475.662123][T12759] do_recvmmsg+0x1063/0x2120 [ 475.662123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 475.662123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 475.662123][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 475.662123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 475.662123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 475.662123][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 475.662123][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 475.662123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 475.662123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 475.662123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 475.662123][T12759] do_fast_syscall_32+0x3c/0x80 [ 475.662123][T12759] do_SYSENTER_32+0x1b/0x20 [ 475.662123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.662123][T12759] RIP: 0023:0xf6f46549 [ 475.662123][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 475.662123][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 475.662123][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 475.662123][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.662123][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.662123][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 475.662123][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.662123][T12759] Uninit was stored to memory at: [ 475.662123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 475.662123][T12759] __msan_chain_origin+0xcb/0x140 [ 475.662123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 475.662123][T12759] get_compat_msghdr+0x108/0x2c0 [ 475.662123][T12759] do_recvmmsg+0x1063/0x2120 [ 475.662123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 475.662123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 475.662123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 475.662123][T12759] do_fast_syscall_32+0x3c/0x80 [ 475.662123][T12759] do_SYSENTER_32+0x1b/0x20 [ 475.662123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.662123][T12759] [ 475.662123][T12759] Uninit was stored to memory at: [ 475.662123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 475.662123][T12759] __msan_chain_origin+0xcb/0x140 [ 475.662123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 475.662123][T12759] get_compat_msghdr+0x108/0x2c0 [ 475.662123][T12759] do_recvmmsg+0x1063/0x2120 [ 475.662123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 475.662123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 475.662123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 475.662123][T12759] do_fast_syscall_32+0x3c/0x80 [ 475.662123][T12759] do_SYSENTER_32+0x1b/0x20 [ 475.662123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.662123][T12759] [ 475.662123][T12759] Uninit was stored to memory at: [ 475.662123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 475.662123][T12759] __msan_chain_origin+0xcb/0x140 [ 475.662123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 475.662123][T12759] get_compat_msghdr+0x108/0x2c0 [ 475.662123][T12759] do_recvmmsg+0x1063/0x2120 [ 475.662123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 475.662123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 475.662123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 475.662123][T12759] do_fast_syscall_32+0x3c/0x80 [ 475.662123][T12759] do_SYSENTER_32+0x1b/0x20 [ 475.662123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.662123][T12759] [ 475.662123][T12759] Uninit was stored to memory at: [ 475.662123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 475.662123][T12759] __msan_chain_origin+0xcb/0x140 [ 475.662123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 475.662123][T12759] get_compat_msghdr+0x108/0x2c0 [ 475.662123][T12759] do_recvmmsg+0x1063/0x2120 [ 475.662123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 475.662123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 475.662123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 475.662123][T12759] do_fast_syscall_32+0x3c/0x80 [ 475.662123][T12759] do_SYSENTER_32+0x1b/0x20 [ 475.662123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.662123][T12759] [ 475.662123][T12759] Uninit was stored to memory at: [ 475.662123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 475.662123][T12759] __msan_chain_origin+0xcb/0x140 [ 475.662123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 475.662123][T12759] get_compat_msghdr+0x108/0x2c0 [ 475.662123][T12759] do_recvmmsg+0x1063/0x2120 [ 475.662123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 475.662123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 475.662123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 475.662123][T12759] do_fast_syscall_32+0x3c/0x80 [ 475.662123][T12759] do_SYSENTER_32+0x1b/0x20 [ 475.662123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.662123][T12759] [ 475.662123][T12759] Uninit was stored to memory at: [ 475.662123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 475.662123][T12759] __msan_chain_origin+0xcb/0x140 [ 475.662123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 475.662123][T12759] get_compat_msghdr+0x108/0x2c0 [ 475.662123][T12759] do_recvmmsg+0x1063/0x2120 [ 475.662123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 475.662123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 475.662123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 475.662123][T12759] do_fast_syscall_32+0x3c/0x80 [ 475.662123][T12759] do_SYSENTER_32+0x1b/0x20 [ 475.662123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.662123][T12759] [ 475.662123][T12759] Uninit was stored to memory at: [ 475.662123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 475.662123][T12759] __msan_chain_origin+0xcb/0x140 [ 475.662123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 475.662123][T12759] get_compat_msghdr+0x108/0x2c0 [ 475.662123][T12759] do_recvmmsg+0x1063/0x2120 [ 475.662123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 475.662123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 475.662123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 475.662123][T12759] do_fast_syscall_32+0x3c/0x80 [ 475.662123][T12759] do_SYSENTER_32+0x1b/0x20 [ 475.662123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.662123][T12759] [ 475.662123][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 475.662123][T12759] do_recvmmsg+0xc1/0x2120 [ 475.662123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 476.507126][T12759] not chained 1390000 origins [ 476.511827][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 476.512122][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.512122][T12759] Call Trace: [ 476.512122][T12759] dump_stack+0x25a/0x2f6 [ 476.512122][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 476.512122][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 476.512122][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 476.512122][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 476.512122][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 476.512122][T12759] ? release_sock+0x2b5/0x2e0 [ 476.512122][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 476.512122][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 476.512122][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 476.512122][T12759] ? should_fail+0x75/0x9c0 [ 476.512122][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 476.512122][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 476.512122][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 476.512122][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 476.512122][T12759] ? _copy_from_user+0x219/0x310 [ 476.512122][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 476.512122][T12759] __msan_chain_origin+0xcb/0x140 [ 476.512122][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 476.512122][T12759] get_compat_msghdr+0x108/0x2c0 [ 476.512122][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 476.512122][T12759] do_recvmmsg+0x1063/0x2120 [ 476.512122][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 476.512122][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 476.512122][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 476.512122][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 476.512122][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 476.512122][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 476.512122][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 476.512122][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 476.512122][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 476.512122][T12759] __do_fast_syscall_32+0x96/0xe0 [ 476.512122][T12759] do_fast_syscall_32+0x3c/0x80 [ 476.512122][T12759] do_SYSENTER_32+0x1b/0x20 [ 476.512122][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.512122][T12759] RIP: 0023:0xf6f46549 [ 476.512122][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 476.512122][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 476.512122][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 476.512122][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.512122][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.512122][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 476.512122][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.512122][T12759] Uninit was stored to memory at: [ 476.512122][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 476.512122][T12759] __msan_chain_origin+0xcb/0x140 [ 476.512122][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 476.512122][T12759] get_compat_msghdr+0x108/0x2c0 [ 476.512122][T12759] do_recvmmsg+0x1063/0x2120 [ 476.512122][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 476.512122][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 476.512122][T12759] __do_fast_syscall_32+0x96/0xe0 [ 476.512122][T12759] do_fast_syscall_32+0x3c/0x80 [ 476.512122][T12759] do_SYSENTER_32+0x1b/0x20 [ 476.512122][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.512122][T12759] [ 476.512122][T12759] Uninit was stored to memory at: [ 476.512122][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 476.512122][T12759] __msan_chain_origin+0xcb/0x140 [ 476.512122][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 476.512122][T12759] get_compat_msghdr+0x108/0x2c0 [ 476.512122][T12759] do_recvmmsg+0x1063/0x2120 [ 476.512122][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 476.512122][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 476.512122][T12759] __do_fast_syscall_32+0x96/0xe0 [ 476.512122][T12759] do_fast_syscall_32+0x3c/0x80 [ 476.512122][T12759] do_SYSENTER_32+0x1b/0x20 [ 476.512122][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.512122][T12759] [ 476.512122][T12759] Uninit was stored to memory at: [ 476.512122][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 476.512122][T12759] __msan_chain_origin+0xcb/0x140 [ 476.512122][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 476.512122][T12759] get_compat_msghdr+0x108/0x2c0 [ 476.512122][T12759] do_recvmmsg+0x1063/0x2120 [ 476.512122][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 476.512122][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 476.512122][T12759] __do_fast_syscall_32+0x96/0xe0 [ 476.512122][T12759] do_fast_syscall_32+0x3c/0x80 [ 476.512122][T12759] do_SYSENTER_32+0x1b/0x20 [ 476.512122][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.512122][T12759] [ 476.512122][T12759] Uninit was stored to memory at: [ 476.512122][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 476.512122][T12759] __msan_chain_origin+0xcb/0x140 [ 476.512122][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 476.512122][T12759] get_compat_msghdr+0x108/0x2c0 [ 476.512122][T12759] do_recvmmsg+0x1063/0x2120 [ 476.512122][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 476.512122][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 476.512122][T12759] __do_fast_syscall_32+0x96/0xe0 [ 476.512122][T12759] do_fast_syscall_32+0x3c/0x80 [ 476.512122][T12759] do_SYSENTER_32+0x1b/0x20 [ 476.512122][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.512122][T12759] [ 476.512122][T12759] Uninit was stored to memory at: [ 476.512122][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 476.512122][T12759] __msan_chain_origin+0xcb/0x140 [ 476.512122][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 476.512122][T12759] get_compat_msghdr+0x108/0x2c0 [ 476.512122][T12759] do_recvmmsg+0x1063/0x2120 [ 476.512122][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 476.512122][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 476.512122][T12759] __do_fast_syscall_32+0x96/0xe0 [ 476.512122][T12759] do_fast_syscall_32+0x3c/0x80 [ 476.512122][T12759] do_SYSENTER_32+0x1b/0x20 [ 476.512122][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.512122][T12759] [ 476.512122][T12759] Uninit was stored to memory at: [ 476.512122][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 476.512122][T12759] __msan_chain_origin+0xcb/0x140 [ 476.512122][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 476.512122][T12759] get_compat_msghdr+0x108/0x2c0 [ 476.512122][T12759] do_recvmmsg+0x1063/0x2120 [ 476.512122][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 476.512122][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 476.512122][T12759] __do_fast_syscall_32+0x96/0xe0 [ 476.512122][T12759] do_fast_syscall_32+0x3c/0x80 [ 476.512122][T12759] do_SYSENTER_32+0x1b/0x20 [ 476.512122][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.512122][T12759] [ 476.512122][T12759] Uninit was stored to memory at: [ 476.512122][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 476.512122][T12759] __msan_chain_origin+0xcb/0x140 [ 476.512122][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 476.512122][T12759] get_compat_msghdr+0x108/0x2c0 [ 476.512122][T12759] do_recvmmsg+0x1063/0x2120 [ 476.512122][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 476.512122][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 476.512122][T12759] __do_fast_syscall_32+0x96/0xe0 [ 476.512122][T12759] do_fast_syscall_32+0x3c/0x80 [ 476.512122][T12759] do_SYSENTER_32+0x1b/0x20 [ 476.512122][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.512122][T12759] [ 476.512122][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 476.512122][T12759] do_recvmmsg+0xc1/0x2120 [ 476.512122][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 477.364294][T12759] not chained 1400000 origins [ 477.368990][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 477.372123][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.372123][T12759] Call Trace: [ 477.372123][T12759] dump_stack+0x25a/0x2f6 [ 477.372123][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 477.372123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 477.372123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 477.372123][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 477.372123][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 477.372123][T12759] ? release_sock+0x2b5/0x2e0 [ 477.372123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 477.372123][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 477.372123][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 477.372123][T12759] ? should_fail+0x75/0x9c0 [ 477.372123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 477.372123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 477.372123][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 477.372123][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 477.372123][T12759] ? _copy_from_user+0x219/0x310 [ 477.372123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 477.372123][T12759] __msan_chain_origin+0xcb/0x140 [ 477.372123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 477.372123][T12759] get_compat_msghdr+0x108/0x2c0 [ 477.372123][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 477.372123][T12759] do_recvmmsg+0x1063/0x2120 [ 477.372123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 477.372123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 477.372123][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 477.372123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 477.372123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 477.372123][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 477.372123][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 477.542499][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 477.542499][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 477.542499][T12759] __do_fast_syscall_32+0x96/0xe0 [ 477.542499][T12759] do_fast_syscall_32+0x3c/0x80 [ 477.542499][T12759] do_SYSENTER_32+0x1b/0x20 [ 477.542499][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.542499][T12759] RIP: 0023:0xf6f46549 [ 477.542499][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 477.542499][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 477.542499][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 477.542499][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.542499][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.542499][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 477.542499][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.542499][T12759] Uninit was stored to memory at: [ 477.542499][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 477.542499][T12759] __msan_chain_origin+0xcb/0x140 [ 477.542499][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 477.542499][T12759] get_compat_msghdr+0x108/0x2c0 [ 477.542499][T12759] do_recvmmsg+0x1063/0x2120 [ 477.542499][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 477.542499][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 477.542499][T12759] __do_fast_syscall_32+0x96/0xe0 [ 477.542499][T12759] do_fast_syscall_32+0x3c/0x80 [ 477.542499][T12759] do_SYSENTER_32+0x1b/0x20 [ 477.542499][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.542499][T12759] [ 477.542499][T12759] Uninit was stored to memory at: [ 477.542499][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 477.542499][T12759] __msan_chain_origin+0xcb/0x140 [ 477.542499][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 477.542499][T12759] get_compat_msghdr+0x108/0x2c0 [ 477.542499][T12759] do_recvmmsg+0x1063/0x2120 [ 477.542499][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 477.542499][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 477.542499][T12759] __do_fast_syscall_32+0x96/0xe0 [ 477.542499][T12759] do_fast_syscall_32+0x3c/0x80 [ 477.542499][T12759] do_SYSENTER_32+0x1b/0x20 [ 477.542499][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.542499][T12759] [ 477.542499][T12759] Uninit was stored to memory at: [ 477.542499][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 477.542499][T12759] __msan_chain_origin+0xcb/0x140 [ 477.542499][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 477.542499][T12759] get_compat_msghdr+0x108/0x2c0 [ 477.542499][T12759] do_recvmmsg+0x1063/0x2120 [ 477.542499][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 477.542499][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 477.542499][T12759] __do_fast_syscall_32+0x96/0xe0 [ 477.542499][T12759] do_fast_syscall_32+0x3c/0x80 [ 477.542499][T12759] do_SYSENTER_32+0x1b/0x20 [ 477.542499][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.542499][T12759] [ 477.542499][T12759] Uninit was stored to memory at: [ 477.542499][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 477.542499][T12759] __msan_chain_origin+0xcb/0x140 [ 477.542499][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 477.542499][T12759] get_compat_msghdr+0x108/0x2c0 [ 477.542499][T12759] do_recvmmsg+0x1063/0x2120 [ 477.542499][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 477.542499][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 477.542499][T12759] __do_fast_syscall_32+0x96/0xe0 [ 477.542499][T12759] do_fast_syscall_32+0x3c/0x80 [ 477.542499][T12759] do_SYSENTER_32+0x1b/0x20 [ 477.542499][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.542499][T12759] [ 477.542499][T12759] Uninit was stored to memory at: [ 477.542499][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 477.542499][T12759] __msan_chain_origin+0xcb/0x140 [ 477.542499][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 477.542499][T12759] get_compat_msghdr+0x108/0x2c0 [ 477.542499][T12759] do_recvmmsg+0x1063/0x2120 [ 477.542499][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 477.542499][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 477.542499][T12759] __do_fast_syscall_32+0x96/0xe0 [ 477.542499][T12759] do_fast_syscall_32+0x3c/0x80 [ 477.542499][T12759] do_SYSENTER_32+0x1b/0x20 [ 477.542499][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.542499][T12759] [ 477.542499][T12759] Uninit was stored to memory at: [ 477.542499][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 477.542499][T12759] __msan_chain_origin+0xcb/0x140 [ 477.542499][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 477.542499][T12759] get_compat_msghdr+0x108/0x2c0 [ 477.542499][T12759] do_recvmmsg+0x1063/0x2120 [ 477.542499][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 477.542499][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 477.542499][T12759] __do_fast_syscall_32+0x96/0xe0 [ 477.542499][T12759] do_fast_syscall_32+0x3c/0x80 [ 477.542499][T12759] do_SYSENTER_32+0x1b/0x20 [ 477.542499][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.542499][T12759] [ 477.542499][T12759] Uninit was stored to memory at: [ 477.542499][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 477.542499][T12759] __msan_chain_origin+0xcb/0x140 [ 477.542499][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 477.542499][T12759] get_compat_msghdr+0x108/0x2c0 [ 477.542499][T12759] do_recvmmsg+0x1063/0x2120 [ 477.542499][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 477.542499][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 477.542499][T12759] __do_fast_syscall_32+0x96/0xe0 [ 477.542499][T12759] do_fast_syscall_32+0x3c/0x80 [ 477.542499][T12759] do_SYSENTER_32+0x1b/0x20 [ 477.542499][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.542499][T12759] [ 477.542499][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 477.542499][T12759] do_recvmmsg+0xc1/0x2120 [ 477.542499][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 478.209866][T12759] not chained 1410000 origins [ 478.212119][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 478.212119][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.212119][T12759] Call Trace: [ 478.212119][T12759] dump_stack+0x25a/0x2f6 [ 478.212119][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 478.212119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 478.212119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 478.212119][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 478.212119][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 478.212119][T12759] ? release_sock+0x2b5/0x2e0 [ 478.212119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 478.212119][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 478.212119][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 478.212119][T12759] ? should_fail+0x75/0x9c0 [ 478.212119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 478.212119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 478.212119][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 478.212119][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 478.212119][T12759] ? _copy_from_user+0x219/0x310 [ 478.212119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 478.212119][T12759] __msan_chain_origin+0xcb/0x140 [ 478.212119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 478.212119][T12759] get_compat_msghdr+0x108/0x2c0 [ 478.212119][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 478.212119][T12759] do_recvmmsg+0x1063/0x2120 [ 478.212119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 478.212119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 478.212119][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 478.212119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 478.212119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 478.212119][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 478.212119][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 478.212119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 478.212119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 478.212119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 478.212119][T12759] do_fast_syscall_32+0x3c/0x80 [ 478.212119][T12759] do_SYSENTER_32+0x1b/0x20 [ 478.212119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.212119][T12759] RIP: 0023:0xf6f46549 [ 478.212119][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 478.212119][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 478.212119][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 478.212119][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.212119][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.212119][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 478.212119][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.212119][T12759] Uninit was stored to memory at: [ 478.212119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 478.212119][T12759] __msan_chain_origin+0xcb/0x140 [ 478.212119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 478.212119][T12759] get_compat_msghdr+0x108/0x2c0 [ 478.212119][T12759] do_recvmmsg+0x1063/0x2120 [ 478.212119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 478.212119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 478.212119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 478.212119][T12759] do_fast_syscall_32+0x3c/0x80 [ 478.212119][T12759] do_SYSENTER_32+0x1b/0x20 [ 478.212119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.212119][T12759] [ 478.212119][T12759] Uninit was stored to memory at: [ 478.212119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 478.212119][T12759] __msan_chain_origin+0xcb/0x140 [ 478.212119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 478.212119][T12759] get_compat_msghdr+0x108/0x2c0 [ 478.212119][T12759] do_recvmmsg+0x1063/0x2120 [ 478.212119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 478.212119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 478.212119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 478.212119][T12759] do_fast_syscall_32+0x3c/0x80 [ 478.212119][T12759] do_SYSENTER_32+0x1b/0x20 [ 478.212119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.212119][T12759] [ 478.212119][T12759] Uninit was stored to memory at: [ 478.212119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 478.212119][T12759] __msan_chain_origin+0xcb/0x140 [ 478.212119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 478.212119][T12759] get_compat_msghdr+0x108/0x2c0 [ 478.212119][T12759] do_recvmmsg+0x1063/0x2120 [ 478.212119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 478.212119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 478.212119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 478.212119][T12759] do_fast_syscall_32+0x3c/0x80 [ 478.212119][T12759] do_SYSENTER_32+0x1b/0x20 [ 478.212119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.212119][T12759] [ 478.212119][T12759] Uninit was stored to memory at: [ 478.212119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 478.212119][T12759] __msan_chain_origin+0xcb/0x140 [ 478.212119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 478.212119][T12759] get_compat_msghdr+0x108/0x2c0 [ 478.212119][T12759] do_recvmmsg+0x1063/0x2120 [ 478.212119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 478.212119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 478.212119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 478.212119][T12759] do_fast_syscall_32+0x3c/0x80 [ 478.212119][T12759] do_SYSENTER_32+0x1b/0x20 [ 478.212119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.212119][T12759] [ 478.212119][T12759] Uninit was stored to memory at: [ 478.212119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 478.212119][T12759] __msan_chain_origin+0xcb/0x140 [ 478.212119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 478.212119][T12759] get_compat_msghdr+0x108/0x2c0 [ 478.212119][T12759] do_recvmmsg+0x1063/0x2120 [ 478.212119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 478.212119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 478.212119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 478.212119][T12759] do_fast_syscall_32+0x3c/0x80 [ 478.212119][T12759] do_SYSENTER_32+0x1b/0x20 [ 478.212119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.212119][T12759] [ 478.212119][T12759] Uninit was stored to memory at: [ 478.212119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 478.212119][T12759] __msan_chain_origin+0xcb/0x140 [ 478.212119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 478.212119][T12759] get_compat_msghdr+0x108/0x2c0 [ 478.212119][T12759] do_recvmmsg+0x1063/0x2120 [ 478.212119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 478.212119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 478.212119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 478.212119][T12759] do_fast_syscall_32+0x3c/0x80 [ 478.212119][T12759] do_SYSENTER_32+0x1b/0x20 [ 478.212119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.212119][T12759] [ 478.212119][T12759] Uninit was stored to memory at: [ 478.212119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 478.212119][T12759] __msan_chain_origin+0xcb/0x140 [ 478.212119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 478.212119][T12759] get_compat_msghdr+0x108/0x2c0 [ 478.212119][T12759] do_recvmmsg+0x1063/0x2120 [ 478.212119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 478.212119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 478.212119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 478.212119][T12759] do_fast_syscall_32+0x3c/0x80 [ 478.212119][T12759] do_SYSENTER_32+0x1b/0x20 [ 478.212119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.212119][T12759] [ 478.212119][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 478.212119][T12759] do_recvmmsg+0xc1/0x2120 [ 478.212119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.056572][T12759] not chained 1420000 origins [ 479.061269][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 479.062118][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.062118][T12759] Call Trace: [ 479.062118][T12759] dump_stack+0x25a/0x2f6 [ 479.062118][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 479.062118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.062118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 479.062118][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 479.062118][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 479.062118][T12759] ? release_sock+0x2b5/0x2e0 [ 479.062118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.062118][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 479.062118][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 479.062118][T12759] ? should_fail+0x75/0x9c0 [ 479.062118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.062118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 479.062118][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 479.062118][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 479.062118][T12759] ? _copy_from_user+0x219/0x310 [ 479.062118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.062118][T12759] __msan_chain_origin+0xcb/0x140 [ 479.062118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.062118][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.062118][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 479.062118][T12759] do_recvmmsg+0x1063/0x2120 [ 479.062118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 479.062118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.062118][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 479.062118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.062118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 479.062118][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 479.062118][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.062118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.062118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.062118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.062118][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.062118][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.062118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.062118][T12759] RIP: 0023:0xf6f46549 [ 479.062118][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 479.062118][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 479.062118][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 479.062118][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.062118][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.062118][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 479.062118][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.062118][T12759] Uninit was stored to memory at: [ 479.062118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.062118][T12759] __msan_chain_origin+0xcb/0x140 [ 479.062118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.062118][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.062118][T12759] do_recvmmsg+0x1063/0x2120 [ 479.062118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.062118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.062118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.062118][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.062118][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.062118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.062118][T12759] [ 479.062118][T12759] Uninit was stored to memory at: [ 479.062118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.062118][T12759] __msan_chain_origin+0xcb/0x140 [ 479.062118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.062118][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.062118][T12759] do_recvmmsg+0x1063/0x2120 [ 479.062118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.062118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.062118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.062118][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.062118][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.062118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.062118][T12759] [ 479.062118][T12759] Uninit was stored to memory at: [ 479.062118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.062118][T12759] __msan_chain_origin+0xcb/0x140 [ 479.062118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.062118][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.062118][T12759] do_recvmmsg+0x1063/0x2120 [ 479.062118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.062118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.062118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.062118][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.062118][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.062118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.062118][T12759] [ 479.062118][T12759] Uninit was stored to memory at: [ 479.542481][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.542481][T12759] __msan_chain_origin+0xcb/0x140 [ 479.542481][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.542481][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.542481][T12759] do_recvmmsg+0x1063/0x2120 [ 479.542481][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.542481][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.542481][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.542481][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.542481][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.542481][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.542481][T12759] [ 479.542481][T12759] Uninit was stored to memory at: [ 479.542481][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.542481][T12759] __msan_chain_origin+0xcb/0x140 [ 479.542481][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.542481][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.542481][T12759] do_recvmmsg+0x1063/0x2120 [ 479.542481][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.542481][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.542481][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.542481][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.542481][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.542481][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.542481][T12759] [ 479.542481][T12759] Uninit was stored to memory at: [ 479.542481][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.542481][T12759] __msan_chain_origin+0xcb/0x140 [ 479.542481][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.542481][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.542481][T12759] do_recvmmsg+0x1063/0x2120 [ 479.542481][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.542481][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.542481][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.542481][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.542481][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.542481][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.542481][T12759] [ 479.542481][T12759] Uninit was stored to memory at: [ 479.542481][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.542481][T12759] __msan_chain_origin+0xcb/0x140 [ 479.542481][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.542481][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.542481][T12759] do_recvmmsg+0x1063/0x2120 [ 479.542481][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.542481][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.542481][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.542481][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.542481][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.542481][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.542481][T12759] [ 479.542481][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 479.542481][T12759] do_recvmmsg+0xc1/0x2120 [ 479.542481][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.908779][T12759] not chained 1430000 origins [ 479.912121][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 479.912121][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.912121][T12759] Call Trace: [ 479.912121][T12759] dump_stack+0x25a/0x2f6 [ 479.912121][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 479.912121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.912121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 479.912121][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 479.912121][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 479.912121][T12759] ? release_sock+0x2b5/0x2e0 [ 479.912121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.912121][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 479.912121][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 479.912121][T12759] ? should_fail+0x75/0x9c0 [ 479.912121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.912121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 479.912121][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 479.912121][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 479.912121][T12759] ? _copy_from_user+0x219/0x310 [ 479.912121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.912121][T12759] __msan_chain_origin+0xcb/0x140 [ 479.912121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.912121][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.912121][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 479.912121][T12759] do_recvmmsg+0x1063/0x2120 [ 479.912121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 479.912121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.912121][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 479.912121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 479.912121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 479.912121][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 479.912121][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.912121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.912121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.912121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.912121][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.912121][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.912121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.912121][T12759] RIP: 0023:0xf6f46549 [ 479.912121][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 479.912121][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 479.912121][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 479.912121][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.912121][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.912121][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 479.912121][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.912121][T12759] Uninit was stored to memory at: [ 479.912121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.912121][T12759] __msan_chain_origin+0xcb/0x140 [ 479.912121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.912121][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.912121][T12759] do_recvmmsg+0x1063/0x2120 [ 479.912121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.912121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.912121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.912121][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.912121][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.912121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.912121][T12759] [ 479.912121][T12759] Uninit was stored to memory at: [ 479.912121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.912121][T12759] __msan_chain_origin+0xcb/0x140 [ 479.912121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.912121][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.912121][T12759] do_recvmmsg+0x1063/0x2120 [ 479.912121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.912121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.912121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.912121][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.912121][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.912121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.912121][T12759] [ 479.912121][T12759] Uninit was stored to memory at: [ 479.912121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.912121][T12759] __msan_chain_origin+0xcb/0x140 [ 479.912121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.912121][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.912121][T12759] do_recvmmsg+0x1063/0x2120 [ 479.912121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.912121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.912121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.912121][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.912121][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.912121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.912121][T12759] [ 479.912121][T12759] Uninit was stored to memory at: [ 479.912121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.912121][T12759] __msan_chain_origin+0xcb/0x140 [ 479.912121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.912121][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.912121][T12759] do_recvmmsg+0x1063/0x2120 [ 479.912121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.912121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.912121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.912121][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.912121][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.912121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.912121][T12759] [ 479.912121][T12759] Uninit was stored to memory at: [ 479.912121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.912121][T12759] __msan_chain_origin+0xcb/0x140 [ 479.912121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.912121][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.912121][T12759] do_recvmmsg+0x1063/0x2120 [ 479.912121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.912121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.912121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.912121][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.912121][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.912121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.912121][T12759] [ 479.912121][T12759] Uninit was stored to memory at: [ 479.912121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.912121][T12759] __msan_chain_origin+0xcb/0x140 [ 479.912121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.912121][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.912121][T12759] do_recvmmsg+0x1063/0x2120 [ 479.912121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.912121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.912121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.912121][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.912121][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.912121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.912121][T12759] [ 479.912121][T12759] Uninit was stored to memory at: [ 479.912121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 479.912121][T12759] __msan_chain_origin+0xcb/0x140 [ 479.912121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 479.912121][T12759] get_compat_msghdr+0x108/0x2c0 [ 479.912121][T12759] do_recvmmsg+0x1063/0x2120 [ 479.912121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 479.912121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 479.912121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 479.912121][T12759] do_fast_syscall_32+0x3c/0x80 [ 479.912121][T12759] do_SYSENTER_32+0x1b/0x20 [ 479.912121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.912121][T12759] [ 479.912121][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 479.912121][T12759] do_recvmmsg+0xc1/0x2120 [ 479.912121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 480.776417][T12759] not chained 1440000 origins [ 480.781122][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 480.782125][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.782125][T12759] Call Trace: [ 480.782125][T12759] dump_stack+0x25a/0x2f6 [ 480.782125][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 480.782125][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 480.782125][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 480.782125][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 480.782125][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 480.782125][T12759] ? release_sock+0x2b5/0x2e0 [ 480.782125][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 480.782125][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 480.782125][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 480.782125][T12759] ? should_fail+0x75/0x9c0 [ 480.782125][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 480.782125][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 480.782125][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 480.782125][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 480.782125][T12759] ? _copy_from_user+0x219/0x310 [ 480.782125][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 480.782125][T12759] __msan_chain_origin+0xcb/0x140 [ 480.782125][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 480.782125][T12759] get_compat_msghdr+0x108/0x2c0 [ 480.782125][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 480.782125][T12759] do_recvmmsg+0x1063/0x2120 [ 480.782125][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 480.782125][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 480.782125][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 480.782125][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 480.782125][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 480.782125][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 480.782125][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 480.782125][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 480.782125][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 480.782125][T12759] __do_fast_syscall_32+0x96/0xe0 [ 480.782125][T12759] do_fast_syscall_32+0x3c/0x80 [ 480.782125][T12759] do_SYSENTER_32+0x1b/0x20 [ 480.782125][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.782125][T12759] RIP: 0023:0xf6f46549 [ 480.782125][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 480.782125][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 480.782125][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 480.782125][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 480.782125][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.782125][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 480.782125][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.782125][T12759] Uninit was stored to memory at: [ 480.782125][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 480.782125][T12759] __msan_chain_origin+0xcb/0x140 [ 480.782125][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 480.782125][T12759] get_compat_msghdr+0x108/0x2c0 [ 480.782125][T12759] do_recvmmsg+0x1063/0x2120 [ 480.782125][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 480.782125][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 480.782125][T12759] __do_fast_syscall_32+0x96/0xe0 [ 480.782125][T12759] do_fast_syscall_32+0x3c/0x80 [ 480.782125][T12759] do_SYSENTER_32+0x1b/0x20 [ 480.782125][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.782125][T12759] [ 480.782125][T12759] Uninit was stored to memory at: [ 480.782125][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 480.782125][T12759] __msan_chain_origin+0xcb/0x140 [ 480.782125][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 480.782125][T12759] get_compat_msghdr+0x108/0x2c0 [ 480.782125][T12759] do_recvmmsg+0x1063/0x2120 [ 480.782125][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 480.782125][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 480.782125][T12759] __do_fast_syscall_32+0x96/0xe0 [ 480.782125][T12759] do_fast_syscall_32+0x3c/0x80 [ 480.782125][T12759] do_SYSENTER_32+0x1b/0x20 [ 480.782125][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.782125][T12759] [ 480.782125][T12759] Uninit was stored to memory at: [ 480.782125][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 480.782125][T12759] __msan_chain_origin+0xcb/0x140 [ 480.782125][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 480.782125][T12759] get_compat_msghdr+0x108/0x2c0 [ 480.782125][T12759] do_recvmmsg+0x1063/0x2120 [ 480.782125][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 480.782125][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 480.782125][T12759] __do_fast_syscall_32+0x96/0xe0 [ 480.782125][T12759] do_fast_syscall_32+0x3c/0x80 [ 480.782125][T12759] do_SYSENTER_32+0x1b/0x20 [ 480.782125][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.782125][T12759] [ 480.782125][T12759] Uninit was stored to memory at: [ 480.782125][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 480.782125][T12759] __msan_chain_origin+0xcb/0x140 [ 480.782125][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 480.782125][T12759] get_compat_msghdr+0x108/0x2c0 [ 480.782125][T12759] do_recvmmsg+0x1063/0x2120 [ 480.782125][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 480.782125][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 480.782125][T12759] __do_fast_syscall_32+0x96/0xe0 [ 480.782125][T12759] do_fast_syscall_32+0x3c/0x80 [ 480.782125][T12759] do_SYSENTER_32+0x1b/0x20 [ 480.782125][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.782125][T12759] [ 480.782125][T12759] Uninit was stored to memory at: [ 480.782125][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 480.782125][T12759] __msan_chain_origin+0xcb/0x140 [ 480.782125][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 480.782125][T12759] get_compat_msghdr+0x108/0x2c0 [ 480.782125][T12759] do_recvmmsg+0x1063/0x2120 [ 480.782125][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 480.782125][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 480.782125][T12759] __do_fast_syscall_32+0x96/0xe0 [ 480.782125][T12759] do_fast_syscall_32+0x3c/0x80 [ 480.782125][T12759] do_SYSENTER_32+0x1b/0x20 [ 480.782125][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.782125][T12759] [ 480.782125][T12759] Uninit was stored to memory at: [ 480.782125][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 480.782125][T12759] __msan_chain_origin+0xcb/0x140 [ 480.782125][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 480.782125][T12759] get_compat_msghdr+0x108/0x2c0 [ 480.782125][T12759] do_recvmmsg+0x1063/0x2120 [ 480.782125][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 480.782125][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 480.782125][T12759] __do_fast_syscall_32+0x96/0xe0 [ 480.782125][T12759] do_fast_syscall_32+0x3c/0x80 [ 480.782125][T12759] do_SYSENTER_32+0x1b/0x20 [ 480.782125][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.782125][T12759] [ 480.782125][T12759] Uninit was stored to memory at: [ 480.782125][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 480.782125][T12759] __msan_chain_origin+0xcb/0x140 [ 480.782125][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 480.782125][T12759] get_compat_msghdr+0x108/0x2c0 [ 480.782125][T12759] do_recvmmsg+0x1063/0x2120 [ 480.782125][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 480.782125][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 480.782125][T12759] __do_fast_syscall_32+0x96/0xe0 [ 480.782125][T12759] do_fast_syscall_32+0x3c/0x80 [ 480.782125][T12759] do_SYSENTER_32+0x1b/0x20 [ 480.782125][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.782125][T12759] [ 480.782125][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 480.782125][T12759] do_recvmmsg+0xc1/0x2120 [ 480.782125][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 481.630409][T12759] not chained 1450000 origins [ 481.632122][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 481.632122][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.632122][T12759] Call Trace: [ 481.632122][T12759] dump_stack+0x25a/0x2f6 [ 481.632122][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 481.632122][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 481.632122][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 481.632122][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 481.632122][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 481.632122][T12759] ? release_sock+0x2b5/0x2e0 [ 481.632122][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 481.698689][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 481.698689][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 481.698689][T12759] ? should_fail+0x75/0x9c0 [ 481.698689][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 481.698689][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 481.698689][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 481.698689][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 481.698689][T12759] ? _copy_from_user+0x219/0x310 [ 481.698689][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 481.698689][T12759] __msan_chain_origin+0xcb/0x140 [ 481.698689][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 481.698689][T12759] get_compat_msghdr+0x108/0x2c0 [ 481.698689][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 481.698689][T12759] do_recvmmsg+0x1063/0x2120 [ 481.698689][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 481.698689][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 481.698689][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 481.698689][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 481.698689][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 481.698689][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 481.698689][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 481.698689][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 481.698689][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 481.698689][T12759] __do_fast_syscall_32+0x96/0xe0 [ 481.698689][T12759] do_fast_syscall_32+0x3c/0x80 [ 481.698689][T12759] do_SYSENTER_32+0x1b/0x20 [ 481.698689][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.698689][T12759] RIP: 0023:0xf6f46549 [ 481.698689][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 481.698689][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 481.698689][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 481.698689][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.698689][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.698689][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 481.698689][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.698689][T12759] Uninit was stored to memory at: [ 481.698689][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 481.698689][T12759] __msan_chain_origin+0xcb/0x140 [ 481.698689][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 481.698689][T12759] get_compat_msghdr+0x108/0x2c0 [ 481.698689][T12759] do_recvmmsg+0x1063/0x2120 [ 481.698689][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 481.698689][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 481.698689][T12759] __do_fast_syscall_32+0x96/0xe0 [ 481.698689][T12759] do_fast_syscall_32+0x3c/0x80 [ 481.698689][T12759] do_SYSENTER_32+0x1b/0x20 [ 481.698689][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.698689][T12759] [ 481.698689][T12759] Uninit was stored to memory at: [ 481.698689][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 481.698689][T12759] __msan_chain_origin+0xcb/0x140 [ 481.698689][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 481.698689][T12759] get_compat_msghdr+0x108/0x2c0 [ 481.698689][T12759] do_recvmmsg+0x1063/0x2120 [ 481.698689][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 481.698689][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 481.698689][T12759] __do_fast_syscall_32+0x96/0xe0 [ 481.698689][T12759] do_fast_syscall_32+0x3c/0x80 [ 481.698689][T12759] do_SYSENTER_32+0x1b/0x20 [ 481.698689][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.698689][T12759] [ 481.698689][T12759] Uninit was stored to memory at: [ 481.698689][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 481.698689][T12759] __msan_chain_origin+0xcb/0x140 [ 481.698689][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 481.698689][T12759] get_compat_msghdr+0x108/0x2c0 [ 481.698689][T12759] do_recvmmsg+0x1063/0x2120 [ 481.698689][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 481.698689][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 481.698689][T12759] __do_fast_syscall_32+0x96/0xe0 [ 481.698689][T12759] do_fast_syscall_32+0x3c/0x80 [ 481.698689][T12759] do_SYSENTER_32+0x1b/0x20 [ 481.698689][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.698689][T12759] [ 481.698689][T12759] Uninit was stored to memory at: [ 481.698689][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 481.698689][T12759] __msan_chain_origin+0xcb/0x140 [ 481.698689][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 481.698689][T12759] get_compat_msghdr+0x108/0x2c0 [ 481.698689][T12759] do_recvmmsg+0x1063/0x2120 [ 481.698689][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 481.698689][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 481.698689][T12759] __do_fast_syscall_32+0x96/0xe0 [ 481.698689][T12759] do_fast_syscall_32+0x3c/0x80 [ 481.698689][T12759] do_SYSENTER_32+0x1b/0x20 [ 481.698689][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.698689][T12759] [ 481.698689][T12759] Uninit was stored to memory at: [ 481.698689][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 481.698689][T12759] __msan_chain_origin+0xcb/0x140 [ 481.698689][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 481.698689][T12759] get_compat_msghdr+0x108/0x2c0 [ 481.698689][T12759] do_recvmmsg+0x1063/0x2120 [ 481.698689][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 481.698689][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 481.698689][T12759] __do_fast_syscall_32+0x96/0xe0 [ 481.698689][T12759] do_fast_syscall_32+0x3c/0x80 [ 481.698689][T12759] do_SYSENTER_32+0x1b/0x20 [ 481.698689][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.698689][T12759] [ 481.698689][T12759] Uninit was stored to memory at: [ 481.698689][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 481.698689][T12759] __msan_chain_origin+0xcb/0x140 [ 481.698689][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 481.698689][T12759] get_compat_msghdr+0x108/0x2c0 [ 481.698689][T12759] do_recvmmsg+0x1063/0x2120 [ 481.698689][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 481.698689][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 481.698689][T12759] __do_fast_syscall_32+0x96/0xe0 [ 481.698689][T12759] do_fast_syscall_32+0x3c/0x80 [ 481.698689][T12759] do_SYSENTER_32+0x1b/0x20 [ 481.698689][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.698689][T12759] [ 481.698689][T12759] Uninit was stored to memory at: [ 481.698689][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 481.698689][T12759] __msan_chain_origin+0xcb/0x140 [ 481.698689][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 481.698689][T12759] get_compat_msghdr+0x108/0x2c0 [ 481.698689][T12759] do_recvmmsg+0x1063/0x2120 [ 481.698689][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 481.698689][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 481.698689][T12759] __do_fast_syscall_32+0x96/0xe0 [ 481.698689][T12759] do_fast_syscall_32+0x3c/0x80 [ 481.698689][T12759] do_SYSENTER_32+0x1b/0x20 [ 481.698689][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.698689][T12759] [ 481.698689][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 481.698689][T12759] do_recvmmsg+0xc1/0x2120 [ 481.698689][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 482.491231][T12759] not chained 1460000 origins [ 482.492108][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 482.492108][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.492108][T12759] Call Trace: [ 482.492108][T12759] dump_stack+0x25a/0x2f6 [ 482.492108][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 482.492108][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 482.492108][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 482.492108][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 482.492108][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 482.492108][T12759] ? release_sock+0x2b5/0x2e0 [ 482.492108][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 482.492108][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 482.492108][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 482.492108][T12759] ? should_fail+0x75/0x9c0 [ 482.492108][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 482.492108][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 482.492108][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 482.492108][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 482.492108][T12759] ? _copy_from_user+0x219/0x310 [ 482.492108][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 482.492108][T12759] __msan_chain_origin+0xcb/0x140 [ 482.492108][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 482.492108][T12759] get_compat_msghdr+0x108/0x2c0 [ 482.492108][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 482.492108][T12759] do_recvmmsg+0x1063/0x2120 [ 482.492108][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 482.492108][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 482.492108][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 482.492108][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 482.492108][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 482.492108][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 482.492108][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 482.492108][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 482.492108][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 482.492108][T12759] __do_fast_syscall_32+0x96/0xe0 [ 482.492108][T12759] do_fast_syscall_32+0x3c/0x80 [ 482.492108][T12759] do_SYSENTER_32+0x1b/0x20 [ 482.492108][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.492108][T12759] RIP: 0023:0xf6f46549 [ 482.492108][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 482.492108][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 482.492108][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 482.492108][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 482.492108][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 482.492108][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 482.492108][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 482.492108][T12759] Uninit was stored to memory at: [ 482.492108][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 482.492108][T12759] __msan_chain_origin+0xcb/0x140 [ 482.492108][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 482.492108][T12759] get_compat_msghdr+0x108/0x2c0 [ 482.492108][T12759] do_recvmmsg+0x1063/0x2120 [ 482.492108][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 482.492108][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 482.492108][T12759] __do_fast_syscall_32+0x96/0xe0 [ 482.492108][T12759] do_fast_syscall_32+0x3c/0x80 [ 482.492108][T12759] do_SYSENTER_32+0x1b/0x20 [ 482.492108][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.492108][T12759] [ 482.492108][T12759] Uninit was stored to memory at: [ 482.492108][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 482.492108][T12759] __msan_chain_origin+0xcb/0x140 [ 482.492108][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 482.492108][T12759] get_compat_msghdr+0x108/0x2c0 [ 482.492108][T12759] do_recvmmsg+0x1063/0x2120 [ 482.492108][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 482.492108][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 482.492108][T12759] __do_fast_syscall_32+0x96/0xe0 [ 482.492108][T12759] do_fast_syscall_32+0x3c/0x80 [ 482.492108][T12759] do_SYSENTER_32+0x1b/0x20 [ 482.492108][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.492108][T12759] [ 482.492108][T12759] Uninit was stored to memory at: [ 482.492108][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 482.492108][T12759] __msan_chain_origin+0xcb/0x140 [ 482.492108][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 482.492108][T12759] get_compat_msghdr+0x108/0x2c0 [ 482.492108][T12759] do_recvmmsg+0x1063/0x2120 [ 482.492108][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 482.492108][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 482.492108][T12759] __do_fast_syscall_32+0x96/0xe0 [ 482.492108][T12759] do_fast_syscall_32+0x3c/0x80 [ 482.492108][T12759] do_SYSENTER_32+0x1b/0x20 [ 482.492108][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.492108][T12759] [ 482.492108][T12759] Uninit was stored to memory at: [ 482.492108][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 482.492108][T12759] __msan_chain_origin+0xcb/0x140 [ 482.492108][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 482.492108][T12759] get_compat_msghdr+0x108/0x2c0 [ 482.492108][T12759] do_recvmmsg+0x1063/0x2120 [ 482.492108][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 482.492108][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 482.492108][T12759] __do_fast_syscall_32+0x96/0xe0 [ 482.492108][T12759] do_fast_syscall_32+0x3c/0x80 [ 482.492108][T12759] do_SYSENTER_32+0x1b/0x20 [ 482.492108][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.492108][T12759] [ 482.492108][T12759] Uninit was stored to memory at: [ 482.492108][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 482.492108][T12759] __msan_chain_origin+0xcb/0x140 [ 482.492108][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 482.492108][T12759] get_compat_msghdr+0x108/0x2c0 [ 482.492108][T12759] do_recvmmsg+0x1063/0x2120 [ 482.492108][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 482.492108][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 482.492108][T12759] __do_fast_syscall_32+0x96/0xe0 [ 482.492108][T12759] do_fast_syscall_32+0x3c/0x80 [ 482.492108][T12759] do_SYSENTER_32+0x1b/0x20 [ 482.492108][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.492108][T12759] [ 482.492108][T12759] Uninit was stored to memory at: [ 482.492108][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 482.492108][T12759] __msan_chain_origin+0xcb/0x140 [ 482.492108][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 482.492108][T12759] get_compat_msghdr+0x108/0x2c0 [ 482.492108][T12759] do_recvmmsg+0x1063/0x2120 [ 482.492108][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 482.492108][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 482.492108][T12759] __do_fast_syscall_32+0x96/0xe0 [ 482.492108][T12759] do_fast_syscall_32+0x3c/0x80 [ 482.492108][T12759] do_SYSENTER_32+0x1b/0x20 [ 482.492108][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.492108][T12759] [ 482.492108][T12759] Uninit was stored to memory at: [ 482.492108][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 482.492108][T12759] __msan_chain_origin+0xcb/0x140 [ 482.492108][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 482.492108][T12759] get_compat_msghdr+0x108/0x2c0 [ 482.492108][T12759] do_recvmmsg+0x1063/0x2120 [ 482.492108][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 482.492108][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 482.492108][T12759] __do_fast_syscall_32+0x96/0xe0 [ 482.492108][T12759] do_fast_syscall_32+0x3c/0x80 [ 482.492108][T12759] do_SYSENTER_32+0x1b/0x20 [ 482.492108][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.492108][T12759] [ 482.492108][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 482.492108][T12759] do_recvmmsg+0xc1/0x2120 [ 482.492108][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 483.338818][T12759] not chained 1470000 origins [ 483.342121][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 483.342121][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.342121][T12759] Call Trace: [ 483.342121][T12759] dump_stack+0x25a/0x2f6 [ 483.342121][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 483.342121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 483.342121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 483.342121][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 483.342121][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 483.342121][T12759] ? release_sock+0x2b5/0x2e0 [ 483.342121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 483.342121][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 483.342121][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 483.342121][T12759] ? should_fail+0x75/0x9c0 [ 483.342121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 483.342121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 483.342121][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 483.342121][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 483.342121][T12759] ? _copy_from_user+0x219/0x310 [ 483.342121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 483.342121][T12759] __msan_chain_origin+0xcb/0x140 [ 483.342121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 483.342121][T12759] get_compat_msghdr+0x108/0x2c0 [ 483.342121][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 483.342121][T12759] do_recvmmsg+0x1063/0x2120 [ 483.342121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 483.342121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 483.342121][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 483.342121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 483.342121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 483.342121][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 483.342121][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 483.342121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 483.342121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 483.342121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 483.342121][T12759] do_fast_syscall_32+0x3c/0x80 [ 483.542487][T12759] do_SYSENTER_32+0x1b/0x20 [ 483.542487][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.542487][T12759] RIP: 0023:0xf6f46549 [ 483.542487][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 483.542487][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 483.542487][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 483.542487][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 483.542487][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.542487][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 483.542487][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.542487][T12759] Uninit was stored to memory at: [ 483.542487][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 483.542487][T12759] __msan_chain_origin+0xcb/0x140 [ 483.542487][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 483.542487][T12759] get_compat_msghdr+0x108/0x2c0 [ 483.542487][T12759] do_recvmmsg+0x1063/0x2120 [ 483.542487][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 483.542487][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 483.542487][T12759] __do_fast_syscall_32+0x96/0xe0 [ 483.542487][T12759] do_fast_syscall_32+0x3c/0x80 [ 483.542487][T12759] do_SYSENTER_32+0x1b/0x20 [ 483.542487][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.542487][T12759] [ 483.542487][T12759] Uninit was stored to memory at: [ 483.542487][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 483.542487][T12759] __msan_chain_origin+0xcb/0x140 [ 483.542487][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 483.542487][T12759] get_compat_msghdr+0x108/0x2c0 [ 483.542487][T12759] do_recvmmsg+0x1063/0x2120 [ 483.542487][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 483.542487][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 483.542487][T12759] __do_fast_syscall_32+0x96/0xe0 [ 483.542487][T12759] do_fast_syscall_32+0x3c/0x80 [ 483.542487][T12759] do_SYSENTER_32+0x1b/0x20 [ 483.542487][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.542487][T12759] [ 483.542487][T12759] Uninit was stored to memory at: [ 483.542487][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 483.542487][T12759] __msan_chain_origin+0xcb/0x140 [ 483.542487][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 483.542487][T12759] get_compat_msghdr+0x108/0x2c0 [ 483.542487][T12759] do_recvmmsg+0x1063/0x2120 [ 483.542487][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 483.542487][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 483.542487][T12759] __do_fast_syscall_32+0x96/0xe0 [ 483.542487][T12759] do_fast_syscall_32+0x3c/0x80 [ 483.542487][T12759] do_SYSENTER_32+0x1b/0x20 [ 483.542487][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.542487][T12759] [ 483.542487][T12759] Uninit was stored to memory at: [ 483.542487][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 483.542487][T12759] __msan_chain_origin+0xcb/0x140 [ 483.542487][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 483.542487][T12759] get_compat_msghdr+0x108/0x2c0 [ 483.542487][T12759] do_recvmmsg+0x1063/0x2120 [ 483.542487][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 483.542487][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 483.542487][T12759] __do_fast_syscall_32+0x96/0xe0 [ 483.542487][T12759] do_fast_syscall_32+0x3c/0x80 [ 483.542487][T12759] do_SYSENTER_32+0x1b/0x20 [ 483.542487][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.542487][T12759] [ 483.542487][T12759] Uninit was stored to memory at: [ 483.542487][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 483.542487][T12759] __msan_chain_origin+0xcb/0x140 [ 483.542487][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 483.542487][T12759] get_compat_msghdr+0x108/0x2c0 [ 483.542487][T12759] do_recvmmsg+0x1063/0x2120 [ 483.542487][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 483.542487][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 483.542487][T12759] __do_fast_syscall_32+0x96/0xe0 [ 483.542487][T12759] do_fast_syscall_32+0x3c/0x80 [ 483.542487][T12759] do_SYSENTER_32+0x1b/0x20 [ 483.542487][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.542487][T12759] [ 483.542487][T12759] Uninit was stored to memory at: [ 483.542487][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 483.542487][T12759] __msan_chain_origin+0xcb/0x140 [ 483.542487][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 483.542487][T12759] get_compat_msghdr+0x108/0x2c0 [ 483.542487][T12759] do_recvmmsg+0x1063/0x2120 [ 483.542487][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 483.542487][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 483.542487][T12759] __do_fast_syscall_32+0x96/0xe0 [ 483.542487][T12759] do_fast_syscall_32+0x3c/0x80 [ 483.542487][T12759] do_SYSENTER_32+0x1b/0x20 [ 483.542487][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.542487][T12759] [ 483.542487][T12759] Uninit was stored to memory at: [ 483.542487][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 483.542487][T12759] __msan_chain_origin+0xcb/0x140 [ 483.542487][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 483.542487][T12759] get_compat_msghdr+0x108/0x2c0 [ 483.542487][T12759] do_recvmmsg+0x1063/0x2120 [ 483.542487][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 483.542487][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 483.542487][T12759] __do_fast_syscall_32+0x96/0xe0 [ 483.542487][T12759] do_fast_syscall_32+0x3c/0x80 [ 483.542487][T12759] do_SYSENTER_32+0x1b/0x20 [ 483.542487][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.542487][T12759] [ 483.542487][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 483.542487][T12759] do_recvmmsg+0xc1/0x2120 [ 483.542487][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 484.189901][T12759] not chained 1480000 origins [ 484.192115][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 484.192115][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.192115][T12759] Call Trace: [ 484.192115][T12759] dump_stack+0x25a/0x2f6 [ 484.192115][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 484.192115][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 484.192115][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 484.192115][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 484.192115][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 484.192115][T12759] ? release_sock+0x2b5/0x2e0 [ 484.192115][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 484.192115][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 484.192115][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 484.192115][T12759] ? should_fail+0x75/0x9c0 [ 484.192115][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 484.192115][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 484.192115][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 484.192115][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 484.192115][T12759] ? _copy_from_user+0x219/0x310 [ 484.192115][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 484.192115][T12759] __msan_chain_origin+0xcb/0x140 [ 484.192115][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 484.192115][T12759] get_compat_msghdr+0x108/0x2c0 [ 484.192115][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 484.192115][T12759] do_recvmmsg+0x1063/0x2120 [ 484.192115][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 484.192115][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 484.192115][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 484.192115][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 484.192115][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 484.192115][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 484.192115][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 484.192115][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 484.192115][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 484.192115][T12759] __do_fast_syscall_32+0x96/0xe0 [ 484.192115][T12759] do_fast_syscall_32+0x3c/0x80 [ 484.192115][T12759] do_SYSENTER_32+0x1b/0x20 [ 484.192115][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.192115][T12759] RIP: 0023:0xf6f46549 [ 484.192115][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 484.192115][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 484.192115][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 484.192115][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.192115][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.192115][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 484.192115][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.192115][T12759] Uninit was stored to memory at: [ 484.192115][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 484.192115][T12759] __msan_chain_origin+0xcb/0x140 [ 484.192115][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 484.192115][T12759] get_compat_msghdr+0x108/0x2c0 [ 484.192115][T12759] do_recvmmsg+0x1063/0x2120 [ 484.192115][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 484.192115][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 484.192115][T12759] __do_fast_syscall_32+0x96/0xe0 [ 484.192115][T12759] do_fast_syscall_32+0x3c/0x80 [ 484.192115][T12759] do_SYSENTER_32+0x1b/0x20 [ 484.192115][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.192115][T12759] [ 484.192115][T12759] Uninit was stored to memory at: [ 484.192115][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 484.192115][T12759] __msan_chain_origin+0xcb/0x140 [ 484.192115][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 484.192115][T12759] get_compat_msghdr+0x108/0x2c0 [ 484.192115][T12759] do_recvmmsg+0x1063/0x2120 [ 484.192115][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 484.192115][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 484.192115][T12759] __do_fast_syscall_32+0x96/0xe0 [ 484.192115][T12759] do_fast_syscall_32+0x3c/0x80 [ 484.192115][T12759] do_SYSENTER_32+0x1b/0x20 [ 484.192115][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.192115][T12759] [ 484.192115][T12759] Uninit was stored to memory at: [ 484.192115][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 484.192115][T12759] __msan_chain_origin+0xcb/0x140 [ 484.192115][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 484.192115][T12759] get_compat_msghdr+0x108/0x2c0 [ 484.192115][T12759] do_recvmmsg+0x1063/0x2120 [ 484.192115][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 484.192115][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 484.192115][T12759] __do_fast_syscall_32+0x96/0xe0 [ 484.192115][T12759] do_fast_syscall_32+0x3c/0x80 [ 484.192115][T12759] do_SYSENTER_32+0x1b/0x20 [ 484.192115][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.192115][T12759] [ 484.192115][T12759] Uninit was stored to memory at: [ 484.192115][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 484.192115][T12759] __msan_chain_origin+0xcb/0x140 [ 484.192115][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 484.192115][T12759] get_compat_msghdr+0x108/0x2c0 [ 484.192115][T12759] do_recvmmsg+0x1063/0x2120 [ 484.192115][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 484.192115][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 484.192115][T12759] __do_fast_syscall_32+0x96/0xe0 [ 484.192115][T12759] do_fast_syscall_32+0x3c/0x80 [ 484.192115][T12759] do_SYSENTER_32+0x1b/0x20 [ 484.192115][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.192115][T12759] [ 484.192115][T12759] Uninit was stored to memory at: [ 484.192115][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 484.192115][T12759] __msan_chain_origin+0xcb/0x140 [ 484.192115][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 484.192115][T12759] get_compat_msghdr+0x108/0x2c0 [ 484.192115][T12759] do_recvmmsg+0x1063/0x2120 [ 484.192115][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 484.192115][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 484.192115][T12759] __do_fast_syscall_32+0x96/0xe0 [ 484.192115][T12759] do_fast_syscall_32+0x3c/0x80 [ 484.192115][T12759] do_SYSENTER_32+0x1b/0x20 [ 484.192115][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.192115][T12759] [ 484.192115][T12759] Uninit was stored to memory at: [ 484.192115][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 484.192115][T12759] __msan_chain_origin+0xcb/0x140 [ 484.192115][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 484.192115][T12759] get_compat_msghdr+0x108/0x2c0 [ 484.192115][T12759] do_recvmmsg+0x1063/0x2120 [ 484.192115][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 484.192115][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 484.192115][T12759] __do_fast_syscall_32+0x96/0xe0 [ 484.192115][T12759] do_fast_syscall_32+0x3c/0x80 [ 484.192115][T12759] do_SYSENTER_32+0x1b/0x20 [ 484.192115][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.192115][T12759] [ 484.192115][T12759] Uninit was stored to memory at: [ 484.192115][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 484.192115][T12759] __msan_chain_origin+0xcb/0x140 [ 484.192115][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 484.192115][T12759] get_compat_msghdr+0x108/0x2c0 [ 484.192115][T12759] do_recvmmsg+0x1063/0x2120 [ 484.192115][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 484.192115][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 484.902456][T12759] __do_fast_syscall_32+0x96/0xe0 [ 484.906129][T12759] do_fast_syscall_32+0x3c/0x80 [ 484.912848][T12759] do_SYSENTER_32+0x1b/0x20 [ 484.912848][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.924487][T12759] [ 484.924487][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 484.932751][T12759] do_recvmmsg+0xc1/0x2120 [ 484.936165][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.051171][T12759] not chained 1490000 origins [ 485.052121][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 485.052121][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.052121][T12759] Call Trace: [ 485.052121][T12759] dump_stack+0x25a/0x2f6 [ 485.052121][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 485.052121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.052121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 485.052121][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 485.052121][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 485.052121][T12759] ? release_sock+0x2b5/0x2e0 [ 485.052121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.052121][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 485.052121][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 485.052121][T12759] ? should_fail+0x75/0x9c0 [ 485.052121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.052121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 485.052121][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 485.052121][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 485.052121][T12759] ? _copy_from_user+0x219/0x310 [ 485.052121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.052121][T12759] __msan_chain_origin+0xcb/0x140 [ 485.052121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.052121][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.052121][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 485.052121][T12759] do_recvmmsg+0x1063/0x2120 [ 485.052121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 485.052121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.052121][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 485.052121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.052121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 485.052121][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 485.052121][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.052121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.052121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.052121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.052121][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.052121][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.052121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.052121][T12759] RIP: 0023:0xf6f46549 [ 485.052121][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 485.052121][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 485.052121][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 485.052121][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.052121][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.052121][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 485.052121][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.052121][T12759] Uninit was stored to memory at: [ 485.052121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.052121][T12759] __msan_chain_origin+0xcb/0x140 [ 485.052121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.052121][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.052121][T12759] do_recvmmsg+0x1063/0x2120 [ 485.052121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.052121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.052121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.052121][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.052121][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.052121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.052121][T12759] [ 485.052121][T12759] Uninit was stored to memory at: [ 485.052121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.052121][T12759] __msan_chain_origin+0xcb/0x140 [ 485.052121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.052121][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.052121][T12759] do_recvmmsg+0x1063/0x2120 [ 485.052121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.052121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.052121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.052121][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.052121][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.052121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.052121][T12759] [ 485.052121][T12759] Uninit was stored to memory at: [ 485.052121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.052121][T12759] __msan_chain_origin+0xcb/0x140 [ 485.052121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.052121][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.052121][T12759] do_recvmmsg+0x1063/0x2120 [ 485.052121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.052121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.052121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.052121][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.052121][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.052121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.052121][T12759] [ 485.052121][T12759] Uninit was stored to memory at: [ 485.052121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.542480][T12759] __msan_chain_origin+0xcb/0x140 [ 485.542480][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.542480][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.542480][T12759] do_recvmmsg+0x1063/0x2120 [ 485.542480][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.542480][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.542480][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.542480][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.542480][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.542480][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.542480][T12759] [ 485.542480][T12759] Uninit was stored to memory at: [ 485.542480][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.542480][T12759] __msan_chain_origin+0xcb/0x140 [ 485.542480][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.542480][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.542480][T12759] do_recvmmsg+0x1063/0x2120 [ 485.542480][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.542480][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.542480][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.542480][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.542480][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.542480][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.542480][T12759] [ 485.542480][T12759] Uninit was stored to memory at: [ 485.542480][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.542480][T12759] __msan_chain_origin+0xcb/0x140 [ 485.542480][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.542480][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.542480][T12759] do_recvmmsg+0x1063/0x2120 [ 485.542480][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.542480][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.542480][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.542480][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.542480][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.542480][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.542480][T12759] [ 485.542480][T12759] Uninit was stored to memory at: [ 485.542480][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.542480][T12759] __msan_chain_origin+0xcb/0x140 [ 485.542480][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.542480][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.542480][T12759] do_recvmmsg+0x1063/0x2120 [ 485.542480][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.542480][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.542480][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.542480][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.542480][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.542480][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.542480][T12759] [ 485.542480][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 485.542480][T12759] do_recvmmsg+0xc1/0x2120 [ 485.542480][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.897693][T12759] not chained 1500000 origins [ 485.902118][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 485.902118][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.902118][T12759] Call Trace: [ 485.902118][T12759] dump_stack+0x25a/0x2f6 [ 485.902118][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 485.902118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.902118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 485.902118][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 485.902118][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 485.902118][T12759] ? release_sock+0x2b5/0x2e0 [ 485.902118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.902118][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 485.902118][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 485.902118][T12759] ? should_fail+0x75/0x9c0 [ 485.902118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.902118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 485.902118][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 485.902118][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 485.902118][T12759] ? _copy_from_user+0x219/0x310 [ 485.902118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.902118][T12759] __msan_chain_origin+0xcb/0x140 [ 485.902118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.902118][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.902118][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 485.902118][T12759] do_recvmmsg+0x1063/0x2120 [ 485.902118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 485.902118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.902118][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 485.902118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 485.902118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 485.902118][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 485.902118][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.902118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.902118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.902118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.902118][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.902118][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.902118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.902118][T12759] RIP: 0023:0xf6f46549 [ 485.902118][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 485.902118][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 485.902118][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 485.902118][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.902118][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.902118][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 485.902118][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.902118][T12759] Uninit was stored to memory at: [ 485.902118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.902118][T12759] __msan_chain_origin+0xcb/0x140 [ 485.902118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.902118][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.902118][T12759] do_recvmmsg+0x1063/0x2120 [ 485.902118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.902118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.902118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.902118][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.902118][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.902118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.902118][T12759] [ 485.902118][T12759] Uninit was stored to memory at: [ 485.902118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.902118][T12759] __msan_chain_origin+0xcb/0x140 [ 485.902118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.902118][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.902118][T12759] do_recvmmsg+0x1063/0x2120 [ 485.902118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.902118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.902118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.902118][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.902118][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.902118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.902118][T12759] [ 485.902118][T12759] Uninit was stored to memory at: [ 485.902118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.902118][T12759] __msan_chain_origin+0xcb/0x140 [ 485.902118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.902118][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.902118][T12759] do_recvmmsg+0x1063/0x2120 [ 485.902118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.902118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.902118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.902118][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.902118][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.902118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.902118][T12759] [ 485.902118][T12759] Uninit was stored to memory at: [ 485.902118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.902118][T12759] __msan_chain_origin+0xcb/0x140 [ 485.902118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.902118][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.902118][T12759] do_recvmmsg+0x1063/0x2120 [ 485.902118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.902118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.902118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.902118][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.902118][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.902118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.902118][T12759] [ 485.902118][T12759] Uninit was stored to memory at: [ 485.902118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.902118][T12759] __msan_chain_origin+0xcb/0x140 [ 485.902118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.902118][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.902118][T12759] do_recvmmsg+0x1063/0x2120 [ 485.902118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.902118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.902118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.902118][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.902118][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.902118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.902118][T12759] [ 485.902118][T12759] Uninit was stored to memory at: [ 485.902118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.902118][T12759] __msan_chain_origin+0xcb/0x140 [ 485.902118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.902118][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.902118][T12759] do_recvmmsg+0x1063/0x2120 [ 485.902118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.902118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.902118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.902118][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.902118][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.902118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.902118][T12759] [ 485.902118][T12759] Uninit was stored to memory at: [ 485.902118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 485.902118][T12759] __msan_chain_origin+0xcb/0x140 [ 485.902118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 485.902118][T12759] get_compat_msghdr+0x108/0x2c0 [ 485.902118][T12759] do_recvmmsg+0x1063/0x2120 [ 485.902118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 485.902118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 485.902118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 485.902118][T12759] do_fast_syscall_32+0x3c/0x80 [ 485.902118][T12759] do_SYSENTER_32+0x1b/0x20 [ 485.902118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.902118][T12759] [ 485.902118][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 485.902118][T12759] do_recvmmsg+0xc1/0x2120 [ 485.902118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 486.753357][T12759] not chained 1510000 origins [ 486.758051][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 486.762119][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.762119][T12759] Call Trace: [ 486.762119][T12759] dump_stack+0x25a/0x2f6 [ 486.762119][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 486.762119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 486.762119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 486.762119][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 486.762119][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 486.762119][T12759] ? release_sock+0x2b5/0x2e0 [ 486.762119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 486.762119][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 486.762119][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 486.762119][T12759] ? should_fail+0x75/0x9c0 [ 486.762119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 486.762119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 486.762119][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 486.762119][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 486.762119][T12759] ? _copy_from_user+0x219/0x310 [ 486.762119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 486.762119][T12759] __msan_chain_origin+0xcb/0x140 [ 486.762119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 486.762119][T12759] get_compat_msghdr+0x108/0x2c0 [ 486.762119][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 486.762119][T12759] do_recvmmsg+0x1063/0x2120 [ 486.762119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 486.762119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 486.762119][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 486.762119][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 486.762119][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 486.762119][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 486.762119][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 486.762119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 486.762119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 486.762119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 486.762119][T12759] do_fast_syscall_32+0x3c/0x80 [ 486.762119][T12759] do_SYSENTER_32+0x1b/0x20 [ 486.762119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.762119][T12759] RIP: 0023:0xf6f46549 [ 486.762119][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 486.762119][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 486.762119][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 486.762119][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.762119][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.762119][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 486.762119][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.762119][T12759] Uninit was stored to memory at: [ 486.762119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 486.762119][T12759] __msan_chain_origin+0xcb/0x140 [ 486.762119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 486.762119][T12759] get_compat_msghdr+0x108/0x2c0 [ 486.762119][T12759] do_recvmmsg+0x1063/0x2120 [ 486.762119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 486.762119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 486.762119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 486.762119][T12759] do_fast_syscall_32+0x3c/0x80 [ 486.762119][T12759] do_SYSENTER_32+0x1b/0x20 [ 486.762119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.762119][T12759] [ 486.762119][T12759] Uninit was stored to memory at: [ 486.762119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 486.762119][T12759] __msan_chain_origin+0xcb/0x140 [ 486.762119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 486.762119][T12759] get_compat_msghdr+0x108/0x2c0 [ 486.762119][T12759] do_recvmmsg+0x1063/0x2120 [ 486.762119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 486.762119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 486.762119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 486.762119][T12759] do_fast_syscall_32+0x3c/0x80 [ 486.762119][T12759] do_SYSENTER_32+0x1b/0x20 [ 486.762119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.762119][T12759] [ 486.762119][T12759] Uninit was stored to memory at: [ 486.762119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 486.762119][T12759] __msan_chain_origin+0xcb/0x140 [ 486.762119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 486.762119][T12759] get_compat_msghdr+0x108/0x2c0 [ 486.762119][T12759] do_recvmmsg+0x1063/0x2120 [ 486.762119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 486.762119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 486.762119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 486.762119][T12759] do_fast_syscall_32+0x3c/0x80 [ 486.762119][T12759] do_SYSENTER_32+0x1b/0x20 [ 486.762119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.762119][T12759] [ 486.762119][T12759] Uninit was stored to memory at: [ 486.762119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 486.762119][T12759] __msan_chain_origin+0xcb/0x140 [ 486.762119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 486.762119][T12759] get_compat_msghdr+0x108/0x2c0 [ 486.762119][T12759] do_recvmmsg+0x1063/0x2120 [ 486.762119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 486.762119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 486.762119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 486.762119][T12759] do_fast_syscall_32+0x3c/0x80 [ 486.762119][T12759] do_SYSENTER_32+0x1b/0x20 [ 486.762119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.762119][T12759] [ 486.762119][T12759] Uninit was stored to memory at: [ 486.762119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 486.762119][T12759] __msan_chain_origin+0xcb/0x140 [ 486.762119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 486.762119][T12759] get_compat_msghdr+0x108/0x2c0 [ 486.762119][T12759] do_recvmmsg+0x1063/0x2120 [ 486.762119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 486.762119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 486.762119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 486.762119][T12759] do_fast_syscall_32+0x3c/0x80 [ 486.762119][T12759] do_SYSENTER_32+0x1b/0x20 [ 486.762119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.762119][T12759] [ 486.762119][T12759] Uninit was stored to memory at: [ 486.762119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 486.762119][T12759] __msan_chain_origin+0xcb/0x140 [ 486.762119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 486.762119][T12759] get_compat_msghdr+0x108/0x2c0 [ 486.762119][T12759] do_recvmmsg+0x1063/0x2120 [ 486.762119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 486.762119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 486.762119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 486.762119][T12759] do_fast_syscall_32+0x3c/0x80 [ 486.762119][T12759] do_SYSENTER_32+0x1b/0x20 [ 486.762119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.762119][T12759] [ 486.762119][T12759] Uninit was stored to memory at: [ 486.762119][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 486.762119][T12759] __msan_chain_origin+0xcb/0x140 [ 486.762119][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 486.762119][T12759] get_compat_msghdr+0x108/0x2c0 [ 486.762119][T12759] do_recvmmsg+0x1063/0x2120 [ 486.762119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 486.762119][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 486.762119][T12759] __do_fast_syscall_32+0x96/0xe0 [ 486.762119][T12759] do_fast_syscall_32+0x3c/0x80 [ 486.762119][T12759] do_SYSENTER_32+0x1b/0x20 [ 486.762119][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.762119][T12759] [ 486.762119][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 486.762119][T12759] do_recvmmsg+0xc1/0x2120 [ 486.762119][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 487.605493][T12759] not chained 1520000 origins [ 487.610215][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 487.612118][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.612118][T12759] Call Trace: [ 487.612118][T12759] dump_stack+0x25a/0x2f6 [ 487.612118][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 487.612118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 487.612118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 487.612118][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 487.612118][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 487.612118][T12759] ? release_sock+0x2b5/0x2e0 [ 487.612118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 487.612118][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 487.612118][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 487.612118][T12759] ? should_fail+0x75/0x9c0 [ 487.612118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 487.612118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 487.612118][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 487.612118][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 487.612118][T12759] ? _copy_from_user+0x219/0x310 [ 487.612118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 487.612118][T12759] __msan_chain_origin+0xcb/0x140 [ 487.612118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 487.612118][T12759] get_compat_msghdr+0x108/0x2c0 [ 487.612118][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 487.612118][T12759] do_recvmmsg+0x1063/0x2120 [ 487.612118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 487.612118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 487.612118][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 487.612118][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 487.612118][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 487.612118][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 487.612118][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 487.612118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 487.612118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 487.612118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 487.612118][T12759] do_fast_syscall_32+0x3c/0x80 [ 487.612118][T12759] do_SYSENTER_32+0x1b/0x20 [ 487.612118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.612118][T12759] RIP: 0023:0xf6f46549 [ 487.612118][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 487.612118][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 487.612118][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 487.612118][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.612118][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.612118][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 487.612118][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.612118][T12759] Uninit was stored to memory at: [ 487.612118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 487.612118][T12759] __msan_chain_origin+0xcb/0x140 [ 487.612118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 487.612118][T12759] get_compat_msghdr+0x108/0x2c0 [ 487.612118][T12759] do_recvmmsg+0x1063/0x2120 [ 487.612118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 487.612118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 487.612118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 487.612118][T12759] do_fast_syscall_32+0x3c/0x80 [ 487.612118][T12759] do_SYSENTER_32+0x1b/0x20 [ 487.612118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.612118][T12759] [ 487.612118][T12759] Uninit was stored to memory at: [ 487.612118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 487.612118][T12759] __msan_chain_origin+0xcb/0x140 [ 487.612118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 487.612118][T12759] get_compat_msghdr+0x108/0x2c0 [ 487.612118][T12759] do_recvmmsg+0x1063/0x2120 [ 487.612118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 487.612118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 487.612118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 487.612118][T12759] do_fast_syscall_32+0x3c/0x80 [ 487.612118][T12759] do_SYSENTER_32+0x1b/0x20 [ 487.612118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.612118][T12759] [ 487.612118][T12759] Uninit was stored to memory at: [ 487.612118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 487.612118][T12759] __msan_chain_origin+0xcb/0x140 [ 487.612118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 487.612118][T12759] get_compat_msghdr+0x108/0x2c0 [ 487.612118][T12759] do_recvmmsg+0x1063/0x2120 [ 487.612118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 487.612118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 487.612118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 487.612118][T12759] do_fast_syscall_32+0x3c/0x80 [ 487.612118][T12759] do_SYSENTER_32+0x1b/0x20 [ 487.612118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.612118][T12759] [ 487.612118][T12759] Uninit was stored to memory at: [ 487.612118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 487.612118][T12759] __msan_chain_origin+0xcb/0x140 [ 487.612118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 487.612118][T12759] get_compat_msghdr+0x108/0x2c0 [ 487.612118][T12759] do_recvmmsg+0x1063/0x2120 [ 487.612118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 487.612118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 487.612118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 487.612118][T12759] do_fast_syscall_32+0x3c/0x80 [ 487.612118][T12759] do_SYSENTER_32+0x1b/0x20 [ 487.612118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.612118][T12759] [ 487.612118][T12759] Uninit was stored to memory at: [ 487.612118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 487.612118][T12759] __msan_chain_origin+0xcb/0x140 [ 487.612118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 487.612118][T12759] get_compat_msghdr+0x108/0x2c0 [ 487.612118][T12759] do_recvmmsg+0x1063/0x2120 [ 487.612118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 487.612118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 487.612118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 487.612118][T12759] do_fast_syscall_32+0x3c/0x80 [ 487.612118][T12759] do_SYSENTER_32+0x1b/0x20 [ 487.612118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.612118][T12759] [ 487.612118][T12759] Uninit was stored to memory at: [ 487.612118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 487.612118][T12759] __msan_chain_origin+0xcb/0x140 [ 487.612118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 487.612118][T12759] get_compat_msghdr+0x108/0x2c0 [ 487.612118][T12759] do_recvmmsg+0x1063/0x2120 [ 487.612118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 487.612118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 487.612118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 487.612118][T12759] do_fast_syscall_32+0x3c/0x80 [ 487.612118][T12759] do_SYSENTER_32+0x1b/0x20 [ 487.612118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.612118][T12759] [ 487.612118][T12759] Uninit was stored to memory at: [ 487.612118][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 487.612118][T12759] __msan_chain_origin+0xcb/0x140 [ 487.612118][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 487.612118][T12759] get_compat_msghdr+0x108/0x2c0 [ 487.612118][T12759] do_recvmmsg+0x1063/0x2120 [ 487.612118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 487.612118][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 487.612118][T12759] __do_fast_syscall_32+0x96/0xe0 [ 487.612118][T12759] do_fast_syscall_32+0x3c/0x80 [ 487.612118][T12759] do_SYSENTER_32+0x1b/0x20 [ 487.612118][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.612118][T12759] [ 487.612118][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 487.612118][T12759] do_recvmmsg+0xc1/0x2120 [ 487.612118][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 488.456418][T12759] not chained 1530000 origins [ 488.461111][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 488.462290][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.462290][T12759] Call Trace: [ 488.462290][T12759] dump_stack+0x25a/0x2f6 [ 488.462290][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 488.462290][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 488.462290][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 488.462290][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 488.507359][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 488.507359][T12759] ? release_sock+0x2b5/0x2e0 [ 488.507359][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 488.507359][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 488.507359][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 488.507359][T12759] ? should_fail+0x75/0x9c0 [ 488.507359][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 488.507359][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 488.507359][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 488.507359][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 488.507359][T12759] ? _copy_from_user+0x219/0x310 [ 488.507359][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 488.507359][T12759] __msan_chain_origin+0xcb/0x140 [ 488.507359][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 488.507359][T12759] get_compat_msghdr+0x108/0x2c0 [ 488.507359][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 488.507359][T12759] do_recvmmsg+0x1063/0x2120 [ 488.507359][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 488.507359][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 488.507359][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 488.507359][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 488.507359][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 488.507359][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 488.507359][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 488.507359][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 488.507359][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 488.507359][T12759] __do_fast_syscall_32+0x96/0xe0 [ 488.507359][T12759] do_fast_syscall_32+0x3c/0x80 [ 488.507359][T12759] do_SYSENTER_32+0x1b/0x20 [ 488.507359][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.507359][T12759] RIP: 0023:0xf6f46549 [ 488.507359][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 488.507359][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 488.507359][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 488.507359][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.507359][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.507359][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 488.507359][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.507359][T12759] Uninit was stored to memory at: [ 488.507359][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 488.507359][T12759] __msan_chain_origin+0xcb/0x140 [ 488.507359][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 488.507359][T12759] get_compat_msghdr+0x108/0x2c0 [ 488.507359][T12759] do_recvmmsg+0x1063/0x2120 [ 488.507359][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 488.507359][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 488.507359][T12759] __do_fast_syscall_32+0x96/0xe0 [ 488.507359][T12759] do_fast_syscall_32+0x3c/0x80 [ 488.507359][T12759] do_SYSENTER_32+0x1b/0x20 [ 488.507359][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.507359][T12759] [ 488.507359][T12759] Uninit was stored to memory at: [ 488.507359][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 488.507359][T12759] __msan_chain_origin+0xcb/0x140 [ 488.507359][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 488.507359][T12759] get_compat_msghdr+0x108/0x2c0 [ 488.507359][T12759] do_recvmmsg+0x1063/0x2120 [ 488.507359][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 488.507359][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 488.507359][T12759] __do_fast_syscall_32+0x96/0xe0 [ 488.507359][T12759] do_fast_syscall_32+0x3c/0x80 [ 488.507359][T12759] do_SYSENTER_32+0x1b/0x20 [ 488.507359][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.507359][T12759] [ 488.507359][T12759] Uninit was stored to memory at: [ 488.507359][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 488.507359][T12759] __msan_chain_origin+0xcb/0x140 [ 488.507359][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 488.507359][T12759] get_compat_msghdr+0x108/0x2c0 [ 488.507359][T12759] do_recvmmsg+0x1063/0x2120 [ 488.507359][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 488.507359][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 488.507359][T12759] __do_fast_syscall_32+0x96/0xe0 [ 488.507359][T12759] do_fast_syscall_32+0x3c/0x80 [ 488.507359][T12759] do_SYSENTER_32+0x1b/0x20 [ 488.507359][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.507359][T12759] [ 488.507359][T12759] Uninit was stored to memory at: [ 488.507359][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 488.507359][T12759] __msan_chain_origin+0xcb/0x140 [ 488.507359][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 488.507359][T12759] get_compat_msghdr+0x108/0x2c0 [ 488.507359][T12759] do_recvmmsg+0x1063/0x2120 [ 488.507359][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 488.507359][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 488.507359][T12759] __do_fast_syscall_32+0x96/0xe0 [ 488.507359][T12759] do_fast_syscall_32+0x3c/0x80 [ 488.507359][T12759] do_SYSENTER_32+0x1b/0x20 [ 488.507359][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.507359][T12759] [ 488.507359][T12759] Uninit was stored to memory at: [ 488.507359][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 488.507359][T12759] __msan_chain_origin+0xcb/0x140 [ 488.507359][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 488.507359][T12759] get_compat_msghdr+0x108/0x2c0 [ 488.507359][T12759] do_recvmmsg+0x1063/0x2120 [ 488.507359][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 488.507359][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 488.507359][T12759] __do_fast_syscall_32+0x96/0xe0 [ 488.507359][T12759] do_fast_syscall_32+0x3c/0x80 [ 488.507359][T12759] do_SYSENTER_32+0x1b/0x20 [ 488.507359][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.507359][T12759] [ 488.507359][T12759] Uninit was stored to memory at: [ 488.507359][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 488.507359][T12759] __msan_chain_origin+0xcb/0x140 [ 488.507359][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 488.507359][T12759] get_compat_msghdr+0x108/0x2c0 [ 488.507359][T12759] do_recvmmsg+0x1063/0x2120 [ 488.507359][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 488.507359][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 488.507359][T12759] __do_fast_syscall_32+0x96/0xe0 [ 488.507359][T12759] do_fast_syscall_32+0x3c/0x80 [ 488.507359][T12759] do_SYSENTER_32+0x1b/0x20 [ 488.507359][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.507359][T12759] [ 488.507359][T12759] Uninit was stored to memory at: [ 488.507359][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 488.507359][T12759] __msan_chain_origin+0xcb/0x140 [ 488.507359][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 488.507359][T12759] get_compat_msghdr+0x108/0x2c0 [ 488.507359][T12759] do_recvmmsg+0x1063/0x2120 [ 488.507359][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 488.507359][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 488.507359][T12759] __do_fast_syscall_32+0x96/0xe0 [ 488.507359][T12759] do_fast_syscall_32+0x3c/0x80 [ 488.507359][T12759] do_SYSENTER_32+0x1b/0x20 [ 488.507359][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.507359][T12759] [ 488.507359][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 488.507359][T12759] do_recvmmsg+0xc1/0x2120 [ 488.507359][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 489.303621][T12759] not chained 1540000 origins [ 489.308315][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 489.312121][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.312121][T12759] Call Trace: [ 489.312121][T12759] dump_stack+0x25a/0x2f6 [ 489.312121][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 489.312121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 489.312121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 489.312121][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 489.312121][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 489.312121][T12759] ? release_sock+0x2b5/0x2e0 [ 489.312121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 489.312121][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 489.312121][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 489.312121][T12759] ? should_fail+0x75/0x9c0 [ 489.312121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 489.312121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 489.312121][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 489.312121][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 489.312121][T12759] ? _copy_from_user+0x219/0x310 [ 489.312121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 489.312121][T12759] __msan_chain_origin+0xcb/0x140 [ 489.312121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 489.312121][T12759] get_compat_msghdr+0x108/0x2c0 [ 489.312121][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 489.312121][T12759] do_recvmmsg+0x1063/0x2120 [ 489.312121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 489.312121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 489.312121][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 489.312121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 489.312121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 489.312121][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 489.312121][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 489.312121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 489.312121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 489.312121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 489.312121][T12759] do_fast_syscall_32+0x3c/0x80 [ 489.312121][T12759] do_SYSENTER_32+0x1b/0x20 [ 489.312121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.312121][T12759] RIP: 0023:0xf6f46549 [ 489.312121][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 489.312121][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 489.312121][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 489.312121][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.312121][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.312121][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 489.312121][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.312121][T12759] Uninit was stored to memory at: [ 489.312121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 489.312121][T12759] __msan_chain_origin+0xcb/0x140 [ 489.312121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 489.312121][T12759] get_compat_msghdr+0x108/0x2c0 [ 489.312121][T12759] do_recvmmsg+0x1063/0x2120 [ 489.312121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 489.623256][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 489.623256][T12759] __do_fast_syscall_32+0x96/0xe0 [ 489.623256][T12759] do_fast_syscall_32+0x3c/0x80 [ 489.623256][T12759] do_SYSENTER_32+0x1b/0x20 [ 489.623256][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.623256][T12759] [ 489.623256][T12759] Uninit was stored to memory at: [ 489.623256][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 489.623256][T12759] __msan_chain_origin+0xcb/0x140 [ 489.623256][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 489.623256][T12759] get_compat_msghdr+0x108/0x2c0 [ 489.623256][T12759] do_recvmmsg+0x1063/0x2120 [ 489.623256][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 489.623256][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 489.623256][T12759] __do_fast_syscall_32+0x96/0xe0 [ 489.623256][T12759] do_fast_syscall_32+0x3c/0x80 [ 489.623256][T12759] do_SYSENTER_32+0x1b/0x20 [ 489.623256][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.623256][T12759] [ 489.623256][T12759] Uninit was stored to memory at: [ 489.623256][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 489.623256][T12759] __msan_chain_origin+0xcb/0x140 [ 489.623256][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 489.623256][T12759] get_compat_msghdr+0x108/0x2c0 [ 489.623256][T12759] do_recvmmsg+0x1063/0x2120 [ 489.623256][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 489.623256][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 489.623256][T12759] __do_fast_syscall_32+0x96/0xe0 [ 489.623256][T12759] do_fast_syscall_32+0x3c/0x80 [ 489.623256][T12759] do_SYSENTER_32+0x1b/0x20 [ 489.623256][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.623256][T12759] [ 489.623256][T12759] Uninit was stored to memory at: [ 489.623256][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 489.623256][T12759] __msan_chain_origin+0xcb/0x140 [ 489.623256][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 489.623256][T12759] get_compat_msghdr+0x108/0x2c0 [ 489.623256][T12759] do_recvmmsg+0x1063/0x2120 [ 489.623256][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 489.623256][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 489.623256][T12759] __do_fast_syscall_32+0x96/0xe0 [ 489.623256][T12759] do_fast_syscall_32+0x3c/0x80 [ 489.623256][T12759] do_SYSENTER_32+0x1b/0x20 [ 489.623256][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.623256][T12759] [ 489.623256][T12759] Uninit was stored to memory at: [ 489.623256][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 489.623256][T12759] __msan_chain_origin+0xcb/0x140 [ 489.623256][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 489.623256][T12759] get_compat_msghdr+0x108/0x2c0 [ 489.623256][T12759] do_recvmmsg+0x1063/0x2120 [ 489.623256][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 489.623256][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 489.623256][T12759] __do_fast_syscall_32+0x96/0xe0 [ 489.623256][T12759] do_fast_syscall_32+0x3c/0x80 [ 489.623256][T12759] do_SYSENTER_32+0x1b/0x20 [ 489.623256][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.623256][T12759] [ 489.623256][T12759] Uninit was stored to memory at: [ 489.623256][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 489.623256][T12759] __msan_chain_origin+0xcb/0x140 [ 489.623256][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 489.623256][T12759] get_compat_msghdr+0x108/0x2c0 [ 489.623256][T12759] do_recvmmsg+0x1063/0x2120 [ 489.623256][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 489.623256][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 489.623256][T12759] __do_fast_syscall_32+0x96/0xe0 [ 489.623256][T12759] do_fast_syscall_32+0x3c/0x80 [ 489.623256][T12759] do_SYSENTER_32+0x1b/0x20 [ 489.623256][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.623256][T12759] [ 489.623256][T12759] Uninit was stored to memory at: [ 489.623256][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 489.623256][T12759] __msan_chain_origin+0xcb/0x140 [ 489.623256][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 489.623256][T12759] get_compat_msghdr+0x108/0x2c0 [ 489.623256][T12759] do_recvmmsg+0x1063/0x2120 [ 489.623256][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 489.623256][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 489.623256][T12759] __do_fast_syscall_32+0x96/0xe0 [ 489.623256][T12759] do_fast_syscall_32+0x3c/0x80 [ 489.623256][T12759] do_SYSENTER_32+0x1b/0x20 [ 489.623256][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 489.623256][T12759] [ 489.623256][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 489.623256][T12759] do_recvmmsg+0xc1/0x2120 [ 489.623256][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 490.163720][T12759] not chained 1550000 origins [ 490.168410][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 490.172121][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.172121][T12759] Call Trace: [ 490.172121][T12759] dump_stack+0x25a/0x2f6 [ 490.172121][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 490.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 490.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 490.172121][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 490.172121][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 490.172121][T12759] ? release_sock+0x2b5/0x2e0 [ 490.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 490.172121][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 490.172121][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 490.172121][T12759] ? should_fail+0x75/0x9c0 [ 490.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 490.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 490.172121][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 490.172121][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 490.172121][T12759] ? _copy_from_user+0x219/0x310 [ 490.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 490.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 490.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 490.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 490.172121][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 490.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 490.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 490.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 490.172121][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 490.172121][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 490.172121][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 490.172121][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 490.172121][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 490.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 490.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 490.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 490.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 490.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 490.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.172121][T12759] RIP: 0023:0xf6f46549 [ 490.172121][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 490.172121][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 490.172121][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 490.172121][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.172121][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.172121][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 490.172121][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.172121][T12759] Uninit was stored to memory at: [ 490.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 490.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 490.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 490.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 490.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 490.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 490.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 490.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 490.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 490.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 490.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.172121][T12759] [ 490.172121][T12759] Uninit was stored to memory at: [ 490.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 490.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 490.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 490.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 490.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 490.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 490.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 490.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 490.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 490.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 490.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.172121][T12759] [ 490.172121][T12759] Uninit was stored to memory at: [ 490.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 490.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 490.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 490.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 490.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 490.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 490.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 490.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 490.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 490.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 490.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.172121][T12759] [ 490.172121][T12759] Uninit was stored to memory at: [ 490.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 490.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 490.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 490.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 490.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 490.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 490.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 490.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 490.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 490.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 490.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.172121][T12759] [ 490.172121][T12759] Uninit was stored to memory at: [ 490.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 490.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 490.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 490.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 490.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 490.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 490.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 490.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 490.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 490.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 490.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.172121][T12759] [ 490.172121][T12759] Uninit was stored to memory at: [ 490.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 490.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 490.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 490.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 490.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 490.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 490.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 490.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 490.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 490.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 490.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.172121][T12759] [ 490.172121][T12759] Uninit was stored to memory at: [ 490.172121][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 490.172121][T12759] __msan_chain_origin+0xcb/0x140 [ 490.172121][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 490.172121][T12759] get_compat_msghdr+0x108/0x2c0 [ 490.172121][T12759] do_recvmmsg+0x1063/0x2120 [ 490.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 490.172121][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 490.172121][T12759] __do_fast_syscall_32+0x96/0xe0 [ 490.172121][T12759] do_fast_syscall_32+0x3c/0x80 [ 490.172121][T12759] do_SYSENTER_32+0x1b/0x20 [ 490.172121][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 490.172121][T12759] [ 490.172121][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 490.172121][T12759] do_recvmmsg+0xc1/0x2120 [ 490.172121][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.020808][T12759] not chained 1560000 origins [ 491.022123][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 491.022123][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.022123][T12759] Call Trace: [ 491.022123][T12759] dump_stack+0x25a/0x2f6 [ 491.022123][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 491.022123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.022123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 491.022123][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 491.022123][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 491.022123][T12759] ? release_sock+0x2b5/0x2e0 [ 491.022123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.022123][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 491.022123][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 491.022123][T12759] ? should_fail+0x75/0x9c0 [ 491.022123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.022123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 491.022123][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 491.022123][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 491.022123][T12759] ? _copy_from_user+0x219/0x310 [ 491.022123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.022123][T12759] __msan_chain_origin+0xcb/0x140 [ 491.022123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.022123][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.022123][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 491.022123][T12759] do_recvmmsg+0x1063/0x2120 [ 491.022123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 491.022123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.022123][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 491.022123][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.022123][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 491.022123][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 491.022123][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.022123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.022123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.022123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.022123][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.022123][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.022123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.022123][T12759] RIP: 0023:0xf6f46549 [ 491.022123][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 491.022123][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 491.022123][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 491.022123][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.022123][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.022123][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 491.022123][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.022123][T12759] Uninit was stored to memory at: [ 491.022123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.022123][T12759] __msan_chain_origin+0xcb/0x140 [ 491.022123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.022123][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.022123][T12759] do_recvmmsg+0x1063/0x2120 [ 491.022123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.022123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.022123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.022123][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.022123][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.022123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.022123][T12759] [ 491.022123][T12759] Uninit was stored to memory at: [ 491.022123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.022123][T12759] __msan_chain_origin+0xcb/0x140 [ 491.022123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.022123][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.022123][T12759] do_recvmmsg+0x1063/0x2120 [ 491.022123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.022123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.022123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.022123][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.022123][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.022123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.022123][T12759] [ 491.022123][T12759] Uninit was stored to memory at: [ 491.022123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.022123][T12759] __msan_chain_origin+0xcb/0x140 [ 491.022123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.022123][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.022123][T12759] do_recvmmsg+0x1063/0x2120 [ 491.022123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.022123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.022123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.022123][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.022123][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.022123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.022123][T12759] [ 491.022123][T12759] Uninit was stored to memory at: [ 491.022123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.022123][T12759] __msan_chain_origin+0xcb/0x140 [ 491.022123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.022123][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.022123][T12759] do_recvmmsg+0x1063/0x2120 [ 491.022123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.022123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.022123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.022123][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.022123][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.022123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.022123][T12759] [ 491.022123][T12759] Uninit was stored to memory at: [ 491.022123][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.022123][T12759] __msan_chain_origin+0xcb/0x140 [ 491.022123][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.022123][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.022123][T12759] do_recvmmsg+0x1063/0x2120 [ 491.022123][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.022123][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.022123][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.022123][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.022123][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.022123][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.622347][T12759] [ 491.622347][T12759] Uninit was stored to memory at: [ 491.622347][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.622347][T12759] __msan_chain_origin+0xcb/0x140 [ 491.622347][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.622347][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.622347][T12759] do_recvmmsg+0x1063/0x2120 [ 491.622347][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.622347][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.622347][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.622347][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.622347][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.622347][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.622347][T12759] [ 491.622347][T12759] Uninit was stored to memory at: [ 491.622347][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.622347][T12759] __msan_chain_origin+0xcb/0x140 [ 491.622347][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.622347][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.622347][T12759] do_recvmmsg+0x1063/0x2120 [ 491.622347][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.622347][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.622347][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.622347][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.622347][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.622347][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.622347][T12759] [ 491.622347][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 491.622347][T12759] do_recvmmsg+0xc1/0x2120 [ 491.622347][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.869221][T12759] not chained 1570000 origins [ 491.872219][T12759] CPU: 1 PID: 12759 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 491.872219][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.892237][T12759] Call Trace: [ 491.892237][T12759] dump_stack+0x25a/0x2f6 [ 491.898436][T12759] kmsan_internal_chain_origin+0x6f/0x110 [ 491.898436][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.898436][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 491.915707][T12759] ? __local_bh_enable_ip+0x88/0xb0 [ 491.915707][T12759] ? _raw_spin_unlock_bh+0x4b/0x60 [ 491.915707][T12759] ? release_sock+0x2b5/0x2e0 [ 491.915707][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.915707][T12759] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 491.915707][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 491.915707][T12759] ? should_fail+0x75/0x9c0 [ 491.915707][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.915707][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 491.915707][T12759] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 491.915707][T12759] ? kmsan_unpoison_memory+0xeb/0x120 [ 491.915707][T12759] ? _copy_from_user+0x219/0x310 [ 491.915707][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.915707][T12759] __msan_chain_origin+0xcb/0x140 [ 491.915707][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.915707][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.915707][T12759] ? __sys_recvmmsg+0x51c/0x6f0 [ 491.915707][T12759] do_recvmmsg+0x1063/0x2120 [ 491.915707][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 491.915707][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.915707][T12759] ? kmsan_internal_check_memory+0xb5/0x520 [ 491.915707][T12759] ? kmsan_get_metadata+0x11b/0x180 [ 491.915707][T12759] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 491.915707][T12759] ? __msan_poison_alloca+0x15a/0x1a0 [ 491.915707][T12759] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.915707][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.915707][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.915707][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.915707][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.915707][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.915707][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.915707][T12759] RIP: 0023:0xf6f46549 [ 491.915707][T12759] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 491.915707][T12759] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 491.915707][T12759] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 491.915707][T12759] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.915707][T12759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.915707][T12759] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 491.915707][T12759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.915707][T12759] Uninit was stored to memory at: [ 491.915707][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.915707][T12759] __msan_chain_origin+0xcb/0x140 [ 491.915707][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.915707][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.915707][T12759] do_recvmmsg+0x1063/0x2120 [ 491.915707][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.915707][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.915707][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.915707][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.915707][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.915707][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.915707][T12759] [ 491.915707][T12759] Uninit was stored to memory at: [ 491.915707][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.915707][T12759] __msan_chain_origin+0xcb/0x140 [ 491.915707][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.915707][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.915707][T12759] do_recvmmsg+0x1063/0x2120 [ 491.915707][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.915707][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.915707][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.915707][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.915707][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.915707][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.915707][T12759] [ 491.915707][T12759] Uninit was stored to memory at: [ 491.915707][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.915707][T12759] __msan_chain_origin+0xcb/0x140 [ 491.915707][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.915707][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.915707][T12759] do_recvmmsg+0x1063/0x2120 [ 491.915707][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.915707][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.915707][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.915707][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.915707][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.915707][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.915707][T12759] [ 491.915707][T12759] Uninit was stored to memory at: [ 491.915707][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.915707][T12759] __msan_chain_origin+0xcb/0x140 [ 491.915707][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.915707][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.915707][T12759] do_recvmmsg+0x1063/0x2120 [ 491.915707][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.915707][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.915707][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.915707][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.915707][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.915707][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.915707][T12759] [ 491.915707][T12759] Uninit was stored to memory at: [ 491.915707][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.915707][T12759] __msan_chain_origin+0xcb/0x140 [ 491.915707][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.915707][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.915707][T12759] do_recvmmsg+0x1063/0x2120 [ 491.915707][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.915707][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.915707][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.915707][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.915707][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.915707][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.915707][T12759] [ 491.915707][T12759] Uninit was stored to memory at: [ 491.915707][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.915707][T12759] __msan_chain_origin+0xcb/0x140 [ 491.915707][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.915707][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.915707][T12759] do_recvmmsg+0x1063/0x2120 [ 491.915707][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.915707][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.915707][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.915707][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.915707][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.915707][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.915707][T12759] [ 491.915707][T12759] Uninit was stored to memory at: [ 491.915707][T12759] kmsan_internal_chain_origin+0xa0/0x110 [ 491.915707][T12759] __msan_chain_origin+0xcb/0x140 [ 491.915707][T12759] __get_compat_msghdr+0x6e1/0x9d0 [ 491.915707][T12759] get_compat_msghdr+0x108/0x2c0 [ 491.915707][T12759] do_recvmmsg+0x1063/0x2120 [ 491.915707][T12759] __sys_recvmmsg+0x51c/0x6f0 [ 491.915707][T12759] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 491.915707][T12759] __do_fast_syscall_32+0x96/0xe0 [ 491.915707][T12759] do_fast_syscall_32+0x3c/0x80 [ 491.915707][T12759] do_SYSENTER_32+0x1b/0x20 [ 491.915707][T12759] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 491.915707][T12759] [ 491.915707][T12759] Local variable ----msg_sys@do_recvmmsg created at: [ 491.915707][T12759] do_recvmmsg+0xc1/0x2120 [ 491.915707][T12759] __sys_recvmmsg+0x51c/0x6f0 09:59:02 executing program 4: syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540), 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000003000)=""/165, 0xa5, 0x0, 0x0, 0x1000000000000000) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0xac}}, 0x0) 09:59:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b000100677265746170000014000200", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xa000000, @loopback}, 0x1c) 09:59:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 09:59:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 09:59:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x301}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0xa0}}, 0x0) [ 492.871950][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 492.881492][T12767] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 09:59:02 executing program 3: bpf$OBJ_GET_PROG(0x1d, 0x0, 0x0) 09:59:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xf000000, @loopback}, 0x1c) 09:59:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b000100677265746170000014000200", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') [ 493.525999][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 493.535613][T12785] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 09:59:03 executing program 3: socket(0x1e, 0x0, 0xffffffff) 09:59:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 493.899798][T12777] not chained 1580000 origins [ 493.902180][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 493.909312][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.909312][T12777] Call Trace: [ 493.909312][T12777] dump_stack+0x25a/0x2f6 [ 493.909312][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 493.909312][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 493.909312][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 493.909312][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 493.909312][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 493.909312][T12777] ? release_sock+0x2b5/0x2e0 [ 493.909312][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 493.909312][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 493.909312][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 493.909312][T12777] ? should_fail+0x75/0x9c0 [ 493.909312][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 493.909312][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 493.909312][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 493.909312][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 493.909312][T12777] ? _copy_from_user+0x219/0x310 [ 493.909312][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 493.909312][T12777] __msan_chain_origin+0xcb/0x140 [ 493.909312][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 493.909312][T12777] get_compat_msghdr+0x108/0x2c0 [ 493.909312][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 493.909312][T12777] do_recvmmsg+0x1063/0x2120 [ 493.909312][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 493.909312][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 493.909312][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 493.909312][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 493.909312][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 493.909312][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 493.909312][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 493.909312][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 493.909312][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 493.909312][T12777] __do_fast_syscall_32+0x96/0xe0 [ 493.909312][T12777] do_fast_syscall_32+0x3c/0x80 [ 493.909312][T12777] do_SYSENTER_32+0x1b/0x20 [ 493.909312][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.909312][T12777] RIP: 0023:0xf6f46549 [ 493.909312][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 493.909312][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 493.909312][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 493.909312][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.909312][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.909312][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 493.909312][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.909312][T12777] Uninit was stored to memory at: [ 493.909312][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 493.909312][T12777] __msan_chain_origin+0xcb/0x140 [ 493.909312][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 493.909312][T12777] get_compat_msghdr+0x108/0x2c0 [ 493.909312][T12777] do_recvmmsg+0x1063/0x2120 [ 493.909312][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 493.909312][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 493.909312][T12777] __do_fast_syscall_32+0x96/0xe0 [ 493.909312][T12777] do_fast_syscall_32+0x3c/0x80 [ 493.909312][T12777] do_SYSENTER_32+0x1b/0x20 [ 493.909312][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.909312][T12777] [ 493.909312][T12777] Uninit was stored to memory at: [ 493.909312][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 493.909312][T12777] __msan_chain_origin+0xcb/0x140 [ 493.909312][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 493.909312][T12777] get_compat_msghdr+0x108/0x2c0 [ 493.909312][T12777] do_recvmmsg+0x1063/0x2120 [ 493.909312][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 493.909312][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 493.909312][T12777] __do_fast_syscall_32+0x96/0xe0 [ 493.909312][T12777] do_fast_syscall_32+0x3c/0x80 [ 493.909312][T12777] do_SYSENTER_32+0x1b/0x20 [ 493.909312][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.909312][T12777] [ 493.909312][T12777] Uninit was stored to memory at: [ 493.909312][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 493.909312][T12777] __msan_chain_origin+0xcb/0x140 [ 493.909312][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 493.909312][T12777] get_compat_msghdr+0x108/0x2c0 [ 493.909312][T12777] do_recvmmsg+0x1063/0x2120 [ 493.909312][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 493.909312][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 493.909312][T12777] __do_fast_syscall_32+0x96/0xe0 [ 493.909312][T12777] do_fast_syscall_32+0x3c/0x80 [ 493.909312][T12777] do_SYSENTER_32+0x1b/0x20 [ 493.909312][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.909312][T12777] [ 493.909312][T12777] Uninit was stored to memory at: [ 493.909312][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 493.909312][T12777] __msan_chain_origin+0xcb/0x140 [ 493.909312][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 493.909312][T12777] get_compat_msghdr+0x108/0x2c0 [ 493.909312][T12777] do_recvmmsg+0x1063/0x2120 [ 493.909312][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 493.909312][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 493.909312][T12777] __do_fast_syscall_32+0x96/0xe0 [ 493.909312][T12777] do_fast_syscall_32+0x3c/0x80 [ 493.909312][T12777] do_SYSENTER_32+0x1b/0x20 [ 493.909312][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.909312][T12777] [ 493.909312][T12777] Uninit was stored to memory at: [ 493.909312][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 493.909312][T12777] __msan_chain_origin+0xcb/0x140 [ 493.909312][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 493.909312][T12777] get_compat_msghdr+0x108/0x2c0 [ 493.909312][T12777] do_recvmmsg+0x1063/0x2120 [ 493.909312][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 493.909312][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 493.909312][T12777] __do_fast_syscall_32+0x96/0xe0 [ 493.909312][T12777] do_fast_syscall_32+0x3c/0x80 [ 493.909312][T12777] do_SYSENTER_32+0x1b/0x20 [ 493.909312][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.909312][T12777] [ 493.909312][T12777] Uninit was stored to memory at: [ 493.909312][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 493.909312][T12777] __msan_chain_origin+0xcb/0x140 [ 493.909312][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 493.909312][T12777] get_compat_msghdr+0x108/0x2c0 [ 493.909312][T12777] do_recvmmsg+0x1063/0x2120 [ 493.909312][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 493.909312][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 493.909312][T12777] __do_fast_syscall_32+0x96/0xe0 [ 493.909312][T12777] do_fast_syscall_32+0x3c/0x80 [ 493.909312][T12777] do_SYSENTER_32+0x1b/0x20 [ 493.909312][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.909312][T12777] [ 493.909312][T12777] Uninit was stored to memory at: [ 493.909312][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 493.909312][T12777] __msan_chain_origin+0xcb/0x140 [ 493.909312][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 493.909312][T12777] get_compat_msghdr+0x108/0x2c0 [ 493.909312][T12777] do_recvmmsg+0x1063/0x2120 [ 493.909312][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 493.909312][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 493.909312][T12777] __do_fast_syscall_32+0x96/0xe0 [ 493.909312][T12777] do_fast_syscall_32+0x3c/0x80 [ 493.909312][T12777] do_SYSENTER_32+0x1b/0x20 [ 493.909312][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 493.909312][T12777] [ 493.909312][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 493.909312][T12777] do_recvmmsg+0xc1/0x2120 [ 493.909312][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 495.228697][T12777] not chained 1590000 origins [ 495.232103][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 495.232103][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.232103][T12777] Call Trace: [ 495.232103][T12777] dump_stack+0x25a/0x2f6 [ 495.232103][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 495.232103][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 495.232103][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 495.232103][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 495.278461][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 495.283065][T12777] ? release_sock+0x2b5/0x2e0 [ 495.283065][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 495.283065][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 495.283065][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 495.283065][T12777] ? should_fail+0x75/0x9c0 [ 495.283065][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 495.283065][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 495.283065][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 495.283065][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 495.283065][T12777] ? _copy_from_user+0x219/0x310 [ 495.283065][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 495.283065][T12777] __msan_chain_origin+0xcb/0x140 [ 495.283065][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 495.283065][T12777] get_compat_msghdr+0x108/0x2c0 [ 495.283065][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 495.283065][T12777] do_recvmmsg+0x1063/0x2120 [ 495.283065][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 495.283065][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 495.283065][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 495.283065][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 495.283065][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 495.283065][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 495.283065][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 495.283065][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 495.283065][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 495.283065][T12777] __do_fast_syscall_32+0x96/0xe0 [ 495.283065][T12777] do_fast_syscall_32+0x3c/0x80 [ 495.283065][T12777] do_SYSENTER_32+0x1b/0x20 [ 495.283065][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.283065][T12777] RIP: 0023:0xf6f46549 [ 495.283065][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 495.283065][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 495.283065][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 495.283065][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.283065][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.283065][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 495.283065][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.283065][T12777] Uninit was stored to memory at: [ 495.283065][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 495.283065][T12777] __msan_chain_origin+0xcb/0x140 [ 495.283065][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 495.283065][T12777] get_compat_msghdr+0x108/0x2c0 [ 495.283065][T12777] do_recvmmsg+0x1063/0x2120 [ 495.283065][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 495.283065][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 495.283065][T12777] __do_fast_syscall_32+0x96/0xe0 [ 495.283065][T12777] do_fast_syscall_32+0x3c/0x80 [ 495.283065][T12777] do_SYSENTER_32+0x1b/0x20 [ 495.283065][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.283065][T12777] [ 495.283065][T12777] Uninit was stored to memory at: [ 495.283065][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 495.283065][T12777] __msan_chain_origin+0xcb/0x140 [ 495.283065][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 495.283065][T12777] get_compat_msghdr+0x108/0x2c0 [ 495.283065][T12777] do_recvmmsg+0x1063/0x2120 [ 495.283065][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 495.283065][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 495.622365][T12777] __do_fast_syscall_32+0x96/0xe0 [ 495.622365][T12777] do_fast_syscall_32+0x3c/0x80 [ 495.622365][T12777] do_SYSENTER_32+0x1b/0x20 [ 495.622365][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.622365][T12777] [ 495.622365][T12777] Uninit was stored to memory at: [ 495.622365][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 495.622365][T12777] __msan_chain_origin+0xcb/0x140 [ 495.622365][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 495.622365][T12777] get_compat_msghdr+0x108/0x2c0 [ 495.622365][T12777] do_recvmmsg+0x1063/0x2120 [ 495.622365][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 495.622365][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 495.622365][T12777] __do_fast_syscall_32+0x96/0xe0 [ 495.622365][T12777] do_fast_syscall_32+0x3c/0x80 [ 495.622365][T12777] do_SYSENTER_32+0x1b/0x20 [ 495.622365][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.622365][T12777] [ 495.622365][T12777] Uninit was stored to memory at: [ 495.622365][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 495.622365][T12777] __msan_chain_origin+0xcb/0x140 [ 495.622365][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 495.622365][T12777] get_compat_msghdr+0x108/0x2c0 [ 495.622365][T12777] do_recvmmsg+0x1063/0x2120 [ 495.622365][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 495.622365][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 495.622365][T12777] __do_fast_syscall_32+0x96/0xe0 [ 495.622365][T12777] do_fast_syscall_32+0x3c/0x80 [ 495.622365][T12777] do_SYSENTER_32+0x1b/0x20 [ 495.622365][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.622365][T12777] [ 495.622365][T12777] Uninit was stored to memory at: [ 495.622365][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 495.622365][T12777] __msan_chain_origin+0xcb/0x140 [ 495.622365][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 495.622365][T12777] get_compat_msghdr+0x108/0x2c0 [ 495.622365][T12777] do_recvmmsg+0x1063/0x2120 [ 495.622365][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 495.622365][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 495.622365][T12777] __do_fast_syscall_32+0x96/0xe0 [ 495.622365][T12777] do_fast_syscall_32+0x3c/0x80 [ 495.622365][T12777] do_SYSENTER_32+0x1b/0x20 [ 495.622365][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.622365][T12777] [ 495.622365][T12777] Uninit was stored to memory at: [ 495.622365][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 495.622365][T12777] __msan_chain_origin+0xcb/0x140 [ 495.622365][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 495.622365][T12777] get_compat_msghdr+0x108/0x2c0 [ 495.622365][T12777] do_recvmmsg+0x1063/0x2120 [ 495.622365][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 495.622365][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 495.622365][T12777] __do_fast_syscall_32+0x96/0xe0 [ 495.622365][T12777] do_fast_syscall_32+0x3c/0x80 [ 495.622365][T12777] do_SYSENTER_32+0x1b/0x20 [ 495.622365][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.896555][T12777] [ 495.896555][T12777] Uninit was stored to memory at: [ 495.896555][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 495.912349][T12777] __msan_chain_origin+0xcb/0x140 [ 495.912349][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 495.912349][T12777] get_compat_msghdr+0x108/0x2c0 [ 495.912349][T12777] do_recvmmsg+0x1063/0x2120 [ 495.935343][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 495.936507][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 495.936507][T12777] __do_fast_syscall_32+0x96/0xe0 [ 495.936507][T12777] do_fast_syscall_32+0x3c/0x80 [ 495.936507][T12777] do_SYSENTER_32+0x1b/0x20 [ 495.936507][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 495.936507][T12777] [ 495.936507][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 495.936507][T12777] do_recvmmsg+0xc1/0x2120 [ 495.936507][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 496.406578][T12777] not chained 1600000 origins [ 496.411294][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 496.412124][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.412124][T12777] Call Trace: [ 496.412124][T12777] dump_stack+0x25a/0x2f6 [ 496.412124][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 496.412124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 496.412124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 496.412124][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 496.412124][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 496.412124][T12777] ? release_sock+0x2b5/0x2e0 [ 496.412124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 496.412124][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 496.412124][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 496.412124][T12777] ? should_fail+0x75/0x9c0 [ 496.412124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 496.412124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 496.412124][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 496.412124][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 496.511081][T12777] ? _copy_from_user+0x219/0x310 [ 496.511081][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 496.511081][T12777] __msan_chain_origin+0xcb/0x140 [ 496.511081][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 496.511081][T12777] get_compat_msghdr+0x108/0x2c0 [ 496.511081][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 496.511081][T12777] do_recvmmsg+0x1063/0x2120 [ 496.511081][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 496.511081][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 496.511081][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 496.511081][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 496.511081][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 496.511081][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 496.511081][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 496.511081][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 496.511081][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 496.511081][T12777] __do_fast_syscall_32+0x96/0xe0 [ 496.511081][T12777] do_fast_syscall_32+0x3c/0x80 [ 496.511081][T12777] do_SYSENTER_32+0x1b/0x20 [ 496.511081][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.620772][T12777] RIP: 0023:0xf6f46549 [ 496.620772][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 496.620772][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 496.620772][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 496.620772][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.662314][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.662314][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 496.662314][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.662314][T12777] Uninit was stored to memory at: [ 496.662314][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 496.662314][T12777] __msan_chain_origin+0xcb/0x140 [ 496.662314][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 496.662314][T12777] get_compat_msghdr+0x108/0x2c0 [ 496.662314][T12777] do_recvmmsg+0x1063/0x2120 [ 496.662314][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 496.662314][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 496.662314][T12777] __do_fast_syscall_32+0x96/0xe0 [ 496.662314][T12777] do_fast_syscall_32+0x3c/0x80 [ 496.662314][T12777] do_SYSENTER_32+0x1b/0x20 [ 496.662314][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.752355][T12777] [ 496.752355][T12777] Uninit was stored to memory at: [ 496.752355][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 496.752355][T12777] __msan_chain_origin+0xcb/0x140 [ 496.752355][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 496.752355][T12777] get_compat_msghdr+0x108/0x2c0 [ 496.752355][T12777] do_recvmmsg+0x1063/0x2120 [ 496.752355][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 496.752355][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 496.752355][T12777] __do_fast_syscall_32+0x96/0xe0 [ 496.752355][T12777] do_fast_syscall_32+0x3c/0x80 [ 496.752355][T12777] do_SYSENTER_32+0x1b/0x20 [ 496.752355][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.752355][T12777] [ 496.752355][T12777] Uninit was stored to memory at: [ 496.752355][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 496.752355][T12777] __msan_chain_origin+0xcb/0x140 [ 496.752355][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 496.752355][T12777] get_compat_msghdr+0x108/0x2c0 [ 496.752355][T12777] do_recvmmsg+0x1063/0x2120 [ 496.752355][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 496.752355][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 496.752355][T12777] __do_fast_syscall_32+0x96/0xe0 [ 496.752355][T12777] do_fast_syscall_32+0x3c/0x80 [ 496.872075][T12777] do_SYSENTER_32+0x1b/0x20 [ 496.872075][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.872075][T12777] [ 496.872075][T12777] Uninit was stored to memory at: [ 496.872075][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 496.872075][T12777] __msan_chain_origin+0xcb/0x140 [ 496.872075][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 496.872075][T12777] get_compat_msghdr+0x108/0x2c0 [ 496.872075][T12777] do_recvmmsg+0x1063/0x2120 [ 496.872075][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 496.872075][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 496.872075][T12777] __do_fast_syscall_32+0x96/0xe0 [ 496.872075][T12777] do_fast_syscall_32+0x3c/0x80 [ 496.872075][T12777] do_SYSENTER_32+0x1b/0x20 [ 496.872075][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.872075][T12777] [ 496.872075][T12777] Uninit was stored to memory at: [ 496.872075][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 496.872075][T12777] __msan_chain_origin+0xcb/0x140 [ 496.872075][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 496.872075][T12777] get_compat_msghdr+0x108/0x2c0 [ 496.872075][T12777] do_recvmmsg+0x1063/0x2120 [ 496.872075][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 496.872075][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 496.872075][T12777] __do_fast_syscall_32+0x96/0xe0 [ 496.872075][T12777] do_fast_syscall_32+0x3c/0x80 [ 496.872075][T12777] do_SYSENTER_32+0x1b/0x20 [ 496.872075][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.872075][T12777] [ 496.872075][T12777] Uninit was stored to memory at: [ 496.872075][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 496.872075][T12777] __msan_chain_origin+0xcb/0x140 [ 496.872075][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 496.872075][T12777] get_compat_msghdr+0x108/0x2c0 [ 496.872075][T12777] do_recvmmsg+0x1063/0x2120 [ 496.872075][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 496.872075][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 496.872075][T12777] __do_fast_syscall_32+0x96/0xe0 [ 496.872075][T12777] do_fast_syscall_32+0x3c/0x80 [ 496.872075][T12777] do_SYSENTER_32+0x1b/0x20 [ 496.872075][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.872075][T12777] [ 496.872075][T12777] Uninit was stored to memory at: [ 496.872075][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 496.872075][T12777] __msan_chain_origin+0xcb/0x140 [ 496.872075][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 496.872075][T12777] get_compat_msghdr+0x108/0x2c0 [ 496.872075][T12777] do_recvmmsg+0x1063/0x2120 [ 496.872075][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 496.872075][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 496.872075][T12777] __do_fast_syscall_32+0x96/0xe0 [ 496.872075][T12777] do_fast_syscall_32+0x3c/0x80 [ 496.872075][T12777] do_SYSENTER_32+0x1b/0x20 [ 496.872075][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 496.872075][T12777] [ 496.872075][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 496.872075][T12777] do_recvmmsg+0xc1/0x2120 [ 496.872075][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 497.299332][T12777] not chained 1610000 origins [ 497.302136][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 497.302136][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.302136][T12777] Call Trace: [ 497.302136][T12777] dump_stack+0x25a/0x2f6 [ 497.327241][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 497.327241][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 497.327241][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 497.327241][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 497.327241][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 497.327241][T12777] ? release_sock+0x2b5/0x2e0 [ 497.327241][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 497.327241][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 497.327241][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 497.327241][T12777] ? should_fail+0x75/0x9c0 [ 497.327241][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 497.327241][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 497.327241][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 497.327241][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 497.327241][T12777] ? _copy_from_user+0x219/0x310 [ 497.327241][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 497.327241][T12777] __msan_chain_origin+0xcb/0x140 [ 497.327241][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 497.327241][T12777] get_compat_msghdr+0x108/0x2c0 [ 497.327241][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 497.327241][T12777] do_recvmmsg+0x1063/0x2120 [ 497.327241][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 497.327241][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 497.327241][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 497.327241][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 497.327241][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 497.327241][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 497.327241][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 497.327241][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 497.327241][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 497.327241][T12777] __do_fast_syscall_32+0x96/0xe0 [ 497.327241][T12777] do_fast_syscall_32+0x3c/0x80 [ 497.327241][T12777] do_SYSENTER_32+0x1b/0x20 [ 497.327241][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.327241][T12777] RIP: 0023:0xf6f46549 [ 497.327241][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 497.327241][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 497.327241][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 497.327241][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.327241][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.327241][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 497.327241][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.327241][T12777] Uninit was stored to memory at: [ 497.327241][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 497.327241][T12777] __msan_chain_origin+0xcb/0x140 [ 497.327241][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 497.327241][T12777] get_compat_msghdr+0x108/0x2c0 [ 497.327241][T12777] do_recvmmsg+0x1063/0x2120 [ 497.327241][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 497.327241][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 497.327241][T12777] __do_fast_syscall_32+0x96/0xe0 [ 497.327241][T12777] do_fast_syscall_32+0x3c/0x80 [ 497.327241][T12777] do_SYSENTER_32+0x1b/0x20 [ 497.327241][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.327241][T12777] [ 497.327241][T12777] Uninit was stored to memory at: [ 497.327241][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 497.327241][T12777] __msan_chain_origin+0xcb/0x140 [ 497.327241][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 497.327241][T12777] get_compat_msghdr+0x108/0x2c0 [ 497.327241][T12777] do_recvmmsg+0x1063/0x2120 [ 497.327241][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 497.327241][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 497.327241][T12777] __do_fast_syscall_32+0x96/0xe0 [ 497.327241][T12777] do_fast_syscall_32+0x3c/0x80 [ 497.327241][T12777] do_SYSENTER_32+0x1b/0x20 [ 497.327241][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.327241][T12777] [ 497.327241][T12777] Uninit was stored to memory at: [ 497.327241][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 497.327241][T12777] __msan_chain_origin+0xcb/0x140 [ 497.327241][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 497.327241][T12777] get_compat_msghdr+0x108/0x2c0 [ 497.327241][T12777] do_recvmmsg+0x1063/0x2120 [ 497.327241][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 497.327241][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 497.327241][T12777] __do_fast_syscall_32+0x96/0xe0 [ 497.327241][T12777] do_fast_syscall_32+0x3c/0x80 [ 497.327241][T12777] do_SYSENTER_32+0x1b/0x20 [ 497.327241][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.327241][T12777] [ 497.327241][T12777] Uninit was stored to memory at: [ 497.327241][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 497.327241][T12777] __msan_chain_origin+0xcb/0x140 [ 497.327241][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 497.327241][T12777] get_compat_msghdr+0x108/0x2c0 [ 497.327241][T12777] do_recvmmsg+0x1063/0x2120 [ 497.327241][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 497.327241][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 497.327241][T12777] __do_fast_syscall_32+0x96/0xe0 [ 497.327241][T12777] do_fast_syscall_32+0x3c/0x80 [ 497.327241][T12777] do_SYSENTER_32+0x1b/0x20 [ 497.327241][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.327241][T12777] [ 497.327241][T12777] Uninit was stored to memory at: [ 497.327241][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 497.327241][T12777] __msan_chain_origin+0xcb/0x140 [ 497.327241][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 497.327241][T12777] get_compat_msghdr+0x108/0x2c0 [ 497.327241][T12777] do_recvmmsg+0x1063/0x2120 [ 497.327241][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 497.327241][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 497.327241][T12777] __do_fast_syscall_32+0x96/0xe0 [ 497.327241][T12777] do_fast_syscall_32+0x3c/0x80 [ 497.327241][T12777] do_SYSENTER_32+0x1b/0x20 [ 497.327241][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.327241][T12777] [ 497.327241][T12777] Uninit was stored to memory at: [ 497.327241][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 497.327241][T12777] __msan_chain_origin+0xcb/0x140 [ 497.327241][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 497.327241][T12777] get_compat_msghdr+0x108/0x2c0 [ 497.327241][T12777] do_recvmmsg+0x1063/0x2120 [ 497.327241][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 497.327241][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 497.327241][T12777] __do_fast_syscall_32+0x96/0xe0 [ 497.327241][T12777] do_fast_syscall_32+0x3c/0x80 [ 497.327241][T12777] do_SYSENTER_32+0x1b/0x20 [ 497.327241][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.327241][T12777] [ 497.327241][T12777] Uninit was stored to memory at: [ 497.327241][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 497.327241][T12777] __msan_chain_origin+0xcb/0x140 [ 497.327241][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 497.327241][T12777] get_compat_msghdr+0x108/0x2c0 [ 497.327241][T12777] do_recvmmsg+0x1063/0x2120 [ 497.327241][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 497.327241][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 497.327241][T12777] __do_fast_syscall_32+0x96/0xe0 [ 497.327241][T12777] do_fast_syscall_32+0x3c/0x80 [ 497.327241][T12777] do_SYSENTER_32+0x1b/0x20 [ 497.327241][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 497.327241][T12777] [ 497.327241][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 497.327241][T12777] do_recvmmsg+0xc1/0x2120 [ 497.327241][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 498.154882][T12777] not chained 1620000 origins [ 498.159578][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 498.162135][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.162135][T12777] Call Trace: [ 498.162135][T12777] dump_stack+0x25a/0x2f6 [ 498.162135][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 498.162135][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 498.162135][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 498.162135][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 498.162135][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 498.162135][T12777] ? release_sock+0x2b5/0x2e0 [ 498.162135][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 498.162135][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 498.162135][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 498.162135][T12777] ? should_fail+0x75/0x9c0 [ 498.162135][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 498.162135][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 498.162135][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 498.162135][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 498.162135][T12777] ? _copy_from_user+0x219/0x310 [ 498.162135][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 498.162135][T12777] __msan_chain_origin+0xcb/0x140 [ 498.162135][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 498.162135][T12777] get_compat_msghdr+0x108/0x2c0 [ 498.162135][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 498.162135][T12777] do_recvmmsg+0x1063/0x2120 [ 498.162135][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 498.162135][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 498.162135][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 498.162135][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 498.162135][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 498.162135][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 498.162135][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 498.162135][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 498.162135][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 498.162135][T12777] __do_fast_syscall_32+0x96/0xe0 [ 498.162135][T12777] do_fast_syscall_32+0x3c/0x80 [ 498.162135][T12777] do_SYSENTER_32+0x1b/0x20 [ 498.162135][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.162135][T12777] RIP: 0023:0xf6f46549 [ 498.162135][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 498.162135][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 498.162135][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 498.162135][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.162135][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.162135][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 498.162135][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.162135][T12777] Uninit was stored to memory at: [ 498.162135][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 498.162135][T12777] __msan_chain_origin+0xcb/0x140 [ 498.162135][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 498.162135][T12777] get_compat_msghdr+0x108/0x2c0 [ 498.162135][T12777] do_recvmmsg+0x1063/0x2120 [ 498.162135][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 498.162135][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 498.162135][T12777] __do_fast_syscall_32+0x96/0xe0 [ 498.162135][T12777] do_fast_syscall_32+0x3c/0x80 [ 498.162135][T12777] do_SYSENTER_32+0x1b/0x20 [ 498.162135][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.162135][T12777] [ 498.162135][T12777] Uninit was stored to memory at: [ 498.162135][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 498.162135][T12777] __msan_chain_origin+0xcb/0x140 [ 498.162135][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 498.162135][T12777] get_compat_msghdr+0x108/0x2c0 [ 498.162135][T12777] do_recvmmsg+0x1063/0x2120 [ 498.162135][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 498.162135][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 498.162135][T12777] __do_fast_syscall_32+0x96/0xe0 [ 498.162135][T12777] do_fast_syscall_32+0x3c/0x80 [ 498.162135][T12777] do_SYSENTER_32+0x1b/0x20 [ 498.162135][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.162135][T12777] [ 498.162135][T12777] Uninit was stored to memory at: [ 498.162135][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 498.162135][T12777] __msan_chain_origin+0xcb/0x140 [ 498.162135][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 498.162135][T12777] get_compat_msghdr+0x108/0x2c0 [ 498.162135][T12777] do_recvmmsg+0x1063/0x2120 [ 498.162135][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 498.162135][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 498.162135][T12777] __do_fast_syscall_32+0x96/0xe0 [ 498.162135][T12777] do_fast_syscall_32+0x3c/0x80 [ 498.162135][T12777] do_SYSENTER_32+0x1b/0x20 [ 498.162135][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.162135][T12777] [ 498.162135][T12777] Uninit was stored to memory at: [ 498.162135][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 498.162135][T12777] __msan_chain_origin+0xcb/0x140 [ 498.162135][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 498.162135][T12777] get_compat_msghdr+0x108/0x2c0 [ 498.162135][T12777] do_recvmmsg+0x1063/0x2120 [ 498.162135][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 498.162135][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 498.162135][T12777] __do_fast_syscall_32+0x96/0xe0 [ 498.162135][T12777] do_fast_syscall_32+0x3c/0x80 [ 498.162135][T12777] do_SYSENTER_32+0x1b/0x20 [ 498.162135][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.162135][T12777] [ 498.162135][T12777] Uninit was stored to memory at: [ 498.162135][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 498.162135][T12777] __msan_chain_origin+0xcb/0x140 [ 498.162135][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 498.162135][T12777] get_compat_msghdr+0x108/0x2c0 [ 498.162135][T12777] do_recvmmsg+0x1063/0x2120 [ 498.162135][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 498.162135][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 498.162135][T12777] __do_fast_syscall_32+0x96/0xe0 [ 498.162135][T12777] do_fast_syscall_32+0x3c/0x80 [ 498.162135][T12777] do_SYSENTER_32+0x1b/0x20 [ 498.162135][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.162135][T12777] [ 498.162135][T12777] Uninit was stored to memory at: [ 498.162135][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 498.162135][T12777] __msan_chain_origin+0xcb/0x140 [ 498.162135][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 498.162135][T12777] get_compat_msghdr+0x108/0x2c0 [ 498.162135][T12777] do_recvmmsg+0x1063/0x2120 [ 498.162135][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 498.162135][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 498.162135][T12777] __do_fast_syscall_32+0x96/0xe0 [ 498.162135][T12777] do_fast_syscall_32+0x3c/0x80 [ 498.162135][T12777] do_SYSENTER_32+0x1b/0x20 [ 498.162135][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.162135][T12777] [ 498.162135][T12777] Uninit was stored to memory at: [ 498.162135][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 498.162135][T12777] __msan_chain_origin+0xcb/0x140 [ 498.162135][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 498.162135][T12777] get_compat_msghdr+0x108/0x2c0 [ 498.162135][T12777] do_recvmmsg+0x1063/0x2120 [ 498.162135][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 498.162135][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 498.162135][T12777] __do_fast_syscall_32+0x96/0xe0 [ 498.162135][T12777] do_fast_syscall_32+0x3c/0x80 [ 498.162135][T12777] do_SYSENTER_32+0x1b/0x20 [ 498.162135][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 498.162135][T12777] [ 498.162135][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 498.162135][T12777] do_recvmmsg+0xc1/0x2120 [ 498.162135][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.017439][T12777] not chained 1630000 origins [ 499.022109][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 499.022109][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.022109][T12777] Call Trace: [ 499.022109][T12777] dump_stack+0x25a/0x2f6 [ 499.022109][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 499.022109][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.022109][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 499.022109][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 499.067245][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 499.067245][T12777] ? release_sock+0x2b5/0x2e0 [ 499.067245][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.067245][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 499.067245][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 499.067245][T12777] ? should_fail+0x75/0x9c0 [ 499.067245][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.067245][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 499.067245][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 499.067245][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 499.067245][T12777] ? _copy_from_user+0x219/0x310 [ 499.067245][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.067245][T12777] __msan_chain_origin+0xcb/0x140 [ 499.067245][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.067245][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.067245][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 499.067245][T12777] do_recvmmsg+0x1063/0x2120 [ 499.067245][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 499.067245][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.067245][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 499.067245][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.067245][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 499.067245][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 499.067245][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.067245][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.067245][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.067245][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.067245][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.067245][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.067245][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.067245][T12777] RIP: 0023:0xf6f46549 [ 499.067245][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 499.067245][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 499.067245][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 499.067245][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.067245][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.067245][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 499.067245][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.067245][T12777] Uninit was stored to memory at: [ 499.067245][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.067245][T12777] __msan_chain_origin+0xcb/0x140 [ 499.067245][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.067245][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.067245][T12777] do_recvmmsg+0x1063/0x2120 [ 499.067245][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.067245][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.067245][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.067245][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.067245][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.067245][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.067245][T12777] [ 499.067245][T12777] Uninit was stored to memory at: [ 499.067245][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.067245][T12777] __msan_chain_origin+0xcb/0x140 [ 499.067245][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.067245][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.067245][T12777] do_recvmmsg+0x1063/0x2120 [ 499.067245][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.067245][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.067245][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.067245][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.067245][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.067245][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.067245][T12777] [ 499.067245][T12777] Uninit was stored to memory at: [ 499.067245][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.067245][T12777] __msan_chain_origin+0xcb/0x140 [ 499.067245][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.067245][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.067245][T12777] do_recvmmsg+0x1063/0x2120 [ 499.067245][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.067245][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.067245][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.067245][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.067245][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.067245][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.067245][T12777] [ 499.067245][T12777] Uninit was stored to memory at: [ 499.067245][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.067245][T12777] __msan_chain_origin+0xcb/0x140 [ 499.067245][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.067245][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.067245][T12777] do_recvmmsg+0x1063/0x2120 [ 499.067245][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.067245][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.067245][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.067245][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.067245][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.067245][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.067245][T12777] [ 499.067245][T12777] Uninit was stored to memory at: [ 499.067245][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.067245][T12777] __msan_chain_origin+0xcb/0x140 [ 499.067245][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.067245][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.067245][T12777] do_recvmmsg+0x1063/0x2120 [ 499.067245][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.067245][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.067245][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.067245][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.067245][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.067245][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.067245][T12777] [ 499.624242][T12777] Uninit was stored to memory at: [ 499.624242][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.624242][T12777] __msan_chain_origin+0xcb/0x140 [ 499.624242][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.624242][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.624242][T12777] do_recvmmsg+0x1063/0x2120 [ 499.624242][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.624242][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.624242][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.624242][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.624242][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.624242][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.624242][T12777] [ 499.624242][T12777] Uninit was stored to memory at: [ 499.624242][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.624242][T12777] __msan_chain_origin+0xcb/0x140 [ 499.624242][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.624242][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.624242][T12777] do_recvmmsg+0x1063/0x2120 [ 499.624242][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.624242][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.624242][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.624242][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.624242][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.624242][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.624242][T12777] [ 499.624242][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 499.624242][T12777] do_recvmmsg+0xc1/0x2120 [ 499.624242][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.869946][T12777] not chained 1640000 origins [ 499.872118][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 499.872118][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.872118][T12777] Call Trace: [ 499.872118][T12777] dump_stack+0x25a/0x2f6 [ 499.872118][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 499.872118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.872118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 499.872118][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 499.872118][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 499.872118][T12777] ? release_sock+0x2b5/0x2e0 [ 499.872118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.872118][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 499.872118][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 499.872118][T12777] ? should_fail+0x75/0x9c0 [ 499.872118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.872118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 499.872118][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 499.872118][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 499.872118][T12777] ? _copy_from_user+0x219/0x310 [ 499.872118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.872118][T12777] __msan_chain_origin+0xcb/0x140 [ 499.872118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.872118][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.872118][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 499.872118][T12777] do_recvmmsg+0x1063/0x2120 [ 499.872118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 499.872118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.872118][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 499.872118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 499.872118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 499.872118][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 499.872118][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.872118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.872118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.872118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.872118][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.872118][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.872118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.872118][T12777] RIP: 0023:0xf6f46549 [ 499.872118][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 499.872118][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 499.872118][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 499.872118][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.872118][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.872118][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 499.872118][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.872118][T12777] Uninit was stored to memory at: [ 499.872118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.872118][T12777] __msan_chain_origin+0xcb/0x140 [ 499.872118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.872118][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.872118][T12777] do_recvmmsg+0x1063/0x2120 [ 499.872118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.872118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.872118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.872118][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.872118][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.872118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.872118][T12777] [ 499.872118][T12777] Uninit was stored to memory at: [ 499.872118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.872118][T12777] __msan_chain_origin+0xcb/0x140 [ 499.872118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.872118][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.872118][T12777] do_recvmmsg+0x1063/0x2120 [ 499.872118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.872118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.872118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.872118][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.872118][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.872118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.872118][T12777] [ 499.872118][T12777] Uninit was stored to memory at: [ 499.872118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.872118][T12777] __msan_chain_origin+0xcb/0x140 [ 499.872118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.872118][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.872118][T12777] do_recvmmsg+0x1063/0x2120 [ 499.872118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.872118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.872118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.872118][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.872118][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.872118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.872118][T12777] [ 499.872118][T12777] Uninit was stored to memory at: [ 499.872118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.872118][T12777] __msan_chain_origin+0xcb/0x140 [ 499.872118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.872118][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.872118][T12777] do_recvmmsg+0x1063/0x2120 [ 499.872118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.872118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.872118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.872118][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.872118][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.872118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.872118][T12777] [ 499.872118][T12777] Uninit was stored to memory at: [ 499.872118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.872118][T12777] __msan_chain_origin+0xcb/0x140 [ 499.872118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.872118][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.872118][T12777] do_recvmmsg+0x1063/0x2120 [ 499.872118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.872118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.872118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.872118][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.872118][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.872118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.872118][T12777] [ 499.872118][T12777] Uninit was stored to memory at: [ 499.872118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.872118][T12777] __msan_chain_origin+0xcb/0x140 [ 499.872118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.872118][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.872118][T12777] do_recvmmsg+0x1063/0x2120 [ 499.872118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.872118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.872118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.872118][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.872118][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.872118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.872118][T12777] [ 499.872118][T12777] Uninit was stored to memory at: [ 499.872118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 499.872118][T12777] __msan_chain_origin+0xcb/0x140 [ 499.872118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 499.872118][T12777] get_compat_msghdr+0x108/0x2c0 [ 499.872118][T12777] do_recvmmsg+0x1063/0x2120 [ 499.872118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 499.872118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 499.872118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 499.872118][T12777] do_fast_syscall_32+0x3c/0x80 [ 499.872118][T12777] do_SYSENTER_32+0x1b/0x20 [ 499.872118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 499.872118][T12777] [ 499.872118][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 499.872118][T12777] do_recvmmsg+0xc1/0x2120 [ 499.872118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 500.713885][T12777] not chained 1650000 origins [ 500.718575][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 500.722104][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.722104][T12777] Call Trace: [ 500.722104][T12777] dump_stack+0x25a/0x2f6 [ 500.722104][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 500.722104][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 500.722104][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 500.722104][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 500.722104][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 500.722104][T12777] ? release_sock+0x2b5/0x2e0 [ 500.722104][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 500.722104][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 500.722104][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 500.722104][T12777] ? should_fail+0x75/0x9c0 [ 500.722104][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 500.722104][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 500.722104][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 500.722104][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 500.722104][T12777] ? _copy_from_user+0x219/0x310 [ 500.722104][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 500.722104][T12777] __msan_chain_origin+0xcb/0x140 [ 500.722104][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 500.722104][T12777] get_compat_msghdr+0x108/0x2c0 [ 500.722104][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 500.722104][T12777] do_recvmmsg+0x1063/0x2120 [ 500.722104][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 500.722104][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 500.722104][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 500.722104][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 500.722104][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 500.722104][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 500.722104][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 500.722104][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 500.722104][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 500.722104][T12777] __do_fast_syscall_32+0x96/0xe0 [ 500.722104][T12777] do_fast_syscall_32+0x3c/0x80 [ 500.722104][T12777] do_SYSENTER_32+0x1b/0x20 [ 500.722104][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.722104][T12777] RIP: 0023:0xf6f46549 [ 500.722104][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 500.722104][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 500.722104][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 500.722104][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.722104][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.722104][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 500.722104][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.722104][T12777] Uninit was stored to memory at: [ 500.722104][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 500.722104][T12777] __msan_chain_origin+0xcb/0x140 [ 500.722104][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 500.722104][T12777] get_compat_msghdr+0x108/0x2c0 [ 500.722104][T12777] do_recvmmsg+0x1063/0x2120 [ 500.722104][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 500.722104][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 500.722104][T12777] __do_fast_syscall_32+0x96/0xe0 [ 500.722104][T12777] do_fast_syscall_32+0x3c/0x80 [ 500.722104][T12777] do_SYSENTER_32+0x1b/0x20 [ 500.722104][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.722104][T12777] [ 500.722104][T12777] Uninit was stored to memory at: [ 500.722104][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 500.722104][T12777] __msan_chain_origin+0xcb/0x140 [ 500.722104][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 500.722104][T12777] get_compat_msghdr+0x108/0x2c0 [ 500.722104][T12777] do_recvmmsg+0x1063/0x2120 [ 500.722104][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 500.722104][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 500.722104][T12777] __do_fast_syscall_32+0x96/0xe0 [ 500.722104][T12777] do_fast_syscall_32+0x3c/0x80 [ 500.722104][T12777] do_SYSENTER_32+0x1b/0x20 [ 500.722104][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.722104][T12777] [ 500.722104][T12777] Uninit was stored to memory at: [ 500.722104][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 500.722104][T12777] __msan_chain_origin+0xcb/0x140 [ 500.722104][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 500.722104][T12777] get_compat_msghdr+0x108/0x2c0 [ 500.722104][T12777] do_recvmmsg+0x1063/0x2120 [ 500.722104][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 500.722104][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 500.722104][T12777] __do_fast_syscall_32+0x96/0xe0 [ 500.722104][T12777] do_fast_syscall_32+0x3c/0x80 [ 500.722104][T12777] do_SYSENTER_32+0x1b/0x20 [ 500.722104][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.722104][T12777] [ 500.722104][T12777] Uninit was stored to memory at: [ 500.722104][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 500.722104][T12777] __msan_chain_origin+0xcb/0x140 [ 500.722104][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 500.722104][T12777] get_compat_msghdr+0x108/0x2c0 [ 500.722104][T12777] do_recvmmsg+0x1063/0x2120 [ 500.722104][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 500.722104][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 500.722104][T12777] __do_fast_syscall_32+0x96/0xe0 [ 500.722104][T12777] do_fast_syscall_32+0x3c/0x80 [ 500.722104][T12777] do_SYSENTER_32+0x1b/0x20 [ 500.722104][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.722104][T12777] [ 500.722104][T12777] Uninit was stored to memory at: [ 500.722104][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 500.722104][T12777] __msan_chain_origin+0xcb/0x140 [ 500.722104][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 500.722104][T12777] get_compat_msghdr+0x108/0x2c0 [ 500.722104][T12777] do_recvmmsg+0x1063/0x2120 [ 500.722104][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 500.722104][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 500.722104][T12777] __do_fast_syscall_32+0x96/0xe0 [ 500.722104][T12777] do_fast_syscall_32+0x3c/0x80 [ 500.722104][T12777] do_SYSENTER_32+0x1b/0x20 [ 500.722104][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.722104][T12777] [ 500.722104][T12777] Uninit was stored to memory at: [ 500.722104][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 500.722104][T12777] __msan_chain_origin+0xcb/0x140 [ 500.722104][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 500.722104][T12777] get_compat_msghdr+0x108/0x2c0 [ 500.722104][T12777] do_recvmmsg+0x1063/0x2120 [ 500.722104][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 500.722104][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 500.722104][T12777] __do_fast_syscall_32+0x96/0xe0 [ 500.722104][T12777] do_fast_syscall_32+0x3c/0x80 [ 500.722104][T12777] do_SYSENTER_32+0x1b/0x20 [ 500.722104][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.722104][T12777] [ 500.722104][T12777] Uninit was stored to memory at: [ 500.722104][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 500.722104][T12777] __msan_chain_origin+0xcb/0x140 [ 500.722104][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 500.722104][T12777] get_compat_msghdr+0x108/0x2c0 [ 500.722104][T12777] do_recvmmsg+0x1063/0x2120 [ 500.722104][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 500.722104][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 500.722104][T12777] __do_fast_syscall_32+0x96/0xe0 [ 500.722104][T12777] do_fast_syscall_32+0x3c/0x80 [ 500.722104][T12777] do_SYSENTER_32+0x1b/0x20 [ 500.722104][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 500.722104][T12777] [ 500.722104][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 500.722104][T12777] do_recvmmsg+0xc1/0x2120 [ 500.722104][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 501.556488][T12777] not chained 1660000 origins [ 501.561521][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 501.562123][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.562123][T12777] Call Trace: [ 501.562123][T12777] dump_stack+0x25a/0x2f6 [ 501.562123][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 501.562123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 501.562123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 501.562123][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 501.562123][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 501.562123][T12777] ? release_sock+0x2b5/0x2e0 [ 501.562123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 501.622374][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 501.622374][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 501.622374][T12777] ? should_fail+0x75/0x9c0 [ 501.622374][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 501.622374][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 501.622374][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 501.622374][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 501.622374][T12777] ? _copy_from_user+0x219/0x310 [ 501.622374][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 501.622374][T12777] __msan_chain_origin+0xcb/0x140 [ 501.622374][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 501.622374][T12777] get_compat_msghdr+0x108/0x2c0 [ 501.622374][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 501.622374][T12777] do_recvmmsg+0x1063/0x2120 [ 501.622374][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 501.622374][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 501.622374][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 501.622374][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 501.622374][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 501.622374][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 501.622374][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 501.622374][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 501.622374][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 501.622374][T12777] __do_fast_syscall_32+0x96/0xe0 [ 501.622374][T12777] do_fast_syscall_32+0x3c/0x80 [ 501.622374][T12777] do_SYSENTER_32+0x1b/0x20 [ 501.622374][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.622374][T12777] RIP: 0023:0xf6f46549 [ 501.622374][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 501.622374][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 501.622374][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 501.622374][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.622374][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.622374][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 501.622374][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.622374][T12777] Uninit was stored to memory at: [ 501.622374][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 501.622374][T12777] __msan_chain_origin+0xcb/0x140 [ 501.622374][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 501.622374][T12777] get_compat_msghdr+0x108/0x2c0 [ 501.622374][T12777] do_recvmmsg+0x1063/0x2120 [ 501.622374][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 501.622374][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 501.622374][T12777] __do_fast_syscall_32+0x96/0xe0 [ 501.622374][T12777] do_fast_syscall_32+0x3c/0x80 [ 501.622374][T12777] do_SYSENTER_32+0x1b/0x20 [ 501.622374][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.622374][T12777] [ 501.622374][T12777] Uninit was stored to memory at: [ 501.622374][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 501.622374][T12777] __msan_chain_origin+0xcb/0x140 [ 501.622374][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 501.622374][T12777] get_compat_msghdr+0x108/0x2c0 [ 501.622374][T12777] do_recvmmsg+0x1063/0x2120 [ 501.622374][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 501.622374][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 501.622374][T12777] __do_fast_syscall_32+0x96/0xe0 [ 501.622374][T12777] do_fast_syscall_32+0x3c/0x80 [ 501.622374][T12777] do_SYSENTER_32+0x1b/0x20 [ 501.622374][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.622374][T12777] [ 501.622374][T12777] Uninit was stored to memory at: [ 501.622374][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 501.622374][T12777] __msan_chain_origin+0xcb/0x140 [ 501.622374][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 501.622374][T12777] get_compat_msghdr+0x108/0x2c0 [ 501.622374][T12777] do_recvmmsg+0x1063/0x2120 [ 501.622374][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 501.622374][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 501.622374][T12777] __do_fast_syscall_32+0x96/0xe0 [ 501.622374][T12777] do_fast_syscall_32+0x3c/0x80 [ 501.622374][T12777] do_SYSENTER_32+0x1b/0x20 [ 501.622374][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.622374][T12777] [ 501.622374][T12777] Uninit was stored to memory at: [ 501.622374][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 501.622374][T12777] __msan_chain_origin+0xcb/0x140 [ 501.622374][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 501.622374][T12777] get_compat_msghdr+0x108/0x2c0 [ 501.622374][T12777] do_recvmmsg+0x1063/0x2120 [ 501.622374][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 501.622374][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 501.622374][T12777] __do_fast_syscall_32+0x96/0xe0 [ 501.622374][T12777] do_fast_syscall_32+0x3c/0x80 [ 501.622374][T12777] do_SYSENTER_32+0x1b/0x20 [ 501.622374][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.622374][T12777] [ 501.622374][T12777] Uninit was stored to memory at: [ 501.622374][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 501.622374][T12777] __msan_chain_origin+0xcb/0x140 [ 501.622374][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 501.622374][T12777] get_compat_msghdr+0x108/0x2c0 [ 501.622374][T12777] do_recvmmsg+0x1063/0x2120 [ 501.622374][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 501.622374][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 501.622374][T12777] __do_fast_syscall_32+0x96/0xe0 [ 501.622374][T12777] do_fast_syscall_32+0x3c/0x80 [ 501.622374][T12777] do_SYSENTER_32+0x1b/0x20 [ 501.622374][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.622374][T12777] [ 501.622374][T12777] Uninit was stored to memory at: [ 501.622374][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 501.622374][T12777] __msan_chain_origin+0xcb/0x140 [ 501.622374][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 501.622374][T12777] get_compat_msghdr+0x108/0x2c0 [ 501.622374][T12777] do_recvmmsg+0x1063/0x2120 [ 501.622374][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 501.622374][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 501.622374][T12777] __do_fast_syscall_32+0x96/0xe0 [ 501.622374][T12777] do_fast_syscall_32+0x3c/0x80 [ 501.622374][T12777] do_SYSENTER_32+0x1b/0x20 [ 501.622374][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.622374][T12777] [ 501.622374][T12777] Uninit was stored to memory at: [ 501.622374][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 501.622374][T12777] __msan_chain_origin+0xcb/0x140 [ 501.622374][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 501.622374][T12777] get_compat_msghdr+0x108/0x2c0 [ 501.622374][T12777] do_recvmmsg+0x1063/0x2120 [ 501.622374][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 501.622374][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 501.622374][T12777] __do_fast_syscall_32+0x96/0xe0 [ 501.622374][T12777] do_fast_syscall_32+0x3c/0x80 [ 501.622374][T12777] do_SYSENTER_32+0x1b/0x20 [ 501.622374][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 501.622374][T12777] [ 501.622374][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 501.622374][T12777] do_recvmmsg+0xc1/0x2120 [ 501.622374][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 502.406290][T12777] not chained 1670000 origins [ 502.410977][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 502.412126][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.412126][T12777] Call Trace: [ 502.412126][T12777] dump_stack+0x25a/0x2f6 [ 502.412126][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 502.412126][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 502.412126][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 502.412126][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 502.412126][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 502.412126][T12777] ? release_sock+0x2b5/0x2e0 [ 502.412126][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 502.412126][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 502.412126][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 502.412126][T12777] ? should_fail+0x75/0x9c0 [ 502.412126][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 502.412126][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 502.412126][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 502.412126][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 502.412126][T12777] ? _copy_from_user+0x219/0x310 [ 502.412126][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 502.412126][T12777] __msan_chain_origin+0xcb/0x140 [ 502.412126][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 502.412126][T12777] get_compat_msghdr+0x108/0x2c0 [ 502.412126][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 502.412126][T12777] do_recvmmsg+0x1063/0x2120 [ 502.412126][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 502.412126][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 502.412126][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 502.412126][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 502.412126][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 502.412126][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 502.412126][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 502.412126][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 502.412126][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 502.412126][T12777] __do_fast_syscall_32+0x96/0xe0 [ 502.412126][T12777] do_fast_syscall_32+0x3c/0x80 [ 502.412126][T12777] do_SYSENTER_32+0x1b/0x20 [ 502.412126][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.412126][T12777] RIP: 0023:0xf6f46549 [ 502.412126][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 502.412126][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 502.412126][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 502.412126][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.412126][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.412126][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 502.412126][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.412126][T12777] Uninit was stored to memory at: [ 502.412126][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 502.412126][T12777] __msan_chain_origin+0xcb/0x140 [ 502.412126][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 502.412126][T12777] get_compat_msghdr+0x108/0x2c0 [ 502.412126][T12777] do_recvmmsg+0x1063/0x2120 [ 502.412126][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 502.412126][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 502.412126][T12777] __do_fast_syscall_32+0x96/0xe0 [ 502.412126][T12777] do_fast_syscall_32+0x3c/0x80 [ 502.412126][T12777] do_SYSENTER_32+0x1b/0x20 [ 502.412126][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.412126][T12777] [ 502.412126][T12777] Uninit was stored to memory at: [ 502.412126][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 502.412126][T12777] __msan_chain_origin+0xcb/0x140 [ 502.412126][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 502.412126][T12777] get_compat_msghdr+0x108/0x2c0 [ 502.412126][T12777] do_recvmmsg+0x1063/0x2120 [ 502.412126][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 502.412126][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 502.412126][T12777] __do_fast_syscall_32+0x96/0xe0 [ 502.412126][T12777] do_fast_syscall_32+0x3c/0x80 [ 502.412126][T12777] do_SYSENTER_32+0x1b/0x20 [ 502.412126][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.412126][T12777] [ 502.412126][T12777] Uninit was stored to memory at: [ 502.412126][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 502.412126][T12777] __msan_chain_origin+0xcb/0x140 [ 502.412126][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 502.412126][T12777] get_compat_msghdr+0x108/0x2c0 [ 502.412126][T12777] do_recvmmsg+0x1063/0x2120 [ 502.412126][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 502.412126][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 502.412126][T12777] __do_fast_syscall_32+0x96/0xe0 [ 502.412126][T12777] do_fast_syscall_32+0x3c/0x80 [ 502.412126][T12777] do_SYSENTER_32+0x1b/0x20 [ 502.412126][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.412126][T12777] [ 502.412126][T12777] Uninit was stored to memory at: [ 502.412126][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 502.412126][T12777] __msan_chain_origin+0xcb/0x140 [ 502.412126][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 502.412126][T12777] get_compat_msghdr+0x108/0x2c0 [ 502.412126][T12777] do_recvmmsg+0x1063/0x2120 [ 502.412126][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 502.412126][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 502.412126][T12777] __do_fast_syscall_32+0x96/0xe0 [ 502.412126][T12777] do_fast_syscall_32+0x3c/0x80 [ 502.412126][T12777] do_SYSENTER_32+0x1b/0x20 [ 502.412126][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.412126][T12777] [ 502.412126][T12777] Uninit was stored to memory at: [ 502.412126][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 502.412126][T12777] __msan_chain_origin+0xcb/0x140 [ 502.412126][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 502.412126][T12777] get_compat_msghdr+0x108/0x2c0 [ 502.412126][T12777] do_recvmmsg+0x1063/0x2120 [ 502.412126][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 502.412126][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 502.412126][T12777] __do_fast_syscall_32+0x96/0xe0 [ 502.412126][T12777] do_fast_syscall_32+0x3c/0x80 [ 502.412126][T12777] do_SYSENTER_32+0x1b/0x20 [ 502.412126][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.412126][T12777] [ 502.412126][T12777] Uninit was stored to memory at: [ 502.412126][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 502.412126][T12777] __msan_chain_origin+0xcb/0x140 [ 502.412126][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 502.412126][T12777] get_compat_msghdr+0x108/0x2c0 [ 502.412126][T12777] do_recvmmsg+0x1063/0x2120 [ 502.412126][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 502.412126][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 502.412126][T12777] __do_fast_syscall_32+0x96/0xe0 [ 502.412126][T12777] do_fast_syscall_32+0x3c/0x80 [ 502.412126][T12777] do_SYSENTER_32+0x1b/0x20 [ 502.412126][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.412126][T12777] [ 502.412126][T12777] Uninit was stored to memory at: [ 502.412126][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 502.412126][T12777] __msan_chain_origin+0xcb/0x140 [ 502.412126][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 502.412126][T12777] get_compat_msghdr+0x108/0x2c0 [ 502.412126][T12777] do_recvmmsg+0x1063/0x2120 [ 502.412126][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 502.412126][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 502.412126][T12777] __do_fast_syscall_32+0x96/0xe0 [ 502.412126][T12777] do_fast_syscall_32+0x3c/0x80 [ 502.412126][T12777] do_SYSENTER_32+0x1b/0x20 [ 502.412126][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 502.412126][T12777] [ 502.412126][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 502.412126][T12777] do_recvmmsg+0xc1/0x2120 [ 502.412126][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 503.253235][T12777] not chained 1680000 origins [ 503.257928][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 503.262115][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.262115][T12777] Call Trace: [ 503.262115][T12777] dump_stack+0x25a/0x2f6 [ 503.262115][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 503.262115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 503.262115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 503.262115][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 503.262115][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 503.262115][T12777] ? release_sock+0x2b5/0x2e0 [ 503.262115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 503.262115][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 503.262115][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 503.262115][T12777] ? should_fail+0x75/0x9c0 [ 503.262115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 503.262115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 503.262115][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 503.262115][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 503.262115][T12777] ? _copy_from_user+0x219/0x310 [ 503.262115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 503.262115][T12777] __msan_chain_origin+0xcb/0x140 [ 503.262115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 503.262115][T12777] get_compat_msghdr+0x108/0x2c0 [ 503.262115][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 503.262115][T12777] do_recvmmsg+0x1063/0x2120 [ 503.262115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 503.262115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 503.262115][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 503.262115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 503.262115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 503.262115][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 503.262115][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 503.262115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 503.262115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 503.262115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 503.262115][T12777] do_fast_syscall_32+0x3c/0x80 [ 503.262115][T12777] do_SYSENTER_32+0x1b/0x20 [ 503.262115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.262115][T12777] RIP: 0023:0xf6f46549 [ 503.262115][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 503.262115][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 503.262115][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 503.262115][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.262115][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.262115][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 503.262115][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.262115][T12777] Uninit was stored to memory at: [ 503.262115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 503.262115][T12777] __msan_chain_origin+0xcb/0x140 [ 503.262115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 503.262115][T12777] get_compat_msghdr+0x108/0x2c0 [ 503.262115][T12777] do_recvmmsg+0x1063/0x2120 [ 503.262115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 503.262115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 503.262115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 503.262115][T12777] do_fast_syscall_32+0x3c/0x80 [ 503.262115][T12777] do_SYSENTER_32+0x1b/0x20 [ 503.262115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.262115][T12777] [ 503.262115][T12777] Uninit was stored to memory at: [ 503.262115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 503.262115][T12777] __msan_chain_origin+0xcb/0x140 [ 503.262115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 503.622315][T12777] get_compat_msghdr+0x108/0x2c0 [ 503.622315][T12777] do_recvmmsg+0x1063/0x2120 [ 503.622315][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 503.622315][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 503.622315][T12777] __do_fast_syscall_32+0x96/0xe0 [ 503.622315][T12777] do_fast_syscall_32+0x3c/0x80 [ 503.622315][T12777] do_SYSENTER_32+0x1b/0x20 [ 503.622315][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.622315][T12777] [ 503.622315][T12777] Uninit was stored to memory at: [ 503.622315][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 503.622315][T12777] __msan_chain_origin+0xcb/0x140 [ 503.622315][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 503.622315][T12777] get_compat_msghdr+0x108/0x2c0 [ 503.622315][T12777] do_recvmmsg+0x1063/0x2120 [ 503.622315][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 503.622315][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 503.622315][T12777] __do_fast_syscall_32+0x96/0xe0 [ 503.622315][T12777] do_fast_syscall_32+0x3c/0x80 [ 503.622315][T12777] do_SYSENTER_32+0x1b/0x20 [ 503.622315][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.622315][T12777] [ 503.622315][T12777] Uninit was stored to memory at: [ 503.622315][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 503.622315][T12777] __msan_chain_origin+0xcb/0x140 [ 503.622315][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 503.622315][T12777] get_compat_msghdr+0x108/0x2c0 [ 503.622315][T12777] do_recvmmsg+0x1063/0x2120 [ 503.622315][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 503.622315][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 503.622315][T12777] __do_fast_syscall_32+0x96/0xe0 [ 503.622315][T12777] do_fast_syscall_32+0x3c/0x80 [ 503.622315][T12777] do_SYSENTER_32+0x1b/0x20 [ 503.622315][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.622315][T12777] [ 503.622315][T12777] Uninit was stored to memory at: [ 503.622315][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 503.622315][T12777] __msan_chain_origin+0xcb/0x140 [ 503.622315][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 503.622315][T12777] get_compat_msghdr+0x108/0x2c0 [ 503.622315][T12777] do_recvmmsg+0x1063/0x2120 [ 503.622315][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 503.622315][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 503.622315][T12777] __do_fast_syscall_32+0x96/0xe0 [ 503.622315][T12777] do_fast_syscall_32+0x3c/0x80 [ 503.622315][T12777] do_SYSENTER_32+0x1b/0x20 [ 503.622315][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.622315][T12777] [ 503.622315][T12777] Uninit was stored to memory at: [ 503.622315][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 503.622315][T12777] __msan_chain_origin+0xcb/0x140 [ 503.622315][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 503.622315][T12777] get_compat_msghdr+0x108/0x2c0 [ 503.622315][T12777] do_recvmmsg+0x1063/0x2120 [ 503.622315][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 503.622315][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 503.622315][T12777] __do_fast_syscall_32+0x96/0xe0 [ 503.622315][T12777] do_fast_syscall_32+0x3c/0x80 [ 503.622315][T12777] do_SYSENTER_32+0x1b/0x20 [ 503.622315][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.622315][T12777] [ 503.622315][T12777] Uninit was stored to memory at: [ 503.622315][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 503.622315][T12777] __msan_chain_origin+0xcb/0x140 [ 503.622315][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 503.622315][T12777] get_compat_msghdr+0x108/0x2c0 [ 503.622315][T12777] do_recvmmsg+0x1063/0x2120 [ 503.622315][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 503.622315][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 503.622315][T12777] __do_fast_syscall_32+0x96/0xe0 [ 503.622315][T12777] do_fast_syscall_32+0x3c/0x80 [ 503.622315][T12777] do_SYSENTER_32+0x1b/0x20 [ 503.622315][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 503.622315][T12777] [ 503.622315][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 503.622315][T12777] do_recvmmsg+0xc1/0x2120 [ 503.622315][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.106727][T12777] not chained 1690000 origins [ 504.111422][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 504.112123][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.112123][T12777] Call Trace: [ 504.112123][T12777] dump_stack+0x25a/0x2f6 [ 504.112123][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 504.112123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.112123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 504.112123][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 504.112123][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 504.112123][T12777] ? release_sock+0x2b5/0x2e0 [ 504.112123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.112123][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 504.112123][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 504.112123][T12777] ? should_fail+0x75/0x9c0 [ 504.112123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.112123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 504.112123][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 504.112123][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 504.112123][T12777] ? _copy_from_user+0x219/0x310 [ 504.112123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.112123][T12777] __msan_chain_origin+0xcb/0x140 [ 504.112123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.112123][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.112123][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 504.112123][T12777] do_recvmmsg+0x1063/0x2120 [ 504.112123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 504.112123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.112123][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 504.112123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.112123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 504.112123][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 504.112123][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.112123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.112123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.112123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.112123][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.112123][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.112123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.112123][T12777] RIP: 0023:0xf6f46549 [ 504.112123][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 504.112123][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 504.112123][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 504.112123][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.112123][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.112123][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 504.112123][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.112123][T12777] Uninit was stored to memory at: [ 504.112123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.112123][T12777] __msan_chain_origin+0xcb/0x140 [ 504.112123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.112123][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.112123][T12777] do_recvmmsg+0x1063/0x2120 [ 504.112123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.112123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.112123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.112123][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.112123][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.112123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.112123][T12777] [ 504.112123][T12777] Uninit was stored to memory at: [ 504.112123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.112123][T12777] __msan_chain_origin+0xcb/0x140 [ 504.112123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.112123][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.112123][T12777] do_recvmmsg+0x1063/0x2120 [ 504.112123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.112123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.112123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.112123][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.112123][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.112123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.112123][T12777] [ 504.112123][T12777] Uninit was stored to memory at: [ 504.112123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.112123][T12777] __msan_chain_origin+0xcb/0x140 [ 504.112123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.112123][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.112123][T12777] do_recvmmsg+0x1063/0x2120 [ 504.112123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.112123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.112123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.112123][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.112123][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.112123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.112123][T12777] [ 504.112123][T12777] Uninit was stored to memory at: [ 504.112123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.112123][T12777] __msan_chain_origin+0xcb/0x140 [ 504.112123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.112123][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.112123][T12777] do_recvmmsg+0x1063/0x2120 [ 504.112123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.112123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.112123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.112123][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.112123][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.112123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.112123][T12777] [ 504.112123][T12777] Uninit was stored to memory at: [ 504.112123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.112123][T12777] __msan_chain_origin+0xcb/0x140 [ 504.112123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.112123][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.112123][T12777] do_recvmmsg+0x1063/0x2120 [ 504.112123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.112123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.112123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.112123][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.112123][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.112123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.112123][T12777] [ 504.112123][T12777] Uninit was stored to memory at: [ 504.112123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.112123][T12777] __msan_chain_origin+0xcb/0x140 [ 504.112123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.112123][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.112123][T12777] do_recvmmsg+0x1063/0x2120 [ 504.112123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.112123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.112123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.112123][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.112123][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.112123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.112123][T12777] [ 504.112123][T12777] Uninit was stored to memory at: [ 504.112123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.112123][T12777] __msan_chain_origin+0xcb/0x140 [ 504.112123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.112123][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.112123][T12777] do_recvmmsg+0x1063/0x2120 [ 504.112123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.112123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.112123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.112123][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.112123][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.112123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.112123][T12777] [ 504.112123][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 504.112123][T12777] do_recvmmsg+0xc1/0x2120 [ 504.112123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.965807][T12777] not chained 1700000 origins [ 504.970521][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 504.972119][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.972119][T12777] Call Trace: [ 504.972119][T12777] dump_stack+0x25a/0x2f6 [ 504.972119][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 504.972119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.972119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 504.972119][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 504.972119][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 504.972119][T12777] ? release_sock+0x2b5/0x2e0 [ 504.972119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.972119][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 504.972119][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 504.972119][T12777] ? should_fail+0x75/0x9c0 [ 504.972119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.972119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 504.972119][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 504.972119][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 504.972119][T12777] ? _copy_from_user+0x219/0x310 [ 504.972119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.972119][T12777] __msan_chain_origin+0xcb/0x140 [ 504.972119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.972119][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.972119][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 504.972119][T12777] do_recvmmsg+0x1063/0x2120 [ 504.972119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 504.972119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.972119][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 504.972119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 504.972119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 504.972119][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 504.972119][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.972119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.972119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.972119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.972119][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.972119][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.972119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.972119][T12777] RIP: 0023:0xf6f46549 [ 504.972119][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 504.972119][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 504.972119][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 504.972119][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.972119][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.972119][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 504.972119][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.972119][T12777] Uninit was stored to memory at: [ 504.972119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.972119][T12777] __msan_chain_origin+0xcb/0x140 [ 504.972119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.972119][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.972119][T12777] do_recvmmsg+0x1063/0x2120 [ 504.972119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.972119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.972119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.972119][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.972119][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.972119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.972119][T12777] [ 504.972119][T12777] Uninit was stored to memory at: [ 504.972119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.972119][T12777] __msan_chain_origin+0xcb/0x140 [ 504.972119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.972119][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.972119][T12777] do_recvmmsg+0x1063/0x2120 [ 504.972119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.972119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.972119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.972119][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.972119][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.972119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.972119][T12777] [ 504.972119][T12777] Uninit was stored to memory at: [ 504.972119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.972119][T12777] __msan_chain_origin+0xcb/0x140 [ 504.972119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.972119][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.972119][T12777] do_recvmmsg+0x1063/0x2120 [ 504.972119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.972119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.972119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.972119][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.972119][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.972119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.972119][T12777] [ 504.972119][T12777] Uninit was stored to memory at: [ 504.972119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.972119][T12777] __msan_chain_origin+0xcb/0x140 [ 504.972119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.972119][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.972119][T12777] do_recvmmsg+0x1063/0x2120 [ 504.972119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.972119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.972119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.972119][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.972119][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.972119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.972119][T12777] [ 504.972119][T12777] Uninit was stored to memory at: [ 504.972119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.972119][T12777] __msan_chain_origin+0xcb/0x140 [ 504.972119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.972119][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.972119][T12777] do_recvmmsg+0x1063/0x2120 [ 504.972119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.972119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.972119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.972119][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.972119][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.972119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.972119][T12777] [ 504.972119][T12777] Uninit was stored to memory at: [ 504.972119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.972119][T12777] __msan_chain_origin+0xcb/0x140 [ 504.972119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.972119][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.972119][T12777] do_recvmmsg+0x1063/0x2120 [ 504.972119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.972119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.972119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.972119][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.972119][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.972119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.972119][T12777] [ 504.972119][T12777] Uninit was stored to memory at: [ 504.972119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 504.972119][T12777] __msan_chain_origin+0xcb/0x140 [ 504.972119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 504.972119][T12777] get_compat_msghdr+0x108/0x2c0 [ 504.972119][T12777] do_recvmmsg+0x1063/0x2120 [ 504.972119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 504.972119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 504.972119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 504.972119][T12777] do_fast_syscall_32+0x3c/0x80 [ 504.972119][T12777] do_SYSENTER_32+0x1b/0x20 [ 504.972119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 504.972119][T12777] [ 505.702423][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 505.702423][T12777] do_recvmmsg+0xc1/0x2120 [ 505.702423][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 505.818984][T12777] not chained 1710000 origins [ 505.822122][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 505.822122][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.822122][T12777] Call Trace: [ 505.822122][T12777] dump_stack+0x25a/0x2f6 [ 505.822122][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 505.822122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 505.822122][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 505.822122][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 505.822122][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 505.822122][T12777] ? release_sock+0x2b5/0x2e0 [ 505.822122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 505.822122][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 505.822122][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 505.822122][T12777] ? should_fail+0x75/0x9c0 [ 505.822122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 505.822122][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 505.822122][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 505.822122][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 505.822122][T12777] ? _copy_from_user+0x219/0x310 [ 505.822122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 505.822122][T12777] __msan_chain_origin+0xcb/0x140 [ 505.822122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 505.822122][T12777] get_compat_msghdr+0x108/0x2c0 [ 505.822122][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 505.822122][T12777] do_recvmmsg+0x1063/0x2120 [ 505.822122][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 505.822122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 505.822122][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 505.822122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 505.822122][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 505.822122][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 505.822122][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 505.822122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 505.822122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 505.822122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 505.822122][T12777] do_fast_syscall_32+0x3c/0x80 [ 505.822122][T12777] do_SYSENTER_32+0x1b/0x20 [ 505.822122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.822122][T12777] RIP: 0023:0xf6f46549 [ 505.822122][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 505.822122][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 505.822122][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 505.822122][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.822122][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.822122][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 505.822122][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.822122][T12777] Uninit was stored to memory at: [ 505.822122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 505.822122][T12777] __msan_chain_origin+0xcb/0x140 [ 505.822122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 505.822122][T12777] get_compat_msghdr+0x108/0x2c0 [ 505.822122][T12777] do_recvmmsg+0x1063/0x2120 [ 505.822122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 505.822122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 505.822122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 505.822122][T12777] do_fast_syscall_32+0x3c/0x80 [ 505.822122][T12777] do_SYSENTER_32+0x1b/0x20 [ 505.822122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.822122][T12777] [ 505.822122][T12777] Uninit was stored to memory at: [ 505.822122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 505.822122][T12777] __msan_chain_origin+0xcb/0x140 [ 505.822122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 505.822122][T12777] get_compat_msghdr+0x108/0x2c0 [ 505.822122][T12777] do_recvmmsg+0x1063/0x2120 [ 505.822122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 505.822122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 505.822122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 505.822122][T12777] do_fast_syscall_32+0x3c/0x80 [ 505.822122][T12777] do_SYSENTER_32+0x1b/0x20 [ 505.822122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.822122][T12777] [ 505.822122][T12777] Uninit was stored to memory at: [ 505.822122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 505.822122][T12777] __msan_chain_origin+0xcb/0x140 [ 505.822122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 505.822122][T12777] get_compat_msghdr+0x108/0x2c0 [ 505.822122][T12777] do_recvmmsg+0x1063/0x2120 [ 505.822122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 505.822122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 505.822122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 505.822122][T12777] do_fast_syscall_32+0x3c/0x80 [ 505.822122][T12777] do_SYSENTER_32+0x1b/0x20 [ 505.822122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.822122][T12777] [ 505.822122][T12777] Uninit was stored to memory at: [ 505.822122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 505.822122][T12777] __msan_chain_origin+0xcb/0x140 [ 505.822122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 505.822122][T12777] get_compat_msghdr+0x108/0x2c0 [ 505.822122][T12777] do_recvmmsg+0x1063/0x2120 [ 505.822122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 505.822122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 505.822122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 505.822122][T12777] do_fast_syscall_32+0x3c/0x80 [ 505.822122][T12777] do_SYSENTER_32+0x1b/0x20 [ 505.822122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.822122][T12777] [ 505.822122][T12777] Uninit was stored to memory at: [ 505.822122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 505.822122][T12777] __msan_chain_origin+0xcb/0x140 [ 505.822122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 505.822122][T12777] get_compat_msghdr+0x108/0x2c0 [ 505.822122][T12777] do_recvmmsg+0x1063/0x2120 [ 505.822122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 505.822122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 505.822122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 505.822122][T12777] do_fast_syscall_32+0x3c/0x80 [ 505.822122][T12777] do_SYSENTER_32+0x1b/0x20 [ 505.822122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.822122][T12777] [ 505.822122][T12777] Uninit was stored to memory at: [ 505.822122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 505.822122][T12777] __msan_chain_origin+0xcb/0x140 [ 505.822122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 505.822122][T12777] get_compat_msghdr+0x108/0x2c0 [ 505.822122][T12777] do_recvmmsg+0x1063/0x2120 [ 505.822122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 505.822122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 505.822122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 505.822122][T12777] do_fast_syscall_32+0x3c/0x80 [ 505.822122][T12777] do_SYSENTER_32+0x1b/0x20 [ 505.822122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.822122][T12777] [ 505.822122][T12777] Uninit was stored to memory at: [ 505.822122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 505.822122][T12777] __msan_chain_origin+0xcb/0x140 [ 505.822122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 505.822122][T12777] get_compat_msghdr+0x108/0x2c0 [ 505.822122][T12777] do_recvmmsg+0x1063/0x2120 [ 505.822122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 505.822122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 505.822122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 505.822122][T12777] do_fast_syscall_32+0x3c/0x80 [ 505.822122][T12777] do_SYSENTER_32+0x1b/0x20 [ 505.822122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 505.822122][T12777] [ 505.822122][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 505.822122][T12777] do_recvmmsg+0xc1/0x2120 [ 505.822122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 506.672933][T12777] not chained 1720000 origins [ 506.677634][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 506.682127][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.682127][T12777] Call Trace: [ 506.682127][T12777] dump_stack+0x25a/0x2f6 [ 506.682127][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 506.682127][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 506.682127][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 506.682127][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 506.682127][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 506.682127][T12777] ? release_sock+0x2b5/0x2e0 [ 506.682127][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 506.682127][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 506.682127][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 506.682127][T12777] ? should_fail+0x75/0x9c0 [ 506.682127][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 506.682127][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 506.682127][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 506.682127][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 506.682127][T12777] ? _copy_from_user+0x219/0x310 [ 506.682127][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 506.682127][T12777] __msan_chain_origin+0xcb/0x140 [ 506.682127][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 506.682127][T12777] get_compat_msghdr+0x108/0x2c0 [ 506.682127][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 506.682127][T12777] do_recvmmsg+0x1063/0x2120 [ 506.682127][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 506.682127][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 506.682127][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 506.682127][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 506.682127][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 506.682127][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 506.682127][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 506.682127][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 506.682127][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 506.682127][T12777] __do_fast_syscall_32+0x96/0xe0 [ 506.682127][T12777] do_fast_syscall_32+0x3c/0x80 [ 506.682127][T12777] do_SYSENTER_32+0x1b/0x20 [ 506.682127][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 506.682127][T12777] RIP: 0023:0xf6f46549 [ 506.682127][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 506.682127][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 506.682127][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 506.682127][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.682127][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.682127][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 506.682127][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.682127][T12777] Uninit was stored to memory at: [ 506.682127][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 506.682127][T12777] __msan_chain_origin+0xcb/0x140 [ 506.682127][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 506.682127][T12777] get_compat_msghdr+0x108/0x2c0 [ 506.682127][T12777] do_recvmmsg+0x1063/0x2120 [ 506.682127][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 506.682127][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 506.682127][T12777] __do_fast_syscall_32+0x96/0xe0 [ 506.682127][T12777] do_fast_syscall_32+0x3c/0x80 [ 506.682127][T12777] do_SYSENTER_32+0x1b/0x20 [ 506.682127][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 506.682127][T12777] [ 506.682127][T12777] Uninit was stored to memory at: [ 506.682127][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 506.682127][T12777] __msan_chain_origin+0xcb/0x140 [ 506.682127][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 506.682127][T12777] get_compat_msghdr+0x108/0x2c0 [ 506.682127][T12777] do_recvmmsg+0x1063/0x2120 [ 506.682127][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 506.682127][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 506.682127][T12777] __do_fast_syscall_32+0x96/0xe0 [ 506.682127][T12777] do_fast_syscall_32+0x3c/0x80 [ 506.682127][T12777] do_SYSENTER_32+0x1b/0x20 [ 506.682127][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 506.682127][T12777] [ 506.682127][T12777] Uninit was stored to memory at: [ 506.682127][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 506.682127][T12777] __msan_chain_origin+0xcb/0x140 [ 506.682127][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 506.682127][T12777] get_compat_msghdr+0x108/0x2c0 [ 506.682127][T12777] do_recvmmsg+0x1063/0x2120 [ 506.682127][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 506.682127][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 506.682127][T12777] __do_fast_syscall_32+0x96/0xe0 [ 506.682127][T12777] do_fast_syscall_32+0x3c/0x80 [ 506.682127][T12777] do_SYSENTER_32+0x1b/0x20 [ 506.682127][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 506.682127][T12777] [ 506.682127][T12777] Uninit was stored to memory at: [ 506.682127][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 506.682127][T12777] __msan_chain_origin+0xcb/0x140 [ 506.682127][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 506.682127][T12777] get_compat_msghdr+0x108/0x2c0 [ 506.682127][T12777] do_recvmmsg+0x1063/0x2120 [ 506.682127][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 506.682127][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 506.682127][T12777] __do_fast_syscall_32+0x96/0xe0 [ 506.682127][T12777] do_fast_syscall_32+0x3c/0x80 [ 506.682127][T12777] do_SYSENTER_32+0x1b/0x20 [ 506.682127][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 506.682127][T12777] [ 506.682127][T12777] Uninit was stored to memory at: [ 506.682127][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 506.682127][T12777] __msan_chain_origin+0xcb/0x140 [ 506.682127][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 506.682127][T12777] get_compat_msghdr+0x108/0x2c0 [ 506.682127][T12777] do_recvmmsg+0x1063/0x2120 [ 506.682127][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 506.682127][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 506.682127][T12777] __do_fast_syscall_32+0x96/0xe0 [ 506.682127][T12777] do_fast_syscall_32+0x3c/0x80 [ 506.682127][T12777] do_SYSENTER_32+0x1b/0x20 [ 506.682127][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 506.682127][T12777] [ 506.682127][T12777] Uninit was stored to memory at: [ 506.682127][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 506.682127][T12777] __msan_chain_origin+0xcb/0x140 [ 506.682127][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 506.682127][T12777] get_compat_msghdr+0x108/0x2c0 [ 506.682127][T12777] do_recvmmsg+0x1063/0x2120 [ 506.682127][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 506.682127][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 506.682127][T12777] __do_fast_syscall_32+0x96/0xe0 [ 506.682127][T12777] do_fast_syscall_32+0x3c/0x80 [ 506.682127][T12777] do_SYSENTER_32+0x1b/0x20 [ 506.682127][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 506.682127][T12777] [ 506.682127][T12777] Uninit was stored to memory at: [ 506.682127][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 506.682127][T12777] __msan_chain_origin+0xcb/0x140 [ 506.682127][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 506.682127][T12777] get_compat_msghdr+0x108/0x2c0 [ 506.682127][T12777] do_recvmmsg+0x1063/0x2120 [ 506.682127][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 506.682127][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 506.682127][T12777] __do_fast_syscall_32+0x96/0xe0 [ 506.682127][T12777] do_fast_syscall_32+0x3c/0x80 [ 506.682127][T12777] do_SYSENTER_32+0x1b/0x20 [ 506.682127][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 506.682127][T12777] [ 506.682127][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 506.682127][T12777] do_recvmmsg+0xc1/0x2120 [ 506.682127][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 507.523809][T12777] not chained 1730000 origins [ 507.528531][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 507.532120][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.532120][T12777] Call Trace: [ 507.532120][T12777] dump_stack+0x25a/0x2f6 [ 507.532120][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 507.532120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 507.532120][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 507.532120][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 507.532120][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 507.532120][T12777] ? release_sock+0x2b5/0x2e0 [ 507.532120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 507.532120][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 507.532120][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 507.532120][T12777] ? should_fail+0x75/0x9c0 [ 507.532120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 507.532120][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 507.532120][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 507.532120][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 507.532120][T12777] ? _copy_from_user+0x219/0x310 [ 507.532120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 507.532120][T12777] __msan_chain_origin+0xcb/0x140 [ 507.532120][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 507.532120][T12777] get_compat_msghdr+0x108/0x2c0 [ 507.532120][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 507.532120][T12777] do_recvmmsg+0x1063/0x2120 [ 507.532120][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 507.532120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 507.532120][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 507.532120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 507.532120][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 507.532120][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 507.532120][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 507.702371][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 507.702371][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 507.702371][T12777] __do_fast_syscall_32+0x96/0xe0 [ 507.702371][T12777] do_fast_syscall_32+0x3c/0x80 [ 507.702371][T12777] do_SYSENTER_32+0x1b/0x20 [ 507.702371][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.702371][T12777] RIP: 0023:0xf6f46549 [ 507.702371][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 507.702371][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 507.702371][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 507.702371][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.702371][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 507.702371][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 507.702371][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 507.702371][T12777] Uninit was stored to memory at: [ 507.702371][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 507.702371][T12777] __msan_chain_origin+0xcb/0x140 [ 507.702371][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 507.702371][T12777] get_compat_msghdr+0x108/0x2c0 [ 507.702371][T12777] do_recvmmsg+0x1063/0x2120 [ 507.702371][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 507.702371][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 507.702371][T12777] __do_fast_syscall_32+0x96/0xe0 [ 507.702371][T12777] do_fast_syscall_32+0x3c/0x80 [ 507.702371][T12777] do_SYSENTER_32+0x1b/0x20 [ 507.702371][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.702371][T12777] [ 507.702371][T12777] Uninit was stored to memory at: [ 507.702371][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 507.702371][T12777] __msan_chain_origin+0xcb/0x140 [ 507.702371][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 507.702371][T12777] get_compat_msghdr+0x108/0x2c0 [ 507.702371][T12777] do_recvmmsg+0x1063/0x2120 [ 507.702371][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 507.702371][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 507.702371][T12777] __do_fast_syscall_32+0x96/0xe0 [ 507.702371][T12777] do_fast_syscall_32+0x3c/0x80 [ 507.702371][T12777] do_SYSENTER_32+0x1b/0x20 [ 507.702371][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.702371][T12777] [ 507.702371][T12777] Uninit was stored to memory at: [ 507.702371][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 507.702371][T12777] __msan_chain_origin+0xcb/0x140 [ 507.702371][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 507.702371][T12777] get_compat_msghdr+0x108/0x2c0 [ 507.702371][T12777] do_recvmmsg+0x1063/0x2120 [ 507.702371][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 507.702371][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 507.702371][T12777] __do_fast_syscall_32+0x96/0xe0 [ 507.702371][T12777] do_fast_syscall_32+0x3c/0x80 [ 507.702371][T12777] do_SYSENTER_32+0x1b/0x20 [ 507.702371][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.702371][T12777] [ 507.702371][T12777] Uninit was stored to memory at: [ 507.702371][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 507.702371][T12777] __msan_chain_origin+0xcb/0x140 [ 507.702371][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 507.702371][T12777] get_compat_msghdr+0x108/0x2c0 [ 507.702371][T12777] do_recvmmsg+0x1063/0x2120 [ 507.702371][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 507.702371][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 507.702371][T12777] __do_fast_syscall_32+0x96/0xe0 [ 507.702371][T12777] do_fast_syscall_32+0x3c/0x80 [ 507.702371][T12777] do_SYSENTER_32+0x1b/0x20 [ 507.702371][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.702371][T12777] [ 507.702371][T12777] Uninit was stored to memory at: [ 507.702371][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 507.702371][T12777] __msan_chain_origin+0xcb/0x140 [ 507.702371][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 507.702371][T12777] get_compat_msghdr+0x108/0x2c0 [ 507.702371][T12777] do_recvmmsg+0x1063/0x2120 [ 507.702371][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 507.702371][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 507.702371][T12777] __do_fast_syscall_32+0x96/0xe0 [ 507.702371][T12777] do_fast_syscall_32+0x3c/0x80 [ 507.702371][T12777] do_SYSENTER_32+0x1b/0x20 [ 507.702371][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.702371][T12777] [ 507.702371][T12777] Uninit was stored to memory at: [ 507.702371][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 507.702371][T12777] __msan_chain_origin+0xcb/0x140 [ 507.702371][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 507.702371][T12777] get_compat_msghdr+0x108/0x2c0 [ 507.702371][T12777] do_recvmmsg+0x1063/0x2120 [ 507.702371][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 507.702371][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 507.702371][T12777] __do_fast_syscall_32+0x96/0xe0 [ 507.702371][T12777] do_fast_syscall_32+0x3c/0x80 [ 507.702371][T12777] do_SYSENTER_32+0x1b/0x20 [ 507.702371][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.702371][T12777] [ 507.702371][T12777] Uninit was stored to memory at: [ 507.702371][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 507.702371][T12777] __msan_chain_origin+0xcb/0x140 [ 507.702371][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 507.702371][T12777] get_compat_msghdr+0x108/0x2c0 [ 507.702371][T12777] do_recvmmsg+0x1063/0x2120 [ 507.702371][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 507.702371][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 507.702371][T12777] __do_fast_syscall_32+0x96/0xe0 [ 507.702371][T12777] do_fast_syscall_32+0x3c/0x80 [ 507.702371][T12777] do_SYSENTER_32+0x1b/0x20 [ 507.702371][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 507.702371][T12777] [ 507.702371][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 507.702371][T12777] do_recvmmsg+0xc1/0x2120 [ 507.702371][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 508.374980][T12777] not chained 1740000 origins [ 508.379675][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 508.382123][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.382123][T12777] Call Trace: [ 508.382123][T12777] dump_stack+0x25a/0x2f6 [ 508.382123][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 508.382123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 508.382123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 508.382123][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 508.382123][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 508.382123][T12777] ? release_sock+0x2b5/0x2e0 [ 508.382123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 508.382123][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 508.382123][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 508.382123][T12777] ? should_fail+0x75/0x9c0 [ 508.382123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 508.382123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 508.382123][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 508.382123][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 508.382123][T12777] ? _copy_from_user+0x219/0x310 [ 508.382123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 508.382123][T12777] __msan_chain_origin+0xcb/0x140 [ 508.382123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 508.382123][T12777] get_compat_msghdr+0x108/0x2c0 [ 508.382123][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 508.382123][T12777] do_recvmmsg+0x1063/0x2120 [ 508.382123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 508.382123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 508.382123][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 508.382123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 508.382123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 508.382123][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 508.382123][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 508.382123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 508.382123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 508.382123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 508.382123][T12777] do_fast_syscall_32+0x3c/0x80 [ 508.382123][T12777] do_SYSENTER_32+0x1b/0x20 [ 508.382123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.382123][T12777] RIP: 0023:0xf6f46549 [ 508.382123][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 508.382123][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 508.382123][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 508.382123][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.382123][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 508.382123][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 508.382123][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.382123][T12777] Uninit was stored to memory at: [ 508.382123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 508.382123][T12777] __msan_chain_origin+0xcb/0x140 [ 508.382123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 508.382123][T12777] get_compat_msghdr+0x108/0x2c0 [ 508.382123][T12777] do_recvmmsg+0x1063/0x2120 [ 508.382123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 508.382123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 508.382123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 508.382123][T12777] do_fast_syscall_32+0x3c/0x80 [ 508.382123][T12777] do_SYSENTER_32+0x1b/0x20 [ 508.382123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.382123][T12777] [ 508.382123][T12777] Uninit was stored to memory at: [ 508.382123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 508.382123][T12777] __msan_chain_origin+0xcb/0x140 [ 508.382123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 508.382123][T12777] get_compat_msghdr+0x108/0x2c0 [ 508.382123][T12777] do_recvmmsg+0x1063/0x2120 [ 508.382123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 508.382123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 508.382123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 508.382123][T12777] do_fast_syscall_32+0x3c/0x80 [ 508.382123][T12777] do_SYSENTER_32+0x1b/0x20 [ 508.382123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.382123][T12777] [ 508.382123][T12777] Uninit was stored to memory at: [ 508.382123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 508.382123][T12777] __msan_chain_origin+0xcb/0x140 [ 508.382123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 508.382123][T12777] get_compat_msghdr+0x108/0x2c0 [ 508.382123][T12777] do_recvmmsg+0x1063/0x2120 [ 508.382123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 508.382123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 508.382123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 508.382123][T12777] do_fast_syscall_32+0x3c/0x80 [ 508.382123][T12777] do_SYSENTER_32+0x1b/0x20 [ 508.382123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.382123][T12777] [ 508.382123][T12777] Uninit was stored to memory at: [ 508.382123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 508.382123][T12777] __msan_chain_origin+0xcb/0x140 [ 508.382123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 508.382123][T12777] get_compat_msghdr+0x108/0x2c0 [ 508.382123][T12777] do_recvmmsg+0x1063/0x2120 [ 508.382123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 508.382123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 508.382123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 508.382123][T12777] do_fast_syscall_32+0x3c/0x80 [ 508.382123][T12777] do_SYSENTER_32+0x1b/0x20 [ 508.382123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.382123][T12777] [ 508.382123][T12777] Uninit was stored to memory at: [ 508.382123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 508.382123][T12777] __msan_chain_origin+0xcb/0x140 [ 508.382123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 508.382123][T12777] get_compat_msghdr+0x108/0x2c0 [ 508.382123][T12777] do_recvmmsg+0x1063/0x2120 [ 508.382123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 508.382123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 508.382123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 508.382123][T12777] do_fast_syscall_32+0x3c/0x80 [ 508.382123][T12777] do_SYSENTER_32+0x1b/0x20 [ 508.382123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.382123][T12777] [ 508.382123][T12777] Uninit was stored to memory at: [ 508.382123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 508.382123][T12777] __msan_chain_origin+0xcb/0x140 [ 508.382123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 508.382123][T12777] get_compat_msghdr+0x108/0x2c0 [ 508.382123][T12777] do_recvmmsg+0x1063/0x2120 [ 508.382123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 508.382123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 508.382123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 508.382123][T12777] do_fast_syscall_32+0x3c/0x80 [ 508.382123][T12777] do_SYSENTER_32+0x1b/0x20 [ 508.382123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.382123][T12777] [ 508.382123][T12777] Uninit was stored to memory at: [ 508.382123][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 508.382123][T12777] __msan_chain_origin+0xcb/0x140 [ 508.382123][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 508.382123][T12777] get_compat_msghdr+0x108/0x2c0 [ 508.382123][T12777] do_recvmmsg+0x1063/0x2120 [ 508.382123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 508.382123][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 508.382123][T12777] __do_fast_syscall_32+0x96/0xe0 [ 508.382123][T12777] do_fast_syscall_32+0x3c/0x80 [ 508.382123][T12777] do_SYSENTER_32+0x1b/0x20 [ 508.382123][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 508.382123][T12777] [ 508.382123][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 508.382123][T12777] do_recvmmsg+0xc1/0x2120 [ 508.382123][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 509.221608][T12777] not chained 1750000 origins [ 509.222669][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 509.222669][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.222669][T12777] Call Trace: [ 509.222669][T12777] dump_stack+0x25a/0x2f6 [ 509.222669][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 509.222669][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 509.222669][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 509.222669][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 509.222669][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 509.222669][T12777] ? release_sock+0x2b5/0x2e0 [ 509.222669][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 509.288093][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 509.288093][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 509.288093][T12777] ? should_fail+0x75/0x9c0 [ 509.288093][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 509.288093][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 509.288093][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 509.288093][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 509.288093][T12777] ? _copy_from_user+0x219/0x310 [ 509.288093][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 509.288093][T12777] __msan_chain_origin+0xcb/0x140 [ 509.288093][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 509.288093][T12777] get_compat_msghdr+0x108/0x2c0 [ 509.288093][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 509.288093][T12777] do_recvmmsg+0x1063/0x2120 [ 509.288093][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 509.288093][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 509.288093][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 509.288093][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 509.288093][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 509.288093][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 509.288093][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 509.288093][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 509.288093][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 509.288093][T12777] __do_fast_syscall_32+0x96/0xe0 [ 509.288093][T12777] do_fast_syscall_32+0x3c/0x80 [ 509.288093][T12777] do_SYSENTER_32+0x1b/0x20 [ 509.288093][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 509.288093][T12777] RIP: 0023:0xf6f46549 [ 509.288093][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 509.288093][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 509.288093][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 509.288093][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.288093][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 509.288093][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 509.288093][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 509.288093][T12777] Uninit was stored to memory at: [ 509.288093][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 509.288093][T12777] __msan_chain_origin+0xcb/0x140 [ 509.288093][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 509.288093][T12777] get_compat_msghdr+0x108/0x2c0 [ 509.288093][T12777] do_recvmmsg+0x1063/0x2120 [ 509.288093][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 509.288093][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 509.288093][T12777] __do_fast_syscall_32+0x96/0xe0 [ 509.288093][T12777] do_fast_syscall_32+0x3c/0x80 [ 509.288093][T12777] do_SYSENTER_32+0x1b/0x20 [ 509.288093][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 509.288093][T12777] [ 509.288093][T12777] Uninit was stored to memory at: [ 509.288093][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 509.288093][T12777] __msan_chain_origin+0xcb/0x140 [ 509.288093][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 509.288093][T12777] get_compat_msghdr+0x108/0x2c0 [ 509.288093][T12777] do_recvmmsg+0x1063/0x2120 [ 509.288093][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 509.288093][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 509.288093][T12777] __do_fast_syscall_32+0x96/0xe0 [ 509.288093][T12777] do_fast_syscall_32+0x3c/0x80 [ 509.288093][T12777] do_SYSENTER_32+0x1b/0x20 [ 509.288093][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 509.288093][T12777] [ 509.288093][T12777] Uninit was stored to memory at: [ 509.288093][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 509.288093][T12777] __msan_chain_origin+0xcb/0x140 [ 509.288093][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 509.288093][T12777] get_compat_msghdr+0x108/0x2c0 [ 509.288093][T12777] do_recvmmsg+0x1063/0x2120 [ 509.288093][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 509.288093][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 509.288093][T12777] __do_fast_syscall_32+0x96/0xe0 [ 509.288093][T12777] do_fast_syscall_32+0x3c/0x80 [ 509.288093][T12777] do_SYSENTER_32+0x1b/0x20 [ 509.288093][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 509.288093][T12777] [ 509.288093][T12777] Uninit was stored to memory at: [ 509.702384][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 509.702384][T12777] __msan_chain_origin+0xcb/0x140 [ 509.702384][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 509.702384][T12777] get_compat_msghdr+0x108/0x2c0 [ 509.702384][T12777] do_recvmmsg+0x1063/0x2120 [ 509.702384][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 509.702384][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 509.702384][T12777] __do_fast_syscall_32+0x96/0xe0 [ 509.702384][T12777] do_fast_syscall_32+0x3c/0x80 [ 509.702384][T12777] do_SYSENTER_32+0x1b/0x20 [ 509.702384][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 509.702384][T12777] [ 509.702384][T12777] Uninit was stored to memory at: [ 509.702384][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 509.702384][T12777] __msan_chain_origin+0xcb/0x140 [ 509.702384][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 509.702384][T12777] get_compat_msghdr+0x108/0x2c0 [ 509.702384][T12777] do_recvmmsg+0x1063/0x2120 [ 509.702384][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 509.702384][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 509.702384][T12777] __do_fast_syscall_32+0x96/0xe0 [ 509.702384][T12777] do_fast_syscall_32+0x3c/0x80 [ 509.702384][T12777] do_SYSENTER_32+0x1b/0x20 [ 509.702384][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 509.702384][T12777] [ 509.702384][T12777] Uninit was stored to memory at: [ 509.702384][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 509.702384][T12777] __msan_chain_origin+0xcb/0x140 [ 509.702384][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 509.702384][T12777] get_compat_msghdr+0x108/0x2c0 [ 509.702384][T12777] do_recvmmsg+0x1063/0x2120 [ 509.702384][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 509.702384][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 509.870334][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.702384][T12777] __do_fast_syscall_32+0x96/0xe0 [ 509.702384][T12777] do_fast_syscall_32+0x3c/0x80 [ 509.702384][T12777] do_SYSENTER_32+0x1b/0x20 [ 509.702384][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 509.702384][T12777] [ 509.702384][T12777] Uninit was stored to memory at: [ 509.702384][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 509.702384][T12777] __msan_chain_origin+0xcb/0x140 [ 509.879187][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.702384][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 509.702384][T12777] get_compat_msghdr+0x108/0x2c0 [ 509.702384][T12777] do_recvmmsg+0x1063/0x2120 [ 509.702384][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 509.702384][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 509.702384][T12777] __do_fast_syscall_32+0x96/0xe0 [ 509.702384][T12777] do_fast_syscall_32+0x3c/0x80 [ 509.702384][T12777] do_SYSENTER_32+0x1b/0x20 [ 509.702384][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 509.702384][T12777] [ 509.702384][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 509.702384][T12777] do_recvmmsg+0xc1/0x2120 [ 509.702384][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.070968][T12777] not chained 1760000 origins [ 510.072115][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 510.072115][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.072115][T12777] Call Trace: [ 510.072115][T12777] dump_stack+0x25a/0x2f6 [ 510.072115][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 510.072115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.072115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 510.072115][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 510.072115][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 510.072115][T12777] ? release_sock+0x2b5/0x2e0 [ 510.072115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.072115][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 510.072115][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 510.072115][T12777] ? should_fail+0x75/0x9c0 [ 510.072115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.072115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 510.072115][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 510.072115][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 510.072115][T12777] ? _copy_from_user+0x219/0x310 [ 510.072115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.072115][T12777] __msan_chain_origin+0xcb/0x140 [ 510.072115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.072115][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.072115][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 510.072115][T12777] do_recvmmsg+0x1063/0x2120 [ 510.072115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 510.072115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.072115][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 510.072115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.072115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 510.072115][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 510.072115][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.072115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.072115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.072115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.072115][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.072115][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.072115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.072115][T12777] RIP: 0023:0xf6f46549 [ 510.072115][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 510.072115][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 510.072115][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 510.072115][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.072115][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.072115][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 510.072115][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.072115][T12777] Uninit was stored to memory at: [ 510.072115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.072115][T12777] __msan_chain_origin+0xcb/0x140 [ 510.072115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.072115][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.072115][T12777] do_recvmmsg+0x1063/0x2120 [ 510.072115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.072115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.072115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.072115][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.072115][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.072115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.072115][T12777] [ 510.072115][T12777] Uninit was stored to memory at: [ 510.072115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.072115][T12777] __msan_chain_origin+0xcb/0x140 [ 510.072115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.072115][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.072115][T12777] do_recvmmsg+0x1063/0x2120 [ 510.072115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.072115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.072115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.072115][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.072115][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.072115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.072115][T12777] [ 510.072115][T12777] Uninit was stored to memory at: [ 510.072115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.072115][T12777] __msan_chain_origin+0xcb/0x140 [ 510.072115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.072115][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.072115][T12777] do_recvmmsg+0x1063/0x2120 [ 510.072115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.072115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.072115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.072115][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.072115][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.072115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.072115][T12777] [ 510.072115][T12777] Uninit was stored to memory at: [ 510.072115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.072115][T12777] __msan_chain_origin+0xcb/0x140 [ 510.072115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.072115][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.072115][T12777] do_recvmmsg+0x1063/0x2120 [ 510.072115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.072115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.072115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.072115][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.072115][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.072115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.072115][T12777] [ 510.072115][T12777] Uninit was stored to memory at: [ 510.072115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.072115][T12777] __msan_chain_origin+0xcb/0x140 [ 510.072115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.072115][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.072115][T12777] do_recvmmsg+0x1063/0x2120 [ 510.072115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.072115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.072115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.072115][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.072115][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.072115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.072115][T12777] [ 510.072115][T12777] Uninit was stored to memory at: [ 510.072115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.072115][T12777] __msan_chain_origin+0xcb/0x140 [ 510.072115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.072115][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.072115][T12777] do_recvmmsg+0x1063/0x2120 [ 510.072115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.072115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.072115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.072115][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.072115][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.072115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.072115][T12777] [ 510.072115][T12777] Uninit was stored to memory at: [ 510.072115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.072115][T12777] __msan_chain_origin+0xcb/0x140 [ 510.072115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.072115][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.072115][T12777] do_recvmmsg+0x1063/0x2120 [ 510.072115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.072115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.072115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.072115][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.072115][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.072115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.072115][T12777] [ 510.072115][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 510.072115][T12777] do_recvmmsg+0xc1/0x2120 [ 510.072115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.931394][T12777] not chained 1770000 origins [ 510.932122][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 510.932122][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.932122][T12777] Call Trace: [ 510.932122][T12777] dump_stack+0x25a/0x2f6 [ 510.932122][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 510.932122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.932122][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 510.932122][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 510.932122][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 510.932122][T12777] ? release_sock+0x2b5/0x2e0 [ 510.932122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.932122][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 510.932122][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 510.932122][T12777] ? should_fail+0x75/0x9c0 [ 510.932122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.932122][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 510.932122][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 510.932122][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 510.932122][T12777] ? _copy_from_user+0x219/0x310 [ 510.932122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.932122][T12777] __msan_chain_origin+0xcb/0x140 [ 510.932122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.932122][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.932122][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 510.932122][T12777] do_recvmmsg+0x1063/0x2120 [ 510.932122][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 510.932122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.932122][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 510.932122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 510.932122][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 510.932122][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 510.932122][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.932122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.932122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.932122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.932122][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.932122][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.932122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.932122][T12777] RIP: 0023:0xf6f46549 [ 510.932122][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 510.932122][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 510.932122][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 510.932122][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 510.932122][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.932122][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 510.932122][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.932122][T12777] Uninit was stored to memory at: [ 510.932122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.932122][T12777] __msan_chain_origin+0xcb/0x140 [ 510.932122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.932122][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.932122][T12777] do_recvmmsg+0x1063/0x2120 [ 510.932122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.932122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.932122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.932122][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.932122][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.932122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.932122][T12777] [ 510.932122][T12777] Uninit was stored to memory at: [ 510.932122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.932122][T12777] __msan_chain_origin+0xcb/0x140 [ 510.932122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.932122][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.932122][T12777] do_recvmmsg+0x1063/0x2120 [ 510.932122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.932122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.932122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.932122][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.932122][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.932122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.932122][T12777] [ 510.932122][T12777] Uninit was stored to memory at: [ 510.932122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.932122][T12777] __msan_chain_origin+0xcb/0x140 [ 510.932122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.932122][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.932122][T12777] do_recvmmsg+0x1063/0x2120 [ 510.932122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.932122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.932122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.932122][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.932122][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.932122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.932122][T12777] [ 510.932122][T12777] Uninit was stored to memory at: [ 510.932122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.932122][T12777] __msan_chain_origin+0xcb/0x140 [ 510.932122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.932122][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.932122][T12777] do_recvmmsg+0x1063/0x2120 [ 510.932122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.932122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.932122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.932122][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.932122][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.932122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.932122][T12777] [ 510.932122][T12777] Uninit was stored to memory at: [ 510.932122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.932122][T12777] __msan_chain_origin+0xcb/0x140 [ 510.932122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.932122][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.932122][T12777] do_recvmmsg+0x1063/0x2120 [ 510.932122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.932122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.932122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.932122][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.932122][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.932122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.932122][T12777] [ 510.932122][T12777] Uninit was stored to memory at: [ 510.932122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.932122][T12777] __msan_chain_origin+0xcb/0x140 [ 510.932122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.932122][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.932122][T12777] do_recvmmsg+0x1063/0x2120 [ 510.932122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.932122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.932122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.932122][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.932122][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.932122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.932122][T12777] [ 510.932122][T12777] Uninit was stored to memory at: [ 510.932122][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 510.932122][T12777] __msan_chain_origin+0xcb/0x140 [ 510.932122][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 510.932122][T12777] get_compat_msghdr+0x108/0x2c0 [ 510.932122][T12777] do_recvmmsg+0x1063/0x2120 [ 510.932122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 510.932122][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 510.932122][T12777] __do_fast_syscall_32+0x96/0xe0 [ 510.932122][T12777] do_fast_syscall_32+0x3c/0x80 [ 510.932122][T12777] do_SYSENTER_32+0x1b/0x20 [ 510.932122][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 510.932122][T12777] [ 510.932122][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 510.932122][T12777] do_recvmmsg+0xc1/0x2120 [ 510.932122][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 511.784520][T12777] not chained 1780000 origins [ 511.789213][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 511.792326][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.792326][T12777] Call Trace: [ 511.792326][T12777] dump_stack+0x25a/0x2f6 [ 511.792326][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 511.792326][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 511.792326][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 511.792326][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 511.792326][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 511.792326][T12777] ? release_sock+0x2b5/0x2e0 [ 511.847357][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 511.847357][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 511.847357][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 511.847357][T12777] ? should_fail+0x75/0x9c0 [ 511.847357][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 511.847357][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 511.847357][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 511.847357][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 511.847357][T12777] ? _copy_from_user+0x219/0x310 [ 511.847357][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 511.847357][T12777] __msan_chain_origin+0xcb/0x140 [ 511.847357][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 511.847357][T12777] get_compat_msghdr+0x108/0x2c0 [ 511.847357][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 511.847357][T12777] do_recvmmsg+0x1063/0x2120 [ 511.847357][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 511.847357][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 511.847357][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 511.847357][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 511.847357][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 511.847357][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 511.847357][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 511.847357][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 511.847357][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 511.847357][T12777] __do_fast_syscall_32+0x96/0xe0 [ 511.847357][T12777] do_fast_syscall_32+0x3c/0x80 [ 511.847357][T12777] do_SYSENTER_32+0x1b/0x20 [ 511.847357][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 511.847357][T12777] RIP: 0023:0xf6f46549 [ 511.847357][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 511.847357][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 511.847357][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 511.847357][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.847357][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 511.847357][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 511.847357][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.847357][T12777] Uninit was stored to memory at: [ 511.847357][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 511.847357][T12777] __msan_chain_origin+0xcb/0x140 [ 511.847357][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 511.847357][T12777] get_compat_msghdr+0x108/0x2c0 [ 511.847357][T12777] do_recvmmsg+0x1063/0x2120 [ 511.847357][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 511.847357][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 511.847357][T12777] __do_fast_syscall_32+0x96/0xe0 [ 511.847357][T12777] do_fast_syscall_32+0x3c/0x80 [ 511.847357][T12777] do_SYSENTER_32+0x1b/0x20 [ 511.847357][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 511.847357][T12777] [ 511.847357][T12777] Uninit was stored to memory at: [ 511.847357][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 511.847357][T12777] __msan_chain_origin+0xcb/0x140 [ 511.847357][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 511.847357][T12777] get_compat_msghdr+0x108/0x2c0 [ 511.847357][T12777] do_recvmmsg+0x1063/0x2120 [ 511.847357][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 511.847357][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 511.847357][T12777] __do_fast_syscall_32+0x96/0xe0 [ 511.847357][T12777] do_fast_syscall_32+0x3c/0x80 [ 511.847357][T12777] do_SYSENTER_32+0x1b/0x20 [ 511.847357][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 511.847357][T12777] [ 511.847357][T12777] Uninit was stored to memory at: [ 511.847357][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 511.847357][T12777] __msan_chain_origin+0xcb/0x140 [ 511.847357][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 511.847357][T12777] get_compat_msghdr+0x108/0x2c0 [ 511.847357][T12777] do_recvmmsg+0x1063/0x2120 [ 511.847357][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 511.847357][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 511.847357][T12777] __do_fast_syscall_32+0x96/0xe0 [ 511.847357][T12777] do_fast_syscall_32+0x3c/0x80 [ 511.847357][T12777] do_SYSENTER_32+0x1b/0x20 [ 511.847357][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 511.847357][T12777] [ 511.847357][T12777] Uninit was stored to memory at: [ 511.847357][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 511.847357][T12777] __msan_chain_origin+0xcb/0x140 [ 511.847357][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 511.847357][T12777] get_compat_msghdr+0x108/0x2c0 [ 511.847357][T12777] do_recvmmsg+0x1063/0x2120 [ 511.847357][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 511.847357][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 511.847357][T12777] __do_fast_syscall_32+0x96/0xe0 [ 511.847357][T12777] do_fast_syscall_32+0x3c/0x80 [ 511.847357][T12777] do_SYSENTER_32+0x1b/0x20 [ 511.847357][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 511.847357][T12777] [ 511.847357][T12777] Uninit was stored to memory at: [ 511.847357][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 511.847357][T12777] __msan_chain_origin+0xcb/0x140 [ 511.847357][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 511.847357][T12777] get_compat_msghdr+0x108/0x2c0 [ 511.847357][T12777] do_recvmmsg+0x1063/0x2120 [ 511.847357][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 511.847357][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 511.847357][T12777] __do_fast_syscall_32+0x96/0xe0 [ 511.847357][T12777] do_fast_syscall_32+0x3c/0x80 [ 511.847357][T12777] do_SYSENTER_32+0x1b/0x20 [ 511.847357][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 511.847357][T12777] [ 511.847357][T12777] Uninit was stored to memory at: [ 511.847357][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 511.847357][T12777] __msan_chain_origin+0xcb/0x140 [ 511.847357][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 511.847357][T12777] get_compat_msghdr+0x108/0x2c0 [ 511.847357][T12777] do_recvmmsg+0x1063/0x2120 [ 511.847357][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 511.847357][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 511.847357][T12777] __do_fast_syscall_32+0x96/0xe0 [ 511.847357][T12777] do_fast_syscall_32+0x3c/0x80 [ 511.847357][T12777] do_SYSENTER_32+0x1b/0x20 [ 511.847357][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 511.847357][T12777] [ 511.847357][T12777] Uninit was stored to memory at: [ 511.847357][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 511.847357][T12777] __msan_chain_origin+0xcb/0x140 [ 511.847357][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 511.847357][T12777] get_compat_msghdr+0x108/0x2c0 [ 511.847357][T12777] do_recvmmsg+0x1063/0x2120 [ 511.847357][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 511.847357][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 511.847357][T12777] __do_fast_syscall_32+0x96/0xe0 [ 511.847357][T12777] do_fast_syscall_32+0x3c/0x80 [ 511.847357][T12777] do_SYSENTER_32+0x1b/0x20 [ 511.847357][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 511.847357][T12777] [ 511.847357][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 511.847357][T12777] do_recvmmsg+0xc1/0x2120 [ 511.847357][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 512.637740][T12777] not chained 1790000 origins [ 512.642124][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 512.642124][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.642124][T12777] Call Trace: [ 512.642124][T12777] dump_stack+0x25a/0x2f6 [ 512.642124][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 512.642124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 512.642124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 512.642124][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 512.642124][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 512.642124][T12777] ? release_sock+0x2b5/0x2e0 [ 512.642124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 512.642124][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 512.642124][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 512.642124][T12777] ? should_fail+0x75/0x9c0 [ 512.642124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 512.642124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 512.642124][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 512.642124][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 512.642124][T12777] ? _copy_from_user+0x219/0x310 [ 512.642124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 512.642124][T12777] __msan_chain_origin+0xcb/0x140 [ 512.642124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 512.642124][T12777] get_compat_msghdr+0x108/0x2c0 [ 512.642124][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 512.642124][T12777] do_recvmmsg+0x1063/0x2120 [ 512.642124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 512.642124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 512.642124][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 512.642124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 512.642124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 512.642124][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 512.642124][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 512.642124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 512.642124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 512.642124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 512.642124][T12777] do_fast_syscall_32+0x3c/0x80 [ 512.642124][T12777] do_SYSENTER_32+0x1b/0x20 [ 512.642124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 512.642124][T12777] RIP: 0023:0xf6f46549 [ 512.642124][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 512.642124][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 512.642124][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 512.642124][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.642124][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.642124][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 512.642124][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.642124][T12777] Uninit was stored to memory at: [ 512.642124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 512.642124][T12777] __msan_chain_origin+0xcb/0x140 [ 512.642124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 512.642124][T12777] get_compat_msghdr+0x108/0x2c0 [ 512.642124][T12777] do_recvmmsg+0x1063/0x2120 [ 512.642124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 512.642124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 512.642124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 512.642124][T12777] do_fast_syscall_32+0x3c/0x80 [ 512.642124][T12777] do_SYSENTER_32+0x1b/0x20 [ 512.642124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 512.642124][T12777] [ 512.642124][T12777] Uninit was stored to memory at: [ 512.642124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 512.642124][T12777] __msan_chain_origin+0xcb/0x140 [ 512.642124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 512.642124][T12777] get_compat_msghdr+0x108/0x2c0 [ 512.642124][T12777] do_recvmmsg+0x1063/0x2120 [ 512.642124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 512.642124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 512.642124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 512.642124][T12777] do_fast_syscall_32+0x3c/0x80 [ 512.642124][T12777] do_SYSENTER_32+0x1b/0x20 [ 512.642124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 512.642124][T12777] [ 512.642124][T12777] Uninit was stored to memory at: [ 512.642124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 512.642124][T12777] __msan_chain_origin+0xcb/0x140 [ 512.642124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 512.642124][T12777] get_compat_msghdr+0x108/0x2c0 [ 512.642124][T12777] do_recvmmsg+0x1063/0x2120 [ 512.642124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 512.642124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 512.642124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 512.642124][T12777] do_fast_syscall_32+0x3c/0x80 [ 512.642124][T12777] do_SYSENTER_32+0x1b/0x20 [ 512.642124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 512.642124][T12777] [ 512.642124][T12777] Uninit was stored to memory at: [ 512.642124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 512.642124][T12777] __msan_chain_origin+0xcb/0x140 [ 512.642124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 512.642124][T12777] get_compat_msghdr+0x108/0x2c0 [ 512.642124][T12777] do_recvmmsg+0x1063/0x2120 [ 512.642124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 512.642124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 512.642124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 512.642124][T12777] do_fast_syscall_32+0x3c/0x80 [ 512.642124][T12777] do_SYSENTER_32+0x1b/0x20 [ 512.642124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 512.642124][T12777] [ 512.642124][T12777] Uninit was stored to memory at: [ 512.642124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 512.642124][T12777] __msan_chain_origin+0xcb/0x140 [ 512.642124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 512.642124][T12777] get_compat_msghdr+0x108/0x2c0 [ 512.642124][T12777] do_recvmmsg+0x1063/0x2120 [ 512.642124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 512.642124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 512.642124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 512.642124][T12777] do_fast_syscall_32+0x3c/0x80 [ 512.642124][T12777] do_SYSENTER_32+0x1b/0x20 [ 512.642124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 512.642124][T12777] [ 512.642124][T12777] Uninit was stored to memory at: [ 512.642124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 512.642124][T12777] __msan_chain_origin+0xcb/0x140 [ 512.642124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 512.642124][T12777] get_compat_msghdr+0x108/0x2c0 [ 512.642124][T12777] do_recvmmsg+0x1063/0x2120 [ 512.642124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 512.642124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 512.642124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 512.642124][T12777] do_fast_syscall_32+0x3c/0x80 [ 512.642124][T12777] do_SYSENTER_32+0x1b/0x20 [ 512.642124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 512.642124][T12777] [ 512.642124][T12777] Uninit was stored to memory at: [ 512.642124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 512.642124][T12777] __msan_chain_origin+0xcb/0x140 [ 512.642124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 512.642124][T12777] get_compat_msghdr+0x108/0x2c0 [ 512.642124][T12777] do_recvmmsg+0x1063/0x2120 [ 512.642124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 512.642124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 512.642124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 512.642124][T12777] do_fast_syscall_32+0x3c/0x80 [ 512.642124][T12777] do_SYSENTER_32+0x1b/0x20 [ 512.642124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 512.642124][T12777] [ 512.642124][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 512.642124][T12777] do_recvmmsg+0xc1/0x2120 [ 512.642124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 513.491723][T12777] not chained 1800000 origins [ 513.492124][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 513.492124][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.492124][T12777] Call Trace: [ 513.492124][T12777] dump_stack+0x25a/0x2f6 [ 513.492124][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 513.492124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 513.492124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 513.492124][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 513.492124][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 513.492124][T12777] ? release_sock+0x2b5/0x2e0 [ 513.492124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 513.492124][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 513.492124][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 513.492124][T12777] ? should_fail+0x75/0x9c0 [ 513.492124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 513.492124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 513.492124][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 513.492124][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 513.492124][T12777] ? _copy_from_user+0x219/0x310 [ 513.492124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 513.492124][T12777] __msan_chain_origin+0xcb/0x140 [ 513.492124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 513.492124][T12777] get_compat_msghdr+0x108/0x2c0 [ 513.492124][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 513.492124][T12777] do_recvmmsg+0x1063/0x2120 [ 513.492124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 513.492124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 513.492124][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 513.492124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 513.492124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 513.492124][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 513.492124][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 513.492124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 513.492124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 513.492124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 513.492124][T12777] do_fast_syscall_32+0x3c/0x80 [ 513.492124][T12777] do_SYSENTER_32+0x1b/0x20 [ 513.492124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 513.702849][T12777] RIP: 0023:0xf6f46549 [ 513.702849][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 513.702849][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 513.702849][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 513.702849][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.702849][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.702849][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 513.702849][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.702849][T12777] Uninit was stored to memory at: [ 513.702849][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 513.702849][T12777] __msan_chain_origin+0xcb/0x140 [ 513.702849][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 513.702849][T12777] get_compat_msghdr+0x108/0x2c0 [ 513.702849][T12777] do_recvmmsg+0x1063/0x2120 [ 513.702849][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 513.702849][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 513.702849][T12777] __do_fast_syscall_32+0x96/0xe0 [ 513.702849][T12777] do_fast_syscall_32+0x3c/0x80 [ 513.702849][T12777] do_SYSENTER_32+0x1b/0x20 [ 513.702849][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 513.702849][T12777] [ 513.702849][T12777] Uninit was stored to memory at: [ 513.702849][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 513.702849][T12777] __msan_chain_origin+0xcb/0x140 [ 513.702849][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 513.702849][T12777] get_compat_msghdr+0x108/0x2c0 [ 513.702849][T12777] do_recvmmsg+0x1063/0x2120 [ 513.702849][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 513.702849][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 513.702849][T12777] __do_fast_syscall_32+0x96/0xe0 [ 513.702849][T12777] do_fast_syscall_32+0x3c/0x80 [ 513.702849][T12777] do_SYSENTER_32+0x1b/0x20 [ 513.702849][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 513.702849][T12777] [ 513.702849][T12777] Uninit was stored to memory at: [ 513.702849][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 513.702849][T12777] __msan_chain_origin+0xcb/0x140 [ 513.702849][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 513.702849][T12777] get_compat_msghdr+0x108/0x2c0 [ 513.702849][T12777] do_recvmmsg+0x1063/0x2120 [ 513.702849][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 513.702849][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 513.702849][T12777] __do_fast_syscall_32+0x96/0xe0 [ 513.702849][T12777] do_fast_syscall_32+0x3c/0x80 [ 513.702849][T12777] do_SYSENTER_32+0x1b/0x20 [ 513.702849][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 513.702849][T12777] [ 513.702849][T12777] Uninit was stored to memory at: [ 513.702849][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 513.702849][T12777] __msan_chain_origin+0xcb/0x140 [ 513.702849][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 513.702849][T12777] get_compat_msghdr+0x108/0x2c0 [ 513.702849][T12777] do_recvmmsg+0x1063/0x2120 [ 513.702849][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 513.702849][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 513.702849][T12777] __do_fast_syscall_32+0x96/0xe0 [ 513.702849][T12777] do_fast_syscall_32+0x3c/0x80 [ 513.702849][T12777] do_SYSENTER_32+0x1b/0x20 [ 513.702849][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 513.702849][T12777] [ 513.702849][T12777] Uninit was stored to memory at: [ 513.702849][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 513.702849][T12777] __msan_chain_origin+0xcb/0x140 [ 513.702849][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 513.702849][T12777] get_compat_msghdr+0x108/0x2c0 [ 513.702849][T12777] do_recvmmsg+0x1063/0x2120 [ 513.702849][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 513.702849][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 513.702849][T12777] __do_fast_syscall_32+0x96/0xe0 [ 513.702849][T12777] do_fast_syscall_32+0x3c/0x80 [ 513.702849][T12777] do_SYSENTER_32+0x1b/0x20 [ 513.702849][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 513.702849][T12777] [ 513.702849][T12777] Uninit was stored to memory at: [ 513.702849][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 513.702849][T12777] __msan_chain_origin+0xcb/0x140 [ 513.702849][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 513.702849][T12777] get_compat_msghdr+0x108/0x2c0 [ 513.702849][T12777] do_recvmmsg+0x1063/0x2120 [ 513.702849][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 513.702849][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 513.702849][T12777] __do_fast_syscall_32+0x96/0xe0 [ 513.702849][T12777] do_fast_syscall_32+0x3c/0x80 [ 513.702849][T12777] do_SYSENTER_32+0x1b/0x20 [ 513.702849][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 513.702849][T12777] [ 513.702849][T12777] Uninit was stored to memory at: [ 513.702849][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 513.702849][T12777] __msan_chain_origin+0xcb/0x140 [ 513.702849][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 513.702849][T12777] get_compat_msghdr+0x108/0x2c0 [ 513.702849][T12777] do_recvmmsg+0x1063/0x2120 [ 513.702849][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 513.702849][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 513.702849][T12777] __do_fast_syscall_32+0x96/0xe0 [ 513.702849][T12777] do_fast_syscall_32+0x3c/0x80 [ 513.702849][T12777] do_SYSENTER_32+0x1b/0x20 [ 513.702849][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 513.702849][T12777] [ 513.702849][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 513.702849][T12777] do_recvmmsg+0xc1/0x2120 [ 513.702849][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 514.347212][T12777] not chained 1810000 origins [ 514.351909][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 514.352124][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.352124][T12777] Call Trace: [ 514.352124][T12777] dump_stack+0x25a/0x2f6 [ 514.352124][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 514.352124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 514.352124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 514.352124][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 514.352124][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 514.352124][T12777] ? release_sock+0x2b5/0x2e0 [ 514.352124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 514.352124][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 514.352124][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 514.352124][T12777] ? should_fail+0x75/0x9c0 [ 514.352124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 514.352124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 514.352124][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 514.352124][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 514.352124][T12777] ? _copy_from_user+0x219/0x310 [ 514.352124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 514.352124][T12777] __msan_chain_origin+0xcb/0x140 [ 514.352124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 514.352124][T12777] get_compat_msghdr+0x108/0x2c0 [ 514.352124][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 514.352124][T12777] do_recvmmsg+0x1063/0x2120 [ 514.352124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 514.352124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 514.352124][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 514.352124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 514.352124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 514.352124][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 514.352124][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 514.352124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 514.352124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 514.352124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 514.352124][T12777] do_fast_syscall_32+0x3c/0x80 [ 514.352124][T12777] do_SYSENTER_32+0x1b/0x20 [ 514.352124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 514.352124][T12777] RIP: 0023:0xf6f46549 [ 514.352124][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 514.352124][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 514.352124][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 514.352124][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.352124][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.352124][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 514.352124][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.352124][T12777] Uninit was stored to memory at: [ 514.352124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 514.352124][T12777] __msan_chain_origin+0xcb/0x140 [ 514.352124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 514.352124][T12777] get_compat_msghdr+0x108/0x2c0 [ 514.352124][T12777] do_recvmmsg+0x1063/0x2120 [ 514.352124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 514.352124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 514.352124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 514.352124][T12777] do_fast_syscall_32+0x3c/0x80 [ 514.352124][T12777] do_SYSENTER_32+0x1b/0x20 [ 514.352124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 514.352124][T12777] [ 514.352124][T12777] Uninit was stored to memory at: [ 514.352124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 514.352124][T12777] __msan_chain_origin+0xcb/0x140 [ 514.352124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 514.352124][T12777] get_compat_msghdr+0x108/0x2c0 [ 514.352124][T12777] do_recvmmsg+0x1063/0x2120 [ 514.352124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 514.352124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 514.352124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 514.352124][T12777] do_fast_syscall_32+0x3c/0x80 [ 514.352124][T12777] do_SYSENTER_32+0x1b/0x20 [ 514.352124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 514.352124][T12777] [ 514.352124][T12777] Uninit was stored to memory at: [ 514.352124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 514.352124][T12777] __msan_chain_origin+0xcb/0x140 [ 514.352124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 514.352124][T12777] get_compat_msghdr+0x108/0x2c0 [ 514.352124][T12777] do_recvmmsg+0x1063/0x2120 [ 514.352124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 514.352124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 514.352124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 514.352124][T12777] do_fast_syscall_32+0x3c/0x80 [ 514.352124][T12777] do_SYSENTER_32+0x1b/0x20 [ 514.352124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 514.352124][T12777] [ 514.352124][T12777] Uninit was stored to memory at: [ 514.352124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 514.352124][T12777] __msan_chain_origin+0xcb/0x140 [ 514.352124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 514.352124][T12777] get_compat_msghdr+0x108/0x2c0 [ 514.352124][T12777] do_recvmmsg+0x1063/0x2120 [ 514.352124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 514.352124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 514.352124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 514.352124][T12777] do_fast_syscall_32+0x3c/0x80 [ 514.352124][T12777] do_SYSENTER_32+0x1b/0x20 [ 514.352124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 514.352124][T12777] [ 514.352124][T12777] Uninit was stored to memory at: [ 514.352124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 514.352124][T12777] __msan_chain_origin+0xcb/0x140 [ 514.352124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 514.352124][T12777] get_compat_msghdr+0x108/0x2c0 [ 514.352124][T12777] do_recvmmsg+0x1063/0x2120 [ 514.352124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 514.352124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 514.352124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 514.352124][T12777] do_fast_syscall_32+0x3c/0x80 [ 514.352124][T12777] do_SYSENTER_32+0x1b/0x20 [ 514.352124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 514.352124][T12777] [ 514.352124][T12777] Uninit was stored to memory at: [ 514.352124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 514.352124][T12777] __msan_chain_origin+0xcb/0x140 [ 514.352124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 514.352124][T12777] get_compat_msghdr+0x108/0x2c0 [ 514.352124][T12777] do_recvmmsg+0x1063/0x2120 [ 514.352124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 514.352124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 514.352124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 514.352124][T12777] do_fast_syscall_32+0x3c/0x80 [ 514.352124][T12777] do_SYSENTER_32+0x1b/0x20 [ 514.352124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 514.352124][T12777] [ 514.352124][T12777] Uninit was stored to memory at: [ 514.352124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 514.352124][T12777] __msan_chain_origin+0xcb/0x140 [ 514.352124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 514.352124][T12777] get_compat_msghdr+0x108/0x2c0 [ 514.352124][T12777] do_recvmmsg+0x1063/0x2120 [ 514.352124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 514.352124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 514.352124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 514.352124][T12777] do_fast_syscall_32+0x3c/0x80 [ 514.352124][T12777] do_SYSENTER_32+0x1b/0x20 [ 514.352124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 514.352124][T12777] [ 514.352124][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 514.352124][T12777] do_recvmmsg+0xc1/0x2120 [ 514.352124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 515.205913][T12777] not chained 1820000 origins [ 515.210641][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 515.212124][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.212124][T12777] Call Trace: [ 515.212124][T12777] dump_stack+0x25a/0x2f6 [ 515.212124][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 515.212124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 515.212124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 515.212124][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 515.212124][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 515.212124][T12777] ? release_sock+0x2b5/0x2e0 [ 515.212124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 515.212124][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 515.212124][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 515.212124][T12777] ? should_fail+0x75/0x9c0 [ 515.212124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 515.212124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 515.212124][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 515.212124][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 515.212124][T12777] ? _copy_from_user+0x219/0x310 [ 515.212124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 515.212124][T12777] __msan_chain_origin+0xcb/0x140 [ 515.212124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 515.212124][T12777] get_compat_msghdr+0x108/0x2c0 [ 515.212124][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 515.212124][T12777] do_recvmmsg+0x1063/0x2120 [ 515.212124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 515.212124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 515.212124][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 515.212124][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 515.212124][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 515.212124][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 515.212124][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 515.212124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 515.212124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 515.212124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 515.212124][T12777] do_fast_syscall_32+0x3c/0x80 [ 515.212124][T12777] do_SYSENTER_32+0x1b/0x20 [ 515.212124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 515.212124][T12777] RIP: 0023:0xf6f46549 [ 515.212124][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 515.212124][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 515.212124][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 515.212124][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.212124][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.212124][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 515.212124][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.212124][T12777] Uninit was stored to memory at: [ 515.212124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 515.212124][T12777] __msan_chain_origin+0xcb/0x140 [ 515.212124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 515.212124][T12777] get_compat_msghdr+0x108/0x2c0 [ 515.212124][T12777] do_recvmmsg+0x1063/0x2120 [ 515.212124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 515.212124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 515.212124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 515.212124][T12777] do_fast_syscall_32+0x3c/0x80 [ 515.212124][T12777] do_SYSENTER_32+0x1b/0x20 [ 515.212124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 515.212124][T12777] [ 515.212124][T12777] Uninit was stored to memory at: [ 515.212124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 515.212124][T12777] __msan_chain_origin+0xcb/0x140 [ 515.212124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 515.212124][T12777] get_compat_msghdr+0x108/0x2c0 [ 515.212124][T12777] do_recvmmsg+0x1063/0x2120 [ 515.212124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 515.212124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 515.212124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 515.212124][T12777] do_fast_syscall_32+0x3c/0x80 [ 515.212124][T12777] do_SYSENTER_32+0x1b/0x20 [ 515.212124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 515.212124][T12777] [ 515.212124][T12777] Uninit was stored to memory at: [ 515.212124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 515.212124][T12777] __msan_chain_origin+0xcb/0x140 [ 515.212124][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 515.212124][T12777] get_compat_msghdr+0x108/0x2c0 [ 515.212124][T12777] do_recvmmsg+0x1063/0x2120 [ 515.212124][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 515.212124][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 515.212124][T12777] __do_fast_syscall_32+0x96/0xe0 [ 515.212124][T12777] do_fast_syscall_32+0x3c/0x80 [ 515.212124][T12777] do_SYSENTER_32+0x1b/0x20 [ 515.212124][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 515.212124][T12777] [ 515.212124][T12777] Uninit was stored to memory at: [ 515.212124][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 515.212124][T12777] __msan_chain_origin+0xcb/0x140 [ 515.702534][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 515.702534][T12777] get_compat_msghdr+0x108/0x2c0 [ 515.702534][T12777] do_recvmmsg+0x1063/0x2120 [ 515.702534][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 515.702534][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 515.702534][T12777] __do_fast_syscall_32+0x96/0xe0 [ 515.702534][T12777] do_fast_syscall_32+0x3c/0x80 [ 515.702534][T12777] do_SYSENTER_32+0x1b/0x20 [ 515.702534][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 515.702534][T12777] [ 515.702534][T12777] Uninit was stored to memory at: [ 515.702534][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 515.702534][T12777] __msan_chain_origin+0xcb/0x140 [ 515.702534][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 515.702534][T12777] get_compat_msghdr+0x108/0x2c0 [ 515.702534][T12777] do_recvmmsg+0x1063/0x2120 [ 515.702534][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 515.702534][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 515.702534][T12777] __do_fast_syscall_32+0x96/0xe0 [ 515.702534][T12777] do_fast_syscall_32+0x3c/0x80 [ 515.702534][T12777] do_SYSENTER_32+0x1b/0x20 [ 515.702534][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 515.702534][T12777] [ 515.702534][T12777] Uninit was stored to memory at: [ 515.702534][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 515.702534][T12777] __msan_chain_origin+0xcb/0x140 [ 515.702534][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 515.702534][T12777] get_compat_msghdr+0x108/0x2c0 [ 515.702534][T12777] do_recvmmsg+0x1063/0x2120 [ 515.702534][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 515.702534][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 515.702534][T12777] __do_fast_syscall_32+0x96/0xe0 [ 515.702534][T12777] do_fast_syscall_32+0x3c/0x80 [ 515.702534][T12777] do_SYSENTER_32+0x1b/0x20 [ 515.702534][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 515.702534][T12777] [ 515.702534][T12777] Uninit was stored to memory at: [ 515.702534][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 515.702534][T12777] __msan_chain_origin+0xcb/0x140 [ 515.702534][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 515.702534][T12777] get_compat_msghdr+0x108/0x2c0 [ 515.702534][T12777] do_recvmmsg+0x1063/0x2120 [ 515.702534][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 515.702534][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 515.702534][T12777] __do_fast_syscall_32+0x96/0xe0 [ 515.702534][T12777] do_fast_syscall_32+0x3c/0x80 [ 515.702534][T12777] do_SYSENTER_32+0x1b/0x20 [ 515.702534][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 515.702534][T12777] [ 515.702534][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 515.702534][T12777] do_recvmmsg+0xc1/0x2120 [ 515.702534][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.071867][T12777] not chained 1830000 origins [ 516.072120][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 516.072120][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.072120][T12777] Call Trace: [ 516.072120][T12777] dump_stack+0x25a/0x2f6 [ 516.072120][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 516.072120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.072120][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 516.072120][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 516.072120][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 516.072120][T12777] ? release_sock+0x2b5/0x2e0 [ 516.072120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.072120][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 516.072120][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 516.072120][T12777] ? should_fail+0x75/0x9c0 [ 516.072120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.072120][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 516.167749][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 516.168186][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 516.168186][T12777] ? _copy_from_user+0x219/0x310 [ 516.168186][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.168186][T12777] __msan_chain_origin+0xcb/0x140 [ 516.168186][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.168186][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.168186][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 516.168186][T12777] do_recvmmsg+0x1063/0x2120 [ 516.168186][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 516.168186][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.168186][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 516.168186][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.168186][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 516.168186][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 516.168186][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.168186][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.168186][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.168186][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.168186][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.168186][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.168186][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.168186][T12777] RIP: 0023:0xf6f46549 [ 516.168186][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 516.168186][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 516.168186][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 516.168186][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.168186][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 516.168186][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 516.168186][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 516.168186][T12777] Uninit was stored to memory at: [ 516.168186][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.168186][T12777] __msan_chain_origin+0xcb/0x140 [ 516.168186][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.168186][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.168186][T12777] do_recvmmsg+0x1063/0x2120 [ 516.168186][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.168186][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.168186][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.168186][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.168186][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.168186][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.168186][T12777] [ 516.168186][T12777] Uninit was stored to memory at: [ 516.168186][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.168186][T12777] __msan_chain_origin+0xcb/0x140 [ 516.168186][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.168186][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.168186][T12777] do_recvmmsg+0x1063/0x2120 [ 516.168186][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.168186][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.168186][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.168186][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.168186][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.168186][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.168186][T12777] [ 516.168186][T12777] Uninit was stored to memory at: [ 516.168186][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.168186][T12777] __msan_chain_origin+0xcb/0x140 [ 516.168186][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.168186][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.168186][T12777] do_recvmmsg+0x1063/0x2120 [ 516.168186][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.168186][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.168186][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.168186][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.168186][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.168186][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.168186][T12777] [ 516.168186][T12777] Uninit was stored to memory at: [ 516.168186][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.168186][T12777] __msan_chain_origin+0xcb/0x140 [ 516.168186][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.168186][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.168186][T12777] do_recvmmsg+0x1063/0x2120 [ 516.168186][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.168186][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.168186][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.168186][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.168186][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.168186][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.168186][T12777] [ 516.168186][T12777] Uninit was stored to memory at: [ 516.168186][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.168186][T12777] __msan_chain_origin+0xcb/0x140 [ 516.168186][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.168186][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.168186][T12777] do_recvmmsg+0x1063/0x2120 [ 516.168186][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.168186][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.168186][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.168186][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.168186][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.168186][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.168186][T12777] [ 516.168186][T12777] Uninit was stored to memory at: [ 516.168186][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.168186][T12777] __msan_chain_origin+0xcb/0x140 [ 516.168186][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.168186][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.168186][T12777] do_recvmmsg+0x1063/0x2120 [ 516.168186][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.168186][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.168186][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.168186][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.168186][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.168186][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.168186][T12777] [ 516.168186][T12777] Uninit was stored to memory at: [ 516.168186][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.168186][T12777] __msan_chain_origin+0xcb/0x140 [ 516.168186][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.168186][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.168186][T12777] do_recvmmsg+0x1063/0x2120 [ 516.168186][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.168186][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.168186][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.168186][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.168186][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.168186][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.168186][T12777] [ 516.168186][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 516.168186][T12777] do_recvmmsg+0xc1/0x2120 [ 516.168186][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.928644][T12777] not chained 1840000 origins [ 516.932122][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 516.932122][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.932122][T12777] Call Trace: [ 516.932122][T12777] dump_stack+0x25a/0x2f6 [ 516.932122][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 516.932122][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.932122][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 516.932122][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 516.932122][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 516.932122][T12777] ? release_sock+0x2b5/0x2e0 [ 516.989048][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.993643][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 516.993643][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 516.993643][T12777] ? should_fail+0x75/0x9c0 [ 516.993643][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.993643][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 516.993643][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 516.993643][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 516.993643][T12777] ? _copy_from_user+0x219/0x310 [ 516.993643][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.993643][T12777] __msan_chain_origin+0xcb/0x140 [ 516.993643][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.993643][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.993643][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 516.993643][T12777] do_recvmmsg+0x1063/0x2120 [ 516.993643][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 516.993643][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.993643][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 516.993643][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 516.993643][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 516.993643][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 516.993643][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.993643][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.993643][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.993643][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.993643][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.993643][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.993643][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.993643][T12777] RIP: 0023:0xf6f46549 [ 516.993643][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 516.993643][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 516.993643][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 516.993643][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.993643][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 516.993643][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 516.993643][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 516.993643][T12777] Uninit was stored to memory at: [ 516.993643][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.993643][T12777] __msan_chain_origin+0xcb/0x140 [ 516.993643][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.993643][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.993643][T12777] do_recvmmsg+0x1063/0x2120 [ 516.993643][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.993643][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.993643][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.993643][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.993643][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.993643][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.993643][T12777] [ 516.993643][T12777] Uninit was stored to memory at: [ 516.993643][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.993643][T12777] __msan_chain_origin+0xcb/0x140 [ 516.993643][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.993643][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.993643][T12777] do_recvmmsg+0x1063/0x2120 [ 516.993643][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.993643][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.993643][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.993643][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.993643][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.993643][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.993643][T12777] [ 516.993643][T12777] Uninit was stored to memory at: [ 516.993643][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.993643][T12777] __msan_chain_origin+0xcb/0x140 [ 516.993643][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.993643][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.993643][T12777] do_recvmmsg+0x1063/0x2120 [ 516.993643][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.993643][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.993643][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.993643][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.993643][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.993643][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.993643][T12777] [ 516.993643][T12777] Uninit was stored to memory at: [ 516.993643][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.993643][T12777] __msan_chain_origin+0xcb/0x140 [ 516.993643][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.993643][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.993643][T12777] do_recvmmsg+0x1063/0x2120 [ 516.993643][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.993643][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.993643][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.993643][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.993643][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.993643][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.993643][T12777] [ 516.993643][T12777] Uninit was stored to memory at: [ 516.993643][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.993643][T12777] __msan_chain_origin+0xcb/0x140 [ 516.993643][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.993643][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.993643][T12777] do_recvmmsg+0x1063/0x2120 [ 516.993643][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.993643][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.993643][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.993643][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.993643][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.993643][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.993643][T12777] [ 516.993643][T12777] Uninit was stored to memory at: [ 516.993643][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.993643][T12777] __msan_chain_origin+0xcb/0x140 [ 516.993643][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.993643][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.993643][T12777] do_recvmmsg+0x1063/0x2120 [ 516.993643][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.993643][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.993643][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.993643][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.993643][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.993643][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.993643][T12777] [ 516.993643][T12777] Uninit was stored to memory at: [ 516.993643][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 516.993643][T12777] __msan_chain_origin+0xcb/0x140 [ 516.993643][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 516.993643][T12777] get_compat_msghdr+0x108/0x2c0 [ 516.993643][T12777] do_recvmmsg+0x1063/0x2120 [ 516.993643][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 516.993643][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 516.993643][T12777] __do_fast_syscall_32+0x96/0xe0 [ 516.993643][T12777] do_fast_syscall_32+0x3c/0x80 [ 516.993643][T12777] do_SYSENTER_32+0x1b/0x20 [ 516.993643][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 516.993643][T12777] [ 516.993643][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 516.993643][T12777] do_recvmmsg+0xc1/0x2120 [ 516.993643][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 517.782774][T12777] not chained 1850000 origins [ 517.787464][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 517.792118][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.792118][T12777] Call Trace: [ 517.792118][T12777] dump_stack+0x25a/0x2f6 [ 517.792118][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 517.792118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 517.792118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 517.792118][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 517.792118][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 517.792118][T12777] ? release_sock+0x2b5/0x2e0 [ 517.792118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 517.792118][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 517.792118][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 517.792118][T12777] ? should_fail+0x75/0x9c0 [ 517.792118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 517.792118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 517.792118][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 517.792118][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 517.792118][T12777] ? _copy_from_user+0x219/0x310 [ 517.792118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 517.792118][T12777] __msan_chain_origin+0xcb/0x140 [ 517.792118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 517.792118][T12777] get_compat_msghdr+0x108/0x2c0 [ 517.792118][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 517.792118][T12777] do_recvmmsg+0x1063/0x2120 [ 517.792118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 517.792118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 517.792118][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 517.792118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 517.792118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 517.792118][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 517.792118][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 517.792118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 517.792118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 517.792118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 517.792118][T12777] do_fast_syscall_32+0x3c/0x80 [ 517.792118][T12777] do_SYSENTER_32+0x1b/0x20 [ 517.792118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 517.792118][T12777] RIP: 0023:0xf6f46549 [ 517.792118][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 517.792118][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 517.792118][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 517.792118][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.792118][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.792118][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 517.792118][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.792118][T12777] Uninit was stored to memory at: [ 517.792118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 517.792118][T12777] __msan_chain_origin+0xcb/0x140 [ 517.792118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 517.792118][T12777] get_compat_msghdr+0x108/0x2c0 [ 517.792118][T12777] do_recvmmsg+0x1063/0x2120 [ 517.792118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 517.792118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 517.792118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 517.792118][T12777] do_fast_syscall_32+0x3c/0x80 [ 517.792118][T12777] do_SYSENTER_32+0x1b/0x20 [ 517.792118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 517.792118][T12777] [ 517.792118][T12777] Uninit was stored to memory at: [ 517.792118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 517.792118][T12777] __msan_chain_origin+0xcb/0x140 [ 517.792118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 517.792118][T12777] get_compat_msghdr+0x108/0x2c0 [ 517.792118][T12777] do_recvmmsg+0x1063/0x2120 [ 517.792118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 517.792118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 517.792118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 517.792118][T12777] do_fast_syscall_32+0x3c/0x80 [ 517.792118][T12777] do_SYSENTER_32+0x1b/0x20 [ 517.792118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 517.792118][T12777] [ 517.792118][T12777] Uninit was stored to memory at: [ 517.792118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 517.792118][T12777] __msan_chain_origin+0xcb/0x140 [ 517.792118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 517.792118][T12777] get_compat_msghdr+0x108/0x2c0 [ 517.792118][T12777] do_recvmmsg+0x1063/0x2120 [ 517.792118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 517.792118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 517.792118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 517.792118][T12777] do_fast_syscall_32+0x3c/0x80 [ 517.792118][T12777] do_SYSENTER_32+0x1b/0x20 [ 517.792118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 517.792118][T12777] [ 517.792118][T12777] Uninit was stored to memory at: [ 517.792118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 517.792118][T12777] __msan_chain_origin+0xcb/0x140 [ 517.792118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 517.792118][T12777] get_compat_msghdr+0x108/0x2c0 [ 517.792118][T12777] do_recvmmsg+0x1063/0x2120 [ 517.792118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 517.792118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 517.792118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 517.792118][T12777] do_fast_syscall_32+0x3c/0x80 [ 517.792118][T12777] do_SYSENTER_32+0x1b/0x20 [ 517.792118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 517.792118][T12777] [ 517.792118][T12777] Uninit was stored to memory at: [ 517.792118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 517.792118][T12777] __msan_chain_origin+0xcb/0x140 [ 517.792118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 517.792118][T12777] get_compat_msghdr+0x108/0x2c0 [ 517.792118][T12777] do_recvmmsg+0x1063/0x2120 [ 517.792118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 517.792118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 517.792118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 517.792118][T12777] do_fast_syscall_32+0x3c/0x80 [ 517.792118][T12777] do_SYSENTER_32+0x1b/0x20 [ 517.792118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 517.792118][T12777] [ 517.792118][T12777] Uninit was stored to memory at: [ 517.792118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 517.792118][T12777] __msan_chain_origin+0xcb/0x140 [ 517.792118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 517.792118][T12777] get_compat_msghdr+0x108/0x2c0 [ 517.792118][T12777] do_recvmmsg+0x1063/0x2120 [ 517.792118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 517.792118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 517.792118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 517.792118][T12777] do_fast_syscall_32+0x3c/0x80 [ 517.792118][T12777] do_SYSENTER_32+0x1b/0x20 [ 517.792118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 517.792118][T12777] [ 517.792118][T12777] Uninit was stored to memory at: [ 517.792118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 517.792118][T12777] __msan_chain_origin+0xcb/0x140 [ 517.792118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 517.792118][T12777] get_compat_msghdr+0x108/0x2c0 [ 517.792118][T12777] do_recvmmsg+0x1063/0x2120 [ 517.792118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 517.792118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 517.792118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 517.792118][T12777] do_fast_syscall_32+0x3c/0x80 [ 517.792118][T12777] do_SYSENTER_32+0x1b/0x20 [ 517.792118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 517.792118][T12777] [ 517.792118][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 517.792118][T12777] do_recvmmsg+0xc1/0x2120 [ 517.792118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 518.650309][T12777] not chained 1860000 origins [ 518.652118][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 518.652118][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.652118][T12777] Call Trace: [ 518.652118][T12777] dump_stack+0x25a/0x2f6 [ 518.652118][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 518.652118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 518.652118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 518.652118][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 518.652118][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 518.652118][T12777] ? release_sock+0x2b5/0x2e0 [ 518.652118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 518.652118][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 518.652118][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 518.652118][T12777] ? should_fail+0x75/0x9c0 [ 518.652118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 518.652118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 518.652118][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 518.652118][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 518.652118][T12777] ? _copy_from_user+0x219/0x310 [ 518.652118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 518.652118][T12777] __msan_chain_origin+0xcb/0x140 [ 518.652118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 518.652118][T12777] get_compat_msghdr+0x108/0x2c0 [ 518.652118][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 518.652118][T12777] do_recvmmsg+0x1063/0x2120 [ 518.652118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 518.652118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 518.652118][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 518.652118][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 518.652118][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 518.652118][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 518.652118][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 518.652118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 518.652118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 518.652118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 518.652118][T12777] do_fast_syscall_32+0x3c/0x80 [ 518.652118][T12777] do_SYSENTER_32+0x1b/0x20 [ 518.652118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 518.652118][T12777] RIP: 0023:0xf6f46549 [ 518.652118][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 518.652118][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 518.652118][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 518.652118][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 518.652118][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 518.652118][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 518.652118][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.652118][T12777] Uninit was stored to memory at: [ 518.652118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 518.652118][T12777] __msan_chain_origin+0xcb/0x140 [ 518.652118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 518.652118][T12777] get_compat_msghdr+0x108/0x2c0 [ 518.652118][T12777] do_recvmmsg+0x1063/0x2120 [ 518.652118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 518.652118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 518.652118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 518.652118][T12777] do_fast_syscall_32+0x3c/0x80 [ 518.652118][T12777] do_SYSENTER_32+0x1b/0x20 [ 518.652118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 518.652118][T12777] [ 518.652118][T12777] Uninit was stored to memory at: [ 518.652118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 518.652118][T12777] __msan_chain_origin+0xcb/0x140 [ 518.652118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 518.652118][T12777] get_compat_msghdr+0x108/0x2c0 [ 518.652118][T12777] do_recvmmsg+0x1063/0x2120 [ 518.652118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 518.652118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 518.652118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 518.652118][T12777] do_fast_syscall_32+0x3c/0x80 [ 518.652118][T12777] do_SYSENTER_32+0x1b/0x20 [ 518.652118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 518.652118][T12777] [ 518.652118][T12777] Uninit was stored to memory at: [ 518.652118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 518.652118][T12777] __msan_chain_origin+0xcb/0x140 [ 518.652118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 518.652118][T12777] get_compat_msghdr+0x108/0x2c0 [ 518.652118][T12777] do_recvmmsg+0x1063/0x2120 [ 518.652118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 518.652118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 518.652118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 518.652118][T12777] do_fast_syscall_32+0x3c/0x80 [ 518.652118][T12777] do_SYSENTER_32+0x1b/0x20 [ 518.652118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 518.652118][T12777] [ 518.652118][T12777] Uninit was stored to memory at: [ 518.652118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 518.652118][T12777] __msan_chain_origin+0xcb/0x140 [ 518.652118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 518.652118][T12777] get_compat_msghdr+0x108/0x2c0 [ 518.652118][T12777] do_recvmmsg+0x1063/0x2120 [ 518.652118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 518.652118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 518.652118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 518.652118][T12777] do_fast_syscall_32+0x3c/0x80 [ 518.652118][T12777] do_SYSENTER_32+0x1b/0x20 [ 518.652118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 518.652118][T12777] [ 518.652118][T12777] Uninit was stored to memory at: [ 518.652118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 518.652118][T12777] __msan_chain_origin+0xcb/0x140 [ 518.652118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 518.652118][T12777] get_compat_msghdr+0x108/0x2c0 [ 518.652118][T12777] do_recvmmsg+0x1063/0x2120 [ 518.652118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 518.652118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 518.652118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 518.652118][T12777] do_fast_syscall_32+0x3c/0x80 [ 518.652118][T12777] do_SYSENTER_32+0x1b/0x20 [ 518.652118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 518.652118][T12777] [ 518.652118][T12777] Uninit was stored to memory at: [ 518.652118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 518.652118][T12777] __msan_chain_origin+0xcb/0x140 [ 518.652118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 518.652118][T12777] get_compat_msghdr+0x108/0x2c0 [ 518.652118][T12777] do_recvmmsg+0x1063/0x2120 [ 518.652118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 518.652118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 518.652118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 518.652118][T12777] do_fast_syscall_32+0x3c/0x80 [ 518.652118][T12777] do_SYSENTER_32+0x1b/0x20 [ 518.652118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 518.652118][T12777] [ 518.652118][T12777] Uninit was stored to memory at: [ 518.652118][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 518.652118][T12777] __msan_chain_origin+0xcb/0x140 [ 518.652118][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 518.652118][T12777] get_compat_msghdr+0x108/0x2c0 [ 518.652118][T12777] do_recvmmsg+0x1063/0x2120 [ 518.652118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 518.652118][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 518.652118][T12777] __do_fast_syscall_32+0x96/0xe0 [ 518.652118][T12777] do_fast_syscall_32+0x3c/0x80 [ 518.652118][T12777] do_SYSENTER_32+0x1b/0x20 [ 518.652118][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 518.652118][T12777] [ 518.652118][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 518.652118][T12777] do_recvmmsg+0xc1/0x2120 [ 518.652118][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 519.508127][T12777] not chained 1870000 origins [ 519.512125][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 519.512125][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.512125][T12777] Call Trace: [ 519.512125][T12777] dump_stack+0x25a/0x2f6 [ 519.512125][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 519.512125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 519.512125][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 519.512125][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 519.512125][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 519.512125][T12777] ? release_sock+0x2b5/0x2e0 [ 519.512125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 519.512125][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 519.512125][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 519.512125][T12777] ? should_fail+0x75/0x9c0 [ 519.512125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 519.512125][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 519.512125][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 519.512125][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 519.512125][T12777] ? _copy_from_user+0x219/0x310 [ 519.512125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 519.512125][T12777] __msan_chain_origin+0xcb/0x140 [ 519.512125][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 519.512125][T12777] get_compat_msghdr+0x108/0x2c0 [ 519.512125][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 519.512125][T12777] do_recvmmsg+0x1063/0x2120 [ 519.512125][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 519.512125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 519.512125][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 519.512125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 519.512125][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 519.512125][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 519.512125][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 519.512125][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 519.512125][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 519.702644][T12777] __do_fast_syscall_32+0x96/0xe0 [ 519.702644][T12777] do_fast_syscall_32+0x3c/0x80 [ 519.702644][T12777] do_SYSENTER_32+0x1b/0x20 [ 519.702644][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.702644][T12777] RIP: 0023:0xf6f46549 [ 519.702644][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 519.702644][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 519.702644][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 519.702644][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.702644][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.702644][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 519.702644][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.702644][T12777] Uninit was stored to memory at: [ 519.702644][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 519.702644][T12777] __msan_chain_origin+0xcb/0x140 [ 519.702644][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 519.702644][T12777] get_compat_msghdr+0x108/0x2c0 [ 519.702644][T12777] do_recvmmsg+0x1063/0x2120 [ 519.702644][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 519.702644][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 519.702644][T12777] __do_fast_syscall_32+0x96/0xe0 [ 519.702644][T12777] do_fast_syscall_32+0x3c/0x80 [ 519.702644][T12777] do_SYSENTER_32+0x1b/0x20 [ 519.702644][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.702644][T12777] [ 519.702644][T12777] Uninit was stored to memory at: [ 519.702644][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 519.702644][T12777] __msan_chain_origin+0xcb/0x140 [ 519.702644][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 519.702644][T12777] get_compat_msghdr+0x108/0x2c0 [ 519.702644][T12777] do_recvmmsg+0x1063/0x2120 [ 519.702644][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 519.702644][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 519.702644][T12777] __do_fast_syscall_32+0x96/0xe0 [ 519.702644][T12777] do_fast_syscall_32+0x3c/0x80 [ 519.702644][T12777] do_SYSENTER_32+0x1b/0x20 [ 519.702644][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.702644][T12777] [ 519.702644][T12777] Uninit was stored to memory at: [ 519.702644][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 519.702644][T12777] __msan_chain_origin+0xcb/0x140 [ 519.702644][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 519.702644][T12777] get_compat_msghdr+0x108/0x2c0 [ 519.702644][T12777] do_recvmmsg+0x1063/0x2120 [ 519.702644][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 519.702644][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 519.702644][T12777] __do_fast_syscall_32+0x96/0xe0 [ 519.702644][T12777] do_fast_syscall_32+0x3c/0x80 [ 519.702644][T12777] do_SYSENTER_32+0x1b/0x20 [ 519.702644][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.702644][T12777] [ 519.702644][T12777] Uninit was stored to memory at: [ 519.702644][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 519.702644][T12777] __msan_chain_origin+0xcb/0x140 [ 519.702644][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 519.702644][T12777] get_compat_msghdr+0x108/0x2c0 [ 519.702644][T12777] do_recvmmsg+0x1063/0x2120 [ 519.702644][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 519.702644][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 519.702644][T12777] __do_fast_syscall_32+0x96/0xe0 [ 519.702644][T12777] do_fast_syscall_32+0x3c/0x80 [ 519.702644][T12777] do_SYSENTER_32+0x1b/0x20 [ 519.702644][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.702644][T12777] [ 519.702644][T12777] Uninit was stored to memory at: [ 519.702644][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 519.702644][T12777] __msan_chain_origin+0xcb/0x140 [ 519.702644][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 519.702644][T12777] get_compat_msghdr+0x108/0x2c0 [ 519.702644][T12777] do_recvmmsg+0x1063/0x2120 [ 519.702644][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 519.702644][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 519.702644][T12777] __do_fast_syscall_32+0x96/0xe0 [ 519.702644][T12777] do_fast_syscall_32+0x3c/0x80 [ 519.702644][T12777] do_SYSENTER_32+0x1b/0x20 [ 519.702644][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.702644][T12777] [ 519.702644][T12777] Uninit was stored to memory at: [ 519.702644][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 519.702644][T12777] __msan_chain_origin+0xcb/0x140 [ 519.702644][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 519.702644][T12777] get_compat_msghdr+0x108/0x2c0 [ 519.702644][T12777] do_recvmmsg+0x1063/0x2120 [ 519.702644][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 519.702644][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 519.702644][T12777] __do_fast_syscall_32+0x96/0xe0 [ 519.702644][T12777] do_fast_syscall_32+0x3c/0x80 [ 519.702644][T12777] do_SYSENTER_32+0x1b/0x20 [ 519.702644][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.702644][T12777] [ 519.702644][T12777] Uninit was stored to memory at: [ 519.702644][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 519.702644][T12777] __msan_chain_origin+0xcb/0x140 [ 519.702644][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 519.702644][T12777] get_compat_msghdr+0x108/0x2c0 [ 519.702644][T12777] do_recvmmsg+0x1063/0x2120 [ 519.702644][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 519.702644][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 519.702644][T12777] __do_fast_syscall_32+0x96/0xe0 [ 519.702644][T12777] do_fast_syscall_32+0x3c/0x80 [ 519.702644][T12777] do_SYSENTER_32+0x1b/0x20 [ 519.702644][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 519.702644][T12777] [ 519.702644][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 519.702644][T12777] do_recvmmsg+0xc1/0x2120 [ 519.702644][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 520.358062][T12777] not chained 1880000 origins [ 520.362125][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 520.362125][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.362125][T12777] Call Trace: [ 520.362125][T12777] dump_stack+0x25a/0x2f6 [ 520.362125][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 520.362125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 520.362125][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 520.362125][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 520.362125][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 520.362125][T12777] ? release_sock+0x2b5/0x2e0 [ 520.362125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 520.362125][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 520.362125][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 520.362125][T12777] ? should_fail+0x75/0x9c0 [ 520.362125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 520.362125][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 520.362125][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 520.362125][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 520.362125][T12777] ? _copy_from_user+0x219/0x310 [ 520.362125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 520.362125][T12777] __msan_chain_origin+0xcb/0x140 [ 520.362125][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 520.362125][T12777] get_compat_msghdr+0x108/0x2c0 [ 520.362125][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 520.362125][T12777] do_recvmmsg+0x1063/0x2120 [ 520.362125][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 520.362125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 520.362125][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 520.362125][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 520.362125][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 520.362125][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 520.362125][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 520.362125][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 520.362125][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 520.362125][T12777] __do_fast_syscall_32+0x96/0xe0 [ 520.362125][T12777] do_fast_syscall_32+0x3c/0x80 [ 520.362125][T12777] do_SYSENTER_32+0x1b/0x20 [ 520.362125][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.362125][T12777] RIP: 0023:0xf6f46549 [ 520.362125][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 520.362125][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 520.362125][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 520.362125][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 520.362125][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 520.362125][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 520.362125][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.362125][T12777] Uninit was stored to memory at: [ 520.362125][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 520.362125][T12777] __msan_chain_origin+0xcb/0x140 [ 520.362125][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 520.662430][T12777] get_compat_msghdr+0x108/0x2c0 [ 520.662430][T12777] do_recvmmsg+0x1063/0x2120 [ 520.662430][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 520.662430][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 520.662430][T12777] __do_fast_syscall_32+0x96/0xe0 [ 520.662430][T12777] do_fast_syscall_32+0x3c/0x80 [ 520.662430][T12777] do_SYSENTER_32+0x1b/0x20 [ 520.662430][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.662430][T12777] [ 520.662430][T12777] Uninit was stored to memory at: [ 520.662430][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 520.662430][T12777] __msan_chain_origin+0xcb/0x140 [ 520.662430][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 520.662430][T12777] get_compat_msghdr+0x108/0x2c0 [ 520.662430][T12777] do_recvmmsg+0x1063/0x2120 [ 520.662430][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 520.662430][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 520.662430][T12777] __do_fast_syscall_32+0x96/0xe0 [ 520.662430][T12777] do_fast_syscall_32+0x3c/0x80 [ 520.662430][T12777] do_SYSENTER_32+0x1b/0x20 [ 520.662430][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.662430][T12777] [ 520.662430][T12777] Uninit was stored to memory at: [ 520.662430][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 520.662430][T12777] __msan_chain_origin+0xcb/0x140 [ 520.662430][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 520.662430][T12777] get_compat_msghdr+0x108/0x2c0 [ 520.662430][T12777] do_recvmmsg+0x1063/0x2120 [ 520.662430][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 520.662430][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 520.662430][T12777] __do_fast_syscall_32+0x96/0xe0 [ 520.662430][T12777] do_fast_syscall_32+0x3c/0x80 [ 520.662430][T12777] do_SYSENTER_32+0x1b/0x20 [ 520.662430][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.662430][T12777] [ 520.662430][T12777] Uninit was stored to memory at: [ 520.662430][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 520.662430][T12777] __msan_chain_origin+0xcb/0x140 [ 520.662430][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 520.662430][T12777] get_compat_msghdr+0x108/0x2c0 [ 520.662430][T12777] do_recvmmsg+0x1063/0x2120 [ 520.662430][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 520.662430][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 520.662430][T12777] __do_fast_syscall_32+0x96/0xe0 [ 520.662430][T12777] do_fast_syscall_32+0x3c/0x80 [ 520.662430][T12777] do_SYSENTER_32+0x1b/0x20 [ 520.662430][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.662430][T12777] [ 520.662430][T12777] Uninit was stored to memory at: [ 520.662430][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 520.662430][T12777] __msan_chain_origin+0xcb/0x140 [ 520.662430][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 520.662430][T12777] get_compat_msghdr+0x108/0x2c0 [ 520.662430][T12777] do_recvmmsg+0x1063/0x2120 [ 520.662430][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 520.662430][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 520.662430][T12777] __do_fast_syscall_32+0x96/0xe0 [ 520.662430][T12777] do_fast_syscall_32+0x3c/0x80 [ 520.662430][T12777] do_SYSENTER_32+0x1b/0x20 [ 520.662430][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.662430][T12777] [ 520.662430][T12777] Uninit was stored to memory at: [ 520.662430][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 520.662430][T12777] __msan_chain_origin+0xcb/0x140 [ 520.662430][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 520.662430][T12777] get_compat_msghdr+0x108/0x2c0 [ 520.662430][T12777] do_recvmmsg+0x1063/0x2120 [ 520.662430][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 520.662430][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 520.662430][T12777] __do_fast_syscall_32+0x96/0xe0 [ 520.662430][T12777] do_fast_syscall_32+0x3c/0x80 [ 520.662430][T12777] do_SYSENTER_32+0x1b/0x20 [ 520.662430][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.662430][T12777] [ 520.662430][T12777] Uninit was stored to memory at: [ 520.662430][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 520.662430][T12777] __msan_chain_origin+0xcb/0x140 [ 520.662430][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 520.662430][T12777] get_compat_msghdr+0x108/0x2c0 [ 520.662430][T12777] do_recvmmsg+0x1063/0x2120 [ 520.662430][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 520.662430][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 520.662430][T12777] __do_fast_syscall_32+0x96/0xe0 [ 520.662430][T12777] do_fast_syscall_32+0x3c/0x80 [ 520.662430][T12777] do_SYSENTER_32+0x1b/0x20 [ 520.662430][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 520.662430][T12777] [ 520.662430][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 520.662430][T12777] do_recvmmsg+0xc1/0x2120 [ 520.662430][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 521.210584][T12777] not chained 1890000 origins [ 521.212289][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 521.212289][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.212289][T12777] Call Trace: [ 521.212289][T12777] dump_stack+0x25a/0x2f6 [ 521.212289][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 521.212289][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 521.212289][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 521.212289][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 521.212289][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 521.267778][T12777] ? release_sock+0x2b5/0x2e0 [ 521.267778][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 521.267778][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 521.267778][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 521.267778][T12777] ? should_fail+0x75/0x9c0 [ 521.267778][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 521.267778][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 521.267778][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 521.267778][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 521.267778][T12777] ? _copy_from_user+0x219/0x310 [ 521.267778][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 521.267778][T12777] __msan_chain_origin+0xcb/0x140 [ 521.267778][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 521.267778][T12777] get_compat_msghdr+0x108/0x2c0 [ 521.267778][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 521.267778][T12777] do_recvmmsg+0x1063/0x2120 [ 521.267778][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 521.267778][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 521.267778][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 521.267778][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 521.267778][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 521.267778][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 521.267778][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 521.267778][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 521.267778][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 521.267778][T12777] __do_fast_syscall_32+0x96/0xe0 [ 521.267778][T12777] do_fast_syscall_32+0x3c/0x80 [ 521.267778][T12777] do_SYSENTER_32+0x1b/0x20 [ 521.267778][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 521.267778][T12777] RIP: 0023:0xf6f46549 [ 521.267778][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 521.267778][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 521.267778][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 521.267778][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.267778][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 521.267778][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 521.267778][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.267778][T12777] Uninit was stored to memory at: [ 521.267778][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 521.267778][T12777] __msan_chain_origin+0xcb/0x140 [ 521.267778][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 521.267778][T12777] get_compat_msghdr+0x108/0x2c0 [ 521.267778][T12777] do_recvmmsg+0x1063/0x2120 [ 521.267778][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 521.267778][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 521.267778][T12777] __do_fast_syscall_32+0x96/0xe0 [ 521.267778][T12777] do_fast_syscall_32+0x3c/0x80 [ 521.267778][T12777] do_SYSENTER_32+0x1b/0x20 [ 521.267778][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 521.267778][T12777] [ 521.267778][T12777] Uninit was stored to memory at: [ 521.267778][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 521.267778][T12777] __msan_chain_origin+0xcb/0x140 [ 521.267778][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 521.267778][T12777] get_compat_msghdr+0x108/0x2c0 [ 521.267778][T12777] do_recvmmsg+0x1063/0x2120 [ 521.267778][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 521.267778][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 521.267778][T12777] __do_fast_syscall_32+0x96/0xe0 [ 521.267778][T12777] do_fast_syscall_32+0x3c/0x80 [ 521.267778][T12777] do_SYSENTER_32+0x1b/0x20 [ 521.267778][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 521.267778][T12777] [ 521.267778][T12777] Uninit was stored to memory at: [ 521.267778][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 521.267778][T12777] __msan_chain_origin+0xcb/0x140 [ 521.267778][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 521.267778][T12777] get_compat_msghdr+0x108/0x2c0 [ 521.267778][T12777] do_recvmmsg+0x1063/0x2120 [ 521.267778][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 521.267778][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 521.267778][T12777] __do_fast_syscall_32+0x96/0xe0 [ 521.267778][T12777] do_fast_syscall_32+0x3c/0x80 [ 521.267778][T12777] do_SYSENTER_32+0x1b/0x20 [ 521.267778][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 521.267778][T12777] [ 521.267778][T12777] Uninit was stored to memory at: [ 521.267778][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 521.267778][T12777] __msan_chain_origin+0xcb/0x140 [ 521.267778][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 521.267778][T12777] get_compat_msghdr+0x108/0x2c0 [ 521.267778][T12777] do_recvmmsg+0x1063/0x2120 [ 521.267778][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 521.267778][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 521.267778][T12777] __do_fast_syscall_32+0x96/0xe0 [ 521.267778][T12777] do_fast_syscall_32+0x3c/0x80 [ 521.267778][T12777] do_SYSENTER_32+0x1b/0x20 [ 521.267778][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 521.267778][T12777] [ 521.267778][T12777] Uninit was stored to memory at: [ 521.267778][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 521.267778][T12777] __msan_chain_origin+0xcb/0x140 [ 521.267778][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 521.267778][T12777] get_compat_msghdr+0x108/0x2c0 [ 521.267778][T12777] do_recvmmsg+0x1063/0x2120 [ 521.782881][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 521.782881][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 521.782881][T12777] __do_fast_syscall_32+0x96/0xe0 [ 521.782881][T12777] do_fast_syscall_32+0x3c/0x80 [ 521.782881][T12777] do_SYSENTER_32+0x1b/0x20 [ 521.782881][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 521.782881][T12777] [ 521.782881][T12777] Uninit was stored to memory at: [ 521.782881][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 521.782881][T12777] __msan_chain_origin+0xcb/0x140 [ 521.782881][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 521.782881][T12777] get_compat_msghdr+0x108/0x2c0 [ 521.782881][T12777] do_recvmmsg+0x1063/0x2120 [ 521.782881][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 521.782881][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 521.782881][T12777] __do_fast_syscall_32+0x96/0xe0 [ 521.782881][T12777] do_fast_syscall_32+0x3c/0x80 [ 521.782881][T12777] do_SYSENTER_32+0x1b/0x20 [ 521.782881][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 521.782881][T12777] [ 521.782881][T12777] Uninit was stored to memory at: [ 521.782881][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 521.782881][T12777] __msan_chain_origin+0xcb/0x140 [ 521.782881][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 521.782881][T12777] get_compat_msghdr+0x108/0x2c0 [ 521.782881][T12777] do_recvmmsg+0x1063/0x2120 [ 521.782881][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 521.782881][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 521.782881][T12777] __do_fast_syscall_32+0x96/0xe0 [ 521.782881][T12777] do_fast_syscall_32+0x3c/0x80 [ 521.782881][T12777] do_SYSENTER_32+0x1b/0x20 [ 521.782881][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 521.782881][T12777] [ 521.782881][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 521.782881][T12777] do_recvmmsg+0xc1/0x2120 [ 521.782881][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.085909][T12777] not chained 1900000 origins [ 522.090598][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 522.092136][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.092136][T12777] Call Trace: [ 522.092136][T12777] dump_stack+0x25a/0x2f6 [ 522.092136][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 522.092136][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.092136][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 522.092136][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 522.092136][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 522.092136][T12777] ? release_sock+0x2b5/0x2e0 [ 522.092136][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.092136][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 522.092136][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 522.092136][T12777] ? should_fail+0x75/0x9c0 [ 522.092136][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.092136][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 522.092136][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 522.092136][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 522.092136][T12777] ? _copy_from_user+0x219/0x310 [ 522.092136][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.092136][T12777] __msan_chain_origin+0xcb/0x140 [ 522.092136][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.092136][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.092136][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 522.092136][T12777] do_recvmmsg+0x1063/0x2120 [ 522.092136][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 522.092136][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.092136][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 522.092136][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.092136][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 522.092136][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 522.092136][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.092136][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.092136][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.092136][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.092136][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.092136][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.092136][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.092136][T12777] RIP: 0023:0xf6f46549 [ 522.092136][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 522.092136][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 522.092136][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 522.092136][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.092136][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.092136][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 522.092136][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.092136][T12777] Uninit was stored to memory at: [ 522.092136][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.092136][T12777] __msan_chain_origin+0xcb/0x140 [ 522.092136][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.092136][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.092136][T12777] do_recvmmsg+0x1063/0x2120 [ 522.092136][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.092136][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.092136][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.092136][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.092136][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.092136][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.092136][T12777] [ 522.092136][T12777] Uninit was stored to memory at: [ 522.092136][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.092136][T12777] __msan_chain_origin+0xcb/0x140 [ 522.092136][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.092136][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.092136][T12777] do_recvmmsg+0x1063/0x2120 [ 522.092136][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.092136][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.092136][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.092136][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.092136][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.092136][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.092136][T12777] [ 522.092136][T12777] Uninit was stored to memory at: [ 522.092136][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.092136][T12777] __msan_chain_origin+0xcb/0x140 [ 522.092136][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.092136][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.092136][T12777] do_recvmmsg+0x1063/0x2120 [ 522.092136][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.092136][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.092136][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.092136][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.092136][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.092136][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.092136][T12777] [ 522.092136][T12777] Uninit was stored to memory at: [ 522.092136][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.092136][T12777] __msan_chain_origin+0xcb/0x140 [ 522.092136][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.092136][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.092136][T12777] do_recvmmsg+0x1063/0x2120 [ 522.092136][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.092136][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.092136][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.092136][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.092136][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.092136][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.092136][T12777] [ 522.092136][T12777] Uninit was stored to memory at: [ 522.092136][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.092136][T12777] __msan_chain_origin+0xcb/0x140 [ 522.092136][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.092136][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.092136][T12777] do_recvmmsg+0x1063/0x2120 [ 522.092136][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.092136][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.092136][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.092136][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.092136][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.092136][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.092136][T12777] [ 522.092136][T12777] Uninit was stored to memory at: [ 522.092136][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.092136][T12777] __msan_chain_origin+0xcb/0x140 [ 522.092136][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.092136][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.092136][T12777] do_recvmmsg+0x1063/0x2120 [ 522.092136][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.092136][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.092136][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.092136][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.092136][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.092136][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.092136][T12777] [ 522.092136][T12777] Uninit was stored to memory at: [ 522.092136][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.092136][T12777] __msan_chain_origin+0xcb/0x140 [ 522.092136][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.092136][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.092136][T12777] do_recvmmsg+0x1063/0x2120 [ 522.092136][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.092136][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.092136][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.092136][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.092136][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.092136][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.092136][T12777] [ 522.092136][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 522.092136][T12777] do_recvmmsg+0xc1/0x2120 [ 522.092136][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.929980][T12777] not chained 1910000 origins [ 522.932131][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 522.932131][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.932131][T12777] Call Trace: [ 522.932131][T12777] dump_stack+0x25a/0x2f6 [ 522.932131][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 522.932131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.932131][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 522.932131][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 522.932131][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 522.932131][T12777] ? release_sock+0x2b5/0x2e0 [ 522.932131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.932131][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 522.932131][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 522.932131][T12777] ? should_fail+0x75/0x9c0 [ 522.932131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.932131][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 522.932131][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 522.932131][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 522.932131][T12777] ? _copy_from_user+0x219/0x310 [ 522.932131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.932131][T12777] __msan_chain_origin+0xcb/0x140 [ 522.932131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.932131][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.932131][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 522.932131][T12777] do_recvmmsg+0x1063/0x2120 [ 522.932131][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 522.932131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.932131][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 522.932131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 522.932131][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 522.932131][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 522.932131][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.932131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.932131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.932131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.932131][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.932131][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.932131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.932131][T12777] RIP: 0023:0xf6f46549 [ 522.932131][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 522.932131][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 522.932131][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 522.932131][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.932131][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.932131][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 522.932131][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.932131][T12777] Uninit was stored to memory at: [ 522.932131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.932131][T12777] __msan_chain_origin+0xcb/0x140 [ 522.932131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.932131][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.932131][T12777] do_recvmmsg+0x1063/0x2120 [ 522.932131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.932131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.932131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.932131][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.932131][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.932131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.932131][T12777] [ 522.932131][T12777] Uninit was stored to memory at: [ 522.932131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.932131][T12777] __msan_chain_origin+0xcb/0x140 [ 522.932131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.932131][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.932131][T12777] do_recvmmsg+0x1063/0x2120 [ 522.932131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.932131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.932131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.932131][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.932131][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.932131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.932131][T12777] [ 522.932131][T12777] Uninit was stored to memory at: [ 522.932131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.932131][T12777] __msan_chain_origin+0xcb/0x140 [ 522.932131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.932131][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.932131][T12777] do_recvmmsg+0x1063/0x2120 [ 522.932131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.932131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.932131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.932131][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.932131][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.932131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.932131][T12777] [ 522.932131][T12777] Uninit was stored to memory at: [ 522.932131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.932131][T12777] __msan_chain_origin+0xcb/0x140 [ 522.932131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.932131][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.932131][T12777] do_recvmmsg+0x1063/0x2120 [ 522.932131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.932131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.932131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.932131][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.932131][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.932131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.932131][T12777] [ 522.932131][T12777] Uninit was stored to memory at: [ 522.932131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.932131][T12777] __msan_chain_origin+0xcb/0x140 [ 522.932131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.932131][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.932131][T12777] do_recvmmsg+0x1063/0x2120 [ 522.932131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.932131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.932131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.932131][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.932131][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.932131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.932131][T12777] [ 522.932131][T12777] Uninit was stored to memory at: [ 522.932131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.932131][T12777] __msan_chain_origin+0xcb/0x140 [ 522.932131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.932131][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.932131][T12777] do_recvmmsg+0x1063/0x2120 [ 522.932131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.932131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.932131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.932131][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.932131][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.932131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.932131][T12777] [ 522.932131][T12777] Uninit was stored to memory at: [ 522.932131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 522.932131][T12777] __msan_chain_origin+0xcb/0x140 [ 522.932131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 522.932131][T12777] get_compat_msghdr+0x108/0x2c0 [ 522.932131][T12777] do_recvmmsg+0x1063/0x2120 [ 522.932131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 522.932131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 522.932131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 522.932131][T12777] do_fast_syscall_32+0x3c/0x80 [ 522.932131][T12777] do_SYSENTER_32+0x1b/0x20 [ 522.932131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 522.932131][T12777] [ 522.932131][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 522.932131][T12777] do_recvmmsg+0xc1/0x2120 [ 522.932131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 523.777366][T12777] not chained 1920000 origins [ 523.782069][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 523.782132][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.782132][T12777] Call Trace: [ 523.782132][T12777] dump_stack+0x25a/0x2f6 [ 523.782132][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 523.782132][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 523.782132][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 523.782132][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 523.782132][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 523.782132][T12777] ? release_sock+0x2b5/0x2e0 [ 523.782132][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 523.782132][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 523.782132][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 523.782132][T12777] ? should_fail+0x75/0x9c0 [ 523.782132][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 523.782132][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 523.782132][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 523.782132][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 523.782132][T12777] ? _copy_from_user+0x219/0x310 [ 523.782132][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 523.782132][T12777] __msan_chain_origin+0xcb/0x140 [ 523.782132][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 523.782132][T12777] get_compat_msghdr+0x108/0x2c0 [ 523.782132][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 523.782132][T12777] do_recvmmsg+0x1063/0x2120 [ 523.782132][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 523.782132][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 523.782132][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 523.782132][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 523.782132][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 523.782132][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 523.782132][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 523.782132][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 523.782132][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 523.782132][T12777] __do_fast_syscall_32+0x96/0xe0 [ 523.782132][T12777] do_fast_syscall_32+0x3c/0x80 [ 523.782132][T12777] do_SYSENTER_32+0x1b/0x20 [ 523.782132][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 523.782132][T12777] RIP: 0023:0xf6f46549 [ 523.782132][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 523.782132][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 523.782132][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 523.782132][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 523.782132][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 523.782132][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 523.782132][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 523.782132][T12777] Uninit was stored to memory at: [ 523.782132][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 523.782132][T12777] __msan_chain_origin+0xcb/0x140 [ 523.782132][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 523.782132][T12777] get_compat_msghdr+0x108/0x2c0 [ 523.782132][T12777] do_recvmmsg+0x1063/0x2120 [ 523.782132][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 523.782132][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 523.782132][T12777] __do_fast_syscall_32+0x96/0xe0 [ 523.782132][T12777] do_fast_syscall_32+0x3c/0x80 [ 523.782132][T12777] do_SYSENTER_32+0x1b/0x20 [ 523.782132][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 523.782132][T12777] [ 523.782132][T12777] Uninit was stored to memory at: [ 523.782132][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 523.782132][T12777] __msan_chain_origin+0xcb/0x140 [ 523.782132][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 523.782132][T12777] get_compat_msghdr+0x108/0x2c0 [ 523.782132][T12777] do_recvmmsg+0x1063/0x2120 [ 523.782132][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 523.782132][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 523.782132][T12777] __do_fast_syscall_32+0x96/0xe0 [ 523.782132][T12777] do_fast_syscall_32+0x3c/0x80 [ 523.782132][T12777] do_SYSENTER_32+0x1b/0x20 [ 523.782132][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 523.782132][T12777] [ 523.782132][T12777] Uninit was stored to memory at: [ 523.782132][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 523.782132][T12777] __msan_chain_origin+0xcb/0x140 [ 523.782132][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 523.782132][T12777] get_compat_msghdr+0x108/0x2c0 [ 523.782132][T12777] do_recvmmsg+0x1063/0x2120 [ 523.782132][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 523.782132][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 523.782132][T12777] __do_fast_syscall_32+0x96/0xe0 [ 523.782132][T12777] do_fast_syscall_32+0x3c/0x80 [ 523.782132][T12777] do_SYSENTER_32+0x1b/0x20 [ 523.782132][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 523.782132][T12777] [ 523.782132][T12777] Uninit was stored to memory at: [ 523.782132][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 523.782132][T12777] __msan_chain_origin+0xcb/0x140 [ 523.782132][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 523.782132][T12777] get_compat_msghdr+0x108/0x2c0 [ 523.782132][T12777] do_recvmmsg+0x1063/0x2120 [ 523.782132][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 523.782132][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 523.782132][T12777] __do_fast_syscall_32+0x96/0xe0 [ 523.782132][T12777] do_fast_syscall_32+0x3c/0x80 [ 523.782132][T12777] do_SYSENTER_32+0x1b/0x20 [ 523.782132][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 523.782132][T12777] [ 523.782132][T12777] Uninit was stored to memory at: [ 523.782132][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 523.782132][T12777] __msan_chain_origin+0xcb/0x140 [ 523.782132][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 523.782132][T12777] get_compat_msghdr+0x108/0x2c0 [ 523.782132][T12777] do_recvmmsg+0x1063/0x2120 [ 523.782132][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 523.782132][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 523.782132][T12777] __do_fast_syscall_32+0x96/0xe0 [ 523.782132][T12777] do_fast_syscall_32+0x3c/0x80 [ 523.782132][T12777] do_SYSENTER_32+0x1b/0x20 [ 523.782132][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 523.782132][T12777] [ 523.782132][T12777] Uninit was stored to memory at: [ 523.782132][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 523.782132][T12777] __msan_chain_origin+0xcb/0x140 [ 523.782132][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 523.782132][T12777] get_compat_msghdr+0x108/0x2c0 [ 523.782132][T12777] do_recvmmsg+0x1063/0x2120 [ 523.782132][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 523.782132][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 523.782132][T12777] __do_fast_syscall_32+0x96/0xe0 [ 523.782132][T12777] do_fast_syscall_32+0x3c/0x80 [ 523.782132][T12777] do_SYSENTER_32+0x1b/0x20 [ 523.782132][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 523.782132][T12777] [ 523.782132][T12777] Uninit was stored to memory at: [ 523.782132][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 523.782132][T12777] __msan_chain_origin+0xcb/0x140 [ 523.782132][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 523.782132][T12777] get_compat_msghdr+0x108/0x2c0 [ 523.782132][T12777] do_recvmmsg+0x1063/0x2120 [ 523.782132][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 523.782132][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 523.782132][T12777] __do_fast_syscall_32+0x96/0xe0 [ 523.782132][T12777] do_fast_syscall_32+0x3c/0x80 [ 523.782132][T12777] do_SYSENTER_32+0x1b/0x20 [ 523.782132][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 523.782132][T12777] [ 523.782132][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 523.782132][T12777] do_recvmmsg+0xc1/0x2120 [ 523.782132][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 524.655829][T12777] not chained 1930000 origins [ 524.660525][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 524.666753][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.674159][T12777] Call Trace: [ 524.674159][T12777] dump_stack+0x25a/0x2f6 [ 524.674159][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 524.674159][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 524.674159][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 524.674159][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 524.674159][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 524.674159][T12777] ? release_sock+0x2b5/0x2e0 [ 524.674159][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 524.674159][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 524.674159][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 524.674159][T12777] ? should_fail+0x75/0x9c0 [ 524.674159][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 524.674159][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 524.674159][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 524.674159][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 524.674159][T12777] ? _copy_from_user+0x219/0x310 [ 524.674159][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 524.674159][T12777] __msan_chain_origin+0xcb/0x140 [ 524.674159][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 524.674159][T12777] get_compat_msghdr+0x108/0x2c0 [ 524.674159][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 524.674159][T12777] do_recvmmsg+0x1063/0x2120 [ 524.674159][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 524.674159][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 524.674159][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 524.674159][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 524.674159][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 524.674159][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 524.674159][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 524.674159][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 524.674159][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 524.674159][T12777] __do_fast_syscall_32+0x96/0xe0 [ 524.674159][T12777] do_fast_syscall_32+0x3c/0x80 [ 524.674159][T12777] do_SYSENTER_32+0x1b/0x20 [ 524.674159][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 524.674159][T12777] RIP: 0023:0xf6f46549 [ 524.674159][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 524.674159][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 524.674159][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 524.674159][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.674159][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.674159][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 524.674159][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.674159][T12777] Uninit was stored to memory at: [ 524.674159][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 524.674159][T12777] __msan_chain_origin+0xcb/0x140 [ 524.674159][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 524.674159][T12777] get_compat_msghdr+0x108/0x2c0 [ 524.674159][T12777] do_recvmmsg+0x1063/0x2120 [ 524.674159][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 524.674159][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 524.674159][T12777] __do_fast_syscall_32+0x96/0xe0 [ 524.674159][T12777] do_fast_syscall_32+0x3c/0x80 [ 524.674159][T12777] do_SYSENTER_32+0x1b/0x20 [ 524.674159][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 524.674159][T12777] [ 524.674159][T12777] Uninit was stored to memory at: [ 524.674159][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 524.674159][T12777] __msan_chain_origin+0xcb/0x140 [ 524.674159][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 524.674159][T12777] get_compat_msghdr+0x108/0x2c0 [ 524.674159][T12777] do_recvmmsg+0x1063/0x2120 [ 524.674159][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 524.674159][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 524.674159][T12777] __do_fast_syscall_32+0x96/0xe0 [ 524.674159][T12777] do_fast_syscall_32+0x3c/0x80 [ 524.674159][T12777] do_SYSENTER_32+0x1b/0x20 [ 524.674159][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 524.674159][T12777] [ 524.674159][T12777] Uninit was stored to memory at: [ 524.674159][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 524.674159][T12777] __msan_chain_origin+0xcb/0x140 [ 524.674159][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 524.674159][T12777] get_compat_msghdr+0x108/0x2c0 [ 524.674159][T12777] do_recvmmsg+0x1063/0x2120 [ 524.674159][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 524.674159][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 524.674159][T12777] __do_fast_syscall_32+0x96/0xe0 [ 524.674159][T12777] do_fast_syscall_32+0x3c/0x80 [ 524.674159][T12777] do_SYSENTER_32+0x1b/0x20 [ 524.674159][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 524.674159][T12777] [ 524.674159][T12777] Uninit was stored to memory at: [ 524.674159][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 524.674159][T12777] __msan_chain_origin+0xcb/0x140 [ 524.674159][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 524.674159][T12777] get_compat_msghdr+0x108/0x2c0 [ 524.674159][T12777] do_recvmmsg+0x1063/0x2120 [ 524.674159][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 524.674159][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 524.674159][T12777] __do_fast_syscall_32+0x96/0xe0 [ 524.674159][T12777] do_fast_syscall_32+0x3c/0x80 [ 524.674159][T12777] do_SYSENTER_32+0x1b/0x20 [ 524.674159][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 524.674159][T12777] [ 524.674159][T12777] Uninit was stored to memory at: [ 524.674159][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 524.674159][T12777] __msan_chain_origin+0xcb/0x140 [ 524.674159][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 524.674159][T12777] get_compat_msghdr+0x108/0x2c0 [ 524.674159][T12777] do_recvmmsg+0x1063/0x2120 [ 524.674159][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 524.674159][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 524.674159][T12777] __do_fast_syscall_32+0x96/0xe0 [ 524.674159][T12777] do_fast_syscall_32+0x3c/0x80 [ 524.674159][T12777] do_SYSENTER_32+0x1b/0x20 [ 524.674159][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 524.674159][T12777] [ 524.674159][T12777] Uninit was stored to memory at: [ 524.674159][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 524.674159][T12777] __msan_chain_origin+0xcb/0x140 [ 524.674159][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 524.674159][T12777] get_compat_msghdr+0x108/0x2c0 [ 524.674159][T12777] do_recvmmsg+0x1063/0x2120 [ 524.674159][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 524.674159][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 524.674159][T12777] __do_fast_syscall_32+0x96/0xe0 [ 524.674159][T12777] do_fast_syscall_32+0x3c/0x80 [ 524.674159][T12777] do_SYSENTER_32+0x1b/0x20 [ 524.674159][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 524.674159][T12777] [ 524.674159][T12777] Uninit was stored to memory at: [ 524.674159][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 524.674159][T12777] __msan_chain_origin+0xcb/0x140 [ 524.674159][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 524.674159][T12777] get_compat_msghdr+0x108/0x2c0 [ 524.674159][T12777] do_recvmmsg+0x1063/0x2120 [ 524.674159][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 524.674159][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 524.674159][T12777] __do_fast_syscall_32+0x96/0xe0 [ 524.674159][T12777] do_fast_syscall_32+0x3c/0x80 [ 524.674159][T12777] do_SYSENTER_32+0x1b/0x20 [ 524.674159][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 524.674159][T12777] [ 524.674159][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 524.674159][T12777] do_recvmmsg+0xc1/0x2120 [ 524.674159][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 525.505849][T12777] not chained 1940000 origins [ 525.510553][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 525.512134][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.512134][T12777] Call Trace: [ 525.512134][T12777] dump_stack+0x25a/0x2f6 [ 525.512134][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 525.512134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 525.512134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 525.512134][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 525.512134][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 525.512134][T12777] ? release_sock+0x2b5/0x2e0 [ 525.512134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 525.512134][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 525.512134][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 525.512134][T12777] ? should_fail+0x75/0x9c0 [ 525.512134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 525.512134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 525.512134][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 525.512134][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 525.512134][T12777] ? _copy_from_user+0x219/0x310 [ 525.512134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 525.512134][T12777] __msan_chain_origin+0xcb/0x140 [ 525.512134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 525.512134][T12777] get_compat_msghdr+0x108/0x2c0 [ 525.512134][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 525.512134][T12777] do_recvmmsg+0x1063/0x2120 [ 525.512134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 525.512134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 525.512134][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 525.512134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 525.512134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 525.512134][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 525.512134][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 525.512134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 525.512134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 525.512134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 525.512134][T12777] do_fast_syscall_32+0x3c/0x80 [ 525.512134][T12777] do_SYSENTER_32+0x1b/0x20 [ 525.512134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 525.512134][T12777] RIP: 0023:0xf6f46549 [ 525.512134][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 525.512134][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 525.512134][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 525.512134][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 525.512134][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.512134][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 525.512134][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.512134][T12777] Uninit was stored to memory at: [ 525.512134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 525.512134][T12777] __msan_chain_origin+0xcb/0x140 [ 525.512134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 525.512134][T12777] get_compat_msghdr+0x108/0x2c0 [ 525.512134][T12777] do_recvmmsg+0x1063/0x2120 [ 525.512134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 525.512134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 525.512134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 525.512134][T12777] do_fast_syscall_32+0x3c/0x80 [ 525.512134][T12777] do_SYSENTER_32+0x1b/0x20 [ 525.512134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 525.512134][T12777] [ 525.512134][T12777] Uninit was stored to memory at: [ 525.512134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 525.512134][T12777] __msan_chain_origin+0xcb/0x140 [ 525.512134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 525.512134][T12777] get_compat_msghdr+0x108/0x2c0 [ 525.512134][T12777] do_recvmmsg+0x1063/0x2120 [ 525.512134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 525.512134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 525.512134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 525.512134][T12777] do_fast_syscall_32+0x3c/0x80 [ 525.512134][T12777] do_SYSENTER_32+0x1b/0x20 [ 525.512134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 525.512134][T12777] [ 525.512134][T12777] Uninit was stored to memory at: [ 525.512134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 525.512134][T12777] __msan_chain_origin+0xcb/0x140 [ 525.512134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 525.512134][T12777] get_compat_msghdr+0x108/0x2c0 [ 525.512134][T12777] do_recvmmsg+0x1063/0x2120 [ 525.512134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 525.512134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 525.512134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 525.512134][T12777] do_fast_syscall_32+0x3c/0x80 [ 525.512134][T12777] do_SYSENTER_32+0x1b/0x20 [ 525.512134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 525.512134][T12777] [ 525.512134][T12777] Uninit was stored to memory at: [ 525.512134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 525.512134][T12777] __msan_chain_origin+0xcb/0x140 [ 525.512134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 525.512134][T12777] get_compat_msghdr+0x108/0x2c0 [ 525.512134][T12777] do_recvmmsg+0x1063/0x2120 [ 525.512134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 525.512134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 525.512134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 525.512134][T12777] do_fast_syscall_32+0x3c/0x80 [ 525.512134][T12777] do_SYSENTER_32+0x1b/0x20 [ 525.512134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 525.512134][T12777] [ 525.512134][T12777] Uninit was stored to memory at: [ 525.512134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 525.512134][T12777] __msan_chain_origin+0xcb/0x140 [ 525.512134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 525.512134][T12777] get_compat_msghdr+0x108/0x2c0 [ 525.512134][T12777] do_recvmmsg+0x1063/0x2120 [ 525.512134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 525.512134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 525.512134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 525.512134][T12777] do_fast_syscall_32+0x3c/0x80 [ 525.512134][T12777] do_SYSENTER_32+0x1b/0x20 [ 525.512134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 525.512134][T12777] [ 525.512134][T12777] Uninit was stored to memory at: [ 525.512134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 525.512134][T12777] __msan_chain_origin+0xcb/0x140 [ 525.512134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 525.512134][T12777] get_compat_msghdr+0x108/0x2c0 [ 525.512134][T12777] do_recvmmsg+0x1063/0x2120 [ 525.512134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 525.512134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 525.512134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 525.512134][T12777] do_fast_syscall_32+0x3c/0x80 [ 525.512134][T12777] do_SYSENTER_32+0x1b/0x20 [ 525.512134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 525.512134][T12777] [ 525.512134][T12777] Uninit was stored to memory at: [ 525.512134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 525.512134][T12777] __msan_chain_origin+0xcb/0x140 [ 525.512134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 525.512134][T12777] get_compat_msghdr+0x108/0x2c0 [ 525.512134][T12777] do_recvmmsg+0x1063/0x2120 [ 525.512134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 525.512134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 525.512134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 525.512134][T12777] do_fast_syscall_32+0x3c/0x80 [ 525.512134][T12777] do_SYSENTER_32+0x1b/0x20 [ 525.512134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 525.512134][T12777] [ 525.512134][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 525.512134][T12777] do_recvmmsg+0xc1/0x2120 [ 525.512134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 526.346094][T12777] not chained 1950000 origins [ 526.350789][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 526.352133][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.352133][T12777] Call Trace: [ 526.352133][T12777] dump_stack+0x25a/0x2f6 [ 526.352133][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 526.352133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 526.352133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 526.352133][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 526.352133][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 526.352133][T12777] ? release_sock+0x2b5/0x2e0 [ 526.352133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 526.352133][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 526.352133][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 526.352133][T12777] ? should_fail+0x75/0x9c0 [ 526.352133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 526.352133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 526.352133][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 526.352133][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 526.352133][T12777] ? _copy_from_user+0x219/0x310 [ 526.352133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 526.352133][T12777] __msan_chain_origin+0xcb/0x140 [ 526.352133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 526.352133][T12777] get_compat_msghdr+0x108/0x2c0 [ 526.352133][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 526.352133][T12777] do_recvmmsg+0x1063/0x2120 [ 526.352133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 526.352133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 526.352133][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 526.352133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 526.352133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 526.352133][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 526.352133][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 526.352133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 526.352133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 526.352133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 526.352133][T12777] do_fast_syscall_32+0x3c/0x80 [ 526.352133][T12777] do_SYSENTER_32+0x1b/0x20 [ 526.352133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 526.352133][T12777] RIP: 0023:0xf6f46549 [ 526.352133][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 526.352133][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 526.352133][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 526.352133][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.352133][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 526.352133][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 526.352133][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.352133][T12777] Uninit was stored to memory at: [ 526.352133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 526.352133][T12777] __msan_chain_origin+0xcb/0x140 [ 526.352133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 526.352133][T12777] get_compat_msghdr+0x108/0x2c0 [ 526.352133][T12777] do_recvmmsg+0x1063/0x2120 [ 526.352133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 526.352133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 526.352133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 526.352133][T12777] do_fast_syscall_32+0x3c/0x80 [ 526.352133][T12777] do_SYSENTER_32+0x1b/0x20 [ 526.352133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 526.352133][T12777] [ 526.352133][T12777] Uninit was stored to memory at: [ 526.352133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 526.352133][T12777] __msan_chain_origin+0xcb/0x140 [ 526.352133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 526.352133][T12777] get_compat_msghdr+0x108/0x2c0 [ 526.352133][T12777] do_recvmmsg+0x1063/0x2120 [ 526.352133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 526.352133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 526.352133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 526.352133][T12777] do_fast_syscall_32+0x3c/0x80 [ 526.352133][T12777] do_SYSENTER_32+0x1b/0x20 [ 526.352133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 526.352133][T12777] [ 526.352133][T12777] Uninit was stored to memory at: [ 526.352133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 526.352133][T12777] __msan_chain_origin+0xcb/0x140 [ 526.352133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 526.352133][T12777] get_compat_msghdr+0x108/0x2c0 [ 526.352133][T12777] do_recvmmsg+0x1063/0x2120 [ 526.352133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 526.352133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 526.352133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 526.352133][T12777] do_fast_syscall_32+0x3c/0x80 [ 526.352133][T12777] do_SYSENTER_32+0x1b/0x20 [ 526.352133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 526.352133][T12777] [ 526.352133][T12777] Uninit was stored to memory at: [ 526.352133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 526.352133][T12777] __msan_chain_origin+0xcb/0x140 [ 526.352133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 526.352133][T12777] get_compat_msghdr+0x108/0x2c0 [ 526.352133][T12777] do_recvmmsg+0x1063/0x2120 [ 526.352133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 526.352133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 526.352133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 526.352133][T12777] do_fast_syscall_32+0x3c/0x80 [ 526.352133][T12777] do_SYSENTER_32+0x1b/0x20 [ 526.352133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 526.352133][T12777] [ 526.352133][T12777] Uninit was stored to memory at: [ 526.352133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 526.352133][T12777] __msan_chain_origin+0xcb/0x140 [ 526.352133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 526.352133][T12777] get_compat_msghdr+0x108/0x2c0 [ 526.352133][T12777] do_recvmmsg+0x1063/0x2120 [ 526.352133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 526.352133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 526.352133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 526.352133][T12777] do_fast_syscall_32+0x3c/0x80 [ 526.352133][T12777] do_SYSENTER_32+0x1b/0x20 [ 526.352133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 526.352133][T12777] [ 526.352133][T12777] Uninit was stored to memory at: [ 526.352133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 526.352133][T12777] __msan_chain_origin+0xcb/0x140 [ 526.352133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 526.352133][T12777] get_compat_msghdr+0x108/0x2c0 [ 526.352133][T12777] do_recvmmsg+0x1063/0x2120 [ 526.352133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 526.352133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 526.352133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 526.352133][T12777] do_fast_syscall_32+0x3c/0x80 [ 526.352133][T12777] do_SYSENTER_32+0x1b/0x20 [ 526.352133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 526.352133][T12777] [ 526.352133][T12777] Uninit was stored to memory at: [ 526.352133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 526.352133][T12777] __msan_chain_origin+0xcb/0x140 [ 526.352133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 526.352133][T12777] get_compat_msghdr+0x108/0x2c0 [ 526.352133][T12777] do_recvmmsg+0x1063/0x2120 [ 526.352133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 526.352133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 526.352133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 526.352133][T12777] do_fast_syscall_32+0x3c/0x80 [ 526.352133][T12777] do_SYSENTER_32+0x1b/0x20 [ 526.352133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 526.352133][T12777] [ 526.352133][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 526.352133][T12777] do_recvmmsg+0xc1/0x2120 [ 526.352133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 527.231090][T12777] not chained 1960000 origins [ 527.232134][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 527.232134][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.232134][T12777] Call Trace: [ 527.232134][T12777] dump_stack+0x25a/0x2f6 [ 527.232134][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 527.232134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 527.232134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 527.232134][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 527.232134][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 527.232134][T12777] ? release_sock+0x2b5/0x2e0 [ 527.232134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 527.232134][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 527.232134][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 527.232134][T12777] ? should_fail+0x75/0x9c0 [ 527.232134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 527.232134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 527.232134][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 527.330412][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 527.330412][T12777] ? _copy_from_user+0x219/0x310 [ 527.330412][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 527.330412][T12777] __msan_chain_origin+0xcb/0x140 [ 527.330412][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 527.330412][T12777] get_compat_msghdr+0x108/0x2c0 [ 527.330412][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 527.330412][T12777] do_recvmmsg+0x1063/0x2120 [ 527.330412][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 527.330412][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 527.330412][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 527.330412][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 527.330412][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 527.330412][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 527.330412][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 527.330412][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 527.330412][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 527.330412][T12777] __do_fast_syscall_32+0x96/0xe0 [ 527.330412][T12777] do_fast_syscall_32+0x3c/0x80 [ 527.330412][T12777] do_SYSENTER_32+0x1b/0x20 [ 527.330412][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 527.330412][T12777] RIP: 0023:0xf6f46549 [ 527.330412][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 527.330412][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 527.330412][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 527.330412][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.330412][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.330412][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 527.330412][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.330412][T12777] Uninit was stored to memory at: [ 527.330412][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 527.330412][T12777] __msan_chain_origin+0xcb/0x140 [ 527.330412][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 527.330412][T12777] get_compat_msghdr+0x108/0x2c0 [ 527.330412][T12777] do_recvmmsg+0x1063/0x2120 [ 527.330412][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 527.330412][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 527.330412][T12777] __do_fast_syscall_32+0x96/0xe0 [ 527.330412][T12777] do_fast_syscall_32+0x3c/0x80 [ 527.330412][T12777] do_SYSENTER_32+0x1b/0x20 [ 527.330412][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 527.330412][T12777] [ 527.330412][T12777] Uninit was stored to memory at: [ 527.330412][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 527.330412][T12777] __msan_chain_origin+0xcb/0x140 [ 527.330412][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 527.330412][T12777] get_compat_msghdr+0x108/0x2c0 [ 527.330412][T12777] do_recvmmsg+0x1063/0x2120 [ 527.330412][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 527.330412][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 527.330412][T12777] __do_fast_syscall_32+0x96/0xe0 [ 527.330412][T12777] do_fast_syscall_32+0x3c/0x80 [ 527.330412][T12777] do_SYSENTER_32+0x1b/0x20 [ 527.330412][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 527.330412][T12777] [ 527.330412][T12777] Uninit was stored to memory at: [ 527.330412][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 527.330412][T12777] __msan_chain_origin+0xcb/0x140 [ 527.330412][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 527.330412][T12777] get_compat_msghdr+0x108/0x2c0 [ 527.330412][T12777] do_recvmmsg+0x1063/0x2120 [ 527.330412][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 527.330412][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 527.330412][T12777] __do_fast_syscall_32+0x96/0xe0 [ 527.330412][T12777] do_fast_syscall_32+0x3c/0x80 [ 527.330412][T12777] do_SYSENTER_32+0x1b/0x20 [ 527.330412][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 527.330412][T12777] [ 527.330412][T12777] Uninit was stored to memory at: [ 527.330412][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 527.330412][T12777] __msan_chain_origin+0xcb/0x140 [ 527.330412][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 527.330412][T12777] get_compat_msghdr+0x108/0x2c0 [ 527.330412][T12777] do_recvmmsg+0x1063/0x2120 [ 527.330412][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 527.330412][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 527.330412][T12777] __do_fast_syscall_32+0x96/0xe0 [ 527.330412][T12777] do_fast_syscall_32+0x3c/0x80 [ 527.330412][T12777] do_SYSENTER_32+0x1b/0x20 [ 527.330412][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 527.330412][T12777] [ 527.330412][T12777] Uninit was stored to memory at: [ 527.330412][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 527.330412][T12777] __msan_chain_origin+0xcb/0x140 [ 527.330412][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 527.330412][T12777] get_compat_msghdr+0x108/0x2c0 [ 527.330412][T12777] do_recvmmsg+0x1063/0x2120 [ 527.330412][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 527.330412][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 527.330412][T12777] __do_fast_syscall_32+0x96/0xe0 [ 527.330412][T12777] do_fast_syscall_32+0x3c/0x80 [ 527.330412][T12777] do_SYSENTER_32+0x1b/0x20 [ 527.330412][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 527.330412][T12777] [ 527.330412][T12777] Uninit was stored to memory at: [ 527.330412][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 527.330412][T12777] __msan_chain_origin+0xcb/0x140 [ 527.330412][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 527.330412][T12777] get_compat_msghdr+0x108/0x2c0 [ 527.330412][T12777] do_recvmmsg+0x1063/0x2120 [ 527.330412][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 527.330412][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 527.330412][T12777] __do_fast_syscall_32+0x96/0xe0 [ 527.330412][T12777] do_fast_syscall_32+0x3c/0x80 [ 527.330412][T12777] do_SYSENTER_32+0x1b/0x20 [ 527.330412][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 527.330412][T12777] [ 527.330412][T12777] Uninit was stored to memory at: [ 527.330412][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 527.330412][T12777] __msan_chain_origin+0xcb/0x140 [ 527.330412][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 527.330412][T12777] get_compat_msghdr+0x108/0x2c0 [ 527.330412][T12777] do_recvmmsg+0x1063/0x2120 [ 527.330412][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 527.330412][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 527.330412][T12777] __do_fast_syscall_32+0x96/0xe0 [ 527.330412][T12777] do_fast_syscall_32+0x3c/0x80 [ 527.330412][T12777] do_SYSENTER_32+0x1b/0x20 [ 527.330412][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 527.330412][T12777] [ 527.330412][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 527.330412][T12777] do_recvmmsg+0xc1/0x2120 [ 527.330412][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.075697][T12777] not chained 1970000 origins [ 528.080387][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 528.082131][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.082131][T12777] Call Trace: [ 528.082131][T12777] dump_stack+0x25a/0x2f6 [ 528.082131][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 528.082131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.082131][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 528.082131][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 528.082131][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 528.082131][T12777] ? release_sock+0x2b5/0x2e0 [ 528.082131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.082131][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 528.082131][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 528.082131][T12777] ? should_fail+0x75/0x9c0 [ 528.082131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.082131][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 528.082131][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 528.082131][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 528.082131][T12777] ? _copy_from_user+0x219/0x310 [ 528.082131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.082131][T12777] __msan_chain_origin+0xcb/0x140 [ 528.082131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.082131][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.082131][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 528.082131][T12777] do_recvmmsg+0x1063/0x2120 [ 528.082131][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 528.082131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.082131][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 528.082131][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.082131][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 528.082131][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 528.082131][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.082131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.082131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.082131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.082131][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.082131][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.082131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.082131][T12777] RIP: 0023:0xf6f46549 [ 528.082131][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 528.082131][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 528.082131][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 528.082131][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 528.082131][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 528.082131][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 528.082131][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 528.082131][T12777] Uninit was stored to memory at: [ 528.082131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.082131][T12777] __msan_chain_origin+0xcb/0x140 [ 528.082131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.082131][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.082131][T12777] do_recvmmsg+0x1063/0x2120 [ 528.082131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.082131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.082131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.082131][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.082131][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.082131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.082131][T12777] [ 528.082131][T12777] Uninit was stored to memory at: [ 528.082131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.082131][T12777] __msan_chain_origin+0xcb/0x140 [ 528.082131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.082131][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.082131][T12777] do_recvmmsg+0x1063/0x2120 [ 528.082131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.082131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.082131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.082131][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.082131][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.082131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.082131][T12777] [ 528.082131][T12777] Uninit was stored to memory at: [ 528.082131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.082131][T12777] __msan_chain_origin+0xcb/0x140 [ 528.082131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.082131][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.082131][T12777] do_recvmmsg+0x1063/0x2120 [ 528.082131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.082131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.082131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.082131][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.082131][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.082131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.082131][T12777] [ 528.082131][T12777] Uninit was stored to memory at: [ 528.082131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.082131][T12777] __msan_chain_origin+0xcb/0x140 [ 528.082131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.082131][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.082131][T12777] do_recvmmsg+0x1063/0x2120 [ 528.082131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.082131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.082131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.082131][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.082131][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.082131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.082131][T12777] [ 528.082131][T12777] Uninit was stored to memory at: [ 528.082131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.082131][T12777] __msan_chain_origin+0xcb/0x140 [ 528.082131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.082131][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.082131][T12777] do_recvmmsg+0x1063/0x2120 [ 528.082131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.082131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.082131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.082131][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.082131][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.082131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.082131][T12777] [ 528.082131][T12777] Uninit was stored to memory at: [ 528.082131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.082131][T12777] __msan_chain_origin+0xcb/0x140 [ 528.082131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.082131][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.082131][T12777] do_recvmmsg+0x1063/0x2120 [ 528.082131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.082131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.082131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.082131][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.082131][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.082131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.082131][T12777] [ 528.082131][T12777] Uninit was stored to memory at: [ 528.082131][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.082131][T12777] __msan_chain_origin+0xcb/0x140 [ 528.082131][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.082131][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.082131][T12777] do_recvmmsg+0x1063/0x2120 [ 528.082131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.082131][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.082131][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.082131][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.082131][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.082131][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.082131][T12777] [ 528.082131][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 528.082131][T12777] do_recvmmsg+0xc1/0x2120 [ 528.082131][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.916551][T12777] not chained 1980000 origins [ 528.921242][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 528.922133][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.922133][T12777] Call Trace: [ 528.922133][T12777] dump_stack+0x25a/0x2f6 [ 528.922133][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 528.922133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.922133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 528.922133][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 528.922133][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 528.922133][T12777] ? release_sock+0x2b5/0x2e0 [ 528.922133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.922133][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 528.922133][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 528.922133][T12777] ? should_fail+0x75/0x9c0 [ 528.922133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.922133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 528.922133][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 528.922133][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 528.922133][T12777] ? _copy_from_user+0x219/0x310 [ 528.922133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.922133][T12777] __msan_chain_origin+0xcb/0x140 [ 528.922133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.922133][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.922133][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 528.922133][T12777] do_recvmmsg+0x1063/0x2120 [ 528.922133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 528.922133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.922133][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 528.922133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 528.922133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 528.922133][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 528.922133][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.922133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.922133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.922133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.922133][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.922133][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.922133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.922133][T12777] RIP: 0023:0xf6f46549 [ 528.922133][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 528.922133][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 528.922133][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 528.922133][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 528.922133][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 528.922133][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 528.922133][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 528.922133][T12777] Uninit was stored to memory at: [ 528.922133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.922133][T12777] __msan_chain_origin+0xcb/0x140 [ 528.922133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.922133][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.922133][T12777] do_recvmmsg+0x1063/0x2120 [ 528.922133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.922133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.922133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.922133][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.922133][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.922133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.922133][T12777] [ 528.922133][T12777] Uninit was stored to memory at: [ 528.922133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.922133][T12777] __msan_chain_origin+0xcb/0x140 [ 528.922133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.922133][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.922133][T12777] do_recvmmsg+0x1063/0x2120 [ 528.922133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.922133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.922133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.922133][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.922133][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.922133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.922133][T12777] [ 528.922133][T12777] Uninit was stored to memory at: [ 528.922133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.922133][T12777] __msan_chain_origin+0xcb/0x140 [ 528.922133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.922133][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.922133][T12777] do_recvmmsg+0x1063/0x2120 [ 528.922133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.922133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.922133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.922133][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.922133][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.922133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.922133][T12777] [ 528.922133][T12777] Uninit was stored to memory at: [ 528.922133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.922133][T12777] __msan_chain_origin+0xcb/0x140 [ 528.922133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.922133][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.922133][T12777] do_recvmmsg+0x1063/0x2120 [ 528.922133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.922133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.922133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.922133][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.922133][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.922133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.922133][T12777] [ 528.922133][T12777] Uninit was stored to memory at: [ 528.922133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.922133][T12777] __msan_chain_origin+0xcb/0x140 [ 528.922133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.922133][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.922133][T12777] do_recvmmsg+0x1063/0x2120 [ 528.922133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.922133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.922133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.922133][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.922133][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.922133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.922133][T12777] [ 528.922133][T12777] Uninit was stored to memory at: [ 528.922133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.922133][T12777] __msan_chain_origin+0xcb/0x140 [ 528.922133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.922133][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.922133][T12777] do_recvmmsg+0x1063/0x2120 [ 528.922133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.922133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.922133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.922133][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.922133][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.922133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.922133][T12777] [ 528.922133][T12777] Uninit was stored to memory at: [ 528.922133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 528.922133][T12777] __msan_chain_origin+0xcb/0x140 [ 528.922133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 528.922133][T12777] get_compat_msghdr+0x108/0x2c0 [ 528.922133][T12777] do_recvmmsg+0x1063/0x2120 [ 528.922133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 528.922133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 528.922133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 528.922133][T12777] do_fast_syscall_32+0x3c/0x80 [ 528.922133][T12777] do_SYSENTER_32+0x1b/0x20 [ 528.922133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 528.922133][T12777] [ 528.922133][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 528.922133][T12777] do_recvmmsg+0xc1/0x2120 [ 528.922133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 529.808612][T12777] not chained 1990000 origins [ 529.812136][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 529.812136][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.812136][T12777] Call Trace: [ 529.812136][T12777] dump_stack+0x25a/0x2f6 [ 529.812136][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 529.812136][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 529.812136][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 529.812136][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 529.812136][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 529.812136][T12777] ? release_sock+0x2b5/0x2e0 [ 529.812136][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 529.812136][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 529.812136][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 529.812136][T12777] ? should_fail+0x75/0x9c0 [ 529.890380][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 529.890380][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 529.890380][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 529.890380][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 529.890380][T12777] ? _copy_from_user+0x219/0x310 [ 529.890380][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 529.890380][T12777] __msan_chain_origin+0xcb/0x140 [ 529.890380][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 529.890380][T12777] get_compat_msghdr+0x108/0x2c0 [ 529.890380][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 529.890380][T12777] do_recvmmsg+0x1063/0x2120 [ 529.890380][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 529.890380][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 529.890380][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 529.890380][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 529.890380][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 529.890380][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 529.890380][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 529.890380][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 529.890380][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 529.890380][T12777] __do_fast_syscall_32+0x96/0xe0 [ 529.890380][T12777] do_fast_syscall_32+0x3c/0x80 [ 529.890380][T12777] do_SYSENTER_32+0x1b/0x20 [ 529.890380][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 529.890380][T12777] RIP: 0023:0xf6f46549 [ 529.890380][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 529.890380][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 529.890380][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 529.890380][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 529.890380][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 529.890380][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 529.890380][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 529.890380][T12777] Uninit was stored to memory at: [ 529.890380][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 529.890380][T12777] __msan_chain_origin+0xcb/0x140 [ 529.890380][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 529.890380][T12777] get_compat_msghdr+0x108/0x2c0 [ 529.890380][T12777] do_recvmmsg+0x1063/0x2120 [ 529.890380][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 529.890380][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 529.890380][T12777] __do_fast_syscall_32+0x96/0xe0 [ 529.890380][T12777] do_fast_syscall_32+0x3c/0x80 [ 529.890380][T12777] do_SYSENTER_32+0x1b/0x20 [ 529.890380][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 529.890380][T12777] [ 529.890380][T12777] Uninit was stored to memory at: [ 529.890380][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 529.890380][T12777] __msan_chain_origin+0xcb/0x140 [ 529.890380][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 529.890380][T12777] get_compat_msghdr+0x108/0x2c0 [ 529.890380][T12777] do_recvmmsg+0x1063/0x2120 [ 529.890380][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 529.890380][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 529.890380][T12777] __do_fast_syscall_32+0x96/0xe0 [ 529.890380][T12777] do_fast_syscall_32+0x3c/0x80 [ 529.890380][T12777] do_SYSENTER_32+0x1b/0x20 [ 529.890380][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 529.890380][T12777] [ 529.890380][T12777] Uninit was stored to memory at: [ 529.890380][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 529.890380][T12777] __msan_chain_origin+0xcb/0x140 [ 529.890380][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 529.890380][T12777] get_compat_msghdr+0x108/0x2c0 [ 529.890380][T12777] do_recvmmsg+0x1063/0x2120 [ 529.890380][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 529.890380][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 529.890380][T12777] __do_fast_syscall_32+0x96/0xe0 [ 529.890380][T12777] do_fast_syscall_32+0x3c/0x80 [ 529.890380][T12777] do_SYSENTER_32+0x1b/0x20 [ 529.890380][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 529.890380][T12777] [ 529.890380][T12777] Uninit was stored to memory at: [ 529.890380][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 529.890380][T12777] __msan_chain_origin+0xcb/0x140 [ 529.890380][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 529.890380][T12777] get_compat_msghdr+0x108/0x2c0 [ 529.890380][T12777] do_recvmmsg+0x1063/0x2120 [ 529.890380][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 529.890380][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 529.890380][T12777] __do_fast_syscall_32+0x96/0xe0 [ 529.890380][T12777] do_fast_syscall_32+0x3c/0x80 [ 529.890380][T12777] do_SYSENTER_32+0x1b/0x20 [ 529.890380][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 529.890380][T12777] [ 529.890380][T12777] Uninit was stored to memory at: [ 529.890380][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 529.890380][T12777] __msan_chain_origin+0xcb/0x140 [ 529.890380][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 529.890380][T12777] get_compat_msghdr+0x108/0x2c0 [ 529.890380][T12777] do_recvmmsg+0x1063/0x2120 [ 529.890380][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 529.890380][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 529.890380][T12777] __do_fast_syscall_32+0x96/0xe0 [ 529.890380][T12777] do_fast_syscall_32+0x3c/0x80 [ 529.890380][T12777] do_SYSENTER_32+0x1b/0x20 [ 529.890380][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 529.890380][T12777] [ 529.890380][T12777] Uninit was stored to memory at: [ 529.890380][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 529.890380][T12777] __msan_chain_origin+0xcb/0x140 [ 529.890380][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 529.890380][T12777] get_compat_msghdr+0x108/0x2c0 [ 529.890380][T12777] do_recvmmsg+0x1063/0x2120 [ 529.890380][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 529.890380][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 529.890380][T12777] __do_fast_syscall_32+0x96/0xe0 [ 529.890380][T12777] do_fast_syscall_32+0x3c/0x80 [ 529.890380][T12777] do_SYSENTER_32+0x1b/0x20 [ 529.890380][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 529.890380][T12777] [ 529.890380][T12777] Uninit was stored to memory at: [ 529.890380][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 529.890380][T12777] __msan_chain_origin+0xcb/0x140 [ 529.890380][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 529.890380][T12777] get_compat_msghdr+0x108/0x2c0 [ 529.890380][T12777] do_recvmmsg+0x1063/0x2120 [ 529.890380][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 529.890380][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 529.890380][T12777] __do_fast_syscall_32+0x96/0xe0 [ 529.890380][T12777] do_fast_syscall_32+0x3c/0x80 [ 529.890380][T12777] do_SYSENTER_32+0x1b/0x20 [ 529.890380][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 529.890380][T12777] [ 529.890380][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 529.890380][T12777] do_recvmmsg+0xc1/0x2120 [ 529.890380][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 530.657227][T12777] not chained 2000000 origins [ 530.661926][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 530.662134][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.662134][T12777] Call Trace: [ 530.662134][T12777] dump_stack+0x25a/0x2f6 [ 530.662134][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 530.662134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 530.662134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 530.662134][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 530.662134][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 530.662134][T12777] ? release_sock+0x2b5/0x2e0 [ 530.662134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 530.662134][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 530.662134][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 530.662134][T12777] ? should_fail+0x75/0x9c0 [ 530.662134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 530.662134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 530.662134][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 530.662134][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 530.662134][T12777] ? _copy_from_user+0x219/0x310 [ 530.662134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 530.662134][T12777] __msan_chain_origin+0xcb/0x140 [ 530.662134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 530.662134][T12777] get_compat_msghdr+0x108/0x2c0 [ 530.662134][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 530.662134][T12777] do_recvmmsg+0x1063/0x2120 [ 530.662134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 530.662134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 530.662134][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 530.662134][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 530.662134][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 530.662134][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 530.662134][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 530.662134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 530.662134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 530.662134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 530.662134][T12777] do_fast_syscall_32+0x3c/0x80 [ 530.662134][T12777] do_SYSENTER_32+0x1b/0x20 [ 530.662134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 530.662134][T12777] RIP: 0023:0xf6f46549 [ 530.662134][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 530.662134][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 530.662134][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 530.662134][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.662134][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 530.662134][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 530.662134][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.662134][T12777] Uninit was stored to memory at: [ 530.662134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 530.662134][T12777] __msan_chain_origin+0xcb/0x140 [ 530.662134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 530.662134][T12777] get_compat_msghdr+0x108/0x2c0 [ 530.662134][T12777] do_recvmmsg+0x1063/0x2120 [ 530.662134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 530.662134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 530.662134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 530.662134][T12777] do_fast_syscall_32+0x3c/0x80 [ 530.662134][T12777] do_SYSENTER_32+0x1b/0x20 [ 530.662134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 530.662134][T12777] [ 530.662134][T12777] Uninit was stored to memory at: [ 530.662134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 530.662134][T12777] __msan_chain_origin+0xcb/0x140 [ 530.662134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 530.662134][T12777] get_compat_msghdr+0x108/0x2c0 [ 530.662134][T12777] do_recvmmsg+0x1063/0x2120 [ 530.662134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 530.662134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 530.662134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 530.662134][T12777] do_fast_syscall_32+0x3c/0x80 [ 530.662134][T12777] do_SYSENTER_32+0x1b/0x20 [ 530.662134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 530.662134][T12777] [ 530.662134][T12777] Uninit was stored to memory at: [ 530.662134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 530.662134][T12777] __msan_chain_origin+0xcb/0x140 [ 530.662134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 530.662134][T12777] get_compat_msghdr+0x108/0x2c0 [ 530.662134][T12777] do_recvmmsg+0x1063/0x2120 [ 530.662134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 530.662134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 530.662134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 530.662134][T12777] do_fast_syscall_32+0x3c/0x80 [ 530.662134][T12777] do_SYSENTER_32+0x1b/0x20 [ 530.662134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 530.662134][T12777] [ 530.662134][T12777] Uninit was stored to memory at: [ 530.662134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 530.662134][T12777] __msan_chain_origin+0xcb/0x140 [ 530.662134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 530.662134][T12777] get_compat_msghdr+0x108/0x2c0 [ 530.662134][T12777] do_recvmmsg+0x1063/0x2120 [ 530.662134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 530.662134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 530.662134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 530.662134][T12777] do_fast_syscall_32+0x3c/0x80 [ 530.662134][T12777] do_SYSENTER_32+0x1b/0x20 [ 530.662134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 530.662134][T12777] [ 530.662134][T12777] Uninit was stored to memory at: [ 530.662134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 530.662134][T12777] __msan_chain_origin+0xcb/0x140 [ 530.662134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 530.662134][T12777] get_compat_msghdr+0x108/0x2c0 [ 530.662134][T12777] do_recvmmsg+0x1063/0x2120 [ 530.662134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 530.662134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 530.662134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 530.662134][T12777] do_fast_syscall_32+0x3c/0x80 [ 530.662134][T12777] do_SYSENTER_32+0x1b/0x20 [ 530.662134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 530.662134][T12777] [ 530.662134][T12777] Uninit was stored to memory at: [ 530.662134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 530.662134][T12777] __msan_chain_origin+0xcb/0x140 [ 530.662134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 530.662134][T12777] get_compat_msghdr+0x108/0x2c0 [ 530.662134][T12777] do_recvmmsg+0x1063/0x2120 [ 530.662134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 530.662134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 530.662134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 530.662134][T12777] do_fast_syscall_32+0x3c/0x80 [ 530.662134][T12777] do_SYSENTER_32+0x1b/0x20 [ 530.662134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 530.662134][T12777] [ 530.662134][T12777] Uninit was stored to memory at: [ 530.662134][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 530.662134][T12777] __msan_chain_origin+0xcb/0x140 [ 530.662134][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 530.662134][T12777] get_compat_msghdr+0x108/0x2c0 [ 530.662134][T12777] do_recvmmsg+0x1063/0x2120 [ 530.662134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 530.662134][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 530.662134][T12777] __do_fast_syscall_32+0x96/0xe0 [ 530.662134][T12777] do_fast_syscall_32+0x3c/0x80 [ 530.662134][T12777] do_SYSENTER_32+0x1b/0x20 [ 530.662134][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 530.662134][T12777] [ 530.662134][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 530.662134][T12777] do_recvmmsg+0xc1/0x2120 [ 530.662134][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 531.498718][T12777] not chained 2010000 origins [ 531.502133][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 531.502133][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.502133][T12777] Call Trace: [ 531.502133][T12777] dump_stack+0x25a/0x2f6 [ 531.502133][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 531.502133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 531.502133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 531.502133][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 531.502133][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 531.502133][T12777] ? release_sock+0x2b5/0x2e0 [ 531.502133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 531.502133][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 531.502133][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 531.502133][T12777] ? should_fail+0x75/0x9c0 [ 531.502133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 531.502133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 531.502133][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 531.502133][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 531.502133][T12777] ? _copy_from_user+0x219/0x310 [ 531.502133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 531.502133][T12777] __msan_chain_origin+0xcb/0x140 [ 531.502133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 531.502133][T12777] get_compat_msghdr+0x108/0x2c0 [ 531.502133][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 531.502133][T12777] do_recvmmsg+0x1063/0x2120 [ 531.502133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 531.502133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 531.502133][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 531.502133][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 531.502133][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 531.502133][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 531.502133][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 531.502133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 531.502133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 531.502133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 531.502133][T12777] do_fast_syscall_32+0x3c/0x80 [ 531.502133][T12777] do_SYSENTER_32+0x1b/0x20 [ 531.502133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.502133][T12777] RIP: 0023:0xf6f46549 [ 531.502133][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 531.502133][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 531.502133][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 531.502133][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.502133][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.502133][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 531.502133][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.502133][T12777] Uninit was stored to memory at: [ 531.502133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 531.502133][T12777] __msan_chain_origin+0xcb/0x140 [ 531.502133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 531.502133][T12777] get_compat_msghdr+0x108/0x2c0 [ 531.502133][T12777] do_recvmmsg+0x1063/0x2120 [ 531.502133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 531.502133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 531.502133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 531.502133][T12777] do_fast_syscall_32+0x3c/0x80 [ 531.502133][T12777] do_SYSENTER_32+0x1b/0x20 [ 531.502133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.502133][T12777] [ 531.502133][T12777] Uninit was stored to memory at: [ 531.502133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 531.502133][T12777] __msan_chain_origin+0xcb/0x140 [ 531.502133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 531.502133][T12777] get_compat_msghdr+0x108/0x2c0 [ 531.502133][T12777] do_recvmmsg+0x1063/0x2120 [ 531.502133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 531.502133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 531.502133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 531.502133][T12777] do_fast_syscall_32+0x3c/0x80 [ 531.502133][T12777] do_SYSENTER_32+0x1b/0x20 [ 531.502133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.502133][T12777] [ 531.502133][T12777] Uninit was stored to memory at: [ 531.502133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 531.502133][T12777] __msan_chain_origin+0xcb/0x140 [ 531.502133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 531.502133][T12777] get_compat_msghdr+0x108/0x2c0 [ 531.502133][T12777] do_recvmmsg+0x1063/0x2120 [ 531.502133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 531.502133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 531.502133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 531.502133][T12777] do_fast_syscall_32+0x3c/0x80 [ 531.502133][T12777] do_SYSENTER_32+0x1b/0x20 [ 531.502133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.502133][T12777] [ 531.502133][T12777] Uninit was stored to memory at: [ 531.502133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 531.502133][T12777] __msan_chain_origin+0xcb/0x140 [ 531.502133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 531.502133][T12777] get_compat_msghdr+0x108/0x2c0 [ 531.502133][T12777] do_recvmmsg+0x1063/0x2120 [ 531.502133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 531.502133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 531.502133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 531.502133][T12777] do_fast_syscall_32+0x3c/0x80 [ 531.502133][T12777] do_SYSENTER_32+0x1b/0x20 [ 531.502133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.502133][T12777] [ 531.502133][T12777] Uninit was stored to memory at: [ 531.502133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 531.502133][T12777] __msan_chain_origin+0xcb/0x140 [ 531.502133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 531.502133][T12777] get_compat_msghdr+0x108/0x2c0 [ 531.502133][T12777] do_recvmmsg+0x1063/0x2120 [ 531.502133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 531.502133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 531.502133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 531.502133][T12777] do_fast_syscall_32+0x3c/0x80 [ 531.502133][T12777] do_SYSENTER_32+0x1b/0x20 [ 531.502133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.502133][T12777] [ 531.502133][T12777] Uninit was stored to memory at: [ 531.502133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 531.502133][T12777] __msan_chain_origin+0xcb/0x140 [ 531.502133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 531.502133][T12777] get_compat_msghdr+0x108/0x2c0 [ 531.502133][T12777] do_recvmmsg+0x1063/0x2120 [ 531.502133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 531.502133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 531.502133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 531.502133][T12777] do_fast_syscall_32+0x3c/0x80 [ 531.502133][T12777] do_SYSENTER_32+0x1b/0x20 [ 531.502133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.502133][T12777] [ 531.502133][T12777] Uninit was stored to memory at: [ 531.502133][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 531.502133][T12777] __msan_chain_origin+0xcb/0x140 [ 531.502133][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 531.502133][T12777] get_compat_msghdr+0x108/0x2c0 [ 531.502133][T12777] do_recvmmsg+0x1063/0x2120 [ 531.502133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 531.502133][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 531.502133][T12777] __do_fast_syscall_32+0x96/0xe0 [ 531.502133][T12777] do_fast_syscall_32+0x3c/0x80 [ 531.502133][T12777] do_SYSENTER_32+0x1b/0x20 [ 531.502133][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 531.502133][T12777] [ 531.502133][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 531.502133][T12777] do_recvmmsg+0xc1/0x2120 [ 531.502133][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 532.342303][T12777] not chained 2020000 origins [ 532.346988][T12777] CPU: 0 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 532.352163][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.352163][T12777] Call Trace: [ 532.352163][T12777] dump_stack+0x25a/0x2f6 [ 532.352163][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 532.352163][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 532.352163][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 532.352163][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 532.352163][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 532.352163][T12777] ? release_sock+0x2b5/0x2e0 [ 532.352163][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 532.352163][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 532.352163][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 532.352163][T12777] ? should_fail+0x75/0x9c0 [ 532.352163][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 532.352163][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 532.352163][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 532.352163][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 532.352163][T12777] ? _copy_from_user+0x219/0x310 [ 532.352163][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 532.352163][T12777] __msan_chain_origin+0xcb/0x140 [ 532.352163][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 532.352163][T12777] get_compat_msghdr+0x108/0x2c0 [ 532.352163][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 532.352163][T12777] do_recvmmsg+0x1063/0x2120 [ 532.352163][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 532.352163][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 532.352163][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 532.352163][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 532.352163][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 532.352163][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 532.352163][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 532.352163][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 532.352163][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 532.352163][T12777] __do_fast_syscall_32+0x96/0xe0 [ 532.352163][T12777] do_fast_syscall_32+0x3c/0x80 [ 532.352163][T12777] do_SYSENTER_32+0x1b/0x20 [ 532.352163][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 532.352163][T12777] RIP: 0023:0xf6f46549 [ 532.352163][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 532.352163][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 532.352163][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 532.352163][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.352163][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.352163][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 532.352163][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.352163][T12777] Uninit was stored to memory at: [ 532.352163][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 532.352163][T12777] __msan_chain_origin+0xcb/0x140 [ 532.352163][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 532.352163][T12777] get_compat_msghdr+0x108/0x2c0 [ 532.352163][T12777] do_recvmmsg+0x1063/0x2120 [ 532.352163][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 532.352163][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 532.352163][T12777] __do_fast_syscall_32+0x96/0xe0 [ 532.352163][T12777] do_fast_syscall_32+0x3c/0x80 [ 532.352163][T12777] do_SYSENTER_32+0x1b/0x20 [ 532.352163][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 532.352163][T12777] [ 532.352163][T12777] Uninit was stored to memory at: [ 532.352163][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 532.352163][T12777] __msan_chain_origin+0xcb/0x140 [ 532.352163][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 532.352163][T12777] get_compat_msghdr+0x108/0x2c0 [ 532.352163][T12777] do_recvmmsg+0x1063/0x2120 [ 532.352163][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 532.352163][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 532.352163][T12777] __do_fast_syscall_32+0x96/0xe0 [ 532.352163][T12777] do_fast_syscall_32+0x3c/0x80 [ 532.352163][T12777] do_SYSENTER_32+0x1b/0x20 [ 532.352163][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 532.352163][T12777] [ 532.352163][T12777] Uninit was stored to memory at: [ 532.352163][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 532.352163][T12777] __msan_chain_origin+0xcb/0x140 [ 532.352163][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 532.352163][T12777] get_compat_msghdr+0x108/0x2c0 [ 532.352163][T12777] do_recvmmsg+0x1063/0x2120 [ 532.352163][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 532.352163][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 532.352163][T12777] __do_fast_syscall_32+0x96/0xe0 [ 532.352163][T12777] do_fast_syscall_32+0x3c/0x80 [ 532.352163][T12777] do_SYSENTER_32+0x1b/0x20 [ 532.352163][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 532.352163][T12777] [ 532.352163][T12777] Uninit was stored to memory at: [ 532.352163][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 532.352163][T12777] __msan_chain_origin+0xcb/0x140 [ 532.352163][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 532.352163][T12777] get_compat_msghdr+0x108/0x2c0 [ 532.352163][T12777] do_recvmmsg+0x1063/0x2120 [ 532.352163][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 532.352163][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 532.352163][T12777] __do_fast_syscall_32+0x96/0xe0 [ 532.352163][T12777] do_fast_syscall_32+0x3c/0x80 [ 532.352163][T12777] do_SYSENTER_32+0x1b/0x20 [ 532.352163][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 532.352163][T12777] [ 532.352163][T12777] Uninit was stored to memory at: [ 532.352163][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 532.352163][T12777] __msan_chain_origin+0xcb/0x140 [ 532.352163][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 532.352163][T12777] get_compat_msghdr+0x108/0x2c0 [ 532.352163][T12777] do_recvmmsg+0x1063/0x2120 [ 532.352163][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 532.352163][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 532.352163][T12777] __do_fast_syscall_32+0x96/0xe0 [ 532.352163][T12777] do_fast_syscall_32+0x3c/0x80 [ 532.352163][T12777] do_SYSENTER_32+0x1b/0x20 [ 532.352163][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 532.352163][T12777] [ 532.352163][T12777] Uninit was stored to memory at: [ 532.352163][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 532.352163][T12777] __msan_chain_origin+0xcb/0x140 [ 532.352163][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 532.352163][T12777] get_compat_msghdr+0x108/0x2c0 [ 532.352163][T12777] do_recvmmsg+0x1063/0x2120 [ 532.352163][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 532.352163][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 532.352163][T12777] __do_fast_syscall_32+0x96/0xe0 [ 532.352163][T12777] do_fast_syscall_32+0x3c/0x80 [ 532.352163][T12777] do_SYSENTER_32+0x1b/0x20 [ 532.352163][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 532.352163][T12777] [ 532.352163][T12777] Uninit was stored to memory at: [ 532.352163][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 532.352163][T12777] __msan_chain_origin+0xcb/0x140 [ 532.352163][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 532.352163][T12777] get_compat_msghdr+0x108/0x2c0 [ 532.352163][T12777] do_recvmmsg+0x1063/0x2120 [ 532.352163][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 532.352163][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 532.352163][T12777] __do_fast_syscall_32+0x96/0xe0 [ 532.352163][T12777] do_fast_syscall_32+0x3c/0x80 [ 532.352163][T12777] do_SYSENTER_32+0x1b/0x20 [ 532.352163][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 532.352163][T12777] [ 532.352163][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 532.352163][T12777] do_recvmmsg+0xc1/0x2120 [ 532.352163][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 533.199692][T12777] not chained 2030000 origins [ 533.202120][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 533.202120][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.202120][T12777] Call Trace: [ 533.202120][T12777] dump_stack+0x25a/0x2f6 [ 533.202120][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 533.202120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 533.202120][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 533.202120][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 533.202120][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 533.202120][T12777] ? release_sock+0x2b5/0x2e0 [ 533.202120][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 533.202120][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 533.268876][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 533.268876][T12777] ? should_fail+0x75/0x9c0 [ 533.268876][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 533.268876][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 533.268876][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 533.268876][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 533.268876][T12777] ? _copy_from_user+0x219/0x310 [ 533.268876][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 533.268876][T12777] __msan_chain_origin+0xcb/0x140 [ 533.268876][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 533.268876][T12777] get_compat_msghdr+0x108/0x2c0 [ 533.268876][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 533.268876][T12777] do_recvmmsg+0x1063/0x2120 [ 533.268876][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 533.268876][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 533.268876][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 533.268876][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 533.268876][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 533.268876][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 533.268876][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 533.268876][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 533.268876][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 533.268876][T12777] __do_fast_syscall_32+0x96/0xe0 [ 533.268876][T12777] do_fast_syscall_32+0x3c/0x80 [ 533.268876][T12777] do_SYSENTER_32+0x1b/0x20 [ 533.268876][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.268876][T12777] RIP: 0023:0xf6f46549 [ 533.268876][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 533.268876][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 533.268876][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 533.268876][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.268876][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.268876][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 533.268876][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.268876][T12777] Uninit was stored to memory at: [ 533.268876][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 533.268876][T12777] __msan_chain_origin+0xcb/0x140 [ 533.268876][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 533.268876][T12777] get_compat_msghdr+0x108/0x2c0 [ 533.268876][T12777] do_recvmmsg+0x1063/0x2120 [ 533.268876][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 533.268876][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 533.268876][T12777] __do_fast_syscall_32+0x96/0xe0 [ 533.268876][T12777] do_fast_syscall_32+0x3c/0x80 [ 533.268876][T12777] do_SYSENTER_32+0x1b/0x20 [ 533.268876][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.268876][T12777] [ 533.268876][T12777] Uninit was stored to memory at: [ 533.268876][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 533.268876][T12777] __msan_chain_origin+0xcb/0x140 [ 533.268876][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 533.268876][T12777] get_compat_msghdr+0x108/0x2c0 [ 533.268876][T12777] do_recvmmsg+0x1063/0x2120 [ 533.268876][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 533.268876][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 533.268876][T12777] __do_fast_syscall_32+0x96/0xe0 [ 533.268876][T12777] do_fast_syscall_32+0x3c/0x80 [ 533.268876][T12777] do_SYSENTER_32+0x1b/0x20 [ 533.268876][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.268876][T12777] [ 533.268876][T12777] Uninit was stored to memory at: [ 533.268876][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 533.268876][T12777] __msan_chain_origin+0xcb/0x140 [ 533.268876][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 533.268876][T12777] get_compat_msghdr+0x108/0x2c0 [ 533.268876][T12777] do_recvmmsg+0x1063/0x2120 [ 533.268876][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 533.268876][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 533.268876][T12777] __do_fast_syscall_32+0x96/0xe0 [ 533.268876][T12777] do_fast_syscall_32+0x3c/0x80 [ 533.268876][T12777] do_SYSENTER_32+0x1b/0x20 [ 533.268876][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.268876][T12777] [ 533.268876][T12777] Uninit was stored to memory at: [ 533.268876][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 533.268876][T12777] __msan_chain_origin+0xcb/0x140 [ 533.268876][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 533.268876][T12777] get_compat_msghdr+0x108/0x2c0 [ 533.268876][T12777] do_recvmmsg+0x1063/0x2120 [ 533.268876][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 533.268876][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 533.268876][T12777] __do_fast_syscall_32+0x96/0xe0 [ 533.268876][T12777] do_fast_syscall_32+0x3c/0x80 [ 533.268876][T12777] do_SYSENTER_32+0x1b/0x20 [ 533.268876][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.268876][T12777] [ 533.268876][T12777] Uninit was stored to memory at: [ 533.268876][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 533.268876][T12777] __msan_chain_origin+0xcb/0x140 [ 533.268876][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 533.268876][T12777] get_compat_msghdr+0x108/0x2c0 [ 533.268876][T12777] do_recvmmsg+0x1063/0x2120 [ 533.268876][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 533.268876][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 533.782299][T12777] __do_fast_syscall_32+0x96/0xe0 [ 533.782299][T12777] do_fast_syscall_32+0x3c/0x80 [ 533.782299][T12777] do_SYSENTER_32+0x1b/0x20 [ 533.782299][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.782299][T12777] [ 533.782299][T12777] Uninit was stored to memory at: [ 533.782299][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 533.782299][T12777] __msan_chain_origin+0xcb/0x140 [ 533.782299][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 533.782299][T12777] get_compat_msghdr+0x108/0x2c0 [ 533.782299][T12777] do_recvmmsg+0x1063/0x2120 [ 533.782299][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 533.782299][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 533.782299][T12777] __do_fast_syscall_32+0x96/0xe0 [ 533.782299][T12777] do_fast_syscall_32+0x3c/0x80 [ 533.782299][T12777] do_SYSENTER_32+0x1b/0x20 [ 533.782299][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.782299][T12777] [ 533.782299][T12777] Uninit was stored to memory at: [ 533.782299][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 533.782299][T12777] __msan_chain_origin+0xcb/0x140 [ 533.782299][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 533.782299][T12777] get_compat_msghdr+0x108/0x2c0 [ 533.782299][T12777] do_recvmmsg+0x1063/0x2120 [ 533.782299][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 533.782299][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 533.782299][T12777] __do_fast_syscall_32+0x96/0xe0 [ 533.782299][T12777] do_fast_syscall_32+0x3c/0x80 [ 533.782299][T12777] do_SYSENTER_32+0x1b/0x20 [ 533.782299][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 533.782299][T12777] [ 533.782299][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 533.782299][T12777] do_recvmmsg+0xc1/0x2120 [ 533.782299][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.062639][T12777] not chained 2040000 origins [ 534.067328][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 534.072119][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.072119][T12777] Call Trace: [ 534.072119][T12777] dump_stack+0x25a/0x2f6 [ 534.072119][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 534.072119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.072119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 534.072119][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 534.072119][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 534.072119][T12777] ? release_sock+0x2b5/0x2e0 [ 534.072119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.072119][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 534.072119][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 534.072119][T12777] ? should_fail+0x75/0x9c0 [ 534.072119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.072119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 534.072119][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 534.072119][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 534.072119][T12777] ? _copy_from_user+0x219/0x310 [ 534.072119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.072119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.072119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.072119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.072119][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 534.072119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.072119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 534.072119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.072119][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 534.072119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.072119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 534.072119][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 534.072119][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.072119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.072119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.072119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.072119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.072119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.072119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.072119][T12777] RIP: 0023:0xf6f46549 [ 534.072119][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 534.072119][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 534.072119][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 534.072119][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.072119][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.072119][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 534.072119][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.072119][T12777] Uninit was stored to memory at: [ 534.072119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.072119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.072119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.072119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.072119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.072119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.072119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.072119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.072119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.072119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.072119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.072119][T12777] [ 534.072119][T12777] Uninit was stored to memory at: [ 534.072119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.072119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.072119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.072119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.072119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.072119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.072119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.072119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.072119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.072119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.072119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.072119][T12777] [ 534.072119][T12777] Uninit was stored to memory at: [ 534.072119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.072119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.072119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.072119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.072119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.072119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.072119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.072119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.072119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.072119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.072119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.072119][T12777] [ 534.072119][T12777] Uninit was stored to memory at: [ 534.072119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.072119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.072119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.072119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.072119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.072119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.072119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.072119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.072119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.072119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.072119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.072119][T12777] [ 534.072119][T12777] Uninit was stored to memory at: [ 534.072119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.072119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.072119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.072119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.072119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.072119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.072119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.072119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.072119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.072119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.662388][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.662388][T12777] [ 534.662388][T12777] Uninit was stored to memory at: [ 534.662388][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.662388][T12777] __msan_chain_origin+0xcb/0x140 [ 534.662388][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.662388][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.662388][T12777] do_recvmmsg+0x1063/0x2120 [ 534.662388][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.662388][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.662388][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.662388][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.662388][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.662388][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.662388][T12777] [ 534.662388][T12777] Uninit was stored to memory at: [ 534.662388][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.662388][T12777] __msan_chain_origin+0xcb/0x140 [ 534.662388][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.662388][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.662388][T12777] do_recvmmsg+0x1063/0x2120 [ 534.662388][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.662388][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.662388][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.662388][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.662388][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.662388][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.662388][T12777] [ 534.662388][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 534.662388][T12777] do_recvmmsg+0xc1/0x2120 [ 534.662388][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.919797][T12777] not chained 2050000 origins [ 534.922119][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 534.922119][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.922119][T12777] Call Trace: [ 534.922119][T12777] dump_stack+0x25a/0x2f6 [ 534.922119][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 534.922119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.922119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 534.922119][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 534.922119][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 534.922119][T12777] ? release_sock+0x2b5/0x2e0 [ 534.922119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.922119][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 534.922119][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 534.922119][T12777] ? should_fail+0x75/0x9c0 [ 534.922119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.922119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 534.922119][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 534.922119][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 534.922119][T12777] ? _copy_from_user+0x219/0x310 [ 534.922119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.922119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.922119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.922119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.922119][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 534.922119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.922119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 534.922119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.922119][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 534.922119][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 534.922119][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 534.922119][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 534.922119][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.922119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.922119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.922119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.922119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.922119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.922119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.922119][T12777] RIP: 0023:0xf6f46549 [ 534.922119][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 534.922119][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 534.922119][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 534.922119][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.922119][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.922119][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 534.922119][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.922119][T12777] Uninit was stored to memory at: [ 534.922119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.922119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.922119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.922119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.922119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.922119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.922119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.922119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.922119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.922119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.922119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.922119][T12777] [ 534.922119][T12777] Uninit was stored to memory at: [ 534.922119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.922119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.922119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.922119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.922119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.922119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.922119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.922119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.922119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.922119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.922119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.922119][T12777] [ 534.922119][T12777] Uninit was stored to memory at: [ 534.922119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.922119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.922119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.922119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.922119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.922119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.922119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.922119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.922119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.922119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.922119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.922119][T12777] [ 534.922119][T12777] Uninit was stored to memory at: [ 534.922119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.922119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.922119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.922119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.922119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.922119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.922119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.922119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.922119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.922119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.922119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.922119][T12777] [ 534.922119][T12777] Uninit was stored to memory at: [ 534.922119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.922119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.922119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.922119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.922119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.922119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.922119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.922119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.922119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.922119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.922119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.922119][T12777] [ 534.922119][T12777] Uninit was stored to memory at: [ 534.922119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.922119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.922119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.922119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.922119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.922119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.922119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.922119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.922119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.922119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.922119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.922119][T12777] [ 534.922119][T12777] Uninit was stored to memory at: [ 534.922119][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 534.922119][T12777] __msan_chain_origin+0xcb/0x140 [ 534.922119][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 534.922119][T12777] get_compat_msghdr+0x108/0x2c0 [ 534.922119][T12777] do_recvmmsg+0x1063/0x2120 [ 534.922119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 534.922119][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 534.922119][T12777] __do_fast_syscall_32+0x96/0xe0 [ 534.922119][T12777] do_fast_syscall_32+0x3c/0x80 [ 534.922119][T12777] do_SYSENTER_32+0x1b/0x20 [ 534.922119][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 534.922119][T12777] [ 534.922119][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 534.922119][T12777] do_recvmmsg+0xc1/0x2120 [ 534.922119][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 535.773764][T12777] not chained 2060000 origins [ 535.778454][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 535.782503][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.782503][T12777] Call Trace: [ 535.782503][T12777] dump_stack+0x25a/0x2f6 [ 535.782503][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 535.782503][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 535.782503][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 535.782503][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 535.782503][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 535.782503][T12777] ? release_sock+0x2b5/0x2e0 [ 535.782503][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 535.782503][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 535.782503][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 535.782503][T12777] ? should_fail+0x75/0x9c0 [ 535.782503][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 535.782503][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 535.782503][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 535.782503][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 535.782503][T12777] ? _copy_from_user+0x219/0x310 [ 535.782503][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 535.782503][T12777] __msan_chain_origin+0xcb/0x140 [ 535.782503][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 535.782503][T12777] get_compat_msghdr+0x108/0x2c0 [ 535.782503][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 535.782503][T12777] do_recvmmsg+0x1063/0x2120 [ 535.782503][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 535.782503][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 535.782503][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 535.782503][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 535.782503][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 535.782503][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 535.782503][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 535.782503][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 535.782503][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 535.782503][T12777] __do_fast_syscall_32+0x96/0xe0 [ 535.782503][T12777] do_fast_syscall_32+0x3c/0x80 [ 535.782503][T12777] do_SYSENTER_32+0x1b/0x20 [ 535.782503][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 535.782503][T12777] RIP: 0023:0xf6f46549 [ 535.782503][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 535.782503][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 535.782503][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 535.782503][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.782503][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.782503][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 535.782503][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.782503][T12777] Uninit was stored to memory at: [ 535.782503][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 535.782503][T12777] __msan_chain_origin+0xcb/0x140 [ 535.782503][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 535.782503][T12777] get_compat_msghdr+0x108/0x2c0 [ 535.782503][T12777] do_recvmmsg+0x1063/0x2120 [ 535.782503][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 535.782503][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 535.782503][T12777] __do_fast_syscall_32+0x96/0xe0 [ 535.782503][T12777] do_fast_syscall_32+0x3c/0x80 [ 535.782503][T12777] do_SYSENTER_32+0x1b/0x20 [ 535.782503][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 535.782503][T12777] [ 535.782503][T12777] Uninit was stored to memory at: [ 535.782503][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 535.782503][T12777] __msan_chain_origin+0xcb/0x140 [ 535.782503][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 535.782503][T12777] get_compat_msghdr+0x108/0x2c0 [ 535.782503][T12777] do_recvmmsg+0x1063/0x2120 [ 535.782503][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 535.782503][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 535.782503][T12777] __do_fast_syscall_32+0x96/0xe0 [ 535.782503][T12777] do_fast_syscall_32+0x3c/0x80 [ 535.782503][T12777] do_SYSENTER_32+0x1b/0x20 [ 535.782503][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 535.782503][T12777] [ 535.782503][T12777] Uninit was stored to memory at: [ 535.782503][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 535.782503][T12777] __msan_chain_origin+0xcb/0x140 [ 535.782503][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 535.782503][T12777] get_compat_msghdr+0x108/0x2c0 [ 535.782503][T12777] do_recvmmsg+0x1063/0x2120 [ 535.782503][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 535.782503][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 535.782503][T12777] __do_fast_syscall_32+0x96/0xe0 [ 535.782503][T12777] do_fast_syscall_32+0x3c/0x80 [ 535.782503][T12777] do_SYSENTER_32+0x1b/0x20 [ 535.782503][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 535.782503][T12777] [ 535.782503][T12777] Uninit was stored to memory at: [ 535.782503][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 535.782503][T12777] __msan_chain_origin+0xcb/0x140 [ 535.782503][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 535.782503][T12777] get_compat_msghdr+0x108/0x2c0 [ 535.782503][T12777] do_recvmmsg+0x1063/0x2120 [ 535.782503][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 535.782503][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 535.782503][T12777] __do_fast_syscall_32+0x96/0xe0 [ 535.782503][T12777] do_fast_syscall_32+0x3c/0x80 [ 535.782503][T12777] do_SYSENTER_32+0x1b/0x20 [ 535.782503][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 535.782503][T12777] [ 535.782503][T12777] Uninit was stored to memory at: [ 535.782503][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 535.782503][T12777] __msan_chain_origin+0xcb/0x140 [ 535.782503][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 535.782503][T12777] get_compat_msghdr+0x108/0x2c0 [ 535.782503][T12777] do_recvmmsg+0x1063/0x2120 [ 535.782503][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 535.782503][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 535.782503][T12777] __do_fast_syscall_32+0x96/0xe0 [ 535.782503][T12777] do_fast_syscall_32+0x3c/0x80 [ 535.782503][T12777] do_SYSENTER_32+0x1b/0x20 [ 535.782503][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 535.782503][T12777] [ 535.782503][T12777] Uninit was stored to memory at: [ 535.782503][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 535.782503][T12777] __msan_chain_origin+0xcb/0x140 [ 535.782503][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 535.782503][T12777] get_compat_msghdr+0x108/0x2c0 [ 535.782503][T12777] do_recvmmsg+0x1063/0x2120 [ 535.782503][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 535.782503][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 535.782503][T12777] __do_fast_syscall_32+0x96/0xe0 [ 535.782503][T12777] do_fast_syscall_32+0x3c/0x80 [ 535.782503][T12777] do_SYSENTER_32+0x1b/0x20 [ 535.782503][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 535.782503][T12777] [ 535.782503][T12777] Uninit was stored to memory at: [ 535.782503][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 535.782503][T12777] __msan_chain_origin+0xcb/0x140 [ 535.782503][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 535.782503][T12777] get_compat_msghdr+0x108/0x2c0 [ 535.782503][T12777] do_recvmmsg+0x1063/0x2120 [ 535.782503][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 535.782503][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 535.782503][T12777] __do_fast_syscall_32+0x96/0xe0 [ 535.782503][T12777] do_fast_syscall_32+0x3c/0x80 [ 535.782503][T12777] do_SYSENTER_32+0x1b/0x20 [ 535.782503][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 535.782503][T12777] [ 535.782503][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 535.782503][T12777] do_recvmmsg+0xc1/0x2120 [ 535.782503][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 536.629403][T12777] not chained 2070000 origins [ 536.632123][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 536.632123][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.632123][T12777] Call Trace: [ 536.632123][T12777] dump_stack+0x25a/0x2f6 [ 536.632123][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 536.632123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 536.632123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 536.632123][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 536.632123][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 536.632123][T12777] ? release_sock+0x2b5/0x2e0 [ 536.632123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 536.632123][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 536.632123][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 536.632123][T12777] ? should_fail+0x75/0x9c0 [ 536.632123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 536.632123][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 536.632123][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 536.632123][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 536.632123][T12777] ? _copy_from_user+0x219/0x310 [ 536.632123][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 536.742413][T12777] __msan_chain_origin+0xcb/0x140 [ 536.742413][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 536.742413][T12777] get_compat_msghdr+0x108/0x2c0 [ 536.742413][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 536.742413][T12777] do_recvmmsg+0x1063/0x2120 [ 536.742413][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 536.742413][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 536.742413][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 536.742413][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 536.742413][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 536.742413][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 536.742413][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 536.742413][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 536.742413][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 536.742413][T12777] __do_fast_syscall_32+0x96/0xe0 [ 536.742413][T12777] do_fast_syscall_32+0x3c/0x80 [ 536.742413][T12777] do_SYSENTER_32+0x1b/0x20 [ 536.742413][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.742413][T12777] RIP: 0023:0xf6f46549 [ 536.742413][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 536.742413][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 536.742413][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 536.742413][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.742413][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.742413][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 536.742413][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.742413][T12777] Uninit was stored to memory at: [ 536.742413][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 536.742413][T12777] __msan_chain_origin+0xcb/0x140 [ 536.742413][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 536.742413][T12777] get_compat_msghdr+0x108/0x2c0 [ 536.742413][T12777] do_recvmmsg+0x1063/0x2120 [ 536.742413][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 536.742413][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 536.742413][T12777] __do_fast_syscall_32+0x96/0xe0 [ 536.742413][T12777] do_fast_syscall_32+0x3c/0x80 [ 536.742413][T12777] do_SYSENTER_32+0x1b/0x20 [ 536.742413][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.742413][T12777] [ 536.742413][T12777] Uninit was stored to memory at: [ 536.742413][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 536.742413][T12777] __msan_chain_origin+0xcb/0x140 [ 536.742413][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 536.742413][T12777] get_compat_msghdr+0x108/0x2c0 [ 536.742413][T12777] do_recvmmsg+0x1063/0x2120 [ 536.742413][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 536.742413][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 536.742413][T12777] __do_fast_syscall_32+0x96/0xe0 [ 536.742413][T12777] do_fast_syscall_32+0x3c/0x80 [ 536.742413][T12777] do_SYSENTER_32+0x1b/0x20 [ 536.742413][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.742413][T12777] [ 536.742413][T12777] Uninit was stored to memory at: [ 536.742413][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 536.742413][T12777] __msan_chain_origin+0xcb/0x140 [ 536.742413][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 536.742413][T12777] get_compat_msghdr+0x108/0x2c0 [ 536.742413][T12777] do_recvmmsg+0x1063/0x2120 [ 536.742413][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 536.742413][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 536.742413][T12777] __do_fast_syscall_32+0x96/0xe0 [ 536.742413][T12777] do_fast_syscall_32+0x3c/0x80 [ 536.742413][T12777] do_SYSENTER_32+0x1b/0x20 [ 536.742413][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.742413][T12777] [ 536.742413][T12777] Uninit was stored to memory at: [ 536.742413][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 536.742413][T12777] __msan_chain_origin+0xcb/0x140 [ 536.742413][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 536.742413][T12777] get_compat_msghdr+0x108/0x2c0 [ 536.742413][T12777] do_recvmmsg+0x1063/0x2120 [ 536.742413][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 536.742413][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 536.742413][T12777] __do_fast_syscall_32+0x96/0xe0 [ 536.742413][T12777] do_fast_syscall_32+0x3c/0x80 [ 536.742413][T12777] do_SYSENTER_32+0x1b/0x20 [ 536.742413][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.742413][T12777] [ 536.742413][T12777] Uninit was stored to memory at: [ 536.742413][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 536.742413][T12777] __msan_chain_origin+0xcb/0x140 [ 536.742413][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 536.742413][T12777] get_compat_msghdr+0x108/0x2c0 [ 536.742413][T12777] do_recvmmsg+0x1063/0x2120 [ 536.742413][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 536.742413][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 536.742413][T12777] __do_fast_syscall_32+0x96/0xe0 [ 536.742413][T12777] do_fast_syscall_32+0x3c/0x80 [ 536.742413][T12777] do_SYSENTER_32+0x1b/0x20 [ 536.742413][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.742413][T12777] [ 536.742413][T12777] Uninit was stored to memory at: [ 536.742413][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 536.742413][T12777] __msan_chain_origin+0xcb/0x140 [ 536.742413][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 536.742413][T12777] get_compat_msghdr+0x108/0x2c0 [ 536.742413][T12777] do_recvmmsg+0x1063/0x2120 [ 536.742413][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 536.742413][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 536.742413][T12777] __do_fast_syscall_32+0x96/0xe0 [ 536.742413][T12777] do_fast_syscall_32+0x3c/0x80 [ 536.742413][T12777] do_SYSENTER_32+0x1b/0x20 [ 536.742413][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.742413][T12777] [ 536.742413][T12777] Uninit was stored to memory at: [ 536.742413][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 536.742413][T12777] __msan_chain_origin+0xcb/0x140 [ 536.742413][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 536.742413][T12777] get_compat_msghdr+0x108/0x2c0 [ 536.742413][T12777] do_recvmmsg+0x1063/0x2120 [ 536.742413][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 536.742413][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 536.742413][T12777] __do_fast_syscall_32+0x96/0xe0 [ 536.742413][T12777] do_fast_syscall_32+0x3c/0x80 [ 536.742413][T12777] do_SYSENTER_32+0x1b/0x20 [ 536.742413][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 536.742413][T12777] [ 536.742413][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 536.742413][T12777] do_recvmmsg+0xc1/0x2120 [ 536.742413][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 537.484110][T12777] not chained 2080000 origins [ 537.488806][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 537.492351][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.492351][T12777] Call Trace: [ 537.492351][T12777] dump_stack+0x25a/0x2f6 [ 537.492351][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 537.492351][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 537.492351][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 537.492351][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 537.492351][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 537.539360][T12777] ? release_sock+0x2b5/0x2e0 [ 537.539360][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 537.539360][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 537.539360][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 537.539360][T12777] ? should_fail+0x75/0x9c0 [ 537.539360][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 537.539360][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 537.539360][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 537.539360][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 537.539360][T12777] ? _copy_from_user+0x219/0x310 [ 537.539360][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 537.539360][T12777] __msan_chain_origin+0xcb/0x140 [ 537.539360][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 537.539360][T12777] get_compat_msghdr+0x108/0x2c0 [ 537.539360][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 537.539360][T12777] do_recvmmsg+0x1063/0x2120 [ 537.539360][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 537.539360][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 537.539360][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 537.539360][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 537.539360][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 537.539360][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 537.539360][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 537.539360][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 537.539360][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 537.539360][T12777] __do_fast_syscall_32+0x96/0xe0 [ 537.539360][T12777] do_fast_syscall_32+0x3c/0x80 [ 537.539360][T12777] do_SYSENTER_32+0x1b/0x20 [ 537.539360][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.539360][T12777] RIP: 0023:0xf6f46549 [ 537.539360][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 537.539360][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 537.539360][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 537.539360][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.539360][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.539360][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 537.539360][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.539360][T12777] Uninit was stored to memory at: [ 537.539360][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 537.539360][T12777] __msan_chain_origin+0xcb/0x140 [ 537.539360][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 537.539360][T12777] get_compat_msghdr+0x108/0x2c0 [ 537.539360][T12777] do_recvmmsg+0x1063/0x2120 [ 537.539360][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 537.539360][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 537.539360][T12777] __do_fast_syscall_32+0x96/0xe0 [ 537.539360][T12777] do_fast_syscall_32+0x3c/0x80 [ 537.539360][T12777] do_SYSENTER_32+0x1b/0x20 [ 537.539360][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.539360][T12777] [ 537.539360][T12777] Uninit was stored to memory at: [ 537.539360][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 537.539360][T12777] __msan_chain_origin+0xcb/0x140 [ 537.539360][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 537.539360][T12777] get_compat_msghdr+0x108/0x2c0 [ 537.539360][T12777] do_recvmmsg+0x1063/0x2120 [ 537.862358][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 537.862358][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 537.862358][T12777] __do_fast_syscall_32+0x96/0xe0 [ 537.862358][T12777] do_fast_syscall_32+0x3c/0x80 [ 537.862358][T12777] do_SYSENTER_32+0x1b/0x20 [ 537.862358][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.862358][T12777] [ 537.862358][T12777] Uninit was stored to memory at: [ 537.862358][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 537.862358][T12777] __msan_chain_origin+0xcb/0x140 [ 537.862358][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 537.862358][T12777] get_compat_msghdr+0x108/0x2c0 [ 537.862358][T12777] do_recvmmsg+0x1063/0x2120 [ 537.862358][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 537.862358][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 537.862358][T12777] __do_fast_syscall_32+0x96/0xe0 [ 537.862358][T12777] do_fast_syscall_32+0x3c/0x80 [ 537.862358][T12777] do_SYSENTER_32+0x1b/0x20 [ 537.862358][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.862358][T12777] [ 537.862358][T12777] Uninit was stored to memory at: [ 537.862358][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 537.862358][T12777] __msan_chain_origin+0xcb/0x140 [ 537.862358][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 537.862358][T12777] get_compat_msghdr+0x108/0x2c0 [ 537.862358][T12777] do_recvmmsg+0x1063/0x2120 [ 537.862358][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 537.862358][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 537.862358][T12777] __do_fast_syscall_32+0x96/0xe0 [ 537.862358][T12777] do_fast_syscall_32+0x3c/0x80 [ 537.862358][T12777] do_SYSENTER_32+0x1b/0x20 [ 537.862358][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.862358][T12777] [ 537.862358][T12777] Uninit was stored to memory at: [ 537.862358][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 537.862358][T12777] __msan_chain_origin+0xcb/0x140 [ 537.862358][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 537.862358][T12777] get_compat_msghdr+0x108/0x2c0 [ 537.862358][T12777] do_recvmmsg+0x1063/0x2120 [ 537.862358][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 537.862358][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 537.862358][T12777] __do_fast_syscall_32+0x96/0xe0 [ 537.862358][T12777] do_fast_syscall_32+0x3c/0x80 [ 537.862358][T12777] do_SYSENTER_32+0x1b/0x20 [ 537.862358][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.862358][T12777] [ 537.862358][T12777] Uninit was stored to memory at: [ 537.862358][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 537.862358][T12777] __msan_chain_origin+0xcb/0x140 [ 537.862358][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 537.862358][T12777] get_compat_msghdr+0x108/0x2c0 [ 537.862358][T12777] do_recvmmsg+0x1063/0x2120 [ 537.862358][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 537.862358][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 537.862358][T12777] __do_fast_syscall_32+0x96/0xe0 [ 537.862358][T12777] do_fast_syscall_32+0x3c/0x80 [ 537.862358][T12777] do_SYSENTER_32+0x1b/0x20 [ 537.862358][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.862358][T12777] [ 537.862358][T12777] Uninit was stored to memory at: [ 537.862358][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 537.862358][T12777] __msan_chain_origin+0xcb/0x140 [ 537.862358][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 537.862358][T12777] get_compat_msghdr+0x108/0x2c0 [ 537.862358][T12777] do_recvmmsg+0x1063/0x2120 [ 537.862358][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 537.862358][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 537.862358][T12777] __do_fast_syscall_32+0x96/0xe0 [ 537.862358][T12777] do_fast_syscall_32+0x3c/0x80 [ 537.862358][T12777] do_SYSENTER_32+0x1b/0x20 [ 537.862358][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 537.862358][T12777] [ 537.862358][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 537.862358][T12777] do_recvmmsg+0xc1/0x2120 [ 537.862358][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 538.337628][T12777] not chained 2090000 origins [ 538.342115][T12777] CPU: 1 PID: 12777 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 538.342115][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.342115][T12777] Call Trace: [ 538.342115][T12777] dump_stack+0x25a/0x2f6 [ 538.342115][T12777] kmsan_internal_chain_origin+0x6f/0x110 [ 538.342115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 538.342115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 538.342115][T12777] ? __local_bh_enable_ip+0x88/0xb0 [ 538.342115][T12777] ? _raw_spin_unlock_bh+0x4b/0x60 [ 538.342115][T12777] ? release_sock+0x2b5/0x2e0 [ 538.342115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 538.342115][T12777] ? kmsan_get_shadow_origin_ptr+0x90/0xc0 [ 538.342115][T12777] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 538.342115][T12777] ? should_fail+0x75/0x9c0 [ 538.342115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 538.342115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 538.342115][T12777] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 538.342115][T12777] ? kmsan_unpoison_memory+0xeb/0x120 [ 538.342115][T12777] ? _copy_from_user+0x219/0x310 [ 538.342115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 538.342115][T12777] __msan_chain_origin+0xcb/0x140 [ 538.342115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 538.342115][T12777] get_compat_msghdr+0x108/0x2c0 [ 538.342115][T12777] ? __sys_recvmmsg+0x51c/0x6f0 [ 538.342115][T12777] do_recvmmsg+0x1063/0x2120 [ 538.342115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 538.342115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 538.342115][T12777] ? kmsan_internal_check_memory+0xb5/0x520 [ 538.342115][T12777] ? kmsan_get_metadata+0x11b/0x180 [ 538.342115][T12777] ? kmsan_internal_set_shadow_origin+0x52/0xc0 [ 538.342115][T12777] ? __msan_poison_alloca+0x15a/0x1a0 [ 538.342115][T12777] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 538.342115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 538.342115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 538.342115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 538.342115][T12777] do_fast_syscall_32+0x3c/0x80 [ 538.342115][T12777] do_SYSENTER_32+0x1b/0x20 [ 538.342115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.342115][T12777] RIP: 0023:0xf6f46549 [ 538.342115][T12777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 538.342115][T12777] RSP: 002b:00000000f451f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 538.342115][T12777] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200005c0 [ 538.342115][T12777] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.342115][T12777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.342115][T12777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 538.342115][T12777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.342115][T12777] Uninit was stored to memory at: [ 538.342115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 538.342115][T12777] __msan_chain_origin+0xcb/0x140 [ 538.342115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 538.342115][T12777] get_compat_msghdr+0x108/0x2c0 [ 538.342115][T12777] do_recvmmsg+0x1063/0x2120 [ 538.342115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 538.342115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 538.342115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 538.342115][T12777] do_fast_syscall_32+0x3c/0x80 [ 538.342115][T12777] do_SYSENTER_32+0x1b/0x20 [ 538.342115][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.342115][T12777] [ 538.342115][T12777] Uninit was stored to memory at: [ 538.342115][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 538.342115][T12777] __msan_chain_origin+0xcb/0x140 [ 538.342115][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 538.342115][T12777] get_compat_msghdr+0x108/0x2c0 [ 538.342115][T12777] do_recvmmsg+0x1063/0x2120 [ 538.342115][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 538.342115][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 538.342115][T12777] __do_fast_syscall_32+0x96/0xe0 [ 538.342115][T12777] do_fast_syscall_32+0x3c/0x80 [ 538.342115][T12777] do_SYSENTER_32+0x1b/0x20 [ 538.742399][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.742399][T12777] [ 538.742399][T12777] Uninit was stored to memory at: [ 538.742399][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 538.742399][T12777] __msan_chain_origin+0xcb/0x140 [ 538.742399][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 538.742399][T12777] get_compat_msghdr+0x108/0x2c0 [ 538.742399][T12777] do_recvmmsg+0x1063/0x2120 [ 538.742399][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 538.742399][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 538.742399][T12777] __do_fast_syscall_32+0x96/0xe0 [ 538.742399][T12777] do_fast_syscall_32+0x3c/0x80 [ 538.742399][T12777] do_SYSENTER_32+0x1b/0x20 [ 538.742399][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.742399][T12777] [ 538.742399][T12777] Uninit was stored to memory at: [ 538.742399][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 538.742399][T12777] __msan_chain_origin+0xcb/0x140 [ 538.742399][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 538.742399][T12777] get_compat_msghdr+0x108/0x2c0 [ 538.742399][T12777] do_recvmmsg+0x1063/0x2120 [ 538.742399][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 538.742399][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 538.742399][T12777] __do_fast_syscall_32+0x96/0xe0 [ 538.742399][T12777] do_fast_syscall_32+0x3c/0x80 [ 538.742399][T12777] do_SYSENTER_32+0x1b/0x20 [ 538.742399][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.742399][T12777] [ 538.742399][T12777] Uninit was stored to memory at: [ 538.742399][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 538.742399][T12777] __msan_chain_origin+0xcb/0x140 [ 538.742399][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 538.742399][T12777] get_compat_msghdr+0x108/0x2c0 [ 538.742399][T12777] do_recvmmsg+0x1063/0x2120 [ 538.742399][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 538.742399][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 538.742399][T12777] __do_fast_syscall_32+0x96/0xe0 [ 538.742399][T12777] do_fast_syscall_32+0x3c/0x80 [ 538.742399][T12777] do_SYSENTER_32+0x1b/0x20 [ 538.742399][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.742399][T12777] [ 538.742399][T12777] Uninit was stored to memory at: [ 538.742399][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 538.742399][T12777] __msan_chain_origin+0xcb/0x140 [ 538.742399][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 538.742399][T12777] get_compat_msghdr+0x108/0x2c0 [ 538.742399][T12777] do_recvmmsg+0x1063/0x2120 [ 538.742399][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 538.742399][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 538.742399][T12777] __do_fast_syscall_32+0x96/0xe0 [ 538.742399][T12777] do_fast_syscall_32+0x3c/0x80 [ 538.742399][T12777] do_SYSENTER_32+0x1b/0x20 [ 538.742399][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.742399][T12777] [ 538.742399][T12777] Uninit was stored to memory at: [ 538.742399][T12777] kmsan_internal_chain_origin+0xa0/0x110 [ 538.742399][T12777] __msan_chain_origin+0xcb/0x140 [ 538.742399][T12777] __get_compat_msghdr+0x6e1/0x9d0 [ 538.742399][T12777] get_compat_msghdr+0x108/0x2c0 [ 538.742399][T12777] do_recvmmsg+0x1063/0x2120 [ 538.742399][T12777] __sys_recvmmsg+0x51c/0x6f0 [ 538.742399][T12777] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 538.742399][T12777] __do_fast_syscall_32+0x96/0xe0 [ 538.742399][T12777] do_fast_syscall_32+0x3c/0x80 [ 538.742399][T12777] do_SYSENTER_32+0x1b/0x20 [ 538.742399][T12777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 538.742399][T12777] [ 538.742399][T12777] Local variable ----msg_sys@do_recvmmsg created at: [ 538.742399][T12777] do_recvmmsg+0xc1/0x2120 [ 538.742399][T12777] __sys_recvmmsg+0x51c/0x6f0 09:59:48 executing program 4: syz_io_uring_setup(0x487f, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x476a, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 09:59:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x44000000, @loopback}, 0x1c) 09:59:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b000100677265746170000014000200", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:48 executing program 3: setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 09:59:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 09:59:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 539.318513][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 539.328137][T12809] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 09:59:49 executing program 3: memfd_create(&(0x7f0000000000)='/dev/udmabuf\x00', 0x0) 09:59:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b0001006772657461700000140002000800", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 539.594603][ T7] usb 6-1: new high-speed USB device number 20 using dummy_hcd 09:59:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xe0ffffff, @loopback}, 0x1c) 09:59:49 executing program 4: r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) [ 539.794351][ T7] usb 6-1: device descriptor read/64, error 18 [ 539.829732][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:59:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b0001006772657461700000140002000800", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:49 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)={[{@nls={'nls', 0x3d, 'maccenteuro'}}]}) [ 540.062820][ T7] usb 6-1: new high-speed USB device number 21 using dummy_hcd 09:59:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) [ 540.263099][ T7] usb 6-1: device descriptor read/64, error 18 09:59:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfc000000, @loopback}, 0x1c) 09:59:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 540.348023][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 540.382922][ T7] usb usb6-port1: attempt power cycle [ 540.446758][T12837] hfsplus: unable to find HFS+ superblock 09:59:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b0001006772657461700000140002000800", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 540.545806][T12837] hfsplus: unable to find HFS+ superblock [ 540.802664][ T7] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 540.946047][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 540.972999][ T7] usb 6-1: device descriptor read/8, error -61 [ 541.242497][ T7] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 541.413231][ T7] usb 6-1: device descriptor read/8, error -61 [ 541.532719][ T7] usb usb6-port1: unable to enumerate USB device 09:59:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 09:59:51 executing program 3: syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1001841, &(0x7f0000000640)) 09:59:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x0) 09:59:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfe800000, @loopback}, 0x1c) 09:59:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b000100677265746170000014000200080001", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 542.534189][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 542.544109][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:59:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b000100677265746170000014000200080001", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfe80ffff, @loopback}, 0x1c) 09:59:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)) 09:59:52 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x600, 0x0) [ 542.895539][ T7] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 543.041159][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 543.050699][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 543.093171][ T7] usb 6-1: device descriptor read/64, error 18 09:59:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b000100677265746170000014000200080001", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:52 executing program 3: io_setup(0x7, &(0x7f0000000680)=0x0) io_cancel(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 543.362811][ T7] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 543.456477][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 543.553068][ T7] usb 6-1: device descriptor read/64, error 18 [ 543.673511][ T7] usb usb6-port1: attempt power cycle [ 544.083003][ T7] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 544.252633][ T7] usb 6-1: device descriptor read/8, error -61 [ 544.522314][ T7] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 544.692448][ T7] usb 6-1: device descriptor read/8, error -61 [ 544.812495][ T7] usb usb6-port1: unable to enumerate USB device 09:59:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 09:59:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfec0ffff, @loopback}, 0x1c) 09:59:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000), 0x4) 09:59:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 09:59:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:54 executing program 3: io_setup(0x7, &(0x7f0000000680)=0x0) io_cancel(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 545.635536][T12926] __nla_validate_parse: 1 callbacks suppressed [ 545.635601][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:59:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000140)) 09:59:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xff000000, @loopback}, 0x1c) 09:59:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:55 executing program 3: io_setup(0x7, &(0x7f0000000680)=0x0) io_cancel(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 09:59:55 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x7f8, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x7e4, 0x3, 0x0, 0x1, [{0x7e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xad, 0x1, "eceec2a530c05e7eca336640bb662abc898c8fc3edf1242fa9d6c76599cdfdda4d4d6a9736a33ed683e381b9210fe2ef78dd1a70eb307759494a7cd08d60e70c0d6b85f189249c60b26eadcb88304304e03e0cc9f4acecbe38480ee903c54106c2f402933c3122d4f7adc2ffd275fd6d0790dc1a4ee082f163c4482c24686aac413e98669cc750e27bd6614e776d46514af2cb64b724a91bacb7c3f4f005884141319ce59c17be5183"}, @NFTA_DATA_VALUE={0x89, 0x1, "3619b3389ac6dcd9617260a7ce81708f5b7642fb03a1684d31e53f0720721a8a029dfaecd02141514edda2d4ef8c9653a5dd407a657d220e2b877710fdb0b79059ff31368b02f31f66fec9d092dcdd53c3baa7d2d9f4316c8894c0ede8917dc06c687e7b281939affe677415cc8be1a3e8e75804574239f10a573c96091b3432ac9d6bb46e"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "6fec1c6282399cdbd88378e2aaf29609bc2e01067fb7f4eef38053b60fa39a84b81637dc189814c815491ec51fced9eec39f566965fb32026b6fe182f6fc0c90b4546ead5efa269272948fe992b749457162fc2618055165c045af5d71b78bcd7cc152a67eeba470262732048286028860be40f732494f73b35231424c24bab95974da101bd0529784db43babb5d3822365d3c0df135c77af521909013f2cb555e7f993cacb2f73366ac62693116b67bd10fbe6894a3f1d84236576160cffd59e69e86c9008b12546ad5d7319f95bc74f2b2390bdff01e14cc267e4ef8adf1d9a683946daee3badef951dcc889253c81ab447068256e69023e"}, @NFTA_DATA_VALUE={0x95, 0x1, "04236c710026c95ab0a5f8bc6d80166b3f14bdcc9e53e6fee507fdece38eeb302e7059f552e8fb8e553c6aee9a08599666e8703ae1f8c450d7bc054fa607600075d45fb715bbe82f5e11eefd7f75f78443aa688c08743bd38804d23b5e6a0247a5bbb35e00c88153834bff4dd0cf8b428d6b76ad23c7c03cf24ec9fc219119d9a766a039a57455577afa2a622ff303b413"}]}, @NFTA_SET_ELEM_DATA={0x2d4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "d59798b1fcdddd30160222a2500eb50f792290b238beddfac255e561f69adbc22ff512b99f632a1315aace95fb2f7fcc607d9502aaf75153f52d7f207572fbeff82e77e25bb0c12788bedfb1ddc8258d842b8b6740b384b27c317a09acd938c66af276335e4eefa96a82364c068ca2e73e6621c5f9e7ae96792ff97a0e78f4a8d94bd9993247a7437372ebe197036ee98c69e29f2a9e41a7269e18295701c1f033987d3ce62b64d770"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x91, 0x1, "1bf06a079d47bd0a9ea0a757c2eadcad592b0093696727370a6039a0624e25383e8de0de225fd903481b53886296be138030ad5e2ff9118379adfa56881dcddf44b5f89b1a5ea321455ef941484e61c21884374e5b1ed1626ec68017a550b6b6ab55679a18b9edce18be8659a7ff59b6a176f7e0c6bf4dc15e2f29ad70593ba2f781a9f1056d0c573d0e740f8e"}, @NFTA_DATA_VALUE={0xad, 0x1, "986e789605424de4e44f26476f084e8ce481b223639000adbe82bce23a5abc45ae32ae550a59f622a8dd897a58d4ffe82a9ccdfddf6cee571089e7647bd30d139d25b3d6521c5a334d62ee8122c51605b1fc651ef541f61ea9f86042d1812f7c5dc90fa2da4611acb1f238beb60ad1f96bde844b8a0cb345588b12967cf0e0dbfcfed2c687cf0569b0e75c2250b0443ed1f42fac4534c2a4348983a241d48599d6bdd9cbc96ed6d362"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x130, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "100e72fdec64a61625b7c0e0d44855bf5264fe4d0b097102156dc9d34c06e86ea19a70ca60afe0d01305cf5a6f487cf08c324dd7d40750342b727bf9f7c74e8541cdf4c2349fe3d0cd2bd328f53c3a5abbf75eadf470d709d6d9f98d9385ca2571abcdbd05f0aebb039d136ea126d13bf2f0fc5e424f8638a3ba81768a9055a06c21948ead8795701524abeab1f3b6f941a374049b0372bc5ce0ce21e96fd4a34dd85956909c918839b5da72173f024e1d6ddf6df86df026c23d2811e135dfdb652be7bec636e83df2785f18210abcb5afa2b22e1ed497ae1d1887d32b"}, @NFTA_DATA_VALUE={0x45, 0x1, "51fa321e24c4c36c26708f0385915829b02632bd119b193e162b601f8fa555a7f851c681fc4decbea0d021c9b82c6b2d435f5b2a262eca0876967f9ebc5a6b1dec"}]}]}]}]}], {0x14}}, 0x820}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/block/loop6', 0x28040, 0x0) [ 546.189720][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 546.215846][ T7] usb 6-1: new high-speed USB device number 28 using dummy_hcd 09:59:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 546.412643][ T7] usb 6-1: device descriptor read/64, error 18 [ 546.646287][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 546.684697][ T7] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 546.883329][ T7] usb 6-1: device descriptor read/64, error 18 [ 547.005895][ T7] usb usb6-port1: attempt power cycle [ 547.412390][ T7] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 547.582920][ T7] usb 6-1: device descriptor read/8, error -61 [ 547.862488][ T7] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 548.042584][ T7] usb 6-1: device descriptor read/8, error -61 [ 548.162696][ T7] usb usb6-port1: unable to enumerate USB device 09:59:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 09:59:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xffff0000, @loopback}, 0x1c) 09:59:58 executing program 3: io_setup(0x7, &(0x7f0000000680)=0x0) io_cancel(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 09:59:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 09:59:58 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)) 09:59:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:58 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xfb2a, &(0x7f0000000000)) 09:59:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 09:59:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x0, 0x0, 0x0, [@remote, @private1, @private1]}}}], 0x60}}], 0x400021c, 0x0) 09:59:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xffff80fe, @loopback}, 0x1c) 09:59:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 549.444065][ T7] usb 6-1: new high-speed USB device number 32 using dummy_hcd 09:59:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f0000000680)=0x0) io_cancel(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) [ 549.642811][ T7] usb 6-1: device descriptor read/64, error 18 [ 549.912775][ T7] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 550.125693][ T7] usb 6-1: device descriptor read/64, error 18 [ 550.245617][ T7] usb usb6-port1: attempt power cycle [ 550.654592][ T7] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 550.832449][ T7] usb 6-1: device descriptor read/8, error -61 [ 551.102263][ T7] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 551.272916][ T7] usb 6-1: device descriptor read/8, error -61 [ 551.393653][ T7] usb usb6-port1: unable to enumerate USB device 10:00:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 10:00:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 10:00:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xffffc0fe, @loopback}, 0x1c) 10:00:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_STATFS(r0, &(0x7f00000020c0)={0x60, 0xfffffffffffffffe}, 0x60) 10:00:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x7, 0x0, &(0x7f0000000100)) 10:00:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000a00)}, 0x2}, {{&(0x7f0000001000)=@in={0x2, 0x0, @private}, 0x80, 0x0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1}, 0x1f}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)=""/130, 0x82}], 0x1, &(0x7f00000005c0)=""/50, 0x32}}, {{0x0, 0x0, 0x0}, 0x83000}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000004380)=""/102400, 0x19000}], 0x1}, 0x10001}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002240)=""/250, 0xfa}, {&(0x7f0000002340)=""/248, 0xf8}], 0x2}}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002100)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000003b00)=ANY=[@ANYBLOB="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"], 0x18}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)="e48612513987766fb635b5e83433646b3f4b03297f1e3e0d364ee02b8d02bdd21559411fc860436a66dc8563c179e2e03c7767ff3ab8b736495b88bd734f254718cd32789a5a0723e43a12a2da59219c7a44f4a788887bf7fd2e88ad7deb816c89c2c1055610ab886d9a697042a01516da153c884666952ca6dffa24e2949ec05ad0a129d4f94f2114795849b774aa4cd4911beba89c5a5b7be81cf52305a716f022d7b52efda791d5da21e07bb1607b1b89327e7a19d742a23f47eb07f4832f268efab1d1e2299041a070e1a2cb0110c7a880407934c3a93cde8c01f2c3", 0xde}], 0x1, &(0x7f0000000740)=[@ip_retopts={{0x74, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x66, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @rr={0x7, 0x1f, 0x23, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x17, 0xf0, [@local, @local, @broadcast, @empty, @multicast1]}, @ssrr={0x89, 0x23, 0x6d, [@rand_addr=0x64010102, @multicast2, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="b0a31a4dd600477122342f205f735047e7bd73efef3a5f839176db56162d43fc9e47f9bf4b1d0232e49e9eff061cb79a2a8fa4533729469163062633bc086aab507a1108ceb3efce34739824df7c30e05d37260f3c128426596224d28a0c75b3aaef89f397bc00d8bf40", 0x6a}, {&(0x7f0000000800)="e1eba9b80d886f629edb0dd661d35843fa10032d6950a498d1cf6601c86faa2bc32d30a08f0f7fdecff00ae478a379f4ec77f7e8d2fffaaa9979e76869093588b574357680a24dfe2b2550d82ebae6192ff084fcea23d550ad41721b98bfaed2cf48ab118368b86348489a5c707681cee0114e30dbfa63451e0d4d6183a3dad8cf3bb2e6fe898774195451b99d3a3ab825a562cd3808c16f1dbe2dfdf2e16e51a7f57b4aed1a814d10b9fea76c90b7ded3c2758eff8ba5678a9467a775b1eef8f0866499198cee66d4a67d29e1cd26ac84073806b4516658", 0xd8}, {&(0x7f0000000900)="19d1a18fa4fea980c22b8f4e90141a85fadb539249c211cea1b807c839110cd3476edc7d1c42801fff7f80a5df40585a333a289f94fbe693bfa8305f24909b839fac3bf539bfac717f48f3832212eaa7a9a407b69533b8b060c71d0931b0b1199b2518135b96b77808b07b7f3b24cd3d91a44795367a79987ec4c742de9a28168bc640b18c006e677ca24c0ccb4c26b7e423d0c85d8cf87807ea1246a89fb37ce630b001d96070ef1ffa8d339abaafeb546844b8446d1b47fd58a950c16b20d10d75538bbbe67ef7c51a9d3fad1f48dacc6389c5a06b64703c921dc5d0e82ba9e0c46a37f47024b9e9dff3702c3e7c60d5cc", 0xf2}, {&(0x7f0000000a00)="466c44a21c63262379800d69846e65ca517f2be88604a7c44222c6f602bf870b3d695a23dc78664ed7853dba2afcb2069a09f88b15a7f70299949d4923c5f2aa5f3f1f67f93fccc3e1723cf9d13a2fbb4c95112263fb68896b22ff89c5e0f8fda36afceb9051c13712e11f1a41c9e733c61315e787d75a1cb5d60b7bc0f7a31fd04a626791a3133b3bfc8c7e14442077222331a506332ae0b9a8ff775f1e84ab9d039bd0cd46e5de9bb3288053cefc8c8bbd99071669f11698aa97f589aaa5ee505858c21ef537cc14a218555d9dcc6eb9a291c8a0a6a87be6bbf8ffc85c6cbaac6a7ae1e9f0eeedef9163738c115c94e81776f3a5", 0xf5}, {&(0x7f0000000600)="198387195645381705bf5494e442", 0xe}], 0x5, &(0x7f0000000b80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9e87}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe0}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xf8}}, {{&(0x7f0000000640)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000c80)="a8d59c03537c7dcfd4777bae365b4ca69c7b4ce3e57a35e7efa274f9252ff981ad3946a0a533974edae477dc6df839496c6daf6053326b2fd3174f19599aa9cc94d6fd3e4d28a608ca8da73e472b29e6ff20c17b241cb95af2549392c5642832f4364473a1575a53f2d353f241ce145cb1", 0x71}, {&(0x7f0000000d00)="d7fd339b57bdb70ed19decd2c1ac237f1a3417a429e797f62959ed2a1855b6", 0x1f}, {&(0x7f0000000d40)="daab39ad967b6684a2f406a972cc8c548aa98ea1b29f8e4edbab61fea4d764e4eb7b1de01eebfab32d632edcce45ab1fbe5d04edd94ef72e46c0f6fd1168a8c76a9b6594bf01c0177a630ac4e6621c5a3dae1680a5cfebb03b57c90097016a5caf5902233779242d5df790", 0x6b}, {&(0x7f0000000dc0)="2679dcc94125b0aa7164a7d70144b0fe435d58d77d6eda62ccdb9804adcb612224b377303a94913a91afb7d8970a14dfeff740c7521d9dd912baea7fcb9047e61d4fe8965c97bf427a910f148159b881e50770e7504037de5357cee3cf4b4c4fbb7c727d475c41107b470b2fe23be41cd88735355ce39c13a6bf61e83938f29ba4cba3831682c5438f7c9656dc73ff", 0x8f}], 0x4, &(0x7f0000000ec0)=[@ip_tos_int={{0x9, 0x0, 0x1, 0x200}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x12, 0x2, [{0x6, 0x2}, {0x5, 0xa, "057939ee8b0dd960"}]}, @timestamp={0x44, 0x8, 0x66, 0x0, 0x9, [0x8001]}, @noop, @cipso={0x86, 0x11, 0x2, [{0x7, 0xb, "aff6cbc3c12831e4d2"}]}, @timestamp={0x44, 0x8, 0xd, 0x0, 0x2, [0x3]}]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@generic={0x88, 0x2}, @cipso={0x86, 0x58, 0x3, [{0x5, 0x7, "1e14e0fe07"}, {0x0, 0x12, "60f06f611187234249187fb81a1967fd"}, {0x6, 0x8, "b41802e626f5"}, {0x2, 0x12, "fc8a5453393eda2533ea9f694737f6be"}, {0x7, 0x11, "63d7455ecbef6e3aa0fe6a5e1c2f31"}, {0x6, 0xe, "674074c9b86829dc8a4f6fd6"}]}, @timestamp_prespec={0x44, 0xc, 0x7b, 0x3, 0x3, [{@empty, 0x1872}]}, @timestamp={0x44, 0x8, 0xd3, 0x0, 0x6, [0x401]}]}}}], 0xf8}}], 0x4, 0x0) 10:00:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 10:00:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d40)={0x90, 0x39, 0x1, 0x0, 0x0, "", [@nested={0x80, 0x0, 0x0, 0x1, [@generic="bfa3de8a74a66a84796ba424bc66ab8f34734ae78b5fa5e5c97a0391b3f89c8b7e685964a3975531d9d0c1021387827a4e004c327bfdd1fd40ac1b07ce84f34162678279c901d355a83f62af6f284e9d554993c82facd1aba13df4713a2f5fea8ebd7f44b04a3667bf4b8d4725013648d4fa7a2681be25288769d6e5"]}]}, 0x90}], 0x1}, 0x0) 10:00:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xffffffe0, @loopback}, 0x1c) 10:00:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000340)) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 552.902575][ T56] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 553.092369][ T56] usb 6-1: device descriptor read/64, error 18 [ 553.363352][ T56] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 553.552295][ T56] usb 6-1: device descriptor read/64, error 18 [ 553.672762][ T56] usb usb6-port1: attempt power cycle [ 554.082480][ T56] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 554.282963][ T56] usb 6-1: device descriptor read/8, error -61 [ 554.552343][ T56] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 554.752524][ T56] usb 6-1: device descriptor read/8, error -61 [ 554.884502][ T56] usb usb6-port1: unable to enumerate USB device 10:00:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 10:00:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x1c) 10:00:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000340)) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:05 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) sendfile(r3, r0, 0x0, 0x800000000004) 10:00:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 10:00:05 executing program 4: syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) [ 555.740331][ T35] audit: type=1800 audit(1632218405.209:6): pid=13054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14471 res=0 errno=0 [ 555.830904][ T35] audit: type=1800 audit(1632218405.279:7): pid=13054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14471 res=0 errno=0 10:00:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/123) 10:00:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000340)) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 10:00:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 556.191657][T13064] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 556.302355][ T7] usb 6-1: new high-speed USB device number 40 using dummy_hcd 10:00:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdfffdffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x80000c, 0x0, 0x12, r1, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x0, 0x43, 0x0, 0x2800000000000000, 0x0, 0x3ff}) [ 556.493351][ T7] usb 6-1: device descriptor read/64, error 18 [ 556.762424][ T7] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 556.953020][ T7] usb 6-1: device descriptor read/64, error 18 [ 557.073426][ T7] usb usb6-port1: attempt power cycle [ 557.483077][ T7] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 557.672560][ T7] usb 6-1: device descriptor read/8, error -61 [ 557.942504][ T7] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 558.112522][ T7] usb 6-1: device descriptor read/8, error -61 [ 558.234390][ T7] usb usb6-port1: unable to enumerate USB device 10:00:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400810000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 10:00:08 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x800, 0x0) syz_emit_ethernet(0x110a, &(0x7f0000001940)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)={0x1, 0x0, [0x0, 0xb49, 0x0, 0x5f0]}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000280)={0x1, 0x1, [0xf7a, 0x4bc, 0x2b9]}) perf_event_open(&(0x7f000001d000)={0x0, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4c8d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000000140), 0x8, 0x1ff) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, [0x182, 0x1ab, 0xfffffffe]}) syz_read_part_table(0xd102, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a007a00ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) syz_read_part_table(0x3517, 0x5, &(0x7f0000000700)=[{&(0x7f00000002c0)="47fe9c2101afab6601c266167781d3ff77b97b292abcaca21fed3bd8a701575b2433ff9a7d4ccabe9a452bb38d1be24a0c2de6edb64422bc7203e9919d36589cf2a9e28ae3e82cf6dac7da70cd0d143855e22bc7282d98c33a68c5ded8d04f6ac4d545449f9204d606b4657ec2b7f3a9cf283cc97aebd8119342b822b72e4af5b133a1048b9bc832b61ce8ee084d07438b488d22dbb8bc013ea62c5421bbc9da6c0665eeb14dbfb9b2c4ad2a58e71c1a1092518b66aac6005c", 0xb9, 0x9}, {&(0x7f0000000380)="f25d79c070a0ea8f91c9323ba83c604165d3d8585194a5869efd0bd12c1584eb761c57408ff48d4afdb61477d1dc932db34a1cf90817c24c20253450ab9310cab5918042bb6d3485ab83f3bd0943630a7b757c0d943eb403219da06238ad0410f6d2f383e3f1c81a69f0a8a6371a4856931dcbda20b092", 0x77, 0x14000000}, {&(0x7f0000000400)}, {&(0x7f0000000500)="d7bd3ffe7e255ad34edf7d1e47759b31ef187492038fc8b84d5228b7f291b62fb4a843fea2f4e569efe52d5e8722cd1bcad7c16cd7e017384a34e98394df4f2d482bc90183f59d32e92c5c03e7b3c13056a9987306b59467ee5051627746252c78497cbf96459ef63fb83b4fafdbe437e0eef784fbe5a9ba2d9a", 0x7a, 0x40e}, {&(0x7f0000000600)="534e252180e8df7cc4621ab3e6105f73373d911857cfba005aeddc89f0738a1f1c6534cbd3938356024a083d2ec46e4a5c67f25ff8aa0ca7b6100a62ae32b6dde57f6841ae934d4cbef5b7dc409e23b238c3a1450e183351360ac9fc661f61c6414d7b8bf7e9a75c825740fa08ae606e820c66479ab7f630974d6bd4ce8c3fc0827bf37e5feea0787b8fdd1a9f609f2903ce4f8b95a17adfd3fd47b261b68638668d8d0f13b1206e83e97d3dc3292eabba41324187915cfafb7c330eaa72f4939937e37718f14f29", 0xc8}]) syz_read_part_table(0x5000, 0x5, &(0x7f00000017c0)=[{&(0x7f0000001240)="f83b6045ae5a176f283732d15285b2e9c6463418105dd2ed8c863f4d1be55a7c98c1217157ca5889f64fd84f8cb0e4b5e7ea3e5aebb3ec69a7ba8a6a9277081b85e37f1f25536137a7b5f37e2a0a9393064d5db6690c3c478a372a2716ce1d053f1790cf97fa4f1bf3f627535bb7244c1ce33badea750c5c9adf7a82d0a7c6a4fba79ba4f61b181f53048f7ebb2d6619d77eb9a66638bc1aba2fdc09e28f92aa0710ccdb10237892bf938e3936959e7c3822f9225d918ca804cea62ef999cb1a2796da837a7a2d3f915e425cd10ab6", 0xcf, 0xffffffffffffffd3}, {&(0x7f0000001340)="1782562330d8f0df1ee1ef655c1542afe474cba40eca32c2321257159eb45bf500b4b33d851ca09cd7077c7c012701be4ee8053a58f1d806996d92", 0x3b, 0x100}, {&(0x7f00000015c0)}, {&(0x7f0000001680)="3c0624940f9bbeb2c2c3068f0a327c93a745df4003646b5e837c0f34ca9814803324e9581f256e6b197f9fe9c5008a6ab602d48ad65ac0f288ae88410dd4d12c62475e05f3be2c5da86c1c130e90b542e946350c1b0706a9d2ba78a092ae278e5a60f344", 0x64, 0x400}, {&(0x7f0000001700), 0x0, 0x4}]) 10:00:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 10:00:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) 10:00:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:08 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x4102, 0x0) [ 559.120339][T13102] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 559.182792][T13103] loop4: detected capacity change from 0 to 104 [ 559.311278][T13103] loop4: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 559.311649][T13103] loop4: partition table partially beyond EOD, truncated 10:00:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 559.407844][T13103] loop4: p1 start 7995402 is beyond EOD, truncated 10:00:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffff7) fcntl$setpipe(r3, 0x407, 0x0) r4 = signalfd4(r1, &(0x7f0000000100), 0x8, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0x7, 0x0, 0xff, 0x2400, 0x9}, 0xc) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local}) 10:00:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 559.628873][T13114] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 10:00:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 559.732435][ T56] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 559.836818][T13103] loop4: p3 start 225 is beyond EOD, truncated [ 559.843452][T13103] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 559.877892][T13103] loop4: p5 start 7995402 is beyond EOD, truncated [ 559.885210][T13103] loop4: p6 start 7995402 is beyond EOD, truncated [ 559.893189][T13103] loop4: p7 start 7995402 is beyond EOD, truncated [ 559.899827][T13103] loop4: p8 start 7995402 is beyond EOD, truncated [ 559.906868][T13103] loop4: p9 start 7995402 is beyond EOD, truncated [ 559.913614][T13103] loop4: p10 start 7995402 is beyond EOD, truncated [ 559.920373][T13103] loop4: p11 start 7995402 is beyond EOD, truncated [ 559.927189][T13103] loop4: p12 start 7995402 is beyond EOD, truncated [ 559.934081][T13103] loop4: p13 start 7995402 is beyond EOD, truncated [ 559.940782][T13103] loop4: p14 start 7995402 is beyond EOD, truncated [ 559.947612][T13103] loop4: p15 start 7995402 is beyond EOD, truncated [ 559.954482][T13103] loop4: p16 start 7995402 is beyond EOD, truncated [ 559.961197][T13103] loop4: p17 start 7995402 is beyond EOD, truncated [ 559.968043][T13103] loop4: p18 start 7995402 is beyond EOD, truncated [ 559.974879][T13103] loop4: p19 start 7995402 is beyond EOD, truncated [ 559.981589][T13103] loop4: p20 start 7995402 is beyond EOD, truncated [ 559.988440][T13103] loop4: p21 start 7995402 is beyond EOD, truncated [ 559.995288][T13103] loop4: p22 start 7995402 is beyond EOD, truncated [ 560.002008][T13103] loop4: p23 start 7995402 is beyond EOD, truncated [ 560.008852][T13103] loop4: p24 start 7995402 is beyond EOD, truncated [ 560.015701][T13103] loop4: p25 start 7995402 is beyond EOD, truncated [ 560.022614][T13103] loop4: p26 start 7995402 is beyond EOD, truncated [ 560.029331][T13103] loop4: p27 start 7995402 is beyond EOD, truncated [ 560.036180][T13103] loop4: p28 start 7995402 is beyond EOD, truncated [ 560.043024][T13103] loop4: p29 start 7995402 is beyond EOD, truncated [ 560.049737][T13103] loop4: p30 start 7995402 is beyond EOD, truncated [ 560.056578][T13103] loop4: p31 start 7995402 is beyond EOD, truncated [ 560.063419][T13103] loop4: p32 start 7995402 is beyond EOD, truncated [ 560.070131][T13103] loop4: p33 start 7995402 is beyond EOD, truncated [ 560.076994][T13103] loop4: p34 start 7995402 is beyond EOD, truncated [ 560.083861][T13103] loop4: p35 start 7995402 is beyond EOD, truncated [ 560.088574][T13130] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 560.090627][T13103] loop4: p36 start 7995402 is beyond EOD, truncated [ 560.090707][T13103] loop4: p37 start 7995402 is beyond EOD, truncated [ 560.090779][T13103] loop4: p38 start 7995402 is beyond EOD, truncated [ 560.120231][T13103] loop4: p39 start 7995402 is beyond EOD, truncated [ 560.127084][T13103] loop4: p40 start 7995402 is beyond EOD, truncated [ 560.133915][T13103] loop4: p41 start 7995402 is beyond EOD, truncated [ 560.140621][T13103] loop4: p42 start 7995402 is beyond EOD, truncated [ 560.147419][T13103] loop4: p43 start 7995402 is beyond EOD, truncated [ 560.154214][T13103] loop4: p44 start 7995402 is beyond EOD, truncated [ 560.160910][T13103] loop4: p45 start 7995402 is beyond EOD, truncated [ 560.167775][T13103] loop4: p46 start 7995402 is beyond EOD, truncated [ 560.174620][T13103] loop4: p47 start 7995402 is beyond EOD, truncated [ 560.181329][T13103] loop4: p48 start 7995402 is beyond EOD, truncated [ 560.188608][T13103] loop4: p49 start 7995402 is beyond EOD, truncated [ 560.195429][T13103] loop4: p50 start 7995402 is beyond EOD, truncated [ 560.202264][T13103] loop4: p51 start 7995402 is beyond EOD, truncated [ 560.208967][T13103] loop4: p52 start 7995402 is beyond EOD, truncated [ 560.215812][T13103] loop4: p53 start 7995402 is beyond EOD, truncated [ 560.222629][T13103] loop4: p54 start 7995402 is beyond EOD, truncated [ 560.229331][T13103] loop4: p55 start 7995402 is beyond EOD, truncated [ 560.236172][T13103] loop4: p56 start 7995402 is beyond EOD, truncated [ 560.243022][T13103] loop4: p57 start 7995402 is beyond EOD, truncated [ 560.249739][T13103] loop4: p58 start 7995402 is beyond EOD, truncated [ 560.256587][T13103] loop4: p59 start 7995402 is beyond EOD, truncated [ 560.263432][T13103] loop4: p60 start 7995402 is beyond EOD, truncated [ 560.270150][T13103] loop4: p61 start 7995402 is beyond EOD, truncated [ 560.277033][T13103] loop4: p62 start 7995402 is beyond EOD, truncated [ 560.283885][T13103] loop4: p63 start 7995402 is beyond EOD, truncated [ 560.290599][T13103] loop4: p64 start 7995402 is beyond EOD, truncated [ 560.297464][T13103] loop4: p65 start 7995402 is beyond EOD, truncated [ 560.304552][T13103] loop4: p66 start 7995402 is beyond EOD, truncated [ 560.311266][T13103] loop4: p67 start 7995402 is beyond EOD, truncated [ 560.318125][T13103] loop4: p68 start 7995402 is beyond EOD, truncated 10:00:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 560.324992][T13103] loop4: p69 start 7995402 is beyond EOD, truncated [ 560.331714][T13103] loop4: p70 start 7995402 is beyond EOD, truncated [ 560.338585][T13103] loop4: p71 start 7995402 is beyond EOD, truncated [ 560.345449][T13103] loop4: p72 start 7995402 is beyond EOD, truncated [ 560.352324][T13103] loop4: p73 start 7995402 is beyond EOD, truncated [ 560.359046][T13103] loop4: p74 start 7995402 is beyond EOD, truncated [ 560.365907][T13103] loop4: p75 start 7995402 is beyond EOD, truncated [ 560.372758][T13103] loop4: p76 start 7995402 is beyond EOD, truncated [ 560.379481][T13103] loop4: p77 start 7995402 is beyond EOD, truncated [ 560.386300][T13103] loop4: p78 start 7995402 is beyond EOD, truncated [ 560.393123][T13103] loop4: p79 start 7995402 is beyond EOD, truncated [ 560.399847][T13103] loop4: p80 start 7995402 is beyond EOD, truncated [ 560.406669][T13103] loop4: p81 start 7995402 is beyond EOD, truncated [ 560.413468][T13103] loop4: p82 start 7995402 is beyond EOD, truncated [ 560.420174][T13103] loop4: p83 start 7995402 is beyond EOD, truncated [ 560.426997][T13103] loop4: p84 start 7995402 is beyond EOD, truncated [ 560.433808][T13103] loop4: p85 start 7995402 is beyond EOD, truncated [ 560.440542][T13103] loop4: p86 start 7995402 is beyond EOD, truncated [ 560.447364][T13103] loop4: p87 start 7995402 is beyond EOD, truncated [ 560.454189][T13103] loop4: p88 start 7995402 is beyond EOD, truncated [ 560.460928][T13103] loop4: p89 start 7995402 is beyond EOD, truncated [ 560.467747][T13103] loop4: p90 start 7995402 is beyond EOD, truncated [ 560.474575][T13103] loop4: p91 start 7995402 is beyond EOD, truncated [ 560.481297][T13103] loop4: p92 start 7995402 is beyond EOD, truncated [ 560.488110][T13103] loop4: p93 start 7995402 is beyond EOD, truncated [ 560.495011][T13103] loop4: p94 start 7995402 is beyond EOD, truncated [ 560.501730][T13103] loop4: p95 start 7995402 is beyond EOD, truncated [ 560.508717][T13103] loop4: p96 start 7995402 is beyond EOD, truncated [ 560.515543][T13103] loop4: p97 start 7995402 is beyond EOD, truncated [ 560.522360][T13103] loop4: p98 start 7995402 is beyond EOD, truncated [ 560.529361][T13103] loop4: p99 start 7995402 is beyond EOD, truncated [ 560.536350][T13103] loop4: p100 start 7995402 is beyond EOD, truncated [ 560.543242][T13103] loop4: p101 start 7995402 is beyond EOD, truncated [ 560.550059][T13103] loop4: p102 start 7995402 is beyond EOD, truncated [ 560.556947][T13103] loop4: p103 start 7995402 is beyond EOD, truncated [ 560.563843][T13103] loop4: p104 start 7995402 is beyond EOD, truncated [ 560.570647][T13103] loop4: p105 start 7995402 is beyond EOD, truncated [ 560.577538][T13103] loop4: p106 start 7995402 is beyond EOD, truncated [ 560.584419][T13103] loop4: p107 start 7995402 is beyond EOD, truncated [ 560.591233][T13103] loop4: p108 start 7995402 is beyond EOD, truncated [ 560.598175][T13103] loop4: p109 start 7995402 is beyond EOD, truncated [ 560.605126][T13103] loop4: p110 start 7995402 is beyond EOD, truncated [ 560.611956][T13103] loop4: p111 start 7995402 is beyond EOD, truncated [ 560.618933][T13103] loop4: p112 start 7995402 is beyond EOD, truncated [ 560.625887][T13103] loop4: p113 start 7995402 is beyond EOD, truncated [ 560.632861][T13103] loop4: p114 start 7995402 is beyond EOD, truncated [ 560.639672][T13103] loop4: p115 start 7995402 is beyond EOD, truncated [ 560.646642][T13103] loop4: p116 start 7995402 is beyond EOD, truncated [ 560.653591][T13103] loop4: p117 start 7995402 is beyond EOD, truncated [ 560.660423][T13103] loop4: p118 start 7995402 is beyond EOD, truncated [ 560.667370][T13103] loop4: p119 start 7995402 is beyond EOD, truncated [ 560.674322][T13103] loop4: p120 start 7995402 is beyond EOD, truncated [ 560.681134][T13103] loop4: p121 start 7995402 is beyond EOD, truncated [ 560.688092][T13103] loop4: p122 start 7995402 is beyond EOD, truncated [ 560.695037][T13103] loop4: p123 start 7995402 is beyond EOD, truncated [ 560.701841][T13103] loop4: p124 start 7995402 is beyond EOD, truncated [ 560.708789][T13103] loop4: p125 start 7995402 is beyond EOD, truncated [ 560.715740][T13103] loop4: p126 start 7995402 is beyond EOD, truncated [ 560.722754][T13103] loop4: p127 start 7995402 is beyond EOD, truncated 10:00:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 560.729557][T13103] loop4: p128 start 7995402 is beyond EOD, truncated [ 560.736539][T13103] loop4: p129 start 7995402 is beyond EOD, truncated [ 560.743453][T13103] loop4: p130 start 7995402 is beyond EOD, truncated [ 560.750268][T13103] loop4: p131 start 7995402 is beyond EOD, truncated [ 560.757193][T13103] loop4: p132 start 7995402 is beyond EOD, truncated [ 560.764113][T13103] loop4: p133 start 7995402 is beyond EOD, truncated [ 560.770937][T13103] loop4: p134 start 7995402 is beyond EOD, truncated [ 560.777855][T13103] loop4: p135 start 7995402 is beyond EOD, truncated [ 560.784764][T13103] loop4: p136 start 7995402 is beyond EOD, truncated [ 560.791582][T13103] loop4: p137 start 7995402 is beyond EOD, truncated [ 560.798512][T13103] loop4: p138 start 7995402 is beyond EOD, truncated [ 560.805420][T13103] loop4: p139 start 7995402 is beyond EOD, truncated [ 560.812330][T13103] loop4: p140 start 7995402 is beyond EOD, truncated [ 560.819148][T13103] loop4: p141 start 7995402 is beyond EOD, truncated [ 560.826090][T13103] loop4: p142 start 7995402 is beyond EOD, truncated [ 560.832997][T13103] loop4: p143 start 7995402 is beyond EOD, truncated [ 560.839812][T13103] loop4: p144 start 7995402 is beyond EOD, truncated [ 560.846733][T13103] loop4: p145 start 7995402 is beyond EOD, truncated [ 560.853640][T13103] loop4: p146 start 7995402 is beyond EOD, truncated [ 560.865420][T13103] loop4: p147 start 7995402 is beyond EOD, truncated [ 560.872314][T13103] loop4: p148 start 7995402 is beyond EOD, truncated [ 560.879136][T13103] loop4: p149 start 7995402 is beyond EOD, truncated [ 560.886035][T13103] loop4: p150 start 7995402 is beyond EOD, truncated [ 560.892927][T13103] loop4: p151 start 7995402 is beyond EOD, truncated [ 560.899730][T13103] loop4: p152 start 7995402 is beyond EOD, truncated [ 560.906690][T13103] loop4: p153 start 7995402 is beyond EOD, truncated [ 560.913597][T13103] loop4: p154 start 7995402 is beyond EOD, truncated [ 560.920426][T13103] loop4: p155 start 7995402 is beyond EOD, truncated [ 560.927323][T13103] loop4: p156 start 7995402 is beyond EOD, truncated [ 560.934231][T13103] loop4: p157 start 7995402 is beyond EOD, truncated [ 560.941026][T13103] loop4: p158 start 7995402 is beyond EOD, truncated [ 560.948012][T13103] loop4: p159 start 7995402 is beyond EOD, truncated [ 560.954909][T13103] loop4: p160 start 7995402 is beyond EOD, truncated [ 560.961717][T13103] loop4: p161 start 7995402 is beyond EOD, truncated [ 560.968653][T13103] loop4: p162 start 7995402 is beyond EOD, truncated [ 560.975568][T13103] loop4: p163 start 7995402 is beyond EOD, truncated [ 560.982476][T13103] loop4: p164 start 7995402 is beyond EOD, truncated [ 560.989289][T13103] loop4: p165 start 7995402 is beyond EOD, truncated [ 560.996187][T13103] loop4: p166 start 7995402 is beyond EOD, truncated [ 561.003095][T13103] loop4: p167 start 7995402 is beyond EOD, truncated [ 561.009916][T13103] loop4: p168 start 7995402 is beyond EOD, truncated [ 561.016819][T13103] loop4: p169 start 7995402 is beyond EOD, truncated [ 561.023727][T13103] loop4: p170 start 7995402 is beyond EOD, truncated [ 561.030617][T13103] loop4: p171 start 7995402 is beyond EOD, truncated [ 561.037525][T13103] loop4: p172 start 7995402 is beyond EOD, truncated [ 561.044634][T13103] loop4: p173 start 7995402 is beyond EOD, truncated [ 561.051521][T13103] loop4: p174 start 7995402 is beyond EOD, truncated [ 561.058435][T13103] loop4: p175 start 7995402 is beyond EOD, truncated [ 561.065325][T13103] loop4: p176 start 7995402 is beyond EOD, truncated [ 561.072421][T13103] loop4: p177 start 7995402 is beyond EOD, truncated [ 561.079220][T13103] loop4: p178 start 7995402 is beyond EOD, truncated [ 561.086125][T13103] loop4: p179 start 7995402 is beyond EOD, truncated [ 561.093023][T13103] loop4: p180 start 7995402 is beyond EOD, truncated [ 561.100039][T13103] loop4: p181 start 7995402 is beyond EOD, truncated [ 561.107065][T13103] loop4: p182 start 7995402 is beyond EOD, truncated [ 561.113960][T13103] loop4: p183 start 7995402 is beyond EOD, truncated [ 561.120788][T13103] loop4: p184 start 7995402 is beyond EOD, truncated [ 561.127703][T13103] loop4: p185 start 7995402 is beyond EOD, truncated [ 561.134604][T13103] loop4: p186 start 7995402 is beyond EOD, truncated [ 561.141418][T13103] loop4: p187 start 7995402 is beyond EOD, truncated [ 561.148322][T13103] loop4: p188 start 7995402 is beyond EOD, truncated [ 561.155227][T13103] loop4: p189 start 7995402 is beyond EOD, truncated [ 561.162032][T13103] loop4: p190 start 7995402 is beyond EOD, truncated [ 561.168972][T13103] loop4: p191 start 7995402 is beyond EOD, truncated [ 561.175879][T13103] loop4: p192 start 7995402 is beyond EOD, truncated [ 561.182779][T13103] loop4: p193 start 7995402 is beyond EOD, truncated [ 561.189589][T13103] loop4: p194 start 7995402 is beyond EOD, truncated [ 561.196478][T13103] loop4: p195 start 7995402 is beyond EOD, truncated [ 561.203455][T13103] loop4: p196 start 7995402 is beyond EOD, truncated [ 561.210271][T13103] loop4: p197 start 7995402 is beyond EOD, truncated [ 561.217179][T13103] loop4: p198 start 7995402 is beyond EOD, truncated [ 561.224065][T13103] loop4: p199 start 7995402 is beyond EOD, truncated [ 561.230876][T13103] loop4: p200 start 7995402 is beyond EOD, truncated [ 561.237792][T13103] loop4: p201 start 7995402 is beyond EOD, truncated [ 561.244677][T13103] loop4: p202 start 7995402 is beyond EOD, truncated [ 561.251471][T13103] loop4: p203 start 7995402 is beyond EOD, truncated [ 561.258443][T13103] loop4: p204 start 7995402 is beyond EOD, truncated [ 561.265431][T13103] loop4: p205 start 7995402 is beyond EOD, truncated [ 561.272336][T13103] loop4: p206 start 7995402 is beyond EOD, truncated [ 561.279157][T13103] loop4: p207 start 7995402 is beyond EOD, truncated [ 561.286145][T13103] loop4: p208 start 7995402 is beyond EOD, truncated [ 561.293043][T13103] loop4: p209 start 7995402 is beyond EOD, truncated [ 561.299924][T13103] loop4: p210 start 7995402 is beyond EOD, truncated [ 561.306850][T13103] loop4: p211 start 7995402 is beyond EOD, truncated [ 561.313762][T13103] loop4: p212 start 7995402 is beyond EOD, truncated [ 561.320613][T13103] loop4: p213 start 7995402 is beyond EOD, truncated [ 561.327521][T13103] loop4: p214 start 7995402 is beyond EOD, truncated [ 561.334439][T13103] loop4: p215 start 7995402 is beyond EOD, truncated [ 561.341242][T13103] loop4: p216 start 7995402 is beyond EOD, truncated [ 561.348152][T13103] loop4: p217 start 7995402 is beyond EOD, truncated [ 561.355051][T13103] loop4: p218 start 7995402 is beyond EOD, truncated [ 561.361869][T13103] loop4: p219 start 7995402 is beyond EOD, truncated [ 561.368796][T13103] loop4: p220 start 7995402 is beyond EOD, truncated [ 561.375707][T13103] loop4: p221 start 7995402 is beyond EOD, truncated [ 561.382602][T13103] loop4: p222 start 7995402 is beyond EOD, truncated [ 561.389417][T13103] loop4: p223 start 7995402 is beyond EOD, truncated [ 561.396319][T13103] loop4: p224 start 7995402 is beyond EOD, truncated [ 561.403195][T13103] loop4: p225 start 7995402 is beyond EOD, truncated [ 561.410002][T13103] loop4: p226 start 7995402 is beyond EOD, truncated [ 561.416898][T13103] loop4: p227 start 7995402 is beyond EOD, truncated [ 561.423816][T13103] loop4: p228 start 7995402 is beyond EOD, truncated [ 561.430714][T13103] loop4: p229 start 7995402 is beyond EOD, truncated [ 561.437629][T13103] loop4: p230 start 7995402 is beyond EOD, truncated [ 561.444525][T13103] loop4: p231 start 7995402 is beyond EOD, truncated [ 561.451318][T13103] loop4: p232 start 7995402 is beyond EOD, truncated [ 561.458440][T13103] loop4: p233 start 7995402 is beyond EOD, truncated [ 561.465333][T13103] loop4: p234 start 7995402 is beyond EOD, truncated [ 561.472241][T13103] loop4: p235 start 7995402 is beyond EOD, truncated [ 561.479053][T13103] loop4: p236 start 7995402 is beyond EOD, truncated [ 561.485948][T13103] loop4: p237 start 7995402 is beyond EOD, truncated [ 561.493063][T13103] loop4: p238 start 7995402 is beyond EOD, truncated [ 561.499885][T13103] loop4: p239 start 7995402 is beyond EOD, truncated [ 561.506796][T13103] loop4: p240 start 7995402 is beyond EOD, truncated [ 561.513778][T13103] loop4: p241 start 7995402 is beyond EOD, truncated [ 561.520593][T13103] loop4: p242 start 7995402 is beyond EOD, truncated [ 561.527512][T13103] loop4: p243 start 7995402 is beyond EOD, truncated [ 561.534413][T13103] loop4: p244 start 7995402 is beyond EOD, truncated [ 561.541211][T13103] loop4: p245 start 7995402 is beyond EOD, truncated [ 561.548120][T13103] loop4: p246 start 7995402 is beyond EOD, truncated [ 561.555019][T13103] loop4: p247 start 7995402 is beyond EOD, truncated [ 561.561813][T13103] loop4: p248 start 7995402 is beyond EOD, truncated [ 561.568724][T13103] loop4: p249 start 7995402 is beyond EOD, truncated [ 561.575777][T13103] loop4: p250 start 7995402 is beyond EOD, truncated [ 561.582690][T13103] loop4: p251 start 7995402 is beyond EOD, truncated [ 561.589524][T13103] loop4: p252 start 7995402 is beyond EOD, truncated [ 561.596417][T13103] loop4: p253 start 7995402 is beyond EOD, truncated [ 561.603307][T13103] loop4: p254 start 7995402 is beyond EOD, truncated [ 561.610104][T13103] loop4: p255 start 7995402 is beyond EOD, truncated [ 561.682546][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 561.786135][ T4687] loop4: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 561.786490][ T4687] loop4: partition table partially beyond EOD, truncated [ 561.883505][ T4687] loop4: p1 start 7995402 is beyond EOD, truncated [ 561.894973][ T56] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 561.904242][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.914531][ T56] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 561.923903][ T56] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 561.933220][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.976721][T13139] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 562.118281][ T56] usb 6-1: config 0 descriptor?? [ 562.318495][ T4687] loop4: p3 start 225 is beyond EOD, truncated [ 562.325097][ T4687] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 562.337907][ T4687] loop4: p5 start 7995402 is beyond EOD, truncated [ 562.344771][ T4687] loop4: p6 start 7995402 is beyond EOD, truncated [ 562.346431][ T7] usb 6-1: USB disconnect, device number 44 [ 562.352695][ T4687] loop4: p7 start 7995402 is beyond EOD, truncated [ 562.365406][ T4687] loop4: p8 start 7995402 is beyond EOD, truncated [ 562.372043][ T4687] loop4: p9 start 7995402 is beyond EOD, truncated [ 562.378815][ T4687] loop4: p10 start 7995402 is beyond EOD, truncated [ 562.385658][ T4687] loop4: p11 start 7995402 is beyond EOD, truncated [ 562.392514][ T4687] loop4: p12 start 7995402 is beyond EOD, truncated [ 562.399230][ T4687] loop4: p13 start 7995402 is beyond EOD, truncated [ 562.406090][ T4687] loop4: p14 start 7995402 is beyond EOD, truncated [ 562.412931][ T4687] loop4: p15 start 7995402 is beyond EOD, truncated [ 562.419640][ T4687] loop4: p16 start 7995402 is beyond EOD, truncated [ 562.426535][ T4687] loop4: p17 start 7995402 is beyond EOD, truncated [ 562.433354][ T4687] loop4: p18 start 7995402 is beyond EOD, truncated [ 562.440050][ T4687] loop4: p19 start 7995402 is beyond EOD, truncated [ 562.446899][ T4687] loop4: p20 start 7995402 is beyond EOD, truncated [ 562.453774][ T4687] loop4: p21 start 7995402 is beyond EOD, truncated [ 562.460495][ T4687] loop4: p22 start 7995402 is beyond EOD, truncated 10:00:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400810000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') [ 562.467402][ T4687] loop4: p23 start 7995402 is beyond EOD, truncated [ 562.474258][ T4687] loop4: p24 start 7995402 is beyond EOD, truncated [ 562.480964][ T4687] loop4: p25 start 7995402 is beyond EOD, truncated [ 562.487809][ T4687] loop4: p26 start 7995402 is beyond EOD, truncated [ 562.494640][ T4687] loop4: p27 start 7995402 is beyond EOD, truncated [ 562.501355][ T4687] loop4: p28 start 7995402 is beyond EOD, truncated [ 562.508266][ T4687] loop4: p29 start 7995402 is beyond EOD, truncated [ 562.515133][ T4687] loop4: p30 start 7995402 is beyond EOD, truncated [ 562.521829][ T4687] loop4: p31 start 7995402 is beyond EOD, truncated [ 562.528735][ T4687] loop4: p32 start 7995402 is beyond EOD, truncated [ 562.535586][ T4687] loop4: p33 start 7995402 is beyond EOD, truncated [ 562.542450][ T4687] loop4: p34 start 7995402 is beyond EOD, truncated [ 562.549167][ T4687] loop4: p35 start 7995402 is beyond EOD, truncated [ 562.556044][ T4687] loop4: p36 start 7995402 is beyond EOD, truncated [ 562.562888][ T4687] loop4: p37 start 7995402 is beyond EOD, truncated [ 562.569591][ T4687] loop4: p38 start 7995402 is beyond EOD, truncated [ 562.576457][ T4687] loop4: p39 start 7995402 is beyond EOD, truncated [ 562.583331][ T4687] loop4: p40 start 7995402 is beyond EOD, truncated [ 562.590051][ T4687] loop4: p41 start 7995402 is beyond EOD, truncated [ 562.596928][ T4687] loop4: p42 start 7995402 is beyond EOD, truncated [ 562.603766][ T4687] loop4: p43 start 7995402 is beyond EOD, truncated [ 562.610486][ T4687] loop4: p44 start 7995402 is beyond EOD, truncated [ 562.617355][ T4687] loop4: p45 start 7995402 is beyond EOD, truncated [ 562.624231][ T4687] loop4: p46 start 7995402 is beyond EOD, truncated [ 562.630949][ T4687] loop4: p47 start 7995402 is beyond EOD, truncated [ 562.637844][ T4687] loop4: p48 start 7995402 is beyond EOD, truncated [ 562.644739][ T4687] loop4: p49 start 7995402 is beyond EOD, truncated [ 562.651459][ T4687] loop4: p50 start 7995402 is beyond EOD, truncated [ 562.658333][ T4687] loop4: p51 start 7995402 is beyond EOD, truncated [ 562.665129][ T4687] loop4: p52 start 7995402 is beyond EOD, truncated [ 562.671842][ T4687] loop4: p53 start 7995402 is beyond EOD, truncated [ 562.678741][ T4687] loop4: p54 start 7995402 is beyond EOD, truncated [ 562.685607][ T4687] loop4: p55 start 7995402 is beyond EOD, truncated [ 562.692491][ T4687] loop4: p56 start 7995402 is beyond EOD, truncated [ 562.699209][ T4687] loop4: p57 start 7995402 is beyond EOD, truncated [ 562.706121][ T4687] loop4: p58 start 7995402 is beyond EOD, truncated [ 562.712999][ T4687] loop4: p59 start 7995402 is beyond EOD, truncated [ 562.719714][ T4687] loop4: p60 start 7995402 is beyond EOD, truncated [ 562.726620][ T4687] loop4: p61 start 7995402 is beyond EOD, truncated [ 562.733589][ T4687] loop4: p62 start 7995402 is beyond EOD, truncated [ 562.740310][ T4687] loop4: p63 start 7995402 is beyond EOD, truncated [ 562.747286][ T4687] loop4: p64 start 7995402 is beyond EOD, truncated [ 562.754206][ T4687] loop4: p65 start 7995402 is beyond EOD, truncated [ 562.760934][ T4687] loop4: p66 start 7995402 is beyond EOD, truncated [ 562.767839][ T4687] loop4: p67 start 7995402 is beyond EOD, truncated [ 562.774681][ T4687] loop4: p68 start 7995402 is beyond EOD, truncated [ 562.781397][ T4687] loop4: p69 start 7995402 is beyond EOD, truncated [ 562.788320][ T4687] loop4: p70 start 7995402 is beyond EOD, truncated [ 562.795165][ T4687] loop4: p71 start 7995402 is beyond EOD, truncated [ 562.801883][ T4687] loop4: p72 start 7995402 is beyond EOD, truncated [ 562.808728][ T4687] loop4: p73 start 7995402 is beyond EOD, truncated [ 562.815560][ T4687] loop4: p74 start 7995402 is beyond EOD, truncated [ 562.822348][ T4687] loop4: p75 start 7995402 is beyond EOD, truncated [ 562.829060][ T4687] loop4: p76 start 7995402 is beyond EOD, truncated [ 562.835907][ T4687] loop4: p77 start 7995402 is beyond EOD, truncated [ 562.842727][ T4687] loop4: p78 start 7995402 is beyond EOD, truncated [ 562.849424][ T4687] loop4: p79 start 7995402 is beyond EOD, truncated [ 562.856469][ T4687] loop4: p80 start 7995402 is beyond EOD, truncated [ 562.863299][ T4687] loop4: p81 start 7995402 is beyond EOD, truncated [ 562.870037][ T4687] loop4: p82 start 7995402 is beyond EOD, truncated [ 562.876869][ T4687] loop4: p83 start 7995402 is beyond EOD, truncated [ 562.883698][ T4687] loop4: p84 start 7995402 is beyond EOD, truncated [ 562.890409][ T4687] loop4: p85 start 7995402 is beyond EOD, truncated [ 562.897265][ T4687] loop4: p86 start 7995402 is beyond EOD, truncated [ 562.904095][ T4687] loop4: p87 start 7995402 is beyond EOD, truncated [ 562.910817][ T4687] loop4: p88 start 7995402 is beyond EOD, truncated [ 562.917653][ T4687] loop4: p89 start 7995402 is beyond EOD, truncated [ 562.924499][ T4687] loop4: p90 start 7995402 is beyond EOD, truncated [ 562.931220][ T4687] loop4: p91 start 7995402 is beyond EOD, truncated [ 562.938104][ T4687] loop4: p92 start 7995402 is beyond EOD, truncated [ 562.944939][ T4687] loop4: p93 start 7995402 is beyond EOD, truncated [ 562.951646][ T4687] loop4: p94 start 7995402 is beyond EOD, truncated [ 562.958488][ T4687] loop4: p95 start 7995402 is beyond EOD, truncated [ 562.965363][ T4687] loop4: p96 start 7995402 is beyond EOD, truncated [ 562.972251][ T4687] loop4: p97 start 7995402 is beyond EOD, truncated [ 562.978983][ T4687] loop4: p98 start 7995402 is beyond EOD, truncated [ 562.985818][ T4687] loop4: p99 start 7995402 is beyond EOD, truncated [ 562.992643][ T4687] loop4: p100 start 7995402 is beyond EOD, truncated [ 562.999443][ T4687] loop4: p101 start 7995402 is beyond EOD, truncated [ 563.006406][ T4687] loop4: p102 start 7995402 is beyond EOD, truncated [ 563.013324][ T4687] loop4: p103 start 7995402 is beyond EOD, truncated [ 563.020128][ T4687] loop4: p104 start 7995402 is beyond EOD, truncated [ 563.027130][ T4687] loop4: p105 start 7995402 is beyond EOD, truncated [ 563.034037][ T4687] loop4: p106 start 7995402 is beyond EOD, truncated [ 563.040850][ T4687] loop4: p107 start 7995402 is beyond EOD, truncated [ 563.047827][ T4687] loop4: p108 start 7995402 is beyond EOD, truncated [ 563.054711][ T4687] loop4: p109 start 7995402 is beyond EOD, truncated [ 563.061500][ T4687] loop4: p110 start 7995402 is beyond EOD, truncated [ 563.068448][ T4687] loop4: p111 start 7995402 is beyond EOD, truncated [ 563.075452][ T4687] loop4: p112 start 7995402 is beyond EOD, truncated [ 563.082373][ T4687] loop4: p113 start 7995402 is beyond EOD, truncated [ 563.089162][ T4687] loop4: p114 start 7995402 is beyond EOD, truncated [ 563.096117][ T4687] loop4: p115 start 7995402 is beyond EOD, truncated [ 563.103042][ T4687] loop4: p116 start 7995402 is beyond EOD, truncated [ 563.109851][ T4687] loop4: p117 start 7995402 is beyond EOD, truncated [ 563.116841][ T4687] loop4: p118 start 7995402 is beyond EOD, truncated [ 563.123805][ T4687] loop4: p119 start 7995402 is beyond EOD, truncated [ 563.130616][ T4687] loop4: p120 start 7995402 is beyond EOD, truncated [ 563.137568][ T4687] loop4: p121 start 7995402 is beyond EOD, truncated [ 563.144555][ T4687] loop4: p122 start 7995402 is beyond EOD, truncated [ 563.151354][ T4687] loop4: p123 start 7995402 is beyond EOD, truncated [ 563.158364][ T4687] loop4: p124 start 7995402 is beyond EOD, truncated [ 563.165341][ T4687] loop4: p125 start 7995402 is beyond EOD, truncated [ 563.172286][ T4687] loop4: p126 start 7995402 is beyond EOD, truncated [ 563.179087][ T4687] loop4: p127 start 7995402 is beyond EOD, truncated [ 563.186063][ T4687] loop4: p128 start 7995402 is beyond EOD, truncated [ 563.193026][ T4687] loop4: p129 start 7995402 is beyond EOD, truncated [ 563.199827][ T4687] loop4: p130 start 7995402 is beyond EOD, truncated [ 563.206800][ T4687] loop4: p131 start 7995402 is beyond EOD, truncated [ 563.213759][ T4687] loop4: p132 start 7995402 is beyond EOD, truncated [ 563.220546][ T4687] loop4: p133 start 7995402 is beyond EOD, truncated [ 563.227524][ T4687] loop4: p134 start 7995402 is beyond EOD, truncated [ 563.234497][ T4687] loop4: p135 start 7995402 is beyond EOD, truncated [ 563.241297][ T4687] loop4: p136 start 7995402 is beyond EOD, truncated [ 563.248269][ T4687] loop4: p137 start 7995402 is beyond EOD, truncated [ 563.255233][ T4687] loop4: p138 start 7995402 is beyond EOD, truncated [ 563.262036][ T4687] loop4: p139 start 7995402 is beyond EOD, truncated [ 563.269010][ T4687] loop4: p140 start 7995402 is beyond EOD, truncated [ 563.275979][ T4687] loop4: p141 start 7995402 is beyond EOD, truncated [ 563.282957][ T4687] loop4: p142 start 7995402 is beyond EOD, truncated [ 563.289750][ T4687] loop4: p143 start 7995402 is beyond EOD, truncated [ 563.296688][ T4687] loop4: p144 start 7995402 is beyond EOD, truncated [ 563.303640][ T4687] loop4: p145 start 7995402 is beyond EOD, truncated [ 563.310452][ T4687] loop4: p146 start 7995402 is beyond EOD, truncated [ 563.317402][ T4687] loop4: p147 start 7995402 is beyond EOD, truncated [ 563.324368][ T4687] loop4: p148 start 7995402 is beyond EOD, truncated [ 563.331165][ T4687] loop4: p149 start 7995402 is beyond EOD, truncated [ 563.338148][ T4687] loop4: p150 start 7995402 is beyond EOD, truncated [ 563.345111][ T4687] loop4: p151 start 7995402 is beyond EOD, truncated [ 563.351917][ T4687] loop4: p152 start 7995402 is beyond EOD, truncated [ 563.358907][ T4687] loop4: p153 start 7995402 is beyond EOD, truncated [ 563.365888][ T4687] loop4: p154 start 7995402 is beyond EOD, truncated [ 563.372844][ T4687] loop4: p155 start 7995402 is beyond EOD, truncated [ 563.379636][ T4687] loop4: p156 start 7995402 is beyond EOD, truncated [ 563.386641][ T4687] loop4: p157 start 7995402 is beyond EOD, truncated [ 563.393614][ T4687] loop4: p158 start 7995402 is beyond EOD, truncated [ 563.400592][ T4687] loop4: p159 start 7995402 is beyond EOD, truncated [ 563.407601][ T4687] loop4: p160 start 7995402 is beyond EOD, truncated [ 563.414594][ T4687] loop4: p161 start 7995402 is beyond EOD, truncated [ 563.421399][ T4687] loop4: p162 start 7995402 is beyond EOD, truncated [ 563.428393][ T4687] loop4: p163 start 7995402 is beyond EOD, truncated [ 563.435384][ T4687] loop4: p164 start 7995402 is beyond EOD, truncated [ 563.442361][ T4687] loop4: p165 start 7995402 is beyond EOD, truncated [ 563.449172][ T4687] loop4: p166 start 7995402 is beyond EOD, truncated [ 563.456146][ T4687] loop4: p167 start 7995402 is beyond EOD, truncated [ 563.463091][ T4687] loop4: p168 start 7995402 is beyond EOD, truncated [ 563.469896][ T4687] loop4: p169 start 7995402 is beyond EOD, truncated [ 563.476994][ T4687] loop4: p170 start 7995402 is beyond EOD, truncated [ 563.483969][ T4687] loop4: p171 start 7995402 is beyond EOD, truncated [ 563.490777][ T4687] loop4: p172 start 7995402 is beyond EOD, truncated [ 563.497768][ T4687] loop4: p173 start 7995402 is beyond EOD, truncated [ 563.504743][ T4687] loop4: p174 start 7995402 is beyond EOD, truncated [ 563.511557][ T4687] loop4: p175 start 7995402 is beyond EOD, truncated [ 563.518536][ T4687] loop4: p176 start 7995402 is beyond EOD, truncated [ 563.525513][ T4687] loop4: p177 start 7995402 is beyond EOD, truncated [ 563.532517][ T4687] loop4: p178 start 7995402 is beyond EOD, truncated [ 563.539324][ T4687] loop4: p179 start 7995402 is beyond EOD, truncated [ 563.546306][ T4687] loop4: p180 start 7995402 is beyond EOD, truncated [ 563.553259][ T4687] loop4: p181 start 7995402 is beyond EOD, truncated [ 563.560053][ T4687] loop4: p182 start 7995402 is beyond EOD, truncated [ 563.567013][ T4687] loop4: p183 start 7995402 is beyond EOD, truncated [ 563.573967][ T4687] loop4: p184 start 7995402 is beyond EOD, truncated [ 563.580765][ T4687] loop4: p185 start 7995402 is beyond EOD, truncated [ 563.587730][ T4687] loop4: p186 start 7995402 is beyond EOD, truncated [ 563.594676][ T4687] loop4: p187 start 7995402 is beyond EOD, truncated [ 563.601470][ T4687] loop4: p188 start 7995402 is beyond EOD, truncated [ 563.608560][ T4687] loop4: p189 start 7995402 is beyond EOD, truncated [ 563.615557][ T4687] loop4: p190 start 7995402 is beyond EOD, truncated [ 563.622538][ T4687] loop4: p191 start 7995402 is beyond EOD, truncated [ 563.629318][ T4687] loop4: p192 start 7995402 is beyond EOD, truncated [ 563.636322][ T4687] loop4: p193 start 7995402 is beyond EOD, truncated [ 563.644779][ T4687] loop4: p194 start 7995402 is beyond EOD, truncated [ 563.651585][ T4687] loop4: p195 start 7995402 is beyond EOD, truncated [ 563.658573][ T4687] loop4: p196 start 7995402 is beyond EOD, truncated [ 563.665549][ T4687] loop4: p197 start 7995402 is beyond EOD, truncated [ 563.672529][ T4687] loop4: p198 start 7995402 is beyond EOD, truncated [ 563.679337][ T4687] loop4: p199 start 7995402 is beyond EOD, truncated [ 563.686332][ T4687] loop4: p200 start 7995402 is beyond EOD, truncated [ 563.693302][ T4687] loop4: p201 start 7995402 is beyond EOD, truncated [ 563.700120][ T4687] loop4: p202 start 7995402 is beyond EOD, truncated [ 563.707105][ T4687] loop4: p203 start 7995402 is beyond EOD, truncated [ 563.714054][ T4687] loop4: p204 start 7995402 is beyond EOD, truncated [ 563.720867][ T4687] loop4: p205 start 7995402 is beyond EOD, truncated [ 563.727864][ T4687] loop4: p206 start 7995402 is beyond EOD, truncated [ 563.734830][ T4687] loop4: p207 start 7995402 is beyond EOD, truncated [ 563.741640][ T4687] loop4: p208 start 7995402 is beyond EOD, truncated [ 563.748626][ T4687] loop4: p209 start 7995402 is beyond EOD, truncated [ 563.755600][ T4687] loop4: p210 start 7995402 is beyond EOD, truncated [ 563.762563][ T4687] loop4: p211 start 7995402 is beyond EOD, truncated [ 563.769366][ T4687] loop4: p212 start 7995402 is beyond EOD, truncated [ 563.776391][ T4687] loop4: p213 start 7995402 is beyond EOD, truncated [ 563.783359][ T4687] loop4: p214 start 7995402 is beyond EOD, truncated [ 563.790180][ T4687] loop4: p215 start 7995402 is beyond EOD, truncated [ 563.797164][ T4687] loop4: p216 start 7995402 is beyond EOD, truncated [ 563.804127][ T4687] loop4: p217 start 7995402 is beyond EOD, truncated [ 563.810929][ T4687] loop4: p218 start 7995402 is beyond EOD, truncated [ 563.817902][ T4687] loop4: p219 start 7995402 is beyond EOD, truncated [ 563.824869][ T4687] loop4: p220 start 7995402 is beyond EOD, truncated [ 563.831666][ T4687] loop4: p221 start 7995402 is beyond EOD, truncated [ 563.838642][ T4687] loop4: p222 start 7995402 is beyond EOD, truncated [ 563.845612][ T4687] loop4: p223 start 7995402 is beyond EOD, truncated [ 563.852585][ T4687] loop4: p224 start 7995402 is beyond EOD, truncated [ 563.859387][ T4687] loop4: p225 start 7995402 is beyond EOD, truncated [ 563.866360][ T4687] loop4: p226 start 7995402 is beyond EOD, truncated [ 563.873316][ T4687] loop4: p227 start 7995402 is beyond EOD, truncated [ 563.878006][ T7] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 563.880106][ T4687] loop4: p228 start 7995402 is beyond EOD, truncated [ 563.880184][ T4687] loop4: p229 start 7995402 is beyond EOD, truncated [ 563.880259][ T4687] loop4: p230 start 7995402 is beyond EOD, truncated [ 563.908326][ T4687] loop4: p231 start 7995402 is beyond EOD, truncated [ 563.915323][ T4687] loop4: p232 start 7995402 is beyond EOD, truncated [ 563.922298][ T4687] loop4: p233 start 7995402 is beyond EOD, truncated [ 563.929100][ T4687] loop4: p234 start 7995402 is beyond EOD, truncated [ 563.936084][ T4687] loop4: p235 start 7995402 is beyond EOD, truncated [ 563.943050][ T4687] loop4: p236 start 7995402 is beyond EOD, truncated [ 563.949879][ T4687] loop4: p237 start 7995402 is beyond EOD, truncated [ 563.956852][ T4687] loop4: p238 start 7995402 is beyond EOD, truncated [ 563.963902][ T4687] loop4: p239 start 7995402 is beyond EOD, truncated [ 563.970706][ T4687] loop4: p240 start 7995402 is beyond EOD, truncated [ 563.977691][ T4687] loop4: p241 start 7995402 is beyond EOD, truncated [ 563.984674][ T4687] loop4: p242 start 7995402 is beyond EOD, truncated [ 563.991485][ T4687] loop4: p243 start 7995402 is beyond EOD, truncated [ 563.998480][ T4687] loop4: p244 start 7995402 is beyond EOD, truncated [ 564.005459][ T4687] loop4: p245 start 7995402 is beyond EOD, truncated [ 564.012418][ T4687] loop4: p246 start 7995402 is beyond EOD, truncated [ 564.019308][ T4687] loop4: p247 start 7995402 is beyond EOD, truncated [ 564.026296][ T4687] loop4: p248 start 7995402 is beyond EOD, truncated [ 564.033255][ T4687] loop4: p249 start 7995402 is beyond EOD, truncated [ 564.040070][ T4687] loop4: p250 start 7995402 is beyond EOD, truncated [ 564.047058][ T4687] loop4: p251 start 7995402 is beyond EOD, truncated [ 564.054013][ T4687] loop4: p252 start 7995402 is beyond EOD, truncated [ 564.060811][ T4687] loop4: p253 start 7995402 is beyond EOD, truncated [ 564.067807][ T4687] loop4: p254 start 7995402 is beyond EOD, truncated [ 564.074777][ T4687] loop4: p255 start 7995402 is beyond EOD, truncated 10:00:13 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x54) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80), 0x400000000000065, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000001600)='veth0_to_hsr\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="53ac6da00d485f8110c917e30ff3798221c0eea9b3fa0888841060e16a646247089f71c2cf347a8f0637a1333b7b8f1579da4b6d8fc0c0e872ed4c64f8f4ccadd4160a65f85a9897180000000000000005d0e28fabe7914fea28ff89121782a842323637e678171ae5a0d51937bbca773dcc23bb2efc21e561e7ec4361b887409835db18ee1f3b5d39ee4660c56d8cf6cbf0495ba91b5d9d8bce964b7c6bc7064d", @ANYRES64, @ANYRES32, @ANYRES32]) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000001c0), &(0x7f0000000300)=0x4) r3 = fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x19, 0x8, 0x0, 0xe8, 0x40800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x5}, 0x88a1, 0x2aaa, 0x4, 0x6, 0x1000f3e6, 0x1, 0x5, 0x0, 0x4}, r3, 0x401, 0xffffffffffffffff, 0x0) 10:00:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}]}, 0x18}}, 0x0) 10:00:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x4}}, 0x1c) 10:00:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 564.122773][ T7] usb 6-1: Using ep0 maxpacket: 16 10:00:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 564.247763][ T7] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 564.256925][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.267432][ T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 564.276920][ T7] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 564.286363][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.373149][T13162] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 10:00:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000680)=""/217, 0xd9}], 0x2}}], 0x1, 0x0, 0x0) [ 564.600018][ T7] usb 6-1: config 0 descriptor?? 10:00:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 10:00:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 564.959866][T13173] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 10:00:14 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 10:00:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 565.346314][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 10:00:16 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400810000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 10:00:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x1) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0x80000000, @loopback, 0x1}, 0x1c) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000180)=0x80, 0x80800) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="62aa5113abb9a1c8b529d11cf7dd367ba11e2ac307180d466897cf4ae410d6df7a2c353fb579c86a39df797a33cda2b918bf8681d386589f12cc7cfa", 0x3c}, {&(0x7f00000006c0)="e16201ca66cadfcf2ba60eaa71093db1e7bc42a7c89a25234d4b9e7264f78f1092f429f897ffc2fe02f64c7eefe85c41ea5a90df71d6954b0b9fc5575617b929e0ca57afed9e4821307fe6e917a427613f8ae49214f1b4a586f5b683fc3dd9ed1e78d72e9f3f8cc1820a4eae210d671576035f633def42a8e3b1b9577669", 0x7e}], 0x2}}, {{&(0x7f0000000600)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authencesn(sha1-ssse3,ecb-twofish-avx),nhpoly1305)\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x807a}}) 10:00:16 executing program 3: syz_mount_image$ext4(&(0x7f0000001740)='ext3\x00', &(0x7f0000001780)='./file1\x00', 0x0, 0x0, 0x0, 0x20800c6, &(0x7f0000001a00)) 10:00:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xa}}, 0x1c) 10:00:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) [ 566.598184][ T7] usb 6-1: USB disconnect, device number 45 [ 566.762814][T13212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 10:00:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 10:00:16 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 10:00:16 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x40080, 0x0) [ 567.212705][ T7] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 567.213166][T13227] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 10:00:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 10:00:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 567.452284][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 567.574804][ T7] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 567.584068][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.594549][ T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 567.604108][ T7] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 567.613617][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.656038][T13236] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 567.817869][ T7] usb 6-1: config 0 descriptor?? [ 568.264597][ T56] Bluetooth: hci4: command 0x0406 tx timeout 10:00:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240081000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 10:00:19 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000100)) 10:00:19 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000003780), 0x440, 0x0) 10:00:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) 10:00:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xf}}, 0x1c) [ 569.891144][ T7] usb 6-1: USB disconnect, device number 46 [ 570.087012][T13268] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 10:00:19 executing program 4: syz_mount_image$iso9660(&(0x7f0000000540), 0x0, 0x0, 0x2, &(0x7f0000000800)=[{&(0x7f0000000680)="7901", 0x2, 0xffffffff}, {&(0x7f00000007c0)="b9", 0x1}], 0x80009, &(0x7f0000000880)={[{@hide}], [{@obj_type={'obj_type', 0x3d, 'user.incfs.id\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x33, 0x34, 0x62, 0x38, 0x39, 0x65], 0x2d, [0x33, 0x65, 0x62, 0x64], 0x2d, [0x36, 0x34, 0x66], 0x2d, [0x32, 0x66, 0x36, 0x34], 0x2d, [0x63, 0x62, 0x30, 0x32, 0x33, 0x31, 0x66, 0x62]}}}, {@smackfsdef={'smackfsdef', 0x3d, '{]:,\x93'}}]}) 10:00:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x78, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x78}}, 0x0) 10:00:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {&(0x7f0000000680)=""/217, 0xd9}], 0x3, &(0x7f0000000ac0)=""/241, 0xf1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000020, &(0x7f0000005580)={0x77359400}) [ 570.642803][T13282] loop4: detected capacity change from 0 to 264192 [ 570.654134][ T4709] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 570.727567][T13282] loop4: detected capacity change from 0 to 264192 [ 570.892747][ T4709] usb 6-1: Using ep0 maxpacket: 16 10:00:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f00000014c0)={0x4, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) [ 571.012442][ T4709] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 571.021406][ T4709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.031949][ T4709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 571.041592][ T4709] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 571.055534][ T4709] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 571.065337][ T4709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:00:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setfsgid(0x0) [ 571.311432][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.318060][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.377793][ T4709] usb 6-1: config 0 descriptor?? [ 571.432483][ T4709] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 10:00:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240081000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 10:00:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x10}}, 0x1c) 10:00:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003680)={&(0x7f00000034c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000003580)=""/219, 0x32, 0xdb, 0x1}, 0x20) 10:00:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41008, 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582b, &(0x7f0000000040)) close(r0) close(r1) 10:00:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41008, 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582b, &(0x7f0000000040)) close(r0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x15, 0x0, 0x0, 0x0, 0x40, 0x4416, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_bp={0x0}, 0x4000, 0x5b14, 0x100, 0x9, 0x0, 0x461, 0xfffc, 0x0, 0xffffffff}, 0x0, 0x4, r2, 0x2) close(r1) 10:00:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 573.363259][ T56] usb 6-1: USB disconnect, device number 47 10:00:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001340)={0x16, 0x0, 0x400000, 0x74, 0x0, 0x1}, 0x40) [ 574.102759][ T56] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 574.357686][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 574.503068][ T56] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 574.512780][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.523275][ T56] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 574.532616][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 574.545869][ T56] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 574.555155][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:00:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) [ 574.860523][ T56] usb 6-1: config 0 descriptor?? 10:00:24 executing program 4: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 10:00:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x44}}, 0x1c) [ 574.925511][ T56] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 10:00:24 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)='R', 0x1}], 0x1}, 0x4084) 10:00:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) 10:00:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240081000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x1, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x2, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "0200"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x0, "f38a77d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 10:00:26 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 10:00:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0xc) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3}, 0x8) 10:00:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfc}}, 0x1c) 10:00:26 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) io_submit(0x0, 0x1, &(0x7f0000001c40)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 576.938749][ T56] usb 6-1: USB disconnect, device number 48 10:00:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000001740)='net/if_inet6\x00') write$tcp_congestion(r0, 0x0, 0x0) [ 577.612405][ T4709] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 577.852508][ T4709] usb 6-1: Using ep0 maxpacket: 16 [ 577.972974][ T4709] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 577.981903][ T4709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.992403][ T4709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 578.001596][ T4709] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 578.015081][ T4709] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.025387][ T4709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.257406][ T4709] usb 6-1: config 0 descriptor?? [ 578.308539][ T4709] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 580.342544][ T56] usb 6-1: USB disconnect, device number 49 [ 582.307828][ T2016] =====================================================