[ OK ] Found device /dev/ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ *** ] A start job is running for OpenBSD …Shell server (1min 27s / 2min 46s)[ *** ] A start job is running for OpenBSD …Shell server (1min 28s / 2min 46s)[ ***] A start job is running for OpenBSD …Shell server (1min 28s / 2min 46s)[ **] A start job is running for OpenBSD …Shell server (1min 29s / 2min 46s)[ *] A start job is running for OpenBSD …Shell server (1min 30s / 2min 46s)[ **] A start job is running for OpenBSD … Shell server (1min 32s / 3min 1s)[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.11' (ECDSA) to the list of known hosts. syzkaller login: [ 156.169352][ T8223] IPVS: ftp: loaded support on port[0] = 21 [ 156.356552][ T8223] chnl_net:caif_netlink_parms(): no params data found [ 156.450486][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.457691][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.467408][ T8223] device bridge_slave_0 entered promiscuous mode [ 156.478149][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.485369][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.495161][ T8223] device bridge_slave_1 entered promiscuous mode [ 156.532650][ T8223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.546476][ T8223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.583898][ T8223] team0: Port device team_slave_0 added [ 156.593215][ T8223] team0: Port device team_slave_1 added [ 156.623736][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.630868][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.657153][ T8223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.671212][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.678426][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.704725][ T8223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.750026][ T8223] device hsr_slave_0 entered promiscuous mode [ 156.758365][ T8223] device hsr_slave_1 entered promiscuous mode [ 156.949932][ T8223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.964983][ T8223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.984407][ T8223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.003740][ T8223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.093217][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.100485][ T8223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.108406][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.115648][ T8223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.196955][ T8223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.220015][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.231364][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.240713][ T4675] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.252681][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 157.271380][ T8223] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.289316][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.299074][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.306411][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.324618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.334479][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.344013][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.351634][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.367075][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.390710][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.400784][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.411731][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.422739][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.437158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.447827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.468355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.478721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.494984][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.504240][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.520669][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.552548][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.561069][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.582783][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.617703][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.627759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.663310][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.673299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.687398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.696989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.711514][ T8223] device veth0_vlan entered promiscuous mode [ 157.733286][ T8223] device veth1_vlan entered promiscuous mode [ 157.837140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.847047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.857518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.868268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.890999][ T8223] device veth0_macvtap entered promiscuous mode [ 157.911060][ T8223] device veth1_macvtap entered promiscuous mode [ 157.965468][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.973773][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.984288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.993882][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.004187][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.026374][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.034251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.045041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.063032][ T8223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.072215][ T8223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.081312][ T8223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.090396][ T8223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 158.301384][ C1] ===================================================== [ 158.307981][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 158.310698][ C1] CPU: 1 PID: 8436 Comm: syz-executor977 Not tainted 5.12.0-rc6-syzkaller #0 [ 158.323736][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.333559][ C1] Call Trace: [ 158.337221][ C1] [ 158.339674][ C1] dump_stack+0x24c/0x2e0 [ 158.344543][ C1] kmsan_report+0xfb/0x1e0 [ 158.349129][ C1] __msan_warning+0x5c/0xa0 [ 158.353188][ C1] ip_rcv_core+0xf4c/0x1480 [ 158.356851][ C1] ip_rcv+0xc7/0x820 [ 158.361518][ C1] ? kmsan_get_metadata+0x116/0x180 [ 158.366398][ C1] __netif_receive_skb+0x1ec/0x640 [ 158.371497][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 158.378098][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 158.383701][ C1] process_backlog+0x517/0xbd0 [ 158.388557][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 158.393520][ C1] __napi_poll+0x13e/0xca0 [ 158.398163][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 158.404477][ C1] net_rx_action+0x726/0x14a0 [ 158.408383][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 158.414493][ C1] ? net_tx_action+0xd30/0xd30 [ 158.419494][ C1] __do_softirq+0x1b9/0x715 [ 158.424390][ C1] ? idle_cpu+0x9a/0x1d0 [ 158.428262][ C1] ? __irq_exit_rcu+0x83/0x280 [ 158.433168][ C1] do_softirq+0x123/0x1c0 [ 158.436847][ C1] [ 158.440833][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 158.445718][ C1] local_bh_enable+0x36/0x40 [ 158.450013][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 158.454929][ C1] dev_queue_xmit+0x4b/0x60 [ 158.459815][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 158.464717][ C1] packet_sendmsg+0x86ee/0x99d0 [ 158.469636][ C1] ? kmsan_get_metadata+0x116/0x180 [ 158.474549][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 158.478798][ C1] ? process_slab+0x13a8/0x1b70 [ 158.485338][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 158.491463][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 158.497555][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 158.502080][ C1] ? packet_getsockopt+0x1120/0x1120 [ 158.508119][ C1] __sys_sendmsg+0x714/0x830 [ 158.512080][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 158.518270][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 158.524373][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 158.529963][ C1] ? kmsan_get_metadata+0x116/0x180 [ 158.534855][ C1] __se_sys_sendmsg+0x97/0xb0 [ 158.539714][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 158.544691][ C1] do_syscall_64+0x9f/0x140 [ 158.549650][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 158.555749][ C1] RIP: 0033:0x443e09 [ 158.558585][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 158.578686][ C1] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.588115][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 158.595862][ C1] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 158.607287][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 158.614602][ C1] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 00007fff79ed7ff0 [ 158.623189][ C1] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 0000000000000003 [ 158.630769][ C1] [ 158.633220][ C1] Uninit was stored to memory at: [ 158.636891][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 158.644495][ C1] __msan_chain_origin+0x54/0xa0 [ 158.649760][ C1] iptunnel_xmit+0xbd6/0xf20 [ 158.653427][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 158.659070][ C1] geneve_xmit+0x2139/0x3c40 [ 158.663943][ C1] xmit_one+0x2b6/0x760 [ 158.668236][ C1] __dev_queue_xmit+0x3432/0x4600 [ 158.672522][ C1] dev_queue_xmit+0x4b/0x60 [ 158.677357][ C1] packet_sendmsg+0x86ee/0x99d0 [ 158.682230][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 158.687100][ C1] __sys_sendmsg+0x714/0x830 [ 158.692081][ C1] __se_sys_sendmsg+0x97/0xb0 [ 158.695733][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 158.700713][ C1] do_syscall_64+0x9f/0x140 [ 158.705581][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 158.711121][ C1] [ 158.713546][ C1] Uninit was created at: [ 158.718130][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 158.723249][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 158.728392][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 158.734483][ C1] __alloc_skb+0x4dd/0xe90 [ 158.738263][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 158.744422][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 158.749479][ C1] packet_sendmsg+0x6a12/0x99d0 [ 158.754356][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 158.759354][ C1] __sys_sendmsg+0x714/0x830 [ 158.763015][ C1] __se_sys_sendmsg+0x97/0xb0 [ 158.768221][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 158.772786][ C1] do_syscall_64+0x9f/0x140 [ 158.778046][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 158.783736][ C1] ===================================================== [ 158.790522][ C1] Disabling lock debugging due to kernel taint [ 158.797256][ C1] ===================================================== [ 158.804263][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 158.807208][ C1] CPU: 1 PID: 8436 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 158.818073][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.818073][ C1] Call Trace: [ 158.818073][ C1] [ 158.818073][ C1] dump_stack+0x24c/0x2e0 [ 158.818073][ C1] kmsan_report+0xfb/0x1e0 [ 158.818073][ C1] __msan_warning+0x5c/0xa0 [ 158.848117][ C1] ip_rcv_core+0xf5d/0x1480 [ 158.848117][ C1] ip_rcv+0xc7/0x820 [ 158.848117][ C1] ? kmsan_get_metadata+0x116/0x180 [ 158.848117][ C1] __netif_receive_skb+0x1ec/0x640 [ 158.848117][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 158.848117][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 158.878172][ C1] process_backlog+0x517/0xbd0 [ 158.878172][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 158.878172][ C1] __napi_poll+0x13e/0xca0 [ 158.878172][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 158.878172][ C1] net_rx_action+0x726/0x14a0 [ 158.878172][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 158.908102][ C1] ? net_tx_action+0xd30/0xd30 [ 158.908102][ C1] __do_softirq+0x1b9/0x715 [ 158.908102][ C1] ? idle_cpu+0x9a/0x1d0 [ 158.908102][ C1] ? __irq_exit_rcu+0x83/0x280 [ 158.908102][ C1] do_softirq+0x123/0x1c0 [ 158.908102][ C1] [ 158.938056][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 158.938056][ C1] local_bh_enable+0x36/0x40 [ 158.938056][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 158.952628][ C1] dev_queue_xmit+0x4b/0x60 [ 158.956314][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 158.958600][ C1] packet_sendmsg+0x86ee/0x99d0 [ 158.967232][ C1] ? kmsan_get_metadata+0x116/0x180 [ 158.972211][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 158.978305][ C1] ? process_slab+0x13a8/0x1b70 [ 158.983188][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 158.988283][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 158.994385][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 158.999373][ C1] ? packet_getsockopt+0x1120/0x1120 [ 159.005500][ C1] __sys_sendmsg+0x714/0x830 [ 159.010377][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 159.015271][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 159.021352][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 159.028245][ C1] ? kmsan_get_metadata+0x116/0x180 [ 159.032331][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.037219][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.039005][ C1] do_syscall_64+0x9f/0x140 [ 159.046421][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.052573][ C1] RIP: 0033:0x443e09 [ 159.056237][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 159.075799][ C1] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.084399][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 159.093182][ C1] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 159.101043][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 159.108853][ C1] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 00007fff79ed7ff0 [ 159.117573][ C1] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 0000000000000003 [ 159.119401][ C1] [ 159.119401][ C1] Uninit was stored to memory at: [ 159.132025][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 159.138301][ C1] __msan_chain_origin+0x54/0xa0 [ 159.143244][ C1] iptunnel_xmit+0xbd6/0xf20 [ 159.148777][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 159.153340][ C1] geneve_xmit+0x2139/0x3c40 [ 159.158362][ C1] xmit_one+0x2b6/0x760 [ 159.162028][ C1] __dev_queue_xmit+0x3432/0x4600 [ 159.166903][ C1] dev_queue_xmit+0x4b/0x60 [ 159.171988][ C1] packet_sendmsg+0x86ee/0x99d0 [ 159.176915][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 159.181911][ C1] __sys_sendmsg+0x714/0x830 [ 159.186824][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.192417][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.197361][ C1] do_syscall_64+0x9f/0x140 [ 159.201740][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.207937][ C1] [ 159.210373][ C1] Uninit was created at: [ 159.214144][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 159.220294][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 159.223963][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 159.230146][ C1] __alloc_skb+0x4dd/0xe90 [ 159.235031][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 159.241205][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 159.246094][ C1] packet_sendmsg+0x6a12/0x99d0 [ 159.250964][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 159.255863][ C1] __sys_sendmsg+0x714/0x830 [ 159.260762][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.265711][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.269629][ C1] do_syscall_64+0x9f/0x140 [ 159.274563][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.278809][ C1] ===================================================== [ 159.288808][ C1] ===================================================== [ 159.295831][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 159.298754][ C1] CPU: 1 PID: 8436 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 159.308138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.308138][ C1] Call Trace: [ 159.308138][ C1] [ 159.308138][ C1] dump_stack+0x24c/0x2e0 [ 159.308138][ C1] kmsan_report+0xfb/0x1e0 [ 159.338093][ C1] __msan_warning+0x5c/0xa0 [ 159.338093][ C1] ip_rcv_core+0x1068/0x1480 [ 159.338093][ C1] ip_rcv+0xc7/0x820 [ 159.338093][ C1] ? kmsan_get_metadata+0x116/0x180 [ 159.338093][ C1] __netif_receive_skb+0x1ec/0x640 [ 159.338093][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 159.338093][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 159.369480][ C1] process_backlog+0x517/0xbd0 [ 159.369480][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 159.369480][ C1] __napi_poll+0x13e/0xca0 [ 159.369480][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 159.369480][ C1] net_rx_action+0x726/0x14a0 [ 159.398065][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 159.398065][ C1] ? net_tx_action+0xd30/0xd30 [ 159.409547][ C1] __do_softirq+0x1b9/0x715 [ 159.414436][ C1] ? idle_cpu+0x9a/0x1d0 [ 159.419404][ C1] ? __irq_exit_rcu+0x83/0x280 [ 159.424294][ C1] do_softirq+0x123/0x1c0 [ 159.428314][ C1] [ 159.431626][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 159.436648][ C1] local_bh_enable+0x36/0x40 [ 159.438756][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 159.445950][ C1] dev_queue_xmit+0x4b/0x60 [ 159.450910][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 159.455791][ C1] packet_sendmsg+0x86ee/0x99d0 [ 159.462037][ C1] ? kmsan_get_metadata+0x116/0x180 [ 159.468132][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 159.473296][ C1] ? process_slab+0x13a8/0x1b70 [ 159.478273][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 159.484377][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 159.489488][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 159.494376][ C1] ? packet_getsockopt+0x1120/0x1120 [ 159.500607][ C1] __sys_sendmsg+0x714/0x830 [ 159.504292][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 159.510398][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 159.516497][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 159.518150][ C1] ? kmsan_get_metadata+0x116/0x180 [ 159.528257][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.532478][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.537346][ C1] do_syscall_64+0x9f/0x140 [ 159.542354][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.548259][ C1] RIP: 0033:0x443e09 [ 159.552166][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 159.571962][ C1] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.580644][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 159.588343][ C1] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 159.595672][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 159.604526][ C1] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 00007fff79ed7ff0 [ 159.612759][ C1] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 0000000000000003 [ 159.620116][ C1] [ 159.622557][ C1] Uninit was stored to memory at: [ 159.628257][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 159.633646][ C1] __msan_chain_origin+0x54/0xa0 [ 159.638726][ C1] __ip_local_out+0x479/0x840 [ 159.643658][ C1] ip_local_out+0xa1/0x1e0 [ 159.648094][ C1] iptunnel_xmit+0x931/0xf20 [ 159.652215][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 159.657130][ C1] geneve_xmit+0x2139/0x3c40 [ 159.662042][ C1] xmit_one+0x2b6/0x760 [ 159.665765][ C1] __dev_queue_xmit+0x3432/0x4600 [ 159.670901][ C1] dev_queue_xmit+0x4b/0x60 [ 159.675805][ C1] packet_sendmsg+0x86ee/0x99d0 [ 159.680395][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 159.685891][ C1] __sys_sendmsg+0x714/0x830 [ 159.689667][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.694547][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.696967][ C1] do_syscall_64+0x9f/0x140 [ 159.704545][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.709613][ C1] [ 159.712051][ C1] Uninit was stored to memory at: [ 159.718279][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 159.723156][ C1] __msan_chain_origin+0x54/0xa0 [ 159.728257][ C1] iptunnel_xmit+0xbd6/0xf20 [ 159.733170][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 159.738144][ C1] geneve_xmit+0x2139/0x3c40 [ 159.743038][ C1] xmit_one+0x2b6/0x760 [ 159.746685][ C1] __dev_queue_xmit+0x3432/0x4600 [ 159.752781][ C1] dev_queue_xmit+0x4b/0x60 [ 159.756442][ C1] packet_sendmsg+0x86ee/0x99d0 [ 159.761742][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 159.766624][ C1] __sys_sendmsg+0x714/0x830 [ 159.771510][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.776429][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.781323][ C1] do_syscall_64+0x9f/0x140 [ 159.785094][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.791302][ C1] [ 159.793740][ C1] Uninit was created at: [ 159.798063][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 159.803558][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 159.808490][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 159.814619][ C1] __alloc_skb+0x4dd/0xe90 [ 159.819532][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 159.824409][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 159.829514][ C1] packet_sendmsg+0x6a12/0x99d0 [ 159.834401][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 159.836838][ C1] __sys_sendmsg+0x714/0x830 [ 159.843574][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.848533][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.853416][ C1] do_syscall_64+0x9f/0x140 [ 159.858310][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.863200][ C1] ===================================================== executing program [ 159.932610][ C1] ===================================================== [ 159.937979][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 159.937979][ C1] CPU: 1 PID: 8438 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 159.937979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.937979][ C1] Call Trace: [ 159.937979][ C1] [ 159.937979][ C1] dump_stack+0x24c/0x2e0 [ 159.937979][ C1] kmsan_report+0xfb/0x1e0 [ 159.937979][ C1] __msan_warning+0x5c/0xa0 [ 159.937979][ C1] ip_rcv_core+0xf4c/0x1480 [ 159.937979][ C1] ip_rcv+0xc7/0x820 [ 159.937979][ C1] ? kmsan_get_metadata+0x116/0x180 [ 159.937979][ C1] __netif_receive_skb+0x1ec/0x640 [ 159.937979][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 159.937979][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 159.937979][ C1] process_backlog+0x517/0xbd0 [ 159.937979][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 159.937979][ C1] __napi_poll+0x13e/0xca0 [ 159.937979][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 159.937979][ C1] net_rx_action+0x726/0x14a0 [ 159.937979][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 159.937979][ C1] ? net_tx_action+0xd30/0xd30 [ 159.937979][ C1] __do_softirq+0x1b9/0x715 [ 159.937979][ C1] ? idle_cpu+0x9a/0x1d0 [ 159.937979][ C1] ? __irq_exit_rcu+0x83/0x280 [ 159.937979][ C1] do_softirq+0x123/0x1c0 [ 159.937979][ C1] [ 159.937979][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 159.937979][ C1] local_bh_enable+0x36/0x40 [ 159.937979][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 159.937979][ C1] dev_queue_xmit+0x4b/0x60 [ 159.937979][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 159.937979][ C1] packet_sendmsg+0x86ee/0x99d0 [ 159.937979][ C1] ? kmsan_get_metadata+0x116/0x180 [ 159.937979][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 159.937979][ C1] ? process_slab+0x13a8/0x1b70 [ 159.937979][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 159.937979][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 159.937979][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 159.937979][ C1] ? packet_getsockopt+0x1120/0x1120 [ 159.937979][ C1] __sys_sendmsg+0x714/0x830 [ 159.937979][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 159.937979][ C1] ? up_read+0x40/0x2b0 [ 159.937979][ C1] ? kmsan_get_metadata+0x116/0x180 [ 159.937979][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 159.937979][ C1] ? kmsan_get_metadata+0x116/0x180 [ 159.937979][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.937979][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.937979][ C1] do_syscall_64+0x9f/0x140 [ 159.937979][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.937979][ C1] RIP: 0033:0x443e09 [ 159.937979][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 159.937979][ C1] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.937979][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 159.937979][ C1] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 159.937979][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 159.937979][ C1] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000026a55 [ 159.937979][ C1] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 159.937979][ C1] [ 159.937979][ C1] Uninit was stored to memory at: [ 159.937979][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 159.937979][ C1] __msan_chain_origin+0x54/0xa0 [ 159.937979][ C1] iptunnel_xmit+0xbd6/0xf20 [ 159.937979][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 159.937979][ C1] geneve_xmit+0x2139/0x3c40 [ 159.937979][ C1] xmit_one+0x2b6/0x760 [ 159.937979][ C1] __dev_queue_xmit+0x3432/0x4600 [ 159.937979][ C1] dev_queue_xmit+0x4b/0x60 [ 159.937979][ C1] packet_sendmsg+0x86ee/0x99d0 [ 159.937979][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 159.937979][ C1] __sys_sendmsg+0x714/0x830 [ 159.937979][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.937979][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.937979][ C1] do_syscall_64+0x9f/0x140 [ 159.937979][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.937979][ C1] [ 159.937979][ C1] Uninit was created at: [ 159.937979][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 159.937979][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 159.937979][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 159.937979][ C1] __alloc_skb+0x4dd/0xe90 [ 159.937979][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 159.937979][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 159.937979][ C1] packet_sendmsg+0x6a12/0x99d0 [ 159.937979][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 159.937979][ C1] __sys_sendmsg+0x714/0x830 [ 159.937979][ C1] __se_sys_sendmsg+0x97/0xb0 [ 159.937979][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 159.937979][ C1] do_syscall_64+0x9f/0x140 [ 159.937979][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 159.937979][ C1] ===================================================== [ 160.457217][ C1] ===================================================== [ 160.464173][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 160.467148][ C1] CPU: 1 PID: 8438 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 160.467148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.467148][ C1] Call Trace: [ 160.467148][ C1] [ 160.467148][ C1] dump_stack+0x24c/0x2e0 [ 160.467148][ C1] kmsan_report+0xfb/0x1e0 [ 160.467148][ C1] __msan_warning+0x5c/0xa0 [ 160.467148][ C1] ip_rcv_core+0xf5d/0x1480 [ 160.467148][ C1] ip_rcv+0xc7/0x820 [ 160.467148][ C1] ? kmsan_get_metadata+0x116/0x180 [ 160.467148][ C1] __netif_receive_skb+0x1ec/0x640 [ 160.467148][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 160.467148][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 160.467148][ C1] process_backlog+0x517/0xbd0 [ 160.467148][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 160.467148][ C1] __napi_poll+0x13e/0xca0 [ 160.467148][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 160.467148][ C1] net_rx_action+0x726/0x14a0 [ 160.467148][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 160.467148][ C1] ? net_tx_action+0xd30/0xd30 [ 160.467148][ C1] __do_softirq+0x1b9/0x715 [ 160.467148][ C1] ? idle_cpu+0x9a/0x1d0 [ 160.467148][ C1] ? __irq_exit_rcu+0x83/0x280 [ 160.467148][ C1] do_softirq+0x123/0x1c0 [ 160.467148][ C1] [ 160.467148][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 160.467148][ C1] local_bh_enable+0x36/0x40 [ 160.467148][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 160.467148][ C1] dev_queue_xmit+0x4b/0x60 [ 160.467148][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 160.467148][ C1] packet_sendmsg+0x86ee/0x99d0 [ 160.467148][ C1] ? kmsan_get_metadata+0x116/0x180 [ 160.467148][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 160.467148][ C1] ? process_slab+0x13a8/0x1b70 [ 160.467148][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 160.467148][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 160.467148][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 160.467148][ C1] ? packet_getsockopt+0x1120/0x1120 [ 160.467148][ C1] __sys_sendmsg+0x714/0x830 [ 160.467148][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 160.467148][ C1] ? up_read+0x40/0x2b0 [ 160.467148][ C1] ? kmsan_get_metadata+0x116/0x180 [ 160.467148][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 160.467148][ C1] ? kmsan_get_metadata+0x116/0x180 [ 160.467148][ C1] __se_sys_sendmsg+0x97/0xb0 [ 160.467148][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 160.467148][ C1] do_syscall_64+0x9f/0x140 [ 160.467148][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 160.467148][ C1] RIP: 0033:0x443e09 [ 160.467148][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 160.467148][ C1] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.467148][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 160.467148][ C1] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 160.467148][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 160.467148][ C1] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000026a55 [ 160.467148][ C1] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 160.467148][ C1] [ 160.467148][ C1] Uninit was stored to memory at: [ 160.467148][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 160.467148][ C1] __msan_chain_origin+0x54/0xa0 [ 160.467148][ C1] iptunnel_xmit+0xbd6/0xf20 [ 160.467148][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 160.467148][ C1] geneve_xmit+0x2139/0x3c40 [ 160.467148][ C1] xmit_one+0x2b6/0x760 [ 160.467148][ C1] __dev_queue_xmit+0x3432/0x4600 [ 160.467148][ C1] dev_queue_xmit+0x4b/0x60 [ 160.467148][ C1] packet_sendmsg+0x86ee/0x99d0 [ 160.467148][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 160.467148][ C1] __sys_sendmsg+0x714/0x830 [ 160.467148][ C1] __se_sys_sendmsg+0x97/0xb0 [ 160.467148][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 160.467148][ C1] do_syscall_64+0x9f/0x140 [ 160.467148][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 160.467148][ C1] [ 160.467148][ C1] Uninit was created at: [ 160.467148][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 160.467148][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 160.467148][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 160.467148][ C1] __alloc_skb+0x4dd/0xe90 [ 160.467148][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 160.467148][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 160.467148][ C1] packet_sendmsg+0x6a12/0x99d0 [ 160.467148][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 160.467148][ C1] __sys_sendmsg+0x714/0x830 [ 160.467148][ C1] __se_sys_sendmsg+0x97/0xb0 [ 160.467148][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 160.467148][ C1] do_syscall_64+0x9f/0x140 [ 160.467148][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 160.467148][ C1] ===================================================== [ 160.948254][ C1] ===================================================== [ 160.955205][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 160.958191][ C1] CPU: 1 PID: 8438 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 160.958191][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.958191][ C1] Call Trace: [ 160.958191][ C1] [ 160.958191][ C1] dump_stack+0x24c/0x2e0 [ 160.958191][ C1] kmsan_report+0xfb/0x1e0 [ 160.958191][ C1] __msan_warning+0x5c/0xa0 [ 160.958191][ C1] ip_rcv_core+0x1068/0x1480 [ 160.958191][ C1] ip_rcv+0xc7/0x820 [ 160.958191][ C1] ? kmsan_get_metadata+0x116/0x180 [ 160.958191][ C1] __netif_receive_skb+0x1ec/0x640 [ 160.958191][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 160.958191][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 160.958191][ C1] process_backlog+0x517/0xbd0 [ 160.958191][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 160.958191][ C1] __napi_poll+0x13e/0xca0 [ 160.958191][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 160.958191][ C1] net_rx_action+0x726/0x14a0 [ 160.958191][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 160.958191][ C1] ? net_tx_action+0xd30/0xd30 [ 160.958191][ C1] __do_softirq+0x1b9/0x715 [ 160.958191][ C1] ? idle_cpu+0x9a/0x1d0 [ 160.958191][ C1] ? __irq_exit_rcu+0x83/0x280 [ 160.958191][ C1] do_softirq+0x123/0x1c0 [ 160.958191][ C1] [ 160.958191][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 160.958191][ C1] local_bh_enable+0x36/0x40 [ 160.958191][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 160.958191][ C1] dev_queue_xmit+0x4b/0x60 [ 160.958191][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 160.958191][ C1] packet_sendmsg+0x86ee/0x99d0 [ 160.958191][ C1] ? kmsan_get_metadata+0x116/0x180 [ 160.958191][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 160.958191][ C1] ? process_slab+0x13a8/0x1b70 [ 160.958191][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 160.958191][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 160.958191][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 160.958191][ C1] ? packet_getsockopt+0x1120/0x1120 [ 160.958191][ C1] __sys_sendmsg+0x714/0x830 [ 160.958191][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 160.958191][ C1] ? up_read+0x40/0x2b0 [ 160.958191][ C1] ? kmsan_get_metadata+0x116/0x180 [ 160.958191][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 160.958191][ C1] ? kmsan_get_metadata+0x116/0x180 [ 160.958191][ C1] __se_sys_sendmsg+0x97/0xb0 [ 160.958191][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 160.958191][ C1] do_syscall_64+0x9f/0x140 [ 160.958191][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 160.958191][ C1] RIP: 0033:0x443e09 [ 160.958191][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 160.958191][ C1] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.958191][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 160.958191][ C1] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 160.958191][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 160.958191][ C1] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000026a55 [ 160.958191][ C1] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 160.958191][ C1] [ 160.958191][ C1] Uninit was stored to memory at: [ 160.958191][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 160.958191][ C1] __msan_chain_origin+0x54/0xa0 [ 160.958191][ C1] __ip_local_out+0x479/0x840 [ 160.958191][ C1] ip_local_out+0xa1/0x1e0 [ 160.958191][ C1] iptunnel_xmit+0x931/0xf20 [ 160.958191][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 160.958191][ C1] geneve_xmit+0x2139/0x3c40 [ 160.958191][ C1] xmit_one+0x2b6/0x760 [ 160.958191][ C1] __dev_queue_xmit+0x3432/0x4600 [ 160.958191][ C1] dev_queue_xmit+0x4b/0x60 [ 160.958191][ C1] packet_sendmsg+0x86ee/0x99d0 [ 160.958191][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 160.958191][ C1] __sys_sendmsg+0x714/0x830 [ 160.958191][ C1] __se_sys_sendmsg+0x97/0xb0 [ 160.958191][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 160.958191][ C1] do_syscall_64+0x9f/0x140 [ 160.958191][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 160.958191][ C1] [ 160.958191][ C1] Uninit was stored to memory at: [ 160.958191][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 160.958191][ C1] __msan_chain_origin+0x54/0xa0 [ 160.958191][ C1] iptunnel_xmit+0xbd6/0xf20 [ 160.958191][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 160.958191][ C1] geneve_xmit+0x2139/0x3c40 [ 160.958191][ C1] xmit_one+0x2b6/0x760 [ 160.958191][ C1] __dev_queue_xmit+0x3432/0x4600 [ 160.958191][ C1] dev_queue_xmit+0x4b/0x60 [ 160.958191][ C1] packet_sendmsg+0x86ee/0x99d0 [ 160.958191][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 160.958191][ C1] __sys_sendmsg+0x714/0x830 [ 160.958191][ C1] __se_sys_sendmsg+0x97/0xb0 [ 160.958191][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 160.958191][ C1] do_syscall_64+0x9f/0x140 [ 160.958191][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 160.958191][ C1] [ 160.958191][ C1] Uninit was created at: [ 160.958191][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 160.958191][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 160.958191][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 160.958191][ C1] __alloc_skb+0x4dd/0xe90 [ 160.958191][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 160.958191][ C1] sock_alloc_send_pskb+0xdc1/0xf90 executing program [ 160.958191][ C1] packet_sendmsg+0x6a12/0x99d0 [ 160.958191][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 160.958191][ C1] __sys_sendmsg+0x714/0x830 [ 160.958191][ C1] __se_sys_sendmsg+0x97/0xb0 [ 160.958191][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 160.958191][ C1] do_syscall_64+0x9f/0x140 [ 160.958191][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 160.958191][ C1] ===================================================== [ 161.574874][ C0] ===================================================== [ 161.577968][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 161.577968][ C0] CPU: 0 PID: 8439 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 161.577968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.577968][ C0] Call Trace: [ 161.577968][ C0] [ 161.577968][ C0] dump_stack+0x24c/0x2e0 [ 161.577968][ C0] kmsan_report+0xfb/0x1e0 [ 161.577968][ C0] __msan_warning+0x5c/0xa0 [ 161.577968][ C0] ip_rcv_core+0xf4c/0x1480 [ 161.577968][ C0] ip_rcv+0xc7/0x820 [ 161.577968][ C0] ? kmsan_get_metadata+0x116/0x180 [ 161.640965][ C0] __netif_receive_skb+0x1ec/0x640 [ 161.640965][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 161.640965][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 161.640965][ C0] process_backlog+0x517/0xbd0 [ 161.640965][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 161.640965][ C0] __napi_poll+0x13e/0xca0 [ 161.640965][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 161.640965][ C0] net_rx_action+0x726/0x14a0 [ 161.640965][ C0] ? net_tx_action+0xd30/0xd30 [ 161.640965][ C0] __do_softirq+0x1b9/0x715 [ 161.640965][ C0] ? idle_cpu+0x9a/0x1d0 [ 161.640965][ C0] ? __irq_exit_rcu+0x83/0x280 [ 161.640965][ C0] do_softirq+0x123/0x1c0 [ 161.640965][ C0] [ 161.640965][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 161.640965][ C0] local_bh_enable+0x36/0x40 [ 161.640965][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 161.640965][ C0] dev_queue_xmit+0x4b/0x60 [ 161.640965][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 161.640965][ C0] packet_sendmsg+0x86ee/0x99d0 [ 161.640965][ C0] ? kmsan_get_metadata+0x116/0x180 [ 161.640965][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 161.640965][ C0] ? process_slab+0x13a8/0x1b70 [ 161.640965][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 161.640965][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 161.640965][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 161.640965][ C0] ? packet_getsockopt+0x1120/0x1120 [ 161.640965][ C0] __sys_sendmsg+0x714/0x830 [ 161.640965][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 161.640965][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 161.640965][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 161.640965][ C0] ? kmsan_get_metadata+0x116/0x180 [ 161.640965][ C0] __se_sys_sendmsg+0x97/0xb0 [ 161.640965][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 161.640965][ C0] do_syscall_64+0x9f/0x140 [ 161.640965][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 161.640965][ C0] RIP: 0033:0x443e09 [ 161.640965][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 161.640965][ C0] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.640965][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 161.640965][ C0] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 161.640965][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 161.640965][ C0] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 00000000000270fd [ 161.640965][ C0] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 161.640965][ C0] [ 161.640965][ C0] Uninit was stored to memory at: [ 161.640965][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 161.640965][ C0] __msan_chain_origin+0x54/0xa0 [ 161.640965][ C0] iptunnel_xmit+0xbd6/0xf20 [ 161.640965][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 161.640965][ C0] geneve_xmit+0x2139/0x3c40 [ 161.640965][ C0] xmit_one+0x2b6/0x760 [ 161.640965][ C0] __dev_queue_xmit+0x3432/0x4600 [ 161.640965][ C0] dev_queue_xmit+0x4b/0x60 [ 161.640965][ C0] packet_sendmsg+0x86ee/0x99d0 [ 161.640965][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 161.640965][ C0] __sys_sendmsg+0x714/0x830 [ 161.640965][ C0] __se_sys_sendmsg+0x97/0xb0 [ 161.640965][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 161.640965][ C0] do_syscall_64+0x9f/0x140 [ 161.640965][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 161.640965][ C0] [ 161.640965][ C0] Uninit was created at: [ 161.640965][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 161.640965][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 161.640965][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 161.640965][ C0] __alloc_skb+0x4dd/0xe90 [ 161.640965][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 161.640965][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 161.640965][ C0] packet_sendmsg+0x6a12/0x99d0 [ 161.640965][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 161.640965][ C0] __sys_sendmsg+0x714/0x830 [ 161.640965][ C0] __se_sys_sendmsg+0x97/0xb0 [ 161.640965][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 161.640965][ C0] do_syscall_64+0x9f/0x140 [ 161.640965][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 161.640965][ C0] ===================================================== [ 162.057003][ C0] ===================================================== [ 162.063953][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 162.066935][ C0] CPU: 0 PID: 8439 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 162.066935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.066935][ C0] Call Trace: [ 162.066935][ C0] [ 162.066935][ C0] dump_stack+0x24c/0x2e0 [ 162.066935][ C0] kmsan_report+0xfb/0x1e0 [ 162.066935][ C0] __msan_warning+0x5c/0xa0 [ 162.066935][ C0] ip_rcv_core+0xf5d/0x1480 [ 162.066935][ C0] ip_rcv+0xc7/0x820 [ 162.066935][ C0] ? kmsan_get_metadata+0x116/0x180 [ 162.066935][ C0] __netif_receive_skb+0x1ec/0x640 [ 162.066935][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 162.066935][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 162.066935][ C0] process_backlog+0x517/0xbd0 [ 162.066935][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 162.066935][ C0] __napi_poll+0x13e/0xca0 [ 162.066935][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 162.066935][ C0] net_rx_action+0x726/0x14a0 [ 162.066935][ C0] ? net_tx_action+0xd30/0xd30 [ 162.066935][ C0] __do_softirq+0x1b9/0x715 [ 162.066935][ C0] ? idle_cpu+0x9a/0x1d0 [ 162.066935][ C0] ? __irq_exit_rcu+0x83/0x280 [ 162.066935][ C0] do_softirq+0x123/0x1c0 [ 162.066935][ C0] [ 162.066935][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 162.066935][ C0] local_bh_enable+0x36/0x40 [ 162.066935][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 162.066935][ C0] dev_queue_xmit+0x4b/0x60 [ 162.066935][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 162.066935][ C0] packet_sendmsg+0x86ee/0x99d0 [ 162.066935][ C0] ? kmsan_get_metadata+0x116/0x180 [ 162.066935][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 162.066935][ C0] ? process_slab+0x13a8/0x1b70 [ 162.066935][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 162.066935][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 162.066935][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 162.066935][ C0] ? packet_getsockopt+0x1120/0x1120 [ 162.066935][ C0] __sys_sendmsg+0x714/0x830 [ 162.066935][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 162.066935][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 162.066935][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 162.066935][ C0] ? kmsan_get_metadata+0x116/0x180 [ 162.066935][ C0] __se_sys_sendmsg+0x97/0xb0 [ 162.066935][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 162.066935][ C0] do_syscall_64+0x9f/0x140 [ 162.066935][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 162.066935][ C0] RIP: 0033:0x443e09 [ 162.066935][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 162.066935][ C0] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.066935][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 162.066935][ C0] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 162.066935][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 162.066935][ C0] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 00000000000270fd [ 162.066935][ C0] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 162.066935][ C0] [ 162.066935][ C0] Uninit was stored to memory at: [ 162.066935][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 162.066935][ C0] __msan_chain_origin+0x54/0xa0 [ 162.066935][ C0] iptunnel_xmit+0xbd6/0xf20 [ 162.066935][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 162.066935][ C0] geneve_xmit+0x2139/0x3c40 [ 162.066935][ C0] xmit_one+0x2b6/0x760 [ 162.066935][ C0] __dev_queue_xmit+0x3432/0x4600 [ 162.066935][ C0] dev_queue_xmit+0x4b/0x60 [ 162.066935][ C0] packet_sendmsg+0x86ee/0x99d0 [ 162.066935][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 162.066935][ C0] __sys_sendmsg+0x714/0x830 [ 162.066935][ C0] __se_sys_sendmsg+0x97/0xb0 [ 162.066935][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 162.066935][ C0] do_syscall_64+0x9f/0x140 [ 162.066935][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 162.066935][ C0] [ 162.066935][ C0] Uninit was created at: [ 162.066935][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 162.066935][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 162.066935][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 162.066935][ C0] __alloc_skb+0x4dd/0xe90 [ 162.066935][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 162.066935][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 162.066935][ C0] packet_sendmsg+0x6a12/0x99d0 [ 162.066935][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 162.066935][ C0] __sys_sendmsg+0x714/0x830 [ 162.066935][ C0] __se_sys_sendmsg+0x97/0xb0 [ 162.066935][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 162.066935][ C0] do_syscall_64+0x9f/0x140 [ 162.066935][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 162.066935][ C0] ===================================================== [ 162.541876][ C0] ===================================================== [ 162.548869][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 162.551704][ C0] CPU: 0 PID: 8439 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 162.551704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.551704][ C0] Call Trace: [ 162.551704][ C0] [ 162.551704][ C0] dump_stack+0x24c/0x2e0 [ 162.551704][ C0] kmsan_report+0xfb/0x1e0 [ 162.551704][ C0] __msan_warning+0x5c/0xa0 [ 162.551704][ C0] ip_rcv_core+0x1068/0x1480 [ 162.551704][ C0] ip_rcv+0xc7/0x820 [ 162.551704][ C0] ? kmsan_get_metadata+0x116/0x180 [ 162.551704][ C0] __netif_receive_skb+0x1ec/0x640 [ 162.551704][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 162.551704][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 162.551704][ C0] process_backlog+0x517/0xbd0 [ 162.551704][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 162.551704][ C0] __napi_poll+0x13e/0xca0 [ 162.551704][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 162.551704][ C0] net_rx_action+0x726/0x14a0 [ 162.551704][ C0] ? net_tx_action+0xd30/0xd30 [ 162.551704][ C0] __do_softirq+0x1b9/0x715 [ 162.551704][ C0] ? idle_cpu+0x9a/0x1d0 [ 162.551704][ C0] ? __irq_exit_rcu+0x83/0x280 [ 162.551704][ C0] do_softirq+0x123/0x1c0 [ 162.551704][ C0] [ 162.551704][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 162.551704][ C0] local_bh_enable+0x36/0x40 [ 162.551704][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 162.551704][ C0] dev_queue_xmit+0x4b/0x60 [ 162.551704][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 162.551704][ C0] packet_sendmsg+0x86ee/0x99d0 [ 162.551704][ C0] ? kmsan_get_metadata+0x116/0x180 [ 162.551704][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 162.551704][ C0] ? process_slab+0x13a8/0x1b70 [ 162.551704][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 162.551704][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 162.551704][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 162.551704][ C0] ? packet_getsockopt+0x1120/0x1120 [ 162.551704][ C0] __sys_sendmsg+0x714/0x830 [ 162.551704][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 162.551704][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 162.551704][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 162.551704][ C0] ? kmsan_get_metadata+0x116/0x180 [ 162.551704][ C0] __se_sys_sendmsg+0x97/0xb0 [ 162.551704][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 162.551704][ C0] do_syscall_64+0x9f/0x140 [ 162.551704][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 162.551704][ C0] RIP: 0033:0x443e09 [ 162.551704][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 162.551704][ C0] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.551704][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 162.551704][ C0] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 162.551704][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 162.551704][ C0] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 00000000000270fd [ 162.551704][ C0] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 162.551704][ C0] [ 162.551704][ C0] Uninit was stored to memory at: [ 162.551704][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 162.551704][ C0] __msan_chain_origin+0x54/0xa0 [ 162.551704][ C0] __ip_local_out+0x479/0x840 [ 162.551704][ C0] ip_local_out+0xa1/0x1e0 [ 162.551704][ C0] iptunnel_xmit+0x931/0xf20 [ 162.551704][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 162.551704][ C0] geneve_xmit+0x2139/0x3c40 [ 162.551704][ C0] xmit_one+0x2b6/0x760 [ 162.551704][ C0] __dev_queue_xmit+0x3432/0x4600 [ 162.551704][ C0] dev_queue_xmit+0x4b/0x60 [ 162.551704][ C0] packet_sendmsg+0x86ee/0x99d0 [ 162.551704][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 162.551704][ C0] __sys_sendmsg+0x714/0x830 [ 162.551704][ C0] __se_sys_sendmsg+0x97/0xb0 [ 162.551704][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 162.551704][ C0] do_syscall_64+0x9f/0x140 [ 162.551704][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 162.551704][ C0] [ 162.551704][ C0] Uninit was stored to memory at: [ 162.551704][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 162.551704][ C0] __msan_chain_origin+0x54/0xa0 [ 162.551704][ C0] iptunnel_xmit+0xbd6/0xf20 [ 162.551704][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 162.551704][ C0] geneve_xmit+0x2139/0x3c40 [ 162.551704][ C0] xmit_one+0x2b6/0x760 [ 162.551704][ C0] __dev_queue_xmit+0x3432/0x4600 [ 162.551704][ C0] dev_queue_xmit+0x4b/0x60 [ 162.551704][ C0] packet_sendmsg+0x86ee/0x99d0 [ 162.551704][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 162.551704][ C0] __sys_sendmsg+0x714/0x830 [ 162.551704][ C0] __se_sys_sendmsg+0x97/0xb0 [ 162.551704][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 162.551704][ C0] do_syscall_64+0x9f/0x140 [ 162.551704][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 162.551704][ C0] [ 162.551704][ C0] Uninit was created at: [ 162.551704][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 162.551704][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 162.551704][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 162.551704][ C0] __alloc_skb+0x4dd/0xe90 [ 162.551704][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 162.551704][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 162.551704][ C0] packet_sendmsg+0x6a12/0x99d0 executing program [ 162.551704][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 162.551704][ C0] __sys_sendmsg+0x714/0x830 [ 162.551704][ C0] __se_sys_sendmsg+0x97/0xb0 [ 162.551704][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 162.551704][ C0] do_syscall_64+0x9f/0x140 [ 162.551704][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 162.551704][ C0] ===================================================== [ 163.150542][ C0] ===================================================== [ 163.157517][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 163.157987][ C0] CPU: 0 PID: 8440 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 163.157987][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.157987][ C0] Call Trace: [ 163.157987][ C0] [ 163.157987][ C0] dump_stack+0x24c/0x2e0 [ 163.157987][ C0] kmsan_report+0xfb/0x1e0 [ 163.157987][ C0] __msan_warning+0x5c/0xa0 [ 163.157987][ C0] ip_rcv_core+0xf4c/0x1480 [ 163.157987][ C0] ip_rcv+0xc7/0x820 [ 163.157987][ C0] ? kmsan_get_metadata+0x116/0x180 [ 163.157987][ C0] __netif_receive_skb+0x1ec/0x640 [ 163.157987][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 163.157987][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 163.157987][ C0] process_backlog+0x517/0xbd0 [ 163.157987][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 163.157987][ C0] __napi_poll+0x13e/0xca0 [ 163.157987][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 163.157987][ C0] net_rx_action+0x726/0x14a0 [ 163.157987][ C0] ? net_tx_action+0xd30/0xd30 [ 163.157987][ C0] __do_softirq+0x1b9/0x715 [ 163.157987][ C0] ? idle_cpu+0x9a/0x1d0 [ 163.157987][ C0] ? __irq_exit_rcu+0x83/0x280 [ 163.157987][ C0] do_softirq+0x123/0x1c0 [ 163.157987][ C0] [ 163.157987][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 163.157987][ C0] local_bh_enable+0x36/0x40 [ 163.157987][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 163.157987][ C0] dev_queue_xmit+0x4b/0x60 [ 163.157987][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 163.157987][ C0] packet_sendmsg+0x86ee/0x99d0 [ 163.157987][ C0] ? kmsan_get_metadata+0x116/0x180 [ 163.157987][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 163.157987][ C0] ? process_slab+0x13a8/0x1b70 [ 163.157987][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 163.157987][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 163.157987][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 163.157987][ C0] ? packet_getsockopt+0x1120/0x1120 [ 163.157987][ C0] __sys_sendmsg+0x714/0x830 [ 163.157987][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 163.157987][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 163.157987][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 163.157987][ C0] ? kmsan_get_metadata+0x116/0x180 [ 163.157987][ C0] __se_sys_sendmsg+0x97/0xb0 [ 163.157987][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 163.157987][ C0] do_syscall_64+0x9f/0x140 [ 163.157987][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 163.157987][ C0] RIP: 0033:0x443e09 [ 163.157987][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 163.157987][ C0] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.157987][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 163.157987][ C0] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 163.157987][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 163.157987][ C0] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000027763 [ 163.157987][ C0] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 163.157987][ C0] [ 163.157987][ C0] Uninit was stored to memory at: [ 163.157987][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 163.157987][ C0] __msan_chain_origin+0x54/0xa0 [ 163.157987][ C0] iptunnel_xmit+0xbd6/0xf20 [ 163.157987][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 163.157987][ C0] geneve_xmit+0x2139/0x3c40 [ 163.157987][ C0] xmit_one+0x2b6/0x760 [ 163.157987][ C0] __dev_queue_xmit+0x3432/0x4600 [ 163.157987][ C0] dev_queue_xmit+0x4b/0x60 [ 163.157987][ C0] packet_sendmsg+0x86ee/0x99d0 [ 163.157987][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 163.157987][ C0] __sys_sendmsg+0x714/0x830 [ 163.157987][ C0] __se_sys_sendmsg+0x97/0xb0 [ 163.157987][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 163.157987][ C0] do_syscall_64+0x9f/0x140 [ 163.157987][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 163.157987][ C0] [ 163.157987][ C0] Uninit was created at: [ 163.157987][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 163.157987][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 163.157987][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 163.157987][ C0] __alloc_skb+0x4dd/0xe90 [ 163.157987][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 163.157987][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 163.157987][ C0] packet_sendmsg+0x6a12/0x99d0 [ 163.157987][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 163.157987][ C0] __sys_sendmsg+0x714/0x830 [ 163.157987][ C0] __se_sys_sendmsg+0x97/0xb0 [ 163.157987][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 163.157987][ C0] do_syscall_64+0x9f/0x140 [ 163.157987][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 163.157987][ C0] ===================================================== [ 163.636552][ C0] ===================================================== [ 163.643646][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 163.646394][ C0] CPU: 0 PID: 8440 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 163.646394][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.646394][ C0] Call Trace: [ 163.646394][ C0] [ 163.646394][ C0] dump_stack+0x24c/0x2e0 [ 163.646394][ C0] kmsan_report+0xfb/0x1e0 [ 163.646394][ C0] __msan_warning+0x5c/0xa0 [ 163.646394][ C0] ip_rcv_core+0xf5d/0x1480 [ 163.646394][ C0] ip_rcv+0xc7/0x820 [ 163.646394][ C0] ? kmsan_get_metadata+0x116/0x180 [ 163.646394][ C0] __netif_receive_skb+0x1ec/0x640 [ 163.646394][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 163.646394][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 163.646394][ C0] process_backlog+0x517/0xbd0 [ 163.646394][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 163.646394][ C0] __napi_poll+0x13e/0xca0 [ 163.646394][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 163.646394][ C0] net_rx_action+0x726/0x14a0 [ 163.646394][ C0] ? net_tx_action+0xd30/0xd30 [ 163.646394][ C0] __do_softirq+0x1b9/0x715 [ 163.755228][ C0] ? idle_cpu+0x9a/0x1d0 [ 163.759619][ C0] ? __irq_exit_rcu+0x83/0x280 [ 163.763357][ C0] do_softirq+0x123/0x1c0 [ 163.768247][ C0] [ 163.770753][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 163.776857][ C0] local_bh_enable+0x36/0x40 [ 163.779362][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 163.779362][ C0] dev_queue_xmit+0x4b/0x60 [ 163.779362][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 163.779362][ C0] packet_sendmsg+0x86ee/0x99d0 [ 163.779362][ C0] ? kmsan_get_metadata+0x116/0x180 [ 163.779362][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 163.779362][ C0] ? process_slab+0x13a8/0x1b70 [ 163.779362][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 163.779362][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 163.779362][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 163.779362][ C0] ? packet_getsockopt+0x1120/0x1120 [ 163.779362][ C0] __sys_sendmsg+0x714/0x830 [ 163.779362][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 163.779362][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 163.779362][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 163.779362][ C0] ? kmsan_get_metadata+0x116/0x180 [ 163.779362][ C0] __se_sys_sendmsg+0x97/0xb0 [ 163.779362][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 163.779362][ C0] do_syscall_64+0x9f/0x140 [ 163.779362][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 163.779362][ C0] RIP: 0033:0x443e09 [ 163.779362][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 163.779362][ C0] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.779362][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 163.779362][ C0] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 163.779362][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 163.779362][ C0] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000027763 [ 163.779362][ C0] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 163.779362][ C0] [ 163.779362][ C0] Uninit was stored to memory at: [ 163.779362][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 163.779362][ C0] __msan_chain_origin+0x54/0xa0 [ 163.779362][ C0] iptunnel_xmit+0xbd6/0xf20 [ 163.779362][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 163.779362][ C0] geneve_xmit+0x2139/0x3c40 [ 163.779362][ C0] xmit_one+0x2b6/0x760 [ 163.779362][ C0] __dev_queue_xmit+0x3432/0x4600 [ 163.779362][ C0] dev_queue_xmit+0x4b/0x60 [ 163.779362][ C0] packet_sendmsg+0x86ee/0x99d0 [ 163.779362][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 163.779362][ C0] __sys_sendmsg+0x714/0x830 [ 163.779362][ C0] __se_sys_sendmsg+0x97/0xb0 [ 163.779362][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 163.779362][ C0] do_syscall_64+0x9f/0x140 [ 163.779362][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 163.779362][ C0] [ 163.779362][ C0] Uninit was created at: [ 163.779362][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 163.779362][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 163.779362][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 163.779362][ C0] __alloc_skb+0x4dd/0xe90 [ 163.779362][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 163.779362][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 163.779362][ C0] packet_sendmsg+0x6a12/0x99d0 [ 163.779362][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 163.779362][ C0] __sys_sendmsg+0x714/0x830 [ 163.779362][ C0] __se_sys_sendmsg+0x97/0xb0 [ 163.779362][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 163.779362][ C0] do_syscall_64+0x9f/0x140 [ 163.779362][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 163.779362][ C0] ===================================================== [ 164.124124][ C0] ===================================================== [ 164.131127][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 164.134072][ C0] CPU: 0 PID: 8440 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 164.134072][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.134072][ C0] Call Trace: [ 164.134072][ C0] [ 164.134072][ C0] dump_stack+0x24c/0x2e0 [ 164.134072][ C0] kmsan_report+0xfb/0x1e0 [ 164.134072][ C0] __msan_warning+0x5c/0xa0 [ 164.134072][ C0] ip_rcv_core+0x1068/0x1480 [ 164.134072][ C0] ip_rcv+0xc7/0x820 [ 164.134072][ C0] ? kmsan_get_metadata+0x116/0x180 [ 164.134072][ C0] __netif_receive_skb+0x1ec/0x640 [ 164.134072][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 164.134072][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 164.134072][ C0] process_backlog+0x517/0xbd0 [ 164.134072][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 164.134072][ C0] __napi_poll+0x13e/0xca0 [ 164.134072][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 164.134072][ C0] net_rx_action+0x726/0x14a0 [ 164.134072][ C0] ? net_tx_action+0xd30/0xd30 [ 164.134072][ C0] __do_softirq+0x1b9/0x715 [ 164.134072][ C0] ? idle_cpu+0x9a/0x1d0 [ 164.134072][ C0] ? __irq_exit_rcu+0x83/0x280 [ 164.134072][ C0] do_softirq+0x123/0x1c0 [ 164.134072][ C0] [ 164.134072][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 164.134072][ C0] local_bh_enable+0x36/0x40 [ 164.134072][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 164.134072][ C0] dev_queue_xmit+0x4b/0x60 [ 164.134072][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 164.134072][ C0] packet_sendmsg+0x86ee/0x99d0 [ 164.134072][ C0] ? kmsan_get_metadata+0x116/0x180 [ 164.134072][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 164.134072][ C0] ? process_slab+0x13a8/0x1b70 [ 164.134072][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 164.134072][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 164.134072][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 164.134072][ C0] ? packet_getsockopt+0x1120/0x1120 [ 164.134072][ C0] __sys_sendmsg+0x714/0x830 [ 164.134072][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 164.134072][ C0] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 164.134072][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 164.134072][ C0] ? kmsan_get_metadata+0x116/0x180 [ 164.134072][ C0] __se_sys_sendmsg+0x97/0xb0 [ 164.134072][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 164.134072][ C0] do_syscall_64+0x9f/0x140 [ 164.134072][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.134072][ C0] RIP: 0033:0x443e09 [ 164.134072][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 164.134072][ C0] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.134072][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 164.134072][ C0] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 164.134072][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 164.134072][ C0] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000027763 [ 164.134072][ C0] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 164.134072][ C0] [ 164.134072][ C0] Uninit was stored to memory at: [ 164.134072][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 164.134072][ C0] __msan_chain_origin+0x54/0xa0 [ 164.134072][ C0] __ip_local_out+0x479/0x840 [ 164.134072][ C0] ip_local_out+0xa1/0x1e0 [ 164.134072][ C0] iptunnel_xmit+0x931/0xf20 [ 164.134072][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 164.134072][ C0] geneve_xmit+0x2139/0x3c40 [ 164.134072][ C0] xmit_one+0x2b6/0x760 [ 164.134072][ C0] __dev_queue_xmit+0x3432/0x4600 [ 164.134072][ C0] dev_queue_xmit+0x4b/0x60 [ 164.134072][ C0] packet_sendmsg+0x86ee/0x99d0 [ 164.134072][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 164.134072][ C0] __sys_sendmsg+0x714/0x830 [ 164.134072][ C0] __se_sys_sendmsg+0x97/0xb0 [ 164.134072][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 164.134072][ C0] do_syscall_64+0x9f/0x140 [ 164.134072][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.134072][ C0] [ 164.134072][ C0] Uninit was stored to memory at: [ 164.134072][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 164.134072][ C0] __msan_chain_origin+0x54/0xa0 [ 164.134072][ C0] iptunnel_xmit+0xbd6/0xf20 [ 164.134072][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 164.134072][ C0] geneve_xmit+0x2139/0x3c40 [ 164.134072][ C0] xmit_one+0x2b6/0x760 [ 164.134072][ C0] __dev_queue_xmit+0x3432/0x4600 [ 164.134072][ C0] dev_queue_xmit+0x4b/0x60 [ 164.134072][ C0] packet_sendmsg+0x86ee/0x99d0 [ 164.134072][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 164.134072][ C0] __sys_sendmsg+0x714/0x830 [ 164.134072][ C0] __se_sys_sendmsg+0x97/0xb0 [ 164.134072][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 164.134072][ C0] do_syscall_64+0x9f/0x140 [ 164.134072][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.134072][ C0] [ 164.134072][ C0] Uninit was created at: [ 164.134072][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 164.134072][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 164.134072][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 164.134072][ C0] __alloc_skb+0x4dd/0xe90 [ 164.134072][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 164.134072][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 164.134072][ C0] packet_sendmsg+0x6a12/0x99d0 [ 164.134072][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 164.134072][ C0] __sys_sendmsg+0x714/0x830 [ 164.134072][ C0] __se_sys_sendmsg+0x97/0xb0 [ 164.134072][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 164.134072][ C0] do_syscall_64+0x9f/0x140 [ 164.134072][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.134072][ C0] ===================================================== executing program [ 164.834659][ C1] ===================================================== [ 164.837954][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 164.837954][ C1] CPU: 1 PID: 8441 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 164.837954][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.837954][ C1] Call Trace: [ 164.837954][ C1] [ 164.837954][ C1] dump_stack+0x24c/0x2e0 [ 164.837954][ C1] kmsan_report+0xfb/0x1e0 [ 164.837954][ C1] __msan_warning+0x5c/0xa0 [ 164.837954][ C1] ip_rcv_core+0xf4c/0x1480 [ 164.837954][ C1] ip_rcv+0xc7/0x820 [ 164.837954][ C1] ? kmsan_get_metadata+0x116/0x180 [ 164.837954][ C1] __netif_receive_skb+0x1ec/0x640 [ 164.837954][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 164.837954][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 164.837954][ C1] process_backlog+0x517/0xbd0 [ 164.837954][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 164.837954][ C1] __napi_poll+0x13e/0xca0 [ 164.837954][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 164.837954][ C1] net_rx_action+0x726/0x14a0 [ 164.837954][ C1] ? net_tx_action+0xd30/0xd30 [ 164.837954][ C1] __do_softirq+0x1b9/0x715 [ 164.837954][ C1] ? idle_cpu+0x9a/0x1d0 [ 164.837954][ C1] ? __irq_exit_rcu+0x83/0x280 [ 164.837954][ C1] do_softirq+0x123/0x1c0 [ 164.837954][ C1] [ 164.837954][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 164.837954][ C1] local_bh_enable+0x36/0x40 [ 164.837954][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 164.837954][ C1] dev_queue_xmit+0x4b/0x60 [ 164.837954][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 164.837954][ C1] packet_sendmsg+0x86ee/0x99d0 [ 164.837954][ C1] ? kmsan_get_metadata+0x116/0x180 [ 164.837954][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 164.837954][ C1] ? process_slab+0x13a8/0x1b70 [ 164.837954][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 164.837954][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 164.837954][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 164.837954][ C1] ? packet_getsockopt+0x1120/0x1120 [ 164.837954][ C1] __sys_sendmsg+0x714/0x830 [ 164.837954][ C1] ? kmsan_get_metadata+0x116/0x180 [ 164.837954][ C1] ? kmsan_get_metadata+0x117/0x180 [ 164.837954][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 164.837954][ C1] ? kmsan_get_metadata+0x116/0x180 [ 164.837954][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 164.837954][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 164.837954][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 164.837954][ C1] __se_sys_sendmsg+0x97/0xb0 [ 164.837954][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 164.837954][ C1] do_syscall_64+0x9f/0x140 [ 164.837954][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.837954][ C1] RIP: 0033:0x443e09 [ 164.837954][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 164.837954][ C1] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.837954][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 164.837954][ C1] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 164.837954][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 164.837954][ C1] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000027d89 [ 164.837954][ C1] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 164.837954][ C1] [ 164.837954][ C1] Uninit was stored to memory at: [ 164.837954][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 164.837954][ C1] __msan_chain_origin+0x54/0xa0 [ 164.837954][ C1] iptunnel_xmit+0xbd6/0xf20 [ 164.837954][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 164.837954][ C1] geneve_xmit+0x2139/0x3c40 [ 164.837954][ C1] xmit_one+0x2b6/0x760 [ 164.837954][ C1] __dev_queue_xmit+0x3432/0x4600 [ 164.837954][ C1] dev_queue_xmit+0x4b/0x60 [ 164.837954][ C1] packet_sendmsg+0x86ee/0x99d0 [ 164.837954][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 165.228402][ C1] __sys_sendmsg+0x714/0x830 [ 165.228402][ C1] __se_sys_sendmsg+0x97/0xb0 [ 165.228402][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 165.228402][ C1] do_syscall_64+0x9f/0x140 [ 165.228402][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.228402][ C1] [ 165.228402][ C1] Uninit was created at: [ 165.228402][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 165.228402][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 165.228402][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 165.228402][ C1] __alloc_skb+0x4dd/0xe90 [ 165.228402][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 165.228402][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 165.228402][ C1] packet_sendmsg+0x6a12/0x99d0 [ 165.228402][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 165.228402][ C1] __sys_sendmsg+0x714/0x830 [ 165.228402][ C1] __se_sys_sendmsg+0x97/0xb0 [ 165.228402][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 165.228402][ C1] do_syscall_64+0x9f/0x140 [ 165.228402][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.228402][ C1] ===================================================== [ 165.333464][ C1] ===================================================== [ 165.340412][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 165.343391][ C1] CPU: 1 PID: 8441 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 165.343391][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.343391][ C1] Call Trace: [ 165.343391][ C1] [ 165.343391][ C1] dump_stack+0x24c/0x2e0 [ 165.343391][ C1] kmsan_report+0xfb/0x1e0 [ 165.343391][ C1] __msan_warning+0x5c/0xa0 [ 165.343391][ C1] ip_rcv_core+0xf5d/0x1480 [ 165.343391][ C1] ip_rcv+0xc7/0x820 [ 165.343391][ C1] ? kmsan_get_metadata+0x116/0x180 [ 165.343391][ C1] __netif_receive_skb+0x1ec/0x640 [ 165.343391][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 165.343391][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 165.343391][ C1] process_backlog+0x517/0xbd0 [ 165.343391][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 165.343391][ C1] __napi_poll+0x13e/0xca0 [ 165.343391][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 165.343391][ C1] net_rx_action+0x726/0x14a0 [ 165.343391][ C1] ? net_tx_action+0xd30/0xd30 [ 165.343391][ C1] __do_softirq+0x1b9/0x715 [ 165.343391][ C1] ? idle_cpu+0x9a/0x1d0 [ 165.343391][ C1] ? __irq_exit_rcu+0x83/0x280 [ 165.343391][ C1] do_softirq+0x123/0x1c0 [ 165.343391][ C1] [ 165.343391][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 165.343391][ C1] local_bh_enable+0x36/0x40 [ 165.343391][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 165.343391][ C1] dev_queue_xmit+0x4b/0x60 [ 165.343391][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 165.343391][ C1] packet_sendmsg+0x86ee/0x99d0 [ 165.343391][ C1] ? kmsan_get_metadata+0x116/0x180 [ 165.343391][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 165.343391][ C1] ? process_slab+0x13a8/0x1b70 [ 165.343391][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 165.343391][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 165.343391][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 165.343391][ C1] ? packet_getsockopt+0x1120/0x1120 [ 165.343391][ C1] __sys_sendmsg+0x714/0x830 [ 165.343391][ C1] ? kmsan_get_metadata+0x116/0x180 [ 165.343391][ C1] ? kmsan_get_metadata+0x117/0x180 [ 165.343391][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 165.343391][ C1] ? kmsan_get_metadata+0x116/0x180 [ 165.343391][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 165.343391][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 165.343391][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 165.343391][ C1] __se_sys_sendmsg+0x97/0xb0 [ 165.343391][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 165.343391][ C1] do_syscall_64+0x9f/0x140 [ 165.343391][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.343391][ C1] RIP: 0033:0x443e09 [ 165.343391][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 165.343391][ C1] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.343391][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 165.343391][ C1] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 165.343391][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 165.343391][ C1] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000027d89 [ 165.343391][ C1] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 165.343391][ C1] [ 165.343391][ C1] Uninit was stored to memory at: [ 165.343391][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 165.343391][ C1] __msan_chain_origin+0x54/0xa0 [ 165.343391][ C1] iptunnel_xmit+0xbd6/0xf20 [ 165.343391][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 165.343391][ C1] geneve_xmit+0x2139/0x3c40 [ 165.343391][ C1] xmit_one+0x2b6/0x760 [ 165.343391][ C1] __dev_queue_xmit+0x3432/0x4600 [ 165.343391][ C1] dev_queue_xmit+0x4b/0x60 [ 165.343391][ C1] packet_sendmsg+0x86ee/0x99d0 [ 165.343391][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 165.343391][ C1] __sys_sendmsg+0x714/0x830 [ 165.343391][ C1] __se_sys_sendmsg+0x97/0xb0 [ 165.343391][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 165.343391][ C1] do_syscall_64+0x9f/0x140 [ 165.343391][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.343391][ C1] [ 165.343391][ C1] Uninit was created at: [ 165.343391][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 165.343391][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 165.343391][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 165.343391][ C1] __alloc_skb+0x4dd/0xe90 [ 165.343391][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 165.343391][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 165.343391][ C1] packet_sendmsg+0x6a12/0x99d0 [ 165.343391][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 165.343391][ C1] __sys_sendmsg+0x714/0x830 [ 165.343391][ C1] __se_sys_sendmsg+0x97/0xb0 [ 165.343391][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 165.343391][ C1] do_syscall_64+0x9f/0x140 [ 165.343391][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.343391][ C1] ===================================================== [ 165.834981][ C1] ===================================================== [ 165.841972][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 165.844927][ C1] CPU: 1 PID: 8441 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 165.844927][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.844927][ C1] Call Trace: [ 165.844927][ C1] [ 165.844927][ C1] dump_stack+0x24c/0x2e0 [ 165.844927][ C1] kmsan_report+0xfb/0x1e0 [ 165.844927][ C1] __msan_warning+0x5c/0xa0 [ 165.844927][ C1] ip_rcv_core+0x1068/0x1480 [ 165.844927][ C1] ip_rcv+0xc7/0x820 [ 165.844927][ C1] ? kmsan_get_metadata+0x116/0x180 [ 165.844927][ C1] __netif_receive_skb+0x1ec/0x640 [ 165.844927][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 165.844927][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 165.844927][ C1] process_backlog+0x517/0xbd0 [ 165.844927][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 165.844927][ C1] __napi_poll+0x13e/0xca0 [ 165.844927][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 165.844927][ C1] net_rx_action+0x726/0x14a0 [ 165.844927][ C1] ? net_tx_action+0xd30/0xd30 [ 165.844927][ C1] __do_softirq+0x1b9/0x715 [ 165.844927][ C1] ? idle_cpu+0x9a/0x1d0 [ 165.844927][ C1] ? __irq_exit_rcu+0x83/0x280 [ 165.844927][ C1] do_softirq+0x123/0x1c0 [ 165.844927][ C1] [ 165.844927][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 165.844927][ C1] local_bh_enable+0x36/0x40 [ 165.844927][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 165.844927][ C1] dev_queue_xmit+0x4b/0x60 [ 165.844927][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 165.844927][ C1] packet_sendmsg+0x86ee/0x99d0 [ 165.844927][ C1] ? kmsan_get_metadata+0x116/0x180 [ 165.844927][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 165.844927][ C1] ? process_slab+0x13a8/0x1b70 [ 165.844927][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 165.844927][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 165.844927][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 165.844927][ C1] ? packet_getsockopt+0x1120/0x1120 [ 165.844927][ C1] __sys_sendmsg+0x714/0x830 [ 165.844927][ C1] ? kmsan_get_metadata+0x116/0x180 [ 165.844927][ C1] ? kmsan_get_metadata+0x117/0x180 [ 165.844927][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 165.844927][ C1] ? kmsan_get_metadata+0x116/0x180 [ 165.844927][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 165.844927][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 165.844927][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 165.844927][ C1] __se_sys_sendmsg+0x97/0xb0 [ 165.844927][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 165.844927][ C1] do_syscall_64+0x9f/0x140 [ 165.844927][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.844927][ C1] RIP: 0033:0x443e09 [ 165.844927][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 165.844927][ C1] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.844927][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 165.844927][ C1] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 165.844927][ C1] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 165.844927][ C1] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000027d89 [ 166.165235][ C1] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 166.172555][ C1] [ 166.174987][ C1] Uninit was stored to memory at: [ 166.179855][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 166.185984][ C1] __msan_chain_origin+0x54/0xa0 [ 166.190927][ C1] __ip_local_out+0x479/0x840 [ 166.195789][ C1] ip_local_out+0xa1/0x1e0 [ 166.199516][ C1] iptunnel_xmit+0x931/0xf20 [ 166.204387][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 166.209369][ C1] geneve_xmit+0x2139/0x3c40 [ 166.214263][ C1] xmit_one+0x2b6/0x760 [ 166.218270][ C1] __dev_queue_xmit+0x3432/0x4600 [ 166.222789][ C1] dev_queue_xmit+0x4b/0x60 [ 166.228047][ C1] packet_sendmsg+0x86ee/0x99d0 [ 166.232551][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 166.237416][ C1] __sys_sendmsg+0x714/0x830 [ 166.242288][ C1] __se_sys_sendmsg+0x97/0xb0 [ 166.247154][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 166.251073][ C1] do_syscall_64+0x9f/0x140 [ 166.255934][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.262074][ C1] [ 166.264501][ C1] Uninit was stored to memory at: [ 166.269482][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 166.274367][ C1] __msan_chain_origin+0x54/0xa0 [ 166.279781][ C1] iptunnel_xmit+0xbd6/0xf20 [ 166.284703][ C1] udp_tunnel_xmit_skb+0x526/0x640 [ 166.289560][ C1] geneve_xmit+0x2139/0x3c40 [ 166.294418][ C1] xmit_one+0x2b6/0x760 [ 166.298163][ C1] __dev_queue_xmit+0x3432/0x4600 [ 166.303022][ C1] dev_queue_xmit+0x4b/0x60 [ 166.308026][ C1] packet_sendmsg+0x86ee/0x99d0 [ 166.312776][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 166.317660][ C1] __sys_sendmsg+0x714/0x830 [ 166.322569][ C1] __se_sys_sendmsg+0x97/0xb0 [ 166.326221][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 166.331131][ C1] do_syscall_64+0x9f/0x140 [ 166.336030][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.342117][ C1] [ 166.344559][ C1] Uninit was created at: [ 166.348263][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 166.354365][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 166.359368][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 166.365461][ C1] __alloc_skb+0x4dd/0xe90 [ 166.369121][ C1] alloc_skb_with_frags+0x1f3/0xc10 [ 166.375209][ C1] sock_alloc_send_pskb+0xdc1/0xf90 [ 166.380095][ C1] packet_sendmsg+0x6a12/0x99d0 executing program [ 166.384945][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 166.389814][ C1] __sys_sendmsg+0x714/0x830 [ 166.394678][ C1] __se_sys_sendmsg+0x97/0xb0 [ 166.398309][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 166.403190][ C1] do_syscall_64+0x9f/0x140 [ 166.408557][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.413486][ C1] ===================================================== [ 166.463544][ C0] ===================================================== [ 166.467962][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 166.467962][ C0] CPU: 0 PID: 8442 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 166.467962][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.467962][ C0] Call Trace: [ 166.467962][ C0] [ 166.467962][ C0] dump_stack+0x24c/0x2e0 [ 166.467962][ C0] kmsan_report+0xfb/0x1e0 [ 166.467962][ C0] __msan_warning+0x5c/0xa0 [ 166.467962][ C0] ip_rcv_core+0xf4c/0x1480 [ 166.467962][ C0] ip_rcv+0xc7/0x820 [ 166.467962][ C0] ? kmsan_get_metadata+0x116/0x180 [ 166.467962][ C0] __netif_receive_skb+0x1ec/0x640 [ 166.467962][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 166.467962][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 166.467962][ C0] process_backlog+0x517/0xbd0 [ 166.467962][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 166.467962][ C0] __napi_poll+0x13e/0xca0 [ 166.467962][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 166.467962][ C0] net_rx_action+0x726/0x14a0 [ 166.467962][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 166.467962][ C0] ? net_tx_action+0xd30/0xd30 [ 166.467962][ C0] __do_softirq+0x1b9/0x715 [ 166.467962][ C0] ? idle_cpu+0x9a/0x1d0 [ 166.467962][ C0] ? __irq_exit_rcu+0x83/0x280 [ 166.467962][ C0] do_softirq+0x123/0x1c0 [ 166.467962][ C0] [ 166.467962][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 166.467962][ C0] local_bh_enable+0x36/0x40 [ 166.467962][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 166.467962][ C0] dev_queue_xmit+0x4b/0x60 [ 166.467962][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 166.467962][ C0] packet_sendmsg+0x86ee/0x99d0 [ 166.467962][ C0] ? kmsan_get_metadata+0x116/0x180 [ 166.467962][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 166.467962][ C0] ? process_slab+0x13a8/0x1b70 [ 166.467962][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 166.467962][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 166.467962][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 166.467962][ C0] ? packet_getsockopt+0x1120/0x1120 [ 166.467962][ C0] __sys_sendmsg+0x714/0x830 [ 166.467962][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 166.467962][ C0] ? up_read+0x40/0x2b0 [ 166.467962][ C0] ? kmsan_get_metadata+0x116/0x180 [ 166.467962][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 166.467962][ C0] ? kmsan_get_metadata+0x116/0x180 [ 166.467962][ C0] __se_sys_sendmsg+0x97/0xb0 [ 166.467962][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 166.467962][ C0] do_syscall_64+0x9f/0x140 [ 166.467962][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.467962][ C0] RIP: 0033:0x443e09 [ 166.467962][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 166.467962][ C0] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.467962][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 166.467962][ C0] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 166.467962][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 166.467962][ C0] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000028409 [ 166.467962][ C0] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 166.467962][ C0] [ 166.467962][ C0] Uninit was stored to memory at: [ 166.467962][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 166.467962][ C0] __msan_chain_origin+0x54/0xa0 [ 166.467962][ C0] iptunnel_xmit+0xbd6/0xf20 [ 166.467962][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 166.467962][ C0] geneve_xmit+0x2139/0x3c40 [ 166.467962][ C0] xmit_one+0x2b6/0x760 [ 166.467962][ C0] __dev_queue_xmit+0x3432/0x4600 [ 166.467962][ C0] dev_queue_xmit+0x4b/0x60 [ 166.467962][ C0] packet_sendmsg+0x86ee/0x99d0 [ 166.467962][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 166.467962][ C0] __sys_sendmsg+0x714/0x830 [ 166.467962][ C0] __se_sys_sendmsg+0x97/0xb0 [ 166.467962][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 166.467962][ C0] do_syscall_64+0x9f/0x140 [ 166.467962][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.467962][ C0] [ 166.467962][ C0] Uninit was created at: [ 166.467962][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 166.467962][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 166.467962][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 166.467962][ C0] __alloc_skb+0x4dd/0xe90 [ 166.467962][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 166.467962][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 166.467962][ C0] packet_sendmsg+0x6a12/0x99d0 [ 166.467962][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 166.467962][ C0] __sys_sendmsg+0x714/0x830 [ 166.467962][ C0] __se_sys_sendmsg+0x97/0xb0 [ 166.467962][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 166.467962][ C0] do_syscall_64+0x9f/0x140 [ 166.467962][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.467962][ C0] ===================================================== [ 166.953831][ C0] ===================================================== [ 166.960827][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0xf5d/0x1480 [ 166.963662][ C0] CPU: 0 PID: 8442 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 166.963662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.963662][ C0] Call Trace: [ 166.963662][ C0] [ 166.963662][ C0] dump_stack+0x24c/0x2e0 [ 166.963662][ C0] kmsan_report+0xfb/0x1e0 [ 166.963662][ C0] __msan_warning+0x5c/0xa0 [ 166.963662][ C0] ip_rcv_core+0xf5d/0x1480 [ 166.963662][ C0] ip_rcv+0xc7/0x820 [ 166.963662][ C0] ? kmsan_get_metadata+0x116/0x180 [ 166.963662][ C0] __netif_receive_skb+0x1ec/0x640 [ 166.963662][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 166.963662][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 166.963662][ C0] process_backlog+0x517/0xbd0 [ 166.963662][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 166.963662][ C0] __napi_poll+0x13e/0xca0 [ 166.963662][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 166.963662][ C0] net_rx_action+0x726/0x14a0 [ 166.963662][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 166.963662][ C0] ? net_tx_action+0xd30/0xd30 [ 166.963662][ C0] __do_softirq+0x1b9/0x715 [ 166.963662][ C0] ? idle_cpu+0x9a/0x1d0 [ 166.963662][ C0] ? __irq_exit_rcu+0x83/0x280 [ 166.963662][ C0] do_softirq+0x123/0x1c0 [ 166.963662][ C0] [ 166.963662][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 166.963662][ C0] local_bh_enable+0x36/0x40 [ 166.963662][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 166.963662][ C0] dev_queue_xmit+0x4b/0x60 [ 166.963662][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 166.963662][ C0] packet_sendmsg+0x86ee/0x99d0 [ 166.963662][ C0] ? kmsan_get_metadata+0x116/0x180 [ 166.963662][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 166.963662][ C0] ? process_slab+0x13a8/0x1b70 [ 166.963662][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 166.963662][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 166.963662][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 166.963662][ C0] ? packet_getsockopt+0x1120/0x1120 [ 166.963662][ C0] __sys_sendmsg+0x714/0x830 [ 166.963662][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 166.963662][ C0] ? up_read+0x40/0x2b0 [ 166.963662][ C0] ? kmsan_get_metadata+0x116/0x180 [ 166.963662][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 166.963662][ C0] ? kmsan_get_metadata+0x116/0x180 [ 166.963662][ C0] __se_sys_sendmsg+0x97/0xb0 [ 166.963662][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 166.963662][ C0] do_syscall_64+0x9f/0x140 [ 166.963662][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.963662][ C0] RIP: 0033:0x443e09 [ 166.963662][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 166.963662][ C0] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.963662][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 166.963662][ C0] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 166.963662][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 166.963662][ C0] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000028409 [ 166.963662][ C0] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 166.963662][ C0] [ 166.963662][ C0] Uninit was stored to memory at: [ 166.963662][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 166.963662][ C0] __msan_chain_origin+0x54/0xa0 [ 166.963662][ C0] iptunnel_xmit+0xbd6/0xf20 [ 166.963662][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 166.963662][ C0] geneve_xmit+0x2139/0x3c40 [ 166.963662][ C0] xmit_one+0x2b6/0x760 [ 166.963662][ C0] __dev_queue_xmit+0x3432/0x4600 [ 166.963662][ C0] dev_queue_xmit+0x4b/0x60 [ 166.963662][ C0] packet_sendmsg+0x86ee/0x99d0 [ 166.963662][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 166.963662][ C0] __sys_sendmsg+0x714/0x830 [ 166.963662][ C0] __se_sys_sendmsg+0x97/0xb0 [ 166.963662][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 166.963662][ C0] do_syscall_64+0x9f/0x140 [ 166.963662][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.963662][ C0] [ 166.963662][ C0] Uninit was created at: [ 166.963662][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 166.963662][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 166.963662][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 166.963662][ C0] __alloc_skb+0x4dd/0xe90 [ 166.963662][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 166.963662][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 166.963662][ C0] packet_sendmsg+0x6a12/0x99d0 [ 166.963662][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 166.963662][ C0] __sys_sendmsg+0x714/0x830 [ 166.963662][ C0] __se_sys_sendmsg+0x97/0xb0 [ 166.963662][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 166.963662][ C0] do_syscall_64+0x9f/0x140 [ 166.963662][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.963662][ C0] ===================================================== [ 167.442967][ C0] ===================================================== [ 167.449905][ C0] BUG: KMSAN: uninit-value in ip_rcv_core+0x1068/0x1480 [ 167.452909][ C0] CPU: 0 PID: 8442 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 167.452909][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.452909][ C0] Call Trace: [ 167.452909][ C0] [ 167.452909][ C0] dump_stack+0x24c/0x2e0 [ 167.452909][ C0] kmsan_report+0xfb/0x1e0 [ 167.452909][ C0] __msan_warning+0x5c/0xa0 [ 167.452909][ C0] ip_rcv_core+0x1068/0x1480 [ 167.452909][ C0] ip_rcv+0xc7/0x820 [ 167.452909][ C0] ? kmsan_get_metadata+0x116/0x180 [ 167.452909][ C0] __netif_receive_skb+0x1ec/0x640 [ 167.452909][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 167.452909][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 167.452909][ C0] process_backlog+0x517/0xbd0 [ 167.452909][ C0] ? rps_trigger_softirq+0x4d0/0x4d0 [ 167.452909][ C0] __napi_poll+0x13e/0xca0 [ 167.452909][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 167.452909][ C0] net_rx_action+0x726/0x14a0 [ 167.452909][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 167.452909][ C0] ? net_tx_action+0xd30/0xd30 [ 167.452909][ C0] __do_softirq+0x1b9/0x715 [ 167.452909][ C0] ? idle_cpu+0x9a/0x1d0 [ 167.452909][ C0] ? __irq_exit_rcu+0x83/0x280 [ 167.452909][ C0] do_softirq+0x123/0x1c0 [ 167.452909][ C0] [ 167.452909][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 167.452909][ C0] local_bh_enable+0x36/0x40 [ 167.452909][ C0] __dev_queue_xmit+0x3b4a/0x4600 [ 167.452909][ C0] dev_queue_xmit+0x4b/0x60 [ 167.452909][ C0] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 167.452909][ C0] packet_sendmsg+0x86ee/0x99d0 [ 167.452909][ C0] ? kmsan_get_metadata+0x116/0x180 [ 167.452909][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 167.452909][ C0] ? process_slab+0x13a8/0x1b70 [ 167.452909][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 167.452909][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 167.452909][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 167.452909][ C0] ? packet_getsockopt+0x1120/0x1120 [ 167.452909][ C0] __sys_sendmsg+0x714/0x830 [ 167.452909][ C0] ? __msan_instrument_asm_store+0x107/0x130 [ 167.452909][ C0] ? up_read+0x40/0x2b0 [ 167.452909][ C0] ? kmsan_get_metadata+0x116/0x180 [ 167.452909][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 167.452909][ C0] ? kmsan_get_metadata+0x116/0x180 [ 167.452909][ C0] __se_sys_sendmsg+0x97/0xb0 [ 167.452909][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 167.452909][ C0] do_syscall_64+0x9f/0x140 [ 167.452909][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 167.452909][ C0] RIP: 0033:0x443e09 [ 167.452909][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 167.452909][ C0] RSP: 002b:00007fff79ed7fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.452909][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443e09 [ 167.452909][ C0] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003 [ 167.452909][ C0] RBP: 0000000000000000 R08: 0000000000f0b5ff R09: 0000000000f0b5ff [ 167.452909][ C0] R10: 00007fff79ed7a30 R11: 0000000000000246 R12: 0000000000028409 [ 167.452909][ C0] R13: 00007fff79ed7fe0 R14: 00007fff79ed7fd0 R15: 00007fff79ed7fc4 [ 167.452909][ C0] [ 167.452909][ C0] Uninit was stored to memory at: [ 167.452909][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 167.452909][ C0] __msan_chain_origin+0x54/0xa0 [ 167.452909][ C0] __ip_local_out+0x479/0x840 [ 167.452909][ C0] ip_local_out+0xa1/0x1e0 [ 167.452909][ C0] iptunnel_xmit+0x931/0xf20 [ 167.452909][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 167.452909][ C0] geneve_xmit+0x2139/0x3c40 [ 167.452909][ C0] xmit_one+0x2b6/0x760 [ 167.452909][ C0] __dev_queue_xmit+0x3432/0x4600 [ 167.452909][ C0] dev_queue_xmit+0x4b/0x60 [ 167.452909][ C0] packet_sendmsg+0x86ee/0x99d0 [ 167.452909][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 167.452909][ C0] __sys_sendmsg+0x714/0x830 [ 167.452909][ C0] __se_sys_sendmsg+0x97/0xb0 [ 167.452909][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 167.452909][ C0] do_syscall_64+0x9f/0x140 [ 167.452909][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 167.452909][ C0] [ 167.452909][ C0] Uninit was stored to memory at: [ 167.452909][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 167.452909][ C0] __msan_chain_origin+0x54/0xa0 [ 167.452909][ C0] iptunnel_xmit+0xbd6/0xf20 [ 167.452909][ C0] udp_tunnel_xmit_skb+0x526/0x640 [ 167.452909][ C0] geneve_xmit+0x2139/0x3c40 [ 167.452909][ C0] xmit_one+0x2b6/0x760 [ 167.452909][ C0] __dev_queue_xmit+0x3432/0x4600 [ 167.452909][ C0] dev_queue_xmit+0x4b/0x60 [ 167.452909][ C0] packet_sendmsg+0x86ee/0x99d0 [ 167.452909][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 167.452909][ C0] __sys_sendmsg+0x714/0x830 [ 167.452909][ C0] __se_sys_sendmsg+0x97/0xb0 [ 167.452909][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 167.452909][ C0] do_syscall_64+0x9f/0x140 [ 167.452909][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 167.452909][ C0] [ 167.452909][ C0] Uninit was created at: [ 167.452909][ C0] kmsan_internal_poison_shadow+0x5c/0xf0 [ 167.452909][ C0] kmsan_slab_alloc+0x8e/0xe0 [ 167.452909][ C0] __kmalloc_node_track_caller+0xa4f/0x1470 [ 167.452909][ C0] __alloc_skb+0x4dd/0xe90 [ 167.452909][ C0] alloc_skb_with_frags+0x1f3/0xc10 [ 167.452909][ C0] sock_alloc_send_pskb+0xdc1/0xf90 [ 167.452909][ C0] packet_sendmsg+0x6a12/0x99d0 [ 167.452909][ C0] ____sys_sendmsg+0xcfc/0x12f0 [ 167.452909][ C0] __sys_sendmsg+0x714/0x830 [ 167.452909][ C0] __se_sys_sendmsg+0x97/0xb0 [ 167.452909][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 167.452909][ C0] do_syscall_64+0x9f/0x140 [ 167.452909][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae executing program [ 167.452909][ C0] ===================================================== [ 168.074055][ C1] ===================================================== [ 168.077942][ C1] BUG: KMSAN: uninit-value in ip_rcv_core+0xf4c/0x1480 [ 168.077942][ C1] CPU: 1 PID: 8443 Comm: syz-executor977 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 168.077942][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.077942][ C1] Call Trace: [ 168.077942][ C1] [ 168.077942][ C1] dump_stack+0x24c/0x2e0 [ 168.077942][ C1] kmsan_report+0xfb/0x1e0 [ 168.077942][ C1] __msan_warning+0x5c/0xa0 [ 168.077942][ C1] ip_rcv_core+0xf4c/0x1480 [ 168.077942][ C1] ip_rcv+0xc7/0x820 [ 168.077942][ C1] ? kmsan_get_metadata+0x116/0x180 [ 168.077942][ C1] __netif_receive_skb+0x1ec/0x640 [ 168.077942][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 168.077942][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 168.077942][ C1] process_backlog+0x517/0xbd0 [ 168.077942][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 168.077942][ C1] __napi_poll+0x13e/0xca0 [ 168.077942][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 168.077942][ C1] net_rx_action+0x726/0x14a0 [ 168.077942][ C1] ? net_tx_action+0xd30/0xd30 [ 168.077942][ C1] __do_softirq+0x1b9/0x715 [ 168.077942][ C1] ? idle_cpu+0x9a/0x1d0 [ 168.077942][ C1] ? __irq_exit_rcu+0x83/0x280 [ 168.077942][ C1] do_softirq+0x123/0x1c0 [ 168.077942][ C1] [ 168.077942][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 168.077942][ C1] local_bh_enable+0x36/0x40 [ 168.077942][ C1] __dev_queue_xmit+0x3b4a/0x4600 [ 168.077942][ C1] dev_queue_xmit+0x4b/0x60 [ 168.077942][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 168.077942][ C1] packet_sendmsg+0x86ee/0x99d0 [ 168.077942][ C1] ? kmsan_get_metadata+0x116/0x180 [ 168.077942][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 168.077942][ C1] ? process_slab+0x13a8/0x1b70 [ 168.077942][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 168.077942][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 168.077942][ C1] ____sys_sendmsg+0xcfc/0x12f0 [ 168.077942][ C1] ? packet_getsockopt+0x1120/0x1120 [ 168.077942][ C1] __sys_sendmsg+0x714/0x830 [ 168.077942][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 168.077942][ C1] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 168.077942][ C1] ? __msan_instrument_asm_store+0x107/0x130 [ 168.077942][ C1] ? kmsan_get_metadata+0x116/0x180 [ 168.077942][ C1] __se_sys_sendmsg+0x97/0xb0 [ 168.077942][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 168.077942][ C1] do_syscall_64+0x9f/0x140