===================================================== BUG: KMSAN: uninit-value in update_stack_state+0x974/0xb40 arch/x86/kernel/unwind_frame.c:238 CPU: 0 PID: 4880 Comm: systemd-udevd Not tainted 5.8.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1df/0x240 lib/dump_stack.c:118 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215 update_stack_state+0x974/0xb40 arch/x86/kernel/unwind_frame.c:238 unwind_next_frame+0x8c6/0xed0 arch/x86/kernel/unwind_frame.c:305 arch_stack_walk+0x33e/0x3e0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x117/0x1a0 kernel/stacktrace.c:123 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:144 [inline] kmsan_internal_chain_origin+0xad/0x130 mm/kmsan/kmsan.c:310 kmsan_memcpy_memmove_metadata+0x272/0x2e0 mm/kmsan/kmsan.c:247 kmsan_memcpy_metadata+0xb/0x10 mm/kmsan/kmsan.c:267 __msan_memcpy+0x43/0x50 mm/kmsan/kmsan_instr.c:116 pskb_expand_head+0x38b/0x1b00 net/core/skbuff.c:1636 skb_prepare_for_shift net/core/skbuff.c:3277 [inline] skb_shift+0xc74/0x2730 net/core/skbuff.c:3350 tcp_skb_shift net/ipv4/tcp_input.c:1392 [inline] tcp_shift_skb_data net/ipv4/tcp_input.c:1500 [inline] tcp_sacktag_walk+0x2193/0x2af0 net/ipv4/tcp_input.c:1565 tcp_sacktag_write_queue+0x25a9/0x42b0 net/ipv4/tcp_input.c:1830 tcp_ack+0x2497/0x99d0 net/ipv4/tcp_input.c:3655 tcp_rcv_established+0xef9/0x3280 net/ipv4/tcp_input.c:5744 tcp_v4_do_rcv+0x6ce/0xd70 net/ipv4/tcp_ipv4.c:1641 tcp_v4_rcv+0x4c77/0x5040 net/ipv4/tcp_ipv4.c:2023 ip_protocol_deliver_rcu+0x4b7/0xbc0 net/ipv4/ip_input.c:204 ip_local_deliver_finish net/ipv4/ip_input.c:231 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] ip_local_deliver+0x62a/0x7c0 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:449 [inline] ip_rcv_finish net/ipv4/ip_input.c:428 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] ip_rcv+0x6cf/0x750 net/ipv4/ip_input.c:539 __netif_receive_skb_one_core net/core/dev.c:5281 [inline] __netif_receive_skb net/core/dev.c:5395 [inline] process_backlog+0xfb5/0x14e0 net/core/dev.c:6239 napi_poll net/core/dev.c:6684 [inline] net_rx_action+0x746/0x1aa0 net/core/dev.c:6752 __do_softirq+0x311/0x83d kernel/softirq.c:293 asm_call_on_stack+0x12/0x20 arch/x86/entry/entry_64.S:711 __run_on_irqstack arch/x86/include/asm/irq_stack.h:23 [inline] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:50 [inline] do_softirq_own_stack+0x7c/0xa0 arch/x86/kernel/irq_64.c:77 invoke_softirq kernel/softirq.c:390 [inline] __irq_exit_rcu+0x226/0x270 kernel/softirq.c:420 irq_exit_rcu+0xe/0x10 kernel/softirq.c:432 sysvec_call_function_single+0x107/0x130 arch/x86/kernel/smp.c:243 asm_sysvec_call_function_single+0x12/0x20 arch/x86/include/asm/idtentry.h:601 RIP: 0010:finish_lock_switch+0x2b/0x40 kernel/sched/core.c:3198 Code: 48 89 e5 53 48 89 fb e8 03 d2 a6 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 12 48 89 df e8 8d cb a6 00 c6 00 00 c6 03 00 fb 5b <5d> c3 e8 3e d1 a6 00 eb e7 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 RSP: 0018:ffff9becc0d5fd20 EFLAGS: 00000286 RAX: ffff9a975fef41c0 RBX: ffff9a965ae78000 RCX: 0000000000a9f7a9 RDX: ffff9a975fe551c0 RSI: 00000000000004a0 RDI: ffff9a966fc941c0 RBP: ffff9becc0d5fd20 R08: ffffebac8000000f R09: ffff9a966fffb000 R10: ffff9a965a3e7000 R11: 0000000000000000 R12: ffff9a965bbf8000 R13: ffff9a965ae789d8 R14: ffff9a965bbf8000 R15: ffff9a966fc941c0 finish_task_switch+0xd4/0x2f0 kernel/sched/core.c:3303 context_switch kernel/sched/core.c:3467 [inline] __schedule+0x752/0x840 kernel/sched/core.c:4195 schedule+0x260/0x330 kernel/sched/core.c:4270 exit_to_usermode_loop arch/x86/entry/common.c:226 [inline] __prepare_exit_to_usermode+0x1eb/0x4d0 arch/x86/entry/common.c:270 __syscall_return_slowpath+0x89/0x5b0 arch/x86/entry/common.c:353 do_syscall_64+0xd6/0x150 arch/x86/entry/common.c:395 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f6fe4706335 Code: Bad RIP value. RSP: 002b:00007fffc8b208e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 RAX: 0000000000000000 RBX: 000055dfd0fd0070 RCX: 00007f6fe4706335 RDX: 00007fffc8b20920 RSI: 00007fffc8b20920 RDI: 000055dfd0fcf070 RBP: 00007fffc8b209e0 R08: 00007f6fe49c5318 R09: 0000000000001010 R10: 0000000000000020 R11: 0000000000000246 R12: 000055dfd0fcf070 R13: 000055dfd0fcf08a R14: 000055dfd0f90405 R15: 000055dfd0f9040a Local variable ----nd@filename_lookup created at: filename_lookup+0xc5/0xbb0 fs/namei.c:2358 filename_lookup+0xc5/0xbb0 fs/namei.c:2358 =====================================================